last executing test programs: 5m46.83243911s ago: executing program 2 (id=1527): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/wakeup_count\x00', 0xc0000, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x1, 0x0) (async) fcntl$auto(0x3, 0x4, 0xa553) (async, rerun: 64) madvise$auto(0x0, 0x6c, 0xe) (rerun: 64) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x7, 0x1, 0xffffffffffffffff, 0x5, 0x6) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32) madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32) madvise$auto(0x4, 0x200007, 0x19) (async, rerun: 32) syslog$auto(0x3, 0x0, 0x5) (async, rerun: 32) getpriority$auto_PRIO_USER(0x2, 0x0) (async) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3, 0x3}}, 0x4) (async) sendmmsg$auto(r2, 0x0, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, 0x0, 0x40) (rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) (async, rerun: 32) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250100000005000600090000000800e28856e63170349e3c20888840c14320030004000000050005000800ddff8500060002000000"], 0x44}}, 0x40000) (async, rerun: 32) shutdown$auto(0x200000003, 0x2) (async) set_mempolicy$auto(0x8, &(0x7f0000000000)=0x9, 0x1f) 5m45.789154722s ago: executing program 2 (id=1535): socket(0xa, 0x1, 0x100) (async, rerun: 64) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) (async) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000040)=0x10) (async) write$auto(r1, &(0x7f00000001c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7a) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) (rerun: 32) 5m45.566463668s ago: executing program 2 (id=1536): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80003, 0x300) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x40}, 0x2, 0x0, 0x0, 0x8) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x8200, 0x0) read$auto(r1, 0x0, 0x9) r2 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x1f7}, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r0, &(0x7f0000000200)=""/238, 0xee) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x700) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r3 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) socket(0xa, 0x3, 0x3b) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw6\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/215, 0xd7) splice$auto(0x4, 0x0, r3, 0x0, 0x80000001, 0x9) 5m44.491354572s ago: executing program 2 (id=1545): socket(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200000000, 0x2040007, 0x40, 0x9b72, r0, 0x200000000002) r1 = userfaultfd$auto(0x1) ioctl$auto(0xffffffffffffffff, 0x4000a3, 0xf0b) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x23, 0xa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffd) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) socket(0x2d, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) pread64$auto(r1, &(0x7f00000001c0)=')\x0e', 0xffffffffffffffff, 0x9) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1025, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) close_range$auto(r0, r3, 0x81) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r5, r4, 0x0, 0x1000202) 5m43.429498224s ago: executing program 2 (id=1551): r0 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) preadv$auto(r0, &(0x7f00000004c0)={&(0x7f0000000400)="d9df0a80cc9fa84ac41f8de010bf0eee1ee1ddd6431a6b1fbab3dca705ec717f17dc62f6add7717503d42292d21f0f39fb128752441f9b701619b900f9f0ca943a8ceb6479112e01c835801ff4e30ead5a38df7b348cfb4adc3c87c7f26a8f59962d668487bb98c8dd42de9f74f7d678191925d72c6d302209a9d08e8fb477cd3701cb0817b7019ee3195e7a5ed2c11324caa323a75e64d1ec9affec3f6c9afce060", 0x2}, 0x5, 0x9, 0x78e9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x6b) r1 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000500)="eaac77f5740c718be846a188e8fdc872741e87440dde8985901c256c9d7edbeacad5e846bbf0e531b510b65b062d0057256ccb841b2a00628000f96a4d876ac30a9fa6d3f6e2f1d9b9f31094a29aa29270fe3e14dc2cefe64db6f284e41bb30877ee95d1476732381afc892a93c645a2fecc50a0281c3f431841b1fc297a801e112e09e8eebdc4", 0x1) getitimer$auto(0x2, &(0x7f0000000040)={{0x8, 0x8001}, {0x0, 0x5}}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) getcwd$auto(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="10002dbd188bd6047af9000200292d3df6e8a610c315fc91f30f2a5d9c843f3300381f99f18b255535e2ddac9bbe7b54128202000000b1a8d3579506a9e18836c40000000000000000ef8cef971e33940f8c469b889765a3d45ba51a590db8fb044dc6186048ac828ddad422e6efeea97b45cdcd146d8f69575b70e5161c8196a99e29c9bec051cf99735d4180080778d6a0b9ce3039c01b120bcde4a517a6508077c5053f0fa2b80884c8e627bae9f47a9c01000000ae763e3e745535e53d4853c5187afe59b6599e099b5bda98b40632d7aca20efec08a9862472b2d"], 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x4044054) getcwd$auto(&(0x7f0000000000)='ethtool\x00', 0x9) pivot_root$auto(0x0, 0x0) r3 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x280000, 0x0) getsockopt$auto_SO_TXTIME(r3, 0x8, 0x3d, &(0x7f0000000300)='\xc5#\\!+,5\x00', &(0x7f0000000340)=0x1ff) 5m42.725995189s ago: executing program 2 (id=1556): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/gspca_topro/uevent\x00', 0x484402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x66a72fc8, 0x20009, 0x3, 0x13, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000080)) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) mmap$auto(0x0, 0x6, 0x7, 0x27f, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) sendmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)="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", 0x5, &(0x7f0000000080)={&(0x7f0000001440)="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", 0x4}, 0x98a, 0x0, 0x9, 0x3}, 0x5b1) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x404400, 0x0) ioctl$auto_VHOST_GET_VRING_ENDIAN2(r4, 0x4008af14, &(0x7f0000000140)={0x100, 0x77}) 5m42.461910001s ago: executing program 32 (id=1556): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/gspca_topro/uevent\x00', 0x484402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x66a72fc8, 0x20009, 0x3, 0x13, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000080)) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) mmap$auto(0x0, 0x6, 0x7, 0x27f, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) sendmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)="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", 0x5, &(0x7f0000000080)={&(0x7f0000001440)="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", 0x4}, 0x98a, 0x0, 0x9, 0x3}, 0x5b1) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x404400, 0x0) ioctl$auto_VHOST_GET_VRING_ENDIAN2(r4, 0x4008af14, &(0x7f0000000140)={0x100, 0x77}) 2m47.327117931s ago: executing program 4 (id=2161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x194d8966c85cb5a5, &(0x7f0000000140)="cf5164d963e5fcafa849c83f2d1fa187d5dad68a15820d0183d51e5e62901134bd332934fe4a81600f1037c57a94c82cefb257646c8c2eca529d0a7d509e8e5e17024192f5fff59a0a31ed6c6751d99b7be588bad057e7b7464fdd77ec7f9a40e54ebb3914b364b69d72474d051e4128bbce2d8120c4657092abcce9fec246ac0021168189c2cf1575db1d0c07c9270d06e2109f7f644070fcd4d1744a8108c8b9fb435350", 0xa5, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240)="3a47772a2bb811657c507aeec676d92c9176") prctl$auto_PR_SET_MM_ARG_END(0x78d, 0x9, r1, 0x0, 0xfffffffffffffffa) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1311, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) 2m46.994776852s ago: executing program 4 (id=2163): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x88b00, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f6a002dbd700b"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x402009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8004) mmap$auto(0x0, 0x8000000000b, 0x6, 0xeb1, 0x3ff, 0x4) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/153, 0x99) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="0000000c607eff00", 0x8) 2m46.852032103s ago: executing program 4 (id=2164): r0 = socket(0x11, 0x80003, 0x300) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0xfffefffffffff72f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r1, 0xc0085504, &(0x7f0000000180)={0xf8d, 0x2, 0xfffffff8}) mmap$auto(0x4, 0x2020009, 0x3, 0x7f, 0xffffffffffffffff, 0x1ffffffffffffe) 2m45.17075722s ago: executing program 4 (id=2167): r0 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdc00, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) 2m44.781249459s ago: executing program 4 (id=2168): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x5, 0xee01, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x2}, 0x5, 0x5, 0xfffffffffffffffc, 0x65, @raw=0x9, @raw=0x30, 0xb, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x6, 0x16, 0x0, 0x40) tkill$auto(0x1, 0x7) 2m43.860965998s ago: executing program 4 (id=2173): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x88b00, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f6a002dbd700b"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x402009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8004) mmap$auto(0x0, 0x8000000000b, 0x6, 0xeb1, 0x3ff, 0x4) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/153, 0x99) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="0000000c607eff00", 0x8) 2m43.353252365s ago: executing program 33 (id=2173): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x88b00, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f6a002dbd700b"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x402009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8004) mmap$auto(0x0, 0x8000000000b, 0x6, 0xeb1, 0x3ff, 0x4) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/153, 0x99) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="0000000c607eff00", 0x8) 7.03009403s ago: executing program 3 (id=2578): ioctl$auto_FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r1, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r2, 0xe, 0x100) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400008, 0x100000005}}) io_uring_enter$auto(r3, 0x9, 0x820e, 0x9, 0x0, 0x18) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='7', 0x1) 6.244604308s ago: executing program 3 (id=2580): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose3/carrier\x00', 0x502, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) socket(0xa, 0x1, 0x84) socketpair$auto(0x1, 0x204, 0x3, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) poll$auto(0x0, 0xd59, 0xffffffff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) open(0x0, 0x22240, 0x154) rename$auto(&(0x7f0000000040)='./file0\x00', 0x0) rename$auto(&(0x7f0000000000)='./file0\x00', 0x0) unshare$auto(0x40000080) sendfile$auto(r0, r0, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r3, 0x6) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 4.417914431s ago: executing program 1 (id=2583): mmap$auto(0x9cda, 0x20009, 0x80000001, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4db0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r2, 0x0, 0x594c, 0x9fffffffd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) read$auto(r4, 0x0, 0x2) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto(0xffffffffffffffff, 0x80000000, &(0x7f0000000200)="7a72dc8b01409191c4d778de3dcb49ac3dfd6a543e2ed1518a766bea0631ea3c487f9cf06e2b6f0ce5afe42c78a23afbb6bceb6fb8a5f1327a05c8ae6d0f91398dd4f542273b5e2db50831cdedffe92e3a85d82ff5a42726184d23d404721b3c831eace719831000eeb043962883cc759a89b1aa79000ab95c4b5edad0ce2b0b74c5324344c84ebb4baaba72cd6323f6d1cd9902cb350f4db90101b8fcfd7fb24841ed101e99ecc8", 0x48b) 4.217990144s ago: executing program 5 (id=2585): mmap$auto(0x0, 0xc00008, 0x1, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) 4.138098568s ago: executing program 3 (id=2586): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) waitid$auto(0x9f, 0xffffffffffffffff, &(0x7f0000000200)={@siginfo_0_0={0x40, 0xa8, 0x3, @_timer={0x0, 0xf5, @sival_ptr=&(0x7f0000000180)="3510d5fa8dd196659c0cf051705588e9cb7a6a2616e69c2a1c0dfedbf23a06e0a691fe30522a75caca93af3e5142ec40e367c927b2de816c356a534ce3ed21351cbf1dd84f65eb9a39ff4aa62022e1f8b8be080d35bf1baef53edc1a19dfa68e8866810cccb28d6c89598a43816424c3e6c806fb06536bee536745e980", 0x40000000}}}, 0x8b, &(0x7f0000000280)={{0x793f, 0x7}, {0x100, 0x3}, 0x0, 0x7ff, 0x9, 0xfff, 0xb, 0xd, 0x14503998, 0x81, 0xfffffffffffffffd, 0x1, 0x80000000, 0x81, 0x4, 0x3000000000000}) prlimit64$auto(r0, 0x9, &(0x7f00000000c0)={0x8, 0x7}, &(0x7f0000000340)={0xfffffffffffffffb, 0xfff}) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) (async, rerun: 32) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) (async, rerun: 32) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (rerun: 32) getdents$auto(r2, 0x0, 0xfff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async, rerun: 32) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) (rerun: 32) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) (async, rerun: 64) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) (rerun: 32) ioctl$auto(r5, 0xc0285629, r5) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) open(0x0, 0x6041, 0x0) socket(0x6, 0x2, 0x6) 4.010997388s ago: executing program 0 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdc00, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) socketpair$auto(0x0, 0xf, 0x3, &(0x7f0000000040)=0x53) 3.815089804s ago: executing program 5 (id=2588): socket(0x11, 0xa, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(r0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) kill$auto(0x0, 0x11) ioctl$auto_CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f0000000200)=0x2) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rename$auto(&(0x7f0000000180)='n\xd0T\xf2 x1\x18\xa4\xf8\x9b\xab\xf5\xfaH_8\x1d\x12FL\t\x84\xb2s\x1b\xde\xd5\xe7P\xab-\xfeL\x0f\x98\xf15\xee\xb6\x9e\x01-\xbc\x0e.\',\xd0\x8d\xc3\xa4\x06\x03\xb0\xb9\xb0V\xf2\x0fM\x16_\x8d\x83\xc9\xb7JD\xe2t\xe9\xc4\xa1y\xe0\'\xb3ev\xcfJs\aX\xb5\xa6\x95\xfd\xe6[\x14\xb9\x1f\xdd\x05\xe2kn\x1d\xec]{\xe6Z\x19\xcaG\x12r\xd6.L\x953m\xd8\xb5\t\x01a\xf2\xc3\xd8Si\x02Gt\x83N\x9ch\xd4W*\"\x0e\xcb\x9c3\xe1\x9aG`\x12-^\xac\xea\xbf\x19\xae\xc6{\x19&z\xd9u\xf2C\x1b\xd2\xabWG\x9a\xcf\xc4\x96\xad?y\xdb\xb3`\x87G8\xf1\x81\x10\x15;F\xf0\xbe@?\xc4\x19\xa2Y:\x9bLCW\xad\x9d\xd7tk7\xda\xe5\r\x80\xbd_\x87N\xcb\xc9&\x8f8\x9a\x9a\xd7\xa0\xdd\x91\xdd\x1d\x1e\x8f\xc1\xf768\b[\x88)\xb7\x05\xd7H\x84\xf6\xdd\xa7i8\x105\xa5\xf9\fNG\x84\xb1t\xa4#\x0f\x03\x89\xbcA\xca.\xbc\xc0\xf6w\xc1 \xb7\xb2\x7f\x12\xcfF\xae', &(0x7f0000000480)='4\\\xa6.\x00\x00\x00\x00\x00\x00\xf2\x0f\x1bN\xeam_\xa3\xf8\xe3Y\"X\xcd\r\xc5\xf8\'\xb8\xc5\xdc/\xd6\xb7\x16$<\xd5\xf3\xf7@16\xfb\xbf[\xee\xd7Ey\xbfD\xb4f\x1bn\xbf\xbb\x8f\x13\x13O\xa2\x87\xaa\xe2k\x11hv\xdarY\x10I%\x93\x95\xe3_\xf6*\x10T\x06\ahem\xecb\x94\xb3\xb8Y\xe5z\x18+\x8e\x0e\xc6Zb\xf8\xbc\xd2\xee4bth,5`\xda\xc3\x91\xad\x18\xc8M\t\xc9\x96\x12\xdbcJ\x01\xa5%\a\x00\x00\x00\x00\x00\x00\x00\x16\xa5\xce,\xb6i\x80Hu\xf4U\xde\xa02\x8c\"\xc5T\x15]\xdb9C!\xd3}\xca5\x88\xe5\"?\\\x95\x1f\xf1?\xae\xba~\xe3\xceA\x03\x93\xea\x14/\xc1\x05\xae\xa5\xbe\xfbD\x92Ck\xb6\x96\xd1\xaeYj\x14s\xb8\xd7)R\xcfa\x1a1|\xfa\xce\xd1A\xd6\x1b\xa7\x90\xef\x1e <\xd9\xe1N\xc9$\xbd\r8\xf1\xef\x85\xe7\xe4@\x11]B:\xa9F<\xf6\x1e\x03o\x1a\x1f\xa2\x87\xf3h\xeccr\x8a\x17\xa7\xd3\x10\x86\x82\x87$E\xdf\xa4\x9bQ\xac\x8b\x93$\x1e\x86p\xbaq\xfe\"\xe2\xb5\xdc\x90\x8c\xdd\xa18Vg\x8a@k`\x94\x81\xbd\x94\xb6\"\xc9\xeb.+B\xcaf\x00'/338) 3.705220759s ago: executing program 0 (id=2589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x194d8966c85cb5a5, &(0x7f0000000140)="cf5164d963e5fcafa849c83f2d1fa187d5dad68a15820d0183d51e5e62901134bd332934fe4a81600f10", 0x2a, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240)="3a47772a2bb811657c507aeec676d92c9176df98") prctl$auto_PR_SET_MM_ARG_END(0x78d, 0x9, r1, 0x0, 0xfffffffffffffffa) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="111329bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) 3.489522577s ago: executing program 1 (id=2590): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7fffffff) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) unshare$auto(0x40000080) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) splice$auto(0x4, 0x0, r3, 0x0, 0x80000004, 0x9) write$auto(0x6, &(0x7f00000000c0)='#\a\x1cFnJ\x04\xc76c0\xf6D\xf0\t\b:-\x01\x11\xb1\xd1ldc=\x14\xf6\x91`\xe8\rs\xf1UI\x91\x04\x90\xfd\x9f\xd7|\xf6\xb2lD\x03\xc7\xc8\xe8/cDT%\xa3\xa5n\xb9D\xc6h', 0x1) write$auto(r2, &(0x7f0000000400)='/dev\x1eau\xa4\xa4%\xcb\x00', 0x6) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x101) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x200, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r6 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r6, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40026f33, 0x0) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x92480, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) 3.013128511s ago: executing program 3 (id=2591): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40881, 0x0) write$auto(r0, 0x0, 0xfff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) pidfd_open$auto(0x1, 0x2) mmap$auto(0x0, 0x200006, 0x3, 0x40eb1, 0x602, 0x300000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x698, 0x0, 0x8, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x101) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x1fe, 0x8, 0x0) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x700) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$auto_TIOCMGET2(0xffffffffffffffff, 0x5415, &(0x7f0000000200)="fbc5f5ad7517e718ef520b904f306e65149f32db65af1de1cbc2df4bc2d4220000000000") openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x1842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/aoe/discover/power/runtime_status\x00', 0x201, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x16, 0x401, 0x8000) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) poll$auto(&(0x7f0000000180)={r2, 0x1, 0x9816}, 0x7f, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$auto(0x3, 0x4008af03, 0x0) io_uring_setup$auto(0x166, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/firmware_id\x00', 0x48000, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0xffffffffffffffff, 0x1]}, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) 2.723310524s ago: executing program 0 (id=2592): unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000080)=@enable_stats={0x3}, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/msg_count\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/9, 0x9) ioctl$auto(r1, 0x9210640c, 0xffffffffffffffff) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) 2.51299521s ago: executing program 5 (id=2593): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf000000000000005000", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) 2.379325546s ago: executing program 3 (id=2594): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) socket(0x2, 0x1, 0x106) r6 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) pwritev2$auto(r6, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) socket(0x2, 0x1, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec22\x00', 0x28000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0xfffffffc, &(0x7f00000001c0)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', &(0x7f0000000200)="3f5485b6a89f2025b36cfeba349e7877b814899ad0fb5825069fde77", 