last executing test programs: 14.903413812s ago: executing program 3 (id=162): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x35, 0x1, 0x4, 0x0, 0x0) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r1, 0x560c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004180), r2) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x800, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYRES32=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000050}, 0x20008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) 10.510006087s ago: executing program 3 (id=171): unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0xc0502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x980, 0x0) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10001, 0x2, 0x8, 0xbd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x3, 0x2}, 0x2f9638f3, 0x0, &(0x7f0000000100)={0x3ff}, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x3, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x3]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) 10.299611944s ago: executing program 0 (id=172): unshare$auto(0x40000080) close_range$auto(0x2, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r1, 0x2) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000003c0)="80e08ca631b90e5e9a4997a0a2f075172c2529fea5d2b4b06119e7cc493e3c68f5e114fe74f6ec1d4e94daec10b05cb281b0922bcba475cea32ccf0eda11471e9c15d15fbcc3bebe4bc005053b7459c5ecbae956634304a2b3c20d024a0df7b468626e493968743cc5ed35ab320b6ffd85d87720f947e83e96c03fca21e0c585095bf40d010cd4fba6c371232889fd43cb084df47b56ff93efb0f707d371175d4dcd1c13802f7a4550e4ef765842dadd3e2bc2df160655b78b5a9438f2f8be466e2b3782469b16c9310ff6307403770f5c225820d582ab93c7ca472e799fe10d61abbfc87ea3846f44cb04eef9ed7c16b2483588") mmap$auto(0x450cecf1, 0x9, 0x3, 0xeb2, r1, 0x7ffe) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) setregid$auto(0x0, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.88764179s ago: executing program 1 (id=173): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) set_mempolicy$auto(0x4, 0x0, 0x5) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xb, 0x2, 0x5) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r3, 0x3, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) 9.252319175s ago: executing program 3 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000001140)={&(0x7f0000000040), 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x1014, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, "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"}, 0x1014}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000014) r2 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000001180), 0x410000, 0x0) socket(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r3) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r4, 0x95bda67d863ba7af, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, r5) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f00000011c0)={@padding, 0x3}) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001200)={'\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000012c0)={0x80, r7, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PHY_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_PHY_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PHY_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PHY_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x2404c013}, 0x80) 8.852341867s ago: executing program 0 (id=176): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x80000001, 0x580e, 0x112f4a03, 0x8000000008011, 0x3, 0x800004) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0xc3, 0x0) setsockopt$auto(r0, 0x1, 0x10, &(0x7f0000000280)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\x00\x00\x00\x00\x04\x00\x00\x00*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xba) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb}) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f00000003c0)={{0x4, 0x0, 0xee01, 0x18, 0x9, 0x21, 0x6}, 0xe, 0xc4, 0x1, 0x4, @inferred, @raw=0x4c000, 0x3, 0x0, 0x0, 0x0}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyd0/power/runtime_suspended_time\x00', 0x42100, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) 8.780342619s ago: executing program 1 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x2eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) writev$auto(0xffffffffffffffff, 0x0, 0x9) fcntl$auto(r3, 0xfffffffd, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0xffffffffffffffff, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0), 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x1) 8.005048974s ago: executing program 3 (id=178): mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x810) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090) close_range$auto(0x2, 0x8, 0x0) 7.771672707s ago: executing program 0 (id=180): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 7.637368092s ago: executing program 1 (id=181): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(r0, &(0x7f00000003c0)={{&(0x7f0000000180)="c9c9b9735a8970fca33caadbda7be24e9f6a", 0x280000, &(0x7f0000000280)={&(0x7f00000001c0)="0fd0ba312b690c806dcf7a3af087d97c3aa139f4ac1a648c0996596a883fc7db350061bfe0cc0580335140a23d990e3d851ca120ef30b10a76a759141d30c7f437ee2567c0b74e906420111fffcac12af8318aba73f786b293c1a43fe9bb9c660d6a5bbb4444e828b95e3cad8e06614cb0e586dded175856ea7e2a17db2bc48e21e45dfdd4339d762f3ad9c4cffd49", 0x4f}, 0x2, 0x0, 0x8, 0x9}, 0xffffffff}, 0x5, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80081, 0x0) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) sched_rr_get_interval$auto(0x0, &(0x7f0000000080)={0x1, 0x7fffffffffffffff}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 6.612623261s ago: executing program 3 (id=182): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r3) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b9a46d18a099b624c25020000000800050000000100000000007298190a4c03a5ed15cd70ddd993dace61b8a4c2ccec3be0c37f89607a919036e6a844edfb57c49870e292b989d8", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8c1}, 0x8000) sendmsg$auto_OVS_DP_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x40, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@OVS_DP_ATTR_NAME={0x13, 0x1, 'MAC80211_HWSIM\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_USER_FEATURES={0x8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4d9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="6ed67edca5cdac50de887b7a622d89a74d2bf1e2bcde2127774ab7041267a024ab7b471547599463ab6d00f46d478a0bc87cfc28efd12ff71ee8cf5db99c", @ANYRES16, @ANYBLOB="01002cbd7000fddbdf25040000009800110000abe68418a69aae5ae028084b3be05a426b49a50486ff1f98e1d14875f7597fa02b4ca4e50d4c2059a6d4e21dcceb1b24f32042608af2dde554893e6c0a2c1332411eba33e0e4b0fdb39ee5d79557fd9388633c0220d921135a73e2dfad408ac06c0f977126d2cb4a4e97bb6181d8f3015d4c1dc30805f92485b57bc2874cf4bf9987605a40a8a2bd648c8fb87dcbb5c82bafc8"], 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x4044820) 6.594394057s ago: executing program 2 (id=183): fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r2, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x1, 0x0) writev$auto(r1, &(0x7f0000000040)={&(0x7f0000000140)="6f17ab4f23fa5fdb2a5d73a705bad416c194ebacc4e35743bbbca4ab167f56f9b36fc3e571ea3c2d90590a369760108deebbaf25ea115d0d10921b84a8b3abd3430ea007ebf202889510c2c2af424398e5ca39847854bc99dc06cd3e68a385e949a8fb08b11bf0a03bae894dbd6698e199864fb8a3507d9f581cc825a71f48dae68f6fa2922be18c5a9b6f48bdd006fb421fa0b26f7d7f", 0x2ea1}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x8101, 0x0, 0xd0, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x7ffffffffffffffc, 0x40000000000006, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0x800000a747, 0xdeae, 0x804}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 5.120761937s ago: executing program 1 (id=184): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x100) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010001f00400ffdbdf251d6f097c08000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r10, 0x1000000009, 0x7fb) ptrace$auto(0xf, r10, 0x1, 0x4) sendmsg$auto_NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48102}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x1c4, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x998}, @NL80211_ATTR_MAC_ADDRS={0xe0, 0xa6, 0x0, 0x1, [@nested={0xcb, 0x20, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x13c}, @generic="1107ccc96da93eb7f54bd134386ba07b52706524b23cb2f7f590f9a2dd4206725b30af7e56cabde5e70c6948d3bfc3b8f49d5a926a037921a4254e7d1e9cc882934eb47196fb326701cac3cdc90ded3d541fabe87f33aa8729e94ce80c5d9c57977f6d03b220cd2fb7c4534bf7c8c02a3887aa51ebf94f480166545b1b6e8f1c53d5b4367866fc17db6c47690cedad4b94f79a5e4e05c6446a9b01c701ed892739bea55686904e39589181d7c1c6c124352bd35b7f9572ba23e0a6"]}, @nested={0x10, 0x92, 0x0, 0x1, [@generic="17290286", @typed={0x5, 0x44, 0x0, 0x0, @str='\x00'}]}]}, @NL80211_ATTR_S1G_CAPABILITY={0xa4, 0x128, "19a3363071d124c9c0bf0ed9e57ff3b205f077d6974350a82888a87f5c4eb7d186321b9e0adfbbd3c5807d2bd0914e906f57621ecad63ee80b65188de9c707adce18f549f59aec2dd5c175dcc6046b7f2cdcbb4ceb6cf703ca70fc98b6583630099555fcb838c5a9ff94c843a4bda9d827f66d5762dcb5d4843145eb489b21e4dc4eb31ca4773a68da69c5dbbbd72f7e8f167dabfa64b582729e434cd1f319c6"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3b40}, @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, "4c22fb41aa97ff5b12b5711d9428fb30"}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.685584882s ago: executing program 2 (id=185): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b72, r0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x2, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) clone$auto(0x7, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) socket(0x2, 