last executing test programs: 11m46.860661675s ago: executing program 0 (id=2227): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video10/dev_debug\x00', 0x40000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) mq_open$auto(0x0, 0x83, 0x9, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, 0x0, 0x0, 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) semtimedop$auto(0x7, &(0x7f0000000380)={0xfffd, 0x7, 0xb77}, 0x3, &(0x7f0000000280)={0x7, 0x80000004}) semctl$auto_IPC_STAT(0x2, 0x101, 0x2, 0x6e43) ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x450440, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x446, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) 11m45.929085281s ago: executing program 0 (id=2228): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x161342, 0x100) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121902, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x10001, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0xffffffffffffffff, 0x62, 0x8000201f, 0x7, 0x6d3d, 0x9, 0x2, 0x8000006]}, 0x0) recvfrom$auto(r0, &(0x7f0000000180)="7c85620f4a263773c8393b9112e834be2372fe4a054f27a66f40f019f571de850e8fdeed6313e42b8b368bae70d418481bac6b420be85d13b6244295e474775d550f281e2febc4a9a6086a43af1bf2fc77c810526c10e9c6e8a6f89c46486ef24c6b9021de5c54", 0x3ff, 0x73, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, &(0x7f0000000240)=0xd0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r2, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x8924, 0x0) unshare$auto(0x40000080) 11m44.890287143s ago: executing program 0 (id=2231): mmap$auto(0x0, 0xc00005, 0xdf, 0x9b72, 0x2, 0x8004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x804) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) bind$auto(0x3, 0x0, 0x6a) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@ax25={0x3, @default, 0x1}, 0x8) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x200003, 0x2, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x24, 0x4008) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f0000000040)=""/78, 0x4e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r2}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) close_range$auto(0x2, 0x8, 0x0) futex_wait$auto(0x0, 0x7f, 0x7f, 0xa, 0x0, 0x7) 11m43.930731805s ago: executing program 0 (id=2236): bpf$auto(0x0, &(0x7f0000000200)=@task_fd_query={0x2, 0x4, 0xffff, 0x2, 0x2000000008, 0x8, 0xffffffffffffffff, 0x4000000002, 0x3}, 0x6f3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) ioctl$auto(r1, 0x900064b8, r1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) setreuid$auto(0x3, 0x7) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendfile$auto(r2, r2, 0x0, 0x9) 11m43.617254068s ago: executing program 0 (id=2237): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x8, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 11m42.807559734s ago: executing program 0 (id=2239): bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/cpu/cpu0/topology/core_cpus_list\x00', 0x141400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0xfdef) 11m42.21273157s ago: executing program 32 (id=2239): bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/cpu/cpu0/topology/core_cpus_list\x00', 0x141400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) read$auto(0x4, 0x0, 0xfdef) 2m39.113502318s ago: executing program 4 (id=3572): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r4, r4, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 2m37.472056815s ago: executing program 4 (id=3578): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(r0, 0x1) newfstatat$auto(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x5, 0x6, 0xa9, 0x4, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x0, 0x4, 0x8, 0xbc, 0x1, 0x4, 0x0, 0x53}, 0x1) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000540), 0x40102, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0x3, 0xeb1, 0x3ff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2m37.174876083s ago: executing program 4 (id=3579): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x8, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 2m35.609395577s ago: executing program 4 (id=3589): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r5, 0x0, 0x594c, 0x9fffffffd) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/uapsd_max_sp_len\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r2) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r9, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400e003d38d7241a621a8", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r10 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r10, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r11 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) 2m34.199250189s ago: executing program 4 (id=3584): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x8, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) pselect6$auto(0x9, &(0x7f0000000240)={[0x1, 0x4, 0x40, 0xffffffff, 0x80, 0x0, 0x7, 0x4, 0x8000000000000000, 0x8, 0x5, 0x3, 0x856, 0x8001, 0x80000001, 0xfff]}, &(0x7f0000000580)={[0x4, 0xfffffffffffffae7, 0x2, 0x0, 0x8, 0x6, 0x1c, 0x1, 0x4, 0x7, 0x7, 0x3, 0xf, 0x9, 0x7fff, 0x6]}, &(0x7f0000000600)={[0x1, 0xffffffffffffff5c, 0x200, 0x3, 0x3, 0x1, 0x9, 0x2, 0x1, 0x2, 0x2, 0x4, 0x9, 0x0, 0x7, 0x6b1b]}, &(0x7f0000000180)={0x81, 0x9}, &(0x7f0000000680)="70a2a9a26aec37cdfdbeb3892d55fc11cdbdc7f0f3bc5eaab351477f7b8aefa15b02e4331c5f044d79c5c8e330b189b77f1b5deb5986e152e98b2d22f5da058be10e936aff852e14753e52e5e5313b44234a64bf348e1ea0d29380a33c717570381dbf20e643026737953272e71e46103322b610aa07532e73f09e6aee7cae0c03fab2d3b1f46e28831ccb71462c00da5f1096340632a99b7313e14408a37509e8af32a84f1ec12cbc864f2b802921054613467db4e40bd73d65cace61fe58d71191ebc92d93f9f4") select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 2m33.488985076s ago: executing program 2 (id=3586): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@generic="1a327b07757bb36f"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x10001}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7ff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb97e}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2m33.125034793s ago: executing program 2 (id=3587): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0x23, 0x20000008051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b41, 0x7) 2m32.148464603s ago: executing program 4 (id=3590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x150, 0x0, 0x4002000}, 0x40010) 2m31.414660863s ago: executing program 2 (id=3599): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) gettid() r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 2m30.736393101s ago: executing program 1 (id=3592): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x161342, 0x100) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121902, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x10001, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0xffffffffffffffff, 0x62, 0x8000201f, 0x7, 0x6d3d, 0x9, 0x2, 0x8000006]}, 0x0) recvfrom$auto(r0, &(0x7f0000000180)="7c85620f4a263773c8393b9112e834be2372fe4a054f27a66f40f019f571de850e8fdeed6313e42b8b368bae70d418481bac6b420be85d13b6244295e474775d550f281e2febc4a9a6086a43af1bf2fc77c810526c10e9c6e8a6f89c46486ef24c6b9021de5c54", 0x3ff, 0x73, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, &(0x7f0000000240)=0xd0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r2, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x8924, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m29.220925533s ago: executing program 1 (id=3594): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0x23, 0x20000008051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b41, 0x7) 2m29.220762854s ago: executing program 2 (id=3595): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 2m28.241292524s ago: executing program 2 (id=3596): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x161342, 0x100) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121902, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r1, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) (fail_nth: 2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m28.039922137s ago: executing program 1 (id=3597): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x1f, 0x4, 0x80000000) (async) socket(0x1f, 0x4, 0x80000000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3fe, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000004c0)='\x00^z\x19\xadM1PC\x0e\x90\xd6W\xbeL\xf5\x8f\xa9\xc7@>\xd8y\\7s1z\x8c\xa6\xce\xa6\a\xbe\x82\x8f\xe8\xff\xdc\xb1d9A]\x92\xa3|\r\xcd\f\x85\xb6\xc6e3\xe2\xb3\x8e@\x89\xc0\xe2c\xd9\xa4\xef\x1a\xa8\x8b\xe4f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x101, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x10001, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0xffffffffffffffff, 0x62, 0x8000201f, 0x7, 0x6d3d, 0x9, 0x2, 0x8000006]}, 0x0) recvfrom$auto(r0, &(0x7f0000000180)="7c85620f4a263773c8393b9112e834be2372fe4a054f27a66f40f019f571de850e8fdeed6313e42b8b368bae70d418481bac6b420be85d13b6244295e474775d550f281e2febc4a9a6086a43af1bf2fc77c810526c10e9c6e8a6f89c46486ef24c6b9021de5c54", 0x3ff, 0x73, &(0x7f0000000200)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, &(0x7f0000000240)=0xd0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r2, &(0x7f0000000280)=""/49, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0xa200, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x8924, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m24.889383221s ago: executing program 1 (id=3604): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@generic="1a327b07757bb36f"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x10001}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7ff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb97e}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2m17.092246893s ago: executing program 33 (id=3590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x150, 0x0, 0x4002000}, 0x40010) 2m11.581102037s ago: executing program 34 (id=3601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0xf5, 0x0, 0x4002000}, 0x40010) 2m9.74075728s ago: executing program 35 (id=3604): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@generic="1a327b07757bb36f"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7fff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x10001}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7ff}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb97e}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 14.150498326s ago: executing program 7 (id=3905): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 12.93245142s ago: executing program 7 (id=3906): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 11.407955664s ago: executing program 7 (id=3909): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x18, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000195}, 0x40084) r2 = socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r2, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r6 = gettid() r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000440)={{@inferred=r5, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r6}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) 8.084597793s ago: executing program 6 (id=3917): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 6.912397727s ago: executing program 6 (id=3918): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zram0\x00', 0x40, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0x23, 0x20000008051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_expire_count\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/64, 0x40) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r3, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r3}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, r3, 0x8000) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b41, 0x7) 6.892471757s ago: executing program 7 (id=3926): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) open(0x0, 0x161342, 0x100) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r2 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r2, 0xd}, 0x92) r4 = bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) open(0x0, 0x261c2, 0x84) bpf$auto(0x4, &(0x7f00000001c0)=@link_update={r0, @new_map_fd=r3, 0x3, @old_prog_fd=r4}, 0xc) socket(0xb497b5eebe3a9d0, 0xa, 0xd7) mq_notify$auto(0xffffffffffffffff, &(0x7f0000001940)={@sival_ptr=&(0x7f0000001740), @raw=0x1, 0x2, @_sigev_thread={0x0, 0x0}}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121902, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1f7, 0x100000000000007, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x401, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x60800, 0x0) 6.826923932s ago: executing program 3 (id=3919): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 5.640112844s ago: executing program 3 (id=3920): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0x23, 0x20000008051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r1 = socket(0x22, 0x1, 0x100) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r2}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r4, 0x0, 0x801) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) kexec_load$auto(0x1725, 0xb7, &(0x7f0000000040)={@buf=&(0x7f0000000180)="637946c84a1262d721f6235305c01bb1bb444ac33adf7d2d3eb93694f2fdbf93992c7bb377f9441016a6e2aec430ec5e474124f09e78b307585924bd458af13945109a43a5d870786e1cb9d2779627d7836ff78eec4ab9f7bc140c78b058d62265bffe954f3eb2165215ef11945e6ccd5ec0fc270c4f61512436f03f8f503e28eae8c3bd06d619977cde24bc0ed6495041cdc4836fb80692379acb4b584369e737577c6802fff8637c48fc74243a3ee197c50a50dff4f6c9d50bde67f0f4849749", 0x1, 0x6, 0xffff}, 0x9) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000002c0), r1) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x101}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0xfffff8e1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b41, 0x7) 5.635963346s ago: executing program 7 (id=3930): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 5.619451899s ago: executing program 6 (id=3921): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) ioctl$auto_TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=0xfffffff7) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) read$auto(0x3, 0x0, 0x400000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.541275263s ago: executing program 5 (id=3922): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/softnet_stat\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00', 0x100000001, 0x100) 5.309969588s ago: executing program 5 (id=3923): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/140, 0x8c) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0x23, 0x20000008051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) keyctl$auto_KEYCTL_SETPERM(0x5, 0x2, 0x1, 0x401, 0xf079) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) socket(0x22, 0x1, 0x100) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r3 = ioctl$auto_SW_SYNC_GET_DEADLINE(r2, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r2}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) socket(0x2, 0x801, 0x7) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) sendfile$auto(r3, r6, &(0x7f0000000180)=0xff, 0x1) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84\xf4\xd0\x1a\xf3\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\a\x00\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r5, 0x0, 0x801) mmap$auto(0x7, 0x20009, 0x5, 0xffffffffffffffff, r5, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xdc040, 0x0) ioctl$auto(r7, 0x4b41, 0x7) 4.540242296s ago: executing program 6 (id=3924): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 4.110705004s ago: executing program 5 (id=3925): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) mmap$auto(0x0, 0x4000002, 0x23, 0x20000008051, 0x3, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x4}, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) mmap$auto(0xfffffffffffffffd, 0x5, 0x598f4b3b, 0x13, 0x401, 0x8000) socket(0x2c, 0x5, 0xfffffffc) umount2$auto(0x0, 0x3) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) close_range$auto(0x2, 0x8, 0x0) 4.110054991s ago: executing program 3 (id=3927): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 3.095497165s ago: executing program 6 (id=3929): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 2.97555521s ago: executing program 5 (id=3931): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) gettid() r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r3, 0x0, 0x5, 0x9a6) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 2.731396359s ago: executing program 3 (id=3932): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2a, 0x1, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r4 = gettid() r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r4}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC0D0p\x00', 0x109442, 0x0) 2.186650888s ago: executing program 7 (id=3933): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x100000001, 0x5, 0x1, 0x14, r2, 0x401) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x20000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x401, 0x948c, 0x3, 0x95f4da0a, 0xfbffffffffffffff, 0x3, 0x62, 0x80000001, 0x8, 0x80000000006d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00'}) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_sigsys={&(0x7f0000000240)="74013e7ca02677eea019c4850f45a3f6f2d1a099d37862849c79347ff37b4138605648e9e0a65c75af000f506ba8cc1f8c28731cb32d159e54980727b319eefa33a04cdf2de201fdb803fa848907a27186f1a75e858870d5e8e305af43804e3ce1314c5bc1dca4c317af31c8c19d2f9975a1aa48c25a332316cb81ea60", 0xd, 0xe55}}}, 0x4, &(0x7f0000000340)={{0x8, 0x400000000005}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x8000000002, 0xe5, 0x9, 0x4e6033bf, 0x6, 0x73a87305, 0x8}) gettid() r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x5, 0x9a6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7f, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @raw=0x8}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a2ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a77fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) 1.310614167s ago: executing program 3 (id=3934): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x28, 0x3, 0x40) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0x4, 0x696b}, 0xed7138c}, 0x2, 0x9) r2 = socket(0xa, 0x5, 0x84) sendto$auto(r2, 0x0, 0x501, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={"2292f65c000800000025387222253ea2f80444a4e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) 713.773838ms ago: executing program 6 (id=3935): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x38, 0x100000001, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffff8, 