last executing test programs: 13.637468991s ago: executing program 3 (id=320): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) prctl$auto_PR_SET_MM_ENV_START(0x100, 0xa, 0x0, 0x6, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) unshare$auto(0x40000080) kexec_load$auto(0x5, 0x2, 0x0, 0x4) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 10.824346969s ago: executing program 0 (id=326): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0xa, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x8, 0x3cc, 0x10, 0x2, 0x801ffdf, 0xffffffff, 0x2000000000000002, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x1000000000000009, 0x2, 0x5, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bb, 0x0, 0x2, 0x0, 0xdc1, 0x0, 0x9, [0x4, 0x0, 0x200, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x480000000000, 0x2, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) prctl$auto_PR_SET_SECCOMP(0x16, 0xc8f, 0x3, 0xc1ce, 0x1) r2 = socket(0x2, 0x801, 0x100) prctl$auto(0x5, 0x1ffffffffffffffe, 0xffffffffffffffff, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x5, 0x6) mmap$auto(0x0, 0x30009, 0x4000000400df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0x1, 0x9b72, r2, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) 9.62117192s ago: executing program 3 (id=328): pipe2$auto(&(0x7f0000000000), 0x5eb) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) unshare$auto(0x40000080) socket(0x11, 0x5, 0x100) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40444c0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x403) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x81, 0x19, 0xffffffffffffffff, 0x6) socket(0x9, 0x80003, 0x300) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x26, 0x1, 0x106) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0xa) setsockopt$auto(r1, 0x6, 0x1e, 0x0, 0x7) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) 9.209609643s ago: executing program 2 (id=329): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x60800, 0x0) ioctl$auto(r3, 0x901064ac, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0) pread64$auto(r6, &(0x7f00000008c0)='\x00', 0x10001, 0x3) ioctl$auto(r5, 0x81085520, r5) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r7 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r7, &(0x7f00000002c0)=""/190, 0xfffffe39) madvise$auto(0x110d230000, 0x1, 0x9) 8.864714564s ago: executing program 0 (id=330): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x50, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x34, 0x400, 0x9}]}) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) 6.935593388s ago: executing program 1 (id=332): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r1, 0x80004508, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r2 = epoll_create$auto(0x1) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x181482, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_bytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0xa00) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) 6.931289843s ago: executing program 0 (id=333): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0) mmap$auto(0xaeb, 0x8, 0x9, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="000127bd7000fedbdf2506000000ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b71ec8ab16b828f4a93502f02d661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b94f6626d528d3957b38126"], 0xd8}, 0x1, 0x0, 0x0, 0x11}, 0xd0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0) write$auto(r3, &(0x7f0000000040)='\\\x00', 0x2) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x100c0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0, @ANYBLOB="08002dbd7000fddbdf250e000000050012004000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000500)=""/186, 0xba) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r2) r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r6) sendmsg$auto_TCP_METRICS_CMD_DEL(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250200000014000c00ff0100"/38], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/power/autosuspend\x00', 0xc0002, 0x0) socket(0xa, 0x1, 0x84) 6.93107969s ago: executing program 2 (id=334): pipe2$auto(&(0x7f0000000000), 0x5eb) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x11, 0x5, 0x100) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40444c0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x403) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x81, 0x19, 0xffffffffffffffff, 0x6) socket(0x9, 0x80003, 0x300) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x26, 0x1, 0x106) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0xa) setsockopt$auto(r1, 0x6, 0x1e, 0x0, 0x7) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) 6.839322148s ago: executing program 3 (id=335): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) prctl$auto_PR_SET_MM_ENV_START(0x100, 0xa, 0x0, 0x6, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) unshare$auto(0x40000080) kexec_load$auto(0x5, 0x2, 0x0, 0x4) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 6.191593389s ago: executing program 2 (id=336): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x50, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x34, 0x400, 0x9}]}) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) 5.714479121s ago: executing program 1 (id=337): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x50, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x34, 0x400, 0x9}]}) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) 4.819819556s ago: executing program 0 (id=338): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x410403, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm/swap/vma_ra_enabled\x00', 0xb02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(r2, &(0x7f0000000180)='e\x82C/\x0e\x88\xbc\x8f\x86\xa1\xf7OV\xe8G\x05\x8eDf8\x0e\x13\x97\xd8=\xf3\xa4\xd6\xb6\xd3\xe1\xce2|\xf9\xf3\x0f\x90:ht\x0e\x99\x813\x1e\xe9\x9c\n\xf7\xb5N\xd5\xe2A \xa4\xf0\x1e{e \xaa\r\xbe\xba\xe9D\xf3\x9f\x9b{<\x05\xea\xfe\xb5\xe2\xa3V<\xe6?\x83+\xf0\xd0\x83\xd3\xce\x8d\xae\x17\x85DV&\nY}\xe4\xa5\xa2\x17\x15\xcb\xf8I\xbb\xcd\xab\xb43}\x00\xec\x8bk\x11\x19\x00\xf1\xad\xf2\x7f\xfb\x16\x16\xaf\x8c\xb61\x1d%\x8e\xe3\'tv\xc3 \xb0\xd9\xce\xaf\xf9\b\'\xccW\xbc\xf3\x9b\xeb\xd8\xa9\xd6\xffh\xcd\xef\xc1\xb0~\x14U\x93\x8f\x84\x8cTX s@\xb4\x89*\xaeuG\x94\x8f\x00\x00\x00\x00\x00\x00', 0x7f) mprotect$auto(0x110c230000, 0xa588, 0x6) 3.845637035s ago: executing program 3 (id=339): migrate_pages$auto(0x0, 0x5, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) recvfrom$auto(r1, &(0x7f0000000200), 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x4000000000003, 0x20009, 0x9, 0xeb1, 0x405, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8d1a073", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r4, 0x0, 0x800000008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x8002) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000240), r2) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x10}]}, 0x1c}}, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x1f, 0x4, 0xc) futex$auto(&(0x7f0000000080)=0x1, 0x109, 0x1, 0x0, 0x0, 0xfffffffa) ioctl$auto(0xffffffffffffffff, 0xc0305302, 0x38) readv$auto(r0, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) r9 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$auto_TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000040)={0x8001, 0x9a, 0xed, @raw=0x1}}) 3.838930726s ago: executing program 1 (id=347): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x50, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x34, 0x400, 0x9}]}) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) 3.83828655s ago: executing program 2 (id=340): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000080), 0x6b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/020/001\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop10\x00', 0x82500, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x222680, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x44c401, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000000200), 0x2}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video6\x00', 0x280, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty11\x00', 0xa81, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12%\x15\x95.\xe5\xfa\b\"\xc7\xe6\x04\x8c\x83k', 0x91) ioperm$auto(0xffffffffffbfffff, 0x10100000c, 0x3) socket(0x18, 0xa, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x4004, 0x8, 0x7, 0x0) 2.595472197s ago: executing program 3 (id=341): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = socket(0x10, 0x2, 0x0) r3 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0) read$auto_bdi_debug_stats_fops_(r3, &(0x7f0000000040)=""/69, 0x45) bind$auto(r2, 0x0, 0x6b) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0xca, &(0x7f0000000000)='\x04>\xff\x0f\x15\xb9\x18\xa6i\v', 0x7b) 2.383698871s ago: executing program 0 (id=342): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x50, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x34, 0x400, 0x9}]}) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) timer_create$auto(0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) 2.333777628s ago: executing program 2 (id=343): pipe2$auto(&(0x7f0000000000), 0x5eb) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) unshare$auto(0x40000080) socket(0x11, 0x5, 0x100) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40444c0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x403) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x81, 0x19, 0xffffffffffffffff, 0x6) socket(0x9, 0x80003, 0x300) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x26, 0x1, 0x106) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0xa) setsockopt$auto(r1, 0x6, 0x1e, 0x0, 0x7) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) 1.559199357s ago: executing program 1 (id=344): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/capcache/hard_limit\x00', 0x82042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000000)="2dc2", 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) rename$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./cgroup\x00') listen$auto(0x3, 0x81) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\t/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3f, 0x200001000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x3, 0x8) getsockopt$auto(r4, 0x3a, 0x1, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(0xffffffffffffffff, 0x1, 0xd, 0x0, 0xd63) shutdown$auto(0x200000003, 0x2) semctl$auto(0x80000001, 0x86e5, 0x6, 0xfffffffffffffffb) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) 917.56254ms ago: executing program 1 (id=345): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = socket(0x10, 0x2, 0x0) r3 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0) read$auto_bdi_debug_stats_fops_(r3, &(0x7f0000000040)=""/69, 