0x6, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/snd/pcmC1D0p\x00', 0x80000, 0x0) ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r1, 0xc0844123, 0xfffffffffffffffe) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x8000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/net/raw6\x00', 0x500, 0x0) writev$auto(0x3, 0x0, 0x8) pread64$auto(r2, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) 4.454659131s ago: executing program 0 (id=186): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0x2, 0x3, 0xc24) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) socket(0xa, 0x5, 0x94) close_range$auto(r0, 0x8, 0x0) unshare$auto(0x40000080) 3.993420788s ago: executing program 1 (id=187): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mq_open$auto(&(0x7f0000000000)='/dev/sequencer2\x00', 0x5, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat2$auto(0x1, 0x0, 0x4, 0x1000) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) 3.166878448s ago: executing program 0 (id=188): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x2, 0xf}, 0x24, 0x0, 0x0, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1011c0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da08, 0x3, 0x3, 0x62, 0x80000003, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x100000000000036, 0x0) umask$auto(0x4) fsopen$auto(0x0, 0x1) 3.135704948s ago: executing program 2 (id=189): bpf$auto(0x23, 0x0, 0xe000000000000) r0 = socket(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r2, 0x80045430, 0xffffffffffffffff) bind$auto(r0, &(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x69) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x29c201, 0x0) r4 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/igmp\x00', 0x0, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) symlink$auto(0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.1/usb12/ep_00/bLength\x00', 0xa001, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/blkio.bfq.weight_device\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000004c0)=""/45, 0x2d) write$auto(r6, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) sync_file_range$auto(r3, 0x4, 0x24d8, 0xffffffff) 2.01084709s ago: executing program 0 (id=190): statmount$auto(0x0, 0x0, 0x1fe, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) r1 = gettid() ioctl$auto_VHOST_GET_BACKEND_FEATURES2(r0, 0x8008af26, &(0x7f00000005c0)=0x6f) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) r3 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, 0x0, 0x101000, 0x0) read$auto_proc_pid_set_timerslack_ns_operations_base(r3, 0x0, 0x0) write$auto(r2, 0x0, 0x81) r4 = prctl$auto(0x1000000003b, 0x1, r1, 0x5, 0x7) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, 0x0) tkill$auto(r1, 0x7) 1.680727726s ago: executing program 2 (id=191): r0 = mq_open$auto(0x0, 0xdd1, 0x8, 0x0) mq_notify$auto(0x4, 0x0) mq_notify$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fsopen$auto(0x0, 0x1) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) read$auto_proc_uid_map_operations_base(r0, &(0x7f0000000140)=""/163, 0xa3) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) socket(0x3, 0x5, 0x5) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto(0xffffffffffffffff, 0x0, 0xcc9c) userfaultfd$auto(0x4) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r3, 0x0, 0x2b6) 1.224566892s ago: executing program 2 (id=192): mmap$auto(0x0, 0x2020009, 0x6, 0xebd, 0xfffffffffffffffa, 0x40) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x4000000401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'netdevsim0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0x0, 0x1, 0x80f0c8, 0x0, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8, 0x81, 0xfffffffe}, 0x4a) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) ioctl$auto(0xc8, 0x800454cf, 0x200000000005c8d) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r4, 0x0, 0x0) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r6, 0x0, 0x800, 0x45e) ioctl$auto_VHOST_SET_VRING_CALL2(r5, 0x4008af21, &(0x7f0000000180)={0x5, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r7) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, 0x0, 0x400c080) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010026bd5700fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 814.029565ms ago: executing program 1 (id=193): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) unshare$auto(0x40000080) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x1, 0x85, 0x7fffffffefff, 0x0, 0x1, 0x6, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2183, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x9, 0x80}, "6a034a07c7b8edb8fc3b39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x6}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) dup$auto(0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vbi21\x00', 0x149800, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) 252.775398ms ago: executing program 3 (id=194): io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1a1a, 0x2, 0x3, 0x95f4da0a, 0x7f, 0x20000003, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0x1, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) setsockopt$auto(0xffffffffffffffff, 0x3ff, 0x1, 0x0, 0x1e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r1, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x2000000000, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 0s ago: executing program 2 (id=195): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) poll$auto(0x0, 0x6, 0x8) socketpair$auto(0x20, 0x5, 0x4000, 0x0) read$auto(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0xb53) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) socket(0x11, 0xa, 0x300) socket(0x2, 0xa, 0x106) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000000)="31145f", 0x3) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 88.841127][ T5822] cgroup: Unknown subsys name 'net' [ 88.972900][ T5822] cgroup: Unknown subsys name 'cpuset' [ 88.983057][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.069257][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.475439][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.483925][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.492973][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.502209][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.510672][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.518906][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.530455][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.554605][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.577269][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.585662][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.594903][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.603364][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.604263][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.618070][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.626262][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.627113][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.634778][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.651656][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.659101][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.660280][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.055506][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 94.257030][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 94.300970][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.308610][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.317577][ T5832] bridge_slave_0: entered allmulticast mode [ 94.325281][ T5832] bridge_slave_0: entered promiscuous mode [ 94.397434][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.404658][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.412848][ T5832] bridge_slave_1: entered allmulticast mode [ 94.420679][ T5832] bridge_slave_1: entered promiscuous mode [ 94.502640][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 94.523893][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.552872][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.562203][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 94.679659][ T5832] team0: Port device team_slave_0 added [ 94.686370][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.693887][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.701303][ T5833] bridge_slave_0: entered allmulticast mode [ 94.708657][ T5833] bridge_slave_0: entered promiscuous mode [ 94.738790][ T5832] team0: Port device team_slave_1 added [ 94.744875][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.752176][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.759660][ T5833] bridge_slave_1: entered allmulticast mode [ 94.767424][ T5833] bridge_slave_1: entered promiscuous mode [ 94.878913][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.885922][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.912488][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.929376][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.953328][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.961078][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.968734][ T5831] bridge_slave_0: entered allmulticast mode [ 94.975939][ T5831] bridge_slave_0: entered promiscuous mode [ 94.984598][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.992105][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.018451][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.039684][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.062207][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.069782][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.077480][ T5831] bridge_slave_1: entered allmulticast mode [ 