last executing test programs: 21.724503771s ago: executing program 1 (id=186): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x7ffffffffffffffb, 0x2003f2, 0x15) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 19.723467849s ago: executing program 1 (id=192): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x2000006, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x0, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x9}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x20000000000007, 0x64c1, 0xffffffffffffffff, 0x8, 0x7fff, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc3002, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x400454ca, 0x38) sendmmsg$auto(0x3, 0x0, 0x5, 0xcad7) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_OFD_SETLKW(r4, 0x26, 0x1298) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 16.014699267s ago: executing program 1 (id=206): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff08, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x143e00, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy9/reset\x00', 0x452900, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 15.830714979s ago: executing program 1 (id=207): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x189c02, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) read$auto(0x3, 0x0, 0x21) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r2, 0x40189206, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b74, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xc0403d11, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x14, r4, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) unshare$auto(0x40000080) 10.083817384s ago: executing program 1 (id=217): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) socket(0x1f, 0xa, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\x02V\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)\xe2\x9cK\fE\a\xca\t\x00\x00\x00?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3da) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(r1, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x802, 0x0) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = getsockopt$auto(r3, 0x6, 0x2000a, &(0x7f00000001c0)='$\xfe\x88\xe8\x91\x8bo\xc6#\x93\x91^\x018\xc85\xc0\x80\xd6\xdb>f\xcc\xf7\xb6\xca\xcdi\xa6\x91R\x7f\x00B\x93H\t\x00\x00\x00\xb1\xb7\xd3\xe4\x00N\x80\x938\x00\x04\x00\b\x0e\xff\xff\x00\x00\x00\x00', &(0x7f0000000040)=0xa8) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"29ce6c000000000000000000ff00", 0x83ff, 0x408, 0x8da, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) madvise$auto(0x4, 0x5, 0x15) clock_getres$auto(0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000200)={{0x7ff, 0xffffffffffffffff, 0x0, 0x2001, 0x1ff, 0x7, 0x9}, &(0x7f0000000180)=0x40, 0x0, 0x1, 0x0, 0x5, 0x5, 0x5, 0x7, 0x400, 0x5, @raw=0x6, @raw=0x3}) mmap$auto(0x0, 0x400008, 0xdf, 0x13, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r1, 0x0) open(0x0, 0x22240, 0x155) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 8.4117818s ago: executing program 1 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', &(0x7f0000001100)={0x8, 0xd, "2e5710c910109d7e"}, &(0x7f0000001180), 0x2) sendfile$auto(0x1, r3, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) r4 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x143900, 0x0) pread64$auto(r4, 0x0, 0x9, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_0={0xa, 0x200000b8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2a3ce63f0000f8ffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0xf) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000480), r1) ioctl$auto_USB_RAW_IOCTL_EP_READ(r7, 0xc0085508, &(0x7f0000000040)={0x5, 0xf, 0x7, "6c1be5eb84adc66434d00d8c64e31b9bd7743b6abda6f5adc9239f4e8c8b398527906c26ebe5b531d1eb32b29b3d8d17619fe360c1d8cc2dec71be980ae57953fec4b4a295cef5c178d38ac3b8ba8609"}) fcntl$auto_F_DUPFD_CLOEXEC(r5, 0x406, r6) 6.334361045s ago: executing program 3 (id=229): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x100000001, 0x7fffffffffffffff, 0x3ff, 0x10, r0, 0x8300000000000000) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 5.445061726s ago: executing program 0 (id=231): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x714af920, 0x400005, 0x2, 0x2000009b72, 0x2, 0x8001) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) listen$auto(0x3, 0x81) mmap$auto(0xf824, 0x2020006, 0x2, 0x800000000000eb1, 0xfffffffffffffffa, 0x408000) socket(0xa, 0x801, 0x84) r2 = io_uring_setup$auto(0x1, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={"0eeafe46102acbb9a28b25e82fa3118cbbc7e1e60bf874059ef0a5dbc5e664da", 0x9, 0x4, 0xdd, 0x2, 0x9, 0x0}) prctl$auto_PR_SET_MM_ENV_START(0x6, 0xa, r3, 0x80000000, 0x100000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x4, 0x4000000000df, 0x15, 0x4, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/ib_srp/parameters/fast_io_fail_tmo\x00', 0xa8282, 0x0) read$auto(r4, 0x0, 0x1d) write$auto(r0, 0x0, 0xe) 5.267193549s ago: executing program 0 (id=232): msync$auto(0x4, 0x7, 0x3) msync$auto(0x1000, 0x9, 0x5) (async) msync$auto(0x0, 0x7, 0x1b) msync$auto(0x0, 0xded, 0xfffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x3a29}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x1a1}, @L2TP_ATTR_FD={0x8, 0x17, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004085}, 0x810) msync$auto(0x2783, 0x4, 0x9) (async) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) (async) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) sendmsg$auto_NL80211_CMD_SET_MPATH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x518, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8000}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xeb6c}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40040) (async) close_range$auto(r0, r0, 0x2) (async) setsockopt$auto(r2, 0x3, 0x2b, &(0x7f0000000400)='/sys/kernel/debug/kfence/stats\x00', 0x80000000) (async) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000440)="c60b83d3a7103efedbf7e47f7d6f0700d633fea84c8f6ad295a60daf51a0b35dd43529cf07893c44ebe629c8abedb18087182b7bb54632f3b2cccc6c04cc538699444713750d33887a3026a8e38704be3393c413f3202d31b1356f0a3327b617de38a6a7aa", 0x65) msync$auto(0x7, 0x18, 0x9b) (async) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_TUNNEL_INFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x66}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20044014) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000600), r0) (async) msync$auto(0x8, 0xf, 0xe05a) (async) r5 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000680), r0) (async) capset$auto(&(0x7f00000006c0)={0x7ff, 0x0}, &(0x7f0000000700)={0x1, 0x5, 0x3}) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000e80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000740)={0x6d4, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0xfe, 0x2, 0x0, 0x1, [@generic="a14ad5b62d218fb3c22629ea3641254b3d6461e27c21c44d0a30af92c97dbced0504075552afe5d5c707c2237913260271b681b36725acfca1fc294a1963d0d226c94aa0da71dc6f233c95baef5cf88bfe23b51fab6a679e05c20bf531387539b0b253a9c2a2923198edbc83cbb8247f5106b53a700cd8a2943fcb0b21b85258aa4636aabeba7f6a540f1f433454b556f1ad078b76a93e007d8de4e7e4a59486349aac6cb6ccf703810b4e891a938ac241864cae2a2992c6eeec22f5fe02dde9e9e628e70b69dcad1b2f55a9282f2f1832c4c1df4130a3accc5a336e3b7e054b62817e2f462970bc0a412dd42b807459bafd", @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x80}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xde52}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x38d, 0x3, 0x0, 0x1, [@nested={0x52, 0xa0, 0x0, 0x1, [@nested={0x4, 0x98}, @nested={0x4, 0x21}, @generic="df92073d0a084cac6cc071af30b2c5498a78b5aecd08d46d35f062446ac76b24cb03bf25dacdfde3100f48c8adb5a1b4107a8f287be9a9cb1d74010f124cca55e8ab59587212"]}, @nested={0x21a, 0x10a, 0x0, 0x1, [@nested={0x4, 0x25}, @generic="16041942c2a687a8c39ac330b9c5bf1f81df3aa1918f11362310ab3b4bc7fa8c6532dd71cc7feb7097220422e60b8bf7d0437e585530098906db1d0ccc595cc384c46d84c52cc9df54b19ab8d88191cc5a21a32094df743e8e06df6772bd", @nested={0x4, 0x4d}, @generic="c9981a5516b801f31b083649d0b122ee0e40ab78d24c2fb7719c93a605819074dfdcbf7b00697c8a3e68e097ea5853ef87b3003c8eca3588a41f2a77d262c7b0de12ecd62d976076c8b86a5474d50122671891ae733c2cc28b64fa2a6320f8178c2fa108906f0967200856efc2311a40f85a77335da1167e967dcd998fa1e57cc3338c5ff0575a62da0cd937b71a6c69eb9d281febd15e0f393f3f7e003dbeedbdcb860987ea1427cf616d10ef46c85dce26ebfe345831928d4b5431a368bcfe68be167f1e0cb73893ac3c8bc4132b61cf2e07c4dd4f7b8ab50213ea88f45aea3c5001ad111a7671740f3bd607dfd23e7f9fbc2725", @generic="508d4aac6b4110112ef08d517c7d9c0dadde522a968824a318bf971c3300a2e71b02149f257dcd5243b768daa8ea7ef37950ddc349b24deaa84e173e814bcbfe086eae0a07a762941c5bdf80b0e784325971857c44aeaed1fc60a7f7802875340af0f8d7246fa6a6c35c5cea8fa0ab3d1460f25b4a9a214aa888ae7e58650ce67fdfbf09395686aeadecd727d9e13b09351e5a3873f02bf3b67a08d23f825f976ce25886a4778c1b999d6371aa64870cdd4213acb4f0a002588436"]}, @typed={0x7, 0x31, 0x0, 0x0, @str='-{\x00'}, @nested={0xaf, 0xbd, 0x0, 0x1, [@generic="a5b65b5630d57e6f8a4807fc243e1aefc326e185391c6c82eadf5fc31533b8331b96e399a2a203f8455fdca8058d314ddf9f80cf7bed4b5df5eb19b7ae5b0eda2dcac3c2b88d4689244a8eed777ffa3c4c0c9da6019bd91e9c132b5f6c5702b9a519bd18fb4d06c32adfe499a2efec93e8e2ed990e86c907da4c9bdb3749b55b5a7448b2fba4776a17b5bdb0821c913d403ac988475eb4e76ed52f36bf581cd9a807f8dcda0f00266803ae", @generic]}, @generic="8d460d62ad2866f10e69df285f952c9b3ba10a05a350366aa0f9284fd737cd5ca59af4332b4cd6add6271271d76c76cdad082c31fa8dc71adef1ca42588b22823b3e87ea81b62541252d7ed6db1085c133952dff9d1479c3c22c401c85dd6d76c2"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x214, 0x3, 0x0, 0x1, [@nested={0x8e, 0x12b, 0x0, 0x1, [@typed={0x4, 0x133}, @generic="2a61ff712ae3439434d9971a7da21043e98b79560a737409256ee7eeba16b98fd6ee195d7491e828dd690135fd5037949101ecd82a1f4a2546d6decc12f47b219cea3acca680510537285e3f79dd944d2fa91fb4ba942bc9187745f694ae850ad1d69ebc360134e9be5269389452e060465599a16c50497e19b5b3d16db66b51aa2ac5b84f3e"]}, @generic="b9fd6a7e51c4216268422dd94d7641c350aedbdadb490c9d6aac9bd15ee0d5031848ae5c3d024c5d519015db7659133b736332b611eef7b0b4e078e62c26c571aa0261c57909e9ec73c2a890077c2e629c30138375ed264ca8077054fb23599923750b81e502dd335f7f095498606711b96cdcf617bf46805e6eb2c9f1f4123e9f79f24d84baf10af5f28352431c33a59173c25f5b52578a0a93dfddd48b7e929370710fbfac6d89e8bd99e44d1b83f1f82331bcceae6d6ec20a7f0e3b798f12e7a9d814c33fee3212055cfa0ac45aab1f185e63c91cf57caaa5aee37773861f245f7247c25e1d28e1819021603d4da684a0ef8661e22fb8", @typed={0xc, 0xf2, 0x0, 0x0, @u64=0xc0}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}, @nested={0xc, 0xe6, 0x0, 0x1, [@nested={0x4, 0x147}, @typed={0x4, 0x48}]}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r6}, @nested={0x60, 0x3c, 0x0, 0x1, [@typed={0x59, 0xe7, 0x0, 0x0, @binary="962a9b7588c342db8cab17c577709a0a81a2f88492f18057271f0ca39f00cb9b1871dee7d2596e892192f1723f8193dc203a4951fff687a476b671cae6777ba9b3132f0376c3b01816559a91d4a2dfd84e2f5b47ef"}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x9}]}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x640448a1}, 0x24000841) r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101800, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000f00)={0x2, r0}) msync$auto(0xfffffffffffffffd, 0x8000000000000000, 0x0) (async) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000fc0)={@inferred=r8, 0xe, 0xffffffffffffb21b, @btrfs_ioctl_vol_args_v2_3_0={0xfffffffffffffffb, &(0x7f0000000f40)={0xa4c8, 0x6, 0x4, 0x0, {0x63, 0x1, 0x8, 0x9, 0x80000000}, [0x8001]}}, @devid}) timerfd_create$auto(0x3, 0x0) (async) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001fc0), 0x0, 0x0) ioctl$auto_KVM_GET_MSRS(r9, 0xc008ae88, &(0x7f0000002000)={0xe, 0x0, [{0xfffffffa, 0x0, 0x3}, {0x96b, 0x15, 0xa90}, {0x527c, 0x412f3a7c, 0x6}, {0x8, 0x401, 0x5}, {0x5, 0x566}, {0xfffffff7, 0x8, 0x40}]}) 5.23384612s ago: executing program 2 (id=233): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap$auto(0x0, 0x1, 0x2000000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ppoll$auto(0x0, 0x7fffffff, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r0) sendmmsg$auto(r0, &(0x7f00000002c0)={{&(0x7f0000000140)="65c296877674b8d0851dc4eed357bfb649c77f8fbbdd50480f7d80dbd2fc4f95606ca489778965536fb97635102faecd6152b89d9e570e7ae3a260001aad1386c67abca3a89938b362e35bc7836e7161032c821f2b7805f562c151fd749895fb09cacfbc43803fb11bd942bf31df8ec0da419f1f0b8b287f032493399b293c63d4bb6ed1f48380fb299f2aaec9fc6fb93eb3acfe6adafe1267baeacfb1f24e766ccf93d188c6bbb1b2df0e355460fa9371bd0ac4e9840554f6daf8e5aa17d8fc7c99284293faac6d5e77793d", 0x0, &(0x7f0000000240)={&(0x7f0000000380)="f78f7f7ca269feacb5a04eac1d3c733937687fa31815cec8c7947d312e876fb493ffa44a9d78118fb7f070a34a8f1d0864243962f727c45ef06a008216b58235cda6a3d68c5fccf28caee829f0140c6242a65b728520bd39231de001d68406f6b5a7f399041103f749e02b8497dbd3918c7a8c99fb0104a525f0a575a3db49f9002b24f861f162d872787db3f1bb8d2e22e8e068c1bdf76e8fa840ee88c99f52caf93b5571c810747b631c5171a708b625312f2cf493679a8c3796d8b5ce1c770b97225cd4cbee15867321e058664b8e4b0345db402d297923f9e987ebf68e576c1c22d66dcda97ed0cfac38d043ce6ee3ef3c", 0x800}, 0x9, &(0x7f0000000480)="ff736dbc11610281fa5a94ad42c2b3a7938efcd31819fa7f248816d903a890b8f295988b1dd5e1ec11af0101bbfbf32d689118ed54f78ae3de6eaba606d2d622c36d6e0652e1442d723c90288ca22572e586c723879add6b0f4f87279da163029e8329408928c271c34976a27065392b16d2412ff3f12f7f7c40edf3433e733ed863dbc14b6a0a911ef8bd0a383a62bf6eb8fbaa1525df3530312fc77b704a490b7231efe54298c96adf3da15a2c5317dc2f4dab0ee7fe21a32a307ea32944a60d33ac13ce55948248a0be5d537271c411434b", 