0x4) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, 0x0) 2.315263714s ago: executing program 5 (id=2595): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) r3 = dup$auto(r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x80800002) ioctl$auto_ECCGETLAYOUT(r3, 0x81484d11, &(0x7f0000000340)={0x101, [0x101, 0x1, 0x80000000, 0x3, 0xa, 0x5, 0x1, 0x5, 0x808f, 0xe, 0x5, 0x7, 0x2, 0xf, 0x57, 0x8dbc, 0x8, 0x7, 0xd1, 0x72944006, 0x1, 0xfe54, 0x0, 0xfffff645, 0x9, 0x6, 0x9, 0x80, 0x80000000, 0x8dc, 0x4, 0x8, 0xfffff0bf, 0xa, 0x575e6e2c, 0x101, 0xff, 0x2, 0xffff0000, 0x3, 0x71c7, 0x1, 0x8, 0x90, 0xfffffffb, 0x7, 0x3, 0x5, 0x200, 0x100, 0x71d1, 0xffff, 0x9, 0x8, 0x8, 0x3, 0x2, 0x81, 0xe, 0x17, 0xe0b, 0x1, 0x0, 0x57a1], 0x6, [{0xff, 0x6e14}, {0x9, 0x8}, {0x4d1, 0xb9bc}, {0xe, 0x8}, {0x4, 0x24}, {0x1, 0x8}, {0x1, 0x1ff}, {0x1, 0x40}]}) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) close_range$auto(0x2, 0x8000, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) read$auto(r5, 0x0, 0x604f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) socket(0xa, 0x3, 0xff) write$auto_fops_u8_(r4, &(0x7f0000000040)="f5810846a43bc430c097", 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xc, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) timerfd_create$auto(0x7, 0x0) timerfd_settime$auto(r0, 0x0, 0x0, &(0x7f0000000080)={{0x1cf, 0x4}, {0x8, 0x9}}) 2.244521479s ago: executing program 1 (id=2596): mmap$auto(0x0, 0xc00008, 0x1, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) 1.939434657s ago: executing program 0 (id=2597): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xa001, 0x0) (async) syslog$auto(0xff, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xc5) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 1.844384707s ago: executing program 5 (id=2598): r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$auto(r0, 0x80046f45, 0x38) 1.765337624s ago: executing program 1 (id=2599): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000340)={0x8f0, 0x1, 0x7, 0x5, 0x7a000000, 0xbb, "0000000076571500000100", 0x7, 0x41, 0x7, 0x9c, 0x6, 0x7}) semtimedop$auto(0x7, &(0x7f0000000180)={0xffff, 0x7}, 0x1, &(0x7f00000001c0)={0x7, 0x80000000}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000600)="3ed0eaf4f05d5d104644446ed5a83213", 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000844}, 0x40090) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000180), r2) syz_clone3(&(0x7f0000000480)={0x244004800, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300), {}, &(0x7f0000000340)=""/190, 0xbe, &(0x7f0000000400)=""/34, &(0x7f0000000440)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) (async) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) (async) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000340)={0x8f0, 0x1, 0x7, 0x5, 0x7a000000, 0xbb, "0000000076571500000100", 0x7, 0x41, 0x7, 0x9c, 0x6, 0x7}) (async) semtimedop$auto(0x7, &(0x7f0000000180)={0xffff, 0x7}, 0x1, &(0x7f00000001c0)={0x7, 0x80000000}) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x0, 0x0) (async) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000600)="3ed0eaf4f05d5d104644446ed5a83213", 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!'], 0x1ac}, 0x1, 0x0, 0x0, 0x4000844}, 0x40090) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000180), r2) (async) syz_clone3(&(0x7f0000000480)={0x244004800, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300), {}, &(0x7f0000000340)=""/190, 0xbe, &(0x7f0000000400)=""/34, &(0x7f0000000440)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) (async) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) (async) 1.494316935s ago: executing program 0 (id=2600): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) mmap$auto(0x1, 0x2020009, 0x3, 0x80000000eb1, 0xfffffffffffffffa, 0x8002) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(r0, 0x540a, r0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sendmsg$auto_IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2a0, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xb8, 0x1, 0x0, 0x1, [@nested={0xab, 0x127, 0x0, 0x1, [@typed={0x13, 0x6, 0x0, 0x0, @str='/dev/ttyprintk\x00'}, @generic="cd636674cda1ad8c3680c9ea43fc9b81ed70ced5dd6d454bddf7aeb3342f1f21b1de25b0997eb2789534f869333182888e0d03", @typed={0x5f, 0xf8, 0x0, 0x0, @binary="152de0e846b532214da8bf803ffea837ef418bb2fac911fee07bf9b83eb5bc0779b230d7aa489bd0e14570f87eaa53d83f8ff641799bcda9bbd49689740ca0aafb65c2a05415bb9bce1380f687e1e957b5e40f272a89e6676382b3"}]}, @nested={0x8, 0x139, 0x0, 0x1, [@nested={0x4, 0x10e}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffc0}, @IPVS_CMD_ATTR_SERVICE={0x1b1, 0x1, 0x0, 0x1, [@typed={0xc, 0x9a, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x3e, 0x0, 0x0, @pid=r2}, @typed={0x4, 0x90}, @nested={0xc, 0xa9, 0x0, 0x1, [@nested={0x4, 0x4a}, @nested={0x4, 0x4c}]}, @generic="a7b8d8821bd629812b1a83a392256e4e8cdeb8c571465fbcde7b3cba040be99046134ad4635f55a53bf675fb78480d4dafd3a8b355266c730eab3bd0174cf4855d10c5f80527bb9bc5", @typed={0x8, 0x78, 0x0, 0x0, @u32}, @nested={0x127, 0x136, 0x0, 0x1, [@typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@local}, @typed={0x13, 0xe1, 0x0, 0x0, @str='/dev/ttyprintk\x00'}, @generic="6790e625460b85b11ed6fb748a90d891a078b3b53e7e709d5b6091ce74d68658e4c8119283999dcac9574d2a2ea23445a72dc0bd32584a3fdd311c5944d5a7bdac933a5bf928abe5771bf945cf255a138c76b3db8663af175e438b1e1c44fbe2b5e9ab01c3403ff482f29ebe065e8f7558ca1fd839bec57415253aec9f28225648abf49949dbd01b5f8163c0edc0148798128c3cb4654bb49121963c3c11025dd78d8537bf251c1a14ff39364a99e1ad0079f9ff12025d61125c03d4d379873350de44be1be3f330a3b2823e2aed90c446696f651a7dadcf5355ca2b81428ab4d49e5e9c2418d342e8e9d1264ba04d6531bd68aa6508bfefd7280a"]}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x81, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8004}, 0x40080) 1.493183248s ago: executing program 5 (id=2601): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) (async) mmap$auto(0x1000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x80000000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x220600, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) unshare$auto(0x9) (async) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x200082, 0x0) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/veth1_to_batadv/optimistic_dad\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) (async) socket(0x2b, 0x1, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ram7\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) capset$auto(&(0x7f00000000c0), &(0x7f0000000240)={0x8, 0x400, 0x7e2}) (async) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) (async) madvise$auto(0x0, 0xf663, 0x15) (async) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 1.132685666s ago: executing program 1 (id=2602): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="e388bea156873508fe4320d7f215affde7cb43996a0e289ba1d8ddea38fbe2c6ba05f1ec013ed33955942aff74d7d0d5eb8119526b0c262ed02c3d9843f041e8348fc0e29779fe"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfc7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) r3 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(r3, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) setreuid$auto(0x3, 0x7) socket(0x6, 0x800, 0x0) 950.802456ms ago: executing program 0 (id=2603): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="e388bea156873508fe4320d7f215affde7cb43996a0e289ba1d8ddea38fbe2c6ba05f1ec013ed33955942aff74d7d0d5eb8119526b0c262ed02c3d9843f041e8348fc0e29779fe"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfc7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) r3 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(r3, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) setreuid$auto(0x3, 0x7) socket(0x6, 0x800, 0x0) 330.29122ms ago: executing program 3 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x194d89664c5431a5, &(0x7f00000003c0)="cf5164d963e5fcafa849c83f2d1fa187d5dad68a15820d0183d51e5e62901134bd332934fe4a81600f5037c57a94c82cefb257646c8c2eca529d0a7d509e8e5e17024192f5fff59a0a31ed6c6751d99b7be588bad057e7b7464fdd77ec7f9a40e54ebb3914b364b69d72474d051e4128bbce2d8120c4657092abcce9fec246ac0021168189c2cf1575db1d0c07c9270d06e2109f7f644070fcd4d1744a8108c8b9fb435350", 0xa5, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000480)="3a47772add610fd3413a5ed85b9ecefda3c6474dbaf1e22c568bf6967aeec6763e13540a4400c8018d2d777b5d878ba4efd8265d821af2240449aca49e47ff57c6c448498d3fee9bc6ecdea11466a0bbacc6380a85038ae74e9ef47931019145dfc4fcd472adaba02c1c18c04b2ee45b6efaaf76142b3c48a933c54e2bfe177fd1fca9ba3765aad985d09dc373c10e68cfc22e47adcdeb968c5cdd03c8d96fe9870c8f24785d17a2d297b3708cf3e3cdf8b9792200"/194) prctl$auto_PR_SET_MM_ARG_END(0x78d, 0x9, r1, 0x0, 0xfffffffffffffffa) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) prctl$auto(0x23, 0x1, 0x1000000000000, 0x0, 0x0) open_tree$auto(r4, 0x0, 0xa0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r5, 0x0, 0x20) fstat$auto(r5, &(0x7f0000000280)={0x7, 0x2, 0x2, 0xa4, 0xee01, 0xee01, 0x0, 0xc26, 0x6, 0x3, 0x7f, 0x7, 0x5, 0xce6, 0x8, 0x401, 0xf}) setfsuid$auto(r6) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) r7 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r7, 0x8008330e, 0x0) accept$auto(r5, 0x0, 0x0) write$auto(0xca, 0x0, 0x10) r8 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0) ioctl$auto_EVIOCSMASK(r8, 0x40104593, 0x0) socket(0x10, 0x3, 0x0) symlink$auto(&(0x7f0000000140)='./file0/file0\x00', 0x0) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000023bcf69817c0dead04bdeb1b00", @ANYRES16=r2, @ANYBLOB="111329bd7000fcdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) 0s ago: executing program 1 (id=2605): r0 = socket(0x11, 0x80003, 0x300) r1 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0xfffefffffffff72f) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0xfffffffffffffd6d, 0x2, 0xeb0, r1, 0x8000) madvise$auto(0x0, 0x200007, 0x19) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x8, 0x6, 0x29, 0x14, 0xfffffffffffffffb, 0x3) socketpair$auto(0xff000001, 0x9, 0xa, 0x0) clone$auto(0x21, 0x1000, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, &(0x7f0000000180)={0xf8d, 0x2, 0xfffffff8}) mmap$auto(0x4, 0x2020009, 0x3, 0x7f, 0xffffffffffffffff, 0x1ffffffffffffe) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) kernel console output (not intermixed with test programs): is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.990709][T17085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.016415][T17085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.028288][T17085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.058801][T17085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.325924][T17085] hsr_slave_0: entered promiscuous mode [ 670.333831][T17085] hsr_slave_1: entered promiscuous mode [ 670.340261][T17085] debugfs: 'hsr0' already exists in 'hsr' [ 670.347136][T17085] Cannot create hsr debugfs directory [ 670.745771][T17085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.768691][T17085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.775724][T13792] Bluetooth: hci3: command tx timeout [ 670.828187][T17085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.907061][T17085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 671.438330][T17085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.554756][T17085] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.611622][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.618726][T13091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.649600][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.656725][T13091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.876799][T17220] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 673.057868][T17085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.772584][T17085] veth0_vlan: entered promiscuous mode [ 675.162694][T17085] veth1_vlan: entered promiscuous mode [ 675.949614][T17085] veth0_macvtap: entered promiscuous mode [ 675.987630][T17085] veth1_macvtap: entered promiscuous mode [ 676.180593][T17085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.248311][T17085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.289228][T14059] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.336210][T14059] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.371197][T14059] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.414146][T14059] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.727215][T14059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.751395][T14059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.019704][T13081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.039220][T13081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.557661][T17320] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 679.816558][T17333] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 680.024791][T17353] netlink: 'syz.3.2214': attribute type 21 has an invalid length. [ 680.063788][T17353] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2214'. [ 681.468996][T17363] FAULT_INJECTION: forcing a failure. [ 681.468996][T17363] name failslab, interval 1, probability 0, space 0, times 0 [ 681.528168][T17363] CPU: 1 UID: 0 PID: 17363 Comm: syz.3.2216 Not tainted syzkaller #0 PREEMPT(full) [ 681.528205][T17363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 681.528221][T17363] Call Trace: [ 681.528230][T17363] [ 681.528240][T17363] dump_stack_lvl+0x16c/0x1f0 [ 681.528285][T17363] should_fail_ex+0x512/0x640 [ 681.528320][T17363] ? __kvmalloc_node_noprof+0x124/0x620 [ 681.528353][T17363] should_failslab+0xc2/0x120 [ 681.528388][T17363] __kvmalloc_node_noprof+0x137/0x620 [ 681.528418][T17363] ? bucket_table_alloc.isra.0+0x83/0x460 [ 681.528461][T17363] ? bucket_table_alloc.isra.0+0x83/0x460 [ 681.528495][T17363] bucket_table_alloc.isra.0+0x83/0x460 [ 681.528534][T17363] rhashtable_init_noprof+0x41a/0x7e0 [ 681.528568][T17363] ? kasan_save_track+0x14/0x30 [ 681.528600][T17363] fqdir_init+0xb4/0x1f0 [ 681.528640][T17363] nf_ct_net_init+0x3d/0x370 [ 681.528672][T17363] ? __pfx_nf_ct_net_init+0x10/0x10 [ 681.528703][T17363] ops_init+0x1e2/0x5f0 [ 681.528749][T17363] setup_net+0x10f/0x380 [ 681.528782][T17363] ? lockdep_init_map_type+0x5c/0x280 [ 681.528819][T17363] ? __pfx_setup_net+0x10/0x10 [ 681.528857][T17363] ? debug_mutex_init+0x37/0x70 [ 681.528887][T17363] copy_net_ns+0x2a6/0x5f0 [ 681.528928][T17363] create_new_namespaces+0x3ea/0xa90 [ 681.528967][T17363] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 681.528999][T17363] ksys_unshare+0x45b/0xa40 [ 681.529035][T17363] ? __pfx_ksys_unshare+0x10/0x10 [ 681.529070][T17363] ? xfd_validate_state+0x61/0x180 [ 681.529115][T17363] __x64_sys_unshare+0x31/0x40 [ 681.529148][T17363] do_syscall_64+0xcd/0x490 [ 681.529185][T17363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.529211][T17363] RIP: 0033:0x7f038858ebe9 [ 681.529232][T17363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.529257][T17363] RSP: 002b:00007f0389312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 681.529282][T17363] RAX: ffffffffffffffda RBX: 00007f03887b5fa0 RCX: 00007f038858ebe9 [ 681.529300][T17363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 681.529315][T17363] RBP: 00007f0388611e19 R08: 0000000000000000 R09: 0000000000000000 [ 681.529330][T17363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.529347][T17363] R13: 00007f03887b6038 R14: 00007f03887b5fa0 R15: 00007ffdd726d8f8 [ 681.529383][T17363] [ 683.852136][T17406] FAULT_INJECTION: forcing a failure. [ 683.852136][T17406] name failslab, interval 1, probability 0, space 0, times 0 [ 683.878892][T17406] CPU: 1 UID: 0 PID: 17406 Comm: syz.3.2223 Not tainted syzkaller #0 PREEMPT(full) [ 683.878931][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.878949][T17406] Call Trace: [ 683.878959][T17406] [ 683.878970][T17406] dump_stack_lvl+0x16c/0x1f0 [ 683.879009][T17406] should_fail_ex+0x512/0x640 [ 683.879046][T17406] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 683.879081][T17406] should_failslab+0xc2/0x120 [ 683.879114][T17406] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 683.879145][T17406] ? __proc_create+0xc3/0x8e0 [ 683.879181][T17406] ? __proc_create+0x2ce/0x8e0 [ 683.879224][T17406] __proc_create+0x2ce/0x8e0 [ 683.879261][T17406] ? __pfx___proc_create+0x10/0x10 [ 683.879302][T17406] ? do_raw_spin_unlock+0x172/0x230 [ 683.879342][T17406] ? _raw_spin_unlock+0x28/0x50 [ 683.879376][T17406] proc_create_reg+0x7d/0x180 [ 683.879417][T17406] proc_create_net_data+0x8e/0x1c0 [ 683.879457][T17406] ? __pfx_proc_create_net_data+0x10/0x10 [ 683.879494][T17406] ? lockdep_init_map_type+0x5c/0x280 [ 683.879531][T17406] ? lockdep_init_map_type+0x5c/0x280 [ 683.879568][T17406] ? __pfx_packet_net_init+0x10/0x10 [ 683.879607][T17406] packet_net_init+0x93/0xc0 [ 683.879644][T17406] ops_init+0x1e2/0x5f0 [ 683.879684][T17406] setup_net+0x10f/0x380 [ 683.879716][T17406] ? lockdep_init_map_type+0x5c/0x280 [ 683.879752][T17406] ? __pfx_setup_net+0x10/0x10 [ 683.879797][T17406] ? debug_mutex_init+0x37/0x70 [ 683.879829][T17406] copy_net_ns+0x2a6/0x5f0 [ 683.879871][T17406] create_new_namespaces+0x3ea/0xa90 [ 683.879908][T17406] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 683.879940][T17406] ksys_unshare+0x45b/0xa40 [ 683.879975][T17406] ? __pfx_ksys_unshare+0x10/0x10 [ 683.880011][T17406] ? xfd_validate_state+0x61/0x180 [ 683.880057][T17406] __x64_sys_unshare+0x31/0x40 [ 683.880090][T17406] do_syscall_64+0xcd/0x490 [ 683.880128][T17406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.880155][T17406] RIP: 0033:0x7f038858ebe9 [ 683.880177][T17406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.880204][T17406] RSP: 002b:00007f0389312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 683.880231][T17406] RAX: ffffffffffffffda RBX: 00007f03887b5fa0 RCX: 00007f038858ebe9 [ 683.880249][T17406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 683.880265][T17406] RBP: 00007f0388611e19 R08: 0000000000000000 R09: 0000000000000000 [ 683.880281][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.880296][T17406] R13: 00007f03887b6038 R14: 00007f03887b5fa0 R15: 00007ffdd726d8f8 [ 683.880334][T17406] [ 684.195985][T17409] netlink: 'syz.0.2224': attribute type 21 has an invalid length. [ 684.219673][T17409] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2224'. [ 684.674674][T17423] netlink: 'syz.0.2235': attribute type 21 has an invalid length. [ 684.741865][T17423] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2235'. [ 685.646987][T17439] netlink: 'syz.1.2228': attribute type 21 has an invalid length. [ 685.654879][T17439] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2228'. [ 685.902478][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.909109][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.075706][T17492] FAULT_INJECTION: forcing a failure. [ 689.075706][T17492] name failslab, interval 1, probability 0, space 0, times 0 [ 689.121475][T17492] CPU: 1 UID: 0 PID: 17492 Comm: syz.3.2236 Not tainted syzkaller #0 PREEMPT(full) [ 689.121514][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 