last executing test programs: 9.183303307s ago: executing program 0 (id=246): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1ffffffffff, 0xfffffffffffffffe, 0x2, 0x100000000040ebf, 0xffffffffffffffff, 0x5) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0xfff, &(0x7f0000000180)="f2e37aa851f172bd24308737938225756749a2cd058f981d81224e731c1514b4fd0290f2fb02e666a68c1d72ad5615b16c73b5c0cedf17801dfece4a243f6e3a47ecc1c5db92b3500cefe0e7c269c25cd32701679442d287388dedeedd83d20b9d079d0a971a993bfa4a4499f8631caa1722a7a93bf39c2535ea752a9b05e21efeebdeaa71269153bdd6ba4fac9b230a6653e8cbaf66e11ea7c105"}) rseq$auto(0x0, 0x80000002, 0x8, 0xfd) socket(0x1f, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) semctl$auto_SETVAL(0x2, 0x5, 0x10, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) pread64$auto(r2, 0x0, 0x5, 0xffff) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x50a81, 0x0) 8.539861436s ago: executing program 2 (id=248): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x6, 0x80803, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0xfffffffe, 0x0, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x8000, 0x0, 0x0, 0x7fffffff, 0x4, 0xfffffffc, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x2, 0x5, 0xffff, 0x2, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x1fe, 0xd) getsockopt$auto_SO_PASSSEC(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)='/dev/mapper/control\x00', &(0x7f0000000040)=0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) read$auto(r1, 0x0, 0x3) 7.219762255s ago: executing program 2 (id=253): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(r1, 0x80084, 0x7b, 0x0, 0x80000a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffff8, &(0x7f0000000000)={0x0, 0x6}, 0x1, 0x0, 0x100000000000, 0x8}, 0x7}, 0xaa5, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe1f80, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x4) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) unshare$auto(0x40000080) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 6.001318278s ago: executing program 2 (id=257): r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$auto_SO_CNX_ADVICE(r0, 0x3ff, 0x35, &(0x7f0000000380)='Z\xd4\xa1I\xc3\x86Y\xf4\'w\xbe\a[\b\xe4\x05\x00\x00\x00)\xd6\xa5\x82{\xb2\x04\xcc\x02UVpx=\x8f6\xfd\x06\xdeG\xdd\xab\xea\xba\xdf\xf9[\x94\x94\xe8\xfd/\xa0\xdcm\xeeb\xb6.l\xef\xa2\x80p_yHmM;\x830\xa9\xdc\x13 i\xc6\x92\xcfT&)\xf4!\xa8\x1aA/e\xf1\xe5?\x03\x19\xb74.\x8f\xaa_B\xd3n\x87\xdc\x1113\xd0\x91\xe6z|6\xa6\xa4\x97\xec\xa9\xcc\xb4\xccjE\xe5\xb8\xdd\x81\\\xfb\b\x14\xb3\xc1a\xa8\x19!\xc9Z\x00\x0e\xfc\fN\xddY\x88H\xc6\xd5\x86\xc3s \xc6!\xc4t\xd11G*1\xd6\xb6\x9blnrQ?\x9dI\xb0\xbb\xf0l\x01Z\xcc\xbd\xd4]\xb7\xfd\xc8U\xba92W>u\x98\xce\xcc\xfa\xaa\x8dTJ|}h\x12', 0x10000001) socket(0x10, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x2, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/pts/ptmx\x00', 0x80, 0x0) io_uring_setup$auto(0xc, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@link_update={r2, @new_map_fd, 0x0, @old_map_fd=r3}, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) 5.24704018s ago: executing program 1 (id=260): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0xfdff, 0x804}, 0x8880) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x10000005, 0x7fff) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 4.967954428s ago: executing program 2 (id=261): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = getpid() mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3b) write$auto(r1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x3ff) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@ethernet={0x306, @remote}, 0x255) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r3 = prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, r0, 0x7ce, 0x8) connect$auto(r3, &(0x7f0000000080)=@nl=@unspec, 0x4e6) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x6bd504137e57d9c5, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x20000, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) fallocate$auto(r1, 0x0, 0xfad, 0x8) 4.541442699s ago: executing program 0 (id=264): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = getpid() mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3b) write$auto(r1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x3ff) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@ethernet={0x306, @remote}, 0x255) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r3 = prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, r0, 0x7ce, 0x8) connect$auto(r3, &(0x7f0000000080)=@nl=@unspec, 0x4e6) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb2, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x6bd504137e57d9c5, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x20000, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) fallocate$auto(r1, 0x0, 0xfad, 0x8) 4.285893044s ago: executing program 1 (id=265): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) readv$auto(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xfff}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x1f, 0x0, 0x4004044}, 0x8000) 4.284686276s ago: executing program 3 (id=266): r0 = socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/use_zero_pages\x00', 0x101082, 0x0) write$auto(r4, &(0x7f0000000380)='\x0e\b\xd3\n#I\xb8h\x9b9\xff\x89\x10\x13t\xd2\xc5i\xaa\x8b\xad\xc2\xb4\x87l\x88\x8b\xb5\x13\x92M\xb0\xc4r\xc8\xd0\x859\x81\xfb\xd1\x9f\x99\x16\xabM\x1d&\x18\x84\xd86\x05]\b\x0e\x1d\xfe\xc6\xb2\xcf\x1d\xe1908\xa0\x1e\x89\x84\a\xf8c\xf0\xf9\xe8\xd2\x8a\x9d\xe8J\x8b\x97X\x0fT\x05QS\xc6j\xa8\xd1\xc2\x1bF\x82\xa8\x94\xcd\xe6\xfeM\xf6_]\xad\xff\x80\xc5\xa1\xfb\xa2\x1a\xbb@E\xa7\xd4\f\xb5\xd6{\xd6\xe1\xe6\x14f\"#\x8d\xdd\xc0\xab\x91Q%\xcc\x9fn\xe2\xe76\x96{\n\x1c\xa5\x00'/166, 