0xb, 0x5}, 0x6}, 0x2, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xfffffffffffffffb, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) gettimeofday$auto(0x0, &(0x7f0000000080)={0x3, 0xdd6}) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000c2b0ccc6080526a30375904307529b6c9c51f9600839a29edbd8657eebd7f738748abec49a935b1bbc1aca709b7b4c3d3cd110631f06b83475472077d48626c948cba2aabddf730fa3028a07bc761fa6f8acceff9f976d549c77918178d3768b568b5445b95d2f0b79bccc1d48e76c848acd6cbeb4fd18480a5a11d14fb7ba356388474acdf0ea1d69134c25280a8c70f0afb92080b00e7d9f1dc3d83f74b14ef53c4082e417a3a2b48a2559c16e8eb525", @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x2400c0c0) 5.231848185s ago: executing program 3 (id=234): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x20000080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) writev$auto(0x3, &(0x7f0000000200)={0x0, 0x6}, 0x1b) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) mmap$auto(0x0, 0x20009, 0x44000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_RNDADDENTROPY(r2, 0x40085203, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_dfs_global_fops_debug(r1, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x1, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(r1, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="6cf137e8c2a5f8ebdca9a2667242a0b06d62fcbc0c2af1e25651f40d44509091c189d0a0081bb9efa0c630a7ad650dad0730e48a8436267996aa588c6138baca0d40344782b1b777d2cb85c7f40a30ec22d34828fd2b2a993d1b737bd26ce04367c3124c25e9dc94eac45d3f0100000000000000ea2f8b2e8ba57d6d0e824bd8add57cf44004e506bd9a0847457d610042d693f9b5d28e0ab9000000000000", @ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64=r3, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.033662353s ago: executing program 2 (id=235): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x1, 0x6) (async) r0 = socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) (async) socket(0x2, 0x3, 0x104) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rxrpc/stats\x00', 0xaa102, 0x0) write$auto(r2, 0x0, 0x1) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) read$auto(r3, 0x0, 0x5) (async) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) lsm_list_modules$auto(&(0x7f0000000140)=0x32, &(0x7f0000000180), 0xb6) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) pwrite64$auto(0xc8, &(0x7f0000000380)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\t\x00\x00\x00X\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\xa2\x01\x88\v\xae\xa9\xe98W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*6\x9b\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbb\x9e\x93H\xdan\x1d\x00\xeb]B\xa0\x99\xb0R\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1uO\x8fL\"\xact\xee\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4_\x85\xf0k\xe0\"*^o\x83-\xc2\xcc\xa6\x12\x96\xe7\xef3\xcay\xfcl:Du9U\xf6\x1f&F\xa8\xe0\x0f\xd0\x04\xa2*\x17\x81\x85\xf3p7Oq\xd6\x97-\xb7CFKU\xf0\x7f1Qg\xe12\x84\xbfl \x06aq \x04\xd3\x15\x0f\nn\xf3\xf5\xe3\x1a\xad;\x8d\x80\x86\xec6Xm>\xd8,YhS\xf3\xac\xd1)\xa3\x9b\xd4\xd2\x86?\fH\xfaa()\xd1A\x9b\xabZ54i\x95\xac\x1a\xf2\xff\x19\xc7.\xfe\x06i\xcfAy\t)\xf3m\x93_\xe0I\x99\x89\xcb\xb7.\xa2\xd8\x97.\xbfH\x9bP\xaf{\x1c_\xfa6\f\a\x84\xc6\xa0\xe7\x00\x00\x00', 0xfded, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x74, 0x2000000000002) (async) write$auto(0x0, &(0x7f00000000c0)='vlan1\x00', 0x10001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) (async) r4 = socket(0x0, 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xba24}, 0x7, 0x8) 4.916519822s ago: executing program 0 (id=236): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x200, 0x0) 4.735110884s ago: executing program 2 (id=237): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2, 0x1, 0x2000) eventfd$auto(0x80) (fail_nth: 1) 4.078174999s ago: executing program 3 (id=238): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x2000000eb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x6, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e000000000000000000050003000000000005000500"], 0x3c}, 0x1, 0x0, 0x0, 0x4000890}, 0x2000c840) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x3a7a, &(0x7f0000000080)={0xfe00, 0x6, 0x0, @inferred=r0}}) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0x7) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socketpair$auto(0x1, 0x4, 0x10010000, 0x0) ioctl$auto_TIOCSPGRP(r3, 0x5410, &(0x7f0000000140)="bf1e12c5048307caa77a59fb86b43c60819d588575902feda45a9a967b500062198d4a4ea63ff34bdfbf9afe01d5c174a5545d839928ae02126bd13506483a93fca4636cba62cd91e9e7cc52b63146f80bc087e6649ad6576c3c6ea612def729709e3ae1f76d9a324b393532a1ae194d70332043c17b6bbb36f7a06f37c0454a9511ff13a475") r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) 3.432012242s ago: executing program 2 (id=239): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x10001) r0 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) clock_settime$auto(0xffffffff, &(0x7f0000000000)={0x7fffffff, 0x4}) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000100)="d551d404fb80b3bf20c0433a54825a00fc53823d723edfed7b7c784e4afb80163deba5025db59ab0361d1965fc30c204f2cd3975ee6225", 0x80000000}, 0x3) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000004040)) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x181000, 0x0) sendto$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0x2, 0x0, 0x0) ioctl$auto(0x3, 0x50434902, 0x38) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0xeda5, 0xc86) 3.378518044s ago: executing program 3 (id=240): mmap$auto(0x0, 0x2020009, 0x9ac7, 0x14, 0xffffffffffffffff, 0x8000) readv$auto(0xffffffffffffffff, 0x0, 0x3) mq_open$auto(&(0x7f0000000040)='/dev/ttyS0\x00', 0x895f, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/oom_adj\x00', 0x8402, 0x0) read$auto(r0, 0x0, 0x10) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) lsm_get_self_attr$auto(0x1ff, 0x0, 0x0, 0x6) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x2, 0x2, '\v\x00'}, 0x2) 2.746633136s ago: executing program 3 (id=241): socket(0x2, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x100000000008000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740", 0xffffffff}, 0x6, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x2, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x4000083, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000002}}) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) 2.376711499s ago: executing program 3 (id=242): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/221, 0xdd) read$auto_nvmf_dev_fops_fabrics(0xffffffffffffffff, &(0x7f0000000140)=""/205, 0xcd) r1 = fcntl$auto_F_DUPFD(r0, 0x0, r0) ioctl$auto_TUNSETOFFLOAD(r1, 0x400454d0, &(0x7f0000000240)=0x859d) epoll_wait$auto(r1, &(0x7f0000000280)={0x10f, 0x3}, 0x6, 0xffffffff) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000400)={0x0, &(0x7f00000003c0)=&(0x7f00000002c0)="d3ec3dfe93d1bc47cb5bbd9b7eb092c306f1142242cea0e6f83e480dbd86d77cb464e3c9a9809d1e5d1f4fe569ee0b3503901160d1fd2b3a959a6dfef43dcf0f9414ec8bdbf282623e8f270eee5d2c6a9351f612454713371673c1358b3bcb1ade8fb53b944481ff1c6e345a5a237c071c7e80cda2ee6a5c87ee3ee179592b66328551aa531dd19660ba881c9bdbc53b770b7791b46d352d93ed655f3f8014cdc8c0a1871a961f28e1417694d01df877e14dd3f93583d19db90e9c9947b01d2a64695f9de8508d81a542ce7d9a4d58cfa44f2c9616be5d4f", 0x8f1e}) ioctl$auto_FS_IOC_GETFSLABEL3(r1, 0x81009431, &(0x7f0000000440)="52c18e5f982abb2821eaf08d607a67f6c8f215df9eccacd1e1cad75aac6fc357e97258a891584e8c7282725d6719ac1fa3ded11c6aeee9129c679ed27a328efa63c388fbc0b658cdf5dcccb30a0c46440ddc4343551c9f35332fdc5a976570a2cc342352a6c876e0bcd87909c8551a81dd58b2326729b62f5831b06883b19d273495f297c932461b5d2ecd0288c6fca756a441c0abd39dca84f90a12f615ee73a768c505276220c4024ec51040c203a486fef5a2f6dce1cb910140b133452c77173b7c9822f43d19d76b0f97070e160fa1d1697a4f5fb6863d9d70d074d90ef3fe310843b2fd94889069427c9d977300cd467e3f73dc09ceb460b8971b3fe096") setsockopt$auto_SO_PASSPIDFD(r0, 0x8, 0x4c, &(0x7f0000000540)='/sys/kernel/debug/page_tables/kernel\x00', 0x8) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x0, 0x1, 0x2) futimesat$auto(r1, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0xfffffffffffffffd, 0x3ff}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r1, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1b0, r2, 0x812, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x200}, @NL80211_ATTR_PROBE_RESP={0x193, 0x91, "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"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8001}, 0x1) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x11c, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NETDEV_A_DMABUF_QUEUES={0x4}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xffffffe1}]}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_QUEUES={0x54, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1ff}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x174}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9f}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xff6b}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x3}]}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x24, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffff9911}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}]}, @NETDEV_A_DMABUF_QUEUES={0x4c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0xf5d}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x40}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x100}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x6}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x4}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, @NETDEV_A_DMABUF_QUEUES={0x1c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x80000001}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x5}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x5}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8b33ef5b1039b87f}, 0x8010) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000b00)={0x6, r0, 0xfffffff9, "00c75ca6806cdf0b1814c1b53f678802"}) r5 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000b80), r1) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x2}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x1}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0xfc4}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x800}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}]}, 0x3c}}, 0x20004088) ioctl$auto_BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000cc0)={@raw=0x6d5, 0x578, &(0x7f0000000c80)=0x8, 0xf, 0x3, 0x7fffffff, "f3123258f9c36cee1a935f0350b5b6e732a7821bfc3bcda76c8f884a"}) read$auto_trace_fops_debugfs(r1, &(0x7f0000000d40)=""/160, 0xa0) r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000e40), r4) sendmsg$auto_OVS_METER_CMD_GET(r4, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x4}, @OVS_METER_ATTR_STATS={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004091}, 0x4000001) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x1, 0x0) read$auto_drm_connector_fops_drm_debugfs(r4, &(0x7f0000000f80)=""/117, 0x75) r7 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000001000)='/sys/kernel/debug/ieee80211/phy6/hwsim/rx_rssi\x00', 0x1, 0x0) setsockopt$auto_SO_SELECT_ERR_QUEUE(r7, 0x18b, 0x2d, &(0x7f0000001040)='ovs_meter\x00', 0x8cdc) getpeername$auto(r7, &(0x7f0000001080)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, &(0x7f00000010c0)=0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001100)='/dev/loop10\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x401c001}, 0x4) sendmsg$auto_NET_DM_CMD_CONFIG(r1, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0x100, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_ALERT_MODE={0x5, 0x1, 0x8}, @NET_DM_ATTR_UNSPEC={0xe0, 0x0, "4bae9e0650a41d2ae9df350d12da9c1fc2b927eeb0a23dd9d34ff7ea13b66ecd7569e7544114fd05306586d165899e3710c38881c32901e638ecad52f8927e2d3f39d57d2d9d34e7ebbd84b9dc60ede33ac74e7011c012d8354af81b48337c923b693e3122e41db7d5bc3119a376376ec45e056abc7ebeed50f6287fd6cfbf1644c3458c6359ca25d1ce8a35f449dd549f9c2a20e86a79dbe7502a3bc0b3e91e14815bd4f90666f46121c98e1b3e16b5924ee74673ff856901130525d76ef1cd323787b74be2ec32632fc8a68aa3dd663c317fdc623d555891ba0008"}]}, 0x100}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 1.568407646s ago: executing program 0 (id=243): r0 = socket(0xa, 0x1, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f0000000000)=0x7ffe) mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x40000000001, 0x0, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000340)={r1, &(0x7f0000000080)="37a71716d7223ede66d0abc9641c04aa6776bc6af9fe49689dc589477bf5815d4e220a0aa83c2c9f524b68d9534bf70621ab564c697ed333e2bbc21778db5a400d61b555110d29d0eb8c53ad2c7240f3999eaf9f044427e807fccb797f16c000751ab95f1f603648b8c26943e3ef06b9d0b1b04080587a5bc84d", 0x7b, &(0x7f0000000100)="367c306126bc7567ff66e52b1ab3d72f4edee19ab33e0b596520d3e818ec58d6f01b83f36abc167588274c014be0a93fffe7467a7a470e9c54b9d55ff360bd377cb9236dd6a2ef5c1675686731974e40250b16e5f7840190d5559f57721bda0b8bda99c7c02b0b45c60a6266bbd5443bbe007cde3e7b054a9402d9b086f052f0f5276c346306e98eed3dba59e739b51e2daf950ad05e4158f49c8bfc3d687717aaad5497535600e5751eefe9addc1919c474ae861fc040ac587a7ef215f377c6bec01c127b4ae9a26d6386bcab4a0231d4", 