0x45) bind$auto(r2, 0x0, 0x6b) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0xca, &(0x7f0000000000)='\x04>\xff\x0f\x15\xb9\x18\xa6i\v', 0x7b) 356.196921ms ago: executing program 2 (id=346): r0 = socket(0x28, 0x1, 0x4) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000010) setsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x1, 0x45, &(0x7f0000000040)='/dev/uinput\x00', 0xe) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) setresuid$auto(0x0, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x589800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x5, 0xffffffffffffffff, 0x0, 0x0, 0x101) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/snmp6\x00', 0x400, 0x0) pread64$auto(r3, 0x0, 0x101fb, 0x8800000005) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f00000000c0)="c80d1b5d399b3e", 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) r5 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="19910d5a20a08426fc3574da26178af0fcea161180f2f7c07f385f4c68cce85987", @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf25010000000600090001800000"], 0x1c}}, 0x20000800) 321.395984ms ago: executing program 1 (id=348): pipe2$auto(&(0x7f0000000000), 0x5eb) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r0) unshare$auto(0x40000080) socket(0x11, 0x5, 0x100) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40444c0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x403) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x81, 0x19, 0xffffffffffffffff, 0x6) socket(0x9, 0x80003, 0x300) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x26, 0x1, 0x106) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) unshare$auto(0xa) setsockopt$auto(r1, 0x6, 0x1e, 0x0, 0x7) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) 304.6179ms ago: executing program 0 (id=349): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x8e02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2, 0x4, 0x800000000000eb1, r0, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000200)='J\xb2^JJL\x0e\xa2=\x97\xa9\x9a\xd3Mu\xc4\xfao7\xb7P\xd0\xa8\x9b\xe8\x96\xccA\xc5\xdd\xb3\x18\x89\xcf\xdf1 c\xdbgI\x93\x8d(\xf4\xe8\xeft\xa7\"D\xa9/\xf5J\v\xb58Y\xabG[\xaaK\x01tq!\x85\xd5Y\xbb\xe7\xd0\x17\xe2', 0x10000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r3 = socket(0x11, 0x3, 0x9) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKPBSZGET(r2, 0x127b, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getrlimit$auto(0xe545, &(0x7f0000000040)={0x4}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3ff, &(0x7f00000000c0)={{0xe7ec}, {0x0, 0x85}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r6, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0xd2f, 0x6, 0x18, r3, 0xfffffffffffffffc) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) mprotect$auto(0x0, 0x806121, 0x6) 0s ago: executing program 3 (id=350): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x8ab0, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r0, 0x11) prctl$auto_PR_SET_MM_ENV_START(0x100, 0xa, 0x0, 0x6, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0) read$auto_dfs_sched_itmt_fops_itmt(r1, 0x0, 0x0) socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0xe8, 0x9, 0xffffffffffffff7f, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) unshare$auto(0x40000080) kexec_load$auto(0x5, 0x2, 0x0, 0x4) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 92.045120][ T5616] cgroup: Unknown subsys name 'net' [ 92.157815][ T5616] cgroup: Unknown subsys name 'cpuset' [ 92.167758][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.057992][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.252227][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.275363][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.289546][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.301717][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.309878][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.322044][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.327032][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.337005][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.344206][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.349214][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.364639][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.373272][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.376941][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.388138][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.397951][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.412813][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.420499][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.424026][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.438869][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.447733][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.470016][ T9] cfg80211: failed to load regulatory.db [ 98.180737][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.188089][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.195562][ T5639] bridge_slave_0: entered allmulticast mode [ 98.203996][ T5639] bridge_slave_0: entered promiscuous mode [ 98.242031][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.249279][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.256653][ T5635] bridge_slave_0: entered allmulticast mode [ 98.264606][ T5635] bridge_slave_0: entered promiscuous mode [ 98.276551][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.284348][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.291619][ T5639] bridge_slave_1: entered allmulticast mode [ 98.299418][ T5639] bridge_slave_1: entered promiscuous mode [ 98.329277][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.336606][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.344402][ T5635] bridge_slave_1: entered allmulticast mode [ 98.351921][ T5635] bridge_slave_1: entered promiscuous mode [ 98.424084][ T5636] Bluetooth: hci1: command tx timeout [ 98.458687][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.471838][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.501818][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.511165][ T5634] Bluetooth: hci0: command tx timeout [ 98.512054][ T5636] Bluetooth: hci2: command tx timeout [ 98.523439][ T5634] Bluetooth: hci3: command tx timeout [ 98.540473][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.592728][ T5635] team0: Port device team_slave_0 added [ 98.641705][ T5635] team0: Port device team_slave_1 added [ 98.660100][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.667624][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.675849][ T5627] bridge_slave_0: entered allmulticast mode [ 98.683837][ T5627] bridge_slave_0: entered promiscuous mode [ 98.691507][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.698837][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.706311][ T5631] bridge_slave_0: entered allmulticast mode [ 98.714096][ T5631] bridge_slave_0: entered promiscuous mode [ 98.736980][ T5639] team0: Port device team_slave_0 added [ 98.743272][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.750617][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.758095][ T5627] bridge_slave_1: entered allmulticast mode [ 98.765604][ T5627] bridge_slave_1: entered promiscuous mode [ 98.773468][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.781489][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.789067][ T5631] bridge_slave_1: entered allmulticast mode [ 98.797687][ T5631] bridge_slave_1: entered promiscuous mode [ 98.817864][ T5639] team0: Port device team_slave_1 added [ 98.877217][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.884371][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.910387][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.923438][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.930899][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.957474][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.994250][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.001356][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.027560][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.047107][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.054342][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.081982][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.104853][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.116899][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.129791][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.167451][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.209924][ T5631] team0: Port device team_slave_0 added [ 99.242354][ T5627] team0: Port device team_slave_0 added [ 99.250746][ T5631] team0: Port device team_slave_1 added [ 99.295011][ T5627] team0: Port device team_slave_1 added [ 99.328213][ T5635] hsr_slave_0: entered promiscuous mode [ 99.335000][ T5635] hsr_slave_1: entered promiscuous mode [ 99.348448][ T5639] hsr_slave_0: entered promiscuous mode [ 99.356072][ T5639] hsr_slave_1: entered promiscuous mode [ 99.362373][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 99.368300][ T5639] Cannot create hsr debugfs directory [ 99.386048][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.393177][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.419329][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.433466][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.440480][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.466767][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.518160][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.525189][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.551369][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.597814][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.605041][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.631711][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.753464][ T5631] hsr_slave_0: entered promiscuous mode [ 99.760589][ T5631] hsr_slave_1: entered promiscuous mode [ 99.767079][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 99.773220][ T5631] Cannot create hsr debugfs directory [ 99.858248][ T5627] hsr_slave_0: entered promiscuous mode [ 99.864984][ T5627] hsr_slave_1: entered promiscuous mode [ 99.871251][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 99.877540][ T5627] Cannot create hsr debugfs directory [ 