0x5, 0xffffffff80000000, 0xffff, 0x61, 0x103}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000001c0)="ff") ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 415.523637ms ago: executing program 5 (id=3936): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/softnet_stat\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00', 0x100000001, 0x100) 45.104099ms ago: executing program 5 (id=3937): mprotect$auto(0x200000000000, 0x806121, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00F\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) pselect6$auto(0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)) 0s ago: executing program 3 (id=3938): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000000)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) kernel console output (not intermixed with test programs): ame="features" dev="configfs" ino=90312 res=0 errno=0 [ 1201.324268][T21393] mkiss: ax0: crc mode is auto. [ 1202.638930][T21413] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101 [ 1202.964562][ T5217] ERROR: Out of memory at tomoyo_memory_ok. [ 1203.333104][T21415] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input102 [ 1204.318325][ T6397] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 1205.464319][T21457] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1205.896785][T21462] mkiss: ax0: crc mode is auto. [ 1207.220164][T21473] mkiss: ax0: crc mode is auto. [ 1208.572985][T21499] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.3194: bg 4: bad block bitmap checksum [ 1208.591169][T21499] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 1208.621865][T21499] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1208.621865][T21499] [ 1209.956741][T21521] mkiss: ax0: crc mode is auto. [ 1211.560355][T21541] Invalid ELF header magic: != ELF [ 1212.590119][T21559] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1212.613484][T21559] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1212.613484][T21559] [ 1212.707258][T21559] ubi0: attaching mtd0 [ 1212.712851][T21559] ubi0: scanning is finished [ 1212.728318][T21559] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1212.956488][T21559] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1213.507704][T21569] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1213.523278][T21569] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1213.523278][T21569] [ 1213.895921][T21578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 1214.173184][T21578] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3207'. [ 1214.255615][T21589] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1216.000056][ T31] audit: type=1800 audit(4294969465.270:19): pid=21603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3211" name="features" dev="configfs" ino=90903 res=0 errno=0 [ 1216.588700][T21608] mkiss: ax0: crc mode is auto. [ 1216.910461][T21622] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1216.926487][T21622] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1216.926487][T21622] [ 1217.006428][T21622] ubi0: attaching mtd0 [ 1217.019427][T21622] ubi0: scanning is finished [ 1217.024927][T21622] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1217.125949][T21626] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1217.164264][T21626] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1217.164264][T21626] [ 1217.187911][T21622] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1218.832089][T21648] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1218.844652][T21648] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1218.844652][T21648] [ 1218.924708][T21648] ubi0: attaching mtd0 [ 1218.950809][T21648] ubi0: scanning is finished [ 1218.955505][T21648] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1219.088538][T21653] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1219.191214][T21648] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1219.532634][T21658] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1219.566051][T21658] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1219.566051][T21658] [ 1221.030062][T21676] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1221.087429][T21676] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1221.087429][T21676] [ 1221.218325][T21676] ubi0: attaching mtd0 [ 1221.224376][T21676] ubi0: scanning is finished [ 1221.230067][T21676] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1221.390038][T21676] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1221.935031][T21684] ERROR: Out of memory at tomoyo_memory_ok. [ 1222.037597][T21689] mkiss: ax0: crc mode is auto. [ 1222.050318][T21684] FAULT_INJECTION: forcing a failure. [ 1222.050318][T21684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.071338][T21684] CPU: 0 UID: 0 PID: 21684 Comm: syz.4.3227 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1222.071396][T21684] Tainted: [U]=USER [ 1222.071409][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1222.071428][T21684] Call Trace: [ 1222.071441][T21684] [ 1222.071454][T21684] dump_stack_lvl+0x16c/0x1f0 [ 1222.071503][T21684] should_fail_ex+0x512/0x640 [ 1222.071564][T21684] _copy_from_user+0x2e/0xd0 [ 1222.071617][T21684] get_timespec64+0x8b/0x1b0 [ 1222.071658][T21684] ? __pfx_get_timespec64+0x10/0x10 [ 1222.071709][T21684] __x64_sys_rt_sigtimedwait+0x1c5/0x2f0 [ 1222.071759][T21684] ? __pfx___x64_sys_rt_sigtimedwait+0x10/0x10 [ 1222.071802][T21684] ? __x64_sys_futex+0x1e0/0x4c0 [ 1222.071868][T21684] do_syscall_64+0xcd/0x490 [ 1222.071917][T21684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.071952][T21684] RIP: 0033:0x7f8e9918ebe9 [ 1222.071978][T21684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.072013][T21684] RSP: 002b:00007f8e99f23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 1222.072045][T21684] RAX: ffffffffffffffda RBX: 00007f8e993b5fa0 RCX: 00007f8e9918ebe9 [ 1222.072073][T21684] RDX: 0000200000001600 RSI: 0000200000001580 RDI: 0000200000001540 [ 1222.072094][T21684] RBP: 00007f8e99211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1222.072114][T21684] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1222.072134][T21684] R13: 00007f8e993b6038 R14: 00007f8e993b5fa0 R15: 00007ffd47681708 [ 1222.072174][T21684] [ 1222.760088][T21698] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1222.772647][T21698] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1222.772647][T21698] [ 1222.909565][T21698] ubi0: attaching mtd0 [ 1223.138420][T21698] ubi0: scanning is finished [ 1223.145859][T21703] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1223.206363][T21698] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1223.387873][T21698] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1223.526145][T21707] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1223.540952][T21707] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1223.540952][T21707] [ 1224.832459][T21733] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1224.870779][T21733] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1224.870779][T21733] [ 1225.078260][T21733] ubi0: attaching mtd0 [ 1225.138717][T21733] ubi0: scanning is finished [ 1225.143868][T21733] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1225.690139][T21733] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1226.113392][T21753] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1226.223176][T21753] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1226.223176][T21753] [ 1228.593721][T21798] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1228.606431][T21798] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1228.606431][T21798] [ 1228.725422][T21798] ubi0: attaching mtd0 [ 1228.741223][T21798] ubi0: scanning is finished [ 1228.746732][T21798] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1229.019947][T21809] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1229.032882][T21809] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1229.032882][T21809] [ 1229.065202][T21798] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1229.981223][T21820] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 1230.038168][T21823] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 1231.004083][T21839] mkiss: ax0: crc mode is auto. [ 1233.741902][T21870] random: crng reseeded on system resumption [ 1234.051620][T21876] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1234.064434][T21876] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1234.064434][T21876] [ 1236.234636][T21905] ERROR: Out of memory at tomoyo_memory_ok. [ 1236.387051][T21905] FAULT_INJECTION: forcing a failure. [ 1236.387051][T21905] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1236.462429][T21906] mkiss: ax0: crc mode is auto. [ 1236.469826][T21905] CPU: 0 UID: 0 PID: 21905 Comm: syz.2.3273 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1236.469868][T21905] Tainted: [U]=USER [ 1236.469876][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1236.469891][T21905] Call Trace: [ 1236.469899][T21905] [ 1236.469909][T21905] dump_stack_lvl+0x16c/0x1f0 [ 1236.469978][T21905] should_fail_ex+0x512/0x640 [ 1236.470029][T21905] get_futex_key+0x1d0/0x1560 [ 1236.470132][T21905] ? __pfx_get_futex_key+0x10/0x10 [ 1236.470185][T21905] ? lock_acquire+0x179/0x350 [ 1236.470302][T21905] futex_wake+0xea/0x530 [ 1236.470342][T21905] ? rcu_is_watching+0x12/0xc0 [ 1236.470370][T21905] ? __pfx_futex_wake+0x10/0x10 [ 1236.470409][T21905] ? trace_sched_exit_tp+0xd1/0x120 [ 1236.470448][T21905] ? __schedule+0x11a3/0x5de0 [ 1236.470479][T21905] do_futex+0x1e3/0x350 [ 1236.470511][T21905] ? __pfx_do_futex+0x10/0x10 [ 1236.470550][T21905] __x64_sys_futex+0x1e0/0x4c0 [ 1236.470585][T21905] ? __pfx___x64_sys_futex+0x10/0x10 [ 1236.470617][T21905] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1236.470662][T21905] do_syscall_64+0xcd/0x490 [ 1236.470695][T21905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.470720][T21905] RIP: 0033:0x7f7e9e58ebe9 [ 1236.470739][T21905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.470763][T21905] RSP: 002b:00007f7e9f4900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1236.470786][T21905] RAX: ffffffffffffffda RBX: 00007f7e9e7b5fa8 RCX: 00007f7e9e58ebe9 [ 1236.470801][T21905] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e9e7b5fac [ 1236.470817][T21905] RBP: 00007f7e9e7b5fa0 R08: 00007f7e9f491000 R09: 0000000000000000 [ 1236.470832][T21905] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 1236.470846][T21905] R13: 00007f7e9e7b6038 R14: 00007ffd03464770 R15: 00007ffd03464858 [ 1236.470877][T21905] [ 1237.611302][T21922] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1237.644537][T21922] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1237.644537][T21922] [ 1238.276497][T21936] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1238.445855][T21929] mkiss: ax0: crc mode is auto. [ 1241.686451][T21978] mkiss: ax0: crc mode is auto. [ 1242.381700][T21992] mkiss: ax1: crc mode is auto. [ 1242.799036][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065c10c00: rx timeout, send abort [ 1242.830628][ T5214] ERROR: Out of memory at tomoyo_memory_ok. [ 1243.305818][ C0] vcan0: j1939_tp_rxtimer: 0xffff888065c10c00: abort rx timeout. Force session deactivation [ 1243.511931][T22001] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1243.526410][T22001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1243.526410][T22001] [ 1243.573194][T22001] ubi0: attaching mtd0 [ 1243.579444][T22001] ubi0: scanning is finished [ 1243.585094][T22001] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1244.243451][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.249970][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.387092][T22001] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1244.435822][T22005] ubi0: attaching mtd0 [ 1244.468138][T22005] ubi0: scanning is finished [ 1244.478580][T22005] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1244.840951][T22009] ptrace attach of "./syz-executor exec"[22015] was attempted by "./syz-executor exec"[22009] [ 1245.031993][T22005] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1246.433437][T22051] mkiss: ax0: crc mode is auto. [ 1247.969346][ T7031] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1247.994549][ T7031] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1247.994549][ T7031] [ 1249.784923][T22105] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3309'. [ 1251.104210][T22123] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1251.116852][T22123] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1251.116852][T22123] [ 1251.143786][T22123] ubi0: attaching mtd0 [ 1251.149542][T22123] ubi0: scanning is finished [ 1251.190056][T22123] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1251.469178][T22123] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1251.483110][T22129] ubi0: attaching mtd0 [ 1251.489969][T22129] ubi0: scanning is finished [ 1251.521590][T22129] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1251.743104][T22129] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1252.798583][T22160] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1252.811473][T22160] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1252.811473][T22160] [ 1255.012881][T22199] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1255.025587][T22199] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1255.025587][T22199] [ 1255.089416][T22199] ubi0: attaching mtd0 [ 1255.097615][T22199] ubi0: scanning is finished [ 1255.102580][T22199] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1255.338369][T22199] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1256.068965][T22215] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1256.100352][T22215] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1256.100352][T22215] [ 1256.245022][T22219] mkiss: ax0: crc mode is auto. [ 1260.489858][T22281] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1261.125567][T22291] mkiss: ax0: crc mode is auto. [ 1261.956346][T22305] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1261.975054][T22305] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1261.975054][T22305] [ 1261.995332][T22305] ubi0: attaching mtd0 [ 1262.023696][T22305] ubi0: scanning is finished [ 1262.059034][T22305] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1262.215990][T22305] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1262.774985][T22314] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1262.788975][T22314] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1262.788975][T22314] [ 1262.935662][T22314] ubi0: attaching mtd0 [ 1262.964127][T22314] ubi0: scanning is finished [ 1262.969123][T22314] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1263.170827][T22314] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1263.769925][T22333] mkiss: ax0: crc mode is auto. [ 1264.547141][T22344] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1265.568674][T22355] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1265.624530][T22358] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 1265.688594][T22355] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1265.688594][T22355] [ 1265.770418][T22355] ubi0: attaching mtd0 [ 1265.802318][T22355] ubi0: scanning is finished [ 1265.825351][T22355] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1266.280827][T22355] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1267.074306][T22378] mkiss: ax0: crc mode is auto. [ 1268.949448][T22409] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1268.962345][T22409] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1268.962345][T22409] [ 1268.996602][T22409] ubi0: attaching mtd0 [ 1269.002156][T22409] ubi0: scanning is finished [ 1269.043838][T22409] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1269.153513][T22409] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1269.962774][T22419] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1271.126535][T22445] FAULT_INJECTION: forcing a failure. [ 1271.126535][T22445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.162437][T22445] CPU: 0 UID: 0 PID: 22445 Comm: syz.4.3368 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1271.162489][T22445] Tainted: [U]=USER [ 1271.162501][T22445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1271.162521][T22445] Call Trace: [ 1271.162532][T22445] [ 1271.162545][T22445] dump_stack_lvl+0x16c/0x1f0 [ 1271.162598][T22445] should_fail_ex+0x512/0x640 [ 1271.162649][T22445] _copy_to_iter+0x29f/0x16f0 [ 1271.162690][T22445] ? __pfx__copy_to_iter+0x10/0x10 [ 1271.162723][T22445] ? __lock_acquire+0xb97/0x1ce0 [ 1271.162779][T22445] signalfd_copyinfo+0x1b4/0x770 [ 1271.162820][T22445] ? __pfx_signalfd_copyinfo+0x10/0x10 [ 1271.162877][T22445] ? rcu_is_watching+0x12/0xc0 [ 1271.162911][T22445] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1271.162953][T22445] signalfd_read_iter+0x371/0x7c0 [ 1271.163004][T22445] ? __pfx_signalfd_read_iter+0x10/0x10 [ 1271.163060][T22445] ? __pfx_default_wake_function+0x10/0x10 [ 1271.163103][T22445] ? bpf_lsm_file_permission+0x9/0x10 [ 1271.163150][T22445] ? security_file_permission+0x71/0x210 [ 1271.163197][T22445] ? rw_verify_area+0xcf/0x6c0 [ 1271.163234][T22445] vfs_read+0x8bf/0xcf0 [ 1271.163280][T22445] ? __pfx_vfs_read+0x10/0x10 [ 1271.163313][T22445] ? find_held_lock+0x2b/0x80 [ 1271.163371][T22445] ksys_read+0x12a/0x250 [ 1271.163409][T22445] ? __pfx_ksys_read+0x10/0x10 [ 1271.163464][T22445] do_syscall_64+0xcd/0x490 [ 1271.163512][T22445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.163547][T22445] RIP: 0033:0x7f8e9918ebe9 [ 1271.163573][T22445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.163608][T22445] RSP: 002b:00007f8e99f23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1271.163639][T22445] RAX: ffffffffffffffda RBX: 00007f8e993b5fa0 RCX: 00007f8e9918ebe9 [ 1271.163660][T22445] RDX: 00000000000000b1 RSI: 0000200000000240 RDI: 0000000000000003 [ 1271.163679][T22445] RBP: 00007f8e99f23090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.163698][T22445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.163716][T22445] R13: 00007f8e993b6038 R14: 00007f8e993b5fa0 R15: 00007ffd47681708 [ 1271.163757][T22445] [ 1271.422530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.134199][T22466] FAULT_INJECTION: forcing a failure. [ 1272.134199][T22466] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.207399][T22466] CPU: 1 UID: 0 PID: 22466 Comm: syz.3.3373 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1272.207459][T22466] Tainted: [U]=USER [ 1272.207471][T22466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1272.207490][T22466] Call Trace: [ 1272.207502][T22466] [ 1272.207515][T22466] dump_stack_lvl+0x16c/0x1f0 [ 1272.207565][T22466] should_fail_ex+0x512/0x640 [ 1272.207611][T22466] ? __kmalloc_noprof+0xbf/0x510 [ 1272.207655][T22466] ? __alloc_workqueue+0xd5c/0x1810 [ 1272.207698][T22466] should_failslab+0xc2/0x120 [ 1272.207743][T22466] __kmalloc_noprof+0xd2/0x510 [ 1272.207790][T22466] ? vsnprintf+0x318/0x1160 [ 1272.207835][T22466] __alloc_workqueue+0xd5c/0x1810 [ 1272.207879][T22466] ? __pfx_vsnprintf+0x10/0x10 [ 1272.207919][T22466] ? lockdep_hardirqs_on+0x7c/0x110 [ 1272.207961][T22466] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1272.208006][T22466] alloc_workqueue_noprof+0xd2/0x200 [ 1272.208054][T22466] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1272.208112][T22466] ? __pfx___debug_object_init+0x10/0x10 [ 1272.208162][T22466] nci_register_device+0x21e/0xb80 [ 1272.208200][T22466] ? __pfx_nci_register_device+0x10/0x10 [ 1272.208244][T22466] ? lockdep_init_map_type+0x5c/0x280 [ 1272.208301][T22466] virtual_ncidev_open+0x141/0x220 [ 1272.208339][T22466] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1272.208382][T22466] misc_open+0x35a/0x420 [ 1272.208418][T22466] ? __pfx_misc_open+0x10/0x10 [ 1272.208454][T22466] chrdev_open+0x231/0x6a0 [ 1272.208499][T22466] ? __pfx_apparmor_file_open+0x10/0x10 [ 1272.208537][T22466] ? __pfx_chrdev_open+0x10/0x10 [ 1272.208585][T22466] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1272.208632][T22466] do_dentry_open+0x97f/0x1530 [ 1272.208674][T22466] ? __pfx_chrdev_open+0x10/0x10 [ 1272.208728][T22466] vfs_open+0x82/0x3f0 [ 1272.208797][T22466] path_openat+0x1de4/0x2cb0 [ 1272.208853][T22466] ? __pfx_path_openat+0x10/0x10 [ 1272.208906][T22466] do_filp_open+0x20b/0x470 [ 1272.208946][T22466] ? __pfx_do_filp_open+0x10/0x10 [ 1272.209015][T22466] ? alloc_fd+0x471/0x7d0 [ 1272.209064][T22466] do_sys_openat2+0x11b/0x1d0 [ 1272.209116][T22466] ? __pfx_do_sys_openat2+0x10/0x10 [ 1272.209166][T22466] ? fput+0x9b/0xd0 [ 1272.209214][T22466] ? __sys_sendmsg+0x18c/0x220 [ 1272.209270][T22466] __x64_sys_openat+0x174/0x210 [ 1272.209324][T22466] ? __pfx___x64_sys_openat+0x10/0x10 [ 1272.209396][T22466] do_syscall_64+0xcd/0x490 [ 1272.209445][T22466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.209479][T22466] RIP: 0033:0x7f010bf8ebe9 [ 1272.209508][T22466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.209543][T22466] RSP: 002b:00007f010cee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1272.209577][T22466] RAX: ffffffffffffffda RBX: 00007f010c1b5fa0 RCX: 00007f010bf8ebe9 [ 1272.209601][T22466] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1272.209624][T22466] RBP: 00007f010c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1272.209646][T22466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.209667][T22466] R13: 00007f010c1b6038 R14: 00007f010c1b5fa0 R15: 00007ffd11f55c38 [ 1272.209712][T22466] [ 1272.529890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.357396][T22544] mkiss: ax0: crc mode is auto. [ 1277.748750][T22548] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1277.773509][T22548] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1277.773509][T22548] [ 1278.516254][T22559] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1278.588204][T22559] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1278.588204][T22559] [ 1278.631151][T22559] ubi0: attaching mtd0 [ 1278.716230][T22559] ubi0: scanning is finished [ 1278.729674][T22559] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1278.915836][T22566] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1278.929263][T22566] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1278.929263][T22566] [ 1279.007614][T22559] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1279.017366][T22566] ubi0: attaching mtd0 [ 1279.042757][T22566] ubi0: scanning is finished [ 1279.047954][T22566] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1279.181465][T22566] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1280.581815][T22594] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1281.124056][T22605] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1281.137335][T22605] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1281.137335][T22605] [ 1281.888957][T22615] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1281.922424][T22615] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1281.922424][T22615] [ 1282.108408][T22615] ubi0: attaching mtd0 [ 1282.158139][T22615] ubi0: scanning is finished [ 1282.163090][T22615] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1282.395913][T22615] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1282.772398][T22637] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1282.785358][T22637] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1282.785358][T22637] [ 1283.155121][T22637] ubi0: attaching mtd0 [ 1283.180023][T22637] ubi0: scanning is finished [ 1283.191797][T22637] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1283.368536][T22637] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1285.236686][T22689] netlink: 'syz.4.3411': attribute type 11 has an invalid length. [ 1285.277573][T22689] netlink: 'syz.4.3411': attribute type 11 has an invalid length. [ 1285.317989][T22686] ima: policy update failed [ 1285.430720][ T31] audit: type=1802 audit(4294969535.015:20): pid=22686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3411" res=0 errno=0 [ 1286.451750][T22706] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1286.464324][T22706] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1286.464324][T22706] [ 1286.581145][T22706] ubi0: attaching mtd0 [ 1286.618748][T22706] ubi0: scanning is finished [ 1286.628836][T22706] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1286.868577][T22706] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1287.941057][T22731] mkiss: ax0: crc mode is auto. [ 1288.340776][T22737] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1288.373981][T22737] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1288.373981][T22737] [ 1289.259954][T22751] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1289.272667][T22751] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1289.272667][T22751] [ 1289.311300][T22751] ubi0: attaching mtd0 [ 1289.317180][T22751] ubi0: scanning is finished [ 1289.334768][T22751] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1289.739926][T22751] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1290.638329][T22774] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1290.651378][T22774] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1290.651378][T22774] [ 1290.706779][T22774] ubi0: attaching mtd0 [ 1290.732124][T22774] ubi0: scanning is finished [ 1290.774002][T22774] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1291.106861][T22774] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1291.521333][T22785] mkiss: ax0: crc mode is auto. [ 1293.145262][T22804] mkiss: ax0: crc mode is auto. [ 1293.200794][T22808] netlink: 'syz.3.3436': attribute type 11 has an invalid length. [ 1293.244251][T22808] netlink: 'syz.3.3436': attribute type 11 has an invalid length. [ 1293.507457][T22808] FAULT_INJECTION: forcing a failure. [ 1293.507457][T22808] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1293.564855][T22808] CPU: 1 UID: 0 PID: 22808 Comm: syz.3.3436 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1293.564916][T22808] Tainted: [U]=USER [ 1293.564928][T22808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1293.564952][T22808] Call Trace: [ 1293.564964][T22808] [ 1293.564978][T22808] dump_stack_lvl+0x16c/0x1f0 [ 1293.565032][T22808] should_fail_ex+0x512/0x640 [ 1293.565089][T22808] get_futex_key+0x1d0/0x1560 [ 1293.565137][T22808] ? __pfx_get_futex_key+0x10/0x10 [ 1293.565193][T22808] futex_wake+0xea/0x530 [ 1293.565244][T22808] ? rcu_is_watching+0x12/0xc0 [ 1293.565279][T22808] ? __pfx_futex_wake+0x10/0x10 [ 1293.565332][T22808] ? kmem_cache_free+0x2d1/0x4d0 [ 1293.565370][T22808] ? fd_install+0x225/0x750 [ 1293.565402][T22808] ? putname+0x154/0x1a0 [ 1293.565457][T22808] do_futex+0x1e3/0x350 [ 1293.565502][T22808] ? __pfx_do_futex+0x10/0x10 [ 1293.565557][T22808] __x64_sys_futex+0x1e0/0x4c0 [ 1293.565604][T22808] ? __x64_sys_openat+0x174/0x210 [ 1293.565658][T22808] ? __pfx___x64_sys_futex+0x10/0x10 [ 1293.565727][T22808] do_syscall_64+0xcd/0x490 [ 1293.565770][T22808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.565802][T22808] RIP: 0033:0x7f010bf8ebe9 [ 1293.565833][T22808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.565866][T22808] RSP: 002b:00007f010cee20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1293.565899][T22808] RAX: ffffffffffffffda RBX: 00007f010c1b5fa8 RCX: 00007f010bf8ebe9 [ 1293.565920][T22808] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f010c1b5fac [ 1293.565941][T22808] RBP: 00007f010c1b5fa0 R08: 00007f010cee3000 R09: 0000000000000000 [ 1293.565961][T22808] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1293.565981][T22808] R13: 00007f010c1b6038 R14: 00007ffd11f55b50 R15: 00007ffd11f55c38 [ 1293.566019][T22808] [ 1293.855259][T22808] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 1293.856545][T22807] ima: policy update failed [ 1293.912765][ T31] audit: type=1802 audit(4294969543.624:21): pid=22807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3436" res=0 errno=0 [ 1294.016240][T22819] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1294.049581][T22819] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1294.049581][T22819] [ 1294.082953][T22819] ubi0: attaching mtd0 [ 1294.088451][T22819] ubi0: scanning is finished [ 1294.177750][T22819] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1294.247882][T22819] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1296.642866][T22847] mkiss: ax0: crc mode is auto. [ 1296.785591][T22856] ERROR: Out of memory at tomoyo_memory_ok. [ 1297.757962][T22863] netlink: 'syz.2.3447': attribute type 11 has an invalid length. [ 1297.774061][T22863] netlink: 'syz.2.3447': attribute type 11 has an invalid length. [ 1297.805391][T22864] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1297.823885][T22864] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1297.823885][T22864] [ 1297.914895][T22863] FAULT_INJECTION: forcing a failure. [ 1297.914895][T22863] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1297.990656][T22863] CPU: 0 UID: 0 PID: 22863 Comm: syz.2.3447 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1297.990697][T22863] Tainted: [U]=USER [ 1297.990705][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1297.990719][T22863] Call Trace: [ 1297.990727][T22863] [ 1297.990736][T22863] dump_stack_lvl+0x16c/0x1f0 [ 1297.990771][T22863] should_fail_ex+0x512/0x640 [ 1297.990809][T22863] get_futex_key+0x1d0/0x1560 [ 1297.990842][T22863] ? __pfx_get_futex_key+0x10/0x10 [ 1297.990880][T22863] futex_wake+0xea/0x530 [ 1297.990915][T22863] ? rcu_is_watching+0x12/0xc0 [ 1297.990940][T22863] ? __pfx_futex_wake+0x10/0x10 [ 1297.990977][T22863] ? kmem_cache_free+0x2d1/0x4d0 [ 1297.991003][T22863] ? fd_install+0x225/0x750 [ 1297.991026][T22863] ? putname+0x154/0x1a0 [ 1297.991062][T22863] do_futex+0x1e3/0x350 [ 1297.991093][T22863] ? __pfx_do_futex+0x10/0x10 [ 1297.991130][T22863] __x64_sys_futex+0x1e0/0x4c0 [ 1297.991162][T22863] ? __x64_sys_openat+0x174/0x210 [ 1297.991200][T22863] ? __pfx___x64_sys_futex+0x10/0x10 [ 1297.991231][T22863] ? xfd_validate_state+0x61/0x180 [ 1297.991275][T22863] do_syscall_64+0xcd/0x490 [ 1297.991307][T22863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.991349][T22863] RIP: 0033:0x7f7e9e58ebe9 [ 1297.991368][T22863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.991392][T22863] RSP: 002b:00007f7e9f4900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1297.991416][T22863] RAX: ffffffffffffffda RBX: 00007f7e9e7b5fa8 RCX: 00007f7e9e58ebe9 [ 1297.991432][T22863] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e9e7b5fac [ 1297.991448][T22863] RBP: 00007f7e9e7b5fa0 R08: 00007f7e9f491000 R09: 0000000000000000 [ 1297.991464][T22863] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1297.991479][T22863] R13: 00007f7e9e7b6038 R14: 00007ffd03464770 R15: 00007ffd03464858 [ 1297.991517][T22863] [ 1297.991709][T22863] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 1298.402636][T22862] ima: policy update failed [ 1298.589624][ T31] audit: type=1802 audit(4294969548.291:22): pid=22862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3447" res=0 errno=0 [ 1298.950628][T22879] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1301.076092][T22917] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 1301.334911][ T5217] ERROR: Out of memory at tomoyo_memory_ok. [ 1301.701207][T22922] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 1302.570291][T22950] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1303.707879][T22963] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1303.720721][T22963] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1303.720721][T22963] [ 1305.334536][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.341097][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.333524][T23010] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1308.950783][T23046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1308.962777][T23046] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 1308.971060][T23046] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1309.011623][T20942] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1309.031795][T20942] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1309.031795][T20942] [ 1311.037105][T23076] svc: failed to register nfsdv3 RPC service (errno 111). [ 1311.058514][T23076] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1311.634442][T23090] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1311.647200][T23090] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1311.647200][T23090] [ 1312.674429][T23098] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1312.687382][T23098] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1312.687382][T23098] [ 1314.088728][T23123] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1314.106472][T23123] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1314.106472][T23123] [ 1314.141004][T23123] ubi0: attaching mtd0 [ 1314.151523][T23123] ubi0: scanning is finished [ 1314.237930][T23123] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1314.575528][T23123] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1314.841837][T23125] ubi0: attaching mtd0 [ 1314.847582][T23125] ubi0: scanning is finished [ 1314.853453][T23125] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1315.106427][T23125] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1316.178113][T23147] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 1316.639452][T23152] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 1317.643890][T23166] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1318.913333][T23184] svc: failed to register nfsdv3 RPC service (errno 111). [ 1318.986918][T23184] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1321.366601][T23221] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 1321.719385][T23235] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1321.752318][T23235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1321.752318][T23235] [ 1322.229787][T23223] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 1323.013090][T23249] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1323.025703][T23249] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1323.025703][T23249] [ 1325.960055][T23294] svc: failed to register nfsdv3 RPC service (errno 111). [ 1325.969416][T23294] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1327.011234][T23307] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1327.024274][T23307] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1327.024274][T23307] [ 1327.235267][T23310] mkiss: ax0: crc mode is auto. [ 1327.973317][T23316] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1327.997426][T23316] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1327.997426][T23316] [ 1328.052928][T23316] ubi0: attaching mtd0 [ 1328.119321][T23316] ubi0: scanning is finished [ 1328.124300][T23316] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1328.343098][T23316] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1328.647116][T23326] ubi0: attaching mtd0 [ 1328.652839][T23326] ubi0: scanning is finished [ 1328.657812][T23326] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1329.329070][T23326] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1330.180650][T23344] svc: failed to register nfsdv3 RPC service (errno 111). [ 1330.214096][T23344] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1333.101797][T23396] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1333.122661][T23396] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1333.122661][T23396] [ 1334.561087][T23415] mkiss: ax0: crc mode is auto. [ 1336.554573][T23443] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1336.620108][T23443] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1336.620108][T23443] [ 1339.286056][ T9915] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1339.304570][ T9915] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1339.304570][ T9915] [ 1339.969621][T23495] mkiss: ax0: crc mode is auto. [ 1340.434970][T23506] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1340.487939][T23506] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1340.487939][T23506] [ 1340.549112][T23510] ubi0: attaching mtd0 [ 1340.610227][T23510] ubi0: scanning is finished [ 1340.614926][T23510] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1340.905768][T23510] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1343.125632][T23543] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1344.034067][T23553] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1344.049233][T23553] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1344.049233][T23553] [ 1344.092277][T23553] ubi0: attaching mtd0 [ 1344.191631][T23553] ubi0: scanning is finished [ 1344.198996][T23553] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1344.364139][T23553] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1345.312069][T23562] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1345.359640][T23562] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1345.359640][T23562] [ 1345.521733][T23562] ubi0: attaching mtd0 [ 1345.549210][T23562] ubi0: scanning is finished [ 1345.554008][T23562] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1345.624178][T23570] svc: failed to register nfsdv3 RPC service (errno 111). [ 1345.643158][T23570] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1345.711145][T23562] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1346.172029][T23580] mkiss: ax0: crc mode is auto. [ 1346.179112][T23580] FAULT_INJECTION: forcing a failure. [ 