95.084741][ T5831] bridge_slave_1: entered promiscuous mode [ 95.138357][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.145639][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.153485][ T5834] bridge_slave_0: entered allmulticast mode [ 95.160745][ T5834] bridge_slave_0: entered promiscuous mode [ 95.210474][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.220284][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.227854][ T5834] bridge_slave_1: entered allmulticast mode [ 95.235023][ T5834] bridge_slave_1: entered promiscuous mode [ 95.251218][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.266503][ T5832] hsr_slave_0: entered promiscuous mode [ 95.273081][ T5832] hsr_slave_1: entered promiscuous mode [ 95.283137][ T5833] team0: Port device team_slave_0 added [ 95.321616][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.347731][ T5833] team0: Port device team_slave_1 added [ 95.370231][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.408741][ T5831] team0: Port device team_slave_0 added [ 95.430793][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.478017][ T5831] team0: Port device team_slave_1 added [ 95.487722][ T5834] team0: Port device team_slave_0 added [ 95.494564][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.502185][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.528555][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.566915][ T5845] Bluetooth: hci1: command tx timeout [ 95.579805][ T5834] team0: Port device team_slave_1 added [ 95.599419][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.606650][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.634528][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.663716][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.670843][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.697762][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.711691][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.716885][ T5845] Bluetooth: hci3: command tx timeout [ 95.718842][ T5843] Bluetooth: hci0: command tx timeout [ 95.724313][ T5836] Bluetooth: hci2: command tx timeout [ 95.733619][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.762257][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.807763][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.814764][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.841307][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.854690][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.862670][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.888961][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.992521][ T5833] hsr_slave_0: entered promiscuous mode [ 96.000871][ T5833] hsr_slave_1: entered promiscuous mode [ 96.007454][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.015602][ T5833] Cannot create hsr debugfs directory [ 96.084871][ T5831] hsr_slave_0: entered promiscuous mode [ 96.093214][ T5831] hsr_slave_1: entered promiscuous mode [ 96.099889][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.109826][ T5831] Cannot create hsr debugfs directory [ 96.134948][ T5834] hsr_slave_0: entered promiscuous mode [ 96.141698][ T5834] hsr_slave_1: entered promiscuous mode [ 96.148496][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.156677][ T5834] Cannot create hsr debugfs directory [ 96.512812][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.551001][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.583626][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.621302][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.674550][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.690094][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.714003][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.727630][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.821421][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.832319][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.859653][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.871746][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.955428][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.968469][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.980606][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.012908][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.119868][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.191777][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.218015][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.225330][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.251033][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.258267][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.288469][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.357240][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.414259][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.438250][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.452217][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.471378][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.478605][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.506888][ T981] cfg80211: failed to load regulatory.db [ 97.516936][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.524165][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.558383][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.565583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.608486][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.615718][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.637971][ T5845] Bluetooth: hci1: command tx timeout [ 97.664265][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.745427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.752852][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.796395][ T5845] Bluetooth: hci0: command tx timeout [ 97.801955][ T5845] Bluetooth: hci3: command tx timeout [ 97.804242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.808557][ T5836] Bluetooth: hci2: command tx timeout [ 97.814551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.003254][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.067892][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.264637][ T5832] veth0_vlan: entered promiscuous mode [ 98.328022][ T5832] veth1_vlan: entered promiscuous mode [ 98.359637][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.455065][ T5832] veth0_macvtap: entered promiscuous mode [ 98.505126][ T5832] veth1_macvtap: entered promiscuous mode [ 98.560002][ T5833] veth0_vlan: entered promiscuous mode [ 98.613424][ T5833] veth1_vlan: entered promiscuous mode [ 98.629880][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.665187][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.700875][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.714737][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.724892][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.735132][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.744482][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.854917][ T5833] veth0_macvtap: entered promiscuous mode [ 98.868005][ T5833] veth1_macvtap: entered promiscuous mode [ 98.877240][ T5831] veth0_vlan: entered promiscuous mode [ 98.908865][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.928631][ T5831] veth1_vlan: entered promiscuous mode [ 98.992723][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.010447][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.034471][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.088920][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.105611][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.114745][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.125507][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.134645][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.151984][ T5834] veth0_vlan: entered promiscuous mode [ 99.164473][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.165799][ T5831] veth0_macvtap: entered promiscuous mode [ 99.185538][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.213250][ T5834] veth1_vlan: entered promiscuous mode [ 99.224249][ T5831] veth1_macvtap: entered promiscuous mode [ 99.311892][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.319811][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.363654][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.458422][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.479303][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.490121][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.499875][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.501139][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.517508][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.561210][ T5834] veth0_macvtap: entered promiscuous mode [ 99.659242][ T5834] veth1_macvtap: entered promiscuous mode [ 99.675486][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.720712][ T5843] Bluetooth: hci1: command tx timeout [ 99.736310][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.838869][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.864893][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.881718][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.884793][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.894754][ T5843] Bluetooth: hci2: command tx timeout [ 99.905793][ T5843] Bluetooth: hci3: command tx timeout [ 99.913257][ T5843] Bluetooth: hci0: command tx timeout [ 