0x81) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80047437, 0x0) sendto$auto(r0, 0x0, 0x8, 0xe, &(0x7f0000000000), 0x1c) 3.888857516s ago: executing program 1 (id=267): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio1/description\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/194, 0xc2) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0xb, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x800a6f2f, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) 3.855740268s ago: executing program 3 (id=268): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SURVEY(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010b2dbd7000fddb002532"], 0x14}, 0x1, 0xc00e000000000000, 0x0, 0x24008004}, 0x20048840) 3.704912094s ago: executing program 2 (id=269): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x1940, 0x0) pread64$auto(r0, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x2) unshare$auto(0x40000080) unshare$auto(0x93a3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r3, 0x402, 0x9000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000040)=0x74c7) 3.696975378s ago: executing program 3 (id=270): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd1e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfbfffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) setgroups$auto(0x81, 0xfffffffffffffffc) setfsuid$auto(0x0) socket(0x2, 0x3, 0xff) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) readv$auto(0xffffffffffffffff, 0x0, 0x7f) 3.313051283s ago: executing program 1 (id=271): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESOCT=r0], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0xd}, 0xd69}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003fc0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r3, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000004000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_NAME={0xf, 0x2, 'veth0_vlan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0xc810}, 0x18800) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x18, 0x80000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r5) r6 = io_uring_setup$auto(0x86, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto(r7, 0xc0205647, r6) 2.902468808s ago: executing program 1 (id=272): mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0xfffd, 0x804}, 0x8880) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x10000005, 0x7fff) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 2.719444215s ago: executing program 0 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e535200090002"], 0x34}, 0x1, 0x0, 0xf00, 0x20000800}, 0x20008000) 2.576151691s ago: executing program 0 (id=274): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto(r1, 0x541c, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) socket(0x29, 0x2, 0x0) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x100, &(0x7f00000000c0)={0x3, 0x0, 0x7fff, @inferred=r3}, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r1, 0x89f0, r1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x4600, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r4, 0x11b, 0x6, 0xffffffffffffffff, 0x0) 2.198448016s ago: executing program 0 (id=275): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = getpid() mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3b) write$auto(r1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x3ff) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@ethernet={0x306, @remote}, 0x255) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r3 = prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, r0, 0x7ce, 0x8) connect$auto(r3, &(0x7f0000000080)=@nl=@unspec, 0x4e6) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb2, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x6bd504137e57d9c5, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x20000, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) fallocate$auto(r1, 0x0, 0xfad, 0x8) 2.146448977s ago: executing program 3 (id=276): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x6, 0x80803, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0xfffffffe, 0x0, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x8000, 0x0, 0x0, 0x7fffffff, 0x4, 0xfffffffc, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x2, 0x5, 0xffff, 0x2, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x1fe, 0xd) getsockopt$auto_SO_PASSSEC(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)='/dev/mapper/control\x00', &(0x7f0000000040)=0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r0, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r2, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) read$auto(r1, 0x0, 0x3) 1.868142488s ago: executing program 1 (id=277): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = getpid() mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3b) write$auto(r1, &(0x7f0000000040)='\xaa\xaa\xaa\xaa\xaa', 0x3ff) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@ethernet={0x306, @remote}, 0x255) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r3 = prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, r0, 0x7ce, 0x8) connect$auto(r3, &(0x7f0000000080)=@nl=@unspec, 0x4e6) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101201, 0x0) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x6bd504137e57d9c5, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dma\x00', 0x20000, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) fallocate$auto(r1, 0x0, 0xfad, 0x8) 785.068334ms ago: executing program 3 (id=278): sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ae90f7c", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(r0, 0x0, 0xfffffdef) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 574.069993ms ago: executing program 