689.121530][T17492] Call Trace: [ 689.121539][T17492] [ 689.121550][T17492] dump_stack_lvl+0x16c/0x1f0 [ 689.121591][T17492] should_fail_ex+0x512/0x640 [ 689.121625][T17492] ? __kmalloc_noprof+0xbf/0x510 [ 689.121658][T17492] ? __register_sysctl_table+0xb3/0x1900 [ 689.121697][T17492] should_failslab+0xc2/0x120 [ 689.121731][T17492] __kmalloc_noprof+0xd2/0x510 [ 689.121769][T17492] __register_sysctl_table+0xb3/0x1900 [ 689.121807][T17492] ? is_module_address+0x5f/0xf0 [ 689.121848][T17492] ? __pfx___register_sysctl_table+0x10/0x10 [ 689.121884][T17492] ? is_module_address+0x69/0xf0 [ 689.121918][T17492] ? register_net_sysctl_sz+0x228/0x3e0 [ 689.121963][T17492] brnf_init_net+0x289/0x450 [ 689.122002][T17492] ? __pfx_brnf_init_net+0x10/0x10 [ 689.122035][T17492] ops_init+0x1e2/0x5f0 [ 689.122075][T17492] setup_net+0x10f/0x380 [ 689.122107][T17492] ? lockdep_init_map_type+0x5c/0x280 [ 689.122141][T17492] ? __pfx_setup_net+0x10/0x10 [ 689.122178][T17492] ? debug_mutex_init+0x37/0x70 [ 689.122208][T17492] copy_net_ns+0x2a6/0x5f0 [ 689.122250][T17492] create_new_namespaces+0x3ea/0xa90 [ 689.122288][T17492] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 689.122321][T17492] ksys_unshare+0x45b/0xa40 [ 689.122363][T17492] ? __pfx_ksys_unshare+0x10/0x10 [ 689.122400][T17492] ? xfd_validate_state+0x61/0x180 [ 689.122449][T17492] __x64_sys_unshare+0x31/0x40 [ 689.122483][T17492] do_syscall_64+0xcd/0x490 [ 689.122523][T17492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.122548][T17492] RIP: 0033:0x7f038858ebe9 [ 689.122570][T17492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.122594][T17492] RSP: 002b:00007f0389312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 689.122618][T17492] RAX: ffffffffffffffda RBX: 00007f03887b5fa0 RCX: 00007f038858ebe9 [ 689.122636][T17492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 689.122651][T17492] RBP: 00007f0388611e19 R08: 0000000000000000 R09: 0000000000000000 [ 689.122666][T17492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.122682][T17492] R13: 00007f03887b6038 R14: 00007f03887b5fa0 R15: 00007ffdd726d8f8 [ 689.122717][T17492] [ 691.955707][T17538] serio: Serial port pty6 [ 696.716409][T17612] FAULT_INJECTION: forcing a failure. [ 696.716409][T17612] name failslab, interval 1, probability 0, space 0, times 0 [ 696.741435][T17612] CPU: 1 UID: 0 PID: 17612 Comm: syz.0.2251 Not tainted syzkaller #0 PREEMPT(full) [ 696.741459][T17612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.741468][T17612] Call Trace: [ 696.741474][T17612] [ 696.741480][T17612] dump_stack_lvl+0x16c/0x1f0 [ 696.741504][T17612] should_fail_ex+0x512/0x640 [ 696.741525][T17612] ? __kmalloc_noprof+0xbf/0x510 [ 696.741543][T17612] ? __register_sysctl_table+0xb3/0x1900 [ 696.741564][T17612] should_failslab+0xc2/0x120 [ 696.741592][T17612] __kmalloc_noprof+0xd2/0x510 [ 696.741614][T17612] __register_sysctl_table+0xb3/0x1900 [ 696.741636][T17612] ? is_module_address+0x5f/0xf0 [ 696.741659][T17612] ? __pfx___register_sysctl_table+0x10/0x10 [ 696.741679][T17612] ? is_module_address+0x69/0xf0 [ 696.741698][T17612] ? register_net_sysctl_sz+0x228/0x3e0 [ 696.741723][T17612] brnf_init_net+0x289/0x450 [ 696.741745][T17612] ? __pfx_brnf_init_net+0x10/0x10 [ 696.741764][T17612] ops_init+0x1e2/0x5f0 [ 696.741791][T17612] setup_net+0x10f/0x380 [ 696.741808][T17612] ? lockdep_init_map_type+0x5c/0x280 [ 696.741829][T17612] ? __pfx_setup_net+0x10/0x10 [ 696.741850][T17612] ? debug_mutex_init+0x37/0x70 [ 696.741867][T17612] copy_net_ns+0x2a6/0x5f0 [ 696.741890][T17612] create_new_namespaces+0x3ea/0xa90 [ 696.741914][T17612] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 696.741932][T17612] ksys_unshare+0x45b/0xa40 [ 696.741952][T17612] ? __pfx_ksys_unshare+0x10/0x10 [ 696.741972][T17612] ? xfd_validate_state+0x61/0x180 [ 696.741998][T17612] __x64_sys_unshare+0x31/0x40 [ 696.742017][T17612] do_syscall_64+0xcd/0x490 [ 696.742037][T17612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.742051][T17612] RIP: 0033:0x7f36c1d8ebe9 [ 696.742064][T17612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.742078][T17612] RSP: 002b:00007f36c2b82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 696.742092][T17612] RAX: ffffffffffffffda RBX: 00007f36c1fb5fa0 RCX: 00007f36c1d8ebe9 [ 696.742101][T17612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 696.742110][T17612] RBP: 00007f36c1e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 696.742119][T17612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.742128][T17612] R13: 00007f36c1fb6038 R14: 00007f36c1fb5fa0 R15: 00007fff99347928 [ 696.742147][T17612] [ 697.048705][T17622] netlink: 'syz.3.2252': attribute type 21 has an invalid length. [ 697.056685][T17622] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2252'. [ 697.803144][T13089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 697.824586][T13089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 697.837883][T13089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 697.857231][T13089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 697.879218][T13089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 697.894839][T17627] serio: Serial port pty6 [ 699.083275][T13083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.295001][T13083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.442228][T13083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.602373][T13083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.695760][T17636] chnl_net:caif_netlink_parms(): no params data found [ 699.987381][T13089] Bluetooth: hci4: command tx timeout [ 700.357159][T17636] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.370556][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.392134][T17636] bridge_slave_0: entered allmulticast mode [ 700.407624][T17636] bridge_slave_0: entered promiscuous mode [ 700.608941][T17636] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.636540][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.671360][T17636] bridge_slave_1: entered allmulticast mode [ 700.686514][T17636] bridge_slave_1: entered promiscuous mode [ 700.897571][T17636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.002394][T13083] vlan1: left allmulticast mode [ 701.026673][T13083] veth0_vlan: left allmulticast mode [ 701.049677][T13083] vlan1: left promiscuous mode [ 701.096833][T13083] bridge0: port 3(vlan1) entered disabled state [ 701.442690][T13083] bridge_slave_1: left allmulticast mode [ 701.542719][T13083] bridge_slave_1: left promiscuous mode [ 701.606145][T13083] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.707248][T13083] bridge_slave_0: left allmulticast mode [ 701.712936][T13083] bridge_slave_0: left promiscuous mode [ 701.726198][T13083] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.066966][T13089] Bluetooth: hci4: command tx timeout [ 702.812087][T13083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.827201][T13083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.846787][T13083] bond0 (unregistering): Released all slaves [ 702.871826][T17636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.097128][T17636] team0: Port device team_slave_0 added [ 703.236250][T17636] team0: Port device team_slave_1 added [ 703.461589][T17636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.477407][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.511371][T17636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.524307][T17636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.532139][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.563541][T17636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.633072][T13083] hsr_slave_0: left promiscuous mode [ 703.658894][T13083] hsr_slave_1: left promiscuous mode [ 703.741516][T13083] veth1_macvtap: left promiscuous mode [ 703.754438][T13083] veth1_vlan: left promiscuous mode [ 703.760305][T13083] veth0_vlan: left promiscuous mode [ 704.147237][T13089] Bluetooth: hci4: command tx timeout [ 704.616640][T13083] team0 (unregistering): Port device team_slave_0 removed [ 706.052053][T17636] hsr_slave_0: entered promiscuous mode [ 706.059186][T17636] hsr_slave_1: entered promiscuous mode [ 706.065561][T17636] debugfs: 'hsr0' already exists in 'hsr' [ 706.082563][T17636] Cannot create hsr debugfs directory [ 706.228680][T13089] Bluetooth: hci4: command tx timeout [ 706.614200][T17756] FAULT_INJECTION: forcing a failure. [ 706.614200][T17756] name failslab, interval 1, probability 0, space 0, times 0 [ 706.678798][T17756] CPU: 0 UID: 0 PID: 17756 Comm: syz.3.2270 Not tainted syzkaller #0 PREEMPT(full) [ 706.678835][T17756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 706.678851][T17756] Call Trace: [ 706.678860][T17756] [ 706.678870][T17756] dump_stack_lvl+0x16c/0x1f0 [ 706.678910][T17756] should_fail_ex+0x512/0x640 [ 706.678945][T17756] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 706.678976][T17756] should_failslab+0xc2/0x120 [ 706.679009][T17756] __kmalloc_cache_noprof+0x6a/0x3e0 [ 706.679037][T17756] ? can_pernet_init+0xb7/0x370 [ 706.679076][T17756] ? __pfx_can_pernet_init+0x10/0x10 [ 706.679106][T17756] can_pernet_init+0xb7/0x370 [ 706.679138][T17756] ? __pfx_can_pernet_init+0x10/0x10 [ 706.679167][T17756] ops_init+0x1e2/0x5f0 [ 706.679206][T17756] setup_net+0x10f/0x380 [ 706.679237][T17756] ? lockdep_init_map_type+0x5c/0x280 [ 706.679271][T17756] ? __pfx_setup_net+0x10/0x10 [ 706.679305][T17756] ? debug_mutex_init+0x37/0x70 [ 706.679333][T17756] copy_net_ns+0x2a6/0x5f0 [ 706.679371][T17756] create_new_namespaces+0x3ea/0xa90 [ 706.679407][T17756] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 706.679438][T17756] ksys_unshare+0x45b/0xa40 [ 706.679472][T17756] ? __pfx_ksys_unshare+0x10/0x10 [ 706.679507][T17756] ? xfd_validate_state+0x61/0x180 [ 706.679551][T17756] __x64_sys_unshare+0x31/0x40 [ 706.679585][T17756] do_syscall_64+0xcd/0x490 [ 706.679620][T17756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.679646][T17756] RIP: 0033:0x7f038858ebe9 [ 706.679668][T17756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.679693][T17756] RSP: 002b:00007f0389312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 706.679717][T17756] RAX: ffffffffffffffda RBX: 00007f03887b5fa0 RCX: 00007f038858ebe9 [ 706.679735][T17756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 706.679751][T17756] RBP: 00007f0388611e19 R08: 0000000000000000 R09: 0000000000000000 [ 706.679766][T17756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.679781][T17756] R13: 00007f03887b6038 R14: 00007f03887b5fa0 R15: 00007ffdd726d8f8 [ 706.679816][T17756] [ 708.486870][T17792] netlink: 'syz.1.2274': attribute type 21 has an invalid length. [ 708.515233][T17792] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2274'. [ 709.448794][T17636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 709.525673][T17636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 709.815196][T17636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 709.824912][T17636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 711.007231][T17636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.198199][T17636] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.248782][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.255907][T14059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.306311][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.313525][T14059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.541155][T17636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 711.563899][T17636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 712.268965][T17636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.428655][T17636] veth0_vlan: entered promiscuous mode [ 712.439350][T17636] veth1_vlan: entered promiscuous mode [ 712.735941][T17636] veth0_macvtap: entered promiscuous mode [ 712.746589][T17636] veth1_macvtap: entered promiscuous mode [ 712.774202][T17636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.820253][T17636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.134664][T13108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.198088][T13108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.245563][T13108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.301005][T13108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.787437][T13108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.832937][T13108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.988476][T13108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.036655][T13108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.662689][T17933] serio: Serial port pty6 [ 716.675012][T17937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 718.454839][T17961] serio: Serial port pty6 [ 721.136812][T18005] FAULT_INJECTION: forcing a failure. [ 721.136812][T18005] name failslab, interval 1, probability 0, space 0, times 0 [ 721.279210][T18005] CPU: 0 UID: 0 PID: 18005 Comm: syz.1.2302 Not tainted syzkaller #0 PREEMPT(full) [ 721.279246][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 721.279262][T18005] Call Trace: [ 721.279272][T18005] [ 721.279282][T18005] dump_stack_lvl+0x16c/0x1f0 [ 721.279325][T18005] should_fail_ex+0x512/0x640 [ 721.279360][T18005] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 721.279393][T18005] should_failslab+0xc2/0x120 [ 721.279428][T18005] __kmalloc_cache_noprof+0x6a/0x3e0 [ 721.279456][T18005] ? fqdir_init+0x4f/0x1f0 [ 721.279498][T18005] fqdir_init+0x4f/0x1f0 [ 721.279536][T18005] nf_ct_net_init+0x3d/0x370 [ 721.279568][T18005] ? __pfx_nf_ct_net_init+0x10/0x10 [ 721.279600][T18005] ops_init+0x1e2/0x5f0 [ 721.279641][T18005] setup_net+0x10f/0x380 [ 721.279674][T18005] ? lockdep_init_map_type+0x5c/0x280 [ 721.279709][T18005] ? __pfx_setup_net+0x10/0x10 [ 721.279746][T18005] ? debug_mutex_init+0x37/0x70 [ 721.279777][T18005] copy_net_ns+0x2a6/0x5f0 [ 721.279832][T18005] create_new_namespaces+0x3ea/0xa90 [ 721.279874][T18005] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 721.279926][T18005] ksys_unshare+0x45b/0xa40 [ 721.279974][T18005] ? __pfx_ksys_unshare+0x10/0x10 [ 721.280012][T18005] ? xfd_validate_state+0x61/0x180 [ 721.280064][T18005] __x64_sys_unshare+0x31/0x40 [ 721.280099][T18005] do_syscall_64+0xcd/0x490 [ 721.280136][T18005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.280163][T18005] RIP: 0033:0x7fe536f8ebe9 [ 721.280184][T18005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.280210][T18005] RSP: 002b:00007fe537d9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 721.280236][T18005] RAX: ffffffffffffffda RBX: 00007fe5371b5fa0 RCX: 00007fe536f8ebe9 [ 721.280253][T18005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 721.280268][T18005] RBP: 00007fe537011e19 R08: 0000000000000000 R09: 0000000000000000 [ 721.280283][T18005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.280297][T18005] R13: 00007fe5371b6038 R14: 00007fe5371b5fa0 R15: 00007ffe33fdfa08 [ 721.280333][T18005] [ 722.069524][T18023] serio: Serial port pty6 [ 722.664049][T18035] serio: Serial port pty6 [ 722.910225][T18044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2309'. [ 722.945210][T18044] netlink: 'syz.0.2309': attribute type 21 has an invalid length. [ 722.970443][T18044] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2309'. [ 724.548783][T18072] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.362857][T18074] FAULT_INJECTION: forcing a failure. [ 725.362857][T18074] name failslab, interval 1, probability 0, space 0, times 0 [ 725.481062][T18074] CPU: 0 UID: 0 PID: 18074 Comm: syz.3.2314 Not tainted syzkaller #0 PREEMPT(full) [ 725.481102][T18074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.481118][T18074] Call Trace: [ 725.481127][T18074] [ 725.481139][T18074] dump_stack_lvl+0x16c/0x1f0 [ 725.481181][T18074] should_fail_ex+0x512/0x640 [ 725.481216][T18074] ? __kmalloc_noprof+0xbf/0x510 [ 725.481249][T18074] ? __register_sysctl_table+0xea2/0x1900 [ 725.481285][T18074] should_failslab+0xc2/0x120 [ 725.481317][T18074] __kmalloc_noprof+0xd2/0x510 [ 725.481345][T18074] ? __register_sysctl_table+0xe8e/0x1900 [ 725.481390][T18074] __register_sysctl_table+0xea2/0x1900 [ 725.481434][T18074] ? __pfx___register_sysctl_table+0x10/0x10 [ 725.481468][T18074] ? is_module_address+0x69/0xf0 [ 725.481499][T18074] ? register_net_sysctl_sz+0x228/0x3e0 [ 725.481532][T18074] ? __asan_memmove+0x50/0x60 [ 725.481558][T18074] ? kmemdup_noprof+0x49/0x60 [ 725.481592][T18074] ipv6_sysctl_net_init+0x136/0x2b0 [ 725.481623][T18074] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 725.481660][T18074] ops_init+0x1e2/0x5f0 [ 725.481701][T18074] setup_net+0x10f/0x380 [ 725.481735][T18074] ? lockdep_init_map_type+0x5c/0x280 [ 725.481773][T18074] ? __pfx_setup_net+0x10/0x10 [ 725.481810][T18074] ? debug_mutex_init+0x37/0x70 [ 725.481841][T18074] copy_net_ns+0x2a6/0x5f0 [ 725.481883][T18074] create_new_namespaces+0x3ea/0xa90 [ 725.481922][T18074] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 725.481955][T18074] ksys_unshare+0x45b/0xa40 [ 725.481990][T18074] ? __pfx_ksys_unshare+0x10/0x10 [ 725.482025][T18074] ? xfd_validate_state+0x61/0x180 [ 725.482072][T18074] __x64_sys_unshare+0x31/0x40 [ 725.482106][T18074] do_syscall_64+0xcd/0x490 [ 725.482142][T18074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.482168][T18074] RIP: 0033:0x7f038858ebe9 [ 725.482190][T18074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.482215][T18074] RSP: 002b:00007f0389312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 725.482241][T18074] RAX: ffffffffffffffda RBX: 00007f03887b5fa0 RCX: 00007f038858ebe9 [ 725.482259][T18074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 725.482275][T18074] RBP: 00007f0388611e19 R08: 0000000000000000 R09: 0000000000000000 [ 725.482291][T18074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.482307][T18074] R13: 00007f03887b6038 R14: 00007f03887b5fa0 R15: 00007ffdd726d8f8 [ 725.482344][T18074] [ 725.482355][T18074] sysctl could not get directory: /net/ipv6/route -12 [ 726.303043][ T30] audit: type=1800 audit(6051042786.154:20): pid=18109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2321" name="members" dev="configfs" ino=77814 res=0 errno=0 [ 726.486686][T18107] FAULT_INJECTION: forcing a failure. [ 726.486686][T18107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.508380][T18107] CPU: 1 UID: 0 PID: 18107 Comm: syz.3.2322 Not tainted syzkaller #0 PREEMPT(full) [ 726.508415][T18107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.508429][T18107] Call Trace: [ 726.508437][T18107] [ 726.508447][T18107] dump_stack_lvl+0x16c/0x1f0 [ 726.508484][T18107] should_fail_ex+0x512/0x640 [ 726.508521][T18107] strncpy_from_user+0x3b/0x2e0 [ 726.508562][T18107] getname_flags.part.0+0x8f/0x550 [ 726.508597][T18107] ? syscall_user_dispatch+0x78/0x140 [ 726.508636][T18107] getname_flags+0x93/0xf0 [ 726.508660][T18107] __x64_sys_rename+0x65/0xa0 [ 726.508690][T18107] do_syscall_64+0xcd/0x490 [ 726.508720][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.508740][T18107] RIP: 0033:0x7f038858ebe9 [ 726.508757][T18107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.508779][T18107] RSP: 002b:00007f0389312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 726.508801][T18107] RAX: ffffffffffffffda