0x8, &(0x7f0000000200)="8c33e338557b1187ddf7b7581daba6a071013e0edd1856a109d97dc49a4bc3e7d37fbe0c1d89b8f08f89efdcc3f0090247b21eb75ff46fc8575fbaff63bf9da0ed35e014da901f5e6ed563683066b43f4e0a07ca064380fba987b75f8a2578f68ab2b92d94ab77615a82a45b63127db9cba075fac9e973f7ebbf6bbbe4a5232189564678f58339714f8613cffbd6e5e0eb1f79b180e5e2c4deb0c2b5309af91669b7605843e4ccca2185f8c242ca9cd3bd696639d4d2305505598fa0d131c49a1dca56f2e0d5cd71063bdebfc81ece67cfc412df5bcdd60bcdddd6e94417c37d0388f777", &(0x7f0000000300)=0xff}) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=@bpf_attr_5={@target_ifindex=r2, r0, 0x9, 0x73182f04, r1, @relative_fd=r3, 0x7}, 0xfffffffc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/ext4/sda1/first_error_errcode\x00', 0x400, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2803, 0x0) read$auto(r4, 0x0, 0x20) (async) read$auto(r4, 0x0, 0x20) prctl$auto(0x19, 0x5, 0x0, 0x9, 0x4000080001) (async) prctl$auto(0x19, 0x5, 0x0, 0x9, 0x4000080001) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x801) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_NETNS_COOKIE(r5, 0x0, 0x47, 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) unshare$auto(0x8000000) (async) unshare$auto(0x8000000) sendmmsg$auto(0x3, 0x0, 0x3, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x404c800) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/afs/addr_prefs\x00', 0x8104, 0x0) (async) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/afs/addr_prefs\x00', 0x8104, 0x0) read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000e80)=""/215, 0xd7) (async) read$auto_proc_reg_file_ops_compat_inode(r8, &(0x7f0000000e80)=""/215, 0xd7) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae71, 0x38) (async) ioctl$auto(0x3, 0xae71, 0x38) 454.947149ms ago: executing program 2 (id=244): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_adjtime$auto(0x0, 0x0) ioperm$auto(0x2, 0x10, 0x200000) syz_clone3(&(0x7f00000001c0)={0x80a00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40086200, 0x38) 272.043113ms ago: executing program 0 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async, rerun: 64) r5 = fanotify_init$auto(0x5, 0x2000000000002) (async, rerun: 64) r6 = inotify_init1$auto(0x3000000000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = io_uring_setup$auto(0x6, 0x0) (async) r10 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MM_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, r10, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_MM_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r16, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r17, 0x1, 0x70bd27, 0x25dfdbfa, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xb1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'nr0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'netpci0\x00', 0x0}) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58020000", @ANYRES16=r3, @ANYBLOB="080025bd7000fddbdf251100000068000180080003000500000014000200626f6e645f736c6176655f3100000000080003000000000008000100", @ANYRES32=r4, @ANYBLOB="08000300ff000000140002006c6f00000000000000000000000000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r7, @ANYBLOB="7c0001801400020076657468315f746f5f7465616d000000140002007369743000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="080003000600000000000000", @ANYRES32=r12, @ANYBLOB="08000300090000001400020062617461647630000000000000000000140002007465616d5f736c6176655f3000000000080003000d0000001c00018008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000600000048000180140002006e657464657673696d3000000000000014000200697036677265300000000000000000001400020076657468315f6d616376746170000000080003009308000040000180080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="080003009627000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d367265670000000000000000004400018014000200766c616e31000000000000000000000014000200766c616e31000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="0c000180080003002d28000014000180080003000200000008000100", @ANYRES32=r20, @ANYBLOB="58000180140002007767300000000000000000000000000008000100", @ANYRES32=r21, @ANYBLOB="080003000e00000008000300024400001400020073797a5f74756e000000000000000000140002006772653000"/56], 0x258}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="01002cb57000fbdbdf250a00000018000200d22823001466fff3b0f57d654c3556024e08c68d16546d710de92bf89b9fb77ef8341e380e51a6ccedf7b361e8ff5eba2ca83470d26a11e188e49ec4634e514f29c8815e155dbe6f47a9e58d191f976bb7c6295026c60158fbf2ad02cf7f35905eb2f2a8e009a421700b0658b2946386c4c3ca83cb2fdc6d350fc3e495b54301cf538ac291d0a2ffe459460342fe56d15299ad17252d244e021c84ba55df10d791cd4ee0ff40d30e7fe3d59469"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r0) (rerun: 32) 246.201742ms ago: executing program 2 (id=246): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_sigsys={&(0x7f00000002c0)="78bda66ae74cf8772683292be0546b2fb65808006d7b67954b1c07bb12edf0c75f395ba9b8f9a391655881a4f24941fe3ab590571738684d36a83dd8f1780405103b94c54e69713955bd378e959e", 0x7fff, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0xfffffffffffffffe, 0x10000008000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x800, 0x2057}) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000100}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1181, 0x0) (async) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/vxcan0/arp_filter\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) (async) write$auto(r1, 0x0, 0x9) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x4, 0x400000202000a, 0x3, 0x13, 0xffffffffffffffff, 0x401) (async) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x3b0ba6af8cec301b, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/\xda\xae\x97W`hO\x1f=\xdfw]\xe0o1\x00\xeev\x13Ad\xe9\a\xb5\x1e\x8e\xf6\x88[e\xba\x89\x7f\xca\xbc\x05\xd1\xe2S/\xcb\xb8\x86\x8b\xfb\xe9\b\x1c.\x99\xc6lc0\xf0\xd5x\xa6\xb8\xd7\v\x02\xeel\x97\xc6\x92\xa2\xc4\xd0\xce\x10\xab\b\xecckY\xa9\xfb3\xa9\xe6\xea\xdeZ\x92I\x98\xe3\xd3T\xbc\xbf\xd6\xa1XX.\xb3MO\xcf\xcd\xa8>)\xed~>f\xce\x85\xc9\x1d\t\xd8\xd2S]\x8f\x19\x87}k\xe2\x00\x00\x00\x00\x00\x00\x00', 0x6) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) r3 = fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c015}, 0x40051) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x2, 0xfffffffffffffff3) fsopen$auto(0x0, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 0s ago: executing program 0 (id=247): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@test={0xffffffffffffffff, 0x82, 0x1ff, 0x19d2e2e9, 0x5, 0x81, 0xfffffff1, 0x1, 0x1, 0x5, 0x9b9, 0x8, 0x7fffffff, 0x4, 0x2}, 0x66) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) keyctl$auto_KEYCTL_PKEY_SIGN(0x1b, 0x9, 0x7, 0x0, 0x52006a90) socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r2, r1, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) getpgid$auto(0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 88.082292][ T5822] cgroup: Unknown subsys name 'net' [ 88.233908][ T5822] cgroup: Unknown subsys name 'cpuset' [ 88.243397][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.059816][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.922044][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.941324][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.942703][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.949913][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.963116][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.965620][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.970745][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.979193][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.986149][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.994275][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.001855][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.008545][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.015105][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.021897][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.029912][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.037694][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.045339][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.050815][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.071798][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.081388][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.809362][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.891797][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 92.952497][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.969634][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 93.102438][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.110020][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.117739][ T5835] bridge_slave_0: entered allmulticast mode [ 93.125400][ T5835] bridge_slave_0: entered promiscuous mode [ 93.167686][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.175187][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.182759][ T5835] bridge_slave_1: entered allmulticast mode [ 93.190226][ T5835] bridge_slave_1: entered promiscuous mode [ 93.251563][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.259060][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.267422][ T5836] bridge_slave_0: entered allmulticast mode [ 93.274793][ T5836] bridge_slave_0: entered promiscuous mode [ 93.314990][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.322506][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.329731][ T5836] bridge_slave_1: entered allmulticast mode [ 93.337013][ T5836] bridge_slave_1: entered promiscuous mode [ 93.344689][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.352049][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.359247][ T5834] bridge_slave_0: entered allmulticast mode [ 93.366780][ T5834] bridge_slave_0: entered promiscuous mode [ 93.377333][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.407226][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.414621][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.421981][ T5834] bridge_slave_1: entered allmulticast mode [ 93.429212][ T5834] bridge_slave_1: entered promiscuous mode [ 93.438326][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.448002][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.455897][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.463520][ T5833] bridge_slave_0: entered allmulticast mode [ 93.470992][ T5833] bridge_slave_0: entered promiscuous mode [ 93.511961][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.519250][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.527067][ T5833] bridge_slave_1: entered allmulticast mode [ 93.534404][ T5833] bridge_slave_1: entered promiscuous mode [ 93.544353][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.586286][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.598200][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.610110][ T5835] team0: Port device team_slave_0 added [ 93.618566][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.650666][ T5835] team0: Port device team_slave_1 added [ 93.669032][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.710846][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.722374][ T5836] team0: Port device team_slave_0 added [ 93.745761][ T5834] team0: Port device team_slave_0 added [ 93.763497][ T5836] team0: Port device team_slave_1 added [ 93.770362][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.777308][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.804067][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.817692][ T5834] team0: Port device team_slave_1 added [ 93.846274][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.853636][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.880754][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.903608][ T5833] team0: Port device team_slave_0 added [ 93.946523][ T5833] team0: Port device team_slave_1 added [ 93.952987][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.960386][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.987324][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.001314][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.008593][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.035379][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.057759][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.064961][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.091648][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.103358][ T5840] Bluetooth: hci0: command tx timeout [ 94.110238][ T52] Bluetooth: hci3: command tx timeout [ 94.116147][ T5154] Bluetooth: hci1: command tx timeout [ 94.126427][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.133492][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.162461][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.179906][ T5154] Bluetooth: hci2: command tx timeout [ 94.217820][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.224911][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.252226][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.294992][ T5835] hsr_slave_0: entered promiscuous mode [ 94.301699][ T5835] hsr_slave_1: entered promiscuous mode [ 94.309084][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.316266][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.343041][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.361723][ T5836] hsr_slave_0: entered promiscuous mode [ 94.368206][ T5836] hsr_slave_1: entered promiscuous mode [ 94.374806][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 94.380676][ T5836] Cannot create hsr debugfs directory [ 94.453138][ T5834] hsr_slave_0: entered promiscuous mode [ 94.459582][ T5834] hsr_slave_1: entered