1346.179112][T23580] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.191968][T23580] CPU: 0 UID: 0 PID: 23580 Comm: syz.2.3576 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1346.192022][T23580] Tainted: [U]=USER [ 1346.192034][T23580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1346.192054][T23580] Call Trace: [ 1346.192066][T23580] [ 1346.192078][T23580] dump_stack_lvl+0x16c/0x1f0 [ 1346.192126][T23580] should_fail_ex+0x512/0x640 [ 1346.192171][T23580] ? fs_reclaim_acquire+0xae/0x150 [ 1346.192223][T23580] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1346.192269][T23580] should_failslab+0xc2/0x120 [ 1346.192314][T23580] __kmalloc_noprof+0xd2/0x510 [ 1346.192363][T23580] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1346.192415][T23580] ? tomoyo_profile+0x47/0x60 [ 1346.192472][T23580] tomoyo_path_number_perm+0x245/0x580 [ 1346.192511][T23580] ? tomoyo_path_number_perm+0x237/0x580 [ 1346.192555][T23580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1346.192598][T23580] ? find_held_lock+0x2b/0x80 [ 1346.192670][T23580] ? find_held_lock+0x2b/0x80 [ 1346.192702][T23580] ? hook_file_ioctl_common+0x145/0x410 [ 1346.192755][T23580] ? __fget_files+0x20e/0x3c0 [ 1346.192809][T23580] security_file_ioctl+0x9b/0x240 [ 1346.192854][T23580] __x64_sys_ioctl+0xb7/0x210 [ 1346.192912][T23580] do_syscall_64+0xcd/0x490 [ 1346.192959][T23580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.192993][T23580] RIP: 0033:0x7f7e9e58ebe9 [ 1346.193018][T23580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.193051][T23580] RSP: 002b:00007f7e9f46f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.193082][T23580] RAX: ffffffffffffffda RBX: 00007f7e9e7b6090 RCX: 00007f7e9e58ebe9 [ 1346.193104][T23580] RDX: 0000000000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 1346.193125][T23580] RBP: 00007f7e9f46f090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.193146][T23580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.193166][T23580] R13: 00007f7e9e7b6128 R14: 00007f7e9e7b6090 R15: 00007ffd03464858 [ 1346.193210][T23580] [ 1346.193233][T23580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1346.888747][T23588] mkiss: ax1: crc mode is auto. [ 1349.087113][T23619] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1351.058580][T23649] openvswitch: netlink: IP tunnel dst address not specified [ 1351.518007][T23658] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1351.530749][T23658] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1351.530749][T23658] [ 1355.385747][T23712] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1355.398560][T23712] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1355.398560][T23712] [ 1355.557797][T23712] ubi0: attaching mtd0 [ 1355.594250][T23712] ubi0: scanning is finished [ 1355.599156][T23712] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1355.852316][T23712] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1356.559195][T23728] FAULT_INJECTION: forcing a failure. [ 1356.559195][T23728] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.604845][T23728] CPU: 1 UID: 0 PID: 23728 Comm: syz.2.3596 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1356.604899][T23728] Tainted: [U]=USER [ 1356.604910][T23728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1356.604929][T23728] Call Trace: [ 1356.604941][T23728] [ 1356.604952][T23728] dump_stack_lvl+0x16c/0x1f0 [ 1356.604997][T23728] should_fail_ex+0x512/0x640 [ 1356.605042][T23728] ? fs_reclaim_acquire+0xae/0x150 [ 1356.605095][T23728] ? tomoyo_encode2+0x100/0x3e0 [ 1356.605142][T23728] should_failslab+0xc2/0x120 [ 1356.605184][T23728] __kmalloc_noprof+0xd2/0x510 [ 1356.605234][T23728] tomoyo_encode2+0x100/0x3e0 [ 1356.605284][T23728] tomoyo_encode+0x29/0x50 [ 1356.605328][T23728] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1356.605381][T23728] ? tomoyo_profile+0x47/0x60 [ 1356.605446][T23728] tomoyo_path_number_perm+0x245/0x580 [ 1356.605485][T23728] ? tomoyo_path_number_perm+0x237/0x580 [ 1356.605529][T23728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1356.605573][T23728] ? find_held_lock+0x2b/0x80 [ 1356.605643][T23728] ? find_held_lock+0x2b/0x80 [ 1356.605673][T23728] ? hook_file_ioctl_common+0x145/0x410 [ 1356.605734][T23728] ? __fget_files+0x20e/0x3c0 [ 1356.605777][T23728] security_file_ioctl+0x9b/0x240 [ 1356.605819][T23728] __x64_sys_ioctl+0xb7/0x210 [ 1356.605875][T23728] do_syscall_64+0xcd/0x490 [ 1356.605921][T23728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.605955][T23728] RIP: 0033:0x7f7e9e58ebe9 [ 1356.605980][T23728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.606012][T23728] RSP: 002b:00007f7e9f42d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.606043][T23728] RAX: ffffffffffffffda RBX: 00007f7e9e7b6270 RCX: 00007f7e9e58ebe9 [ 1356.606066][T23728] RDX: 0000000000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 1356.606087][T23728] RBP: 00007f7e9f42d090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.606108][T23728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.606128][T23728] R13: 00007f7e9e7b6308 R14: 00007f7e9e7b6270 R15: 00007ffd03464858 [ 1356.606172][T23728] [ 1356.843381][T23724] mkiss: ax0: crc mode is auto. [ 1356.850772][T23728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1357.425477][T23736] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1357.453399][T23736] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1357.453399][T23736] [ 1359.684723][T23765] openvswitch: netlink: IP tunnel dst address not specified [ 1360.986437][T23780] mkiss: ax0: crc mode is auto. [ 1362.223795][T23791] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1362.242939][T23791] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1362.242939][T23791] [ 1363.330003][T23805] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1363.342685][T23805] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1363.342685][T23805] [ 1363.361018][T23805] ubi0: attaching mtd0 [ 1363.369564][T23805] ubi0: scanning is finished [ 1363.374307][T23805] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1363.456016][T23805] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1366.414844][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.421258][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.502697][T23839] mkiss: ax0: crc mode is auto. [ 1367.805047][T18393] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1367.821372][T18393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1367.829781][T18393] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1367.840457][T18393] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1367.849925][T18393] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1368.153735][T23843] chnl_net:caif_netlink_parms(): no params data found [ 1368.291641][T23843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.299000][T23843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.306268][T23843] bridge_slave_0: entered allmulticast mode [ 1368.315641][T23843] bridge_slave_0: entered promiscuous mode [ 1368.325756][T23843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.333370][T23843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.341433][T23843] bridge_slave_1: entered allmulticast mode [ 1368.350267][T23843] bridge_slave_1: entered promiscuous mode [ 1368.397902][T23843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.411656][T23843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.461297][T23843] team0: Port device team_slave_0 added [ 1368.471227][T23843] team0: Port device team_slave_1 added [ 1368.516313][T23843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.526145][T23843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.553772][T23843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.567223][T23843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.574257][T23843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.602349][T23843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.696174][T23843] hsr_slave_0: entered promiscuous mode [ 1368.703329][T23843] hsr_slave_1: entered promiscuous mode [ 1368.710706][T23843] debugfs: 'hsr0' already exists in 'hsr' [ 1368.717358][T23843] Cannot create hsr debugfs directory [ 1368.957233][T23843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1368.971102][T23843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1368.981914][T23843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1368.993725][T23843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1369.030472][T23843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.037838][T23843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.045392][T23843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.053667][T23843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.116985][T23843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.127145][T20940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.136675][T20940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.164020][T23843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.176981][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.184198][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.200222][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.207525][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.458008][T23843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.671632][ T7031] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1369.703026][ T7031] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1369.703026][ T7031] [ 1369.768981][T23843] veth0_vlan: entered promiscuous mode [ 1369.782154][T23843] veth1_vlan: entered promiscuous mode [ 1369.813738][T23843] veth0_macvtap: entered promiscuous mode [ 1369.825719][T23843] veth1_macvtap: entered promiscuous mode [ 1369.852283][T23843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.868074][T23843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.883977][ T9915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.895677][ T9915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.907735][ T9915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.917304][T18393] Bluetooth: hci2: command tx timeout [ 1369.925337][ T9915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.003328][ T9915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.012893][ T9915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.046917][ T9915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.056479][ T9915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.147830][T23871] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1371.982188][T18393] Bluetooth: hci2: command tx timeout [ 1373.322382][ T6397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1373.333955][ T6397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1373.344491][ T6397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1373.353445][ T6397] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1373.362735][ T6397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1374.062728][ T6397] Bluetooth: hci2: command tx timeout [ 1374.728687][T23906] chnl_net:caif_netlink_parms(): no params data found [ 1375.399233][ T6397] Bluetooth: hci5: command tx timeout [ 1375.409355][T18393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1375.420296][T18393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1375.430497][T18393] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1375.470590][T18393] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1375.479933][T18393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1375.667476][T23906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.674815][T23906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.688966][T23906] bridge_slave_0: entered allmulticast mode [ 1375.697829][T23906] bridge_slave_0: entered promiscuous mode [ 1375.710099][T23906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.720366][T23936] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1375.732995][T23906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.740611][T23906] bridge_slave_1: entered allmulticast mode [ 1375.753281][T23906] bridge_slave_1: entered promiscuous mode [ 1375.772350][T23936] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1375.772350][T23936] [ 1376.104234][T23906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.118162][ T6397] Bluetooth: hci2: command tx timeout [ 1376.119091][T23906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.725428][T23906] team0: Port device team_slave_0 added [ 1376.918145][T23906] team0: Port device team_slave_1 added [ 1377.042089][T23906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.058998][T23906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.135575][T23906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.209450][T23906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.216454][T23906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.256354][T23906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.452766][T23906] hsr_slave_0: entered promiscuous mode [ 1377.460599][T23906] hsr_slave_1: entered promiscuous mode [ 1377.466474][ T6397] Bluetooth: hci5: command tx timeout [ 1377.484799][T23948] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1377.485774][T23906] debugfs: 'hsr0' already exists in 'hsr' [ 1377.498229][T23948] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1377.498229][T23948] [ 1377.513829][T23906] Cannot create hsr debugfs directory [ 1377.545948][ T6397] Bluetooth: hci6: command tx timeout [ 1377.770044][T23952] FAULT_INJECTION: forcing a failure. [ 1377.770044][T23952] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.781826][T23932] chnl_net:caif_netlink_parms(): no params data found [ 1377.790116][T23952] CPU: 1 UID: 0 PID: 23952 Comm: syz.3.3635 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1377.790171][T23952] Tainted: [U]=USER [ 1377.790184][T23952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1377.790205][T23952] Call Trace: [ 1377.790217][T23952] [ 1377.790230][T23952] dump_stack_lvl+0x16c/0x1f0 [ 1377.790280][T23952] should_fail_ex+0x512/0x640 [ 1377.790327][T23952] ? __kmalloc_noprof+0xbf/0x510 [ 1377.790369][T23952] ? __register_sysctl_table+0xb3/0x1900 [ 1377.790420][T23952] should_failslab+0xc2/0x120 [ 1377.790466][T23952] __kmalloc_noprof+0xd2/0x510 [ 1377.790517][T23952] __register_sysctl_table+0xb3/0x1900 [ 1377.790569][T23952] ? is_module_address+0x5f/0xf0 [ 1377.790626][T23952] ? __pfx___register_sysctl_table+0x10/0x10 [ 1377.790676][T23952] ? is_module_address+0x69/0xf0 [ 1377.790734][T23952] ? register_net_sysctl_sz+0x228/0x3e0 [ 1377.790794][T23952] __devinet_sysctl_register+0x1b9/0x360 [ 1377.790852][T23952] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1377.790908][T23952] ? devinet_init_net+0xeb/0x910 [ 1377.790961][T23952] ? __asan_memcpy+0x3c/0x60 [ 1377.791000][T23952] devinet_init_net+0x347/0x910 [ 1377.791052][T23952] ? __pfx_devinet_init_net+0x10/0x10 [ 1377.791113][T23952] ops_init+0x1e2/0x5f0 [ 1377.791171][T23952] setup_net+0x10f/0x380 [ 1377.791214][T23952] ? lockdep_init_map_type+0x5c/0x280 [ 1377.791265][T23952] ? __pfx_setup_net+0x10/0x10 [ 1377.791313][T23952] ? debug_mutex_init+0x37/0x70 [ 1377.791352][T23952] copy_net_ns+0x2a6/0x5f0 [ 1377.791407][T23952] create_new_namespaces+0x3ea/0xa90 [ 1377.791457][T23952] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1377.791502][T23952] ksys_unshare+0x45b/0xa40 [ 1377.791550][T23952] ? __pfx_ksys_unshare+0x10/0x10 [ 1377.791600][T23952] ? xfd_validate_state+0x61/0x180 [ 1377.791664][T23952] __x64_sys_unshare+0x31/0x40 [ 1377.791718][T23952] do_syscall_64+0xcd/0x490 [ 1377.791766][T23952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.791808][T23952] RIP: 0033:0x7f010bf8ebe9 [ 1377.791835][T23952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.791870][T23952] RSP: 002b:00007f010cea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1377.791903][T23952] RAX: ffffffffffffffda RBX: 00007f010c1b6180 RCX: 00007f010bf8ebe9 [ 1377.791927][T23952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1377.791948][T23952] RBP: 00007f010c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1377.791970][T23952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.791992][T23952] R13: 00007f010c1b6218 R14: 00007f010c1b6180 R15: 00007ffd11f55c38 [ 1377.792036][T23952] [ 1378.317856][T23906] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1378.621593][T23906] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1378.694627][T23906] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1378.743100][T23906] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1378.851289][T23932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.859635][T23932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.867000][T23932] bridge_slave_0: entered allmulticast mode [ 1378.875798][T23932] bridge_slave_0: entered promiscuous mode [ 1378.899265][T23932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.906803][T23932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.914609][T23932] bridge_slave_1: entered allmulticast mode [ 1378.923453][T23932] bridge_slave_1: entered promiscuous mode [ 1378.927230][T23948] kexec: Could not allocate control_code_buffer [ 1378.993317][T23932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.007850][T23932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.051445][T23932] team0: Port device team_slave_0 added [ 1379.060850][T23932] team0: Port device team_slave_1 added [ 1379.106606][T23932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.114031][T23932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1379.140485][T23932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.154205][T23932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.161779][T23932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1379.188709][T23932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.258164][T23932] hsr_slave_0: entered promiscuous mode [ 1379.264660][T23932] hsr_slave_1: entered promiscuous mode [ 1379.271449][T23932] debugfs: 'hsr0' already exists in 'hsr' [ 1379.277302][T23932] Cannot create hsr debugfs directory [ 1379.361398][T23906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.444667][T23906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.470094][T20940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.477319][T20940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.489325][T20940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.496507][T20940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.544671][ T6397] Bluetooth: hci5: command tx timeout [ 1379.600063][T23932] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1379.614190][ T6397] Bluetooth: hci6: command tx timeout [ 