100.240314][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.255148][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.264952][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.278426][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.295613][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.307386][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.328502][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.339113][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.416320][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.429454][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.448251][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.459279][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.469787][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.482378][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.502914][ T5636] Bluetooth: hci1: command tx timeout [ 100.515542][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.526965][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.583840][ T5636] Bluetooth: hci2: command tx timeout [ 100.588050][ T5634] Bluetooth: hci3: command tx timeout [ 100.590462][ T50] Bluetooth: hci0: command tx timeout [ 100.645748][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.657612][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.667389][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.677970][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.689791][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.701567][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.710733][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.723235][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.847952][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.857881][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.868986][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.877344][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.888040][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.902156][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.914440][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.934173][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.944281][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.025732][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.058337][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.065870][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.102543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.110067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.145717][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.230720][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.256047][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.284449][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.291628][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.314519][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.321733][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.362473][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.374944][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.415524][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.422781][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.456756][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.464032][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.486003][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.527739][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.535009][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.586017][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.593319][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.559229][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.594789][ T5636] Bluetooth: hci1: command tx timeout [ 102.664261][ T5636] Bluetooth: hci3: command tx timeout [ 102.669788][ T50] Bluetooth: hci2: command tx timeout [ 102.669803][ T5634] Bluetooth: hci0: command tx timeout [ 102.768151][ T5635] veth0_vlan: entered promiscuous mode [ 102.790820][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.857829][ T5635] veth1_vlan: entered promiscuous mode [ 102.967537][ T5635] veth0_macvtap: entered promiscuous mode [ 102.990792][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.007321][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.032090][ T5635] veth1_macvtap: entered promiscuous mode [ 103.070613][ T5639] veth0_vlan: entered promiscuous mode [ 103.109082][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.132144][ T5639] veth1_vlan: entered promiscuous mode [ 103.147281][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.178047][ T1126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.187667][ T1126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.211041][ T3378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.220674][ T3378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.274425][ T5631] veth0_vlan: entered promiscuous mode [ 103.319247][ T5627] veth0_vlan: entered promiscuous mode [ 103.361408][ T5631] veth1_vlan: entered promiscuous mode [ 103.375640][ T5639] veth0_macvtap: entered promiscuous mode [ 103.399586][ T5627] veth1_vlan: entered promiscuous mode [ 103.435097][ T5639] veth1_macvtap: entered promiscuous mode [ 103.447678][ T3378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.469278][ T3378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.559561][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.570951][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.581012][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.590136][ T5627] veth0_macvtap: entered promiscuous mode [ 103.600667][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.609640][ T5631] veth0_macvtap: entered promiscuous mode [ 103.638909][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.651120][ T5631] veth1_macvtap: entered promiscuous mode [ 103.662572][ T5627] veth1_macvtap: entered promiscuous mode [ 103.676897][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.698390][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.727993][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.746275][ T5635] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.795425][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.823070][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.894327][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.913831][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.961278][ T1126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.994192][ T1126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.004228][ T1126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.027438][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.044498][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.055892][ T1126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.101722][ T1126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.123344][ T1126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.187578][ T1126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.250139][ T1126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.357215][ T5788] ubi0: attaching mtd0 [ 104.430765][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.445207][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.464657][ T5788] ubi0: scanning is finished [ 104.491422][ T5788] ubi0: empty MTD device detected [ 104.663401][ T50] Bluetooth: hci1: command tx timeout [ 104.742975][ T50] Bluetooth: hci0: command tx timeout [ 104.753279][ T5636] Bluetooth: hci3: command tx timeout [ 104.758770][ T50] Bluetooth: hci2: command tx timeout [ 104.789201][ T5788] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 104.802760][ T5788] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 104.829386][ T5788] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 104.837580][ T5788] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 104.847200][ T5788] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 104.857088][ T5788] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 104.867360][ T5788] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2817541540 [ 104.879373][ T5788] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 104.891981][ T5796] ubi0: background thread "ubi_bgt0d" started, PID 5796 [ 104.912161][ T5790] ubi0: detaching mtd0 [ 104.938223][ T5790] ubi0: mtd0 is detached [ 105.098543][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.122884][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.408004][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.431854][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.564652][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.578608][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.871409][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.897444][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.176459][ T5804] Zero length message leads to an empty skb [ 107.199219][ T5806] zram0: detected capacity change from 0 to 16 [ 107.964325][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.016639][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.721662][ T29] audit: type=1800 audit(1783844706.529:2): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7" name="version" dev="configfs" ino=7795 res=0 errno=0 [ 109.694952][ T5844] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.969534][ T5870] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 113.598255][ T5882] openvswitch: netlink: Message has 4 unknown bytes. [ 114.102220][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.579599][ T5909] ======================================================= [ 115.579599][ T5909] WARNING: The mand mount option has been deprecated and [ 115.579599][ T5909] and is ignored by this kernel. Remove the mand [ 115.579599][ T5909] option from the mount to silence this warning. [ 115.579599][ T5909] ======================================================= [ 115.906864][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 116.509481][ T5911] syz.3.20 (5911) used greatest stack depth: 19768 bytes left [ 116.702002][ T5919] kAFS: unparsable volume name [ 118.691070][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 119.208913][ T5940] zswap: compressor not available [ 120.179123][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 121.161815][ T5952] FAULT_INJECTION: forcing a failure. [ 121.161815][ T5952] name failslab, interval 1, probability 0, space 0, times 1 [ 121.189891][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 121.189937][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.189967][ T5952] Call Trace: [ 121.189978][ T5952] [ 121.189991][ T5952] dump_stack_lvl+0x100/0x190 [ 121.190046][ T5952] should_fail_ex.cold+0x5/0xa [ 121.190088][ T5952] should_failslab+0xc2/0x120 [ 121.190135][ T5952] __kmalloc_noprof+0xfc/0x820 [ 121.190177][ T5952] ? ops_init+0x77/0x5f0 [ 121.190226][ T5952] ops_init+0x77/0x5f0 [ 121.190271][ T5952] setup_net+0x118/0x3a0 [ 121.190314][ T5952] ? __pfx_setup_net+0x10/0x10 [ 121.190357][ T5952] ? mutex_init_lockdep+0xf1/0x120 [ 121.190419][ T5952] copy_net_ns+0x46f/0x7c0 [ 121.190469][ T5952] create_new_namespaces+0x3ea/0xac0 [ 121.190546][ T5952] unshare_nsproxy_namespaces+0xf2/0x220 [ 121.190610][ T5952] ksys_unshare+0x438/0xab0 [ 121.190655][ T5952] ? __pfx_ksys_unshare+0x10/0x10 [ 121.190712][ T5952] __x64_sys_unshare+0x31/0x40 [ 121.190753][ T5952] do_syscall_64+0x115/0x840 [ 121.190817][ T5952] ? clear_bhb_loop+0x40/0x90 [ 121.190861][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.190898][ T5952] RIP: 0033:0x7f82a339de59 [ 121.190935][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.190968][ T5952] RSP: 002b:00007f82a421d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 121.191000][ T5952] RAX: ffffffffffffffda RBX: 00007f82a3626090 RCX: 00007f82a339de59 [ 121.191022][ T5952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 121.191042][ T5952] RBP: 00007f82a3433e6f R08: 0000000000000000 R09: 0000000000000000 [ 121.191062][ T5952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.191082][ T5952] R13: 00007f82a3626128 R14: 00007f82a3626090 R15: 00007ffc9af52f18 [ 121.191125][ T5952] [ 121.428372][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 122.081219][ T5969] bond0: (slave bond_slave_0): Releasing backup interface [ 123.287564][ T5982] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.580366][ T5989] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.983359][ T6020] blktrace: Concurrent blktraces are not allowed on nbd5 [ 129.601531][ T6051] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 130.019202][ T6051] FAULT_INJECTION: forcing a failure. [ 130.019202][ T6051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.038927][ T6051] CPU: 0 UID: 0 PID: 6051 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT(full) [ 130.038970][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.038990][ T6051] Call Trace: [ 130.039000][ T6051] [ 130.039011][ T6051] dump_stack_lvl+0x100/0x190 [ 130.039053][ T6051] should_fail_ex.cold+0x5/0xa [ 130.039082][ T6051] ? prepare_alloc_pages+0x16d/0x5f0 [ 130.039118][ T6051] should_fail_alloc_page+0xeb/0x140 [ 130.039150][ T6051] prepare_alloc_pages+0x1f0/0x5f0 [ 130.039187][ T6051] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 130.039216][ T6051] ? page_table_check_set+0x48f/0x930 [ 130.039249][ T6051] ? page_table_check_set+0x48f/0x930 [ 130.039282][ T6051] ? page_table_check_set+0x4f7/0x930 [ 130.039315][ T6051] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.039339][ T6051] ? xas_move_index+0xae/0x110 [ 130.039379][ T6051] ? xas_find+0x32c/0x8e0 [ 130.039406][ T6051] ? find_held_lock+0x2b/0x80 [ 130.039432][ T6051] ? find_held_lock+0x2b/0x80 [ 130.039457][ T6051] ? filemap_map_pages+0x112d/0x1fe0 [ 130.039493][ T6051] ? filemap_map_pages+0x112d/0x1fe0 [ 130.039533][ T6051] ? filemap_map_pages+0x1137/0x1fe0 [ 130.039578][ T6051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.039613][ T6051] ? policy_nodemask+0xed/0x4f0 [ 130.039646][ T6051] alloc_pages_mpol+0x1fb/0x540 [ 130.039679][ T6051] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 130.039710][ T6051] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 130.039753][ T6051] alloc_pages_noprof+0x1a/0x160 [ 130.039789][ T6051] pte_alloc_one+0x1c/0x3d0 [ 130.039824][ T6051] do_fault+0x86c/0x1750 [ 130.039860][ T6051] __handle_mm_fault+0x187d/0x2a00 [ 130.039901][ T6051] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 130.039928][ T6051] ? __pfx___handle_mm_fault+0x10/0x10 [ 130.039964][ T6051] ? folio_mark_accessed+0xf3/0x1040 [ 130.040005][ T6051] ? __pfx_folio_mark_accessed+0x10/0x10 [ 130.040078][ T6051] ? find_held_lock+0x2b/0x80 [ 130.040141][ T6051] handle_mm_fault+0x37b/0xa30 [ 130.040200][ T6051] __get_user_pages+0x1178/0x32a0 [ 130.040243][ T6051] ? __pfx___get_user_pages+0x10/0x10 [ 130.040282][ T6051] populate_vma_page_range+0x267/0x3f0 [ 130.040316][ T6051] ? __pfx_populate_vma_page_range+0x10/0x10 [ 130.040349][ T6051] ? __pfx_find_vma_intersection+0x10/0x10 [ 130.040380][ T6051] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 130.040408][ T6051] __mm_populate+0x107/0x3a0 [ 130.040441][ T6051] ? __pfx___mm_populate+0x10/0x10 [ 130.040512][ T6051] ? up_write+0x2e5/0x5c0 [ 130.040537][ T6051] __do_sys_mlockall+0x4f4/0x5d0 [ 130.040568][ T6051] do_syscall_64+0x115/0x840 [ 130.040605][ T6051] ? clear_bhb_loop+0x40/0x90 [ 130.040634][ T6051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.040658][ T6051] RIP: 0033:0x7f82a339de59 [ 130.040676][ T6051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.040699][ T6051] RSP: 002b:00007f82a423e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 130.040721][ T6051] RAX: ffffffffffffffda RBX: 00007f82a3625fa0 RCX: 00007f82a339de59 [ 130.040736][ T6051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 130.040749][ T6051] RBP: 00007f82a3433e6f R08: 0000000000000000 R09: 0000000000000000 [ 130.040763][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.040776][ T6051] R13: 00007f82a3626038 R14: 00007f82a3625fa0 R15: 00007ffc9af52f18 [ 130.040806][ T6051] [ 131.510260][ T6075] ubi0: attaching mtd0 [ 131.682205][ T6083] random: crng reseeded on system resumption [ 131.721227][ T6075] ubi0: scanning is finished [ 132.418831][ T6075] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 132.514419][ T6075] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 132.543032][ T6075] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 132.563753][ T6075] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 132.582165][ T6075] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 132.595619][ T6075] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 132.605662][ T6075] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2817541540 [ 132.626410][ T6075] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 132.648017][ T6081] ubi0: detaching mtd0 [ 132.652246][ T6100] ubi0: background thread "ubi_bgt0d" started, PID 6100 [ 132.741385][ T6081] ubi0: mtd0 is detached [ 133.311918][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.318921][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.020800][ T6116] mmap: syz.3.55 (6116) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.989056][ T6160] random: crng reseeded on system resumption [ 138.528509][ T6148] kexec: Could not allocate control_code_buffer [ 140.006027][ T6186] FAULT_INJECTION: forcing a failure. [ 140.006027][ T6186] name failslab, interval 1, probability 0, space 0, times 0 [ 140.019311][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(full) [ 140.019354][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.019373][ T6186] Call Trace: [ 140.019383][ T6186] [ 140.019396][ T6186] dump_stack_lvl+0x100/0x190 [ 140.019437][ T6186] should_fail_ex.cold+0x5/0xa [ 140.019475][ T6186] should_failslab+0xc2/0x120 [ 140.019531][ T6186] __kmalloc_noprof+0xfc/0x820 [ 140.019571][ T6186] ? ops_init+0x77/0x5f0 [ 140.019617][ T6186] ops_init+0x77/0x5f0 [ 140.019661][ T6186] setup_net+0x118/0x3a0 [ 140.019704][ T6186] ? __pfx_setup_net+0x10/0x10 [ 140.019749][ T6186] ? mutex_init_lockdep+0xf1/0x120 [ 140.019814][ T6186] copy_net_ns+0x46f/0x7c0 [ 140.019865][ T6186] create_new_namespaces+0x3ea/0xac0 [ 140.019933][ T6186] unshare_nsproxy_namespaces+0xf2/0x220 [ 140.019996][ T6186] ksys_unshare+0x438/0xab0 [ 140.020040][ T6186] ? __pfx_ksys_unshare+0x10/0x10 [ 140.020098][ T6186] __x64_sys_unshare+0x31/0x40 [ 140.020139][ T6186] do_syscall_64+0x115/0x840 [ 140.020194][ T6186] ? clear_bhb_loop+0x40/0x90 [ 140.020237][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.020277][ T6186] RIP: 0033:0x7f564af9de59 [ 140.020306][ T6186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.020340][ T6186] RSP: 002b:00007f564bd9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 140.020373][ T6186] RAX: ffffffffffffffda RBX: 00007f564b226090 RCX: 00007f564af9de59 [ 140.020396][ T6186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 140.020416][ T6186] RBP: 00007f564b033e6f R08: 0000000000000000 R09: 0000000000000000 [ 140.020436][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.020456][ T6186] R13: 00007f564b226128 R14: 00007f564b226090 R15: 00007ffc36c1ebe8 [ 140.020501][ T6186] [ 143.145613][ T6214] kexec: Could not allocate control_code_buffer [ 144.963376][ T6254] hub 1-0:1.0: USB hub found [ 144.974456][ T6254] hub 1-0:1.0: 1 port detected [ 145.159372][ T6266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'. [ 145.705201][ T6269] FAULT_INJECTION: forcing a failure. [ 145.705201][ T6269] name fail_futex, interval 1, probability 0, space 0, times 1 [ 145.788233][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 145.788277][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 145.788297][ T6269] Call Trace: [ 145.788308][ T6269] [ 145.788320][ T6269] dump_stack_lvl+0x100/0x190 [ 145.788364][ T6269] should_fail_ex.cold+0x5/0xa [ 145.788403][ T6269] get_futex_key+0x1d2/0x14f0 [ 145.788465][ T6269] ? __pfx_get_futex_key+0x10/0x10 [ 145.788521][ T6269] ? rcu_is_watching+0x12/0xc0 [ 145.788561][ T6269] ? sock_write_iter+0x31d/0x5b0 [ 145.788613][ T6269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.788673][ T6269] futex_wake+0xf4/0x5e0 [ 145.788718][ T6269] ? __pfx_futex_wake+0x10/0x10 [ 145.788758][ T6269] ? rw_verify_area+0xce/0x6d0 [ 145.788810][ T6269] ? vfs_write+0x15d/0x1050 [ 145.788873][ T6269] do_futex+0x2b2/0x440 [ 145.788906][ T6269] ? __pfx_do_futex+0x10/0x10 [ 145.788945][ T6269] __x64_sys_futex+0x34f/0x4d0 [ 145.788984][ T6269] ? __pfx___x64_sys_futex+0x10/0x10 [ 145.789043][ T6269] do_syscall_64+0x115/0x840 [ 145.789100][ T6269] ? clear_bhb_loop+0x40/0x90 [ 145.789142][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.789179][ T6269] RIP: 0033:0x7f47e439de59 [ 145.789206][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.789236][ T6269] RSP: 002b:00007f47e51f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.789267][ T6269] RAX: ffffffffffffffda RBX: 00007f47e4626188 RCX: 00007f47e439de59 [ 145.789287][ T6269] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f47e462618c [ 145.789307][ T6269] RBP: 00007f47e4626180 R08: 0000000000000001 R09: 0000000000000000 [ 145.789326][ T6269] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 145.789345][ T6269] R13: 00007f47e4626218 R14: 00007ffc682f9b50 R15: 00007ffc682f9c38 [ 145.789388][ T6269] [ 146.134399][ T6272] random: crng reseeded on system resumption [ 148.200034][ T6287] FAULT_INJECTION: forcing a failure. [ 148.200034][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 148.236668][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 148.236713][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.236734][ T6287] Call Trace: [ 148.236745][ T6287] [ 148.236758][ T6287] dump_stack_lvl+0x100/0x190 [ 148.236804][ T6287] should_fail_ex.cold+0x5/0xa [ 148.236852][ T6287] should_failslab+0xc2/0x120 [ 148.236898][ T6287] kmem_cache_alloc_noprof+0x91/0x6a0 [ 148.236936][ T6287] ? __proc_create+0xc1/0x8f0 [ 148.236991][ T6287] ? __proc_create+0xc1/0x8f0 [ 148.237081][ T6287] ? __proc_create+0x247/0x8f0 [ 148.237143][ T6287] __proc_create+0x247/0x8f0 [ 148.237197][ T6287] ? __pfx___proc_create+0x10/0x10 [ 148.237257][ T6287] ? _raw_write_unlock+0x28/0x50 [ 148.237306][ T6287] ? proc_register+0x56d/0x910 [ 148.237340][ T6287] proc_create_reg+0x75/0x170 [ 148.237373][ T6287] proc_create_net_data+0x8e/0x1c0 [ 148.237428][ T6287] ? __pfx_proc_create_net_data+0x10/0x10 [ 148.237482][ T6287] ? net_generic+0xea/0x2a0 [ 148.237545][ T6287] ? __pfx_vlan_init_net+0x10/0x10 [ 148.237583][ T6287] vlan_proc_init+0xe6/0x160 [ 148.237617][ T6287] ops_init+0x1e2/0x5f0 [ 148.237663][ T6287] setup_net+0x118/0x3a0 [ 148.237707][ T6287] ? __pfx_setup_net+0x10/0x10 [ 148.237750][ T6287] ? mutex_init_lockdep+0xf1/0x120 [ 148.237813][ T6287] copy_net_ns+0x46f/0x7c0 [ 148.237872][ T6287] create_new_namespaces+0x3ea/0xac0 [ 148.237940][ T6287] unshare_nsproxy_namespaces+0xf2/0x220 [ 148.238002][ T6287] ksys_unshare+0x438/0xab0 [ 148.238046][ T6287] ? __pfx_ksys_unshare+0x10/0x10 [ 148.238103][ T6287] __x64_sys_unshare+0x31/0x40 [ 148.238143][ T6287] do_syscall_64+0x115/0x840 [ 148.238197][ T6287] ? clear_bhb_loop+0x40/0x90 [ 148.238240][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.238275][ T6287] RIP: 0033:0x7f47e439de59 [ 148.238303][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.238335][ T6287] RSP: 002b:00007f47e5215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 148.238368][ T6287] RAX: ffffffffffffffda RBX: 00007f47e4626090 RCX: 00007f47e439de59 [ 148.238389][ T6287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 148.238410][ T6287] RBP: 00007f47e4433e6f R08: 0000000000000000 R09: 0000000000000000 [ 148.238430][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.238449][ T6287] R13: 00007f47e4626128 R14: 00007f47e4626090 R15: 00007ffc682f9c38 [ 148.238490][ T6287] [ 148.240035][ T6287] 8021q: can't create entry in proc filesystem! [ 149.247421][ T6302] ubi0: attaching mtd0 [ 149.319983][ T6302] ubi0: scanning is finished [ 149.960394][ T6302] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 149.972683][ T6302] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 150.083311][ T6302] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 150.098375][ T6302] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 150.168203][ T6302] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 150.319797][ T6302] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 150.349712][ T6302] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2817541540 [ 150.369610][ T6302] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 150.394099][ T6298] ubi0: detaching mtd0 [ 150.405776][ T6315] ubi0: background thread "ubi_bgt0d" started, PID 6315 [ 150.739708][ T6298] ubi0: mtd0 is detached [ 151.173945][ T6301] kexec: Could not allocate control_code_buffer [ 152.318080][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 153.370139][ T6336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'. [ 155.021199][ T6349] FAULT_INJECTION: forcing a failure. [ 155.021199][ T6349] name fail_futex, interval 1, probability 0, space 0, times 0 [ 155.061548][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.1.91 Not tainted syzkaller #0 PREEMPT(full) [ 155.061582][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.061596][ T6349] Call Trace: [ 155.061603][ T6349] [ 155.061612][ T6349] dump_stack_lvl+0x100/0x190 [ 155.061641][ T6349] should_fail_ex.cold+0x5/0xa [ 155.061666][ T6349] get_futex_key+0x1d2/0x14f0 [ 155.061707][ T6349] ? __pfx_get_futex_key+0x10/0x10 [ 155.061743][ T6349] ? lock_acquire+0x1b9/0x370 [ 155.061785][ T6349] futex_wake+0xf4/0x5e0 [ 155.061815][ T6349] ? __pfx_futex_wake+0x10/0x10 [ 155.061848][ T6349] ? find_held_lock+0x2b/0x80 [ 155.061874][ T6349] ? exit_mm_release+0x19/0x30 [ 155.061905][ T6349] do_futex+0x2b2/0x440 [ 155.061929][ T6349] ? __pfx_do_futex+0x10/0x10 [ 155.061955][ T6349] ? __might_fault+0xc5/0x140 [ 155.061984][ T6349] mm_release+0x24a/0x2f0 [ 155.062023][ T6349] do_exit+0x707/0x2ae0 [ 155.062057][ T6349] ? __pfx_do_exit+0x10/0x10 [ 155.062086][ T6349] ? do_raw_spin_lock+0x128/0x260 [ 155.062108][ T6349] ? find_held_lock+0x2b/0x80 [ 155.062133][ T6349] ? get_signal+0x7e0/0x21e0 [ 155.062158][ T6349] do_group_exit+0xd5/0x2a0 [ 155.062190][ T6349] get_signal+0x1ec7/0x21e0 [ 155.062223][ T6349] ? __pfx_get_signal+0x10/0x10 [ 155.062248][ T6349] ? do_futex+0x190/0x440 [ 155.062273][ T6349] arch_do_signal_or_restart+0x91/0x7a0 [ 155.062313][ T6349] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 155.062356][ T6349] ? kernel_migrate_pages+0xa2/0x700 [ 155.062395][ T6349] exit_to_user_mode_loop+0x139/0x6f0 [ 155.062434][ T6349] ? rcu_is_watching+0x12/0xc0 [ 155.062462][ T6349] do_syscall_64+0x652/0x840 [ 155.062499][ T6349] ? clear_bhb_loop+0x40/0x90 [ 155.062527][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.062550][ T6349] RIP: 0033:0x7f82a339de59 [ 155.062591][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.062620][ T6349] RSP: 002b:00007f82a41fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.062654][ T6349] RAX: fffffffffffffe00 RBX: 00007f82a3626188 RCX: 00007f82a339de59 [ 155.062669][ T6349] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f82a3626188 [ 155.062683][ T6349] RBP: 00007f82a3626180 R08: 0000000000000000 R09: 0000000000000000 [ 155.062697][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.062710][ T6349] R13: 00007f82a3626218 R14: 00007ffc9af52e30 R15: 00007ffc9af52f18 [ 155.062739][ T6349] [ 155.832226][ T6338] kexec: Could not allocate control_code_buffer [ 157.672217][ T6374] random: crng reseeded on system resumption [ 159.207096][ T6400] ubi31: attaching mtd0 [ 159.223182][ T6400] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 159.223236][ T6400] ubi31 error: validate_ec_hdr: bad EC header [ 159.223269][ T6400] Erase counter header dump: [ 159.223280][ T6400] magic 0x55424923 [ 159.223295][ T6400] version 1 [ 159.223309][ T6400] ec 1 [ 159.236951][ T6400] vid_hdr_offset 64 [ 159.239460][ T6400] data_offset 128 [ 159.239480][ T6400] image_seq -1477425756 [ 159.239497][ T6400] hdr_crc 0x3b0cb189 [ 159.239512][ T6400] erase counter header hexdump: [ 159.241179][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(full) [ 159.241218][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.241238][ T6400] Call Trace: [ 159.241249][ T6400] [ 159.241262][ T6400] dump_stack_lvl+0x100/0x190 [ 159.241313][ T6400] validate_ec_hdr+0x2d0/0x330 [ 159.241352][ T6400] ubi_io_read_ec_hdr+0x656/0x6d0 [ 159.241393][ T6400] ubi_attach+0x601/0x4d30 [ 159.241451][ T6400] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 159.241503][ T6400] ? ubi_msg+0x114/0x159 [ 159.241536][ T6400] ? __pfx_ubi_msg+0x10/0x10 [ 159.241569][ T6400] ? __pfx_ubi_attach+0x10/0x10 [ 159.241612][ T6400] ? lockdep_init_map_type+0x5c/0x250 [ 159.241670][ T6400] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 159.241717][ T6400] ? __vmalloc_node_noprof+0xad/0xf0 [ 159.241766][ T6400] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 159.241818][ T6400] ubi_attach_mtd_dev+0x139f/0x32a0 [ 159.241883][ T6400] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 159.241930][ T6400] ? __pfx_get_mtd_device+0x10/0x10 [ 159.241976][ T6400] ctrl_cdev_ioctl+0x36a/0x400 [ 159.242032][ T6400] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 159.242092][ T6400] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 159.242144][ T6400] __x64_sys_ioctl+0x18e/0x210 [ 159.242196][ T6400] do_syscall_64+0x115/0x840 [ 159.242251][ T6400] ? clear_bhb_loop+0x40/0x90 [ 159.242295][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.242331][ T6400] RIP: 0033:0x7f47e439de59 [ 159.242359][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.242391][ T6400] RSP: 002b:00007f47e51f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.242423][ T6400] RAX: ffffffffffffffda RBX: 00007f47e4626180 RCX: 00007f47e439de59 [ 159.242445][ T6400] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 0000000000000006 [ 159.242466][ T6400] RBP: 00007f47e4433e6f R08: 0000000000000000 R09: 0000000000000000 [ 159.242486][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.242506][ T6400] R13: 00007f47e4626218 R14: 00007f47e4626180 R15: 00007ffc682f9c38 [ 159.242550][ T6400] [ 159.252848][ T6400] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 159.401106][ T6400] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 160.345144][ T6406] netlink: 338 bytes leftover after parsing attributes in process `syz.1.102'. [ 160.408679][ T6406] netlink: 338 bytes leftover after parsing attributes in process `syz.1.102'. [ 162.450444][ T6431] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 162.470766][ T6433] random: crng reseeded on system resumption [ 165.192275][ T6472] random: crng reseeded on system resumption [ 165.522518][ T6451] kexec: Could not allocate control_code_buffer [ 166.576742][ T6493] process 'syz.1.117' launched './file0' with NULL argv: empty string added [ 167.343659][ T6500] blktrace: Concurrent blktraces are not allowed on nbd5 [ 168.093042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 169.847092][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 170.382684][ T6511] kexec: Could not allocate control_code_buffer [ 176.546513][ T6562] kexec: Could not allocate control_code_buffer [ 178.631936][ T6613] zram0: detected capacity change from 16 to 0 [ 178.661410][ T6613] zram: Removed device: zram0 [ 179.130242][ T6591] kexec: Could not allocate control_code_buffer [ 183.068009][ T6627] kexec: Could not allocate control_code_buffer [ 183.835733][ T6678] random: crng reseeded on system resumption [ 185.172145][ T6685] random: crng reseeded on system resumption [ 187.637444][ T6686] kexec: Could not allocate control_code_buffer [ 188.022481][ T6713] random: crng reseeded on system resumption [ 190.177347][ T6714] kexec: Could not allocate control_code_buffer [ 194.755336][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.763648][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.508955][ T6794] hub 1-0:1.0: USB hub found [ 195.544313][ T6766] kexec: Could not allocate control_code_buffer [ 195.576249][ T6794] hub 1-0:1.0: 1 port detected [ 198.596600][ T6803] kexec: Could not allocate control_code_buffer [ 201.936502][ T6841] kexec: Could not allocate control_code_buffer [ 203.089471][ T6865] kexec: Could not allocate control_code_buffer [ 203.295406][ T6876] random: crng reseeded on system resumption [ 204.939276][ T6873] kexec: Could not allocate control_code_buffer [ 205.610083][ T6901] random: crng reseeded on system resumption [ 210.508539][ T6951] random: crng reseeded on system resumption [ 212.462668][ T6943] syz.3.191 uses obsolete (PF_INET,SOCK_PACKET) [ 212.675972][ T6924] kexec: Could not allocate control_code_buffer [ 215.129751][ T7001] warning: `syz.1.