99.938804][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.946060][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.964156][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.973390][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.226468][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.238409][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.316909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.325753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.454955][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.472895][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.629396][ T5934] Zero length message leads to an empty skb [ 100.800273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.829070][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.849251][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.163523][ T5941] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 101.387176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.496383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.516630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 101.813177][ T5836] Bluetooth: hci1: command tx timeout [ 101.868529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.959269][ T5843] Bluetooth: hci3: command tx timeout [ 101.959323][ T5843] Bluetooth: hci2: command tx timeout [ 101.959395][ T5836] Bluetooth: hci0: command tx timeout [ 102.107630][ T5953] openvswitch: netlink: Message has 1 unknown bytes. [ 102.179133][ T5955] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 102.179133][ T5955] The task syz.1.7 (5955) triggered the difference, watch for misbehavior. [ 102.354283][ T5845] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 102.357369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.363346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.895595][ T5976] netlink: 330 bytes leftover after parsing attributes in process `syz.2.9'. [ 103.954117][ T5976] FAULT_INJECTION: forcing a failure. [ 103.954117][ T5976] name failslab, interval 1, probability 0, space 0, times 1 [ 103.973180][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.2.9 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 103.973224][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.973240][ T5976] Call Trace: [ 103.973250][ T5976] [ 103.973262][ T5976] dump_stack_lvl+0x16c/0x1f0 [ 103.973300][ T5976] should_fail_ex+0x512/0x640 [ 103.973346][ T5976] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 103.973399][ T5976] should_failslab+0xc2/0x120 [ 103.973430][ T5976] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 103.973478][ T5976] ? __alloc_skb+0x2b2/0x380 [ 103.973531][ T5976] __alloc_skb+0x2b2/0x380 [ 103.973573][ T5976] ? __pfx___alloc_skb+0x10/0x10 [ 103.973616][ T5976] ? __pfx_debug_object_assert_init+0x10/0x10 [ 103.973652][ T5976] ? do_softirq+0xd0/0xf0 [ 103.973684][ T5976] ? __igmp_group_dropped+0x26a/0xe80 [ 103.973727][ T5976] inet_ifmcaddr_notify+0xc7/0x1c0 [ 103.973762][ T5976] ? __pfx_inet_ifmcaddr_notify+0x10/0x10 [ 103.973825][ T5976] __ip_mc_dec_group+0x442/0x5b0 [ 103.973866][ T5976] inetdev_event+0x3b2/0x18a0 [ 103.973910][ T5976] ? ib_netdevice_event+0xfc/0x330 [ 103.973947][ T5976] ? __pfx_inetdev_event+0x10/0x10 [ 103.973995][ T5976] ? wext_netdev_notifier_call+0xe/0x20 [ 103.974024][ T5976] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 103.974057][ T5976] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.974109][ T5976] notifier_call_chain+0xbc/0x410 [ 103.974142][ T5976] ? __pfx_inetdev_event+0x10/0x10 [ 103.974189][ T5976] call_netdevice_notifiers_info+0xbe/0x140 [ 103.974229][ T5976] __dev_notify_flags+0x1f7/0x2e0 [ 103.974259][ T5976] ? __pfx___dev_notify_flags+0x10/0x10 [ 103.974292][ T5976] ? __pfx___dev_change_flags+0x10/0x10 [ 103.974333][ T5976] netif_change_flags+0x108/0x160 [ 103.974365][ T5976] do_setlink.constprop.0+0xb53/0x4380 [ 103.974403][ T5976] ? __schedule+0x1181/0x5de0 [ 103.974451][ T5976] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 103.974494][ T5976] ? __lock_acquire+0xb8a/0x1c90 [ 103.974538][ T5976] ? __pfx___schedule+0x10/0x10 [ 103.974589][ T5976] ? do_raw_spin_lock+0x12c/0x2b0 [ 103.974644][ T5976] ? mark_held_locks+0x49/0x80 [ 103.974680][ T5976] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.974725][ T5976] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.974775][ T5976] ? __mutex_lock+0x1ca/0xb90 [ 103.974801][ T5976] ? __pfx_aa_get_newest_label+0x10/0x10 [ 103.974835][ T5976] ? rcu_watching_snap_stopped_since+0x81/0x110 [ 103.974866][ T5976] ? rtnl_setlink+0x2b0/0x770 [ 103.974898][ T5976] ? __pfx___mutex_lock+0x10/0x10 [ 103.974956][ T5976] rtnl_setlink+0x3cb/0x770 [ 103.975073][ T5976] ? __pfx_rtnl_setlink+0x10/0x10 [ 103.975102][ T5976] ? netlink_unicast+0x5df/0x7f0 [ 103.975140][ T5976] ? __x64_sys_sendmmsg+0x9c/0x100 [ 103.975169][ T5976] ? do_syscall_64+0xcd/0x490 [ 103.975194][ T5976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.975310][ T5976] ? __lock_acquire+0x622/0x1c90 [ 103.975357][ T5976] ? rcu_is_watching+0x12/0xc0 [ 103.975386][ T5976] ? trace_cap_capable+0x18d/0x200 [ 103.975432][ T5976] ? find_held_lock+0x2b/0x80 [ 103.975459][ T5976] ? __pfx_rtnl_setlink+0x10/0x10 [ 103.975489][ T5976] ? __pfx_rtnl_setlink+0x10/0x10 [ 103.975517][ T5976] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 103.975551][ T5976] ? __pfx_rtnl_setlink+0x10/0x10 [ 103.975584][ T5976] rtnetlink_rcv_msg+0x95b/0xe90 [ 103.975622][ T5976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.975665][ T5976] ? ref_tracker_free+0x37c/0x830 [ 103.975697][ T5976] netlink_rcv_skb+0x158/0x420 [ 103.975726][ T5976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.975757][ T5976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.975806][ T5976] ? netlink_deliver_tap+0x1ae/0xd30 [ 103.975865][ T5976] netlink_unicast+0x53d/0x7f0 [ 103.975903][ T5976] ? __pfx_netlink_unicast+0x10/0x10 [ 103.975946][ T5976] netlink_sendmsg+0x8d1/0xdd0 [ 103.975992][ T5976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.976039][ T5976] ____sys_sendmsg+0xa95/0xc70 [ 103.976076][ T5976] ? copy_msghdr_from_user+0x10a/0x160 [ 103.976104][ T5976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.976148][ T5976] ? kfree+0x24f/0x4d0 [ 103.976188][ T5976] ? futex_unqueue+0x133/0x2c0 [ 103.976220][ T5976] ___sys_sendmsg+0x134/0x1d0 [ 103.976246][ T5976] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.976306][ T5976] ? __pfx___might_resched+0x10/0x10 [ 103.976343][ T5976] __sys_sendmmsg+0x200/0x420 [ 103.976374][ T5976] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.976412][ T5976] ? __pfx_do_futex+0x10/0x10 [ 103.976461][ T5976] ? xfd_validate_state+0x61/0x180 [ 103.976504][ T5976] __x64_sys_sendmmsg+0x9c/0x100 [ 103.976527][ T5976] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.976565][ T5976] do_syscall_64+0xcd/0x490 [ 103.976594][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.976621][ T5976] RIP: 0033:0x7f82c0f8e929 [ 103.976644][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.976670][ T5976] RSP: 002b:00007f82c1ea9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.976698][ T5976] RAX: ffffffffffffffda RBX: 00007f82c11b5fa0 RCX: 00007f82c0f8e929 [ 103.976716][ T5976] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 103.976733][ T5976] RBP: 00007f82c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.976749][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.976765][ T5976] R13: 0000000000000000 R14: 00007f82c11b5fa0 R15: 00007ffe378aebc8 [ 103.976802][ T5976] [ 104.505542][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.585661][ T30] audit: type=1800 audit(1749341987.195:2): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8" name="dummy_udc" dev="gadgetfs" ino=6486 res=0 errno=0 [ 104.845792][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 105.100645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.707757][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'. [ 106.717116][ T6010] bridge_slave_1: left allmulticast mode [ 106.722773][ T6010] bridge_slave_1: left promiscuous mode [ 106.729518][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.808998][ T6010] bridge_slave_0: left allmulticast mode [ 106.814748][ T6010] bridge_slave_0: left promiscuous mode [ 106.855839][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.927556][ T6016] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 107.758801][ T6029] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.751407][ T6043] Invalid ELF header magic: != ELF [ 110.364271][ T5845] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 111.519016][ T6075] FAULT_INJECTION: forcing a failure. [ 111.519016][ T6075] name failslab, interval 1, probability 0, space 0, times 0 [ 111.558999][ T6075] CPU: 1 UID: 0 PID: 6075 Comm: syz.3.28 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 111.559048][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.559067][ T6075] Call Trace: [ 111.559078][ T6075] [ 111.559091][ T6075] dump_stack_lvl+0x16c/0x1f0 [ 111.559128][ T6075] should_fail_ex+0x512/0x640 [ 111.559174][ T6075] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 111.559222][ T6075] should_failslab+0xc2/0x120 [ 111.559252][ T6075] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 111.559292][ T6075] ? __pfx_try_to_wake_up+0x10/0x10 [ 111.559317][ T6075] ? __kernfs_new_node+0xd2/0x8e0 [ 111.559364][ T6075] __kernfs_new_node+0xd2/0x8e0 [ 111.559399][ T6075] ? wake_up_q+0xb0/0x160 [ 111.559419][ T6075] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.559461][ T6075] ? __pfx___kernfs_new_node+0x10/0x10 [ 111.559506][ T6075] ? find_held_lock+0x2b/0x80 [ 111.559532][ T6075] ? kernfs_root+0xee/0x2a0 [ 111.559576][ T6075] kernfs_new_node+0x13c/0x1e0 [ 111.559612][ T6075] kernfs_create_link+0xcc/0x240 [ 111.559651][ T6075] sysfs_do_create_link_sd+0x90/0x140 [ 111.559696][ T6075] sysfs_create_link+0x61/0xc0 [ 111.559732][ T6075] driver_sysfs_add+0x112/0x2d0 [ 111.559785][ T6075] device_bind_driver+0x16/0x70 [ 111.559836][ T6075] mac80211_hwsim_new_radio+0x3e5/0x54d0 [ 111.559907][ T6075] ? __asan_memset+0x23/0x50 [ 111.559949][ T6075] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 111.560008][ T6075] hwsim_new_radio_nl+0xb51/0x12c0 [ 111.560057][ T6075] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 111.560114][ T6075] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 111.560158][ T6075] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 111.560201][ T6075] genl_family_rcv_msg_doit+0x209/0x2f0 [ 111.560245][ T6075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.560279][ T6075] ? trace_cap_capable+0x18d/0x200 [ 111.560319][ T6075] ? bpf_lsm_capable+0x9/0x10 [ 111.560349][ T6075] ? security_capable+0x7e/0x260 [ 111.560371][ T6075] ? ns_capable+0xd7/0x110 [ 111.560397][ T6075] genl_rcv_msg+0x55c/0x800 [ 111.560435][ T6075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.560472][ T6075] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 111.560529][ T6075] netlink_rcv_skb+0x158/0x420 [ 111.560561][ T6075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.560599][ T6075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.560646][ T6075] ? netlink_deliver_tap+0x1ae/0xd30 [ 111.560685][ T6075] genl_rcv+0x28/0x40 [ 111.560720][ T6075] netlink_unicast+0x53d/0x7f0 [ 111.560761][ T6075] ? __pfx_netlink_unicast+0x10/0x10 [ 111.560838][ T6075] netlink_sendmsg+0x8d1/0xdd0 [ 111.560882][ T6075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.560937][ T6075] ____sys_sendmsg+0xa95/0xc70 [ 111.560980][ T6075] ? copy_msghdr_from_user+0x10a/0x160 [ 111.561012][ T6075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.561079][ T6075] ___sys_sendmsg+0x134/0x1d0 [ 111.561112][ T6075] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.561138][ T6075] ? __lock_acquire+0x622/0x1c90 [ 111.561228][ T6075] __sys_sendmsg+0x16d/0x220 [ 111.561259][ T6075] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.561287][ T6075] ? __x64_sys_futex+0x1e0/0x4c0 [ 111.561353][ T6075] do_syscall_64+0xcd/0x490 [ 111.561388][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.561419][ T6075] RIP: 0033:0x7fbe8d98e929 [ 111.561445][ T6075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.561473][ T6075] RSP: 002b:00007fbe8e8af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.561501][ T6075] RAX: ffffffffffffffda RBX: 00007fbe8dbb5fa0 RCX: 00007fbe8d98e929 [ 111.561520][ T6075] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000007 [ 111.561538][ T6075] RBP: 00007fbe8da10b39 R08: 0000000000000000 R09: 0000000000000000 [ 111.561554][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.561571][ T6075] R13: 0000000000000000 R14: 00007fbe8dbb5fa0 R15: 00007fff32e15998 [ 111.561612][ T6075] [ 112.326904][ T6074] FAULT_INJECTION: forcing a failure. [ 112.326904][ T6074] name failslab, interval 1, probability 0, space 0, times 0 [ 112.436324][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.0.27 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 112.436370][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.436386][ T6074] Call Trace: [ 112.436396][ T6074] [ 112.436406][ T6074] dump_stack_lvl+0x16c/0x1f0 [ 112.436440][ T6074] should_fail_ex+0x512/0x640 [ 112.436490][ T6074] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 112.436534][ T6074] should_failslab+0xc2/0x120 [ 112.436560][ T6074] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 112.436598][ T6074] ? __kernfs_new_node+0xd2/0x8e0 [ 112.436640][ T6074] __kernfs_new_node+0xd2/0x8e0 [ 112.436680][ T6074] ? __pfx___kernfs_new_node+0x10/0x10 [ 112.436724][ T6074] ? find_held_lock+0x2b/0x80 [ 112.436749][ T6074] ? kernfs_root+0xee/0x2a0 [ 112.436787][ T6074] kernfs_new_node+0x13c/0x1e0 [ 112.436808][ T6074] ? current_in_userns+0x180/0x190 [ 112.436846][ T6074] __kernfs_create_file+0x53/0x350 [ 112.436877][ T6074] sysfs_add_file_mode_ns+0x207/0x3c0 [ 112.436915][ T6074] internal_create_group+0x578/0xf30 [ 112.436956][ T6074] ? kobject_init_and_add+0x123/0x190 [ 112.436983][ T6074] ? __pfx_internal_create_group+0x10/0x10 [ 112.437014][ T6074] ? __pfx_kobject_init_and_add+0x10/0x10 [ 112.437038][ T6074] ? __x64_sys_ioctl+0x18b/0x210 [ 112.437077][ T6074] internal_create_groups+0x9d/0x150 [ 112.437122][ T6074] netdev_queue_update_kobjects+0x115/0x720 [ 112.437161][ T6074] netdev_register_kobject+0x28c/0x3a0 [ 112.437193][ T6074] register_netdevice+0x13dc/0x2270 [ 112.437224][ T6074] ? idr_alloc+0xdd/0x130 [ 112.437261][ T6074] ? __pfx_register_netdevice+0x10/0x10 [ 112.437299][ T6074] ppp_dev_configure+0x99b/0xc80 [ 112.437338][ T6074] ppp_ioctl+0x17e0/0x2660 [ 112.437371][ T6074] ? find_held_lock+0x2b/0x80 [ 112.437392][ T6074] ? __pfx_ppp_ioctl+0x10/0x10 [ 112.437430][ T6074] ? __fget_files+0x20e/0x3c0 [ 112.437468][ T6074] ? __pfx_ppp_ioctl+0x10/0x10 [ 112.437498][ T6074] __x64_sys_ioctl+0x18b/0x210 [ 112.437528][ T6074] do_syscall_64+0xcd/0x490 [ 112.437554][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.437577][ T6074] RIP: 0033:0x7fb08038e929 [ 112.437597][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.437618][ T6074] RSP: 002b:00007fb0811ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.437641][ T6074] RAX: ffffffffffffffda RBX: 00007fb0805b5fa0 RCX: 00007fb08038e929 [ 112.437655][ T6074] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 112.437668][ T6074] RBP: 00007fb080410b39 R08: 0000000000000000 R09: 0000000000000000 [ 112.437681][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.437693][ T6074] R13: 0000000000000000 R14: 00007fb0805b5fa0 R15: 00007ffe3c59c8d8 [ 112.437723][ T6074] [ 113.398460][ T6085] capability: warning: `syz.3.30' uses 32-bit capabilities (legacy support in use) [ 113.515324][ T6085] HfR: entered promiscuous mode [ 113.532137][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 113.615259][ T6087] openvswitch: HfR: Dropping previously announced user features [ 113.676162][ T6085] device-mapper: ioctl: Unable to rename non-existent device,  to [ 114.240854][ T6086] GUP no longer grows the stack in syz.2.31 (6086): 14000-401000 (4000) [ 114.406254][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.2.31 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 114.406298][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.406315][ T6086] Call Trace: [ 114.406324][ T6086] [ 114.406336][ T6086] dump_stack_lvl+0x16c/0x1f0 [ 114.406369][ T6086] gup_vma_lookup+0x1d2/0x220 [ 114.406405][ T6086] __get_user_pages+0x271/0x3b80 [ 114.406455][ T6086] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 114.406484][ T6086] ? kasan_save_stack+0x42/0x60 [ 114.406529][ T6086] ? __pfx___get_user_pages+0x10/0x10 [ 114.406561][ T6086] ? register_lock_class+0x41/0x4c0 [ 114.406599][ T6086] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 114.406627][ T6086] ? do_syscall_64+0xcd/0x490 [ 114.406669][ T6086] __gup_longterm_locked+0x20d/0x1850 [ 114.406707][ T6086] ? __lock_acquire+0xb8a/0x1c90 [ 114.406754][ T6086] ? __pfx___gup_longterm_locked+0x10/0x10 [ 114.406812][ T6086] pin_user_pages_remote+0xed/0x140 [ 114.406850][ T6086] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 114.406884][ T6086] ? mm_access+0x22d/0x2e0 [ 114.406934][ T6086] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 114.406996][ T6086] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 114.407030][ T6086] ? iovec_from_user+0xbb/0x140 [ 114.407081][ T6086] ? iovec_from_user+0xbb/0x140 [ 114.407115][ T6086] process_vm_rw+0x216/0x2c0 [ 114.407150][ T6086] ? __pfx_process_vm_rw+0x10/0x10 [ 114.407190][ T6086] ? __pfx___sys_sendmmsg+0x10/0x10 [ 114.407263][ T6086] ? xfd_validate_state+0x61/0x180 [ 114.407306][ T6086] ? __task_pid_nr_ns+0x17c/0x500 [ 114.407350][ T6086] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 114.407382][ T6086] ? do_syscall_64+0x91/0x490 [ 114.407408][ T6086] ? lockdep_hardirqs_on+0x7c/0x110 [ 114.407456][ T6086] do_syscall_64+0xcd/0x490 [ 114.407489][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.407519][ T6086] RIP: 0033:0x7f82c0f8e929 [ 114.407543][ T6086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.407570][ T6086] RSP: 002b:00007f82c1e88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 114.407598][ T6086] RAX: ffffffffffffffda RBX: 00007f82c11b6080 RCX: 00007f82c0f8e929 [ 114.407617][ T6086] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000027 [ 114.407634][ T6086] RBP: 00007f82c1010b39 R08: 0000000000000003 R09: 0000000000000000 [ 114.407650][ T6086] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 114.407667][ T6086] R13: 0000000000000000 R14: 00007f82c11b6080 R15: 00007ffe378aebc8 [ 114.407707][ T6086] [ 115.024830][ T6101] ubi0: attaching mtd0 [ 115.038169][ T6101] ubi0: scanning is finished [ 115.043251][ T6101] ubi0: empty MTD device detected [ 115.506236][ T6101] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 115.566561][ T6101] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 115.584332][ T6101] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 115.595058][ T6101] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 115.613352][ T6101] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 115.621280][ T6101] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 115.633839][ T6101] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2781103118 [ 115.654553][ T6090] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 115.662928][ T6101] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 115.777108][ T6104] ubi0: background thread "ubi_bgt0d" started, PID 6104 [ 116.165072][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 116.259043][ T6094] netlink: 13 bytes leftover after parsing attributes in process `syz.0.33'. [ 117.576752][ T6111] mmap: syz.2.36 (6111) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.280119][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.46'. [ 