1379.625060][T23932] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1379.639220][T23932] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1379.651463][T23932] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1379.779497][T23932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.810798][T23932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.829247][T20938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.836520][T20938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.883420][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.890647][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.130016][T23906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.329011][T23932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.707099][T23906] veth0_vlan: entered promiscuous mode [ 1380.723823][T23906] veth1_vlan: entered promiscuous mode [ 1380.761874][T23906] veth0_macvtap: entered promiscuous mode [ 1380.773518][T23906] veth1_macvtap: entered promiscuous mode [ 1380.799361][T23906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1380.826698][T23906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.857700][ T9915] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.945785][T20946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.957153][T20946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.968874][ T9915] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.001825][ T9915] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.014260][ T9915] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.030587][ T7031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.054967][ T7031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.080959][T23932] veth0_vlan: entered promiscuous mode [ 1381.122576][T23932] veth1_vlan: entered promiscuous mode [ 1381.177528][T23932] veth0_macvtap: entered promiscuous mode [ 1381.190040][T23932] veth1_macvtap: entered promiscuous mode [ 1381.258096][T23932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.287224][T23932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.326323][T23992] mkiss: ax0: crc mode is auto. [ 1381.348629][T20938] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.414852][T23997] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1381.428576][T23997] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1381.428576][T23997] [ 1381.444416][T20946] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.490129][T20946] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.553436][T20946] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.600515][T23997] ubi0: attaching mtd0 [ 1381.606711][ T6397] Bluetooth: hci5: command tx timeout [ 1381.624339][T23997] ubi0: scanning is finished [ 1381.656698][T23997] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1381.685690][ T6397] Bluetooth: hci6: command tx timeout [ 1381.772507][T24001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1381.909637][T23997] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1382.219323][ T7031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.227199][ T7031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.910931][T20946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.982636][T20946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.348031][T24025] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3639'. [ 1383.751312][ T6397] Bluetooth: hci6: command tx timeout [ 1384.014929][T24029] ptrace attach of "./syz-executor exec"[19171] was attempted by "./syz-executor exec"[24029] [ 1384.094609][T24036] ubi0: attaching mtd0 [ 1384.130557][T24036] ubi0: scanning is finished [ 1384.139696][T24036] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1384.297605][T24036] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1384.563042][T24041] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1385.658994][T24051] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1386.284245][ T31] audit: type=1800 audit(4294969636.511:23): pid=24058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=104327 res=0 errno=0 [ 1387.484522][T24080] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1387.505037][T24080] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1387.505037][T24080] [ 1387.666563][T24080] ubi0: attaching mtd0 [ 1387.705188][T24080] ubi0: scanning is finished [ 1387.727907][T24080] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1387.994459][T24080] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1388.700021][T24096] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1388.729243][T24096] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1388.729243][T24096] [ 1389.060650][T24103] FAULT_INJECTION: forcing a failure. [ 1389.060650][T24103] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.158653][T24103] CPU: 1 UID: 0 PID: 24103 Comm: syz.7.3652 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1389.158714][T24103] Tainted: [U]=USER [ 1389.158726][T24103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1389.158748][T24103] Call Trace: [ 1389.158760][T24103] [ 1389.158775][T24103] dump_stack_lvl+0x16c/0x1f0 [ 1389.158825][T24103] should_fail_ex+0x512/0x640 [ 1389.158873][T24103] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1389.158934][T24103] should_failslab+0xc2/0x120 [ 1389.158981][T24103] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1389.159027][T24103] ? nlmsg_notify+0xac/0x220 [ 1389.159071][T24103] ? nlmsg_notify+0x11e/0x220 [ 1389.159115][T24103] ? __devinet_sysctl_register+0xbc/0x360 [ 1389.159175][T24103] kmemdup_noprof+0x29/0x60 [ 1389.159220][T24103] __devinet_sysctl_register+0xbc/0x360 [ 1389.159278][T24103] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1389.159335][T24103] ? devinet_init_net+0xeb/0x910 [ 1389.159388][T24103] ? __asan_memcpy+0x3c/0x60 [ 1389.159428][T24103] devinet_init_net+0x347/0x910 [ 1389.159483][T24103] ? __pfx_devinet_init_net+0x10/0x10 [ 1389.159545][T24103] ops_init+0x1e2/0x5f0 [ 1389.159613][T24103] setup_net+0x10f/0x380 [ 1389.159657][T24103] ? lockdep_init_map_type+0x5c/0x280 [ 1389.159712][T24103] ? __pfx_setup_net+0x10/0x10 [ 1389.159762][T24103] ? debug_mutex_init+0x37/0x70 [ 1389.159799][T24103] copy_net_ns+0x2a6/0x5f0 [ 1389.159854][T24103] create_new_namespaces+0x3ea/0xa90 [ 1389.159910][T24103] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1389.159956][T24103] ksys_unshare+0x45b/0xa40 [ 1389.160003][T24103] ? __pfx_ksys_unshare+0x10/0x10 [ 1389.160060][T24103] ? xfd_validate_state+0x61/0x180 [ 1389.160124][T24103] __x64_sys_unshare+0x31/0x40 [ 1389.160172][T24103] do_syscall_64+0xcd/0x490 [ 1389.160221][T24103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.160257][T24103] RIP: 0033:0x7feb4518ebe9 [ 1389.160284][T24103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.160320][T24103] RSP: 002b:00007feb45f30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1389.160354][T24103] RAX: ffffffffffffffda RBX: 00007feb453b6180 RCX: 00007feb4518ebe9 [ 1389.160377][T24103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1389.160397][T24103] RBP: 00007feb45211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1389.160419][T24103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.160440][T24103] R13: 00007feb453b6218 R14: 00007feb453b6180 R15: 00007ffdcea1ee28 [ 1389.160485][T24103] [ 1390.005613][T24108] blktrace: Concurrent blktraces are not allowed on ram7 [ 1390.520377][T24098] kexec: Could not allocate control_code_buffer [ 1390.593706][T24120] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1391.123177][ T31] audit: type=1800 audit(4294969641.398:24): pid=24129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=105518 res=0 errno=0 [ 1392.254662][T24134] FAULT_INJECTION: forcing a failure. [ 1392.254662][T24134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.279626][T24134] CPU: 1 UID: 0 PID: 24134 Comm: syz.7.3660 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1392.279685][T24134] Tainted: [U]=USER [ 1392.279698][T24134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1392.279717][T24134] Call Trace: [ 1392.279729][T24134] [ 1392.279742][T24134] dump_stack_lvl+0x16c/0x1f0 [ 1392.279791][T24134] should_fail_ex+0x512/0x640 [ 1392.279845][T24134] _copy_from_user+0x2e/0xd0 [ 1392.279900][T24134] copy_msghdr_from_user+0x98/0x160 [ 1392.279945][T24134] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1392.279996][T24134] ? kfree+0x24f/0x4d0 [ 1392.280029][T24134] ? futex_unqueue+0x133/0x2c0 [ 1392.280077][T24134] ___sys_sendmsg+0xfe/0x1d0 [ 1392.280122][T24134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1392.280205][T24134] ? __pfx___might_resched+0x10/0x10 [ 1392.280249][T24134] __sys_sendmmsg+0x200/0x420 [ 1392.280297][T24134] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1392.280348][T24134] ? ip6_datagram_connect+0x38/0x50 [ 1392.280405][T24134] ? __pfx_do_futex+0x10/0x10 [ 1392.280470][T24134] ? xfd_validate_state+0x61/0x180 [ 1392.280517][T24134] ? __pfx_do_writev+0x10/0x10 [ 1392.280560][T24134] __x64_sys_sendmmsg+0x9c/0x100 [ 1392.280601][T24134] ? lockdep_hardirqs_on+0x7c/0x110 [ 1392.280641][T24134] do_syscall_64+0xcd/0x490 [ 1392.280690][T24134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.280725][T24134] RIP: 0033:0x7feb4518ebe9 [ 1392.280752][T24134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1392.280786][T24134] RSP: 002b:00007feb45f72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1392.280818][T24134] RAX: ffffffffffffffda RBX: 00007feb453b5fa0 RCX: 00007feb4518ebe9 [ 1392.280841][T24134] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000003 [ 1392.280862][T24134] RBP: 00007feb45211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1392.280884][T24134] R10: 0000000000005e61 R11: 0000000000000246 R12: 0000000000000000 [ 1392.280906][T24134] R13: 00007feb453b6038 R14: 00007feb453b5fa0 R15: 00007ffdcea1ee28 [ 1392.280951][T24134] [ 1392.879694][T24147] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1392.980639][T24152] ubi0: attaching mtd0 [ 1392.986176][T24152] ubi0: scanning is finished [ 1392.990973][T24152] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1393.007774][T24147] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1393.007774][T24147] [ 1393.113748][T24152] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1394.552301][T24169] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1395.516992][T24189] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1398.090272][T24212] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1398.997770][T24224] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1399.035088][T24224] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1399.035088][T24224] [ 1399.978437][ T9915] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1400.045275][ T9915] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1400.045275][ T9915] [ 1400.710465][T24256] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1400.729017][T24256] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1400.729017][T24256] [ 1400.839182][T24256] ubi0: attaching mtd0 [ 1400.917211][T24256] ubi0: scanning is finished [ 1400.922214][T24256] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1401.250601][T24256] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1402.369019][T24281] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1403.236358][T24298] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1406.279288][T24338] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1406.291971][T24338] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1406.291971][T24338] [ 1407.669186][T24362] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1408.542550][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3701'. [ 1410.683002][T24401] mkiss: ax0: crc mode is auto. [ 1412.066408][T24423] netlink: Unknown conntrack attr (type=146, max=9) [ 1412.169898][T24426] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1415.955783][T24483] mkiss: ax0: crc mode is auto. [ 1416.780614][T24489] mkiss: ax1: crc mode is auto. [ 1417.967018][T24518] random: crng reseeded on system resumption [ 1419.020656][T24531] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1423.713773][T24589] sp0: Synchronizing with TNC [ 1425.335365][T24628] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1425.385303][T24628] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1425.385303][T24628] [ 1425.560156][T24635] FAULT_INJECTION: forcing a failure. [ 1425.560156][T24635] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.631860][T24635] CPU: 1 UID: 0 PID: 24635 Comm: syz.7.3742 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1425.631922][T24635] Tainted: [U]=USER [ 1425.631935][T24635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1425.631956][T24635] Call Trace: [ 1425.631968][T24635] [ 1425.631981][T24635] dump_stack_lvl+0x16c/0x1f0 [ 1425.632049][T24635] should_fail_ex+0x512/0x640 [ 1425.632097][T24635] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1425.632138][T24635] should_failslab+0xc2/0x120 [ 1425.632183][T24635] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1425.632218][T24635] ? seq_create_client1+0x4d/0x5e0 [ 1425.632269][T24635] ? __pfx_snd_seq_open+0x10/0x10 [ 1425.632319][T24635] seq_create_client1+0x4d/0x5e0 [ 1425.632371][T24635] ? __pfx_snd_seq_open+0x10/0x10 [ 1425.632429][T24635] snd_seq_open+0x59/0x550 [ 1425.632479][T24635] ? __pfx_snd_seq_open+0x10/0x10 [ 1425.632526][T24635] snd_open+0x22a/0x4c0 [ 1425.632573][T24635] ? __pfx_snd_open+0x10/0x10 [ 1425.632618][T24635] chrdev_open+0x231/0x6a0 [ 1425.632662][T24635] ? __pfx_apparmor_file_open+0x10/0x10 [ 1425.632700][T24635] ? __pfx_chrdev_open+0x10/0x10 [ 1425.632747][T24635] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1425.632795][T24635] do_dentry_open+0x97f/0x1530 [ 1425.632840][T24635] ? __pfx_chrdev_open+0x10/0x10 [ 1425.632893][T24635] vfs_open+0x82/0x3f0 [ 1425.632949][T24635] path_openat+0x1de4/0x2cb0 [ 1425.633005][T24635] ? __pfx_path_openat+0x10/0x10 [ 1425.633058][T24635] do_filp_open+0x20b/0x470 [ 1425.633100][T24635] ? __pfx_do_filp_open+0x10/0x10 [ 1425.633174][T24635] ? alloc_fd+0x471/0x7d0 [ 1425.633223][T24635] do_sys_openat2+0x11b/0x1d0 [ 1425.633277][T24635] ? __pfx_do_sys_openat2+0x10/0x10 [ 1425.633346][T24635] __x64_sys_openat+0x174/0x210 [ 1425.633401][T24635] ? __pfx___x64_sys_openat+0x10/0x10 [ 1425.633479][T24635] do_syscall_64+0xcd/0x490 [ 1425.633527][T24635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.633563][T24635] RIP: 0033:0x7feb4518ebe9 [ 1425.633589][T24635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.633624][T24635] RSP: 002b:00007feb45f72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1425.633656][T24635] RAX: ffffffffffffffda RBX: 00007feb453b5fa0 RCX: 00007feb4518ebe9 [ 1425.633679][T24635] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1425.633707][T24635] RBP: 00007feb45211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1425.633729][T24635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.633750][T24635] R13: 00007feb453b6038 R14: 00007feb453b5fa0 R15: 00007ffdcea1ee28 [ 1425.633793][T24635] [ 1425.904189][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.468017][T24648] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1426.506104][T24648] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1426.506104][T24648] [ 1427.103233][T24652] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1427.131432][T24652] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1427.131432][T24652] [ 1427.414008][T24657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3746'. [ 1427.457469][T24657] veth0_macvtap: left promiscuous mode [ 1427.514528][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.521380][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.671940][T24660] FAULT_INJECTION: forcing a failure. [ 1427.671940][T24660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.728614][T24660] CPU: 0 UID: 0 PID: 24660 Comm: syz.6.3747 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1427.728668][T24660] Tainted: [U]=USER [ 1427.728679][T24660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1427.728698][T24660] Call Trace: [ 1427.728709][T24660] [ 1427.728722][T24660] dump_stack_lvl+0x16c/0x1f0 [ 1427.728770][T24660] should_fail_ex+0x512/0x640 [ 1427.728823][T24660] _copy_from_user+0x2e/0xd0 [ 1427.728875][T24660] core_sys_select+0x35b/0xc10 [ 1427.728941][T24660] ? __pfx_core_sys_select+0x10/0x10 [ 1427.728986][T24660] ? proc_fail_nth_write+0x9f/0x220 [ 1427.729055][T24660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1427.729110][T24660] kern_select+0x15d/0x1e0 [ 1427.729145][T24660] ? __pfx_kern_select+0x10/0x10 [ 1427.729187][T24660] ? __pfx_ksys_write+0x10/0x10 [ 1427.729234][T24660] __x64_sys_select+0xbd/0x160 [ 1427.729274][T24660] ? do_syscall_64+0x91/0x490 [ 1427.729315][T24660] ? lockdep_hardirqs_on+0x7c/0x110 [ 1427.729354][T24660] do_syscall_64+0xcd/0x490 [ 1427.729399][T24660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.729434][T24660] RIP: 0033:0x7f06dc78ebe9 [ 1427.729459][T24660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.729492][T24660] RSP: 002b:00007f06dd595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1427.729522][T24660] RAX: ffffffffffffffda RBX: 00007f06dc9b5fa0 RCX: 00007f06dc78ebe9 [ 1427.729545][T24660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1427.729565][T24660] RBP: 00007f06dd595090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.729587][T24660] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1427.729608][T24660] R13: 00007f06dc9b6038 R14: 00007f06dc9b5fa0 R15: 00007ffc247aad58 [ 1427.729650][T24660] [ 1427.979290][T24660] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1427.991990][T24660] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1427.991990][T24660] [ 1428.148321][T24660] ubi0: attaching mtd0 [ 1428.158837][T24660] ubi0: scanning is finished [ 1428.163495][T24660] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1428.627578][T24660] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1428.850723][T24679] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3751'. [ 1428.880847][T24681] FAULT_INJECTION: forcing a failure. [ 1428.880847][T24681] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.953308][T24681] CPU: 1 UID: 0 PID: 24681 Comm: syz.6.3751 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1428.953364][T24681] Tainted: [U]=USER [ 1428.953375][T24681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1428.953395][T24681] Call Trace: [ 1428.953406][T24681] [ 1428.953419][T24681] dump_stack_lvl+0x16c/0x1f0 [ 1428.953466][T24681] should_fail_ex+0x512/0x640 [ 1428.953511][T24681] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1428.953560][T24681] should_failslab+0xc2/0x120 [ 1428.953605][T24681] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1428.953648][T24681] ? nlmsg_notify+0xac/0x220 [ 1428.953690][T24681] ? nlmsg_notify+0x11e/0x220 [ 1428.953738][T24681] ? __devinet_sysctl_register+0xbc/0x360 [ 