promiscuous mode [ 94.466369][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 94.472474][ T5834] Cannot create hsr debugfs directory [ 94.566736][ T5833] hsr_slave_0: entered promiscuous mode [ 94.573898][ T5833] hsr_slave_1: entered promiscuous mode [ 94.580283][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 94.586129][ T5833] Cannot create hsr debugfs directory [ 94.989488][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.003232][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.016938][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.028112][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.105023][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.118815][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.133968][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.167296][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.269110][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.291606][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.306627][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.329044][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.406472][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.418243][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.432832][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.447729][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.538594][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.601102][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.612524][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.646839][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.654410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.687033][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.694771][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.717353][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.749140][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.756345][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.783119][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.790345][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.838191][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.873153][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.917383][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.949426][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.956643][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.008175][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.022752][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.030156][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.058849][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.066280][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.093018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.100334][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.181247][ T52] Bluetooth: hci1: command tx timeout [ 96.181658][ T5840] Bluetooth: hci3: command tx timeout [ 96.186838][ T5154] Bluetooth: hci0: command tx timeout [ 96.267116][ T5154] Bluetooth: hci2: command tx timeout [ 96.360480][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.556751][ T5836] veth0_vlan: entered promiscuous mode [ 96.575813][ T5836] veth1_vlan: entered promiscuous mode [ 96.665187][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.774511][ T5836] veth0_macvtap: entered promiscuous mode [ 96.812261][ T5836] veth1_macvtap: entered promiscuous mode [ 96.837864][ T5835] veth0_vlan: entered promiscuous mode [ 96.867526][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.879419][ T5835] veth1_vlan: entered promiscuous mode [ 96.902520][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.929545][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.944689][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.957482][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.967886][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.985462][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.014154][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.104344][ T5835] veth0_macvtap: entered promiscuous mode [ 97.165874][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.178613][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.178672][ T5835] veth1_macvtap: entered promiscuous mode [ 97.226360][ T853] cfg80211: failed to load regulatory.db [ 97.262301][ T5834] veth0_vlan: entered promiscuous mode [ 97.276519][ T5833] veth0_vlan: entered promiscuous mode [ 97.284460][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.293644][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.298241][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.317064][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.333741][ T5834] veth1_vlan: entered promiscuous mode [ 97.343866][ T3855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.366459][ T3855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.383990][ T3855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.397064][ T5833] veth1_vlan: entered promiscuous mode [ 97.413020][ T3855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.445199][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.479308][ T5834] veth0_macvtap: entered promiscuous mode [ 97.496531][ T5834] veth1_macvtap: entered promiscuous mode [ 97.623925][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.648766][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.654389][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.664263][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.694192][ T5833] veth0_macvtap: entered promiscuous mode [ 97.735584][ T3526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.772908][ T5833] veth1_macvtap: entered promiscuous mode [ 97.783479][ T3526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.800399][ T3526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.825504][ T3855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.836752][ T3526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.850904][ T3855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.869580][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.919971][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.976197][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.026082][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045698][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.061034][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.073757][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.094455][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.225400][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.240519][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.260014][ T5154] Bluetooth: hci3: command tx timeout [ 98.269778][ T5840] Bluetooth: hci0: command tx timeout [ 98.270161][ T52] Bluetooth: hci1: command tx timeout [ 98.340036][ T5154] Bluetooth: hci2: command tx timeout [ 98.447216][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.484882][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.669883][ T3855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.677763][ T3855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.737562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.250170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.470076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.575624][ T5947] Zero length message leads to an empty skb [ 100.330610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.339957][ T5154] Bluetooth: hci3: command tx timeout [ 100.343486][ T52] Bluetooth: hci0: command tx timeout [ 100.345397][ T5840] Bluetooth: hci1: command tx timeout [ 100.380260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.389397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.424542][ T5154] Bluetooth: hci2: command tx timeout [ 100.630514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.632155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.647861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.649989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.287483][ T5976] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.353575][ T30] audit: type=1804 audit(1768639539.029:2): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 102.951125][ T5986] netlink: 'syz.2.11': attribute type 11 has an invalid length. [ 102.989959][ T5986] netlink: 'syz.2.11': attribute type 11 has an invalid length. [ 103.005132][ T5986] netlink: 'syz.2.11': attribute type 11 has an invalid length. [ 103.215645][ T5992] No such timeout policy "" [ 103.229999][ T5992] netlink: Failed to associated timeout policy '' [ 103.286566][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 103.299892][ T5984] process 'syz.1.10' launched '/dev/fd/3' with NULL argv: empty string added [ 103.334593][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 103.472608][ T5154] Bluetooth: hci1: unexpected event 0x23 length: 127 > 13 [ 103.511013][ T5994] bond0: (slave bond_slave_1): Releasing backup interface [ 103.636210][ T6000] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.713685][ T6000] netlink: 342 bytes leftover after parsing attributes in process `syz.3.13'. [ 104.152845][ T5994] netlink: 342 bytes leftover after parsing attributes in process `syz.3.13'. [ 104.202754][ T5994] netlink: 342 bytes leftover after parsing attributes in process `syz.3.13'. [ 104.775560][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 105.291474][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.642275][ T6027] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.756720][ T6027] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 106.467630][ T6032] can: request_module (can-proto-5) failed. [ 107.189252][ T6047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 107.716859][ T6054] block nbd7: not configured, cannot reconfigure [ 107.956617][ T6050] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 109.643174][ T6076] netlink: 186 bytes leftover after parsing attributes in process `syz.3.27'. [ 111.633150][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 111.961187][ T6091] ipvlan0: entered promiscuous mode [ 112.081528][ T6091] ipvlan0: entered allmulticast mode [ 112.087058][ T6091] veth0_vlan: entered allmulticast mode [ 112.707369][ T6110] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 112.726328][ T6110] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 116.910971][ T6144] syz.1.40: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.930158][ T6144] CPU: 1 UID: 0 PID: 6144 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) [ 116.930196][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.930222][ T6144] Call Trace: [ 116.930231][ T6144] [ 116.930243][ T6144] dump_stack_lvl+0x16c/0x1f0 [ 116.930291][ T6144] warn_alloc+0x248/0x3a0 [ 116.930325][ T6144] ? __pfx_warn_alloc+0x10/0x10 [ 116.930360][ T6144] ? __lock_acquire+0x12c2/0x2890 [ 116.930406][ T6144] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 116.930434][ T6144] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 116.930462][ T6144] ? __pfx___might_resched+0x10/0x10 [ 116.930495][ T6144] ? rcu_is_watching+0x12/0xc0 [ 116.930532][ T6144] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 116.930558][ T6144] ? find_held_lock+0x2b/0x80 [ 116.930589][ T6144] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 116.930615][ T6144] ? tomoyo_path_number_perm+0x295/0x580 [ 116.930653][ T6144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.930681][ T6144] ? __pfx___mutex_lock+0x10/0x10 [ 116.930710][ T6144] ? tomoyo_path_number_perm+0x18d/0x580 [ 116.930748][ T6144] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.930781][ T6144] ? futex_wake+0x1ad/0x530 [ 116.930833][ T6144] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 116.930859][ T6144] __vmalloc_node_noprof+0xad/0xf0 [ 116.930886][ T6144] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 116.930916][ T6144] dvb_dvr_do_ioctl+0x15d/0x290 [ 116.930951][ T6144] dvb_usercopy+0x167/0x340 [ 116.930976][ T6144] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 116.931007][ T6144] ? __pfx_dvb_usercopy+0x10/0x10 [ 116.931052][ T6144] ? __fget_files+0x20e/0x3c0 [ 116.931100][ T6144] dvb_dvr_ioctl+0x29/0x40 [ 116.931126][ T6144] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 116.931154][ T6144] __x64_sys_ioctl+0x18e/0x210 [ 116.931193][ T6144] do_syscall_64+0xcd/0xf80 [ 116.931231][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.931258][ T6144] RIP: 0033:0x7f722138f7c9 [ 116.931283][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.931306][ T6144] RSP: 002b:00007f721f5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.931332][ T6144] RAX: ffffffffffffffda RBX: 00007f72215e5fa0 RCX: 00007f722138f7c9 [ 116.931350][ T6144] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000004 [ 116.931366][ T6144] RBP: 00007f7221413f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.931382][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.931398][ T6144] R13: 00007f72215e6038 R14: 00007f72215e5fa0 R15: 00007ffc90e25ce8 [ 116.931438][ T6144] [ 116.932375][ T6144] Mem-Info: [ 117.198647][ T6144] active_anon:5747 inactive_anon:0 isolated_anon:0 [ 117.198647][ T6144] active_file:2400 inactive_file:40286 isolated_file:0 [ 117.198647][ T6144] unevictable:768 dirty:345 writeback:0 [ 117.198647][ T6144] slab_reclaimable:10270 slab_unreclaimable:92571 [ 117.198647][ T6144] mapped:26607 shmem:1409 pagetables:1068 [ 117.198647][ T6144] sec_pagetables:0 bounce:0 [ 117.198647][ T6144] kernel_misc_reclaimable:0 [ 117.198647][ T6144] free:1342583 free_pcp:15652 free_cma:0 [ 117.285277][ T6144] Node 0 active_anon:23096kB inactive_anon:0kB active_file:9600kB inactive_file:160944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106488kB dirty:1380kB writeback:0kB shmem:4152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11772kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.349835][ T6144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.449771][ T6144] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.489941][ T6144] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 117.508844][ T6144] Node 0 DMA32 free:1477084kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23996kB inactive_anon:0kB active_file:9600kB inactive_file:160944kB unevictable:1536kB writepending:1380kB zspages:0kB present:3129332kB managed:2540992kB mlocked:0kB bounce:0kB free_pcp:41668kB local_pcp:20308kB free_cma:0kB [ 117.604952][ T6144] lowmem_reserve[]: 0 0 1 1 1 [ 117.617297][ T6151] FAULT_INJECTION: forcing a failure. [ 117.617297][ T6151] name failslab, interval 1, probability 0, space 0, times 1 [ 117.639792][ T6144] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.683710][ T6151] CPU: 0 UID: 0 PID: 6151 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 117.683747][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.683763][ T6151] Call Trace: [ 117.683773][ T6151] [ 117.683785][ T6151] dump_stack_lvl+0x16c/0x1f0 [ 117.683837][ T6151] should_fail_ex+0x512/0x640 [ 117.683870][ T6151] ? kmem_cache_alloc_noprof+0x62/0x770 [ 117.683908][ T6151] should_failslab+0xc2/0x120 [ 117.683951][ T6151] kmem_cache_alloc_noprof+0x83/0x770 [ 117.683992][ T6151] ? alloc_empty_file+0x55/0x1e0 [ 117.684027][ T6151] ? alloc_empty_file+0x55/0x1e0 [ 117.684051][ T6151] alloc_empty_file+0x55/0x1e0 [ 117.684080][ T6151] alloc_file_pseudo+0x13a/0x230 [ 117.684111][ T6151] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 117.684143][ T6151] ? do_raw_spin_unlock+0x172/0x230 [ 117.684177][ T6151] __anon_inode_getfile+0xe8/0x280 [ 117.684209][ T6151] anon_inode_getfile_fmode+0x37/0xa0 [ 117.684237][ T6151] do_eventfd+0x156/0x390 [ 117.684264][ T6151] ? rcu_is_watching+0x12/0xc0 [ 117.684297][ T6151] __x64_sys_eventfd+0x32/0x50 [ 117.684327][ T6151] do_syscall_64+0xcd/0xf80 [ 117.684354][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.684379][ T6151] RIP: 0033:0x7fc0e3f8f7c9 [ 117.684401][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.684424][ T6151] RSP: 002b:00007fc0e4df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 117.684450][ T6151] RAX: ffffffffffffffda RBX: 00007fc0e41e6090 RCX: 00007fc0e3f8f7c9 [ 117.684467][ T6151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 117.684482][ T6151] RBP: 00007fc0e4013f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.684498][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.684514][ T6151] R13: 00007fc0e41e6128 R14: 00007fc0e41e6090 R15: 00007fff08b81f78 [ 117.684551][ T6151] [ 117.904859][ T6144] lowmem_reserve[]: 0 0 0 0 0 [ 117.943645][ T6144] Node 1 Normal free:3878836kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20544kB local_pcp:10144kB free_cma:0kB [ 118.129836][ T6144] lowmem_reserve[]: 0 0 0 0 0 [ 118.137028][ T6144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.150199][ T6144] Node 0 DMA32: 1314*4kB (UME) 608*8kB (UME) 222*16kB (UM) 175*32kB (UME) 58*64kB (UM) 44*128kB (UM) 24*256kB (UME) 13*512kB (UME) 7*1024kB (UME) 2*2048kB (UM) 348*4096kB (M) = 1478088kB [ 118.225894][ T6144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.269093][ T6144] Node 1 Normal: 187*4kB (UE) 33*8kB (UME) 48*16kB (UME) 78*32kB (UME) 22*64kB (UME) 7*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3878836kB [ 118.290150][ T6144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.306594][ T6144] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 118.399778][ T6144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.409580][ T6144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.490942][ T6144] 44122 total pagecache pages [ 118.495839][ T6144] 0 pages in swap cache [ 118.501855][ T6144] Free swap = 124996kB [ 118.506064][ T6144] Total swap = 124996kB [ 118.553098][ T6144] 2097051 pages RAM [ 118.557074][ T6144] 0 pages HighMem/MovableOnly [ 118.578638][ T6144] 429777 pages reserved [ 118.584290][ T6144] 0 pages cma reserved [ 119.359935][ T6169] input: ¶š9ã%v”ûJ,6Ö‘ as /devices/virtual/input/input7 [ 119.849192][ T6180] bond0: invalid ARP target specified [ 121.755920][ T6201] wlan1: mtu less than device minimum [ 126.410996][ T6274] Scaler: ================= START STATUS ================= [ 126.464221][ T6274] Scaler: ================== END STATUS ================== [ 126.778313][ T6277] Console: switching to colour VGA+ 80x25 [ 126.979423][ T6260] ima: policy update failed [ 127.040799][ T30] audit: type=1802 audit(1768639564.729:3): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.65" res=0 errno=0 [ 128.965529][ T30] audit: type=1326 audit(1768639566.649:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.0.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0e3f8f7c9 code=0x0 [ 129.621478][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 137.559072][ T5154] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 138.183876][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.199851][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.308694][ T6366] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 138.351392][ T30] audit: type=1804 audit(1768639576.039:5): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.83" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 140.061945][ T6389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.070771][ T6389] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.155181][ T6389] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.247210][ T6389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.259813][ T6389] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.282161][ T6394] netlink: 302 bytes leftover after parsing attributes in process `syz.3.89'. [ 140.303912][ T6389] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.367161][ T6389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.384382][ T6389] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.460189][ T6389] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.511742][ T6389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.539453][ T6389] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.563768][ T6389] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.930610][ T6396] bond0: option all_slaves_active: invalid value () [ 141.111092][ T6407] netlink: 338 bytes leftover after parsing attributes in process `syz.2.92'. [ 142.099825][ T5154] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.246121][ T6424] FAULT_INJECTION: forcing a failure. [ 142.246121][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 142.260259][ T5154] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.267575][ T6424] CPU: 1 UID: 0 PID: 6424 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 142.267600][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.267610][ T6424] Call Trace: [ 142.267615][ T6424] [ 142.267622][ T6424] dump_stack_lvl+0x16c/0x1f0 [ 142.267654][ T6424] should_fail_ex+0x512/0x640 [ 142.267675][ T6424] ? __kmalloc_cache_noprof+0x5f/0x800 [ 142.267698][ T6424] should_failslab+0xc2/0x120 [ 142.267726][ T6424] __kmalloc_cache_noprof+0x80/0x800 [ 142.267746][ T6424] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 142.267777][ T6424] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 142.267803][ T6424] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 142.267829][ T6424] drm_atomic_get_connector_state+0x3f8/0x900 [ 142.267854][ T6424] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 142.267876][ T6424] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 142.267897][ T6424] ? modeset_lock+0x114/0x6d0 [ 142.267918][ T6424] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 142.267941][ T6424] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 142.267972][ T6424] ? drm_client_rotation+0x4da/0x6a0 [ 142.267997][ T6424] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 142.268025][ T6424] ? __mutex_lock+0x27b/0x1ca0 [ 142.268042][ T6424] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 142.268064][ T6424] ? trace_contention_end+0xdd/0x110 [ 142.268104][ T6424] drm_client_modeset_commit_locked+0x14d/0x580 [ 142.268131][ T6424] drm_client_modeset_commit+0x4f/0x80 [ 142.268155][ T6424] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 142.268180][ T6424] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 142.268205][ T6424] drm_fbdev_client_restore+0x1b/0x30 [ 142.268222][ T6424] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 142.268239][ T6424] drm_client_dev_restore+0x200/0x2a0 [ 142.268265][ T6424] drm_release+0x2c6/0x360 [ 142.268286][ T6424] ? __pfx_drm_release+0x10/0x10 [ 142.268305][ T6424] __fput+0x402/0xb70 [ 142.268327][ T6424] task_work_run+0x150/0x240 [ 142.268351][ T6424] ? __pfx_task_work_run+0x10/0x10 [ 142.268370][ T6424] ? __do_sys_close_range+0x278/0x730 [ 142.268402][ T6424] exit_to_user_mode_loop+0xfb/0x540 [ 142.268426][ T6424] do_syscall_64+0x4ee/0xf80 [ 142.268443][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.268460][ T6424] RIP: 0033:0x7f48fcb8f7c9 [ 142.268475][ T6424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.268491][ T6424] RSP: 002b:00007f48fd9dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 142.268507][ T6424] RAX: 0000000000000000 RBX: 00007f48fcde5fa0 RCX: 00007f48fcb8f7c9 [ 142.268517][ T6424] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 142.268526][ T6424] RBP: 00007f48fcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.268535][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.268545][ T6424] R13: 00007f48fcde6038 R14: 00007f48fcde5fa0 R15: 00007ffc6f04ae58 [ 142.268567][ T6424] [ 142.580244][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.586657][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.630084][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 142.964027][ T6424] hsr_slave_0: left promiscuous mode [ 142.998059][ T6424] hsr_slave_1: left promiscuous mode [ 144.179969][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.340265][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.669747][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.677277][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.084746][ T6452] netlink: 346 bytes leftover after parsing attributes in process `syz.0.101'. [ 145.789555][ T6473] mmap: syz.0.104 (6473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.898255][ T6470] NFSD: Failed to start, no listeners configured. [ 146.260848][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.429831][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.566808][ T6475] FAULT_INJECTION: forcing a failure. [ 146.566808][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 146.620191][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 146.620233][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.620250][ T6475] Call Trace: [ 146.620259][ T6475] [ 146.620271][ T6475] dump_stack_lvl+0x16c/0x1f0 [ 146.620323][ T6475] should_fail_ex+0x512/0x640 [ 146.620355][ T6475] ? __kmalloc_cache_noprof+0x5f/0x800 [ 146.620391][ T6475] should_failslab+0xc2/0x120 [ 146.620435][ T6475] __kmalloc_cache_noprof+0x80/0x800 [ 146.620465][ T6475] ? __sys_socket+0xac/0x260 [ 146.620493][ T6475] ? fput+0x70/0xf0 [ 146.620517][ T6475] ? do_eventfd+0x67/0x390 [ 146.620557][ T6475] ? do_eventfd+0x67/0x390 [ 146.620590][ T6475] do_eventfd+0x67/0x390 [ 146.620622][ T6475] ? rcu_is_watching+0x12/0xc0 [ 146.620664][ T6475] __x64_sys_eventfd+0x32/0x50 [ 146.620707][ T6475] do_syscall_64+0xcd/0xf80 [ 146.620739][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.620768][ T6475] RIP: 0033:0x7f48fcb8f7c9 [ 146.620791][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.620819][ T6475] RSP: 002b:00007f48fd9dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 146.620846][ T6475] RAX: ffffffffffffffda RBX: 00007f48fcde5fa0 RCX: 00007f48fcb8f7c9 [ 146.620865][ T6475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 146.620882][ T6475] RBP: 00007f48fcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 146.620898][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.620914][ T6475] R13: 00007f48fcde6038 R14: 00007f48fcde5fa0 R15: 00007ffc6f04ae58 [ 146.620952][ T6475] [ 146.833146][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.833158][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.432046][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 150.690441][ T6532] vivid-003: ================= START STATUS ================= [ 150.729821][ T6532] vivid-003: Radio HW Seek Mode: Bounded [ 150.735858][ T6532] vivid-003: Radio Programmable HW Seek: false [ 150.779962][ T6532] vivid-003: RDS Rx I/O Mode: Block I/O [ 150.832923][ T6532] vivid-003: Generate RBDS Instead of RDS: false [ 150.919942][ T6532] vivid-003: RDS Reception: true [ 150.925224][ T6532] vivid-003: RDS Program Type: 0 inactive [ 151.022339][ T6532] vivid-003: RDS PS Name: inactive [ 151.027595][ T6532] vivid-003: RDS Radio Text: inactive [ 151.043440][ T6532] vivid-003: RDS Traffic Announcement: false inactive [ 151.050397][ T6532] vivid-003: RDS Traffic Program: false inactive [ 151.061425][ T6532] vivid-003: RDS Music: false inactive [ 151.068527][ T6532] vivid-003: ================== END STATUS ================== [ 151.846629][ T6537] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078003500 pfn:0x78002 [ 151.890037][ T6537] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.922630][ T6537] memcg:ffff888078fcfe01 [ 151.939621][ T6537] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 151.963696][ T6537] page_type: f5(slab) [ 152.003573][ T6537] raw: 00fff00000000040 ffff888035130280 ffffea0001f90000 0000000000000004 [ 152.050612][ T6537] raw: ffff888078003500 0000000000150007 00000000f5000000 ffff888078fcfe01 [ 152.079812][ T6537] head: 00fff00000000040 ffff888035130280 ffffea0001f90000 0000000000000004 [ 152.110029][ T6537] head: ffff888078003500 0000000000150007 00000000f5000000 ffff888078fcfe01 [ 152.129817][ T6537] head: 00fff00000000001 ffffea0001e00081 00000000ffffffff 00000000ffffffff [ 152.138577][ T6537] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 152.179891][ T6537] page dumped because: unmovable page [ 152.201797][ T6537] page_owner tracks the page as allocated [ 152.218806][ T6537] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6088, tgid 6088 (syz.3.30), ts 111241430877, free_ts 111172024192 [ 152.255988][ T6537] post_alloc_hook+0x1af/0x220 [ 152.275290][ T6537] get_page_from_freelist+0xd0b/0x31a0 [ 152.285451][ T6537] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 152.314493][ T6537] alloc_pages_mpol+0x1fb/0x550 [ 152.320466][ T6537] new_slab+0x2c3/0x430 [ 152.326930][ T6537] ___slab_alloc+0xe18/0x1c90 [ 152.359900][ T6537] __slab_alloc.constprop.0+0x63/0x110 [ 152.365490][ T6537] kmem_cache_alloc_noprof+0x44d/0x770 [ 152.421855][ T6537] alloc_pid+0xd8/0x13c0 [ 152.436439][ T6537] copy_process+0x4027/0x7430 [ 152.456724][ T6537] kernel_clone+0xfc/0x910 [ 152.471701][ T6537] __do_sys_clone3+0x212/0x290 [ 152.476650][ T6537] do_syscall_64+0xcd/0xf80 [ 152.541117][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.547117][ T6537] page last free pid 15 tgid 15 stack trace: [ 152.639910][ T6537] __free_frozen_pages+0x7df/0x1170 [ 152.655488][ T6537] rcu_core+0x79c/0x15f0 [ 152.679742][ T6537] handle_softirqs+0x219/0x950 [ 152.684607][ T6537] run_ksoftirqd+0x3a/0x60 [ 152.719761][ T6537] smpboot_thread_fn+0x3f7/0xae0 [ 152.740001][ T6537] kthread+0x3c5/0x780 [ 152.744151][ T6537] ret_from_fork+0x983/0xb10 [ 152.769468][ T6537] ret_from_fork_asm+0x1a/0x30 [ 153.359446][ T6565] futex_wake_op: syz.0.122 tries to shift op by -2048; fix this program [ 153.395311][ T6565] futex_wake_op: syz.0.122 tries to shift op by -2048; fix this program [ 153.448437][ T6565] 0x000000000001-0x000000020000 : "" [ 153.479215][ T6568] FAULT_INJECTION: forcing a failure. [ 153.479215][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 153.495162][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.3.125 Not tainted syzkaller #0 PREEMPT(full) [ 153.495186][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.495196][ T6568] Call Trace: [ 153.495202][ T6568] [ 153.495209][ T6568] dump_stack_lvl+0x16c/0x1f0 [ 153.495242][ T6568] should_fail_ex+0x512/0x640 [ 153.495262][ T6568] ? kmem_cache_alloc_noprof+0x62/0x770 [ 153.495285][ T6568] should_failslab+0xc2/0x120 [ 153.495312][ T6568] kmem_cache_alloc_noprof+0x83/0x770 [ 153.495331][ T6568] ? __kernfs_new_node+0xd2/0x9b0 [ 153.495355][ T6568] ? __kernfs_new_node+0xd2/0x9b0 [ 153.495373][ T6568] __kernfs_new_node+0xd2/0x9b0 [ 153.495395][ T6568] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.495420][ T6568] ? find_held_lock+0x2b/0x80 [ 153.495442][ T6568] ? kernfs_root+0xee/0x2a0 [ 153.495465][ T6568] kernfs_new_node+0x13c/0x1e0 [ 153.495491][ T6568] __kernfs_create_file+0x53/0x350 [ 153.495519][ T6568] cgroup_addrm_files+0x546/0xc20 [ 153.495550][ T6568] ? __xa_store+0x1dc/0x2e0 [ 153.495567][ T6568] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 153.495590][ T6568] ? __pfx___xa_store+0x10/0x10 [ 153.495614][ T6568] ? do_raw_spin_unlock+0x172/0x230 [ 153.495638][ T6568] css_populate_dir+0x169/0x570 [ 153.495672][ T6568] cgroup_apply_control_enable+0x3f3/0xbb0 [ 153.495703][ T6568] cgroup_mkdir+0x5d9/0x12d0 [ 153.495730][ T6568] ? __pfx_cgroup_mkdir+0x10/0x10 [ 153.495755][ T6568] kernfs_iop_mkdir+0x111/0x190 [ 153.495781][ T6568] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 153.495800][ T6568] vfs_mkdir+0x731/0xb60 [ 153.495823][ T6568] do_mkdirat+0x442/0x5e0 [ 153.495850][ T6568] ? __pfx_do_mkdirat+0x10/0x10 [ 153.495875][ T6568] ? strncpy_from_user+0x203/0x2e0 [ 153.495896][ T6568] ? getname_flags.part.0+0x1c5/0x550 [ 153.495917][ T6568] __x64_sys_mkdir+0xef/0x140 [ 153.495943][ T6568] do_syscall_64+0xcd/0xf80 [ 153.495961][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.495977][ T6568] RIP: 0033:0x7ff67af8f7c9 [ 153.495993][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.496009][ T6568] RSP: 002b:00007ff67beda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 153.496025][ T6568] RAX: ffffffffffffffda RBX: 00007ff67b1e6090 RCX: 00007ff67af8f7c9 [ 153.496036][ T6568] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 153.496045][ T6568] RBP: 00007ff67b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.496055][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.496064][ T6568] R13: 00007ff67b1e6128 R14: 00007ff67b1e6090 R15: 00007ffebf2b2cd8 [ 153.496086][ T6568] [ 153.496110][ T6568] cgroup: cgroup_addrm_files: failed to add usage_in_bytes, err=-12 [ 154.127623][ T6565] ftl_cs: FTL header corrupt! [ 155.640262][ T6586] FAULT_INJECTION: forcing a failure. [ 155.640262][ T6586] name failslab, interval 1, probability 0, space 0, times 0 [ 155.672321][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.1.128 Not tainted syzkaller #0 PREEMPT(full) [ 155.672361][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.672377][ T6586] Call Trace: [ 155.672386][ T6586] [ 155.672398][ T6586] dump_stack_lvl+0x16c/0x1f0 [ 155.672446][ T6586] should_fail_ex+0x512/0x640 [ 155.672477][ T6586] ? kmem_cache_alloc_noprof+0x62/0x770 [ 155.672516][ T6586] should_failslab+0xc2/0x120 [ 155.672557][ T6586] kmem_cache_alloc_noprof+0x83/0x770 [ 155.672587][ T6586] ? stack_depot_save_flags+0x29/0x9b0 [ 155.672620][ T6586] ? alloc_empty_file+0x55/0x1e0 [ 155.672657][ T6586] ? alloc_empty_file+0x55/0x1e0 [ 155.672684][ T6586] ? kasan_save_track+0x14/0x30 [ 155.672720][ T6586] alloc_empty_file+0x55/0x1e0 [ 155.672750][ T6586] path_openat+0xde/0x3140 [ 155.672789][ T6586] ? do_syscall_64+0xcd/0xf80 [ 155.672814][ T6586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.672865][ T6586] ? __pfx_path_openat+0x10/0x10 [ 155.672922][ T6586] do_filp_open+0x20b/0x470 [ 155.672966][ T6586] ? __pfx_do_filp_open+0x10/0x10 [ 155.673037][ T6586] ? alloc_fd+0x471/0x7d0 [ 155.673090][ T6586] do_sys_openat2+0x121/0x290 [ 155.673122][ T6586] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.673167][ T6586] __x64_sys_openat+0x174/0x210 [ 155.673199][ T6586] ? __pfx___x64_sys_openat+0x10/0x10 [ 155.673249][ T6586] do_syscall_64+0xcd/0xf80 [ 155.673279][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.673307][ T6586] RIP: 0033:0x7f722138f7c9 [ 155.673331][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.673358][ T6586] RSP: 002b:00007f721f5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.673386][ T6586] RAX: ffffffffffffffda RBX: 00007f72215e5fa0 RCX: 00007f722138f7c9 [ 155.673404][ T6586] RDX: 0000000000490182 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 155.673421][ T6586] RBP: 00007f7221413f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.673438][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.673454][ T6586] R13: 00007f72215e6038 R14: 00007f72215e5fa0 R15: 00007ffc90e25ce8 [ 155.673490][ T6586] [ 156.254489][ T6589] FAULT_INJECTION: forcing a failure. [ 156.254489][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 156.280947][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 156.280974][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.280985][ T6589] Call Trace: [ 156.280992][ T6589] [ 156.280998][ T6589] dump_stack_lvl+0x16c/0x1f0 [ 156.281031][ T6589] should_fail_ex+0x512/0x640 [ 156.281052][ T6589] ? kmem_cache_alloc_noprof+0x62/0x770 [ 156.281075][ T6589] should_failslab+0xc2/0x120 [ 156.281101][ T6589] kmem_cache_alloc_noprof+0x83/0x770 [ 156.281120][ T6589] ? alloc_empty_file+0x55/0x1e0 [ 156.281143][ T6589] ? alloc_empty_file+0x55/0x1e0 [ 156.281159][ T6589] alloc_empty_file+0x55/0x1e0 [ 156.281178][ T6589] alloc_file_pseudo+0x13a/0x230 [ 156.281197][ T6589] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 156.281217][ T6589] ? do_raw_spin_unlock+0x172/0x230 [ 156.281239][ T6589] __anon_inode_getfile+0xe8/0x280 [ 156.281259][ T6589] anon_inode_getfile_fmode+0x37/0xa0 [ 156.281277][ T6589] do_eventfd+0x156/0x390 [ 156.281296][ T6589] ? rcu_is_watching+0x12/0xc0 [ 156.281319][ T6589] __x64_sys_eventfd+0x32/0x50 [ 156.281339][ T6589] do_syscall_64+0xcd/0xf80 [ 156.281357][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.281384][ T6589] RIP: 0033:0x7f48fcb8f7c9 [ 156.281399][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.281416][ T6589] RSP: 002b:00007f48fd9dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 156.281433][ T6589] RAX: ffffffffffffffda RBX: 00007f48fcde5fa0 RCX: 00007f48fcb8f7c9 [ 156.281444][ T6589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 156.281454][ T6589] RBP: 00007f48fcc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 156.281464][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.281474][ T6589] R13: 00007f48fcde6038 R14: 00007f48fcde5fa0 R15: 00007ffc6f04ae58 [ 156.281496][ T6589] [ 158.149190][ T6617] vivid-007: ================= START STATUS ================= [ 158.157276][ T6617] vivid-007: Generate PTS: true [ 158.167904][ T6617] vivid-007: Generate SCR: true [ 158.201252][ T6617] tpg source WxH: 320x240 (Y'CbCr) [ 158.206569][ T6617] tpg field: 1 [ 158.259328][ T6617] tpg crop: (0,0)/320x240 [ 158.315130][ T6617] tpg compose: (0,0)/320x240 [ 158.335623][ T6617] tpg colorspace: 8 [ 158.339605][ T6617] tpg transfer function: 0/0 [ 158.346534][ T6617] tpg Y'CbCr encoding: 0/0 [ 158.421976][ T6617] tpg quantization: 0/0 [ 158.492828][ T6617] tpg RGB range: 0/2 [ 158.496797][ T6617] vivid-007: ================== END STATUS ================== [ 159.410621][ T6635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 159.529215][ T6635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.590521][ T6635] bond0 (unregistering): Released all slaves [ 160.219578][ T30] audit: type=1800 audit(1768639597.889:6): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.135" name="lu_gp_id" dev="configfs" ino=11712 res=0 errno=0 [ 160.562399][ T6640] binder: 6638:6640 ioctl 4018620d ffffffffffffffff returned -22 [ 160.801624][ T6650] random: crng reseeded on system resumption [ 161.272026][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 162.062504][ T30] audit: type=1804 audit(1768639599.749:7): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.143" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 162.477775][ T10] smpboot: CPU 1 is now offline [ 162.565128][ T6664] FAULT_INJECTION: forcing a failure. [ 162.565128][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 162.651982][ T6664] CPU: 0 UID: 0 PID: 6664 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(full) [ 162.652008][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.652018][ T6664] Call Trace: [ 162.652024][ T6664] [ 162.652031][ T6664] dump_stack_lvl+0x16c/0x1f0 [ 162.652065][ T6664] should_fail_ex+0x512/0x640 [ 162.652085][ T6664] ? __kmalloc_node_noprof+0xcd/0x930 [ 162.652111][ T6664] should_failslab+0xc2/0x120 [ 162.652136][ T6664] __kmalloc_node_noprof+0xee/0x930 [ 162.652159][ T6664] ? alloc_slab_obj_exts+0x43/0xf0 [ 162.652180][ T6664] ? alloc_slab_obj_exts+0x43/0xf0 [ 162.652197][ T6664] alloc_slab_obj_exts+0x43/0xf0 [ 162.652216][ T6664] __memcg_slab_post_alloc_hook+0x24b/0x880 [ 162.652238][ T6664] ? kasan_save_track+0x14/0x30 [ 162.652262][ T6664] kmem_cache_alloc_noprof+0x589/0x770 [ 162.652281][ T6664] ? futex_wait+0x110/0x380 [ 162.652302][ T6664] ? do_epoll_ctl+0x1170/0x3790 [ 162.652333][ T6664] ? do_epoll_ctl+0x1170/0x3790 [ 162.652357][ T6664] do_epoll_ctl+0x1170/0x3790 [ 162.652384][ T6664] ? ksys_write+0x190/0x250 [ 162.652413][ T6664] ? __pfx_do_epoll_ctl+0x10/0x10 [ 162.652437][ T6664] ? find_held_lock+0x2b/0x80 [ 162.652458][ T6664] ? __might_fault+0xe3/0x190 [ 162.652477][ T6664] ? __might_fault+0xe3/0x190 [ 162.652503][ T6664] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 162.652517][ T6664] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 162.652533][ T6664] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 162.652565][ T6664] do_syscall_64+0xcd/0xf80 [ 162.652583][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.652609][ T6664] RIP: 0033:0x7ff67af8f7c9 [ 162.652623][ T6664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.652640][ T6664] RSP: 002b:00007ff67befb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 162.652656][ T6664] RAX: ffffffffffffffda RBX: 00007ff67b1e5fa0 RCX: 00007ff67af8f7c9 [ 162.652667][ T6664] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 162.652677][ T6664] RBP: 00007ff67b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 162.652687][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.652696][ T6664] R13: 00007ff67b1e6038 R14: 00007ff67b1e5fa0 R15: 00007ffebf2b2cd8 [ 162.652718][ T6664] [ 162.900107][ T6672] block nbd7: not configured, cannot reconfigure [ 164.316851][ T30] audit: type=1804 audit(1768639601.989:8): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.154" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 