0 (id=279): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0xd) r0 = pidfd_open$auto(0x1, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x286ec2, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0x80000eb2, 0x8, 0x1008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptys7\x00', 0x323202, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000018c0)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @pid}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0xc800) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mlock2$auto(0x1, 0x8001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2f212cbd7000fcdbdf2531"], 0x48}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x74}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x4008000) r6 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f00000000c0), 0x7) move_mount$auto(r0, 0x0, 0xffffffffffffffff, 0x0, 0x104) 533.607592ms ago: executing program 3 (id=280): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x40, 0x0, 0x5f) r3 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto_SO_RCVBUF(r3, 0x2, 0x8, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) clock_gettime$auto(0xfffffffffffffff0, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x48882, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/mice\x00', 0x72000, 0x0) bind$auto(r5, &(0x7f0000000200)=@in={0x2, 0x4e20, @empty}, 0x3d6f) close_range$auto(0x2, 0x8000, 0x0) r6 = socket(0x18, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_REUSEPORT(r3, 0x0, 0xf, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0)=0x2) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r6, 0xa, &(0x7f0000000100)="4384901a25ceaf3ce8acf3a0dd988ef42e07548d7f8780126a3beca80c98028725c7da1664c23fe80a162a2616c21859ef593ca0130a370821b9f61b810df0d7da4af1c19e72941046b15619ced86cf398a60a6bbcad8144fa2793e24747fa41a214ba7cb1d598d01acfca4bce8b71d08ece0e8061024a956691e0245c851220809efa24d65f7d0639e01f544a753f956c95bfce0e3161289bc00b1c049c2998808f2a340e", 0x40) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x200007, 0x19) 0s ago: executing program 2 (id=281): socket(0x18, 0x3, 0x2) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/arp_all_targets\x00', 0x140b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 73.650103][ T5811] cgroup: Unknown subsys name 'net' [ 73.764484][ T5811] cgroup: Unknown subsys name 'cpuset' [ 73.773580][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.185874][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.062381][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.066030][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.077366][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.089425][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.097266][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.106185][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.106870][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.120431][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.128983][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.138975][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.147577][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.149144][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.163232][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.170654][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.179510][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.188916][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.197054][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.205921][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.214744][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.223221][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.727062][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 77.757143][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 77.831058][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 77.915200][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.058082][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.065881][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.073174][ T5823] bridge_slave_0: entered allmulticast mode [ 78.080296][ T5823] bridge_slave_0: entered promiscuous mode [ 78.088757][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.095969][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.103176][ T5822] bridge_slave_0: entered allmulticast mode [ 78.110204][ T5822] bridge_slave_0: entered promiscuous mode [ 78.123085][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.130291][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.137782][ T5828] bridge_slave_0: entered allmulticast mode [ 78.145517][ T5828] bridge_slave_0: entered promiscuous mode [ 78.153330][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.160580][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.167964][ T5823] bridge_slave_1: entered allmulticast mode [ 78.175037][ T5823] bridge_slave_1: entered promiscuous mode [ 78.182833][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.189990][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.197295][ T5822] bridge_slave_1: entered allmulticast mode [ 78.204507][ T5822] bridge_slave_1: entered promiscuous mode [ 78.216852][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.224032][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.231245][ T5828] bridge_slave_1: entered allmulticast mode [ 78.238278][ T5828] bridge_slave_1: entered promiscuous mode [ 78.328841][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.340987][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.353874][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.366635][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.376750][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.384627][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.391938][ T5833] bridge_slave_0: entered allmulticast mode [ 78.398911][ T5833] bridge_slave_0: entered promiscuous mode [ 78.409470][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.430672][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.449540][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.456887][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.464177][ T5833] bridge_slave_1: entered allmulticast mode [ 78.471467][ T5833] bridge_slave_1: entered promiscuous mode [ 78.502603][ T5828] team0: Port device team_slave_0 added [ 78.555087][ T5828] team0: Port device team_slave_1 added [ 78.563591][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.574380][ T5822] team0: Port device team_slave_0 added [ 78.582522][ T5823] team0: Port device team_slave_0 added [ 78.590805][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.611263][ T5822] team0: Port device team_slave_1 added [ 78.628676][ T5823] team0: Port device team_slave_1 added [ 78.691240][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.698218][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.724391][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.749267][ T5833] team0: Port device team_slave_0 added [ 78.756097][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.763244][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.789501][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.802880][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.809828][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.836016][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.847646][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.854674][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.880685][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.893998][ T5833] team0: Port device team_slave_1 added [ 78.900218][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.907522][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.933823][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.945599][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.952795][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.980978][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.055929][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.063003][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.089008][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.102101][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.109156][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.136001][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.201824][ T5830] Bluetooth: hci1: command tx timeout [ 79.207559][ T5822] hsr_slave_0: entered promiscuous mode [ 79.214137][ T5822] hsr_slave_1: entered promiscuous mode [ 79.229462][ T5828] hsr_slave_0: entered promiscuous mode [ 79.235973][ T5828] hsr_slave_1: entered promiscuous mode [ 79.242524][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 79.248320][ T5828] Cannot create hsr debugfs directory [ 79.274286][ T5823] hsr_slave_0: entered promiscuous mode [ 79.281564][ T5831] Bluetooth: hci0: command tx timeout [ 79.281609][ T51] Bluetooth: hci3: command tx timeout [ 79.287313][ T5830] Bluetooth: hci2: command tx timeout [ 79.294062][ T5823] hsr_slave_1: entered promiscuous mode [ 79.304712][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 79.310457][ T5823] Cannot create hsr debugfs directory [ 79.387469][ T5833] hsr_slave_0: entered promiscuous mode [ 79.393823][ T5833] hsr_slave_1: entered promiscuous mode [ 79.399988][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 79.406040][ T5833] Cannot create hsr debugfs directory [ 79.841672][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.854676][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.865869][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.876561][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.952856][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.974403][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.997077][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.021129][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.085322][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.095856][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.108759][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.119208][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.236239][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.249742][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.260035][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.277341][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.289077][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.345553][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.375050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.382358][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.415315][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.422520][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.468649][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.537926][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.574429][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.581642][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.594833][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.602046][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.615904][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.712270][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.755482][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.762680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.782798][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.800550][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.807750][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.882189][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.903510][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.932807][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.940001][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.976185][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.983430][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.116642][ T5828] veth0_vlan: entered promiscuous mode [ 81.164045][ T5828] veth1_vlan: entered promiscuous mode [ 81.187060][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.282960][ T5830] Bluetooth: hci1: command tx timeout [ 81.303611][ T5828] veth0_macvtap: entered promiscuous mode [ 81.349736][ T5828] veth1_macvtap: entered promiscuous mode [ 81.361737][ T5830] Bluetooth: hci2: command tx timeout [ 81.362098][ T51] Bluetooth: hci0: command tx timeout [ 81.367171][ T5830] Bluetooth: hci3: command tx timeout [ 81.420451][ T5823] veth0_vlan: entered promiscuous mode [ 81.463238][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.476480][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.491727][ T5823] veth1_vlan: entered promiscuous mode [ 81.503854][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.527948][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.539637][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.562677][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.574171][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.597411][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.614520][ T5823] veth0_macvtap: entered promiscuous mode [ 81.640534][ T5823] veth1_macvtap: entered promiscuous mode [ 81.697296][ T5822] veth0_vlan: entered promiscuous mode [ 81.742047][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.747830][ T5822] veth1_vlan: entered promiscuous mode [ 81.757973][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.769136][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.783553][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.851543][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.887278][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.934137][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.935368][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.950945][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.956370][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.983938][ T5833] veth0_vlan: entered promiscuous mode [ 81.997960][ T5822] veth0_macvtap: entered promiscuous mode [ 82.045501][ T5822] veth1_macvtap: entered promiscuous mode [ 82.069836][ T5833] veth1_vlan: entered promiscuous mode [ 82.173021][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.183420][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.197781][ T5833] veth0_macvtap: entered promiscuous mode [ 82.243470][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.263576][ T5833] veth1_macvtap: entered promiscuous mode [ 82.273884][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.288228][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.343732][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.357074][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.384516][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.393941][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.407891][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.418449][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.430353][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.448977][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.490307][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.504529][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.534024][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.557771][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.627954][ T5916] smpboot: CPU 1 is now offline [ 82.782873][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.790724][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.028203][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.083413][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.105548][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.134748][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.163592][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.212810][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.361653][ T5830] Bluetooth: hci1: command tx timeout [ 83.447544][ T5831] Bluetooth: hci0: command tx timeout [ 83.453185][ T51] Bluetooth: hci3: command tx timeout [ 83.458656][ T5830] Bluetooth: hci2: command tx timeout [ 84.654083][ T5950] NFSD: Failed to start, no listeners configured. [ 85.186144][ T5960] nbd: socks must be embedded in a SOCK_ITEM attr [ 85.261896][ T5960] block nbd0: shutting down sockets [ 85.443463][ T5830] Bluetooth: hci1: command tx timeout [ 85.521378][ T5830] Bluetooth: hci2: command tx timeout [ 85.526848][ T5831] Bluetooth: hci0: command tx timeout [ 85.532333][ T51] Bluetooth: hci3: command tx timeout [ 85.642108][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 85.948075][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.521347][ T5991] Zero length message leads to an empty skb [ 86.624591][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 86.665944][ T5993] sp0: Synchronizing with TNC [ 86.775876][ T5996] netlink: 146 bytes leftover after parsing attributes in process `syz.1.18'. [ 86.892370][ T10] cfg80211: failed to load regulatory.db [ 87.104960][ T6000] netlink: 93 bytes leftover after parsing attributes in process `syz.0.19'. [ 87.621599][ T6002] Invalid ELF header magic: != ELF [ 87.801641][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 