1428.953795][T24681] kmemdup_noprof+0x29/0x60 [ 1428.953837][T24681] __devinet_sysctl_register+0xbc/0x360 [ 1428.953900][T24681] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1428.953955][T24681] ? devinet_init_net+0xeb/0x910 [ 1428.954005][T24681] ? __asan_memcpy+0x3c/0x60 [ 1428.954042][T24681] devinet_init_net+0x347/0x910 [ 1428.954094][T24681] ? __pfx_devinet_init_net+0x10/0x10 [ 1428.954144][T24681] ops_init+0x1e2/0x5f0 [ 1428.954192][T24681] setup_net+0x10f/0x380 [ 1428.954231][T24681] ? lockdep_init_map_type+0x5c/0x280 [ 1428.954276][T24681] ? __pfx_setup_net+0x10/0x10 [ 1428.954320][T24681] ? debug_mutex_init+0x37/0x70 [ 1428.954358][T24681] copy_net_ns+0x2a6/0x5f0 [ 1428.954410][T24681] create_new_namespaces+0x3ea/0xa90 [ 1428.954456][T24681] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1428.954493][T24681] ksys_unshare+0x45b/0xa40 [ 1428.954526][T24681] ? __pfx_ksys_unshare+0x10/0x10 [ 1428.954559][T24681] ? xfd_validate_state+0x61/0x180 [ 1428.954602][T24681] __x64_sys_unshare+0x31/0x40 [ 1428.954633][T24681] do_syscall_64+0xcd/0x490 [ 1428.954666][T24681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.954689][T24681] RIP: 0033:0x7f06dc78ebe9 [ 1428.954707][T24681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1428.954729][T24681] RSP: 002b:00007f06dd553038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1428.954750][T24681] RAX: ffffffffffffffda RBX: 00007f06dc9b6180 RCX: 00007f06dc78ebe9 [ 1428.954765][T24681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1428.954779][T24681] RBP: 00007f06dc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1428.954793][T24681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.954807][T24681] R13: 00007f06dc9b6218 R14: 00007f06dc9b6180 R15: 00007ffc247aad58 [ 1428.954836][T24681] [ 1429.218626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1430.017766][T24695] FAULT_INJECTION: forcing a failure. [ 1430.017766][T24695] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.032813][T24695] CPU: 0 UID: 0 PID: 24695 Comm: syz.3.3753 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1430.032874][T24695] Tainted: [U]=USER [ 1430.032886][T24695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1430.032907][T24695] Call Trace: [ 1430.032919][T24695] [ 1430.032933][T24695] dump_stack_lvl+0x16c/0x1f0 [ 1430.032982][T24695] should_fail_ex+0x512/0x640 [ 1430.033031][T24695] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1430.033072][T24695] should_failslab+0xc2/0x120 [ 1430.033118][T24695] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1430.033155][T24695] ? seq_create_client1+0x4d/0x5e0 [ 1430.033206][T24695] ? __pfx_snd_seq_open+0x10/0x10 [ 1430.033255][T24695] seq_create_client1+0x4d/0x5e0 [ 1430.033308][T24695] ? __pfx_snd_seq_open+0x10/0x10 [ 1430.033357][T24695] snd_seq_open+0x59/0x550 [ 1430.033406][T24695] ? __pfx_snd_seq_open+0x10/0x10 [ 1430.033451][T24695] snd_open+0x22a/0x4c0 [ 1430.033499][T24695] ? __pfx_snd_open+0x10/0x10 [ 1430.033545][T24695] chrdev_open+0x231/0x6a0 [ 1430.033587][T24695] ? __pfx_apparmor_file_open+0x10/0x10 [ 1430.033626][T24695] ? __pfx_chrdev_open+0x10/0x10 [ 1430.033674][T24695] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1430.033729][T24695] do_dentry_open+0x97f/0x1530 [ 1430.033779][T24695] ? __pfx_chrdev_open+0x10/0x10 [ 1430.033832][T24695] vfs_open+0x82/0x3f0 [ 1430.033889][T24695] path_openat+0x1de4/0x2cb0 [ 1430.033945][T24695] ? __pfx_path_openat+0x10/0x10 [ 1430.033998][T24695] do_filp_open+0x20b/0x470 [ 1430.034041][T24695] ? __pfx_do_filp_open+0x10/0x10 [ 1430.034114][T24695] ? alloc_fd+0x471/0x7d0 [ 1430.034163][T24695] do_sys_openat2+0x11b/0x1d0 [ 1430.034215][T24695] ? __pfx_do_sys_openat2+0x10/0x10 [ 1430.034286][T24695] __x64_sys_openat+0x174/0x210 [ 1430.034339][T24695] ? __pfx___x64_sys_openat+0x10/0x10 [ 1430.034409][T24695] do_syscall_64+0xcd/0x490 [ 1430.034457][T24695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.034492][T24695] RIP: 0033:0x7f010bf8ebe9 [ 1430.034521][T24695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1430.034557][T24695] RSP: 002b:00007f010cee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1430.034590][T24695] RAX: ffffffffffffffda RBX: 00007f010c1b5fa0 RCX: 00007f010bf8ebe9 [ 1430.034613][T24695] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1430.034636][T24695] RBP: 00007f010c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1430.034656][T24695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1430.034676][T24695] R13: 00007f010c1b6038 R14: 00007f010c1b5fa0 R15: 00007ffd11f55c38 [ 1430.034720][T24695] [ 1430.312758][T20942] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1430.329135][T20942] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1430.329135][T20942] [ 1430.408556][T24699] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1430.421090][T24699] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1430.421090][T24699] [ 1431.549968][T24717] FAULT_INJECTION: forcing a failure. [ 1431.549968][T24717] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.570860][T24717] CPU: 1 UID: 0 PID: 24717 Comm: syz.7.3758 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1431.570917][T24717] Tainted: [U]=USER [ 1431.570929][T24717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1431.570950][T24717] Call Trace: [ 1431.570961][T24717] [ 1431.570974][T24717] dump_stack_lvl+0x16c/0x1f0 [ 1431.571024][T24717] should_fail_ex+0x512/0x640 [ 1431.571072][T24717] ? fs_reclaim_acquire+0xae/0x150 [ 1431.571126][T24717] ? ima_alloc_init_template+0xb5/0x720 [ 1431.571164][T24717] should_failslab+0xc2/0x120 [ 1431.571211][T24717] __kmalloc_noprof+0xd2/0x510 [ 1431.571249][T24717] ? find_held_lock+0x2b/0x80 [ 1431.571289][T24717] ima_alloc_init_template+0xb5/0x720 [ 1431.571333][T24717] ? take_dentry_name_snapshot+0x319/0x7d0 [ 1431.571390][T24717] ima_store_measurement+0x1eb/0x5c0 [ 1431.571457][T24717] ? __pfx_ima_store_measurement+0x10/0x10 [ 1431.571503][T24717] ? vfs_getxattr_alloc+0xec/0x340 [ 1431.571553][T24717] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1431.571603][T24717] process_measurement+0x1ddb/0x23e0 [ 1431.571656][T24717] ? __pfx_process_measurement+0x10/0x10 [ 1431.571692][T24717] ? kasan_save_stack+0x33/0x60 [ 1431.571729][T24717] ? __kasan_slab_alloc+0x89/0x90 [ 1431.571768][T24717] ? security_file_alloc+0x34/0x2b0 [ 1431.571812][T24717] ? init_file+0x93/0x4c0 [ 1431.571866][T24717] ? find_held_lock+0x2b/0x80 [ 1431.571946][T24717] ima_file_mmap+0x1b1/0x1d0 [ 1431.571983][T24717] ? __pfx_ima_file_mmap+0x10/0x10 [ 1431.572029][T24717] security_mmap_file+0x88c/0x990 [ 1431.572078][T24717] vm_mmap_pgoff+0xec/0x470 [ 1431.572131][T24717] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1431.572177][T24717] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1431.572223][T24717] ? hugetlbfs_get_inode+0x31f/0x730 [ 1431.572258][T24717] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1431.572299][T24717] __x64_sys_mmap+0x125/0x190 [ 1431.572341][T24717] do_syscall_64+0xcd/0x490 [ 1431.572374][T24717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.572399][T24717] RIP: 0033:0x7feb4518ebe9 [ 1431.572418][T24717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1431.572442][T24717] RSP: 002b:00007feb45f72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1431.572465][T24717] RAX: ffffffffffffffda RBX: 00007feb453b5fa0 RCX: 00007feb4518ebe9 [ 1431.572481][T24717] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1431.572496][T24717] RBP: 00007feb45211e19 R08: 0000000000000401 R09: 0000300000000000 [ 1431.572513][T24717] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1431.572527][T24717] R13: 00007feb453b6038 R14: 00007feb453b5fa0 R15: 00007ffdcea1ee28 [ 1431.572558][T24717] [ 1431.844399][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.851835][ T31] audit: type=1804 audit(4294969682.069:25): pid=24717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.7.3758" name="anon_hugepage" dev="hugetlbfs" ino=107266 res=0 errno=0 [ 1432.028397][T24720] FAULT_INJECTION: forcing a failure. [ 1432.028397][T24720] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.042270][T24720] CPU: 0 UID: 0 PID: 24720 Comm: syz.7.3758 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1432.042313][T24720] Tainted: [U]=USER [ 1432.042322][T24720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1432.042336][T24720] Call Trace: [ 1432.042344][T24720] [ 1432.042354][T24720] dump_stack_lvl+0x16c/0x1f0 [ 1432.042390][T24720] should_fail_ex+0x512/0x640 [ 1432.042424][T24720] ? fs_reclaim_acquire+0xae/0x150 [ 1432.042464][T24720] ? tomoyo_encode2+0x100/0x3e0 [ 1432.042498][T24720] should_failslab+0xc2/0x120 [ 1432.042531][T24720] __kmalloc_noprof+0xd2/0x510 [ 1432.042566][T24720] tomoyo_encode2+0x100/0x3e0 [ 1432.042607][T24720] tomoyo_encode+0x29/0x50 [ 1432.042640][T24720] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1432.042684][T24720] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1432.042715][T24720] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1432.042775][T24720] ? do_raw_spin_lock+0x12c/0x2b0 [ 1432.042821][T24720] tomoyo_file_open+0x6b/0x90 [ 1432.042853][T24720] security_file_open+0x84/0x1e0 [ 1432.042887][T24720] do_dentry_open+0x596/0x1530 [ 1432.042927][T24720] vfs_open+0x82/0x3f0 [ 1432.042966][T24720] path_openat+0x1de4/0x2cb0 [ 1432.043004][T24720] ? __pfx_path_openat+0x10/0x10 [ 1432.043041][T24720] do_filp_open+0x20b/0x470 [ 1432.043070][T24720] ? __pfx_do_filp_open+0x10/0x10 [ 1432.043120][T24720] ? alloc_fd+0x471/0x7d0 [ 1432.043154][T24720] do_sys_openat2+0x11b/0x1d0 [ 1432.043191][T24720] ? __pfx_do_sys_openat2+0x10/0x10 [ 1432.043229][T24720] ? find_held_lock+0x2b/0x80 [ 1432.043260][T24720] __x64_sys_openat+0x174/0x210 [ 1432.043298][T24720] ? __pfx___x64_sys_openat+0x10/0x10 [ 1432.043348][T24720] do_syscall_64+0xcd/0x490 [ 1432.043382][T24720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.043406][T24720] RIP: 0033:0x7feb4518ebe9 [ 1432.043425][T24720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1432.043449][T24720] RSP: 002b:00007feb45f51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1432.043473][T24720] RAX: ffffffffffffffda RBX: 00007feb453b6090 RCX: 00007feb4518ebe9 [ 1432.043489][T24720] RDX: 0000000000020080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1432.043505][T24720] RBP: 00007feb45211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1432.043520][T24720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.043535][T24720] R13: 00007feb453b6128 R14: 00007feb453b6090 R15: 00007ffdcea1ee28 [ 1432.043565][T24720] [ 1432.043589][T24720] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1433.181869][T24736] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1433.195612][T24736] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1433.195612][T24736] [ 1433.241380][T24736] ubi0: attaching mtd0 [ 1433.247430][T24736] ubi0: scanning is finished [ 1433.252465][T24736] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1433.449134][T24736] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1433.848517][T24733] FAULT_INJECTION: forcing a failure. [ 1433.848517][T24733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.867409][T24733] CPU: 1 UID: 0 PID: 24733 Comm: syz.7.3760 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1433.867464][T24733] Tainted: [U]=USER [ 1433.867475][T24733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1433.867494][T24733] Call Trace: [ 1433.867505][T24733] [ 1433.867518][T24733] dump_stack_lvl+0x16c/0x1f0 [ 1433.867565][T24733] should_fail_ex+0x512/0x640 [ 1433.867617][T24733] core_sys_select+0x4c5/0xc10 [ 1433.867659][T24733] ? __pfx_core_sys_select+0x10/0x10 [ 1433.867705][T24733] ? proc_fail_nth_write+0x9f/0x220 [ 1433.867772][T24733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1433.867813][T24733] kern_select+0x15d/0x1e0 [ 1433.867837][T24733] ? __pfx_kern_select+0x10/0x10 [ 1433.867866][T24733] ? __pfx_ksys_write+0x10/0x10 [ 1433.867898][T24733] __x64_sys_select+0xbd/0x160 [ 1433.867922][T24733] ? do_syscall_64+0x91/0x490 [ 1433.867951][T24733] ? lockdep_hardirqs_on+0x7c/0x110 [ 1433.867979][T24733] do_syscall_64+0xcd/0x490 [ 1433.868011][T24733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.868035][T24733] RIP: 0033:0x7feb4518ebe9 [ 1433.868053][T24733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.868076][T24733] RSP: 002b:00007feb45f72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1433.868098][T24733] RAX: ffffffffffffffda RBX: 00007feb453b5fa0 RCX: 00007feb4518ebe9 [ 1433.868115][T24733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1433.868128][T24733] RBP: 00007feb45f72090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.868143][T24733] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1433.868158][T24733] R13: 00007feb453b6038 R14: 00007feb453b5fa0 R15: 00007ffdcea1ee28 [ 1433.868187][T24733] [ 1434.053932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.449969][T24745] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1435.575168][T24765] vivid-003: ================= START STATUS ================= [ 1435.653645][T24765] vivid-003: Radio HW Seek Mode: Bounded [ 1435.664655][T24765] vivid-003: Radio Programmable HW Seek: false [ 1435.670949][T24765] vivid-003: RDS Rx I/O Mode: Block I/O [ 1435.679151][T24765] vivid-003: Generate RBDS Instead of RDS: false [ 1435.713340][T24765] vivid-003: RDS Reception: true [ 1435.718899][T24765] vivid-003: RDS Program Type: 0 inactive [ 1435.724849][T24765] vivid-003: RDS PS Name: inactive [ 1435.731022][T24765] vivid-003: RDS Radio Text: inactive [ 1435.765290][T24765] vivid-003: RDS Traffic Announcement: false inactive [ 1435.802665][T24765] vivid-003: RDS Traffic Program: false inactive [ 1435.809635][T24765] vivid-003: RDS Music: false inactive [ 1435.818957][T24765] vivid-003: ================== END STATUS ================== [ 1437.107482][T24787] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1437.123535][T24787] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1437.123535][T24787] [ 1440.181326][T24830] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1441.066884][T24840] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1441.080398][T24840] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1441.080398][T24840] [ 1441.137472][T24843] FAULT_INJECTION: forcing a failure. [ 1441.137472][T24843] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.151140][T24843] CPU: 0 UID: 0 PID: 24843 Comm: syz.3.3779 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1441.151193][T24843] Tainted: [U]=USER [ 1441.151205][T24843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1441.151225][T24843] Call Trace: [ 1441.151236][T24843] [ 1441.151249][T24843] dump_stack_lvl+0x16c/0x1f0 [ 1441.151294][T24843] should_fail_ex+0x512/0x640 [ 1441.151339][T24843] ? fs_reclaim_acquire+0xae/0x150 [ 1441.151393][T24843] ? tomoyo_encode2+0x100/0x3e0 [ 1441.151437][T24843] should_failslab+0xc2/0x120 [ 1441.151480][T24843] __kmalloc_noprof+0xd2/0x510 [ 1441.151520][T24843] ? d_absolute_path+0x136/0x1a0 [ 1441.151575][T24843] tomoyo_encode2+0x100/0x3e0 [ 1441.151627][T24843] tomoyo_encode+0x29/0x50 [ 1441.151673][T24843] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1441.151733][T24843] tomoyo_path_number_perm+0x245/0x580 [ 1441.151783][T24843] ? tomoyo_path_number_perm+0x237/0x580 [ 1441.151827][T24843] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1441.151869][T24843] ? find_held_lock+0x2b/0x80 [ 1441.151940][T24843] ? find_held_lock+0x2b/0x80 [ 1441.151973][T24843] ? hook_file_ioctl_common+0x145/0x410 [ 1441.152026][T24843] ? __fget_files+0x20e/0x3c0 [ 1441.152070][T24843] security_file_ioctl+0x9b/0x240 [ 1441.152115][T24843] __x64_sys_ioctl+0xb7/0x210 [ 1441.152170][T24843] do_syscall_64+0xcd/0x490 [ 1441.152214][T24843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.152247][T24843] RIP: 0033:0x7f010bf8ebe9 [ 1441.152273][T24843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.152305][T24843] RSP: 002b:00007f010cea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.152335][T24843] RAX: ffffffffffffffda RBX: 00007f010c1b6180 RCX: 00007f010bf8ebe9 [ 1441.152357][T24843] RDX: 0000000000000007 RSI: 0000000000004b41 RDI: 000000000000000b [ 1441.152377][T24843] RBP: 00007f010cea0090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.152399][T24843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.152420][T24843] R13: 00007f010c1b6218 R14: 00007f010c1b6180 R15: 00007ffd11f55c38 [ 1441.152464][T24843] [ 1441.152511][T24843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1443.046506][T24860] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1443.214742][T24867] random: crng reseeded on system resumption [ 1446.827743][T24924] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1447.232187][T24930] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1447.248532][T24930] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1447.248532][T24930] [ 1448.430309][T24951] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1448.445753][T24951] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1448.445753][T24951] [ 1448.523678][T24951] FAULT_INJECTION: forcing a failure. [ 1448.523678][T24951] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.541422][T24951] CPU: 1 UID: 0 PID: 24951 Comm: syz.7.3799 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1448.541475][T24951] Tainted: [U]=USER [ 1448.541487][T24951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1448.541506][T24951] Call Trace: [ 1448.541517][T24951] [ 1448.541529][T24951] dump_stack_lvl+0x16c/0x1f0 [ 1448.541576][T24951] should_fail_ex+0x512/0x640 [ 1448.541621][T24951] ? fs_reclaim_acquire+0xae/0x150 [ 1448.541674][T24951] ? tomoyo_encode2+0x100/0x3e0 [ 1448.541717][T24951] should_failslab+0xc2/0x120 [ 1448.541761][T24951] __kmalloc_noprof+0xd2/0x510 [ 1448.541798][T24951] ? d_absolute_path+0x136/0x1a0 [ 1448.541852][T24951] tomoyo_encode2+0x100/0x3e0 [ 1448.541903][T24951] tomoyo_encode+0x29/0x50 [ 1448.541946][T24951] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1448.542003][T24951] tomoyo_path_number_perm+0x245/0x580 [ 1448.542042][T24951] ? tomoyo_path_number_perm+0x237/0x580 [ 1448.542073][T24951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1448.542103][T24951] ? find_held_lock+0x2b/0x80 [ 1448.542151][T24951] ? find_held_lock+0x2b/0x80 [ 1448.542173][T24951] ? hook_file_ioctl_common+0x145/0x410 [ 1448.542210][T24951] ? __fget_files+0x20e/0x3c0 [ 1448.542240][T24951] security_file_ioctl+0x9b/0x240 [ 1448.542278][T24951] __x64_sys_ioctl+0xb7/0x210 [ 1448.542317][T24951] do_syscall_64+0xcd/0x490 [ 1448.542350][T24951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.542374][T24951] RIP: 0033:0x7feb4518ebe9 [ 1448.542393][T24951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1448.542416][T24951] RSP: 