166.087289][ T6725] binder: 6724:6725 ioctl c018620c 0 returned -22 [ 166.190081][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.156'. [ 167.420530][ T6737] bridge_slave_1: left allmulticast mode [ 167.456716][ T6737] bridge_slave_1: left promiscuous mode [ 167.486656][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.196796][ T6761] binder: 6753:6761 ioctl 4018620d ffffffffffffffff returned -22 [ 170.927928][ T30] audit: type=1804 audit(1768639608.609:9): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.168" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 171.232239][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 171.750198][ T6808] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.832705][ T6808] netlink: 25 bytes leftover after parsing attributes in process `syz.0.173'. [ 172.104713][ T6815] __vm_enough_memory: pid: 6815, comm: syz.0.174, bytes: 4398046511104 not enough memory for the allocation [ 172.173274][ T6815] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.839024][ T6844] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 175.162919][ T30] audit: type=1804 audit(1768639612.849:10): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.180" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 176.025089][ T6853] FAULT_INJECTION: forcing a failure. [ 176.025089][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 176.095473][ T6853] CPU: 0 UID: 0 PID: 6853 Comm: syz.0.181 Not tainted syzkaller #0 PREEMPT(full) [ 176.095499][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.095508][ T6853] Call Trace: [ 176.095514][ T6853] [ 176.095521][ T6853] dump_stack_lvl+0x16c/0x1f0 [ 176.095554][ T6853] should_fail_ex+0x512/0x640 [ 176.095575][ T6853] ? kmem_cache_alloc_noprof+0x62/0x770 [ 176.095598][ T6853] should_failslab+0xc2/0x120 [ 176.095623][ T6853] kmem_cache_alloc_noprof+0x83/0x770 [ 176.095642][ T6853] ? futex_wait+0x110/0x380 [ 176.095664][ T6853] ? do_epoll_ctl+0x24d7/0x3790 [ 176.095694][ T6853] ? do_epoll_ctl+0x24d7/0x3790 [ 176.095718][ T6853] do_epoll_ctl+0x24d7/0x3790 [ 176.095751][ T6853] ? __pfx_do_epoll_ctl+0x10/0x10 [ 176.095775][ T6853] ? find_held_lock+0x2b/0x80 [ 176.095796][ T6853] ? __might_fault+0xe3/0x190 [ 176.095814][ T6853] ? __might_fault+0xe3/0x190 [ 176.095841][ T6853] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 176.095854][ T6853] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 176.095870][ T6853] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 176.095903][ T6853] do_syscall_64+0xcd/0xf80 [ 176.095920][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.095937][ T6853] RIP: 0033:0x7fc0e3f8f7c9 [ 176.095951][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.095967][ T6853] RSP: 002b:00007fc0e4e19038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 176.095983][ T6853] RAX: ffffffffffffffda RBX: 00007fc0e41e5fa0 RCX: 00007fc0e3f8f7c9 [ 176.095994][ T6853] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 176.096003][ T6853] RBP: 00007fc0e4013f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.096012][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.096021][ T6853] R13: 00007fc0e41e6038 R14: 00007fc0e41e5fa0 R15: 00007fff08b81f78 [ 176.096042][ T6853] [ 177.113199][ T6861] FAULT_INJECTION: forcing a failure. [ 177.113199][ T6861] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.168439][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT(full) [ 177.168463][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.168473][ T6861] Call Trace: [ 177.168479][ T6861] [ 177.168485][ T6861] dump_stack_lvl+0x16c/0x1f0 [ 177.168517][ T6861] should_fail_ex+0x512/0x640 [ 177.168541][ T6861] _copy_to_user+0x32/0xd0 [ 177.168563][ T6861] simple_read_from_buffer+0xcb/0x170 [ 177.168589][ T6861] proc_fail_nth_read+0x197/0x240 [ 177.168618][ T6861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.168648][ T6861] ? rw_verify_area+0xcf/0x6c0 [ 177.168669][ T6861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.168725][ T6861] vfs_read+0x1e4/0xcf0 [ 177.168750][ T6861] ? __pfx___mutex_lock+0x10/0x10 [ 177.168769][ T6861] ? __pfx_vfs_read+0x10/0x10 [ 177.168798][ T6861] ? __fget_files+0x20e/0x3c0 [ 177.168829][ T6861] ksys_read+0x12a/0x250 [ 177.168853][ T6861] ? __pfx_ksys_read+0x10/0x10 [ 177.168883][ T6861] do_syscall_64+0xcd/0xf80 [ 177.168900][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.168917][ T6861] RIP: 0033:0x7fc0e3f8e1dc [ 177.168932][ T6861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.168948][ T6861] RSP: 002b:00007fc0e4e19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.168964][ T6861] RAX: ffffffffffffffda RBX: 00007fc0e41e5fa0 RCX: 00007fc0e3f8e1dc [ 177.168975][ T6861] RDX: 000000000000000f RSI: 00007fc0e4e190a0 RDI: 0000000000000004 [ 177.168985][ T6861] RBP: 00007fc0e4e19090 R08: 0000000000000000 R09: 0000000000000000 [ 177.168994][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.169004][ T6861] R13: 00007fc0e41e6038 R14: 00007fc0e41e5fa0 R15: 00007fff08b81f78 [ 177.169025][ T6861] [ 178.453499][ T6866] NFSD: Failed to start, no listeners configured. [ 179.102253][ T6882] usb usb36: usbfs: process 6882 (syz.3.188) did not claim interface 0 before use [ 180.288761][ T6894] FAULT_INJECTION: forcing a failure. [ 180.288761][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 180.378422][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.1.192 Not tainted syzkaller #0 PREEMPT(full) [ 180.378449][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.378459][ T6894] Call Trace: [ 180.378465][ T6894] [ 180.378472][ T6894] dump_stack_lvl+0x16c/0x1f0 [ 180.378503][ T6894] should_fail_ex+0x512/0x640 [ 180.378524][ T6894] ? kmem_cache_alloc_noprof+0x62/0x770 [ 180.378547][ T6894] should_failslab+0xc2/0x120 [ 180.378572][ T6894] kmem_cache_alloc_noprof+0x83/0x770 [ 180.378592][ T6894] ? ptlock_alloc+0x1f/0x70 [ 180.378613][ T6894] ? ptlock_alloc+0x1f/0x70 [ 180.378629][ T6894] ptlock_alloc+0x1f/0x70 [ 180.378646][ T6894] pte_alloc_one+0x84/0x3d0 [ 180.378670][ T6894] do_fault+0x8b8/0x1ad0 [ 180.378706][ T6894] ? __pfx_filemap_map_pages+0x10/0x10 [ 180.378726][ T6894] ? __pmd_alloc+0x6aa/0x9c0 [ 180.378753][ T6894] __handle_mm_fault+0x1919/0x2bb0 [ 180.378776][ T6894] ? __pfx___handle_mm_fault+0x10/0x10 [ 180.378806][ T6894] ? find_vma+0xbf/0x140 [ 180.378828][ T6894] ? __pfx_find_vma+0x10/0x10 [ 180.378854][ T6894] handle_mm_fault+0x3fe/0xad0 [ 180.378875][ T6894] do_user_addr_fault+0x7a6/0x1370 [ 180.378898][ T6894] ? rcu_is_watching+0x12/0xc0 [ 180.378924][ T6894] exc_page_fault+0x64/0xc0 [ 180.378949][ T6894] asm_exc_page_fault+0x26/0x30 [ 180.378965][ T6894] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 180.378987][ T6894] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 180.379002][ T6894] RSP: 0018:ffffc900034c7da0 EFLAGS: 00050216 [ 180.379017][ T6894] RAX: 0000000000000001 RBX: 0000000000001298 RCX: 0000000000000020 [ 180.379028][ T6894] RDX: fffff52000698fcc RSI: 0000000000001298 RDI: ffffc900034c7e40 [ 180.379038][ T6894] RBP: 0000000000000020 R08: 0000000000000001 R09: fffff52000698fcb [ 180.379048][ T6894] R10: ffffc900034c7e5f R11: ffff888027e966b0 R12: 0000000000000000 [ 180.379059][ T6894] R13: ffffc900034c7e40 R14: ffffc900034c7e40 R15: dffffc0000000000 [ 180.379080][ T6894] _copy_from_user+0x98/0xd0 [ 180.379101][ T6894] do_fcntl+0x410/0x1660 [ 180.379121][ T6894] ? __pfx_do_fcntl+0x10/0x10 [ 180.379146][ T6894] ? tomoyo_file_fcntl+0x6c/0xc0 [ 180.379165][ T6894] __x64_sys_fcntl+0x163/0x200 [ 180.379185][ T6894] do_syscall_64+0xcd/0xf80 [ 180.379201][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.379217][ T6894] RIP: 0033:0x7f722138f7c9 [ 180.379231][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.379246][ T6894] RSP: 002b:00007f721f5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 180.379260][ T6894] RAX: ffffffffffffffda RBX: 00007f72215e5fa0 RCX: 00007f722138f7c9 [ 180.379270][ T6894] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 000000000000000b [ 180.379279][ T6894] RBP: 00007f7221413f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.379289][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.379298][ T6894] R13: 00007f72215e6038 R14: 00007f72215e5fa0 R15: 00007ffc90e25ce8 [ 180.379320][ T6894] [ 182.886098][ T6941] netlink: 56 bytes leftover after parsing attributes in process `syz.0.202'. [ 183.219995][ T5154] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 183.528339][ T6945] FAULT_INJECTION: forcing a failure. [ 183.528339][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 183.582848][ T6953] netlink: 186 bytes leftover after parsing attributes in process `syz.2.205'. [ 183.602386][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 183.602411][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.602421][ T6945] Call Trace: [ 183.602427][ T6945] [ 183.602434][ T6945] dump_stack_lvl+0x16c/0x1f0 [ 183.602465][ T6945] should_fail_ex+0x512/0x640 [ 183.602486][ T6945] ? fs_reclaim_acquire+0xae/0x150 [ 183.602514][ T6945] should_failslab+0xc2/0x120 [ 183.602539][ T6945] kmem_cache_alloc_noprof+0x83/0x770 [ 183.602559][ T6945] ? __pfx_map_id_range_down+0x10/0x10 [ 183.602583][ T6945] ? security_inode_alloc+0x3b/0x2b0 [ 183.602605][ T6945] ? security_inode_alloc+0x3b/0x2b0 [ 183.602622][ T6945] security_inode_alloc+0x3b/0x2b0 [ 183.602641][ T6945] inode_init_always_gfp+0xced/0x1040 [ 183.602669][ T6945] alloc_inode+0x86/0x240 [ 183.602687][ T6945] new_inode+0x22/0x1c0 [ 183.602707][ T6945] proc_pid_make_inode+0x22/0x160 [ 183.602728][ T6945] proc_ns_dir_lookup+0x25b/0x390 [ 183.602749][ T6945] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 183.602768][ T6945] lookup_open.isra.0+0x4e2/0x1780 [ 183.602795][ T6945] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 183.602828][ T6945] ? mnt_get_write_access+0x1e9/0x2f0 [ 183.602850][ T6945] path_openat+0x12bb/0x3140 [ 183.602881][ T6945] ? __pfx_path_openat+0x10/0x10 [ 183.602914][ T6945] do_filp_open+0x20b/0x470 [ 183.602939][ T6945] ? __pfx_do_filp_open+0x10/0x10 [ 183.602972][ T6945] ? __pfx_kfree_link+0x10/0x10 [ 183.602998][ T6945] ? alloc_fd+0x471/0x7d0 [ 183.603027][ T6945] do_sys_openat2+0x121/0x290 [ 183.603046][ T6945] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.603073][ T6945] __x64_sys_openat+0x174/0x210 [ 183.603092][ T6945] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.603119][ T6945] do_syscall_64+0xcd/0xf80 [ 183.603137][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.603154][ T6945] RIP: 0033:0x7ff67af8e010 [ 183.603168][ T6945] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 183.603184][ T6945] RSP: 002b:00007ff67befaf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 183.603200][ T6945] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff67af8e010 [ 183.603211][ T6945] RDX: 0000000000000002 RSI: 00007ff67befafa0 RDI: 00000000ffffff9c [ 183.603220][ T6945] RBP: 00007ff67befafa0 R08: 0000000000000000 R09: 0000000000000000 [ 183.603230][ T6945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 183.603239][ T6945] R13: 00007ff67b1e6038 R14: 00007ff67b1e5fa0 R15: 00007ffebf2b2cd8 [ 183.603261][ T6945] [ 186.704329][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'. [ 189.727307][ T7039] blktrace: Concurrent blktraces are not allowed on loop2 [ 190.008064][ T7045] syz.3.219 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.859898][ T7059] netlink: 186 bytes leftover after parsing attributes in process `syz.0.221'. [ 192.445753][ T7077] hub 1-0:1.0: USB hub found [ 192.471073][ T7077] hub 1-0:1.0: 1 port detected [ 193.425355][ T7096] FAULT_INJECTION: forcing a failure. [ 193.425355][ T7096] name fail_futex, interval 1, probability 0, space 0, times 1 [ 193.488186][ T7096] CPU: 0 UID: 0 PID: 7096 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 193.488213][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.488222][ T7096] Call Trace: [ 193.488229][ T7096] [ 193.488236][ T7096] dump_stack_lvl+0x16c/0x1f0 [ 193.488267][ T7096] should_fail_ex+0x512/0x640 [ 193.488291][ T7096] get_futex_key+0x1d0/0x15f0 [ 193.488312][ T7096] ? __pfx_get_futex_key+0x10/0x10 [ 193.488336][ T7096] futex_wake+0xea/0x530 [ 193.488360][ T7096] ? __pfx_futex_wake+0x10/0x10 [ 193.488385][ T7096] ? kasan_quarantine_put+0x10a/0x240 [ 193.488408][ T7096] ? lockdep_hardirqs_on+0x7c/0x110 [ 193.488428][ T7096] do_futex+0x1e3/0x350 [ 193.488447][ T7096] ? __pfx_do_futex+0x10/0x10 [ 193.488466][ T7096] ? mntput+0x10/0x90 [ 193.488487][ T7096] ? do_handle_open+0x2bc/0xd10 [ 193.488521][ T7096] __x64_sys_futex+0x1e0/0x4c0 [ 193.488543][ T7096] ? __pfx___x64_sys_futex+0x10/0x10 [ 193.488563][ T7096] ? xfd_validate_state+0x61/0x180 [ 193.488585][ T7096] do_syscall_64+0xcd/0xf80 [ 193.488602][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.488619][ T7096] RIP: 0033:0x7fc0e3f8f7c9 [ 193.488634][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.488650][ T7096] RSP: 002b:00007fc0e4e190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 193.488668][ T7096] RAX: ffffffffffffffda RBX: 00007fc0e41e5fa8 RCX: 00007fc0e3f8f7c9 [ 193.488678][ T7096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc0e41e5fac [ 193.488688][ T7096] RBP: 00007fc0e41e5fa0 R08: 00007fc0e4e1a000 R09: 0000000000000000 [ 193.488698][ T7096] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 193.488707][ T7096] R13: 00007fc0e41e6038 R14: 00007fff08b81e90 R15: 00007fff08b81f78 [ 193.488728][ T7096] [ 194.785581][ T7124] FAULT_INJECTION: forcing a failure. [ 194.785581][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 