RBX: 00007f03887b5fa0 RCX: 00007f038858ebe9 [ 726.508815][T18107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 726.508829][T18107] RBP: 00007f0389312090 R08: 0000000000000000 R09: 0000000000000000 [ 726.508842][T18107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.508855][T18107] R13: 00007f03887b6038 R14: 00007f03887b5fa0 R15: 00007ffdd726d8f8 [ 726.508886][T18107] [ 726.774453][T14059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.082850][T14059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.193042][T18118] FAULT_INJECTION: forcing a failure. [ 727.193042][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 727.205869][T18118] CPU: 1 UID: 0 PID: 18118 Comm: syz.5.2325 Not tainted syzkaller #0 PREEMPT(full) [ 727.205900][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 727.205909][T18118] Call Trace: [ 727.205915][T18118] [ 727.205921][T18118] dump_stack_lvl+0x16c/0x1f0 [ 727.205945][T18118] should_fail_ex+0x512/0x640 [ 727.205965][T18118] ? fs_reclaim_acquire+0xae/0x150 [ 727.205987][T18118] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 727.206006][T18118] should_failslab+0xc2/0x120 [ 727.206025][T18118] __kmalloc_noprof+0xd2/0x510 [ 727.206045][T18118] tomoyo_realpath_from_path+0xc2/0x6e0 [ 727.206066][T18118] ? tomoyo_profile+0x47/0x60 [ 727.206080][T18118] tomoyo_path_number_perm+0x245/0x580 [ 727.206096][T18118] ? tomoyo_path_number_perm+0x237/0x580 [ 727.206114][T18118] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 727.206132][T18118] ? find_held_lock+0x2b/0x80 [ 727.206162][T18118] ? find_held_lock+0x2b/0x80 [ 727.206174][T18118] ? hook_file_ioctl_common+0x145/0x410 [ 727.206196][T18118] ? __fget_files+0x20e/0x3c0 [ 727.206215][T18118] security_file_ioctl+0x9b/0x240 [ 727.206233][T18118] __x64_sys_ioctl+0xb7/0x210 [ 727.206255][T18118] do_syscall_64+0xcd/0x490 [ 727.206275][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.206289][T18118] RIP: 0033:0x7f05ce78ebe9 [ 727.206301][T18118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.206315][T18118] RSP: 002b:00007f05cf527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.206329][T18118] RAX: ffffffffffffffda RBX: 00007f05ce9b6090 RCX: 00007f05ce78ebe9 [ 727.206338][T18118] RDX: 0000000000000000 RSI: 000000004004af61 RDI: 0000000000000009 [ 727.206346][T18118] RBP: 00007f05cf527090 R08: 0000000000000000 R09: 0000000000000000 [ 727.206354][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.206362][T18118] R13: 00007f05ce9b6128 R14: 00007f05ce9b6090 R15: 00007ffc90383d38 [ 727.206380][T18118] [ 727.206386][T18118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 727.516411][T14059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.655420][T14059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.782289][T13792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 727.794538][T13792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 727.803734][T13792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 727.815929][T13792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 727.824519][T13792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.995576][T14059] bridge_slave_1: left allmulticast mode [ 728.009435][T14059] bridge_slave_1: left promiscuous mode [ 728.019324][T14059] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.067836][T14059] bridge_slave_0: left allmulticast mode [ 728.088124][T14059] bridge_slave_0: left promiscuous mode [ 728.414923][T14059] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.684042][T14059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.711903][T14059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.743999][T14059] bond0 (unregistering): Released all slaves [ 729.845914][T14059] ovs_: left promiscuous mode [ 729.921373][T13089] Bluetooth: hci0: command tx timeout [ 731.324729][T18129] chnl_net:caif_netlink_parms(): no params data found [ 731.527588][T14059] hsr_slave_0: left promiscuous mode [ 731.545146][T14059] hsr_slave_1: left promiscuous mode [ 731.567158][T14059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.581768][T14059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.600284][T14059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.614229][T14059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.654281][T14059] veth1_macvtap: left promiscuous mode [ 732.008609][T13089] Bluetooth: hci0: command tx timeout [ 732.148985][T14059] team0 (unregistering): Port device team_slave_1 removed [ 732.194219][T14059] team0 (unregistering): Port device team_slave_0 removed [ 732.725597][T18129] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.733453][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.740640][T18129] bridge_slave_0: entered allmulticast mode [ 732.748957][T18129] bridge_slave_0: entered promiscuous mode [ 732.758320][T18129] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.765972][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.773446][T18129] bridge_slave_1: entered allmulticast mode [ 732.781156][T18129] bridge_slave_1: entered promiscuous mode [ 732.954408][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.984575][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.082970][T18129] team0: Port device team_slave_0 added [ 733.116373][T18129] team0: Port device team_slave_1 added [ 733.318786][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.328134][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.365549][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.474064][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.489441][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.629093][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.691789][T18207] FAULT_INJECTION: forcing a failure. [ 733.691789][T18207] name failslab, interval 1, probability 0, space 0, times 0 [ 733.741530][T18207] CPU: 0 UID: 0 PID: 18207 Comm: syz.5.2336 Not tainted syzkaller #0 PREEMPT(full) [ 733.741554][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.741563][T18207] Call Trace: [ 733.741568][T18207] [ 733.741574][T18207] dump_stack_lvl+0x16c/0x1f0 [ 733.741598][T18207] should_fail_ex+0x512/0x640 [ 733.741619][T18207] ? __kmalloc_noprof+0xbf/0x510 [ 733.741637][T18207] ? ops_init+0x77/0x5f0 [ 733.741657][T18207] should_failslab+0xc2/0x120 [ 733.741676][T18207] __kmalloc_noprof+0xd2/0x510 [ 733.741695][T18207] ? lockdep_init_map_type+0x5c/0x280 [ 733.741730][T18207] ops_init+0x77/0x5f0 [ 733.741753][T18207] setup_net+0x10f/0x380 [ 733.741771][T18207] ? lockdep_init_map_type+0x5c/0x280 [ 733.741792][T18207] ? __pfx_setup_net+0x10/0x10 [ 733.741812][T18207] ? debug_mutex_init+0x37/0x70 [ 733.741829][T18207] copy_net_ns+0x2a6/0x5f0 [ 733.741852][T18207] create_new_namespaces+0x3ea/0xa90 [ 733.741883][T18207] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 733.741912][T18207] ksys_unshare+0x45b/0xa40 [ 733.741944][T18207] ? __pfx_ksys_unshare+0x10/0x10 [ 733.741977][T18207] ? xfd_validate_state+0x61/0x180 [ 733.742020][T18207] __x64_sys_unshare+0x31/0x40 [ 733.742039][T18207] do_syscall_64+0xcd/0x490 [ 733.742060][T18207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.742075][T18207] RIP: 0033:0x7f05ce78ebe9 [ 733.742087][T18207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.742102][T18207] RSP: 002b:00007f05cf527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 733.742115][T18207] RAX: ffffffffffffffda RBX: 00007f05ce9b6090 RCX: 00007f05ce78ebe9 [ 733.742125][T18207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 733.742134][T18207] RBP: 00007f05ce811e19 R08: 0000000000000000 R09: 0000000000000000 [ 733.742142][T18207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.742150][T18207] R13: 00007f05ce9b6128 R14: 00007f05ce9b6090 R15: 00007ffc90383d38 [ 733.742169][T18207] [ 734.086810][T13089] Bluetooth: hci0: command tx timeout [ 734.158810][T18129] hsr_slave_0: entered promiscuous mode [ 734.182973][T18129] hsr_slave_1: entered promiscuous mode [ 735.244118][T18221] FAULT_INJECTION: forcing a failure. [ 735.244118][T18221] name failslab, interval 1, probability 0, space 0, times 0 [ 735.256946][T18221] CPU: 1 UID: 0 PID: 18221 Comm: syz.3.2338 Not tainted syzkaller #0 PREEMPT(full) [ 735.256991][T18221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.257005][T18221] Call Trace: [ 735.257015][T18221] [ 735.257026][T18221] dump_stack_lvl+0x16c/0x1f0 [ 735.257072][T18221] should_fail_ex+0x512/0x640 [ 735.257108][T18221] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 735.257145][T18221] should_failslab+0xc2/0x120 [ 735.257178][T18221] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 735.257211][T18221] ? rhashtable_init_noprof+0x4ed/0x7e0 [ 735.257244][T18221] ? rhashtable_init_noprof+0x55e/0x7e0 [ 735.257278][T18221] ? nf_ct_net_init+0x11c/0x370 [ 735.257314][T18221] kmemdup_noprof+0x29/0x60 [ 735.257345][T18221] nf_ct_net_init+0x11c/0x370 [ 735.257376][T18221] ? __pfx_nf_ct_net_init+0x10/0x10 [ 735.257406][T18221] ops_init+0x1e2/0x5f0 [ 735.257445][T18221] setup_net+0x10f/0x380 [ 735.257478][T18221] ? lockdep_init_map_type+0x5c/0x280 [ 735.257513][T18221] ? __pfx_setup_net+0x10/0x10 [ 735.257551][T18221] ? debug_mutex_init+0x37/0x70 [ 735.257577][T18221] copy_net_ns+0x2a6/0x5f0 [ 735.257613][T18221] create_new_namespaces+0x3ea/0xa90 [ 735.257648][T18221] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 735.257678][T18221] ksys_unshare+0x45b/0xa40 [ 735.257711][T18221] ? __pfx_ksys_unshare+0x10/0x10 [ 735.257745][T18221] ? xfd_validate_state+0x61/0x180 [ 735.257790][T18221] __x64_sys_unshare+0x31/0x40 [ 735.257822][T18221] do_syscall_64+0xcd/0x490 [ 735.257857][T18221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.257882][T18221] RIP: 0033:0x7f038858ebe9 [ 735.257902][T18221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.257926][T18221] RSP: 002b:00007f0389312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 735.257950][T18221] RAX: ffffffffffffffda RBX: 00007f03887b5fa0 RCX: 00007f038858ebe9 [ 735.257977][T18221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 735.257992][T18221] RBP: 00007f0388611e19 R08: 0000000000000000 R09: 0000000000000000 [ 735.258006][T18221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.258021][T18221] R13: 00007f03887b6038 R14: 00007f03887b5fa0 R15: 00007ffdd726d8f8 [ 735.258055][T18221] [ 735.776379][T13085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.011140][T13085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.124828][T13085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.165484][T13089] Bluetooth: hci0: command tx timeout [ 736.348181][T18248] FAULT_INJECTION: forcing a failure. [ 736.348181][T18248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.412434][T18129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 736.419222][T18248] CPU: 1 UID: 0 PID: 18248 Comm: syz.5.2343 Not tainted syzkaller #0 PREEMPT(full) [ 736.419253][T18248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 736.419267][T18248] Call Trace: [ 736.419274][T18248] [ 736.419283][T18248] dump_stack_lvl+0x16c/0x1f0 [ 736.419314][T18248] should_fail_ex+0x512/0x640 [ 736.419348][T18248] _copy_from_user+0x2e/0xd0 [ 736.419384][T18248] copy_msghdr_from_user+0x98/0x160 [ 736.419416][T18248] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 736.419463][T18248] ___sys_sendmsg+0xfe/0x1d0 [ 736.419495][T18248] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.419565][T18248] __sys_sendmsg+0x16d/0x220 [ 736.419595][T18248] ? __pfx___sys_sendmsg+0x10/0x10 [ 736.419644][T18248] do_syscall_64+0xcd/0x490 [ 736.419678][T18248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.419703][T18248] RIP: 0033:0x7f05ce78ebe9 [ 736.419721][T18248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.419744][T18248] RSP: 002b:00007f05cf548038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.419768][T18248] RAX: ffffffffffffffda RBX: 00007f05ce9b5fa0 RCX: 00007f05ce78ebe9 [ 736.419785][T18248] RDX: 000000002004881c RSI: 0000200000000580 RDI: 0000000000000003 [ 736.419799][T18248] RBP: 00007f05cf548090 R08: 0000000000000000 R09: 0000000000000000 [ 736.419813][T18248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.419827][T18248] R13: 00007f05ce9b6038 R14: 00007f05ce9b5fa0 R15: 00007ffc90383d38 [ 736.419868][T18248] [ 736.642112][T18129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 736.684916][T18129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 736.835819][T18129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 736.960073][T13792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 736.970802][T13792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 736.979119][T13792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 736.989859][T13792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 736.998462][T13792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 737.130017][T13085] bridge_slave_1: left allmulticast mode [ 737.138334][T13085] bridge_slave_1: left promiscuous mode [ 737.150294][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.244880][T13085] bridge_slave_0: left allmulticast mode [ 737.250561][T13085] bridge_slave_0: left promiscuous mode [ 737.274228][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.542003][T13085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.569192][T13085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.597155][T13085] bond0 (unregistering): Released all slaves [ 739.048221][T13792] Bluetooth: hci1: command tx timeout [ 739.315199][T13085] hsr_slave_0: left promiscuous mode [ 739.335246][T13085] hsr_slave_1: left promiscuous mode [ 739.356406][T13085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.374137][T13085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.392711][T13085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.405667][T13085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.443969][T13085] veth1_macvtap: left promiscuous mode [ 739.521034][T13085] veth0_macvtap: left promiscuous mode [ 739.526938][T13085] veth1_vlan: left promiscuous mode [ 739.532413][T13085] veth0_vlan: left promiscuous mode [ 740.011942][T13085] team0 (unregistering): Port device team_slave_1 removed [ 740.049578][T13085] team0 (unregistering): Port device team_slave_0 removed [ 740.461185][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.511747][T18269] chnl_net:caif_netlink_parms(): no params data found [ 740.560747][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.617016][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.624154][T13091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.661676][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.668871][T13091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.951074][T18269] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.985784][T18269] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.993077][T18269] bridge_slave_0: entered allmulticast mode [ 741.029803][T18269] bridge_slave_0: entered promiscuous mode [ 741.054497][T18129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.111099][T18269] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.124993][T18269] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.132258][T13089] Bluetooth: hci1: command tx timeout [ 741.148963][T18269] bridge_slave_1: entered allmulticast mode [ 741.166990][T18269] bridge_slave_1: entered promiscuous mode [ 741.284978][T18269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.304959][T18341] FAULT_INJECTION: forcing a failure. [ 741.304959][T18341] name failslab, interval 1, probability 0, space 0, times 0 [ 741.322949][T18269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.358439][T18341] CPU: 1 UID: 0 PID: 18341 Comm: syz.5.2355 Not tainted syzkaller #0 PREEMPT(full) [ 741.358476][T18341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.358493][T18341] Call Trace: [ 741.358502][T18341] [ 741.358512][T18341] dump_stack_lvl+0x16c/0x1f0 [ 741.358552][T18341] should_fail_ex+0x512/0x640 [ 741.358585][T18341] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 741.358615][T18341] should_failslab+0xc2/0x120 [ 741.358646][T18341] __kmalloc_cache_noprof+0x6a/0x3e0 [ 741.358672][T18341] ? can_pernet_init+0x11c/0x370 [ 741.358700][T18341] ? kasan_save_track+0x14/0x30 [ 741.358729][T18341] ? __pfx_can_pernet_init+0x10/0x10 [ 741.358760][T18341] can_pernet_init+0x11c/0x370 [ 741.358791][T18341] ? __pfx_can_pernet_init+0x10/0x10 [ 741.358818][T18341] ops_init+0x1e2/0x5f0 [ 741.358857][T18341] setup_net+0x10f/0x380 [ 741.358889][T18341] ? lockdep_init_map_type+0x5c/0x280 [ 741.358925][T18341] ? __pfx_setup_net+0x10/0x10 [ 741.358962][T18341] ? debug_mutex_init+0x37/0x70 [ 741.358993][T18341] copy_net_ns+0x2a6/0x5f0 [ 741.359030][T18341] create_new_namespaces+0x3ea/0xa90 [ 741.359065][T18341] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 741.359096][T18341] ksys_unshare+0x45b/0xa40 [ 741.359131][T18341] ? __pfx_ksys_unshare+0x10/0x10 [ 741.359161][T18341] ? xfd_validate_state+0x61/0x180 [ 741.359204][T18341] __x64_sys_unshare+0x31/0x40 [ 741.359237][T18341] do_syscall_64+0xcd/0x490 [ 741.359273][T18341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.359298][T18341] RIP: 0033:0x7f05ce78ebe9 [ 741.359319][T18341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.359343][T18341] RSP: 002b:00007f05cf548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 741.359368][T18341] RAX: ffffffffffffffda RBX: 00007f05ce9b5fa0 RCX: 00007f05ce78ebe9 [ 741.359385][T18341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 741.359398][T18341] RBP: 00007f05ce811e19 R08: 0000000000000000 R09: 0000000000000000 [ 741.359425][T18341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.359440][T18341] R13: 00007f05ce9b6038 R14: 00007f05ce9b5fa0 R15: 00007ffc90383d38 [ 741.359474][T18341] [ 741.743220][T18269] team0: Port device team_slave_0 added [ 741.767278][T18269] team0: Port device team_slave_1 added [ 742.025063][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.117829][T18269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.131041][T18269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.189059][T18269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.213549][T18269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.228770][T18269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.260011][T18269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.424751][T18129] veth0_vlan: entered promiscuous mode [ 742.435273][T18129] veth1_vlan: entered promiscuous mode [ 742.523355][T18269] hsr_slave_0: entered promiscuous mode [ 742.530981][T18269] hsr_slave_1: entered promiscuous mode [ 742.541194][T18269] debugfs: 'hsr0' already exists in 'hsr' [ 742.547690][T18269] Cannot create hsr debugfs directory [ 742.568661][T18129] veth0_macvtap: entered promiscuous mode [ 742.828827][T18129] veth1_macvtap: entered promiscuous mode [ 743.054159][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.206812][T13089] Bluetooth: hci1: command tx timeout [ 743.207339][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.259181][T13091] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.264931][T18384] FAULT_INJECTION: forcing a failure. [ 743.264931][T18384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.297066][T13091] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.305811][T13091] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.322898][T18384] CPU: 