002b:00007feb45f51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.542439][T24951] RAX: ffffffffffffffda RBX: 00007feb453b6090 RCX: 00007feb4518ebe9 [ 1448.542455][T24951] RDX: 0000000000000007 RSI: 0000000000004b41 RDI: 000000000000000b [ 1448.542469][T24951] RBP: 00007feb45f51090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.542484][T24951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.542498][T24951] R13: 00007feb453b6128 R14: 00007feb453b6090 R15: 00007ffdcea1ee28 [ 1448.542528][T24951] [ 1448.542548][T24951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1452.291081][T24979] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1452.324360][T24979] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1452.324360][T24979] [ 1453.251825][T25009] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1453.264491][T25009] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1453.264491][T25009] [ 1456.536333][T25061] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1460.594813][T20942] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1460.607293][T20942] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1460.607293][T20942] [ 1460.763213][T25115] random: crng reseeded on system resumption [ 1460.856420][T25109] vivid-003: ================= START STATUS ================= [ 1460.881023][T25109] vivid-003: Radio HW Seek Mode: Bounded [ 1460.896772][T25109] vivid-003: Radio Programmable HW Seek: false [ 1460.984197][T25109] vivid-003: RDS Rx I/O Mode: Block I/O [ 1460.989957][T25109] vivid-003: Generate RBDS Instead of RDS: false [ 1461.040547][T25109] vivid-003: RDS Reception: true [ 1461.048572][T25109] vivid-003: RDS Program Type: 0 inactive [ 1461.104479][T25109] vivid-003: RDS PS Name: inactive [ 1461.110176][T25109] vivid-003: RDS Radio Text: inactive [ 1461.115781][T25109] vivid-003: RDS Traffic Announcement: false inactive [ 1461.130795][T25109] vivid-003: RDS Traffic Program: false inactive [ 1461.137794][T25109] vivid-003: RDS Music: false inactive [ 1461.144379][T25109] vivid-003: ================== END STATUS ================== [ 1463.221719][T25142] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1463.317236][T25142] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1463.317236][T25142] [ 1464.880597][T25175] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1464.912044][T25175] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1464.912044][T25175] [ 1467.284521][T25211] EXT4-fs error (device sda1): ext4_discard_preallocations:5671: comm syz.6.3842: Error -117 reading block bitmap for 4 [ 1467.718300][T25212] can: request_module (can-proto-0) failed. [ 1469.893261][T25242] netlink: 'syz.6.3848': attribute type 1 has an invalid length. [ 1470.006318][T25243] netlink: zone id is out of range [ 1470.011560][T25243] netlink: zone id is out of range [ 1470.016831][T25243] netlink: zone id is out of range [ 1470.043244][T25243] netlink: zone id is out of range [ 1470.118289][T25243] netlink: zone id is out of range [ 1470.123451][T25243] netlink: zone id is out of range [ 1470.195183][T25243] netlink: zone id is out of range [ 1470.205143][T25243] netlink: zone id is out of range [ 1470.213220][T25243] netlink: zone id is out of range [ 1470.231631][T25243] netlink: zone id is out of range [ 1474.176974][T25298] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.7.3857: bg 5: bad block bitmap checksum [ 1474.190166][T25298] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 1474.210993][T25298] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1474.210993][T25298] [ 1475.900490][T25329] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1475.955280][T25329] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1475.955280][T25329] [ 1476.050267][T25329] FAULT_INJECTION: forcing a failure. [ 1476.050267][T25329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1476.064306][T25329] CPU: 0 UID: 0 PID: 25329 Comm: syz.3.3863 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1476.064358][T25329] Tainted: [U]=USER [ 1476.064369][T25329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1476.064387][T25329] Call Trace: [ 1476.064455][T25329] [ 1476.064468][T25329] dump_stack_lvl+0x16c/0x1f0 [ 1476.064514][T25329] should_fail_ex+0x512/0x640 [ 1476.064564][T25329] should_fail_alloc_page+0xe7/0x130 [ 1476.064609][T25329] prepare_alloc_pages+0x3c2/0x610 [ 1476.064664][T25329] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1476.064708][T25329] ? __lock_acquire+0x62e/0x1ce0 [ 1476.064754][T25329] ? __lock_acquire+0x62e/0x1ce0 [ 1476.064807][T25329] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1476.064874][T25329] ? find_held_lock+0x2b/0x80 [ 1476.064907][T25329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1476.064960][T25329] ? policy_nodemask+0xea/0x4e0 [ 1476.065008][T25329] alloc_pages_mpol+0x1fb/0x550 [ 1476.065053][T25329] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1476.065109][T25329] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1476.065164][T25329] shmem_alloc_folio+0x135/0x160 [ 1476.065220][T25329] shmem_alloc_and_add_folio+0x499/0xc20 [ 1476.065270][T25329] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1476.065314][T25329] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1476.065361][T25329] shmem_get_folio_gfp+0x67f/0x1600 [ 1476.065425][T25329] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1476.065469][T25329] ? filemap_map_pages+0xf58/0x1670 [ 1476.065512][T25329] shmem_fault+0x1fe/0xa30 [ 1476.065551][T25329] ? __pfx_shmem_fault+0x10/0x10 [ 1476.065592][T25329] ? rcu_is_watching+0x12/0xc0 [ 1476.065626][T25329] ? __pfx_filemap_map_pages+0x10/0x10 [ 1476.065677][T25329] ? __pfx_filemap_map_pages+0x10/0x10 [ 1476.065712][T25329] __do_fault+0x10d/0x490 [ 1476.065755][T25329] ? __pfx_filemap_map_pages+0x10/0x10 [ 1476.065792][T25329] do_pte_missing+0xf50/0x3ba0 [ 1476.065828][T25329] ? do_raw_spin_unlock+0x172/0x230 [ 1476.065882][T25329] ? __pmd_alloc+0x3fb/0x930 [ 1476.065945][T25329] __handle_mm_fault+0x152a/0x2a50 [ 1476.065985][T25329] ? mt_find+0x3ef/0xa30 [ 1476.066031][T25329] ? __pfx___handle_mm_fault+0x10/0x10 [ 1476.066063][T25329] ? __pfx_mt_find+0x10/0x10 [ 1476.066132][T25329] ? find_vma+0xbf/0x140 [ 1476.066173][T25329] ? __pfx_find_vma+0x10/0x10 [ 1476.066220][T25329] handle_mm_fault+0x589/0xd10 [ 1476.066255][T25329] ? __bpf_trace_exceptions+0x1/0x40 [ 1476.066310][T25329] do_user_addr_fault+0x7a6/0x1370 [ 1476.066365][T25329] ? rcu_is_watching+0x12/0xc0 [ 1476.066409][T25329] exc_page_fault+0x5c/0xb0 [ 1476.066449][T25329] asm_exc_page_fault+0x26/0x30 [ 1476.066479][T25329] RIP: 0010:__get_user_1+0x14/0x30 [ 1476.066503][T25329] Code: 42 1c 04 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca e9 0f 1c 04 00 66 66 2e 0f 1f 84 00 00 00 [ 1476.066526][T25329] RSP: 0018:ffffc9000caa78c0 EFLAGS: 00050283 [ 1476.066545][T25329] RAX: 0000000000000007 RBX: 0000000000000001 RCX: ffffc9000caa7864 [ 1476.066560][T25329] RDX: 00007ffffffff000 RSI: ffffffff855ddb9b RDI: ffffffff8c162980 [ 1476.066575][T25329] RBP: 0000000000000000 R08: 3b8f596bbd88045d R09: 0000000000000001 [ 1476.066589][T25329] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000004b41 [ 1476.066603][T25329] R13: 0000000000000000 R14: ffffc9000caa78f8 R15: dffffc0000000000 [ 1476.066628][T25329] ? con_set_trans_old+0x10b/0x1d0 [ 1476.066671][T25329] con_set_trans_old+0x117/0x1d0 [ 1476.066707][T25329] ? __pfx_con_set_trans_old+0x10/0x10 [ 1476.066740][T25329] ? stack_trace_save+0x8e/0xc0 [ 1476.066809][T25329] ? apparmor_capable+0x114/0x1d0 [ 1476.066841][T25329] ? bpf_lsm_capable+0x9/0x10 [ 1476.066862][T25329] ? security_capable+0x7e/0x260 [ 1476.066888][T25329] vt_ioctl+0xf99/0x30a0 [ 1476.066908][T25329] ? lockdep_hardirqs_on+0x7c/0x110 [ 1476.066939][T25329] ? __pfx_vt_ioctl+0x10/0x10 [ 1476.066962][T25329] ? tomoyo_path_number_perm+0x295/0x580 [ 1476.066995][T25329] ? tomoyo_path_number_perm+0x18d/0x580 [ 1476.067025][T25329] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1476.067055][T25329] ? find_held_lock+0x2b/0x80 [ 1476.067078][T25329] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1476.067114][T25329] ? tty_jobctrl_ioctl+0x152/0xe00 [ 1476.067138][T25329] ? __pfx_vt_ioctl+0x10/0x10 [ 1476.067158][T25329] tty_ioctl+0x65e/0x1680 [ 1476.067191][T25329] ? __pfx_tty_ioctl+0x10/0x10 [ 1476.067245][T25329] ? find_held_lock+0x2b/0x80 [ 1476.067267][T25329] ? hook_file_ioctl_common+0x145/0x410 [ 1476.067305][T25329] ? __fget_files+0x20e/0x3c0 [ 1476.067335][T25329] ? __pfx_tty_ioctl+0x10/0x10 [ 1476.067368][T25329] __x64_sys_ioctl+0x18e/0x210 [ 1476.067413][T25329] do_syscall_64+0xcd/0x490 [ 1476.067446][T25329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.067469][T25329] RIP: 0033:0x7f010bf8ebe9 [ 1476.067487][T25329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1476.067510][T25329] RSP: 002b:00007f010cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1476.067531][T25329] RAX: ffffffffffffffda RBX: 00007f010c1b6090 RCX: 00007f010bf8ebe9 [ 1476.067546][T25329] RDX: 0000000000000007 RSI: 0000000000004b41 RDI: 000000000000000b [ 1476.067560][T25329] RBP: 00007f010cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.067575][T25329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.067589][T25329] R13: 00007f010c1b6128 R14: 00007f010c1b6090 R15: 00007ffd11f55c38 [ 1476.067618][T25329] [ 1476.602521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.279475][T25338] mkiss: ax0: crc mode is auto. [ 1478.497940][T25359] net_ratelimit: 97 callbacks suppressed [ 1478.497958][T25359] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1480.616838][T25382] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1480.701567][T25379] FAULT_INJECTION: forcing a failure. [ 1480.701567][T25379] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1480.738271][T25379] CPU: 0 UID: 0 PID: 25379 Comm: syz.6.3873 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1480.738333][T25379] Tainted: [U]=USER [ 1480.738346][T25379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1480.738367][T25379] Call Trace: [ 1480.738379][T25379] [ 1480.738393][T25379] dump_stack_lvl+0x16c/0x1f0 [ 1480.738443][T25379] should_fail_ex+0x512/0x640 [ 1480.738490][T25379] ? __schedule+0x3fef/0x5de0 [ 1480.738532][T25379] get_futex_key+0x1d0/0x1560 [ 1480.738578][T25379] ? __pfx_get_futex_key+0x10/0x10 [ 1480.738631][T25379] futex_wait_setup+0x9d/0x550 [ 1480.738695][T25379] __futex_wait+0x194/0x2f0 [ 1480.738748][T25379] ? __pfx___futex_wait+0x10/0x10 [ 1480.738807][T25379] ? __pfx_futex_wake_mark+0x10/0x10 [ 1480.738866][T25379] ? futex_private_hash_put+0x176/0x300 [ 1480.738913][T25379] ? futex_private_hash_put+0x18a/0x300 [ 1480.738959][T25379] futex_wait+0xe8/0x380 [ 1480.739008][T25379] ? __pfx_futex_wait+0x10/0x10 [ 1480.739070][T25379] ? task_mm_cid_work+0x704/0x900 [ 1480.739112][T25379] do_futex+0x229/0x350 [ 1480.739156][T25379] ? __pfx_do_futex+0x10/0x10 [ 1480.739217][T25379] ? __pfx_task_mm_cid_work+0x10/0x10 [ 1480.739251][T25379] ? __pfx___might_resched+0x10/0x10 [ 1480.739303][T25379] __x64_sys_futex+0x1e0/0x4c0 [ 1480.739348][T25379] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1480.739393][T25379] ? __pfx___x64_sys_futex+0x10/0x10 [ 1480.739440][T25379] ? syscall_user_dispatch+0x78/0x140 [ 1480.739507][T25379] do_syscall_64+0xcd/0x490 [ 1480.739556][T25379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.739590][T25379] RIP: 0033:0x7f06dc78ebe9 [ 1480.739617][T25379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1480.739652][T25379] RSP: 002b:00007f06dd5950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1480.739686][T25379] RAX: ffffffffffffffda RBX: 00007f06dc9b5fa8 RCX: 00007f06dc78ebe9 [ 1480.739708][T25379] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06dc9b5fa8 [ 1480.739731][T25379] RBP: 00007f06dc9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1480.739753][T25379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.739774][T25379] R13: 00007f06dc9b6038 R14: 00007ffc247aac70 R15: 00007ffc247aad58 [ 1480.739818][T25379] [ 1480.743657][T25383] syz.6.3873 (25383): attempted to duplicate a private mapping with mremap. This is not supported. [ 1481.248802][T25386] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1481.318997][T25390] random: crng reseeded on system resumption [ 1483.890666][T25440] netlink: 'syz.3.3885': attribute type 1 has an invalid length. [ 1484.266873][T25440] netlink: zone id is out of range [ 1484.373824][T25440] netlink: zone id is out of range [ 1484.399687][T25440] netlink: zone id is out of range [ 1484.413598][T25440] netlink: zone id is out of range [ 1484.448272][T25440] netlink: zone id is out of range [ 1484.453540][T25440] netlink: zone id is out of range [ 1484.458924][T25440] netlink: zone id is out of range [ 1484.464276][T25440] netlink: zone id is out of range [ 1484.476464][T25440] netlink: zone id is out of range [ 1484.481706][T25440] netlink: zone id is out of range [ 1484.782771][T25450] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1484.797312][T25450] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1484.797312][T25450] [ 1485.196678][T25455] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1485.212191][T25455] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1485.212191][T25455] [ 1485.743464][ T31] audit: type=1800 audit(4294969736.558:26): pid=25464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3891" name="trace_pipe" dev="tracefs" ino=1125 res=0 errno=0 [ 1487.617391][T25492] ptrace attach of "./syz-executor exec"[23932] was attempted by "./syz-executor exec"[25492] [ 1487.809494][T25497] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1487.824101][T25497] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1487.824101][T25497] [ 1488.561534][T25507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3897'. [ 1488.601030][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.607670][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.815428][T25507] can: request_module (can-proto-0) failed. [ 1489.053056][T25518] netlink: 'syz.7.3898': attribute type 1 has an invalid length. [ 1489.208857][T25523] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1489.258662][T25523] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1489.258662][T25523] [ 1489.437278][T25518] net_ratelimit: 98 callbacks suppressed [ 1489.437297][T25518] netlink: zone id is out of range [ 1489.464851][T25518] netlink: zone id is out of range [ 1489.480546][T25518] netlink: zone id is out of range [ 1489.576264][T25518] netlink: zone id is out of range [ 1489.612450][T25518] netlink: zone id is out of range [ 1489.651670][T25518] netlink: zone id is out of range [ 1489.680495][T25518] netlink: zone id is out of range [ 1489.730739][T25518] netlink: zone id is out of range [ 1489.766241][T25518] netlink: zone id is out of range [ 1489.800736][T25518] netlink: zone id is out of range [ 1490.662137][T20945] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1490.677495][T18393] Bluetooth: hci2: command 0x0406 tx timeout [ 1490.691513][T20945] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1490.691513][T20945] [ 1491.624574][T25553] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1491.648225][T25553] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1491.648225][T25553] [ 1492.608591][T25561] netlink: 'syz.3.3908': attribute type 15 has an invalid length. [ 1492.772401][T25564] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1492.820228][T25564] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1492.820228][T25564] [ 1492.949123][T25564] ubi0: attaching mtd0 [ 1492.975664][T25564] ubi0: scanning is finished [ 1492.998795][T25564] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1493.311513][T25564] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1495.520121][T25596] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1495.546401][T25596] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1495.546401][T25596] [ 1495.765130][T18393] Bluetooth: hci5: command 0x0406 tx timeout [ 1496.659383][T25607] blktrace: Concurrent blktraces are not allowed on ram7 [ 1497.681648][T25620] ptrace attach of "./syz-executor exec"[23906] was attempted by "./syz-executor exec"[25620] [ 1497.819116][T25629] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1497.847935][T25629] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1497.847935][T25629] [ 1497.899474][T25629] ubi0: attaching mtd0 [ 1497.952048][T25629] ubi0: scanning is finished [ 1497.956728][T25629] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1498.171090][T25629] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1499.016676][T25639] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1499.029261][T25639] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1499.029261][T25639] [ 1499.521121][T25649] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3921'. [ 1499.947859][T25660] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 1499.969720][T25660] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1499.969720][T25660] [ 1500.844557][ T6397] Bluetooth: hci6: command 0x0406 tx timeout [ 1504.209938][T25716] bridge0: port 3(vlan1) entered blocking state [ 1504.228233][T25716] bridge0: port 3(vlan1) entered disabled state [ 1504.244015][T25716] vlan1: entered allmulticast mode [ 1504.255238][T25716] veth0_vlan: entered allmulticast mode [ 1504.299356][T25716] vlan1: entered promiscuous mode [ 1504.324693][T25716] bridge0: port 3(vlan1) entered blocking state [ 1504.331200][T25716] bridge0: port 3(vlan1) entered forwarding state [ 1504.502604][ T32] INFO: task syz.2.3601:23740 blocked for more than 142 seconds. [ 1504.510576][ T32] Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 [ 1504.558281][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1504.613775][ T32] task:syz.2.3601 state:D stack:27688 pid:23740 tgid:23739 ppid:17752 task_flags:0x400140 flags:0x00004004 [ 1504.644969][ T32] Call Trace: [ 1504.651134][T25725] FAULT_INJECTION: forcing a failure. [ 1504.651134][T25725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1504.653998][ T32] [ 1504.678827][ T32] __schedule+0x1190/0x5de0 [ 1504.683917][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1504.691822][ T32] ? stack_trace_save+0x8e/0xc0 [ 1504.699160][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 1504.705942][ T32] ? __pfx___schedule+0x10/0x10 [ 1504.711314][ T32] ? find_held_lock+0x2b/0x80 [ 1504.716290][ T32] ? schedule+0x2d7/0x3a0 [ 1504.720956][T25725] CPU: 1 UID: 0 PID: 25725 Comm: syz.3.3938 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1504.721009][T25725] Tainted: [U]=USER [ 1504.721020][T25725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1504.721041][T25725] Call Trace: [ 1504.721051][T25725] [ 1504.721063][T25725] dump_stack_lvl+0x16c/0x1f0 [ 