194.859812][ T7124] CPU: 0 UID: 0 PID: 7124 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) [ 194.859837][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.859846][ T7124] Call Trace: [ 194.859854][ T7124] [ 194.859861][ T7124] dump_stack_lvl+0x16c/0x1f0 [ 194.859894][ T7124] should_fail_ex+0x512/0x640 [ 194.859915][ T7124] ? kmem_cache_alloc_noprof+0x62/0x770 [ 194.859938][ T7124] should_failslab+0xc2/0x120 [ 194.859965][ T7124] kmem_cache_alloc_noprof+0x83/0x770 [ 194.859985][ T7124] ? getname_flags.part.0+0x4c/0x550 [ 194.860015][ T7124] ? getname_flags.part.0+0x4c/0x550 [ 194.860032][ T7124] getname_flags.part.0+0x4c/0x550 [ 194.860053][ T7124] getname_flags+0x93/0xf0 [ 194.860076][ T7124] do_sys_openat2+0xb9/0x290 [ 194.860095][ T7124] ? __pfx_do_sys_openat2+0x10/0x10 [ 194.860113][ T7124] ? __sock_release+0x20b/0x270 [ 194.860145][ T7124] __x64_sys_openat+0x174/0x210 [ 194.860165][ T7124] ? __pfx___x64_sys_openat+0x10/0x10 [ 194.860192][ T7124] do_syscall_64+0xcd/0xf80 [ 194.860210][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.860235][ T7124] RIP: 0033:0x7f48fcb8e010 [ 194.860250][ T7124] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 194.860266][ T7124] RSP: 002b:00007f48fd9dcfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 194.860284][ T7124] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f48fcb8e010 [ 194.860294][ T7124] RDX: 0000000000000002 RSI: 00007f48fcc1424b RDI: 00000000ffffff9c [ 194.860304][ T7124] RBP: 00007f48fcc1424b R08: 0000000000000000 R09: 00007f48fd9de000 [ 194.860314][ T7124] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 194.860324][ T7124] R13: 00007f48fcde6038 R14: 00007f48fcde5fa0 R15: 00007ffc6f04ae58 [ 194.860345][ T7124] [ 195.651186][ T7126] can0: slcan on ptm0. [ 195.810255][ T7125] can0 (unregistered): slcan off ptm0. [ 196.144884][ T7133] FAULT_INJECTION: forcing a failure. [ 196.144884][ T7133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.231430][ T7133] CPU: 0 UID: 0 PID: 7133 Comm: syz.3.240 Not tainted syzkaller #0 PREEMPT(full) [ 196.231456][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.231465][ T7133] Call Trace: [ 196.231472][ T7133] [ 196.231479][ T7133] dump_stack_lvl+0x16c/0x1f0 [ 196.231511][ T7133] should_fail_ex+0x512/0x640 [ 196.231534][ T7133] _copy_from_user+0x2e/0xd0 [ 196.231554][ T7133] do_handle_open+0x5e3/0xd10 [ 196.231582][ T7133] ? __pfx_do_handle_open+0x10/0x10 [ 196.231606][ T7133] ? __x64_sys_futex+0x1e0/0x4c0 [ 196.231630][ T7133] ? xfd_validate_state+0x61/0x180 [ 196.231652][ T7133] ? do_syscall_64+0xcd/0xf80 [ 196.231666][ T7133] do_syscall_64+0xcd/0xf80 [ 196.231682][ T7133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.231698][ T7133] RIP: 0033:0x7ff67af8f7c9 [ 196.231713][ T7133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.231728][ T7133] RSP: 002b:00007ff67befb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 196.231745][ T7133] RAX: ffffffffffffffda RBX: 00007ff67b1e5fa0 RCX: 00007ff67af8f7c9 [ 196.231756][ T7133] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000005 [ 196.231765][ T7133] RBP: 00007ff67b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.231774][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.231784][ T7133] R13: 00007ff67b1e6038 R14: 00007ff67b1e5fa0 R15: 00007ffebf2b2cd8 [ 196.231804][ T7133] [ 196.751342][ T30] audit: type=1804 audit(1768639634.439:11): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.241" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 197.546346][ T7144] capability: warning: `syz.2.239' uses 32-bit capabilities (legacy support in use) [ 198.143950][ T7160] FAULT_INJECTION: forcing a failure. [ 198.143950][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 198.340672][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 198.340697][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.340706][ T7160] Call Trace: [ 198.340712][ T7160] [ 198.340718][ T7160] dump_stack_lvl+0x16c/0x1f0 [ 198.340751][ T7160] should_fail_ex+0x512/0x640 [ 198.340777][ T7160] ? kmem_cache_alloc_noprof+0x62/0x770 [ 198.340801][ T7160] should_failslab+0xc2/0x120 [ 198.340827][ T7160] kmem_cache_alloc_noprof+0x83/0x770 [ 198.340847][ T7160] ? stack_depot_save_flags+0x29/0x9b0 [ 198.340872][ T7160] ? alloc_empty_file+0x55/0x1e0 [ 198.340894][ T7160] ? alloc_empty_file+0x55/0x1e0 [ 198.340910][ T7160] ? kasan_save_track+0x14/0x30 [ 198.340932][ T7160] alloc_empty_file+0x55/0x1e0 [ 198.340950][ T7160] path_openat+0xde/0x3140 [ 198.340984][ T7160] ? do_syscall_64+0xcd/0xf80 [ 198.340999][ T7160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.341022][ T7160] ? __pfx_path_openat+0x10/0x10 [ 198.341056][ T7160] do_filp_open+0x20b/0x470 [ 198.341082][ T7160] ? __pfx_do_filp_open+0x10/0x10 [ 198.341122][ T7160] ? alloc_fd+0x471/0x7d0 [ 198.341152][ T7160] do_sys_openat2+0x121/0x290 [ 198.341184][ T7160] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.341211][ T7160] __x64_sys_openat+0x174/0x210 [ 198.341231][ T7160] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.341258][ T7160] do_syscall_64+0xcd/0xf80 [ 198.341275][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.341292][ T7160] RIP: 0033:0x7fc0e3f8f7c9 [ 198.341307][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.341323][ T7160] RSP: 002b:00007fc0e4e19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.341339][ T7160] RAX: ffffffffffffffda RBX: 00007fc0e41e5fa0 RCX: 00007fc0e3f8f7c9 [ 198.341350][ T7160] RDX: 0000000000189002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 198.341360][ T7160] RBP: 00007fc0e4013f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.341370][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.341379][ T7160] R13: 00007fc0e41e6038 R14: 00007fc0e41e5fa0 R15: 00007fff08b81f78 [ 198.341400][ T7160] [ 199.661629][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.669910][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.678467][ T1302] ------------[ cut here ]------------ [ 199.684219][ T1302] WARNING: ./include/linux/skbuff.h:3227 at lowpan_xmit+0xea9/0x1210, CPU#0: aoe_tx0/1302 [ 199.694323][ T1302] Modules linked in: [ 199.698381][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 199.707548][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.717650][ T1302] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 199.722968][ T1302] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 16 34 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 08 34 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 fa 33 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 199.742729][ T1302] RSP: 0018:ffffc9000470f860 EFLAGS: 00010293 [ 199.748898][ T1302] RAX: 0000000000000000 RBX: ffffc9000470f8e0 RCX: ffffffff8b2f20fc [ 199.756999][ T1302] RDX: ffff888028689e80 RSI: ffffffff8b2f2a78 RDI: 0000000000000003 [ 199.765006][ T1302] RBP: ffffc9000470f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 199.773011][ T1302] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880299eeab6 [ 199.781056][ T1302] R13: 000000000000ffff R14: ffff888142bc8d90 R15: ffff8880299eea00 [ 199.789042][ T1302] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 199.798319][ T1302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.804970][ T1302] CR2: 00007fbc2e986440 CR3: 000000002ff64000 CR4: 00000000003526f0 [ 199.813075][ T1302] Call Trace: [ 199.816372][ T1302] [ 199.819307][ T1302] ? __pfx_lowpan_xmit+0x10/0x10 [ 199.824291][ T1302] ? lockdep_unlock+0x64/0xd0 [ 199.828973][ T1302] ? __lock_acquire+0x12c2/0x2890 [ 199.834024][ T1302] ? __pfx_netif_skb_features+0x10/0x10 [ 199.839581][ T1302] ? dev_hard_start_xmit+0x97/0x6e0 [ 199.844899][ T1302] dev_hard_start_xmit+0x97/0x6e0 [ 199.850037][ T1302] __dev_queue_xmit+0x6d7/0x46c0 [ 199.855010][ T1302] ? rcu_is_watching+0x12/0xc0 [ 199.859811][ T1302] ? finish_task_switch.isra.0+0x207/0xbd0 [ 199.865632][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 199.871149][ T1302] ? __lock_acquire+0x436/0x2890 [ 199.876116][ T1302] ? ref_tracker_free+0x37c/0x830 [ 199.881280][ T1302] ? do_raw_spin_lock+0x12c/0x2b0 [ 199.886312][ T1302] ? find_held_lock+0x2b/0x80 [ 199.891059][ T1302] ? skb_dequeue+0x126/0x180 [ 199.895666][ T1302] ? find_held_lock+0x2b/0x80 [ 199.900415][ T1302] ? rcu_is_watching+0x12/0xc0 [ 199.905318][ T1302] tx+0xcc/0x190 [ 199.908891][ T1302] ? __pfx_tx+0x10/0x10 [ 199.913095][ T1302] kthread+0x1e4/0x3e0 [ 199.917177][ T1302] ? find_held_lock+0x2b/0x80 [ 199.921978][ T1302] ? __pfx_kthread+0x10/0x10 [ 199.926586][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 199.932445][ T1302] ? lockdep_hardirqs_on+0x7c/0x110 [ 199.938018][ T1302] ? __kthread_parkme+0x19e/0x250 [ 199.943170][ T1302] ? __pfx_kthread+0x10/0x10 [ 199.947772][ T1302] kthread+0x3c5/0x780 [ 199.951860][ T1302] ? __pfx_kthread+0x10/0x10 [ 199.956471][ T1302] ? rcu_is_watching+0x12/0xc0 [ 199.961549][ T1302] ? __pfx_kthread+0x10/0x10 [ 199.966244][ T1302] ret_from_fork+0x983/0xb10 [ 199.970918][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 199.976046][ T1302] ? __switch_to+0x7af/0x10d0 [ 199.980760][ T1302] ? __pfx_kthread+0x10/0x10 [ 199.985430][ T1302] ret_from_fork_asm+0x1a/0x30 [ 199.990307][ T1302] [ 199.993522][ T1302] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.000798][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 200.009827][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.020039][ T1302] Call Trace: [ 200.023320][ T1302] [ 200.026289][ T1302] dump_stack_lvl+0x3d/0x1f0 [ 200.030980][ T1302] vpanic+0x640/0x6f0 [ 200.034965][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 200.039659][ T1302] panic+0xca/0xd0 [ 200.043385][ T1302] ? __pfx_panic+0x10/0x10 [ 200.047813][ T1302] ? check_panic_on_warn+0x1f/0xb0 [ 200.052923][ T1302] check_panic_on_warn+0xab/0xb0 [ 200.057864][ T1302] __warn+0x108/0x3c0 [ 200.061874][ T1302] __report_bug+0x2a0/0x520 [ 200.066392][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 200.071198][ T1302] ? __pfx___report_bug+0x10/0x10 [ 200.076404][ T1302] ? kasan_save_stack+0x42/0x60 [ 200.081258][ T1302] ? kasan_save_stack+0x33/0x60 [ 200.086122][ T1302] ? kasan_save_track+0x14/0x30 [ 200.091065][ T1302] ? kasan_save_free_info+0x3b/0x60 [ 200.096349][ T1302] ? __kasan_slab_free+0x5f/0x80 [ 200.101398][ T1302] ? kmem_cache_free+0x2d8/0x770 [ 200.106344][ T1302] ? kfree_skbmem+0x1a4/0x1f0 [ 200.111022][ T1302] ? tx+0xcc/0x190 [ 200.114738][ T1302] ? kthread+0x1e4/0x3e0 [ 200.119004][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 200.123785][ T1302] report_bug+0xb2/0x220 [ 200.128191][ T1302] ? lowpan_xmit+0xea9/0x1210 [ 200.132891][ T1302] handle_bug+0x127/0x260 [ 200.137254][ T1302] exc_invalid_op+0x17/0x50 [ 200.141954][ T1302] asm_exc_invalid_op+0x1a/0x20 [ 200.146839][ T1302] RIP: 0010:lowpan_xmit+0xea9/0x1210 [ 200.152136][ T1302] Code: ff ff 4c 89 ff 48 01 81 38 02 00 00 e8 40 b8 0f fe e9 e6 fb ff ff e8 16 34 8f f6 90 0f 0b 90 e9 a3 f5 ff ff e8 08 34 8f f6 90 <0f> 0b 90 e9 86 f6 ff ff e8 fa 33 8f f6 0f b7 8d e0 fe ff ff 44 8b [ 200.171827][ T1302] RSP: 0018:ffffc9000470f860 EFLAGS: 00010293 [ 200.177915][ T1302] RAX: 0000000000000000 RBX: ffffc9000470f8e0 RCX: ffffffff8b2f20fc [ 200.185905][ T1302] RDX: ffff888028689e80 RSI: ffffffff8b2f2a78 RDI: 0000000000000003 [ 200.193889][ T1302] RBP: ffffc9000470f9f0 R08: 0000000000000003 R09: 000000000000ffff [ 200.201880][ T1302] R10: 000000000000ffff R11: 0000000000000000 R12: ffff8880299eeab6 [ 200.209945][ T1302] R13: 000000000000ffff R14: ffff888142bc8d90 R15: ffff8880299eea00 [ 200.217939][ T1302] ? lowpan_xmit+0x52c/0x1210 [ 200.222682][ T1302] ? lowpan_xmit+0xea8/0x1210 [ 200.227375][ T1302] ? __pfx_lowpan_xmit+0x10/0x10 [ 200.232410][ T1302] ? lockdep_unlock+0x64/0xd0 [ 200.237351][ T1302] ? __lock_acquire+0x12c2/0x2890 [ 200.242465][ T1302] ? __pfx_netif_skb_features+0x10/0x10 [ 200.248126][ T1302] ? dev_hard_start_xmit+0x97/0x6e0 [ 200.253430][ T1302] dev_hard_start_xmit+0x97/0x6e0 [ 200.258493][ T1302] __dev_queue_xmit+0x6d7/0x46c0 [ 200.263535][ T1302] ? rcu_is_watching+0x12/0xc0 [ 200.268319][ T1302] ? finish_task_switch.isra.0+0x207/0xbd0 [ 200.274175][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 200.279622][ T1302] ? __lock_acquire+0x436/0x2890 [ 200.284565][ T1302] ? ref_tracker_free+0x37c/0x830 [ 200.289628][ T1302] ? do_raw_spin_lock+0x12c/0x2b0 [ 200.294676][ T1302] ? find_held_lock+0x2b/0x80 [ 200.299464][ T1302] ? skb_dequeue+0x126/0x180 [ 200.304272][ T1302] ? find_held_lock+0x2b/0x80 [ 200.308993][ T1302] ? rcu_is_watching+0x12/0xc0 [ 200.313792][ T1302] tx+0xcc/0x190 [ 200.317376][ T1302] ? __pfx_tx+0x10/0x10 [ 200.321542][ T1302] kthread+0x1e4/0x3e0 [ 200.325716][ T1302] ? find_held_lock+0x2b/0x80 [ 200.330501][ T1302] ? __pfx_kthread+0x10/0x10 [ 200.335255][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 200.341073][ T1302] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.346278][ T1302] ? __kthread_parkme+0x19e/0x250 [ 200.351332][ T1302] ? __pfx_kthread+0x10/0x10 [ 200.356040][ T1302] kthread+0x3c5/0x780 [ 200.360123][ T1302] ? __pfx_kthread+0x10/0x10 [ 200.364733][ T1302] ? rcu_is_watching+0x12/0xc0 [ 200.369591][ T1302] ? __pfx_kthread+0x10/0x10 [ 200.374228][ T1302] ret_from_fork+0x983/0xb10 [ 200.378928][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 200.384329][ T1302] ? __switch_to+0x7af/0x10d0 [ 200.389104][ T1302] ? __pfx_kthread+0x10/0x10 [ 200.393781][ T1302] ret_from_fork_asm+0x1a/0x30 [ 200.398580][ T1302] [ 200.401736][ T1302] Kernel Offset: disabled [ 200.406063][ T1302] Rebooting in 86400 seconds..