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 215.190226][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.200'. [ 215.366566][ T7001] bond0: (slave bond_slave_0): Releasing backup interface [ 215.983987][ T7013] ubi31: attaching mtd0 [ 216.002288][ T7013] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 216.002345][ T7013] ubi31 error: validate_ec_hdr: bad EC header [ 216.002377][ T7013] Erase counter header dump: [ 216.002388][ T7013] magic 0x55424923 [ 216.002403][ T7013] version 1 [ 216.002416][ T7013] ec 1 [ 216.002429][ T7013] vid_hdr_offset 64 [ 216.002441][ T7013] data_offset 128 [ 216.002455][ T7013] image_seq -1477425756 [ 216.002468][ T7013] hdr_crc 0x3b0cb189 [ 216.002482][ T7013] erase counter header hexdump: [ 216.013291][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.0.201 Not tainted syzkaller #0 PREEMPT(full) [ 216.013331][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.013351][ T7013] Call Trace: [ 216.013360][ T7013] [ 216.013372][ T7013] dump_stack_lvl+0x100/0x190 [ 216.013414][ T7013] validate_ec_hdr+0x2d0/0x330 [ 216.013452][ T7013] ubi_io_read_ec_hdr+0x656/0x6d0 [ 216.013492][ T7013] ubi_attach+0x601/0x4d30 [ 216.013549][ T7013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.013600][ T7013] ? ubi_msg+0x114/0x159 [ 216.013631][ T7013] ? __pfx_ubi_msg+0x10/0x10 [ 216.013664][ T7013] ? __pfx_ubi_attach+0x10/0x10 [ 216.013706][ T7013] ? lockdep_init_map_type+0x5c/0x250 [ 216.013776][ T7013] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 216.013823][ T7013] ? __vmalloc_node_noprof+0xad/0xf0 [ 216.013871][ T7013] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 216.013922][ T7013] ubi_attach_mtd_dev+0x139f/0x32a0 [ 216.013987][ T7013] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 216.014033][ T7013] ? __pfx_get_mtd_device+0x10/0x10 [ 216.014079][ T7013] ctrl_cdev_ioctl+0x36a/0x400 [ 216.014126][ T7013] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 216.014184][ T7013] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 216.014233][ T7013] __x64_sys_ioctl+0x18e/0x210 [ 216.014283][ T7013] do_syscall_64+0x115/0x840 [ 216.014336][ T7013] ? clear_bhb_loop+0x40/0x90 [ 216.014377][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.014411][ T7013] RIP: 0033:0x7f564af9de59 [ 216.014438][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.014469][ T7013] RSP: 002b:00007f56491f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.014501][ T7013] RAX: ffffffffffffffda RBX: 00007f564b226180 RCX: 00007f564af9de59 [ 216.014523][ T7013] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 0000000000000006 [ 216.014544][ T7013] RBP: 00007f564b033e6f R08: 0000000000000000 R09: 0000000000000000 [ 216.014564][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.014583][ T7013] R13: 00007f564b226218 R14: 00007f564b226180 R15: 00007ffc36c1ebe8 [ 216.014627][ T7013] [ 216.071845][ T7013] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 216.300244][ T7013] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 216.336579][ T7018] random: crng reseeded on system resumption [ 218.541935][ T7042] hub 1-0:1.0: USB hub found [ 218.560926][ T7042] hub 1-0:1.0: 1 port detected [ 220.311142][ T7028] kexec: Could not allocate control_code_buffer [ 221.413386][ T7061] random: crng reseeded on system resumption [ 222.431957][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 222.436927][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 222.442476][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 222.446758][ T5642] Bluetooth: hci3: command 0x0406 tx timeout [ 224.417075][ T7113] random: crng reseeded on system resumption [ 226.157169][ T7133] bond0: option arp_interval: invalid value (/dev/vmci) [ 226.166030][ T7133] bond0: option arp_interval: allowed values 0 - 2147483647 [ 226.331906][ T7141] random: crng reseeded on system resumption [ 227.137407][ T7150] random: crng reseeded on system resumption [ 228.704590][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.711052][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.414515][ T7184] random: crng reseeded on system resumption [ 229.494830][ T7186] random: crng reseeded on system resumption [ 230.692354][ T7206] ubi31: attaching mtd0 [ 230.716926][ T7206] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 230.717003][ T7206] ubi31 error: validate_ec_hdr: bad EC header [ 230.717036][ T7206] Erase counter header dump: [ 230.717047][ T7206] magic 0x55424923 [ 230.717063][ T7206] version 1 [ 230.717076][ T7206] ec 1 [ 230.717088][ T7206] vid_hdr_offset 64 [ 230.718298][ T7206] data_offset 128 [ 230.718318][ T7206] image_seq -1477425756 [ 230.718333][ T7206] hdr_crc 0x3b0cb189 [ 230.718348][ T7206] erase counter header hexdump: [ 230.718441][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(full) [ 230.718478][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.718497][ T7206] Call Trace: [ 230.718508][ T7206] [ 230.718520][ T7206] dump_stack_lvl+0x100/0x190 [ 230.718562][ T7206] validate_ec_hdr+0x2d0/0x330 [ 230.718600][ T7206] ubi_io_read_ec_hdr+0x656/0x6d0 [ 230.718649][ T7206] ubi_attach+0x601/0x4d30 [ 230.718708][ T7206] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.718775][ T7206] ? ubi_msg+0x114/0x159 [ 230.718811][ T7206] ? __pfx_ubi_msg+0x10/0x10 [ 230.718845][ T7206] ? __pfx_ubi_attach+0x10/0x10 [ 230.718887][ T7206] ? lockdep_init_map_type+0x5c/0x250 [ 230.718945][ T7206] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 230.718989][ T7206] ? __vmalloc_node_noprof+0xad/0xf0 [ 230.719038][ T7206] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 230.719088][ T7206] ubi_attach_mtd_dev+0x139f/0x32a0 [ 230.719151][ T7206] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 230.719198][ T7206] ? __pfx_get_mtd_device+0x10/0x10 [ 230.719244][ T7206] ctrl_cdev_ioctl+0x36a/0x400 [ 230.719293][ T7206] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 230.719351][ T7206] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 230.719411][ T7206] __x64_sys_ioctl+0x18e/0x210 [ 230.719446][ T7206] do_syscall_64+0x115/0x840 [ 230.719485][ T7206] ? clear_bhb_loop+0x40/0x90 [ 230.719514][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.719539][ T7206] RIP: 0033:0x7f82a339de59 [ 230.719558][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.719581][ T7206] RSP: 002b:00007f82a41fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.719611][ T7206] RAX: ffffffffffffffda RBX: 00007f82a3626180 RCX: 00007f82a339de59 [ 230.719627][ T7206] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 0000000000000006 [ 230.719642][ T7206] RBP: 00007f82a3433e6f R08: 0000000000000000 R09: 0000000000000000 [ 230.719656][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.719670][ T7206] R13: 00007f82a3626218 R14: 00007f82a3626180 R15: 00007ffc9af52f18 [ 230.719700][ T7206] [ 230.720419][ T7206] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 230.950178][ T7206] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 231.934483][ T7215] random: crng reseeded on system resumption [ 233.990579][ T7214] kexec: Could not allocate control_code_buffer [ 235.806720][ T7273] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 236.061707][ T7261] zswap: compressor 000 not available [ 237.681847][ T7255] kexec: Could not allocate control_code_buffer [ 240.985003][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 241.852919][ T7293] kexec: Could not allocate control_code_buffer [ 241.964810][ T7323] FAULT_INJECTION: forcing a failure. [ 241.964810][ T7323] name fail_futex, interval 1, probability 0, space 0, times 0 [ 241.983862][ T7323] CPU: 0 UID: 0 PID: 7323 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 241.983894][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.983919][ T7323] Call Trace: [ 241.983926][ T7323] [ 241.983935][ T7323] dump_stack_lvl+0x100/0x190 [ 241.983967][ T7323] should_fail_ex.cold+0x5/0xa [ 241.983994][ T7323] get_futex_key+0x1d2/0x14f0 [ 241.984036][ T7323] ? __pfx_get_futex_key+0x10/0x10 [ 241.984074][ T7323] ? rcu_is_watching+0x12/0xc0 [ 241.984101][ T7323] ? sock_write_iter+0x31d/0x5b0 [ 241.984135][ T7323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.984176][ T7323] futex_wake+0xf4/0x5e0 [ 241.984208][ T7323] ? __pfx_futex_wake+0x10/0x10 [ 241.984236][ T7323] ? rw_verify_area+0xce/0x6d0 [ 241.984279][ T7323] ? vfs_write+0x15d/0x1050 [ 241.984319][ T7323] do_futex+0x2b2/0x440 [ 241.984344][ T7323] ? __pfx_do_futex+0x10/0x10 [ 241.984376][ T7323] __x64_sys_futex+0x34f/0x4d0 [ 241.984402][ T7323] ? fput+0x79/0x100 [ 241.984426][ T7323] ? __pfx___x64_sys_futex+0x10/0x10 [ 241.984449][ T7323] ? ksys_write+0x1ac/0x250 [ 241.984484][ T7323] ? __pfx_ksys_write+0x10/0x10 [ 241.984528][ T7323] do_syscall_64+0x115/0x840 [ 241.984566][ T7323] ? clear_bhb_loop+0x40/0x90 [ 241.984595][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.984620][ T7323] RIP: 0033:0x7f38c259de59 [ 241.984640][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.984662][ T7323] RSP: 002b:00007f38c33ce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.984685][ T7323] RAX: ffffffffffffffda RBX: 00007f38c2826098 RCX: 00007f38c259de59 [ 241.984700][ T7323] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f38c282609c [ 241.984715][ T7323] RBP: 00007f38c2826090 R08: 0000000000000001 R09: 0000000000000000 [ 241.984729][ T7323] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 241.984743][ T7323] R13: 00007f38c2826128 R14: 00007fff991bb5e0 R15: 00007fff991bb6c8 [ 241.984775][ T7323] [ 242.880393][ T7330] bond0: option arp_interval: invalid value (/dev/vmci) [ 242.914314][ T7330] bond0: option arp_interval: allowed values 0 - 2147483647 [ 243.960432][ T7354] blktrace: Concurrent blktraces are not allowed on nbd5 [ 245.777588][ T7376] netlink: 146 bytes leftover after parsing attributes in process `syz.1.263'. [ 246.327212][ T7338] kexec: Could not allocate control_code_buffer [ 248.413147][ T7421] FAULT_INJECTION: forcing a failure. [ 248.413147][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 248.456729][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.1.272 Not tainted syzkaller #0 PREEMPT(full) [ 248.456772][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.456787][ T7421] Call Trace: [ 248.456794][ T7421] [ 248.456804][ T7421] dump_stack_lvl+0x100/0x190 [ 248.456834][ T7421] should_fail_ex.cold+0x5/0xa [ 248.456862][ T7421] should_failslab+0xc2/0x120 [ 248.456893][ T7421] __kmalloc_cache_noprof+0x91/0x6c0 [ 248.456934][ T7421] ? rfkill_fop_open+0x1cc/0x480 [ 248.456974][ T7421] rfkill_fop_open+0x1cc/0x480 [ 248.457017][ T7421] ? __pfx_rfkill_fop_open+0x10/0x10 [ 248.457054][ T7421] misc_open+0x26d/0x450 [ 248.457094][ T7421] ? __pfx_misc_open+0x10/0x10 [ 248.457132][ T7421] chrdev_open+0x234/0x6a0 [ 248.457171][ T7421] ? __pfx_apparmor_file_open+0x10/0x10 [ 248.457195][ T7421] ? __pfx_chrdev_open+0x10/0x10 [ 248.457243][ T7421] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 248.457275][ T7421] do_dentry_open+0x6ab/0x14d0 [ 248.457314][ T7421] ? __pfx_chrdev_open+0x10/0x10 [ 248.457358][ T7421] vfs_open+0x82/0x3f0 [ 248.457389][ T7421] path_openat+0x2873/0x4280 [ 248.457440][ T7421] ? __pfx_path_openat+0x10/0x10 [ 248.457487][ T7421] do_file_open+0x20e/0x430 [ 248.457527][ T7421] ? __pfx_do_file_open+0x10/0x10 [ 248.457586][ T7421] ? alloc_fd+0x471/0x7a0 [ 248.457626][ T7421] ? do_getname+0x191/0x390 [ 248.457655][ T7421] do_sys_openat2+0x10f/0x1e0 [ 248.457684][ T7421] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.457715][ T7421] ? fput+0x79/0x100 [ 248.457745][ T7421] __x64_sys_openat+0x12d/0x210 [ 248.457775][ T7421] ? __pfx___x64_sys_openat+0x10/0x10 [ 248.457816][ T7421] do_syscall_64+0x115/0x840 [ 248.457853][ T7421] ? clear_bhb_loop+0x40/0x90 [ 248.457883][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.457911][ T7421] RIP: 0033:0x7f82a339de59 [ 248.457931][ T7421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.457954][ T7421] RSP: 002b:00007f82a423e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.457976][ T7421] RAX: ffffffffffffffda RBX: 00007f82a3625fa0 RCX: 00007f82a339de59 [ 248.457991][ T7421] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 248.458013][ T7421] RBP: 00007f82a3433e6f R08: 0000000000000000 R09: 0000000000000000 [ 248.458027][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.458041][ T7421] R13: 00007f82a3626038 R14: 00007f82a3625fa0 R15: 00007ffc9af52f18 [ 248.458071][ T7421] [ 249.222611][ T7391] kexec: Could not allocate control_code_buffer [ 254.525038][ T7455] kexec: Could not allocate control_code_buffer [ 256.185239][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.195969][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.849269][ T7482] kexec: Could not allocate control_code_buffer [ 257.724967][ T7514] netlink: 146 bytes leftover after parsing attributes in process `syz.2.286'. [ 257.841414][ T7512] FAULT_INJECTION: forcing a failure. [ 257.841414][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 257.899081][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.1.294 Not tainted syzkaller #0 PREEMPT(full) [ 257.899128][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.899148][ T7512] Call Trace: [ 257.899159][ T7512] [ 257.899172][ T7512] dump_stack_lvl+0x100/0x190 [ 257.899216][ T7512] should_fail_ex.cold+0x5/0xa [ 257.899256][ T7512] should_failslab+0xc2/0x120 [ 257.899301][ T7512] __kmalloc_cache_noprof+0x91/0x6c0 [ 257.899354][ T7512] ? __kasan_kmalloc+0xaa/0xb0 [ 257.899391][ T7512] ? ntfs_init_fs_context+0x356/0x670 [ 257.899446][ T7512] ntfs_init_fs_context+0x356/0x670 [ 257.899490][ T7512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.899540][ T7512] alloc_fs_context+0x60c/0xf40 [ 257.899586][ T7512] __x64_sys_fsopen+0xed/0x220 [ 257.899639][ T7512] do_syscall_64+0x115/0x840 [ 257.899694][ T7512] ? clear_bhb_loop+0x40/0x90 [ 257.899737][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.899772][ T7512] RIP: 0033:0x7f82a339de59 [ 257.899799][ T7512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.899830][ T7512] RSP: 002b:00007f82a423e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 257.899862][ T7512] RAX: ffffffffffffffda RBX: 00007f82a3625fa0 RCX: 00007f82a339de59 [ 257.899883][ T7512] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 257.899902][ T7512] RBP: 00007f82a3433e6f R08: 0000000000000000 R09: 0000000000000000 [ 257.899921][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.899940][ T7512] R13: 00007f82a3626038 R14: 00007f82a3625fa0 R15: 00007ffc9af52f18 [ 257.899982][ T7512] [ 258.166861][ T7523] random: crng reseeded on system resumption [ 259.004937][ T7536] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5639] was attempted by ""[7536] [ 259.121534][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 264.604955][ T7557] kexec: Could not allocate control_code_buffer [ 264.934160][ T7582] capability: warning: `syz.3.297' uses 32-bit capabilities (legacy support in use) [ 265.101934][ T7582] FAULT_INJECTION: forcing a failure. [ 265.101934][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 265.134306][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.3.297 Not tainted syzkaller #0 PREEMPT(full) [ 265.134352][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.134373][ T7582] Call Trace: [ 265.134384][ T7582] [ 265.134397][ T7582] dump_stack_lvl+0x100/0x190 [ 265.134463][ T7582] should_fail_ex.cold+0x5/0xa [ 265.134503][ T7582] should_failslab+0xc2/0x120 [ 265.134548][ T7582] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 265.134590][ T7582] ? __d_alloc+0x35/0xa50 [ 265.134631][ T7582] __d_alloc+0x35/0xa50 [ 265.134657][ T7582] d_alloc_pseudo+0x1c/0xc0 [ 265.134689][ T7582] alloc_file_pseudo+0x118/0x290 [ 265.134719][ T7582] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 265.134748][ T7582] ? hugetlbfs_get_inode+0x3f5/0x700 [ 265.134773][ T7582] ? do_raw_spin_lock+0x128/0x260 [ 265.134800][ T7582] hugetlb_file_setup+0x2a8/0x5b0 [ 265.134830][ T7582] memfd_alloc_file+0xc2/0x610 [ 265.134859][ T7582] ? _raw_spin_unlock+0x28/0x50 [ 265.134899][ T7582] ? __pfx_memfd_alloc_file+0x10/0x10 [ 265.134937][ T7582] __do_sys_memfd_create+0x236/0x3d0 [ 265.134970][ T7582] do_syscall_64+0x115/0x840 [ 265.135008][ T7582] ? clear_bhb_loop+0x40/0x90 [ 265.135037][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.135061][ T7582] RIP: 0033:0x7f38c259de59 [ 265.135081][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.135104][ T7582] RSP: 002b:00007f38c33ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 265.135126][ T7582] RAX: ffffffffffffffda RBX: 00007f38c2825fa0 RCX: 00007f38c259de59 [ 265.135141][ T7582] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 265.135155][ T7582] RBP: 00007f38c2633e6f R08: 0000000000000000 R09: 0000000000000000 [ 265.135170][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.135184][ T7582] R13: 00007f38c2826038 R14: 00007f38c2825fa0 R15: 00007fff991bb6c8 [ 265.135214][ T7582] [ 265.785076][ T7596] random: crng reseeded on system resumption [ 266.749099][ T7605] random: crng reseeded on system resumption [ 267.059596][ T7585] kexec: Could not allocate control_code_buffer [ 268.406994][ T7617] random: crng reseeded on system resumption [ 269.823828][ T7640] netlink: 146 bytes leftover after parsing attributes in process `syz.3.305'. [ 272.125157][ T7652] kexec: Could not allocate control_code_buffer [ 272.920333][ T7681] ubi31: attaching mtd0 [ 272.940876][ T7681] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 272.959753][ T7681] ubi31 error: validate_ec_hdr: bad EC header [ 272.959785][ T7681] Erase counter header dump: [ 272.959794][ T7681] magic 0x55424923 [ 272.959804][ T7681] version 1 [ 272.959813][ T7681] ec 1 [ 272.959822][ T7681] vid_hdr_offset 64 [ 272.959831][ T7681] data_offset 128 [ 272.959840][ T7681] image_seq -1477425756 [ 272.959850][ T7681] hdr_crc 0x3b0cb189 [ 272.959860][ T7681] erase counter header hexdump: [ 272.959933][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 272.959960][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.959974][ T7681] Call Trace: [ 272.959981][ T7681] [ 272.959990][ T7681] dump_stack_lvl+0x100/0x190 [ 272.960017][ T7681] validate_ec_hdr+0x2d0/0x330 [ 272.960042][ T7681] ubi_io_read_ec_hdr+0x656/0x6d0 [ 272.960099][ T7681] ubi_attach+0x601/0x4d30 [ 272.960151][ T7681] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.960188][ T7681] ? ubi_msg+0x114/0x159 [ 272.960208][ T7681] ? __pfx_ubi_msg+0x10/0x10 [ 272.960231][ T7681] ? __pfx_ubi_attach+0x10/0x10 [ 272.960261][ T7681] ? lockdep_init_map_type+0x5c/0x250 [ 272.960312][ T7681] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 272.960344][ T7681] ? __vmalloc_node_noprof+0xad/0xf0 [ 272.960378][ T7681] ? ubi_attach_mtd_dev+0x1353/0x32a0 [ 272.960413][ T7681] ubi_attach_mtd_dev+0x139f/0x32a0 [ 272.960461][ T7681] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 272.960493][ T7681] ? __pfx_get_mtd_device+0x10/0x10 [ 272.960524][ T7681] ctrl_cdev_ioctl+0x36a/0x400 [ 272.960581][ T7681] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 272.960640][ T7681] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 272.960691][ T7681] __x64_sys_ioctl+0x18e/0x210 [ 272.960742][ T7681] do_syscall_64+0x115/0x840 [ 272.960797][ T7681] ? clear_bhb_loop+0x40/0x90 [ 272.960840][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.960877][ T7681] RIP: 0033:0x7f38c259de59 [ 272.960904][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.960945][ T7681] RSP: 002b:00007f38c33ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.960976][ T7681] RAX: ffffffffffffffda RBX: 00007f38c2826180 RCX: 00007f38c259de59 [ 272.960998][ T7681] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 0000000000000006 [ 272.961018][ T7681] RBP: 00007f38c2633e6f R08: 0000000000000000 R09: 0000000000000000 [ 272.961039][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.961059][ T7681] R13: 00007f38c2826218 R14: 00007f38c2826180 R15: 00007fff991bb6c8 [ 272.961109][ T7681] [ 272.971833][ T7681] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 273.198935][ T7681] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 274.246472][ T7667] kexec: Could not allocate control_code_buffer [ 276.294805][ T7710] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5631] was attempted by ""[7710] [ 276.597673][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'. [ 278.578806][ T7730] FAULT_INJECTION: forcing a failure. [ 278.578806][ T7730] name failslab, interval 1, probability 0, space 0, times 0 [ 278.607992][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.1.323 Not tainted syzkaller #0 PREEMPT(full) [ 278.608034][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.608052][ T7730] Call Trace: [ 278.608061][ T7730] [ 278.608073][ T7730] dump_stack_lvl+0x100/0x190 [ 278.608111][ T7730] should_fail_ex.cold+0x5/0xa [ 278.608149][ T7730] should_failslab+0xc2/0x120 [ 278.608185][ T7730] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 278.608219][ T7730] ? do_raw_spin_lock+0x128/0x260 [ 278.608246][ T7730] ? alloc_inode+0x183/0x250 [ 278.608285][ T7730] alloc_inode+0x183/0x250 [ 278.608317][ T7730] new_inode+0x22/0x1c0 [ 278.608365][ T7730] nfsd_mkdir+0x78/0x460 [ 278.608407][ T7730] nfsd_fill_super+0x3f9/0x560 [ 278.608448][ T7730] ? __pfx_nfsd_fill_super+0x10/0x10 [ 278.608485][ T7730] get_tree_keyed+0x10e/0x1d0 [ 278.608527][ T7730] vfs_get_tree+0x92/0x320 [ 278.608562][ T7730] path_mount+0x7d0/0x23d0 [ 278.608597][ T7730] ? __pfx_path_mount+0x10/0x10 [ 278.608624][ T7730] ? lockdep_hardirqs_on+0x78/0x100 [ 278.608674][ T7730] ? putname+0xb1/0x110 [ 278.608699][ T7730] ? kmem_cache_free+0x127/0x6b0 [ 278.608760][ T7730] ? __x64_sys_mount+0x293/0x310 [ 278.608787][ T7730] __x64_sys_mount+0x293/0x310 [ 278.608819][ T7730] ? __pfx___x64_sys_mount+0x10/0x10 [ 278.608863][ T7730] do_syscall_64+0x115/0x840 [ 278.608914][ T7730] ? clear_bhb_loop+0x40/0x90 [ 278.608954][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.608987][ T7730] RIP: 0033:0x7f82a339de59 [ 278.609014][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.609047][ T7730] RSP: 002b:00007f82a423e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.609074][ T7730] RAX: ffffffffffffffda RBX: 00007f82a3625fa0 RCX: 00007f82a339de59 [ 278.609092][ T7730] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 278.609109][ T7730] RBP: 00007f82a3433e6f R08: 0000000000000000 R09: 0000000000000000 [ 278.609127][ T7730] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 278.609144][ T7730] R13: 00007f82a3626038 R14: 00007f82a3625fa0 R15: 00007ffc9af52f18 [ 278.609184][ T7730] [ 278.902073][ T7713] kexec: Could not allocate control_code_buffer [ 280.971348][ T7762] random: crng reseeded on system resumption [ 283.150671][ T7782] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[7782] [ 283.284128][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.333'. [ 283.835714][ T7800] random: crng reseeded on system resumption [ 284.204665][ T7806] random: crng reseeded on system resumption [ 285.290703][ T7788] kexec: Could not allocate control_code_buffer [ 286.025235][ T7820] random: crng reseeded on system resumption [ 286.845441][ T7822] FAULT_INJECTION: forcing a failure. [ 286.845441][ T7822] name failslab, interval 1, probability 0, space 0, times 0 [ 286.880217][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 286.880262][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.880282][ T7822] Call Trace: [ 286.880292][ T7822] [ 286.880304][ T7822] dump_stack_lvl+0x100/0x190 [ 286.880346][ T7822] should_fail_ex.cold+0x5/0xa [ 286.880386][ T7822] should_failslab+0xc2/0x120 [ 286.880436][ T7822] __kmalloc_noprof+0xfc/0x820 [ 286.880471][ T7822] ? __lock_acquire+0x49f/0x1a40 [ 286.880522][ T7822] ? sk_prot_alloc+0x10b/0x2a0 [ 286.880586][ T7822] sk_prot_alloc+0x10b/0x2a0 [ 286.880638][ T7822] sk_alloc+0x36/0xe80 [ 286.880676][ T7822] pppol2tp_create+0x32/0x250 [ 286.880727][ T7822] pppox_create+0x15c/0x2c0 [ 286.880779][ T7822] __sock_create+0x339/0x860 [ 286.880838][ T7822] __sys_socket+0x14d/0x260 [ 286.880898][ T7822] ? __pfx___sys_socket+0x10/0x10 [ 286.880963][ T7822] __x64_sys_socket+0x72/0xb0 [ 286.881015][ T7822] ? lockdep_hardirqs_on+0x78/0x100 [ 286.881071][ T7822] do_syscall_64+0x115/0x840 [ 286.881123][ T7822] ? clear_bhb_loop+0x40/0x90 [ 286.881165][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.881200][ T7822] RIP: 0033:0x7f47e439de59 [ 286.881228][ T7822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.881259][ T7822] RSP: 002b:00007f47e5215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 286.881291][ T7822] RAX: ffffffffffffffda RBX: 00007f47e4626090 RCX: 00007f47e439de59 [ 286.881313][ T7822] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000018 [ 286.881332][ T7822] RBP: 00007f47e4433e6f R08: 0000000000000000 R09: 0000000000000000 [ 286.881352][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.881370][ T7822] R13: 00007f47e4626128 R14: 00007f47e4626090 R15: 00007ffc682f9c38 [ 286.881412][ T7822] [ 288.394189][ T7854] sysfs_service_op_store: Client not running :-5: [ 289.894774][ T7874] ================================================================== [ 289.894801][ T7874] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 289.894837][ T7874] Write of size 8 at addr ffffc90004879540 by task syz.2.346/7874 [ 289.894862][ T7874] [ 289.894872][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(full) [ 289.894899][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.894913][ T7874] Call Trace: [ 289.894921][ T7874] [ 289.894930][ T7874] dump_stack_lvl+0x100/0x190 [ 289.894955][ T7874] print_report+0x13d/0x4b0 [ 289.894995][ T7874] ? _raw_spin_lock_irqsave+0x52/0x60 [ 289.895031][ T7874] ? sys_imageblit+0x19fb/0x1d60 [ 289.895082][ T7874] kasan_report+0xdf/0x1c0 [ 289.895123][ T7874] ? sys_imageblit+0x19fb/0x1d60 [ 289.895153][ T7874] sys_imageblit+0x19fb/0x1d60 [ 289.895183][ T7874] ? __pfx_sys_imageblit+0x10/0x10 [ 289.895216][ T7874] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 289.895259][ T7874] soft_cursor+0x524/0xa10 [ 289.895314][ T7874] bit_cursor+0xca1/0x1490 [ 289.895363][ T7874] ? __pfx_bit_cursor+0x10/0x10 [ 289.895406][ T7874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.895440][ T7874] ? get_color+0x1da/0x450 [ 289.895481][ T7874] ? __pfx_bit_cursor+0x10/0x10 [ 289.895518][ T7874] fbcon_cursor+0x43c/0x5e0 [ 289.895551][ T7874] ? mark_held_locks+0x10/0x70 [ 289.895599][ T7874] hide_cursor+0x87/0x230 [ 289.895623][ T7874] do_con_write+0x224c/0x4a30 [ 289.895658][ T7874] ? __mutex_lock+0x26d/0x1bd0 [ 289.895684][ T7874] ? __pfx___mutex_lock+0x10/0x10 [ 289.895705][ T7874] ? do_raw_spin_lock+0x128/0x260 [ 289.895728][ T7874] ? __pfx_do_con_write+0x10/0x10 [ 289.895771][ T7874] con_write+0x23/0xb0 [ 289.895799][ T7874] n_tty_write+0x431/0x1160 [ 289.895840][ T7874] ? __pfx_n_tty_write+0x10/0x10 [ 289.895874][ T7874] ? __kasan_kmalloc+0xaa/0xb0 [ 289.895900][ T7874] ? __pfx_woken_wake_function+0x10/0x10 [ 289.895940][ T7874] ? rcu_is_watching+0x12/0xc0 [ 289.895965][ T7874] ? file_tty_write.isra.0+0x694/0x890 [ 289.895992][ T7874] ? kfree+0x1e5/0x6c0 [ 289.896026][ T7874] ? __pfx_n_tty_write+0x10/0x10 [ 289.896067][ T7874] file_tty_write.isra.0+0x4d2/0x890 [ 289.896099][ T7874] redirected_tty_write+0xd4/0x120 [ 289.896127][ T7874] vfs_write+0x6ac/0x1050 [ 289.896163][ T7874] ? __pfx_redirected_tty_write+0x10/0x10 [ 289.896193][ T7874] ? __pfx_vfs_write+0x10/0x10 [ 289.896227][ T7874] ? find_held_lock+0x2b/0x80 [ 289.896264][ T7874] ksys_write+0x12a/0x250 [ 289.896300][ T7874] ? __pfx_ksys_write+0x10/0x10 [ 289.896340][ T7874] do_syscall_64+0x115/0x840 [ 289.896377][ T7874] ? clear_bhb_loop+0x40/0x90 [ 289.896405][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.896430][ T7874] RIP: 0033:0x7f47e439de59 [ 289.896449][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.896472][ T7874] RSP: 002b:00007f47e51d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.896494][ T7874] RAX: ffffffffffffffda RBX: 00007f47e4626270 RCX: 00007f47e439de59 [ 289.896511][ T7874] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000008 [ 289.896525][ T7874] RBP: 00007f47e4433e6f R08: 0000000000000000 R09: 0000000000000000 [ 289.896540][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.896554][ T7874] R13: 00007f47e4626308 R14: 00007f47e4626270 R15: 00007ffc682f9c38 [ 289.896578][ T7874] [ 289.896587][ T7874] [ 289.896593][ T7874] The buggy address belongs to a vmalloc virtual mapping [ 289.896609][ T7874] Memory state around the buggy address: [ 289.896621][ T7874] ffffc90004879400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 289.896639][ T7874] ffffc90004879480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 289.896655][ T7874] >ffffc90004879500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 289.896668][ T7874] ^ [ 289.896681][ T7874] ffffc90004879580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 289.896698][ T7874] ffffc90004879600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 289.896711][ T7874] ================================================================== [ 289.913541][ T7874] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.913567][ T7874] CPU: 0 UID: 0 PID: 7874 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(full) [ 289.913604][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.913623][ T7874] Call Trace: [ 289.913632][ T7874] [ 289.913645][ T7874] dump_stack_lvl+0x100/0x190 [ 289.913685][ T7874] vpanic+0x552/0x970 [ 289.913717][ T7874] ? __pfx_vpanic+0x10/0x10 [ 289.913827][ T7874] ? sys_imageblit+0x19fb/0x1d60 [ 289.913874][ T7874] panic+0xd1/0xe0 [ 289.913906][ T7874] ? __pfx_panic+0x10/0x10 [ 289.913939][ T7874] ? sys_imageblit+0x19fb/0x1d60 [ 289.913977][ T7874] ? preempt_schedule_common+0x42/0xc0 [ 289.914036][ T7874] check_panic_on_warn.cold+0x19/0x34 [ 289.914075][ T7874] end_report.part.0+0x3a/0x90 [ 289.914127][ T7874] kasan_report.cold+0xe/0x18 [ 289.914180][ T7874] ? sys_imageblit+0x19fb/0x1d60 [ 289.914262][ T7874] sys_imageblit+0x19fb/0x1d60 [ 289.914310][ T7874] ? __pfx_sys_imageblit+0x10/0x10 [ 289.914357][ T7874] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 289.914414][ T7874] soft_cursor+0x524/0xa10 [ 289.914478][ T7874] bit_cursor+0xca1/0x1490 [ 289.914541][ T7874] ? __pfx_bit_cursor+0x10/0x10 [ 289.914600][ T7874] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 289.914650][ T7874] ? get_color+0x1da/0x450 [ 289.914695][ T7874] ? __pfx_bit_cursor+0x10/0x10 [ 289.914745][ T7874] fbcon_cursor+0x43c/0x5e0 [ 289.914793][ T7874] ? mark_held_locks+0x10/0x70 [ 289.914845][ T7874] hide_cursor+0x87/0x230 [ 289.914880][ T7874] do_con_write+0x224c/0x4a30 [ 289.914924][ T7874] ? __mutex_lock+0x26d/0x1bd0 [ 289.914963][ T7874] ? __pfx___mutex_lock+0x10/0x10 [ 289.914996][ T7874] ? do_raw_spin_lock+0x128/0x260 [ 289.915030][ T7874] ? __pfx_do_con_write+0x10/0x10 [ 289.915079][ T7874] con_write+0x23/0xb0 [ 289.915120][ T7874] n_tty_write+0x431/0x1160 [ 289.915177][ T7874] ? __pfx_n_tty_write+0x10/0x10 [ 289.915237][ T7874] ? __kasan_kmalloc+0xaa/0xb0 [ 289.915274][ T7874] ? __pfx_woken_wake_function+0x10/0x10 [ 289.915328][ T7874] ? rcu_is_watching+0x12/0xc0 [ 289.915364][ T7874] ? file_tty_write.isra.0+0x694/0x890 [ 289.915400][ T7874] ? kfree+0x1e5/0x6c0 [ 289.915445][ T7874] ? __pfx_n_tty_write+0x10/0x10 [ 289.915493][ T7874] file_tty_write.isra.0+0x4d2/0x890 [ 289.915536][ T7874] redirected_tty_write+0xd4/0x120 [ 289.915576][ T7874] vfs_write+0x6ac/0x1050 [ 289.915627][ T7874] ? __pfx_redirected_tty_write+0x10/0x10 [ 289.915670][ T7874] ? __pfx_vfs_write+0x10/0x10 [ 289.915717][ T7874] ? find_held_lock+0x2b/0x80 [ 289.915770][ T7874] ksys_write+0x12a/0x250 [ 289.915820][ T7874] ? __pfx_ksys_write+0x10/0x10 [ 289.915877][ T7874] do_syscall_64+0x115/0x840 [ 289.915931][ T7874] ? clear_bhb_loop+0x40/0x90 [ 289.915970][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.916004][ T7874] RIP: 0033:0x7f47e439de59 [ 289.916031][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.916065][ T7874] RSP: 002b:00007f47e51d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.916099][ T7874] RAX: ffffffffffffffda RBX: 00007f47e4626270 RCX: 00007f47e439de59 [ 289.916121][ T7874] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000008 [ 289.916143][ T7874] RBP: 00007f47e4433e6f R08: 0000000000000000 R09: 0000000000000000 [ 289.916163][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.916183][ T7874] R13: 00007f47e4626308 R14: 00007f47e4626270 R15: 00007ffc682f9c38 [ 289.916243][ T7874] [ 289.916864][ T7874] Kernel Offset: disabled