1 UID: 0 PID: 18384 Comm: syz.5.2352 Not tainted syzkaller #0 PREEMPT(full) [ 743.322931][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.322946][T18384] Call Trace: [ 743.322955][T18384] [ 743.322965][T18384] dump_stack_lvl+0x16c/0x1f0 [ 743.323012][T18384] should_fail_ex+0x512/0x640 [ 743.323050][T18384] should_fail_alloc_page+0xe7/0x130 [ 743.323085][T18384] prepare_alloc_pages+0x3c2/0x610 [ 743.323132][T18384] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 743.323168][T18384] ? rcu_is_watching+0x12/0xc0 [ 743.323195][T18384] ? trace_mm_page_alloc+0x11f/0x1a0 [ 743.323231][T18384] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 743.323263][T18384] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 743.323297][T18384] ? is_bpf_text_address+0x8a/0x1a0 [ 743.323333][T18384] ? bpf_ksym_find+0x124/0x1c0 [ 743.323360][T18384] ? is_bpf_text_address+0x94/0x1a0 [ 743.323392][T18384] ? __kernel_text_address+0xd/0x40 [ 743.323415][T18384] ? unwind_get_return_address+0x59/0xa0 [ 743.323456][T18384] alloc_pages_bulk_noprof+0x71c/0x1410 [ 743.323485][T18384] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 743.323523][T18384] ? policy_nodemask+0xea/0x4e0 [ 743.323558][T18384] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 743.323591][T18384] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 743.323638][T18384] kasan_populate_vmalloc+0xf1/0x1f0 [ 743.323674][T18384] alloc_vmap_area+0x959/0x29c0 [ 743.323724][T18384] ? __pfx_alloc_vmap_area+0x10/0x10 [ 743.323769][T18384] __get_vm_area_node+0x1ca/0x330 [ 743.323812][T18384] __vmalloc_node_range_noprof+0x271/0x14b0 [ 743.323836][T18384] ? kernel_clone+0xfc/0x930 [ 743.323864][T18384] ? local_lock_release+0x99/0x140 [ 743.323909][T18384] ? kernel_clone+0xfc/0x930 [ 743.323938][T18384] ? rcu_read_unlock+0x17/0x60 [ 743.323974][T18384] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 743.324018][T18384] ? kernel_clone+0xfc/0x930 [ 743.324046][T18384] __vmalloc_node_noprof+0xad/0xf0 [ 743.324069][T18384] ? kernel_clone+0xfc/0x930 [ 743.324100][T18384] copy_process+0x2c70/0x7690 [ 743.324146][T18384] ? __pfx_copy_process+0x10/0x10 [ 743.324191][T18384] kernel_clone+0xfc/0x930 [ 743.324223][T18384] ? __pfx_kernel_clone+0x10/0x10 [ 743.324266][T18384] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 743.324303][T18384] __do_sys_clone+0xce/0x120 [ 743.324333][T18384] ? __pfx___do_sys_clone+0x10/0x10 [ 743.324378][T18384] ? ksys_write+0x1ac/0x250 [ 743.324406][T18384] ? __pfx_ksys_write+0x10/0x10 [ 743.324444][T18384] do_syscall_64+0xcd/0x490 [ 743.324478][T18384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.324503][T18384] RIP: 0033:0x7f05ce78ebe9 [ 743.324523][T18384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.324547][T18384] RSP: 002b:00007f05cf526fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 743.324570][T18384] RAX: ffffffffffffffda RBX: 00007f05ce9b6090 RCX: 00007f05ce78ebe9 [ 743.324587][T18384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 743.324603][T18384] RBP: 00007f05cf527090 R08: 0000000000000000 R09: 0000000000000000 [ 743.324618][T18384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 743.324633][T18384] R13: 00007f05ce9b6128 R14: 00007f05ce9b6090 R15: 00007ffc90383d38 [ 743.324668][T18384] [ 743.325279][T18384] syz.5.2352: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 743.666244][T18384] CPU: 1 UID: 0 PID: 18384 Comm: syz.5.2352 Not tainted syzkaller #0 PREEMPT(full) [ 743.666284][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.666298][T18384] Call Trace: [ 743.666306][T18384] [ 743.666316][T18384] dump_stack_lvl+0x16c/0x1f0 [ 743.666349][T18384] warn_alloc+0x248/0x3a0 [ 743.666377][T18384] ? __pfx_warn_alloc+0x10/0x10 [ 743.666404][T18384] ? kfree+0x2b4/0x4d0 [ 743.666432][T18384] ? __get_vm_area_node+0x208/0x330 [ 743.666470][T18384] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 743.666492][T18384] ? local_lock_release+0x99/0x140 [ 743.666528][T18384] ? kernel_clone+0xfc/0x930 [ 743.666555][T18384] ? rcu_read_unlock+0x17/0x60 [ 743.666587][T18384] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 743.666619][T18384] ? kernel_clone+0xfc/0x930 [ 743.666644][T18384] __vmalloc_node_noprof+0xad/0xf0 [ 743.666665][T18384] ? kernel_clone+0xfc/0x930 [ 743.666694][T18384] copy_process+0x2c70/0x7690 [ 743.666734][T18384] ? __pfx_copy_process+0x10/0x10 [ 743.666776][T18384] kernel_clone+0xfc/0x930 [ 743.666804][T18384] ? __pfx_kernel_clone+0x10/0x10 [ 743.666848][T18384] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 743.666881][T18384] __do_sys_clone+0xce/0x120 [ 743.666910][T18384] ? __pfx___do_sys_clone+0x10/0x10 [ 743.666950][T18384] ? ksys_write+0x1ac/0x250 [ 743.666974][T18384] ? __pfx_ksys_write+0x10/0x10 [ 743.667007][T18384] do_syscall_64+0xcd/0x490 [ 743.667039][T18384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.667063][T18384] RIP: 0033:0x7f05ce78ebe9 [ 743.667081][T18384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.667102][T18384] RSP: 002b:00007f05cf526fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 743.667123][T18384] RAX: ffffffffffffffda RBX: 00007f05ce9b6090 RCX: 00007f05ce78ebe9 [ 743.667138][T18384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 743.667152][T18384] RBP: 00007f05cf527090 R08: 0000000000000000 R09: 0000000000000000 [ 743.667165][T18384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 743.667179][T18384] R13: 00007f05ce9b6128 R14: 00007f05ce9b6090 R15: 00007ffc90383d38 [ 743.667208][T18384] [ 744.093523][T18384] Mem-Info: [ 744.097128][T18384] active_anon:13490 inactive_anon:4369 isolated_anon:0 [ 744.097128][T18384] active_file:22458 inactive_file:37583 isolated_file:0 [ 744.097128][T18384] unevictable:768 dirty:843 writeback:0 [ 744.097128][T18384] slab_reclaimable:12240 slab_unreclaimable:93905 [ 744.097128][T18384] mapped:27472 shmem:1373 pagetables:1305 [ 744.097128][T18384] sec_pagetables:0 bounce:0 [ 744.097128][T18384] kernel_misc_reclaimable:0 [ 744.097128][T18384] free:1300159 free_pcp:16964 free_cma:0 [ 744.152918][T18384] Node 0 active_anon:53960kB inactive_anon:17476kB active_file:89820kB inactive_file:150204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109880kB dirty:3368kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11444kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 744.185679][T18384] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 744.216148][T18384] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.270445][T18384] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 744.278866][T18384] Node 0 DMA32 free:1279744kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53916kB inactive_anon:17476kB active_file:88584kB inactive_file:150132kB unevictable:1536kB writepending:2368kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:65912kB local_pcp:26632kB free_cma:0kB [ 744.315148][T18384] lowmem_reserve[]: 0 0 1 1 1 [ 744.321858][T18384] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 744.353083][T18384] lowmem_reserve[]: 0 0 0 0 0 [ 744.359304][T18384] Node 1 Normal free:3905856kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:128kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1884kB local_pcp:0kB free_cma:0kB [ 744.360478][T13091] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.391384][T18384] lowmem_reserve[]: 0 0 0 0 0 [ 744.404672][T18384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 744.431147][T18384] Node 0 DMA32: 5507*4kB (UME) 1177*8kB (UME) 2556*16kB (UME) 1636*32kB (UME) 820*64kB (UME) 358*128kB (UME) 157*256kB (UME) 80*512kB (UM) 27*1024kB (UM) 17*2048kB (UM) 223*4096kB (UM) = 1280020kB [ 744.451026][T18384] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 744.463740][T18384] Node 1 Normal: 164*4kB (UME) 48*8kB (UME) 39*16kB (UME) 208*32kB (UME) 103*64kB (UME) 28*128kB (UME) 15*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (ME) 946*4096kB (UM) = 3905856kB [ 744.484773][T18384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.494774][T18384] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 744.504269][T18384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 744.514354][T18384] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 744.530720][T18384] 61416 total pagecache pages [ 744.535430][T18384] 7 pages in swap cache [ 744.540069][T18384] Free swap = 124968kB [ 744.544248][T18384] Total swap = 124996kB [ 744.548545][T18384] 2097051 pages RAM [ 744.552529][T18384] 0 pages HighMem/MovableOnly [ 744.557223][T18384] 430192 pages reserved [ 744.561586][T18384] 0 pages cma reserved [ 744.634313][T13085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.658229][T13085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.819462][T13091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.827321][T13091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.010139][T18399] FAULT_INJECTION: forcing a failure. [ 745.010139][T18399] name failslab, interval 1, probability 0, space 0, times 0 [ 745.035162][T18399] CPU: 1 UID: 0 PID: 18399 Comm: syz.5.2353 Not tainted syzkaller #0 PREEMPT(full) [ 745.035194][T18399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.035210][T18399] Call Trace: [ 745.035220][T18399] [ 745.035231][T18399] dump_stack_lvl+0x16c/0x1f0 [ 745.035270][T18399] should_fail_ex+0x512/0x640 [ 745.035303][T18399] ? __kmalloc_noprof+0xbf/0x510 [ 745.035335][T18399] ? sk_prot_alloc+0x1a8/0x2a0 [ 745.035373][T18399] should_failslab+0xc2/0x120 [ 745.035409][T18399] __kmalloc_noprof+0xd2/0x510 [ 745.035448][T18399] sk_prot_alloc+0x1a8/0x2a0 [ 745.035487][T18399] sk_alloc+0x36/0xc20 [ 745.035518][T18399] pppol2tp_create+0x32/0x250 [ 745.035555][T18399] pppox_create+0x15c/0x2c0 [ 745.035589][T18399] __sock_create+0x338/0x8d0 [ 745.035623][T18399] __sys_socket+0x14d/0x260 [ 745.035651][T18399] ? __pfx___sys_socket+0x10/0x10 [ 745.035677][T18399] ? xfd_validate_state+0x61/0x180 [ 745.035714][T18399] ? __pfx_do_pwritev+0x10/0x10 [ 745.035750][T18399] __x64_sys_socket+0x72/0xb0 [ 745.035775][T18399] ? lockdep_hardirqs_on+0x7c/0x110 [ 745.035807][T18399] do_syscall_64+0xcd/0x490 [ 745.035844][T18399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.035871][T18399] RIP: 0033:0x7f05ce78ebe9 [ 745.035891][T18399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.035918][T18399] RSP: 002b:00007f05cf548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 745.035944][T18399] RAX: ffffffffffffffda RBX: 00007f05ce9b5fa0 RCX: 00007f05ce78ebe9 [ 745.035964][T18399] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000018 [ 745.035981][T18399] RBP: 00007f05ce811e19 R08: 0000000000000000 R09: 0000000000000000 [ 745.035998][T18399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.036014][T18399] R13: 00007f05ce9b6038 R14: 00007f05ce9b5fa0 R15: 00007ffc90383d38 [ 745.036050][T18399] [ 745.290678][T13089] Bluetooth: hci1: command tx timeout [ 745.306827][T18269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 745.443626][T18269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 745.466519][T18269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 745.576619][T18269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 745.729810][T18409] serio: Serial port pty6 [ 745.931504][T18422] FAULT_INJECTION: forcing a failure. [ 745.931504][T18422] name failslab, interval 1, probability 0, space 0, times 0 [ 745.978222][T18422] CPU: 0 UID: 0 PID: 18422 Comm: syz.5.2354 Not tainted syzkaller #0 PREEMPT(full) [ 745.978265][T18422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.978280][T18422] Call Trace: [ 745.978290][T18422] [ 745.978301][T18422] dump_stack_lvl+0x16c/0x1f0 [ 745.978330][T18422] should_fail_ex+0x512/0x640 [ 745.978351][T18422] ? __kmalloc_noprof+0xbf/0x510 [ 745.978371][T18422] ? __register_sysctl_table+0xb3/0x1900 [ 745.978393][T18422] should_failslab+0xc2/0x120 [ 745.978412][T18422] __kmalloc_noprof+0xd2/0x510 [ 745.978433][T18422] __register_sysctl_table+0xb3/0x1900 [ 745.978455][T18422] ? is_module_address+0x5f/0xf0 [ 745.978478][T18422] ? __pfx___register_sysctl_table+0x10/0x10 [ 745.978498][T18422] ? is_module_address+0x69/0xf0 [ 745.978517][T18422] ? register_net_sysctl_sz+0x228/0x3e0 [ 745.978543][T18422] brnf_init_net+0x289/0x450 [ 745.978565][T18422] ? __pfx_brnf_init_net+0x10/0x10 [ 745.978584][T18422] ops_init+0x1e2/0x5f0 [ 745.978606][T18422] setup_net+0x10f/0x380 [ 745.978625][T18422] ? lockdep_init_map_type+0x5c/0x280 [ 745.978645][T18422] ? __pfx_setup_net+0x10/0x10 [ 745.978666][T18422] ? debug_mutex_init+0x37/0x70 [ 745.978682][T18422] copy_net_ns+0x2a6/0x5f0 [ 745.978705][T18422] create_new_namespaces+0x3ea/0xa90 [ 745.978726][T18422] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 745.978745][T18422] ksys_unshare+0x45b/0xa40 [ 745.978764][T18422] ? __pfx_ksys_unshare+0x10/0x10 [ 745.978785][T18422] ? xfd_validate_state+0x61/0x180 [ 745.978811][T18422] __x64_sys_unshare+0x31/0x40 [ 745.978829][T18422] do_syscall_64+0xcd/0x490 [ 745.978850][T18422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.978865][T18422] RIP: 0033:0x7f05ce78ebe9 [ 745.978885][T18422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.978900][T18422] RSP: 002b:00007f05cf527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 745.978915][T18422] RAX: ffffffffffffffda RBX: 00007f05ce9b6090 RCX: 00007f05ce78ebe9 [ 745.978925][T18422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 745.978934][T18422] RBP: 00007f05ce811e19 R08: 0000000000000000 R09: 0000000000000000 [ 745.978943][T18422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.978952][T18422] R13: 00007f05ce9b6128 R14: 00007f05ce9b6090 R15: 00007ffc90383d38 [ 745.978972][T18422] [ 745.985892][T18269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.534243][T18269] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.576066][T14059] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.583228][T14059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.706071][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.713236][T14059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.731525][T18433] bond0: option all_slaves_active: invalid value () [ 746.915467][T18433] bond0: option all_slaves_active: invalid value () [ 747.399975][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.406315][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.681911][T18269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.385851][T18269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.075837][T18495] netlink: 'syz.3.2365': attribute type 21 has an invalid length. [ 749.102123][T18495] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2365'. [ 749.176199][T18269] veth0_vlan: entered promiscuous mode [ 749.248731][T18269] veth1_vlan: entered promiscuous mode [ 749.327441][T18269] veth0_macvtap: entered promiscuous mode [ 749.357456][T18269] veth1_macvtap: entered promiscuous mode [ 749.422464][T18269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.475978][T18269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.539295][T18503] serio: Serial port pty6 [ 749.656612][T14059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.701165][T14059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.733049][T14059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.759077][T14059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.829439][T13091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.840477][T13091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.927269][T13081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.961213][T13081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.007850][T18530] zswap: compressor 1 not available [ 754.284387][T18612] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 756.196714][T18649] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 758.575708][T18679] bond0: option all_slaves_active: invalid value () [ 759.251268][T18708] serio: Serial port pty6 [ 759.516847][T18679] bond0: option all_slaves_active: invalid value () [ 760.878908][ T30] audit: type=1800 audit(6051042820.726:21): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2410" name="features" dev="configfs" ino=83218 res=0 errno=0 [ 762.802861][T13792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.816657][T13792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.824861][T13792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.832828][T13792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.841550][T13792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 764.911200][T13792] Bluetooth: hci4: command tx timeout [ 765.057349][T14059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.203005][T14059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.339922][T14059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.594104][T14059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.734819][T18759] chnl_net:caif_netlink_parms(): no params data found [ 766.270835][T18759] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.279906][T18759] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.287134][T18759] bridge_slave_0: entered allmulticast mode [ 766.379923][T18759] bridge_slave_0: entered promiscuous mode [ 766.490562][T18759] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.497721][T18759] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.548612][T18759] bridge_slave_1: entered allmulticast mode [ 766.561465][T18759] bridge_slave_1: entered promiscuous mode [ 766.722414][T18759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.771060][T18759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.806216][T14059] macvlan0: left allmulticast mode [ 766.889608][T14059] veth1_vlan: left allmulticast mode [ 766.894988][T14059] macvlan0: left promiscuous mode [ 766.901115][T14059] bridge0: port 4(macvlan0) entered disabled state [ 766.922334][T14059] vlan1: left allmulticast mode [ 766.927240][T14059] veth0_vlan: left allmulticast mode [ 766.938555][T14059] vlan1: left promiscuous mode [ 766.944545][T14059] bridge0: port 3(vlan1) entered disabled state [ 766.978828][T13792] Bluetooth: hci4: command tx timeout [ 766.992298][T14059] bridge_slave_1: left allmulticast mode [ 767.016677][T14059] bridge_slave_1: left promiscuous mode [ 767.024684][T14059] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.116954][T14059] bridge_slave_0: left allmulticast mode [ 767.135461][T14059] bridge_slave_0: left promiscuous mode [ 767.212101][T14059] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.862230][T18834] netlink: 'syz.0.2432': attribute type 21 has an invalid length. [ 767.870479][T18834] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2432'. [ 768.108195][T14059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.119823][T14059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.130998][T14059] bond0 (unregistering): Released all slaves [ 768.271573][T18759] team0: Port device team_slave_0 added [ 768.283738][T18827] FAULT_INJECTION: forcing a failure. [ 768.283738][T18827] name failslab, interval 1, probability 0, space 0, times 0 [ 768.301382][T18759] team0: Port device team_slave_1 added [ 768.302503][T18830] FAULT_INJECTION: forcing a failure. [ 