122.387327][ T6182] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.401454][ T6214] FAULT_INJECTION: forcing a failure. [ 126.401454][ T6214] name failslab, interval 1, probability 0, space 0, times 0 [ 126.414451][ T6214] CPU: 0 UID: 0 PID: 6214 Comm: syz.3.56 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 126.414479][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.414489][ T6214] Call Trace: [ 126.414496][ T6214] [ 126.414503][ T6214] dump_stack_lvl+0x16c/0x1f0 [ 126.414530][ T6214] should_fail_ex+0x512/0x640 [ 126.414556][ T6214] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 126.414586][ T6214] should_failslab+0xc2/0x120 [ 126.414620][ T6214] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 126.414648][ T6214] ? __d_alloc+0x31/0xaa0 [ 126.414669][ T6214] __d_alloc+0x31/0xaa0 [ 126.414687][ T6214] d_alloc_pseudo+0x1c/0xc0 [ 126.414708][ T6214] alloc_file_pseudo+0xcf/0x230 [ 126.414731][ T6214] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 126.414753][ T6214] ? do_raw_spin_unlock+0x172/0x230 [ 126.414786][ T6214] __anon_inode_getfile+0xf7/0x3a0 [ 126.414816][ T6214] anon_inode_getfd+0x52/0xb0 [ 126.414840][ T6214] __x64_sys_fsopen+0x18b/0x240 [ 126.414862][ T6214] do_syscall_64+0xcd/0x490 [ 126.414881][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.414898][ T6214] RIP: 0033:0x7fbe8d98e929 [ 126.414914][ T6214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.414930][ T6214] RSP: 002b:00007fbe8e88e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 126.414946][ T6214] RAX: ffffffffffffffda RBX: 00007fbe8dbb6080 RCX: 00007fbe8d98e929 [ 126.414956][ T6214] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 126.414966][ T6214] RBP: 00007fbe8da10b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.414975][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.414984][ T6214] R13: 0000000000000000 R14: 00007fbe8dbb6080 R15: 00007fff32e15998 [ 126.415004][ T6214] [ 128.137797][ T6229] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 128.335189][ T6238] sp0: Synchronizing with TNC [ 136.189955][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 138.443988][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.452650][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.840895][ T6367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 140.270717][ T6379] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET) [ 144.285156][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 145.072996][ T6424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.080914][ T6424] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.171292][ T6424] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.204056][ T6424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.222323][ T6424] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.270383][ T6424] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.318299][ T6424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.333662][ T6424] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.400023][ T6424] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.436938][ T6424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.499606][ T6424] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.531147][ T6424] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.562621][ T6424] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.037379][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.236178][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.396295][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.476455][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.380861][ T6458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.388118][ T6458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.394386][ T6458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.401765][ T6458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.038680][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.436274][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.443048][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.449867][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout syzkaller syzkaller login: [ 152.118892][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.549385][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.555530][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.561752][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.984256][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 154.596187][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.658066][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 157.460339][ T6574] FAULT_INJECTION: forcing a failure. [ 157.460339][ T6574] name failslab, interval 1, probability 0, space 0, times 0 [ 157.506274][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: syz.0.124 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 157.506305][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.506323][ T6574] Call Trace: [ 157.506331][ T6574] [ 157.506338][ T6574] dump_stack_lvl+0x16c/0x1f0 [ 157.506364][ T6574] should_fail_ex+0x512/0x640 [ 157.506393][ T6574] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 157.506423][ T6574] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 157.506443][ T6574] should_failslab+0xc2/0x120 [ 157.506463][ T6574] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 157.506489][ T6574] ? mempool_init_node+0x31d/0x760 [ 157.506509][ T6574] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 157.506527][ T6574] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 157.506545][ T6574] mempool_init_node+0x31d/0x760 [ 157.506573][ T6574] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 157.506591][ T6574] ? __pfx_mempool_free_slab+0x10/0x10 [ 157.506609][ T6574] mempool_init_noprof+0x3a/0x50 [ 157.506630][ T6574] bioset_init+0x37a/0x880 [ 157.506651][ T6574] ? __pfx_bioset_init+0x10/0x10 [ 157.506677][ T6574] __alloc_disk_node+0x83/0x630 [ 157.506706][ T6574] __blk_mq_alloc_disk+0x89/0x120 [ 157.506734][ T6574] loop_add+0x49e/0xb70 [ 157.506755][ T6574] ? do_vfs_ioctl+0x523/0x1a60 [ 157.506776][ T6574] ? __pfx_loop_add+0x10/0x10 [ 157.506793][ T6574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.506827][ T6574] ? find_held_lock+0x2b/0x80 [ 157.506849][ T6574] loop_control_ioctl+0x13e/0x630 [ 157.506871][ T6574] ? __pfx_loop_control_ioctl+0x10/0x10 [ 157.506894][ T6574] ? __pfx_loop_control_ioctl+0x10/0x10 [ 157.506916][ T6574] __x64_sys_ioctl+0x18b/0x210 [ 157.506938][ T6574] do_syscall_64+0xcd/0x490 [ 157.506957][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.506975][ T6574] RIP: 0033:0x7fb08038e929 [ 157.506990][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.507006][ T6574] RSP: 002b:00007fb0811ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.507023][ T6574] RAX: ffffffffffffffda RBX: 00007fb0805b5fa0 RCX: 00007fb08038e929 [ 157.507033][ T6574] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 157.507043][ T6574] RBP: 00007fb080410b39 R08: 0000000000000000 R09: 0000000000000000 [ 157.507053][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.507062][ T6574] R13: 0000000000000000 R14: 00007fb0805b5fa0 R15: 00007ffe3c59c8d8 [ 157.507082][ T6574] [ 159.432495][ T6581] sctp: failed to load transform for md5: -2 [ 159.444805][ T5836] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 160.023907][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 160.066549][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 160.079567][ T6619] netlink: 354 bytes leftover after parsing attributes in process `syz.0.132'. [ 161.534181][ T6606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.542815][ T6606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.566969][ T6606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.577211][ T6606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.976169][ T6638] FAULT_INJECTION: forcing a failure. [ 161.976169][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 162.006151][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.3.137 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 162.006199][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.006216][ T6638] Call Trace: [ 162.006227][ T6638] [ 162.006239][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 162.006276][ T6638] should_fail_ex+0x512/0x640 [ 162.006321][ T6638] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 162.006373][ T6638] should_failslab+0xc2/0x120 [ 162.006404][ T6638] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 162.006452][ T6638] ? __kernfs_new_node+0xd2/0x8e0 [ 162.006500][ T6638] __kernfs_new_node+0xd2/0x8e0 [ 162.006555][ T6638] ? __pfx___kernfs_new_node+0x10/0x10 [ 162.006610][ T6638] ? find_held_lock+0x2b/0x80 [ 162.006642][ T6638] ? kernfs_root+0xee/0x2a0 [ 162.006694][ T6638] kernfs_new_node+0x13c/0x1e0 [ 162.006728][ T6638] __kernfs_create_file+0x53/0x350 [ 162.006767][ T6638] sysfs_add_file_mode_ns+0x207/0x3c0 [ 162.006818][ T6638] internal_create_group+0x578/0xf30 [ 162.006872][ T6638] ? __pfx_internal_create_group+0x10/0x10 [ 162.006922][ T6638] ? kernfs_create_link+0x1bd/0x240 [ 162.006964][ T6638] internal_create_groups+0x9d/0x150 [ 162.007011][ T6638] device_add+0x6d1/0x1a70 [ 162.007050][ T6638] ? __pfx_device_add+0x10/0x10 [ 162.007082][ T6638] ? lockdep_init_map_type+0x5c/0x280 [ 162.007124][ T6638] ? __init_waitqueue_head+0xca/0x150 [ 162.007204][ T6638] netdev_register_kobject+0x182/0x3a0 [ 162.007249][ T6638] register_netdevice+0x13dc/0x2270 [ 162.007312][ T6638] ? __pfx_register_netdevice+0x10/0x10 [ 162.007364][ T6638] ldisc_open+0x481/0x970 [ 162.007400][ T6638] ? __pfx_ldisc_open+0x10/0x10 [ 162.007439][ T6638] ? tty_set_ldisc+0x2b8/0x780 [ 162.007484][ T6638] ? down_write+0x14d/0x200 [ 162.007527][ T6638] ? __pfx_ldisc_open+0x10/0x10 [ 162.007561][ T6638] tty_ldisc_open+0x9f/0x120 [ 162.007606][ T6638] tty_set_ldisc+0x32b/0x780 [ 162.007658][ T6638] tty_ioctl+0xc2e/0x1640 [ 162.007691][ T6638] ? __pfx_tty_ioctl+0x10/0x10 [ 162.007734][ T6638] ? find_held_lock+0x2b/0x80 [ 162.007762][ T6638] ? hook_file_ioctl_common+0x145/0x410 [ 162.007806][ T6638] ? __fget_files+0x20e/0x3c0 [ 162.007850][ T6638] ? __pfx_tty_ioctl+0x10/0x10 [ 162.007876][ T6638] __x64_sys_ioctl+0x18b/0x210 [ 162.007912][ T6638] do_syscall_64+0xcd/0x490 [ 162.007941][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.007971][ T6638] RIP: 0033:0x7fbe8d98e929 [ 162.007996][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.008025][ T6638] RSP: 002b:00007fbe8e8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.008052][ T6638] RAX: ffffffffffffffda RBX: 00007fbe8dbb5fa0 RCX: 00007fbe8d98e929 [ 162.008069][ T6638] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000014 [ 162.008085][ T6638] RBP: 00007fbe8da10b39 R08: 0000000000000000 R09: 0000000000000000 [ 162.008101][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.008117][ T6638] R13: 0000000000000000 R14: 00007fbe8dbb5fa0 R15: 00007fff32e15998 [ 162.008154][ T6638] [ 162.386657][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.566489][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.621287][ T6658] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 163.636175][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.643433][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.368038][ T6684] Format for deleting device is "id" (uint). [ 165.555072][ T6687] netlink: 'syz.3.146': attribute type 10 has an invalid length. [ 165.588250][ T6687] netlink: 330 bytes leftover after parsing attributes in process `syz.3.146'. [ 167.917714][ T6712] tipc: Started in network mode [ 167.953025][ T6712] tipc: Node identity ee00, cluster identity 4711 [ 167.980190][ T6712] tipc: Node number set to 60928 [ 168.249859][ T6720] netlink: 80 bytes leftover after parsing attributes in process `syz.3.154'. [ 168.285369][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 168.866660][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 169.256363][ T6713] ima: policy update failed [ 169.317634][ T30] audit: type=1802 audit(4295005845.377:3): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.151" res=0 errno=0 [ 169.623556][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b9b5400: rx timeout, send abort [ 170.134066][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b9b5400: abort rx timeout. Force session deactivation [ 172.041746][ T6775] ecryptfs_miscdev_write: Invalid packet size [192] [ 173.206716][ T6786] can: request_module (can-proto-3) failed. [ 173.421954][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 173.768793][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 173.851225][ T6790] netlink: 354 bytes leftover after parsing attributes in process `syz.2.165'. [ 173.902669][ T6795] FAULT_INJECTION: forcing a failure. [ 173.902669][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 174.076113][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.0.166 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 174.076159][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.076178][ T6795] Call Trace: [ 174.076188][ T6795] [ 174.076199][ T6795] dump_stack_lvl+0x16c/0x1f0 [ 174.076234][ T6795] should_fail_ex+0x512/0x640 [ 174.076274][ T6795] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 174.076324][ T6795] should_failslab+0xc2/0x120 [ 174.076352][ T6795] __kmalloc_cache_noprof+0x6a/0x3e0 [ 174.076388][ T6795] ? mr_table_alloc+0x5f/0x2e0 [ 174.076426][ T6795] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 174.076455][ T6795] mr_table_alloc+0x5f/0x2e0 [ 174.076485][ T6795] ? __pfx_ipmr_expire_process+0x10/0x10 [ 174.076514][ T6795] ? __pfx_ipmr_net_init+0x10/0x10 [ 174.076545][ T6795] ipmr_net_init+0x3c4/0x4e0 [ 174.076575][ T6795] ? __pfx_ipmr_net_init+0x10/0x10 [ 174.076605][ T6795] ops_init+0x1df/0x5f0 [ 174.076638][ T6795] setup_net+0x1ff/0x510 [ 174.076664][ T6795] ? lockdep_init_map_type+0x5c/0x280 [ 174.076700][ T6795] ? __pfx_setup_net+0x10/0x10 [ 174.076731][ T6795] ? debug_mutex_init+0x37/0x70 [ 174.076762][ T6795] copy_net_ns+0x2a6/0x5f0 [ 174.076797][ T6795] create_new_namespaces+0x3ea/0xa90 [ 174.076835][ T6795] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 174.076868][ T6795] ksys_unshare+0x45b/0xa40 [ 174.076901][ T6795] ? __pfx_ksys_unshare+0x10/0x10 [ 174.076936][ T6795] ? xfd_validate_state+0x61/0x180 [ 174.076981][ T6795] __x64_sys_unshare+0x31/0x40 [ 174.077014][ T6795] do_syscall_64+0xcd/0x490 [ 174.077043][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.077070][ T6795] RIP: 0033:0x7fb08038e929 [ 174.077093][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.077117][ T6795] RSP: 002b:00007fb08118d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 174.077143][ T6795] RAX: ffffffffffffffda RBX: 00007fb0805b6080 RCX: 00007fb08038e929 [ 174.077160][ T6795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 174.077176][ T6795] RBP: 00007fb080410b39 R08: 0000000000000000 R09: 0000000000000000 [ 174.077191][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.077207][ T6795] R13: 0000000000000000 R14: 00007fb0805b6080 R15: 00007ffe3c59c8d8 [ 174.077244][ T6795] [ 175.271603][ T6806] can: request_module (can-proto-3) failed. [ 177.227743][ T6840] FAULT_INJECTION: forcing a failure. [ 177.227743][ T6840] name failslab, interval 1, probability 0, space 0, times 0 [ 177.242297][ T6840] CPU: 1 UID: 0 PID: 6840 Comm: syz.2.174 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 177.242342][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.242368][ T6840] Call Trace: [ 177.242379][ T6840] [ 177.242391][ T6840] dump_stack_lvl+0x16c/0x1f0 [ 177.242431][ T6840] should_fail_ex+0x512/0x640 [ 177.242479][ T6840] ? __kmalloc_noprof+0xbf/0x510 [ 177.242530][ T6840] ? ptp_open+0x103/0x520 [ 177.242570][ T6840] should_failslab+0xc2/0x120 [ 177.242600][ T6840] __kmalloc_noprof+0xd2/0x510 [ 177.242654][ T6840] ptp_open+0x103/0x520 [ 177.242696][ T6840] ? __pfx_ptp_open+0x10/0x10 [ 177.242737][ T6840] ? __pfx_ptp_open+0x10/0x10 [ 177.242771][ T6840] posix_clock_open+0x17b/0x290 [ 177.242804][ T6840] ? __pfx_posix_clock_open+0x10/0x10 [ 177.242833][ T6840] chrdev_open+0x234/0x6a0 [ 177.242856][ T6840] ? __pfx_apparmor_file_open+0x10/0x10 [ 177.242895][ T6840] ? __pfx_chrdev_open+0x10/0x10 [ 177.242925][ T6840] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 177.242971][ T6840] do_dentry_open+0x741/0x1c10 [ 177.243013][ T6840] ? __pfx_chrdev_open+0x10/0x10 [ 177.243047][ T6840] vfs_open+0x82/0x3f0 [ 177.243082][ T6840] path_openat+0x1de4/0x2cb0 [ 177.243132][ T6840] ? __pfx_path_openat+0x10/0x10 [ 177.243183][ T6840] ? __lock_acquire+0xb8a/0x1c90 [ 177.243229][ T6840] do_filp_open+0x20b/0x470 [ 177.243275][ T6840] ? __pfx_do_filp_open+0x10/0x10 [ 177.243350][ T6840] ? alloc_fd+0x471/0x7d0 [ 177.243414][ T6840] do_sys_openat2+0x11b/0x1d0 [ 177.243448][ T6840] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.243500][ T6840] __x64_sys_openat+0x174/0x210 [ 177.243538][ T6840] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.243594][ T6840] do_syscall_64+0xcd/0x490 [ 177.243627][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.243658][ T6840] RIP: 0033:0x7f82c0f8e929 [ 177.243683][ T6840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.243710][ T6840] RSP: 002b:00007f82c1e88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.243739][ T6840] RAX: ffffffffffffffda RBX: 00007f82c11b6080 RCX: 00007f82c0f8e929 [ 177.243758][ T6840] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 177.243776][ T6840] RBP: 00007f82c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 177.243793][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.243810][ T6840] R13: 0000000000000000 R14: 00007f82c11b6080 R15: 00007ffe378aebc8 [ 177.243843][ T6840] [ 182.043033][ T6900] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 184.580570][ T5836] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 185.096390][ T6944] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 185.486981][ T6952] FAULT_INJECTION: forcing a failure. [ 185.486981][ T6952] name failslab, interval 1, probability 0, space 0, times 0 [ 185.539334][ T6952] CPU: 1 UID: 0 PID: 6952 Comm: syz.2.192 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 185.539384][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.539402][ T6952] Call Trace: [ 185.539413][ T6952] [ 185.539425][ T6952] dump_stack_lvl+0x16c/0x1f0 [ 185.539465][ T6952] should_fail_ex+0x512/0x640 [ 185.539512][ T6952] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 185.539567][ T6952] should_failslab+0xc2/0x120 [ 185.539600][ T6952] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 185.539647][ T6952] ? __kernfs_new_node+0xd2/0x8e0 [ 185.539696][ T6952] __kernfs_new_node+0xd2/0x8e0 [ 185.539746][ T6952] ? __pfx___kernfs_new_node+0x10/0x10 [ 185.539800][ T6952] ? find_held_lock+0x2b/0x80 [ 185.539833][ T6952] ? kernfs_root+0xee/0x2a0 [ 185.539884][ T6952] kernfs_new_node+0x13c/0x1e0 [ 185.539929][ T6952] kernfs_create_dir_ns+0x4c/0x1a0 [ 185.539961][ T6952] sysfs_create_dir_ns+0x13a/0x2b0 [ 185.540003][ T6952] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 185.540042][ T6952] ? find_held_lock+0x2b/0x80 [ 185.540078][ T6952] ? class_dir_child_ns_type+0xd/0x60 [ 185.540115][ T6952] kobject_add_internal+0x2c4/0x9b0 [ 185.540168][ T6952] kobject_add+0x16e/0x240 [ 185.540201][ T6952] ? __pfx_kobject_add+0x10/0x10 [ 185.540237][ T6952] ? get_device_parent+0x1c5/0x4e0 [ 185.540268][ T6952] ? kobject_put+0xab/0x5a0 [ 185.540318][ T6952] device_add+0x288/0x1a70 [ 185.540360][ T6952] ? __pfx_device_add+0x10/0x10 [ 185.540392][ T6952] ? kfree+0x24f/0x4d0 [ 185.540449][ T6952] device_create_groups_vargs+0x1f8/0x270 [ 185.540493][ T6952] device_create+0xed/0x130 [ 185.540532][ T6952] ? __pfx_device_create+0x10/0x10 [ 185.540572][ T6952] ? do_init_timer+0xc9/0x110 [ 185.540608][ T6952] ? ieee80211_roc_setup+0x136/0x270 [ 185.540652][ T6952] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 185.540694][ T6952] mac80211_hwsim_new_radio+0x369/0x54d0 [ 185.540764][ T6952] ? __asan_memset+0x23/0x50 [ 185.540806][ T6952] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 185.540867][ T6952] hwsim_new_radio_nl+0xb51/0x12c0 [ 185.540910][ T6952] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.540965][ T6952] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 185.541005][ T6952] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 185.541052][ T6952] genl_family_rcv_msg_doit+0x209/0x2f0 [ 185.541096][ T6952] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.541138][ T6952] ? trace_cap_capable+0x18d/0x200 [ 185.541182][ T6952] ? bpf_lsm_capable+0x9/0x10 [ 185.541219][ T6952] ? security_capable+0x7e/0x260 [ 185.541248][ T6952] ? ns_capable+0xd7/0x110 [ 185.541281][ T6952] genl_rcv_msg+0x55c/0x800 [ 185.541336][ T6952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.541381][ T6952] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.541445][ T6952] netlink_rcv_skb+0x158/0x420 [ 185.541484][ T6952] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.541530][ T6952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.541587][ T6952] ? netlink_deliver_tap+0x1ae/0xd30 [ 185.541628][ T6952] genl_rcv+0x28/0x40 [ 185.541661][ T6952] netlink_unicast+0x53d/0x7f0 [ 185.541703][ T6952] ? __pfx_netlink_unicast+0x10/0x10 [ 185.541753][ T6952] netlink_sendmsg+0x8d1/0xdd0 [ 185.541797][ T6952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.541849][ T6952] ____sys_sendmsg+0xa95/0xc70 [ 185.541891][ T6952] ? copy_msghdr_from_user+0x10a/0x160 [ 185.541919][ T6952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.541951][ T6952] ? preempt_schedule_thunk+0x16/0x30 [ 185.541997][ T6952] ? try_to_wake_up+0xa2f/0x1680 [ 185.542034][ T6952] ___sys_sendmsg+0x134/0x1d0 [ 185.542065][ T6952] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.542091][ T6952] ? __lock_acquire+0x622/0x1c90 [ 185.542186][ T6952] __sys_sendmsg+0x16d/0x220 [ 185.542217][ T6952] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.542246][ T6952] ? __x64_sys_futex+0x1e0/0x4c0 [ 185.542319][ T6952] do_syscall_64+0xcd/0x490 [ 185.542354][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.542384][ T6952] RIP: 0033:0x7f82c0f8e929 [ 185.542412][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.542444][ T6952] RSP: 002b:00007f82c1ea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.542474][ T6952] RAX: ffffffffffffffda RBX: 00007f82c11b5fa0 RCX: 00007f82c0f8e929 [ 185.542493][ T6952] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 000000000000000a [ 185.542541][ T6952] RBP: 00007f82c1010b39 R08: 0000000000000000 R09: 0000000000000000 [ 185.542573][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.542599][ T6952] R13: 0000000000000000 R14: 00007f82c11b5fa0 R15: 00007ffe378aebc8 [ 185.542665][ T6952] [ 185.542740][ T6952] kobject: kobject_add_internal failed for hwsim14 (error: -12 parent: mac80211_hwsim) [ 186.312894][ T30] audit: type=1800 audit(4295005862.367:4): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="lu_gp_id" dev="configfs" ino=11643 res=0 errno=0 [ 186.462974][ T6961] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input7 [ 187.000218][ T6968] ------------[ cut here ]------------ [ 187.006127][ T6968] WARNING: CPU: 0 PID: 6968 at kernel/trace/trace.c:2526 tracing_start_tr.part.0+0x1fc/0x2a0 [ 187.016463][ T6968] Modules linked in: [ 187.021097][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.1.193 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 187.032716][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.042955][ T6968] RIP: 0010:tracing_start_tr.part.0+0x1fc/0x2a0 [ 187.049279][ T6968] Code: 00 0f 85 97 00 00 00 48 83 3d 7f 44 62 0c 00 74 78 e8 38 55 fb ff 4c 89 ff e8 10 5b be 09 90 e9 d9 fe ff ff e8 25 55 fb ff 90 <0f> 0b 90 c7 83 94 00 00 00 00 00 00 00 e9 c1 fe ff ff e8 8d 1b 61 [ 187.069123][ T6968] RSP: 0018:ffffc90003537be8 EFLAGS: 00010087 [ 187.075288][ T6968] RAX: 00000000000011cc RBX: ffffffff8e449ca0 RCX: ffffc9000f6d1000 [ 187.083492][ T6968] RDX: 0000000000080000 RSI: ffffffff81c033eb RDI: 0000000000000005 [ 187.091581][ T6968] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 187.099586][ T6968] R10: 00000000ffffffff R11: 0000000000000001 R12: 1ffff920006a6f7e [ 187.107598][ T6968] R13: 0000000000000287 R14: ffffffff8e449d80 R15: ffffffff8e449cc0 [ 187.115594][ T6968] FS: 00007f67df0736c0(0000) GS:ffff888124962000(0000) knlGS:0000000000000000 [ 187.124555][ T6968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.131171][ T6968] CR2: 0000001b305aeff8 CR3: 0000000035636000 CR4: 00000000003526f0 [ 187.140245][ T6968] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.148418][ T6968] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.156435][ T6968] Call Trace: [ 187.159756][ T6968] [ 187.162712][ T6968] ? __pfx_tracing_start_tr.part.0+0x10/0x10 [ 187.168742][ T6968] buffer_subbuf_size_write+0x226/0x280 [ 187.174328][ T6968] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 187.180447][ T6968] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 187.186560][ T6968] vfs_write+0x2a0/0x1150 [ 187.190937][ T6968] ? __pfx___mutex_lock+0x10/0x10 [ 187.196001][ T6968] ? __pfx_vfs_write+0x10/0x10 [ 187.200816][ T6968] ? __fget_files+0x20e/0x3c0 [ 187.205547][ T6968] ksys_write+0x12a/0x250 [ 187.209917][ T6968] ? __pfx_ksys_write+0x10/0x10 [ 187.214913][ T6968] do_syscall_64+0xcd/0x490 [ 187.219467][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.225394][ T6968] RIP: 0033:0x7f67de18e929 [ 187.229834][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.249730][ T6968] RSP: 002b:00007f67df073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.258176][ T6968] RAX: ffffffffffffffda RBX: 00007f67de3b6240 RCX: 00007f67de18e929 [ 187.266396][ T6968] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 187.274604][ T6968] RBP: 00007f67de210b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.282631][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.290661][ T6968] R13: 0000000000000000 R14: 00007f67de3b6240 R15: 00007ffd9563b778 [ 187.298777][ T6968] [ 187.302025][ T6968] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.309532][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.1.193 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 187.321154][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.331443][ T6968] Call Trace: [ 187.334777][ T6968] [ 187.338064][ T6968] dump_stack_lvl+0x3d/0x1f0 [ 187.342699][ T6968] panic+0x71c/0x800 [ 187.346637][ T6968] ? __pfx_panic+0x10/0x10 [ 187.351176][ T6968] ? show_trace_log_lvl+0x29b/0x3e0 [ 187.356513][ T6968] ? tracing_start_tr.part.0+0x1fc/0x2a0 [ 187.362241][ T6968] check_panic_on_warn+0xab/0xb0 [ 187.367303][ T6968] __warn+0xf6/0x3c0 [ 187.371330][ T6968] ? tracing_start_tr.part.0+0x1fc/0x2a0 [ 187.377165][ T6968] report_bug+0x3c3/0x580 [ 187.381535][ T6968] ? tracing_start_tr.part.0+0x1fc/0x2a0 [ 187.387200][ T6968] handle_bug+0x184/0x210 [ 187.391567][ T6968] exc_invalid_op+0x17/0x50 [ 187.396115][ T6968] asm_exc_invalid_op+0x1a/0x20 [ 187.401001][ T6968] RIP: 0010:tracing_start_tr.part.0+0x1fc/0x2a0 [ 187.407534][ T6968] Code: 00 0f 85 97 00 00 00 48 83 3d 7f 44 62 0c 00 74 78 e8 38 55 fb ff 4c 89 ff e8 10 5b be 09 90 e9 d9 fe ff ff e8 25 55 fb ff 90 <0f> 0b 90 c7 83 94 00 00 00 00 00 00 00 e9 c1 fe ff ff e8 8d 1b 61 [ 187.427341][ T6968] RSP: 0018:ffffc90003537be8 EFLAGS: 00010087 [ 187.433438][ T6968] RAX: 00000000000011cc RBX: ffffffff8e449ca0 RCX: ffffc9000f6d1000 [ 187.441433][ T6968] RDX: 0000000000080000 RSI: ffffffff81c033eb RDI: 0000000000000005 [ 187.449598][ T6968] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 187.457590][ T6968] R10: 00000000ffffffff R11: 0000000000000001 R12: 1ffff920006a6f7e [ 187.465668][ T6968] R13: 0000000000000287 R14: ffffffff8e449d80 R15: ffffffff8e449cc0 [ 187.473756][ T6968] ? tracing_start_tr.part.0+0x1fb/0x2a0 [ 187.479432][ T6968] ? tracing_start_tr.part.0+0x1fb/0x2a0 [ 187.485092][ T6968] ? __pfx_tracing_start_tr.part.0+0x10/0x10 [ 187.491118][ T6968] buffer_subbuf_size_write+0x226/0x280 [ 187.496699][ T6968] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 187.502895][ T6968] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 187.509023][ T6968] vfs_write+0x2a0/0x1150 [ 187.513395][ T6968] ? __pfx___mutex_lock+0x10/0x10 [ 187.518443][ T6968] ? __pfx_vfs_write+0x10/0x10 [ 187.523343][ T6968] ? __fget_files+0x20e/0x3c0 [ 187.528066][ T6968] ksys_write+0x12a/0x250 [ 187.532440][ T6968] ? __pfx_ksys_write+0x10/0x10 [ 187.537355][ T6968] do_syscall_64+0xcd/0x490 [ 187.541891][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.547809][ T6968] RIP: 0033:0x7f67de18e929 [ 187.552250][ T6968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.572090][ T6968] RSP: 002b:00007f67df073038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.580652][ T6968] RAX: ffffffffffffffda RBX: 00007f67de3b6240 RCX: 00007f67de18e929 [ 187.588687][ T6968] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 187.596738][ T6968] RBP: 00007f67de210b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.604821][ T6968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.612817][ T6968] R13: 0000000000000000 R14: 00007f67de3b6240 R15: 00007ffd9563b778 [ 187.620827][ T6968] [ 187.624232][ T6968] Kernel Offset: disabled [ 187.628565][ T6968] Rebooting in 86400 seconds..