1504.721110][T25725] should_fail_ex+0x512/0x640 [ 1504.721163][T25725] should_fail_alloc_page+0xe7/0x130 [ 1504.721213][T25725] prepare_alloc_pages+0x3c2/0x610 [ 1504.721266][T25725] ? rcu_is_watching+0x12/0xc0 [ 1504.721307][T25725] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1504.721355][T25725] ? stack_trace_save+0x8e/0xc0 [ 1504.721394][T25725] ? __pfx_stack_trace_save+0x10/0x10 [ 1504.721434][T25725] ? stack_depot_save_flags+0x29/0x9c0 [ 1504.721492][T25725] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1504.721549][T25725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.721597][T25725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1504.721652][T25725] ? policy_nodemask+0xea/0x4e0 [ 1504.721701][T25725] alloc_pages_mpol+0x1fb/0x550 [ 1504.721759][T25725] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1504.721823][T25725] alloc_pages_noprof+0x131/0x390 [ 1504.721869][T25725] alloc_pages_exact_noprof+0x37/0xe0 [ 1504.721903][T25725] ? __asan_memset+0x23/0x50 [ 1504.721939][T25725] snd_pcm_attach_substream+0x4bb/0xd60 [ 1504.721991][T25725] snd_pcm_open_substream+0x8d/0x17f0 [ 1504.722034][T25725] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1504.722072][T25725] ? lockdep_init_map_type+0x5c/0x280 [ 1504.722122][T25725] ? lockdep_init_map_type+0x5c/0x280 [ 1504.722174][T25725] snd_pcm_oss_open+0x735/0x1400 [ 1504.722246][T25725] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1504.722302][T25725] ? __lock_acquire+0xb97/0x1ce0 [ 1504.722346][T25725] ? __pfx_default_wake_function+0x10/0x10 [ 1504.722384][T25725] ? __lock_acquire+0xb97/0x1ce0 [ 1504.722439][T25725] ? do_raw_spin_lock+0x12c/0x2b0 [ 1504.722496][T25725] ? soundcore_open+0x35a/0x580 [ 1504.722544][T25725] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1504.722601][T25725] soundcore_open+0x409/0x580 [ 1504.722652][T25725] ? __pfx_soundcore_open+0x10/0x10 [ 1504.722699][T25725] chrdev_open+0x231/0x6a0 [ 1504.722742][T25725] ? __pfx_apparmor_file_open+0x10/0x10 [ 1504.722817][T25725] ? __pfx_chrdev_open+0x10/0x10 [ 1504.722850][T25725] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1504.722884][T25725] do_dentry_open+0x97f/0x1530 [ 1504.722918][T25725] ? __pfx_chrdev_open+0x10/0x10 [ 1504.722955][T25725] vfs_open+0x82/0x3f0 [ 1504.722995][T25725] path_openat+0x1de4/0x2cb0 [ 1504.723035][T25725] ? __pfx_path_openat+0x10/0x10 [ 1504.723072][T25725] do_filp_open+0x20b/0x470 [ 1504.723101][T25725] ? __pfx_do_filp_open+0x10/0x10 [ 1504.723152][T25725] ? alloc_fd+0x471/0x7d0 [ 1504.723185][T25725] do_sys_openat2+0x11b/0x1d0 [ 1504.723222][T25725] ? __pfx_do_sys_openat2+0x10/0x10 [ 1504.723262][T25725] ? __pfx___might_resched+0x10/0x10 [ 1504.723294][T25725] __x64_sys_openat+0x174/0x210 [ 1504.723333][T25725] ? __pfx___x64_sys_openat+0x10/0x10 [ 1504.723383][T25725] do_syscall_64+0xcd/0x490 [ 1504.723417][T25725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.723441][T25725] RIP: 0033:0x7f010bf8ebe9 [ 1504.723461][T25725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1504.723485][T25725] RSP: 002b:00007f010cee2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1504.723508][T25725] RAX: ffffffffffffffda RBX: 00007f010c1b5fa0 RCX: 00007f010bf8ebe9 [ 1504.723524][T25725] RDX: 0000000000000102 RSI: 0000200000004000 RDI: ffffffffffffff9c [ 1504.723540][T25725] RBP: 00007f010c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1504.723555][T25725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.723569][T25725] R13: 00007f010c1b6038 R14: 00007f010c1b5fa0 R15: 00007ffd11f55c38 [ 1504.723600][T25725] [ 1505.107845][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1505.113704][ T32] schedule+0xe7/0x3a0 [ 1505.117841][ T32] schedule_preempt_disabled+0x13/0x30 [ 1505.123418][ T32] __mutex_lock+0x82a/0x10b0 [ 1505.128060][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 1505.133108][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1505.139166][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1505.144262][ T32] ? net_generic+0xea/0x2a0 [ 1505.148863][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1505.154649][ T32] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1505.160488][ T32] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1505.166130][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1505.172319][ T32] ? rcu_is_watching+0x12/0xc0 [ 1505.177141][ T32] ? bpf_lsm_capable+0x9/0x10 [ 1505.181919][ T32] ? security_capable+0x7e/0x260 [ 1505.186907][ T32] genl_rcv_msg+0x55c/0x800 [ 1505.191638][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.196719][ T32] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1505.202961][ T32] netlink_rcv_skb+0x158/0x420 [ 1505.207781][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.212899][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1505.218516][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 1505.223871][ T32] genl_rcv+0x28/0x40 [ 1505.227907][ T32] netlink_unicast+0x5a7/0x870 [ 1505.232875][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 1505.238281][ T32] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1505.244319][ T32] ? __lock_acquire+0xb97/0x1ce0 [ 1505.249465][ T32] netlink_sendmsg+0x8d1/0xdd0 [ 1505.254292][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.259711][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1505.265837][ T32] ____sys_sendmsg+0xa95/0xc70 [ 1505.270708][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 1505.276213][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.281658][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 1505.287047][ T32] ___sys_sendmsg+0x134/0x1d0 [ 1505.291849][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.297161][ T32] __sys_sendmsg+0x16d/0x220 [ 1505.307580][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1505.312808][ T32] ? __x64_sys_futex+0x1e0/0x4c0 [ 1505.317881][ T32] do_syscall_64+0xcd/0x490 [ 1505.322446][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.332808][ T32] RIP: 0033:0x7f7e9e58ebe9 [ 1505.337275][ T32] RSP: 002b:00007f7e9f490038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.347566][ T32] RAX: ffffffffffffffda RBX: 00007f7e9e7b5fa0 RCX: 00007f7e9e58ebe9 [ 1505.365654][ T32] RDX: 0000000000040010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1505.373776][ T32] RBP: 00007f7e9e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1505.397153][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.410423][ T32] R13: 00007f7e9e7b6038 R14: 00007f7e9e7b5fa0 R15: 00007ffd03464858 [ 1505.418661][ T32] [ 1505.426699][ T32] INFO: task syz.1.3604:23765 blocked for more than 143 seconds. [ 1505.436134][ T32] Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 [ 1505.445604][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1505.454383][ T32] task:syz.1.3604 state:D stack:25376 pid:23765 tgid:23764 ppid:18859 task_flags:0x400140 flags:0x00004004 [ 1505.466486][ T32] Call Trace: [ 1505.476927][ T32] [ 1505.479942][ T32] __schedule+0x1190/0x5de0 [ 1505.484498][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1505.490757][ T32] ? __pfx___schedule+0x10/0x10 [ 1505.495656][ T32] ? find_held_lock+0x2b/0x80 [ 1505.500809][ T32] ? schedule+0x2d7/0x3a0 [ 1505.505846][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1505.511789][ T32] schedule+0xe7/0x3a0 [ 1505.516213][ T32] schedule_preempt_disabled+0x13/0x30 [ 1505.521846][ T32] __mutex_lock+0x82a/0x10b0 [ 1505.527087][ T32] ? netlink_unicast+0x5a7/0x870 [ 1505.532531][ T32] ? netlink_sendmsg+0x8d1/0xdd0 [ 1505.537646][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1505.543499][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1505.548606][ T32] ? __asan_memset+0x23/0x50 [ 1505.554057][ T32] ? __nla_validate_parse+0x600/0x2880 [ 1505.600445][ T32] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1505.619590][ T32] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1505.631109][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1505.642002][ T32] ? __nla_parse+0x40/0x60 [ 1505.652340][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1505.664486][ T32] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1505.682234][ T32] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1505.692529][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1505.705269][ T32] ? rcu_is_watching+0x12/0xc0 [ 1505.713509][ T32] ? bpf_lsm_capable+0x9/0x10 [ 1505.720545][ T32] ? security_capable+0x7e/0x260 [ 1505.726215][ T32] genl_rcv_msg+0x55c/0x800 [ 1505.730965][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.736561][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1505.742918][ T32] netlink_rcv_skb+0x158/0x420 [ 1505.750151][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.755562][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1505.763117][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 1505.769014][ T32] genl_rcv+0x28/0x40 [ 1505.775199][ T32] netlink_unicast+0x5a7/0x870 [ 1505.780151][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 1505.786091][ T32] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1505.792558][ T32] ? __lock_acquire+0xb97/0x1ce0 [ 1505.804819][ T32] netlink_sendmsg+0x8d1/0xdd0 [ 1505.811031][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.821276][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1505.835017][ T32] ____sys_sendmsg+0xa95/0xc70 [ 1505.840045][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 1505.847907][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.862841][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 1505.874357][ T32] ___sys_sendmsg+0x134/0x1d0 [ 1505.881435][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.894700][ T32] __sys_sendmsg+0x16d/0x220 [ 1505.899467][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 1505.905222][ T32] ? __x64_sys_futex+0x1e0/0x4c0 [ 1505.910347][ T32] do_syscall_64+0xcd/0x490 [ 1505.915398][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.921424][ T32] RIP: 0033:0x7fd8def8ebe9 [ 1505.926401][ T32] RSP: 002b:00007fd8dd1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.935345][ T32] RAX: ffffffffffffffda RBX: 00007fd8df1b5fa0 RCX: 00007fd8def8ebe9 [ 1505.943569][ T32] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000004 [ 1505.952508][ T32] RBP: 00007fd8df011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1505.960914][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.969317][ T32] R13: 00007fd8df1b6038 R14: 00007fd8df1b5fa0 R15: 00007ffc599fa0d8 [ 1505.978075][ T32] [ 1505.981277][ T32] [ 1505.981277][ T32] Showing all locks held in the system: [ 1505.989748][ T32] 2 locks held by ksoftirqd/0/15: [ 1505.995190][ T32] 1 lock held by khungtaskd/32: [ 1506.000159][ T32] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1506.016019][ T32] 2 locks held by getty/18256: [ 1506.020928][ T32] #0: ffff888034b700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1506.031333][ T32] #1: ffffc900031102f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1506.053792][ T32] 6 locks held by kworker/u10:30/20945: [ 1506.059478][ T32] 2 locks held by syz.4.3590/23665: [ 1506.069566][ T32] #0: ffffffff90428b90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1506.086493][ T32] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1506.107108][ T32] 2 locks held by syz.2.3601/23740: [ 1506.118062][ T32] #0: ffffffff90428b90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1506.128719][ T32] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1506.139017][ T32] 2 locks held by syz.1.3604/23765: [ 1506.144315][ T32] #0: ffffffff90428b90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1506.155673][ T32] #1: ffffffff8e9d9488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1506.166179][ T32] [ 1506.168546][ T32] ============================================= [ 1506.168546][ T32] [ 1506.181075][ T32] NMI backtrace for cpu 0 [ 1506.181102][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1506.181148][ T32] Tainted: [U]=USER [ 1506.181159][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1506.181179][ T32] Call Trace: [ 1506.181189][ T32] [ 1506.181201][ T32] dump_stack_lvl+0x116/0x1f0 [ 1506.181248][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 1506.181298][ T32] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1506.181336][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1506.181385][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1506.181441][ T32] watchdog+0xf0e/0x1260 [ 1506.181494][ T32] ? __pfx_watchdog+0x10/0x10 [ 1506.181546][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1506.181587][ T32] ? __kthread_parkme+0x19e/0x250 [ 1506.181629][ T32] ? __pfx_watchdog+0x10/0x10 [ 1506.181675][ T32] kthread+0x3c2/0x780 [ 1506.181722][ T32] ? __pfx_kthread+0x10/0x10 [ 1506.181772][ T32] ? rcu_is_watching+0x12/0xc0 [ 1506.181805][ T32] ? __pfx_kthread+0x10/0x10 [ 1506.181851][ T32] ret_from_fork+0x5d4/0x6f0 [ 1506.181898][ T32] ? __pfx_kthread+0x10/0x10 [ 1506.181946][ T32] ret_from_fork_asm+0x1a/0x30 [ 1506.182003][ T32] [ 1506.182014][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1506.322711][ C1] NMI backtrace for cpu 1 [ 1506.322735][ C1] CPU: 1 UID: 0 PID: 25624 Comm: syz.7.3926 Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1506.322801][ C1] Tainted: [U]=USER [ 1506.322810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1506.322827][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 1506.322870][ C1] Code: d8 09 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 a7 96 1a 12 <65> 8b 05 b8 96 1a 12 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 1506.322897][ C1] RSP: 0018:ffffc9000b977230 EFLAGS: 00000002 [ 1506.322918][ C1] RAX: dffffc0000000000 RBX: ffff888026d63182 RCX: ffffffff8b8e6a8c [ 1506.322936][ C1] RDX: ffff888026b5bc00 RSI: 0000000000000002 RDI: 0000000000000007 [ 1506.322953][ C1] RBP: ffffc9000b977350 R08: 0000000000000007 R09: 0000000000000002 [ 1506.322970][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000004 [ 1506.322986][ C1] R13: ffff888026ce8840 R14: 0000000000000002 R15: 0000000000000001 [ 1506.323003][ C1] FS: 0000000000000000(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 1506.323028][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1506.323046][ C1] CR2: 000055557d7815c8 CR3: 00000000780a6000 CR4: 00000000003526f0 [ 1506.323064][ C1] Call Trace: [ 1506.323073][ C1] [ 1506.323082][ C1] xas_load+0x1dc/0x5b0 [ 1506.323118][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 1506.323155][ C1] xas_store+0xae9/0x1910 [ 1506.323192][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 1506.323224][ C1] page_cache_delete+0x32f/0x530 [ 1506.323252][ C1] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 1506.323296][ C1] ? __pfx_page_cache_delete+0x10/0x10 [ 1506.323333][ C1] filemap_remove_folio+0xfe/0x250 [ 1506.323367][ C1] truncate_inode_folio+0x49/0x70 [ 1506.323406][ C1] shmem_undo_range+0x376/0x1150 [ 1506.323443][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1506.323494][ C1] ? find_held_lock+0x2b/0x80 [ 1506.323520][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1506.323555][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 1506.323595][ C1] ? stack_trace_save+0x8e/0xc0 [ 1506.323628][ C1] shmem_evict_inode+0x3a1/0xbe0 [ 1506.323663][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1506.323696][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1506.323746][ C1] ? find_held_lock+0x2b/0x80 [ 1506.323772][ C1] ? evict+0x3a2/0x920 [ 1506.323815][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1506.323847][ C1] evict+0x3e3/0x920 [ 1506.323882][ C1] ? __pfx_evict+0x10/0x10 [ 1506.323920][ C1] ? iput+0x519/0x880 [ 1506.323958][ C1] iput+0x521/0x880 [ 1506.323991][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 1506.324020][ C1] dentry_unlink_inode+0x29c/0x480 [ 1506.324056][ C1] __dentry_kill+0x1d0/0x600 [ 1506.324092][ C1] dput.part.0+0x4b1/0x9b0 [ 1506.324129][ C1] dput+0x1f/0x30 [ 1506.324163][ C1] __fput+0x51c/0xb70 [ 1506.324201][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1506.324231][ C1] task_work_run+0x150/0x240 [ 1506.324273][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1506.324320][ C1] do_exit+0x86f/0x2bf0 [ 1506.324379][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 1506.324409][ C1] ? __pfx_do_exit+0x10/0x10 [ 1506.324451][ C1] do_group_exit+0xd3/0x2a0 [ 1506.324489][ C1] get_signal+0x2673/0x26d0 [ 1506.324527][ C1] ? __pfx_get_signal+0x10/0x10 [ 1506.324559][ C1] ? rcu_is_watching+0x12/0xc0 [ 1506.324586][ C1] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1506.324629][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 1506.324666][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1506.324712][ C1] irqentry_exit_to_user_mode+0x12a/0x270 [ 1506.324747][ C1] asm_exc_page_fault+0x26/0x30 [ 1506.324773][ C1] RIP: 0033:0x0 [ 1506.324796][ C1] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1506.324809][ C1] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 1506.324828][ C1] RAX: 0000000000000000 RBX: 00007feb453b5fa0 RCX: 00007feb4518ebe9 [ 1506.324845][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1506.324861][ C1] RBP: 00007feb45211e19 R08: 0000000000000002 R09: 0000000000000000 [ 1506.324878][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.324894][ C1] R13: 00007feb453b6038 R14: 00007feb453b5fa0 R15: 00007ffdcea1ee28 [ 1506.324921][ C1] [ 1506.801263][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1506.808190][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(full) [ 1506.821699][ T32] Tainted: [U]=USER [ 1506.825529][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1506.835619][ T32] Call Trace: [ 1506.838926][ T32] [ 1506.841890][ T32] dump_stack_lvl+0x3d/0x1f0 [ 1506.846537][ T32] vpanic+0x6e8/0x7a0 [ 1506.850580][ T32] ? __pfx_vpanic+0x10/0x10 [ 1506.855146][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1506.861481][ T32] panic+0xca/0xd0 [ 1506.865878][ T32] ? __pfx_panic+0x10/0x10 [ 1506.870359][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1506.875793][ T32] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1506.882026][ T32] ? watchdog+0xd78/0x1260 [ 1506.886501][ T32] ? watchdog+0xd6b/0x1260 [ 1506.890976][ T32] watchdog+0xd89/0x1260 [ 1506.895265][ T32] ? __pfx_watchdog+0x10/0x10 [ 1506.899991][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1506.905217][ T32] ? __kthread_parkme+0x19e/0x250 [ 1506.910370][ T32] ? __pfx_watchdog+0x10/0x10 [ 1506.915163][ T32] kthread+0x3c2/0x780 [ 1506.919281][ T32] ? __pfx_kthread+0x10/0x10 [ 1506.923900][ T32] ? rcu_is_watching+0x12/0xc0 [ 1506.928685][ T32] ? __pfx_kthread+0x10/0x10 [ 1506.933360][ T32] ret_from_fork+0x5d4/0x6f0 [ 1506.937989][ T32] ? __pfx_kthread+0x10/0x10 [ 1506.942610][ T32] ret_from_fork_asm+0x1a/0x30 [ 1506.947436][ T32] [ 1506.950811][ T32] Kernel Offset: disabled [ 1506.955163][ T32] Rebooting in 86400 seconds..