768.302503][T18830] name failslab, interval 1, probability 0, space 0, times 0 [ 768.324696][T18827] CPU: 0 UID: 0 PID: 18827 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) [ 768.324734][T18827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 768.324751][T18827] Call Trace: [ 768.324760][T18827] [ 768.324770][T18827] dump_stack_lvl+0x16c/0x1f0 [ 768.324809][T18827] should_fail_ex+0x512/0x640 [ 768.324844][T18827] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 768.324876][T18827] should_failslab+0xc2/0x120 [ 768.324908][T18827] __kmalloc_cache_noprof+0x6a/0x3e0 [ 768.324937][T18827] ? fqdir_init+0x4f/0x1f0 [ 768.324978][T18827] fqdir_init+0x4f/0x1f0 [ 768.325017][T18827] nf_ct_net_init+0x3d/0x370 [ 768.325049][T18827] ? __pfx_nf_ct_net_init+0x10/0x10 [ 768.325080][T18827] ops_init+0x1e2/0x5f0 [ 768.325120][T18827] setup_net+0x10f/0x380 [ 768.325153][T18827] ? lockdep_init_map_type+0x5c/0x280 [ 768.325189][T18827] ? __pfx_setup_net+0x10/0x10 [ 768.325224][T18827] ? debug_mutex_init+0x37/0x70 [ 768.325253][T18827] copy_net_ns+0x2a6/0x5f0 [ 768.325296][T18827] create_new_namespaces+0x3ea/0xa90 [ 768.325334][T18827] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 768.325369][T18827] ksys_unshare+0x45b/0xa40 [ 768.325404][T18827] ? __pfx_ksys_unshare+0x10/0x10 [ 768.325439][T18827] ? xfd_validate_state+0x61/0x180 [ 768.325498][T18827] __x64_sys_unshare+0x31/0x40 [ 768.325534][T18827] do_syscall_64+0xcd/0x490 [ 768.325572][T18827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.325599][T18827] RIP: 0033:0x7f083478ebe9 [ 768.325621][T18827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.325644][T18827] RSP: 002b:00007f08355bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 768.325669][T18827] RAX: ffffffffffffffda RBX: 00007f08349b6090 RCX: 00007f083478ebe9 [ 768.325687][T18827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 768.325702][T18827] RBP: 00007f0834811e19 R08: 0000000000000000 R09: 0000000000000000 [ 768.325719][T18827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.325734][T18827] R13: 00007f08349b6128 R14: 00007f08349b6090 R15: 00007ffde476f628 [ 768.325770][T18827] [ 768.325899][T18830] CPU: 0 UID: 0 PID: 18830 Comm: syz.5.2431 Not tainted syzkaller #0 PREEMPT(full) [ 768.325930][T18830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 768.325945][T18830] Call Trace: [ 768.325954][T18830] [ 768.325964][T18830] dump_stack_lvl+0x16c/0x1f0 [ 768.326000][T18830] should_fail_ex+0x512/0x640 [ 768.326034][T18830] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 768.326073][T18830] should_failslab+0xc2/0x120 [ 768.326108][T18830] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 768.326141][T18830] ? rhashtable_init_noprof+0x4ed/0x7e0 [ 768.326177][T18830] ? rhashtable_init_noprof+0x55e/0x7e0 [ 768.326211][T18830] ? nf_ct_net_init+0x11c/0x370 [ 768.326248][T18830] kmemdup_noprof+0x29/0x60 [ 768.326280][T18830] nf_ct_net_init+0x11c/0x370 [ 768.326312][T18830] ? __pfx_nf_ct_net_init+0x10/0x10 [ 768.326343][T18830] ops_init+0x1e2/0x5f0 [ 768.326382][T18830] setup_net+0x10f/0x380 [ 768.326413][T18830] ? lockdep_init_map_type+0x5c/0x280 [ 768.326447][T18830] ? __pfx_setup_net+0x10/0x10 [ 768.326493][T18830] ? debug_mutex_init+0x37/0x70 [ 768.326524][T18830] copy_net_ns+0x2a6/0x5f0 [ 768.326564][T18830] create_new_namespaces+0x3ea/0xa90 [ 768.326603][T18830] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 768.326638][T18830] ksys_unshare+0x45b/0xa40 [ 768.326673][T18830] ? __pfx_ksys_unshare+0x10/0x10 [ 768.326709][T18830] ? xfd_validate_state+0x61/0x180 [ 768.326757][T18830] __x64_sys_unshare+0x31/0x40 [ 768.326791][T18830] do_syscall_64+0xcd/0x490 [ 768.326828][T18830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.326855][T18830] RIP: 0033:0x7f05ce78ebe9 [ 768.326876][T18830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.326901][T18830] RSP: 002b:00007f05cf527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 768.326926][T18830] RAX: ffffffffffffffda RBX: 00007f05ce9b6090 RCX: 00007f05ce78ebe9 [ 768.326945][T18830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 768.326962][T18830] RBP: 00007f05ce811e19 R08: 0000000000000000 R09: 0000000000000000 [ 768.326980][T18830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.326996][T18830] R13: 00007f05ce9b6128 R14: 00007f05ce9b6090 R15: 00007ffc90383d38 [ 768.327034][T18830] [ 768.801516][T14059] : left promiscuous mode [ 768.879091][T18759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.889644][T18759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.916796][T18759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.930256][T18759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.937217][T18759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.965182][T18759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.061601][T13792] Bluetooth: hci4: command tx timeout [ 769.102390][T18759] hsr_slave_0: entered promiscuous mode [ 769.108549][T18759] hsr_slave_1: entered promiscuous mode [ 769.118410][T18759] debugfs: 'hsr0' already exists in 'hsr' [ 769.124183][T18759] Cannot create hsr debugfs directory [ 769.812197][T14059] hsr_slave_0: left promiscuous mode [ 769.827801][T14059] hsr_slave_1: left promiscuous mode [ 769.859395][T14059] veth1_macvtap: left promiscuous mode [ 769.870812][T14059] veth1_vlan: left promiscuous mode [ 769.882292][T14059] veth0_vlan: left promiscuous mode [ 770.702785][T14059] team0 (unregistering): Port device team_slave_0 removed [ 771.140949][T13792] Bluetooth: hci4: command tx timeout [ 771.392207][T18880] serio: Serial port pty6 [ 771.972736][T18759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 771.990723][T18759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 772.013682][T18759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.025493][T18759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 772.176018][T18759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.218260][T18759] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.247460][T13108] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.254672][T13108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.326984][T14059] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.334143][T14059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.604125][T18759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 773.207413][T18759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.267090][T18759] veth0_vlan: entered promiscuous mode [ 773.281549][T18759] veth1_vlan: entered promiscuous mode [ 773.388275][T18759] veth0_macvtap: entered promiscuous mode [ 773.423778][T18941] FAULT_INJECTION: forcing a failure. [ 773.423778][T18941] name failslab, interval 1, probability 0, space 0, times 0 [ 773.462127][T18941] CPU: 1 UID: 0 PID: 18941 Comm: syz.5.2443 Not tainted syzkaller #0 PREEMPT(full) [ 773.462164][T18941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 773.462181][T18941] Call Trace: [ 773.462190][T18941] [ 773.462202][T18941] dump_stack_lvl+0x16c/0x1f0 [ 773.462244][T18941] should_fail_ex+0x512/0x640 [ 773.462280][T18941] ? __kmalloc_noprof+0xbf/0x510 [ 773.462315][T18941] ? __register_sysctl_table+0xb3/0x1900 [ 773.462351][T18941] should_failslab+0xc2/0x120 [ 773.462386][T18941] __kmalloc_noprof+0xd2/0x510 [ 773.462425][T18941] __register_sysctl_table+0xb3/0x1900 [ 773.462464][T18941] ? is_module_address+0x5f/0xf0 [ 773.462503][T18941] ? __pfx___register_sysctl_table+0x10/0x10 [ 773.462536][T18941] ? is_module_address+0x69/0xf0 [ 773.462569][T18941] ? register_net_sysctl_sz+0x228/0x3e0 [ 773.462608][T18941] brnf_init_net+0x289/0x450 [ 773.462646][T18941] ? __pfx_brnf_init_net+0x10/0x10 [ 773.462677][T18941] ops_init+0x1e2/0x5f0 [ 773.462716][T18941] setup_net+0x10f/0x380 [ 773.462744][T18941] ? lockdep_init_map_type+0x5c/0x280 [ 773.462789][T18941] ? __pfx_setup_net+0x10/0x10 [ 773.462825][T18941] ? debug_mutex_init+0x37/0x70 [ 773.462853][T18941] copy_net_ns+0x2a6/0x5f0 [ 773.462888][T18941] create_new_namespaces+0x3ea/0xa90 [ 773.462926][T18941] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 773.462959][T18941] ksys_unshare+0x45b/0xa40 [ 773.462995][T18941] ? __pfx_ksys_unshare+0x10/0x10 [ 773.463030][T18941] ? xfd_validate_state+0x61/0x180 [ 773.463078][T18941] __x64_sys_unshare+0x31/0x40 [ 773.463112][T18941] do_syscall_64+0xcd/0x490 [ 773.463149][T18941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.463176][T18941] RIP: 0033:0x7f05ce78ebe9 [ 773.463199][T18941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.463227][T18941] RSP: 002b:00007f05cf527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 773.463252][T18941] RAX: ffffffffffffffda RBX: 00007f05ce9b6090 RCX: 00007f05ce78ebe9 [ 773.463270][T18941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 773.463287][T18941] RBP: 00007f05ce811e19 R08: 0000000000000000 R09: 0000000000000000 [ 773.463304][T18941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.463321][T18941] R13: 00007f05ce9b6128 R14: 00007f05ce9b6090 R15: 00007ffc90383d38 [ 773.463357][T18941] [ 773.880879][T18759] veth1_macvtap: entered promiscuous mode [ 773.897498][T18759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.908019][T18759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.077261][T14059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.132338][T18956] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 774.176232][T14059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.212272][T14059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.272844][T14059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.288944][T13083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.303479][T13083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.389598][T13081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.422817][T13081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.152008][T18981] Invalid ELF header magic: != ELF [ 776.145717][T19004] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 776.926474][T19009] FAULT_INJECTION: forcing a failure. [ 776.926474][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 777.005115][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.3.2453 Not tainted syzkaller #0 PREEMPT(full) [ 777.005156][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.005173][T19009] Call Trace: [ 777.005183][T19009] [ 777.005195][T19009] dump_stack_lvl+0x16c/0x1f0 [ 777.005238][T19009] should_fail_ex+0x512/0x640 [ 777.005276][T19009] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 777.005313][T19009] should_failslab+0xc2/0x120 [ 777.005348][T19009] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 777.005380][T19009] ? __proc_create+0xc3/0x8e0 [ 777.005417][T19009] ? __proc_create+0x2ce/0x8e0 [ 777.005459][T19009] __proc_create+0x2ce/0x8e0 [ 777.005498][T19009] ? __pfx___proc_create+0x10/0x10 [ 777.005541][T19009] ? _raw_write_unlock+0x28/0x50 [ 777.005573][T19009] ? proc_register+0x314/0x5f0 [ 777.005615][T19009] proc_create_reg+0x7d/0x180 [ 777.005655][T19009] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 777.005690][T19009] proc_create_net_single+0x86/0x180 [ 777.005731][T19009] ? __pfx_proc_create_net_single+0x10/0x10 [ 777.005790][T19009] can_init_proc+0x24a/0x4d0 [ 777.005826][T19009] can_pernet_init+0x1e4/0x370 [ 777.005861][T19009] ? __pfx_can_pernet_init+0x10/0x10 [ 777.005892][T19009] ops_init+0x1e2/0x5f0 [ 777.005933][T19009] setup_net+0x10f/0x380 [ 777.005967][T19009] ? lockdep_init_map_type+0x5c/0x280 [ 777.006005][T19009] ? __pfx_setup_net+0x10/0x10 [ 777.006043][T19009] ? debug_mutex_init+0x37/0x70 [ 777.006074][T19009] copy_net_ns+0x2a6/0x5f0 [ 777.006117][T19009] create_new_namespaces+0x3ea/0xa90 [ 777.006158][T19009] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 777.006192][T19009] ksys_unshare+0x45b/0xa40 [ 777.006228][T19009] ? __pfx_ksys_unshare+0x10/0x10 [ 777.006265][T19009] ? xfd_validate_state+0x61/0x180 [ 777.006314][T19009] __x64_sys_unshare+0x31/0x40 [ 777.006350][T19009] do_syscall_64+0xcd/0x490 [ 777.006388][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.006415][T19009] RIP: 0033:0x7fb12d58ebe9 [ 777.006437][T19009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.006462][T19009] RSP: 002b:00007fb12e31e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 777.006488][T19009] RAX: ffffffffffffffda RBX: 00007fb12d7b5fa0 RCX: 00007fb12d58ebe9 [ 777.006505][T19009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 777.006522][T19009] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 777.006539][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.006555][T19009] R13: 00007fb12d7b6038 R14: 00007fb12d7b5fa0 R15: 00007ffc751a85e8 [ 777.006592][T19009] [ 778.004229][T19035] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 781.028960][T19093] FAULT_INJECTION: forcing a failure. [ 781.028960][T19093] name failslab, interval 1, probability 0, space 0, times 0 [ 781.105825][T19093] CPU: 0 UID: 0 PID: 19093 Comm: syz.5.2463 Not tainted syzkaller #0 PREEMPT(full) [ 781.105851][T19093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.105861][T19093] Call Trace: [ 781.105867][T19093] [ 781.105874][T19093] dump_stack_lvl+0x16c/0x1f0 [ 781.105898][T19093] should_fail_ex+0x512/0x640 [ 781.105919][T19093] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 781.105941][T19093] should_failslab+0xc2/0x120 [ 781.105959][T19093] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 781.105978][T19093] ? trace_kmem_cache_alloc+0x28/0xc0 [ 781.105999][T19093] ? key_alloc+0xc4d/0x1330 [ 781.106020][T19093] kmemdup_noprof+0x29/0x60 [ 781.106038][T19093] key_alloc+0xc4d/0x1330 [ 781.106063][T19093] ? __pfx_key_alloc+0x10/0x10 [ 781.106080][T19093] ? __asan_memcpy+0x3c/0x60 [ 781.106100][T19093] keyring_alloc+0x44/0xc0 [ 781.106122][T19093] keyctl_get_persistent+0x750/0x8c0 [ 781.106144][T19093] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 781.106167][T19093] ? __x64_sys_futex+0x1e0/0x4c0 [ 781.106185][T19093] ? __x64_sys_futex+0x1e9/0x4c0 [ 781.106206][T19093] ? xfd_validate_state+0x61/0x180 [ 781.106230][T19093] __do_sys_keyctl+0x1a9/0x590 [ 781.106248][T19093] do_syscall_64+0xcd/0x490 [ 781.106269][T19093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.106284][T19093] RIP: 0033:0x7f05ce78ebe9 [ 781.106296][T19093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.106310][T19093] RSP: 002b:00007f05cf548038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 781.106325][T19093] RAX: ffffffffffffffda RBX: 00007f05ce9b5fa0 RCX: 00007f05ce78ebe9 [ 781.106335][T19093] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 781.106344][T19093] RBP: 00007f05ce811e19 R08: 0000000000000001 R09: 0000000000000000 [ 781.106353][T19093] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 781.106362][T19093] R13: 00007f05ce9b6038 R14: 00007f05ce9b5fa0 R15: 00007ffc90383d38 [ 781.106380][T19093] [ 781.316321][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.573443][T19122] rnbd_client L202: map_device: Unknown parameter or missing value 'S' [ 784.720561][T19151] netlink: 'syz.0.2475': attribute type 21 has an invalid length. [ 784.737452][T19151] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2475'. [ 785.313384][T13792] Bluetooth: hci3: command 0x0406 tx timeout [ 788.595895][T19189] FAULT_INJECTION: forcing a failure. [ 788.595895][T19189] name failslab, interval 1, probability 0, space 0, times 0 [ 788.609816][T19189] CPU: 1 UID: 0 PID: 19189 Comm: syz.3.2483 Not tainted syzkaller #0 PREEMPT(full) [ 788.609853][T19189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.609870][T19189] Call Trace: [ 788.609888][T19189] [ 788.609899][T19189] dump_stack_lvl+0x16c/0x1f0 [ 788.609942][T19189] should_fail_ex+0x512/0x640 [ 788.609977][T19189] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 788.610014][T19189] should_failslab+0xc2/0x120 [ 788.610048][T19189] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 788.610077][T19189] ? __proc_create+0xc3/0x8e0 [ 788.610111][T19189] ? __proc_create+0x2ce/0x8e0 [ 788.610151][T19189] __proc_create+0x2ce/0x8e0 [ 788.610188][T19189] ? __pfx___proc_create+0x10/0x10 [ 788.610230][T19189] ? _raw_write_unlock+0x28/0x50 [ 788.610258][T19189] ? proc_register+0x314/0x5f0 [ 788.610298][T19189] proc_create_reg+0x7d/0x180 [ 788.610337][T19189] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 788.610371][T19189] proc_create_net_single+0x86/0x180 [ 788.610409][T19189] ? __pfx_proc_create_net_single+0x10/0x10 [ 788.610460][T19189] can_init_proc+0x1e1/0x4d0 [ 788.610494][T19189] can_pernet_init+0x1e4/0x370 [ 788.610526][T19189] ? __pfx_can_pernet_init+0x10/0x10 [ 788.610552][T19189] ops_init+0x1e2/0x5f0 [ 788.610589][T19189] setup_net+0x10f/0x380 [ 788.610622][T19189] ? lockdep_init_map_type+0x5c/0x280 [ 788.610658][T19189] ? __pfx_setup_net+0x10/0x10 [ 788.610697][T19189] ? debug_mutex_init+0x37/0x70 [ 788.610727][T19189] copy_net_ns+0x2a6/0x5f0 [ 788.610767][T19189] create_new_namespaces+0x3ea/0xa90 [ 788.610805][T19189] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 788.610839][T19189] ksys_unshare+0x45b/0xa40 [ 788.610874][T19189] ? __pfx_ksys_unshare+0x10/0x10 [ 788.610920][T19189] ? xfd_validate_state+0x61/0x180 [ 788.610963][T19189] __x64_sys_unshare+0x31/0x40 [ 788.610993][T19189] do_syscall_64+0xcd/0x490 [ 788.611031][T19189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.611056][T19189] RIP: 0033:0x7fb12d58ebe9 [ 788.611079][T19189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.611104][T19189] RSP: 002b:00007fb12e31e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 788.611130][T19189] RAX: ffffffffffffffda RBX: 00007fb12d7b5fa0 RCX: 00007fb12d58ebe9 [ 788.611149][T19189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 788.611164][T19189] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 788.611181][T19189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.611197][T19189] R13: 00007fb12d7b6038 R14: 00007fb12d7b5fa0 R15: 00007ffc751a85e8 [ 788.611229][T19189] [ 790.335162][T19205] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2486'. [ 791.046677][T19234] FAULT_INJECTION: forcing a failure. [ 791.046677][T19234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.080912][T19234] CPU: 1 UID: 0 PID: 19234 Comm: syz.3.2492 Not tainted syzkaller #0 PREEMPT(full) [ 791.080935][T19234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 791.080944][T19234] Call Trace: [ 791.080949][T19234] [ 791.080955][T19234] dump_stack_lvl+0x16c/0x1f0 [ 791.080979][T19234] should_fail_ex+0x512/0x640 [ 791.081001][T19234] _copy_from_user+0x2e/0xd0 [ 791.081024][T19234] copy_msghdr_from_user+0x98/0x160 [ 791.081044][T19234] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 791.081066][T19234] ? __pfx__kstrtoull+0x10/0x10 [ 791.081086][T19234] ___sys_sendmsg+0xfe/0x1d0 [ 791.081106][T19234] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.081132][T19234] ? find_held_lock+0x2b/0x80 [ 791.081158][T19234] __sys_sendmmsg+0x200/0x420 [ 791.081179][T19234] ? __pfx___sys_sendmmsg+0x10/0x10 [ 791.081203][T19234] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 791.081229][T19234] ? fput+0x9b/0xd0 [ 791.081250][T19234] ? ksys_write+0x1ac/0x250 [ 791.081265][T19234] ? __pfx_ksys_write+0x10/0x10 [ 791.081284][T19234] __x64_sys_sendmmsg+0x9c/0x100 [ 791.081302][T19234] ? lockdep_hardirqs_on+0x7c/0x110 [ 791.081324][T19234] do_syscall_64+0xcd/0x490 [ 791.081355][T19234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.081380][T19234] RIP: 0033:0x7fb12d58ebe9 [ 791.081399][T19234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.081423][T19234] RSP: 002b:00007fb12b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 791.081446][T19234] RAX: ffffffffffffffda RBX: 00007fb12d7b6090 RCX: 00007fb12d58ebe9 [ 791.081464][T19234] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 791.081478][T19234] RBP: 00007fb12b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 791.081492][T19234] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 791.081506][T19234] R13: 00007fb12d7b6128 R14: 00007fb12d7b6090 R15: 00007ffc751a85e8 [ 791.081540][T19234] [ 792.238648][T19250] FAULT_INJECTION: forcing a failure. [ 792.238648][T19250] name failslab, interval 1, probability 0, space 0, times 0 [ 792.253700][T19250] CPU: 1 UID: 0 PID: 19250 Comm: syz.0.2494 Not tainted syzkaller #0 PREEMPT(full) [ 792.253733][T19250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.253749][T19250] Call Trace: [ 792.253758][T19250] [ 792.253769][T19250] dump_stack_lvl+0x16c/0x1f0 [ 792.253809][T19250] should_fail_ex+0x512/0x640 [ 792.253845][T19250] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 792.253883][T19250] should_failslab+0xc2/0x120 [ 792.253917][T19250] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 792.253950][T19250] ? rhashtable_init_noprof+0x4ed/0x7e0 [ 792.253983][T19250] ? rhashtable_init_noprof+0x55e/0x7e0 [ 792.254015][T19250] ? nf_ct_net_init+0x11c/0x370 [ 792.254050][T19250] kmemdup_noprof+0x29/0x60 [ 792.254079][T19250] nf_ct_net_init+0x11c/0x370 [ 792.254110][T19250] ? __pfx_nf_ct_net_init+0x10/0x10 [ 792.254141][T19250] ops_init+0x1e2/0x5f0 [ 792.254180][T19250] setup_net+0x10f/0x380 [ 792.254212][T19250] ? lockdep_init_map_type+0x5c/0x280 [ 792.254246][T19250] ? __pfx_setup_net+0x10/0x10 [ 792.254278][T19250] ? debug_mutex_init+0x37/0x70 [ 792.254317][T19250] copy_net_ns+0x2a6/0x5f0 [ 792.254359][T19250] create_new_namespaces+0x3ea/0xa90 [ 792.254396][T19250] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 792.254428][T19250] ksys_unshare+0x45b/0xa40 [ 792.254460][T19250] ? __pfx_ksys_unshare+0x10/0x10 [ 792.254493][T19250] ? xfd_validate_state+0x61/0x180 [ 792.254539][T19250] __x64_sys_unshare+0x31/0x40 [ 792.254570][T19250] do_syscall_64+0xcd/0x490 [ 792.254603][T19250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.254626][T19250] RIP: 0033:0x7fe145f8ebe9 [ 792.254647][T19250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.254675][T19250] RSP: 002b:00007fe146e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 792.254701][T19250] RAX: ffffffffffffffda RBX: 00007fe1461b5fa0 RCX: 00007fe145f8ebe9 [ 792.254719][T19250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 792.254736][T19250] RBP: 00007fe146011e19 R08: 0000000000000000 R09: 0000000000000000 [ 792.254753][T19250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.254769][T19250] R13: 00007fe1461b6038 R14: 00007fe1461b5fa0 R15: 00007ffe2e91ce38 [ 792.254803][T19250] [ 793.373084][T19278] FAULT_INJECTION: forcing a failure. [ 793.373084][T19278] name failslab, interval 1, probability 0, space 0, times 0 [ 793.455405][T19278] CPU: 0 UID: 0 PID: 19278 Comm: syz.3.2502 Not tainted syzkaller #0 PREEMPT(full) [ 793.455435][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 793.455450][T19278] Call Trace: [ 793.455459][T19278] [ 793.455476][T19278] dump_stack_lvl+0x16c/0x1f0 [ 793.455510][T19278] should_fail_ex+0x512/0x640 [ 793.455542][T19278] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 793.455574][T19278] should_failslab+0xc2/0x120 [ 793.455605][T19278] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 793.455636][T19278] ? __alloc_skb+0x2b2/0x380 [ 793.455672][T19278] __alloc_skb+0x2b2/0x380 [ 793.455702][T19278] ? __pfx___alloc_skb+0x10/0x10 [ 793.455732][T19278] ? __print_lock_name+0x70/0xe0 [ 793.455759][T19278] ? process_measurement+0x4a6/0x23e0 [ 793.455783][T19278] ? down_write+0x14d/0x200 [ 793.455822][T19278] alloc_skb_with_frags+0xe0/0x860 [ 793.455859][T19278] ? process_measurement+0x1e6/0x23e0 [ 793.455884][T19278] sock_alloc_send_pskb+0x7fb/0x990 [ 793.455910][T19278] ? __lock_acquire+0x62e/0x1ce0 [ 793.455949][T19278] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 793.455990][T19278] unix_dgram_sendmsg+0x3e9/0x17f0 [ 793.456026][T19278] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 793.456060][T19278] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 793.456098][T19278] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 793.456129][T19278] ____sys_sendmsg+0xa95/0xc70 [ 793.456154][T19278] ? copy_msghdr_from_user+0x10a/0x160 [ 793.456185][T19278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.456215][T19278] ? __pfx__kstrtoull+0x10/0x10 [ 793.456250][T19278] ___sys_sendmsg+0x134/0x1d0 [ 793.456282][T19278] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.456328][T19278] ? find_held_lock+0x2b/0x80 [ 793.456370][T19278] __sys_sendmmsg+0x200/0x420 [ 793.456405][T19278] ? __pfx___sys_sendmmsg+0x10/0x10 [ 793.456448][T19278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 793.456499][T19278] ? fput+0x9b/0xd0 [ 793.456533][T19278] ? ksys_write+0x1ac/0x250 [ 793.456557][T19278] ? __pfx_ksys_write+0x10/0x10 [ 793.456590][T19278] __x64_sys_sendmmsg+0x9c/0x100 [ 793.456621][T19278] ? lockdep_hardirqs_on+0x7c/0x110 [ 793.456650][T19278] do_syscall_64+0xcd/0x490 [ 793.456682][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.456706][T19278] RIP: 0033:0x7fb12d58ebe9 [ 793.456725][T19278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.456750][T19278] RSP: 002b:00007fb12b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 793.456774][T19278] RAX: ffffffffffffffda RBX: 00007fb12d7b6090 RCX: 00007fb12d58ebe9 [ 793.456792][T19278] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000004 [ 793.456807][T19278] RBP: 00007fb12b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 793.456823][T19278] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 793.456838][T19278] R13: 00007fb12d7b6128 R14: 00007fb12d7b6090 R15: 00007ffc751a85e8 [ 793.456872][T19278] [ 795.777358][T13089] Bluetooth: hci0: unexpected event 0x0f length: 726 > 4 [ 795.777576][T13089] Bluetooth: hci0: unexpected event 0x0f length: 726 > 4 [ 795.816111][T19316] HfR: entered promiscuous mode [ 796.712894][T19324] FAULT_INJECTION: forcing a failure. [ 796.712894][T19324] name failslab, interval 1, probability 0, space 0, times 0 [ 796.766748][T19324] CPU: 1 UID: 0 PID: 19324 Comm: syz.0.2510 Not tainted syzkaller #0 PREEMPT(full) [ 796.766789][T19324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 796.766805][T19324] Call Trace: [ 796.766816][T19324] [ 796.766827][T19324] dump_stack_lvl+0x16c/0x1f0 [ 796.766869][T19324] should_fail_ex+0x512/0x640 [ 796.766907][T19324] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 796.766961][T19324] should_failslab+0xc2/0x120 [ 796.766998][T19324] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 796.767029][T19324] ? __proc_create+0xc3/0x8e0 [ 796.767065][T19324] ? __proc_create+0x2ce/0x8e0 [ 796.767107][T19324] __proc_create+0x2ce/0x8e0 [ 796.767147][T19324] ? __pfx___proc_create+0x10/0x10 [ 796.767190][T19324] ? _raw_write_unlock+0x28/0x50 [ 796.767221][T19324] ? proc_register+0x314/0x5f0 [ 796.767263][T19324] proc_create_reg+0x7d/0x180 [ 796.767308][T19324] ? __pfx_can_reset_stats_proc_show+0x10/0x10 [ 796.767345][T19324] proc_create_net_single+0x86/0x180 [ 796.767386][T19324] ? __pfx_proc_create_net_single+0x10/0x10 [ 796.767437][T19324] can_init_proc+0x112/0x4d0 [ 796.767472][T19324] can_pernet_init+0x1e4/0x370 [ 796.767505][T19324] ? __pfx_can_pernet_init+0x10/0x10 [ 796.767535][T19324] ops_init+0x1e2/0x5f0 [ 796.767575][T19324] setup_net+0x10f/0x380 [ 796.767609][T19324] ? lockdep_init_map_type+0x5c/0x280 [ 796.767646][T19324] ? __pfx_setup_net+0x10/0x10 [ 796.767684][T19324] ? debug_mutex_init+0x37/0x70 [ 796.767717][T19324] copy_net_ns+0x2a6/0x5f0 [ 796.767764][T19324] create_new_namespaces+0x3ea/0xa90 [ 796.767805][T19324] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 796.767839][T19324] ksys_unshare+0x45b/0xa40 [ 796.767876][T19324] ? __pfx_ksys_unshare+0x10/0x10 [ 796.767912][T19324] ? xfd_validate_state+0x61/0x180 [ 796.767960][T19324] __x64_sys_unshare+0x31/0x40 [ 796.767995][T19324] do_syscall_64+0xcd/0x490 [ 796.768034][T19324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.768061][T19324] RIP: 0033:0x7fe145f8ebe9 [ 796.768084][T19324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.768110][T19324] RSP: 002b:00007fe146e0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 796.768137][T19324] RAX: ffffffffffffffda RBX: 00007fe1461b5fa0 RCX: 00007fe145f8ebe9 [ 796.768155][T19324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 796.768172][T19324] RBP: 00007fe146011e19 R08: 0000000000000000 R09: 0000000000000000 [ 796.768189][T19324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.768206][T19324] R13: 00007fe1461b6038 R14: 00007fe1461b5fa0 R15: 00007ffe2e91ce38 [ 796.768242][T19324] [ 797.243056][T19329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2512'. [ 797.348996][T19329] netlink: 'syz.5.2512': attribute type 21 has an invalid length. [ 797.357222][T19329] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2512'. [ 797.895992][T19334] bond0: option all_slaves_active: invalid value () [ 797.915289][T19337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 798.824050][T19349] FAULT_INJECTION: forcing a failure. [ 798.824050][T19349] name failslab, interval 1, probability 0, space 0, times 0 [ 798.839029][T19349] CPU: 1 UID: 0 PID: 19349 Comm: syz.3.2515 Not tainted syzkaller #0 PREEMPT(full) [ 798.839069][T19349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.839087][T19349] Call Trace: [ 798.839098][T19349] [ 798.839109][T19349] dump_stack_lvl+0x16c/0x1f0 [ 798.839152][T19349] should_fail_ex+0x512/0x640 [ 798.839188][T19349] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 798.839224][T19349] should_failslab+0xc2/0x120 [ 798.839259][T19349] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 798.839292][T19349] ? sock_alloc_inode+0x25/0x1c0 [ 798.839334][T19349] ? __pfx_sock_alloc_inode+0x10/0x10 [ 798.839372][T19349] sock_alloc_inode+0x25/0x1c0 [ 798.839410][T19349] alloc_inode+0x64/0x240 [ 798.839447][T19349] sock_alloc+0x40/0x280 [ 798.839484][T19349] __sock_create+0xc1/0x8d0 [ 798.839516][T19349] __sys_socket+0x14d/0x260 [ 798.839542][T19349] ? __x64_sys_openat+0x174/0x210 [ 798.839580][T19349] ? __pfx___sys_socket+0x10/0x10 [ 798.839607][T19349] ? xfd_validate_state+0x61/0x180 [ 798.839652][T19349] __x64_sys_socket+0x72/0xb0 [ 798.839677][T19349] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.839710][T19349] do_syscall_64+0xcd/0x490 [ 798.839747][T19349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.839774][T19349] RIP: 0033:0x7fb12d58ebe9 [ 798.839796][T19349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.839821][T19349] RSP: 002b:00007fb12e31e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 798.839847][T19349] RAX: ffffffffffffffda RBX: 00007fb12d7b5fa0 RCX: 00007fb12d58ebe9 [ 798.839874][T19349] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 798.839891][T19349] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 798.839908][T19349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.839924][T19349] R13: 00007fb12d7b6038 R14: 00007fb12d7b5fa0 R15: 00007ffc751a85e8 [ 798.839960][T19349] [ 798.839974][T19349] socket: no more sockets [ 800.525722][T19367] serio: Serial port pty6 [ 801.308818][T19382] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2521'. [ 804.247343][T19425] serio: Serial port pty6 [ 807.792439][T13089] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 808.209791][T19483] serio: Serial port pty6 [ 808.845004][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.879718][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.160649][T19510] serio: Serial port pty6 [ 809.738271][T19516] tipc: Enabling of bearer <@):^\/\> rejected, media not registered [ 809.752002][T19516] FAULT_INJECTION: forcing a failure. [ 809.752002][T19516] name failslab, interval 1, probability 0, space 0, times 0 [ 809.797429][T19516] CPU: 0 UID: 0 PID: 19516 Comm: syz.3.2549 Not tainted syzkaller #0 PREEMPT(full) [ 809.797452][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.797462][T19516] Call Trace: [ 809.797468][T19516] [ 809.797474][T19516] dump_stack_lvl+0x16c/0x1f0 [ 809.797499][T19516] should_fail_ex+0x512/0x640 [ 809.797520][T19516] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 809.797541][T19516] should_failslab+0xc2/0x120 [ 809.797560][T19516] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 809.797578][T19516] ? getname_flags.part.0+0x4c/0x550 [ 809.797603][T19516] getname_flags.part.0+0x4c/0x550 [ 809.797627][T19516] getname_flags+0x93/0xf0 [ 809.797642][T19516] do_sys_openat2+0xb8/0x1d0 [ 809.797664][T19516] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.797684][T19516] ? __fget_files+0x204/0x3c0 [ 809.797706][T19516] __x64_sys_openat+0x174/0x210 [ 809.797727][T19516] ? __pfx___x64_sys_openat+0x10/0x10 [ 809.797756][T19516] do_syscall_64+0xcd/0x490 [ 809.797777][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.797792][T19516] RIP: 0033:0x7fb12d58ebe9 [ 809.797805][T19516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.797819][T19516] RSP: 002b:00007fb12e31e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 809.797834][T19516] RAX: ffffffffffffffda RBX: 00007fb12d7b5fa0 RCX: 00007fb12d58ebe9 [ 809.797844][T19516] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 809.797853][T19516] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 809.797861][T19516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.797870][T19516] R13: 00007fb12d7b6038 R14: 00007fb12d7b5fa0 R15: 00007ffc751a85e8 [ 809.797888][T19516] [ 811.622563][T19547] serio: Serial port pty6 [ 811.735464][T19559] FAULT_INJECTION: forcing a failure. [ 811.735464][T19559] name failslab, interval 1, probability 0, space 0, times 0 [ 811.748202][T19559] CPU: 0 UID: 0 PID: 19559 Comm: syz.3.2558 Not tainted syzkaller #0 PREEMPT(full) [ 811.748224][T19559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 811.748234][T19559] Call Trace: [ 811.748240][T19559] [ 811.748250][T19559] dump_stack_lvl+0x16c/0x1f0 [ 811.748275][T19559] should_fail_ex+0x512/0x640 [ 811.748297][T19559] ? __kmalloc_noprof+0xbf/0x510 [ 811.748315][T19559] ? __register_sysctl_table+0xb3/0x1900 [ 811.748336][T19559] should_failslab+0xc2/0x120 [ 811.748355][T19559] __kmalloc_noprof+0xd2/0x510 [ 811.748376][T19559] __register_sysctl_table+0xb3/0x1900 [ 811.748397][T19559] ? is_module_address+0x5f/0xf0 [ 811.748420][T19559] ? __pfx___register_sysctl_table+0x10/0x10 [ 811.748440][T19559] ? is_module_address+0x69/0xf0 [ 811.748458][T19559] ? register_net_sysctl_sz+0x228/0x3e0 [ 811.748483][T19559] nf_ct_net_init+0x249/0x370 [ 811.748502][T19559] ? __pfx_nf_ct_net_init+0x10/0x10 [ 811.748520][T19559] ops_init+0x1e2/0x5f0 [ 811.748542][T19559] setup_net+0x10f/0x380 [ 811.748560][T19559] ? lockdep_init_map_type+0x5c/0x280 [ 811.748581][T19559] ? __pfx_setup_net+0x10/0x10 [ 811.748602][T19559] ? debug_mutex_init+0x37/0x70 [ 811.748618][T19559] copy_net_ns+0x2a6/0x5f0 [ 811.748641][T19559] create_new_namespaces+0x3ea/0xa90 [ 811.748662][T19559] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 811.748681][T19559] ksys_unshare+0x45b/0xa40 [ 811.748701][T19559] ? __pfx_ksys_unshare+0x10/0x10 [ 811.748720][T19559] ? xfd_validate_state+0x61/0x180 [ 811.748746][T19559] __x64_sys_unshare+0x31/0x40 [ 811.748765][T19559] do_syscall_64+0xcd/0x490 [ 811.748786][T19559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.748801][T19559] RIP: 0033:0x7fb12d58ebe9 [ 811.748814][T19559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.748834][T19559] RSP: 002b:00007fb12e31e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 811.748848][T19559] RAX: ffffffffffffffda RBX: 00007fb12d7b5fa0 RCX: 00007fb12d58ebe9 [ 811.748863][T19559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 811.748872][T19559] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 811.748881][T19559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.748889][T19559] R13: 00007fb12d7b6038 R14: 00007fb12d7b5fa0 R15: 00007ffc751a85e8 [ 811.748908][T19559] [ 812.510939][T19564] ubi0: attaching mtd0 [ 812.517274][T19564] ubi0: scanning is finished [ 812.750071][T19564] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 812.770184][T19564] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 812.804485][T19564] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 812.834545][T19564] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 812.865939][T19564] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 812.908650][T19564] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 813.009324][T19564] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 821032828 [ 813.092003][T19564] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 813.131785][T19572] ubi0: background thread "ubi_bgt0d" started, PID 19572 [ 813.198335][T19565] ubi0: detaching mtd0 [ 813.259451][T19565] ubi0: mtd0 is detached [ 815.455507][T19617] FAULT_INJECTION: forcing a failure. [ 815.455507][T19617] name failslab, interval 1, probability 0, space 0, times 0 [ 815.492447][T19617] CPU: 1 UID: 0 PID: 19617 Comm: syz.3.2569 Not tainted syzkaller #0 PREEMPT(full) [ 815.492469][T19617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 815.492479][T19617] Call Trace: [ 815.492485][T19617] [ 815.492492][T19617] dump_stack_lvl+0x16c/0x1f0 [ 815.492516][T19617] should_fail_ex+0x512/0x640 [ 815.492539][T19617] ? __kmalloc_noprof+0xbf/0x510 [ 815.492558][T19617] ? __register_sysctl_table+0xb3/0x1900 [ 815.492579][T19617] should_failslab+0xc2/0x120 [ 815.492597][T19617] __kmalloc_noprof+0xd2/0x510 [ 815.492618][T19617] __register_sysctl_table+0xb3/0x1900 [ 815.492639][T19617] ? is_module_address+0x5f/0xf0 [ 815.492663][T19617] ? __pfx___register_sysctl_table+0x10/0x10 [ 815.492683][T19617] ? is_module_address+0x69/0xf0 [ 815.492701][T19617] ? register_net_sysctl_sz+0x228/0x3e0 [ 815.492727][T19617] nf_ct_net_init+0x249/0x370 [ 815.492745][T19617] ? __pfx_nf_ct_net_init+0x10/0x10 [ 815.492763][T19617] ops_init+0x1e2/0x5f0 [ 815.492791][T19617] setup_net+0x10f/0x380 [ 815.492811][T19617] ? lockdep_init_map_type+0x5c/0x280 [ 815.492833][T19617] ? __pfx_setup_net+0x10/0x10 [ 815.492854][T19617] ? debug_mutex_init+0x37/0x70 [ 815.492871][T19617] copy_net_ns+0x2a6/0x5f0 [ 815.492895][T19617] create_new_namespaces+0x3ea/0xa90 [ 815.492916][T19617] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 815.492934][T19617] ksys_unshare+0x45b/0xa40 [ 815.492954][T19617] ? __pfx_ksys_unshare+0x10/0x10 [ 815.492974][T19617] ? xfd_validate_state+0x61/0x180 [ 815.493000][T19617] __x64_sys_unshare+0x31/0x40 [ 815.493019][T19617] do_syscall_64+0xcd/0x490 [ 815.493040][T19617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.493054][T19617] RIP: 0033:0x7fb12d58ebe9 [ 815.493067][T19617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.493081][T19617] RSP: 002b:00007fb12e31e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 815.493096][T19617] RAX: ffffffffffffffda RBX: 00007fb12d7b5fa0 RCX: 00007fb12d58ebe9 [ 815.493106][T19617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 815.493115][T19617] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 815.493124][T19617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.493133][T19617] R13: 00007fb12d7b6038 R14: 00007fb12d7b5fa0 R15: 00007ffc751a85e8 [ 815.493152][T19617] [ 815.874830][T19621] serio: Serial port pty6 [ 816.872932][T19624] serio: Serial port pty6 [ 818.650735][T19669] FAULT_INJECTION: forcing a failure. [ 818.650735][T19669] name failslab, interval 1, probability 0, space 0, times 0 [ 818.733412][T19669] CPU: 1 UID: 0 PID: 19669 Comm: syz.3.2580 Not tainted syzkaller #0 PREEMPT(full) [ 818.733450][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.733467][T19669] Call Trace: [ 818.733476][T19669] [ 818.733485][T19669] dump_stack_lvl+0x16c/0x1f0 [ 818.733523][T19669] should_fail_ex+0x512/0x640 [ 818.733560][T19669] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 818.733596][T19669] should_failslab+0xc2/0x120 [ 818.733631][T19669] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 818.733661][T19669] ? __proc_create+0xc3/0x8e0 [ 818.733696][T19669] ? __proc_create+0x2ce/0x8e0 [ 818.733738][T19669] __proc_create+0x2ce/0x8e0 [ 818.733777][T19669] ? __pfx___proc_create+0x10/0x10 [ 818.733819][T19669] ? _raw_write_unlock+0x28/0x50 [ 818.733850][T19669] ? proc_register+0x314/0x5f0 [ 818.733891][T19669] proc_create_reg+0x7d/0x180 [ 818.733930][T19669] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 818.733966][T19669] proc_create_net_single+0x86/0x180 [ 818.734005][T19669] ? __pfx_proc_create_net_single+0x10/0x10 [ 818.734056][T19669] can_init_proc+0x1e1/0x4d0 [ 818.734089][T19669] can_pernet_init+0x1e4/0x370 [ 818.734122][T19669] ? __pfx_can_pernet_init+0x10/0x10 [ 818.734151][T19669] ops_init+0x1e2/0x5f0 [ 818.734192][T19669] setup_net+0x10f/0x380 [ 818.734225][T19669] ? lockdep_init_map_type+0x5c/0x280 [ 818.734262][T19669] ? __pfx_setup_net+0x10/0x10 [ 818.734300][T19669] ? debug_mutex_init+0x37/0x70 [ 818.734338][T19669] copy_net_ns+0x2a6/0x5f0 [ 818.734383][T19669] create_new_namespaces+0x3ea/0xa90 [ 818.734422][T19669] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 818.734454][T19669] ksys_unshare+0x45b/0xa40 [ 818.734490][T19669] ? __pfx_ksys_unshare+0x10/0x10 [ 818.734527][T19669] ? xfd_validate_state+0x61/0x180 [ 818.734575][T19669] __x64_sys_unshare+0x31/0x40 [ 818.734609][T19669] do_syscall_64+0xcd/0x490 [ 818.734648][T19669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.734674][T19669] RIP: 0033:0x7fb12d58ebe9 [ 818.734696][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.734722][T19669] RSP: 002b:00007fb12e31e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 818.734746][T19669] RAX: ffffffffffffffda RBX: 00007fb12d7b5fa0 RCX: 00007fb12d58ebe9 [ 818.734765][T19669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 818.734782][T19669] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 818.734799][T19669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.734816][T19669] R13: 00007fb12d7b6038 R14: 00007fb12d7b5fa0 R15: 00007ffc751a85e8 [ 818.734853][T19669] [ 820.481478][T19683] serio: Serial port pty6 [ 822.155230][T19369] syz.0.2517 (19369) used greatest stack depth: 19096 bytes left [ 822.587809][T19762] futex_wake_op: syz.5.2595 tries to shift op by -2048; fix this program [ 822.654051][T19762] futex_wake_op: syz.5.2595 tries to shift op by -2048; fix this program [ 822.734139][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2594'. [ 823.024234][T19780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 823.080032][T19782] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2599'. [ 823.173697][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 823.185043][T19792] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2599'. [ 823.479661][T19792] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2599'. [ 823.508760][T19782] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2599'. [ 823.671929][T19794] [U]  [ 824.299509][T19808] bond0: option all_slaves_active: invalid value () [ 824.862457][T19821] random: crng reseeded on system resumption [ 824.868672][T19821] FAULT_INJECTION: forcing a failure. [ 824.868672][T19821] name failslab, interval 1, probability 0, space 0, times 0 [ 824.944521][T19821] CPU: 0 UID: 0 PID: 19821 Comm: syz.3.2604 Not tainted syzkaller #0 PREEMPT(full) [ 824.944544][T19821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 824.944554][T19821] Call Trace: [ 824.944560][T19821] [ 824.944567][T19821] dump_stack_lvl+0x16c/0x1f0 [ 824.944592][T19821] should_fail_ex+0x512/0x640 [ 824.944617][T19821] should_failslab+0xc2/0x120 [ 824.944638][T19821] __kmalloc_cache_noprof+0x6a/0x3e0 [ 824.944653][T19821] ? do_raw_spin_lock+0x12c/0x2b0 [ 824.944675][T19821] ? find_held_lock+0x2b/0x80 [ 824.944688][T19821] ? async_schedule_node_domain+0x54/0x120 [ 824.944708][T19821] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 824.944727][T19821] async_schedule_node_domain+0x54/0x120 [ 824.944746][T19821] dev_cache_fw_image+0x38e/0x490 [ 824.944765][T19821] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 824.944785][T19821] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 824.944823][T19821] dpm_for_each_dev+0x5a/0xb0 [ 824.944840][T19821] fw_pm_notify+0x81/0x150 [ 824.944861][T19821] notifier_call_chain+0xbc/0x410 [ 824.944880][T19821] ? __pfx_fw_pm_notify+0x10/0x10 [ 824.944901][T19821] blocking_notifier_call_chain_robust+0xc8/0x160 [ 824.944922][T19821] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 824.944948][T19821] pm_notifier_call_chain_robust+0x27/0x60 [ 824.944968][T19821] snapshot_open+0x218/0x2b0 [ 824.944985][T19821] ? __pfx_snapshot_open+0x10/0x10 [ 824.945002][T19821] misc_open+0x35a/0x420 [ 824.945019][T19821] ? __pfx_misc_open+0x10/0x10 [ 824.945034][T19821] chrdev_open+0x234/0x6a0 [ 824.945052][T19821] ? __pfx_apparmor_file_open+0x10/0x10 [ 824.945069][T19821] ? __pfx_chrdev_open+0x10/0x10 [ 824.945088][T19821] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 824.945108][T19821] do_dentry_open+0x982/0x1530 [ 824.945127][T19821] ? __pfx_chrdev_open+0x10/0x10 [ 824.945149][T19821] vfs_open+0x82/0x3f0 [ 824.945173][T19821] path_openat+0x1de4/0x2cb0 [ 824.945196][T19821] ? __pfx_path_openat+0x10/0x10 [ 824.945219][T19821] do_filp_open+0x20b/0x470 [ 824.945237][T19821] ? __pfx_do_filp_open+0x10/0x10 [ 824.945269][T19821] ? alloc_fd+0x471/0x7d0 [ 824.945290][T19821] do_sys_openat2+0x11b/0x1d0 [ 824.945311][T19821] ? __pfx_do_sys_openat2+0x10/0x10 [ 824.945340][T19821] __x64_sys_openat+0x174/0x210 [ 824.945362][T19821] ? __pfx___x64_sys_openat+0x10/0x10 [ 824.945392][T19821] do_syscall_64+0xcd/0x490 [ 824.945413][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.945428][T19821] RIP: 0033:0x7fb12d58ebe9 [ 824.945441][T19821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.945455][T19821] RSP: 002b:00007fb12b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 824.945470][T19821] RAX: ffffffffffffffda RBX: 00007fb12d7b6090 RCX: 00007fb12d58ebe9 [ 824.945480][T19821] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 824.945490][T19821] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 824.945499][T19821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.945508][T19821] R13: 00007fb12d7b6128 R14: 00007fb12d7b6090 R15: 00007ffc751a85e8 [ 824.945528][T19821] [ 824.947501][T19821] [ 825.258253][T19821] ====================================================== [ 825.265256][T19821] WARNING: possible circular locking dependency detected [ 825.272251][T19821] syzkaller #0 Not tainted [ 825.276640][T19821] ------------------------------------------------------ [ 825.283635][T19821] syz.3.2604/19821 is trying to acquire lock: [ 825.289690][T19821] ffff8880125b74a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7e0/0x23e0 [ 825.300290][T19821] [ 825.300290][T19821] but task is already holding lock: [ 825.307630][T19821] ffffffff8f5173c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 825.316484][T19821] [ 825.316484][T19821] which lock already depends on the new lock. [ 825.316484][T19821] [ 825.326867][T19821] [ 825.326867][T19821] the existing dependency chain (in reverse order) is: [ 825.335890][T19821] [ 825.335890][T19821] -> #4 (dpm_list_mtx){+.+.}-{4:4}: [ 825.343517][T19821] __mutex_lock+0x193/0x1060 [ 825.348617][T19821] device_pm_add+0x87/0x3e0 [ 825.353637][T19821] device_add+0x9cd/0x1aa0 [ 825.358557][T19821] device_create_groups_vargs+0x1f8/0x270 [ 825.364867][T19821] device_create+0xed/0x130 [ 825.369873][T19821] msr_device_create+0x31/0x70 [ 825.375166][T19821] cpuhp_invoke_callback+0x3d5/0xa10 [ 825.380958][T19821] cpuhp_thread_fun+0x47e/0x6f0 [ 825.386316][T19821] smpboot_thread_fn+0x3f4/0xae0 [ 825.391760][T19821] kthread+0x3c5/0x780 [ 825.396336][T19821] ret_from_fork+0x5d4/0x6f0 [ 825.401434][T19821] ret_from_fork_asm+0x1a/0x30 [ 825.406710][T19821] [ 825.406710][T19821] -> #3 (cpuhp_state-up){+.+.}-{0:0}: [ 825.414283][T19821] cpuhp_thread_fun+0x193/0x6f0 [ 825.419671][T19821] smpboot_thread_fn+0x3f4/0xae0 [ 825.425145][T19821] kthread+0x3c5/0x780 [ 825.429750][T19821] ret_from_fork+0x5d4/0x6f0 [ 825.434878][T19821] ret_from_fork_asm+0x1a/0x30 [ 825.440177][T19821] [ 825.440177][T19821] -> #2 (cpu_hotplug_lock){++++}-{0:0}: [ 825.447921][T19821] cpus_read_lock+0x42/0x160 [ 825.453026][T19821] ring_buffer_resize+0x105/0x15c0 [ 825.458676][T19821] tracing_update_buffers+0x15e/0x1f0 [ 825.464583][T19821] event_pid_write.isra.0+0xf8/0x7f0 [ 825.470408][T19821] vfs_write+0x2a0/0x11d0 [ 825.475269][T19821] ksys_write+0x12a/0x250 [ 825.480128][T19821] do_syscall_64+0xcd/0x490 [ 825.485138][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.491536][T19821] [ 825.491536][T19821] -> #1 (trace_types_lock){+.+.}-{4:4}: [ 825.499252][T19821] __mutex_lock+0x193/0x1060 [ 825.504376][T19821] tracing_check_open_get_tr.part.0+0x49/0x190 [ 825.511039][T19821] tracing_open_pipe+0x70/0x8e0 [ 825.516403][T19821] do_dentry_open+0x982/0x1530 [ 825.521668][T19821] vfs_open+0x82/0x3f0 [ 825.526255][T19821] dentry_open+0x71/0xd0 [ 825.531001][T19821] ima_calc_file_hash+0x2b6/0x490 [ 825.536525][T19821] ima_collect_measurement+0x899/0xa40 [ 825.542487][T19821] process_measurement+0x11fa/0x23e0 [ 825.548288][T19821] ima_file_check+0xc5/0x110 [ 825.553388][T19821] security_file_post_open+0x8e/0x210 [ 825.559292][T19821] path_openat+0x1404/0x2cb0 [ 825.564399][T19821] do_filp_open+0x20b/0x470 [ 825.569429][T19821] do_sys_openat2+0x11b/0x1d0 [ 825.574645][T19821] __x64_sys_openat+0x174/0x210 [ 825.580016][T19821] do_syscall_64+0xcd/0x490 [ 825.585036][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.591443][T19821] [ 825.591443][T19821] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 825.600028][T19821] __lock_acquire+0x12a6/0x1ce0 [ 825.605399][T19821] lock_acquire+0x179/0x350 [ 825.610441][T19821] __mutex_lock+0x193/0x1060 [ 825.615560][T19821] process_measurement+0x7e0/0x23e0 [ 825.621284][T19821] ima_file_check+0xc5/0x110 [ 825.626401][T19821] security_file_post_open+0x8e/0x210 [ 825.632302][T19821] path_openat+0x1404/0x2cb0 [ 825.637412][T19821] do_file_open_root+0x322/0x610 [ 825.642871][T19821] file_open_root+0x2a7/0x450 [ 825.648070][T19821] kernel_read_file_from_path_initns+0x189/0x260 [ 825.654927][T19821] _request_firmware+0x744/0x1470 [ 825.660468][T19821] __async_dev_cache_fw_image+0xb1/0x340 [ 825.666618][T19821] async_schedule_node_domain+0xd1/0x120 [ 825.672767][T19821] dev_cache_fw_image+0x38e/0x490 [ 825.678302][T19821] dpm_for_each_dev+0x5a/0xb0 [ 825.683489][T19821] fw_pm_notify+0x81/0x150 [ 825.688418][T19821] notifier_call_chain+0xbc/0x410 [ 825.693958][T19821] blocking_notifier_call_chain_robust+0xc8/0x160 [ 825.700888][T19821] pm_notifier_call_chain_robust+0x27/0x60 [ 825.707223][T19821] snapshot_open+0x218/0x2b0 [ 825.712340][T19821] misc_open+0x35a/0x420 [ 825.717099][T19821] chrdev_open+0x234/0x6a0 [ 825.722036][T19821] do_dentry_open+0x982/0x1530 [ 825.727326][T19821] vfs_open+0x82/0x3f0 [ 825.731927][T19821] path_openat+0x1de4/0x2cb0 [ 825.737034][T19821] do_filp_open+0x20b/0x470 [ 825.742052][T19821] do_sys_openat2+0x11b/0x1d0 [ 825.747256][T19821] __x64_sys_openat+0x174/0x210 [ 825.752630][T19821] do_syscall_64+0xcd/0x490 [ 825.757653][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.764062][T19821] [ 825.764062][T19821] other info that might help us debug this: [ 825.764062][T19821] [ 825.774365][T19821] Chain exists of: [ 825.774365][T19821] &ima_iint_mutex_key[depth] --> cpuhp_state-up --> dpm_list_mtx [ 825.774365][T19821] [ 825.788044][T19821] Possible unsafe locking scenario: [ 825.788044][T19821] [ 825.795480][T19821] CPU0 CPU1 [ 825.800834][T19821] ---- ---- [ 825.806184][T19821] lock(dpm_list_mtx); [ 825.810333][T19821] lock(cpuhp_state-up); [ 825.817170][T19821] lock(dpm_list_mtx); [ 825.823839][T19821] lock(&ima_iint_mutex_key[depth]); [ 825.829204][T19821] [ 825.829204][T19821] *** DEADLOCK *** [ 825.829204][T19821] [ 825.837339][T19821] 5 locks held by syz.3.2604/19821: [ 825.842544][T19821] #0: ffffffff8f306f48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 825.851017][T19821] #1: ffffffff8e484808 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 825.861384][T19821] #2: ffffffff8e4c4c70 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 825.873256][T19821] #3: ffffffff8f51c9c8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 825.881874][T19821] #4: ffffffff8f5173c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 825.891188][T19821] [ 825.891188][T19821] stack backtrace: [ 825.897064][T19821] CPU: 0 UID: 0 PID: 19821 Comm: syz.3.2604 Not tainted syzkaller #0 PREEMPT(full) [ 825.897089][T19821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 825.897101][T19821] Call Trace: [ 825.897111][T19821] [ 825.897119][T19821] dump_stack_lvl+0x116/0x1f0 [ 825.897148][T19821] print_circular_bug+0x275/0x350 [ 825.897174][T19821] check_noncircular+0x14c/0x170 [ 825.897203][T19821] __lock_acquire+0x12a6/0x1ce0 [ 825.897234][T19821] lock_acquire+0x179/0x350 [ 825.897259][T19821] ? process_measurement+0x7e0/0x23e0 [ 825.897281][T19821] ? __pfx___might_resched+0x10/0x10 [ 825.897304][T19821] ? process_measurement+0x7e0/0x23e0 [ 825.897324][T19821] __mutex_lock+0x193/0x1060 [ 825.897350][T19821] ? process_measurement+0x7e0/0x23e0 [ 825.897373][T19821] ? __pfx___mutex_lock+0x10/0x10 [ 825.897398][T19821] ? __pfx___might_resched+0x10/0x10 [ 825.897419][T19821] ? find_held_lock+0x2b/0x80 [ 825.897438][T19821] ? down_write+0x14d/0x200 [ 825.897468][T19821] ? process_measurement+0x7e0/0x23e0 [ 825.897488][T19821] process_measurement+0x7e0/0x23e0 [ 825.897513][T19821] ? __pfx_process_measurement+0x10/0x10 [ 825.897536][T19821] ? find_held_lock+0x2b/0x80 [ 825.897555][T19821] ? fscrypt_file_open+0x47c/0x590 [ 825.897591][T19821] ? __pfx___fsnotify_parent+0x10/0x10 [ 825.897612][T19821] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 825.897637][T19821] ima_file_check+0xc5/0x110 [ 825.897658][T19821] ? __pfx_ima_file_check+0x10/0x10 [ 825.897679][T19821] ? vfs_open+0x2e3/0x3f0 [ 825.897708][T19821] security_file_post_open+0x8e/0x210 [ 825.897734][T19821] path_openat+0x1404/0x2cb0 [ 825.897765][T19821] ? trace_kmem_cache_alloc+0x28/0xc0 [ 825.897795][T19821] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 825.897818][T19821] ? __pfx_path_openat+0x10/0x10 [ 825.897841][T19821] ? __asan_memcpy+0x3c/0x60 [ 825.897863][T19821] do_file_open_root+0x322/0x610 [ 825.897889][T19821] ? __pfx_do_file_open_root+0x10/0x10 [ 825.897924][T19821] ? vsnprintf+0x318/0x1160 [ 825.897949][T19821] file_open_root+0x2a7/0x450 [ 825.897974][T19821] ? __pfx_file_open_root+0x10/0x10 [ 825.897997][T19821] ? find_held_lock+0x2b/0x80 [ 825.898018][T19821] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 825.898051][T19821] kernel_read_file_from_path_initns+0x189/0x260 [ 825.898081][T19821] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 825.898111][T19821] ? trace_kmem_cache_alloc+0x28/0xc0 [ 825.898140][T19821] ? _request_firmware+0x503/0x1470 [ 825.898165][T19821] _request_firmware+0x744/0x1470 [ 825.898193][T19821] ? __pfx__request_firmware+0x10/0x10 [ 825.898218][T19821] ? dump_stack_lvl+0x185/0x1f0 [ 825.898244][T19821] ? lockdep_hardirqs_on+0x7c/0x110 [ 825.898272][T19821] __async_dev_cache_fw_image+0xb1/0x340 [ 825.898297][T19821] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 825.898323][T19821] ? mark_held_locks+0x49/0x80 [ 825.898346][T19821] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 825.898371][T19821] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 825.898396][T19821] async_schedule_node_domain+0xd1/0x120 [ 825.898422][T19821] dev_cache_fw_image+0x38e/0x490 [ 825.898445][T19821] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 825.898470][T19821] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 825.898493][T19821] dpm_for_each_dev+0x5a/0xb0 [ 825.898513][T19821] fw_pm_notify+0x81/0x150 [ 825.898534][T19821] notifier_call_chain+0xbc/0x410 [ 825.898558][T19821] ? __pfx_fw_pm_notify+0x10/0x10 [ 825.898581][T19821] blocking_notifier_call_chain_robust+0xc8/0x160 [ 825.898609][T19821] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 825.898640][T19821] pm_notifier_call_chain_robust+0x27/0x60 [ 825.898667][T19821] snapshot_open+0x218/0x2b0 [ 825.898691][T19821] ? __pfx_snapshot_open+0x10/0x10 [ 825.898715][T19821] misc_open+0x35a/0x420 [ 825.898736][T19821] ? __pfx_misc_open+0x10/0x10 [ 825.898760][T19821] chrdev_open+0x234/0x6a0 [ 825.898784][T19821] ? __pfx_apparmor_file_open+0x10/0x10 [ 825.898807][T19821] ? __pfx_chrdev_open+0x10/0x10 [ 825.898832][T19821] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 825.898857][T19821] do_dentry_open+0x982/0x1530 [ 825.898881][T19821] ? __pfx_chrdev_open+0x10/0x10 [ 825.898908][T19821] vfs_open+0x82/0x3f0 [ 825.898937][T19821] path_openat+0x1de4/0x2cb0 [ 825.898963][T19821] ? __pfx_path_openat+0x10/0x10 [ 825.898990][T19821] do_filp_open+0x20b/0x470 [ 825.899013][T19821] ? __pfx_do_filp_open+0x10/0x10 [ 825.899045][T19821] ? alloc_fd+0x471/0x7d0 [ 825.899070][T19821] do_sys_openat2+0x11b/0x1d0 [ 825.899098][T19821] ? __pfx_do_sys_openat2+0x10/0x10 [ 825.899131][T19821] __x64_sys_openat+0x174/0x210 [ 825.899161][T19821] ? __pfx___x64_sys_openat+0x10/0x10 [ 825.899195][T19821] do_syscall_64+0xcd/0x490 [ 825.899223][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.899244][T19821] RIP: 0033:0x7fb12d58ebe9 [ 825.899260][T19821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.899280][T19821] RSP: 002b:00007fb12b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 825.899299][T19821] RAX: ffffffffffffffda RBX: 00007fb12d7b6090 RCX: 00007fb12d58ebe9 [ 825.899313][T19821] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 825.899327][T19821] RBP: 00007fb12d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 825.899340][T19821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.899352][T19821] R13: 00007fb12d7b6128 R14: 00007fb12d7b6090 R15: 00007ffc751a85e8 [ 825.899373][T19821]