89.072000][ T6038] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.570818][ T6037] Invalid ELF header magic: != ELF [ 89.901454][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.275841][ T6079] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.468841][ T30] audit: type=1800 audit(1775532142.800:2): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.35" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 91.585957][ T6077] syz.0.37 (6077) used greatest stack depth: 19400 bytes left [ 92.838837][ T6106] futex_wake_op: syz.0.42 tries to shift op by -2048; fix this program [ 92.884913][ T6106] futex_wake_op: syz.0.42 tries to shift op by -2048; fix this program [ 93.032064][ T6106] futex_wake_op: syz.0.42 tries to shift op by -2048; fix this program [ 93.108119][ T6106] futex_wake_op: syz.0.42 tries to shift op by -2048; fix this program [ 93.437275][ T6114] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[6114] [ 93.803977][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.47'. [ 97.449599][ T6190] futex_wake_op: syz.2.57 tries to shift op by -2048; fix this program [ 97.675448][ T6190] futex_wake_op: syz.2.57 tries to shift op by -2048; fix this program [ 98.496503][ T6202] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.531244][ T6202] block nbd0: shutting down sockets [ 99.363411][ T6219] nbd: socks must be embedded in a SOCK_ITEM attr [ 99.389501][ T6219] block nbd0: shutting down sockets [ 101.463724][ T6242] process 'syz.0.67' launched './file0' with NULL argv: empty string added [ 102.382116][ T6245] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 102.797432][ T6251] sd 0:0:1:0: PR command failed: 1026 [ 102.856470][ T6251] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 102.978958][ T6251] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 104.955654][ T30] audit: type=1800 audit(1775532156.290:3): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.78" name="version" dev="configfs" ino=10808 res=0 errno=0 [ 105.232305][ T6310] nbd: socks must be embedded in a SOCK_ITEM attr [ 105.249859][ T6310] block nbd0: shutting down sockets [ 105.334742][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 105.724206][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 106.254365][ T6327] mmap: syz.3.83 (6327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.839016][ T6409] sd 0:0:1:0: PR command failed: 1026 [ 111.915565][ T6409] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 111.953488][ T6409] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 112.692935][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 112.836266][ T30] audit: type=1804 audit(1775532164.170:4): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.107" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=31 res=1 errno=0 [ 114.647458][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'. [ 114.863990][ T6455] hsr_slave_0: left promiscuous mode [ 114.900175][ T6455] hsr_slave_1: left promiscuous mode [ 115.264443][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 115.760315][ T6475] sd 0:0:1:0: PR command failed: 1026 [ 115.835104][ T6475] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 115.917031][ T6478] syz.2.117 uses obsolete (PF_INET,SOCK_PACKET) [ 115.931899][ T6475] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 117.287987][ T6508] bond0: invalid ARP target specified [ 117.334174][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 117.357835][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.399110][ T6509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.444419][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.469014][ T6509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.605966][ T6515] FAULT_INJECTION: forcing a failure. [ 117.605966][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 117.750804][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.3.127 Not tainted syzkaller #0 PREEMPT(full) [ 117.750825][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.750839][ T6515] Call Trace: [ 117.750844][ T6515] [ 117.750852][ T6515] dump_stack_lvl+0x100/0x190 [ 117.750883][ T6515] should_fail_ex.cold+0x5/0xa [ 117.750901][ T6515] ? tomoyo_realpath_from_path+0xb6/0x690 [ 117.750923][ T6515] should_failslab+0xc2/0x120 [ 117.750939][ T6515] __kmalloc_noprof+0xe0/0x850 [ 117.750967][ T6515] tomoyo_realpath_from_path+0xb6/0x690 [ 117.750992][ T6515] tomoyo_path_number_perm+0x23c/0x580 [ 117.751010][ T6515] ? tomoyo_path_number_perm+0x22e/0x580 [ 117.751029][ T6515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.751065][ T6515] ? find_held_lock+0x2b/0x80 [ 117.751079][ T6515] ? __fget_files+0x215/0x3d0 [ 117.751093][ T6515] ? hook_file_ioctl_common+0x146/0x410 [ 117.751116][ T6515] ? __fget_files+0x21f/0x3d0 [ 117.751133][ T6515] security_file_ioctl+0xd3/0x230 [ 117.751153][ T6515] __x64_sys_ioctl+0xb7/0x210 [ 117.751177][ T6515] do_syscall_64+0x106/0xf80 [ 117.751192][ T6515] ? clear_bhb_loop+0x40/0x90 [ 117.751211][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.751226][ T6515] RIP: 0033:0x7f397979c819 [ 117.751242][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.751256][ T6515] RSP: 002b:00007f397a6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.751272][ T6515] RAX: ffffffffffffffda RBX: 00007f3979a15fa0 RCX: 00007f397979c819 [ 117.751281][ T6515] RDX: 00002000000000c0 RSI: 00000000401070ca RDI: 0000000000000003 [ 117.751290][ T6515] RBP: 00007f397a6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 117.751298][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.751306][ T6515] R13: 00007f3979a16038 R14: 00007f3979a15fa0 R15: 00007fff21a1edb8 [ 117.751325][ T6515] [ 118.865420][ T6544] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 119.348724][ T6551] netlink: 'syz.2.138': attribute type 2 has an invalid length. [ 119.376949][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 119.417642][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 119.449549][ T6515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.500102][ T6534] ima: policy update failed [ 119.513169][ T30] audit: type=1802 audit(1775532170.850:5): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.134" res=0 errno=0 [ 119.912724][ T6572] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 121.030068][ T6588] input: jJÇž-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input5 [ 121.538121][ T6606] netlink: 'syz.3.152': attribute type 2 has an invalid length. [ 121.581069][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 122.282292][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 122.876686][ T6634] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 123.279849][ T6640] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 123.686821][ T6643] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 124.039131][ T6660] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 124.461666][ T6649] FAULT_INJECTION: forcing a failure. [ 124.461666][ T6649] name fail_futex, interval 1, probability 0, space 0, times 1 [ 124.504473][ T6649] CPU: 0 UID: 8 PID: 6649 Comm: syz.3.164 Tainted: G I syzkaller #0 PREEMPT(full) [ 124.504499][ T6649] Tainted: [I]=FIRMWARE_WORKAROUND [ 124.504504][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 124.504512][ T6649] Call Trace: [ 124.504517][ T6649] [ 124.504523][ T6649] dump_stack_lvl+0x100/0x190 [ 124.504562][ T6649] should_fail_ex.cold+0x5/0xa [ 124.504586][ T6649] get_futex_key+0x107c/0x1620 [ 124.504607][ T6649] ? __pfx_get_futex_key+0x10/0x10 [ 124.504624][ T6649] ? lock_acquire+0x1cf/0x380 [ 124.504650][ T6649] futex_wake+0xea/0x530 [ 124.504674][ T6649] ? __pfx_futex_wake+0x10/0x10 [ 124.504696][ T6649] ? exit_mm_release+0x19/0x30 [ 124.504720][ T6649] do_futex+0x32b/0x350 [ 124.504740][ T6649] ? __pfx_do_futex+0x10/0x10 [ 124.504757][ T6649] ? __might_fault+0xc5/0x140 [ 124.504784][ T6649] mm_release+0x24a/0x2f0 [ 124.504807][ T6649] do_exit+0x704/0x2b60 [ 124.504829][ T6649] ? __pfx_do_exit+0x10/0x10 [ 124.504848][ T6649] ? do_raw_spin_lock+0x128/0x260 [ 124.504870][ T6649] ? find_held_lock+0x2b/0x80 [ 124.504884][ T6649] ? get_signal+0x7e0/0x21e0 [ 124.504904][ T6649] do_group_exit+0xd5/0x2a0 [ 124.504925][ T6649] get_signal+0x1ec7/0x21e0 [ 124.504952][ T6649] ? __pfx_get_signal+0x10/0x10 [ 124.504969][ T6649] ? do_futex+0x192/0x350 [ 124.504990][ T6649] arch_do_signal_or_restart+0x91/0x770 [ 124.505009][ T6649] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 124.505033][ T6649] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 124.505056][ T6649] ? __pfx___x64_sys_futex+0x10/0x10 [ 124.505080][ T6649] exit_to_user_mode_loop+0x86/0x4a0 [ 124.505102][ T6649] do_syscall_64+0x668/0xf80 [ 124.505117][ T6649] ? clear_bhb_loop+0x40/0x90 [ 124.505136][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.505150][ T6649] RIP: 0033:0x7f397979c819 [ 124.505167][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.505180][ T6649] RSP: 002b:00007f397a6900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.505195][ T6649] RAX: fffffffffffffe00 RBX: 00007f3979a16098 RCX: 00007f397979c819 [ 124.505204][ T6649] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3979a16098 [ 124.505212][ T6649] RBP: 00007f3979a16090 R08: 0000000000000000 R09: 0000000000000000 [ 124.505221][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.505228][ T6649] R13: 00007f3979a16128 R14: 00007fff21a1ecd0 R15: 00007fff21a1edb8 [ 124.505247][ T6649] [ 124.988381][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 125.151802][ T6652] ima: policy update failed [ 125.165143][ T30] audit: type=1802 audit(1775532176.500:6): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.166" res=0 errno=0 [ 125.470809][ T6684] CIFS: VFS: Invalid SecurityFlags: 0x1 [ 125.470809][ T6684]  [ 126.069713][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 127.137628][ T6724] netlink: NAT attribute has 4 unknown bytes [ 127.201945][ T6724] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 127.704593][ T6734] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 130.301348][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 130.838447][ T6795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 132.362170][ T6832] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.651230][ T6838] binder: 6836:6838 ioctl 400c620e 0 returned -22 [ 132.813635][ T6840] netlink: 'syz.2.213': attribute type 2 has an invalid length. [ 132.831827][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 132.981023][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989368][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.249510][ T6851] FAULT_INJECTION: forcing a failure. [ 133.249510][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 133.721892][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.0.215 Tainted: G I syzkaller #0 PREEMPT(full) [ 133.721919][ T6851] Tainted: [I]=FIRMWARE_WORKAROUND [ 133.721924][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 133.721934][ T6851] Call Trace: [ 133.721940][ T6851] [ 133.721945][ T6851] dump_stack_lvl+0x100/0x190 [ 133.721977][ T6851] should_fail_ex.cold+0x5/0xa [ 133.721995][ T6851] ? tomoyo_encode2+0xfb/0x3c0 [ 133.722015][ T6851] should_failslab+0xc2/0x120 [ 133.722033][ T6851] __kmalloc_noprof+0xe0/0x850 [ 133.722055][ T6851] ? d_absolute_path+0x136/0x1b0 [ 133.722079][ T6851] tomoyo_encode2+0xfb/0x3c0 [ 133.722102][ T6851] tomoyo_encode+0x29/0x50 [ 133.722122][ T6851] tomoyo_realpath_from_path+0x18c/0x690 [ 133.722147][ T6851] tomoyo_path_number_perm+0x23c/0x580 [ 133.722165][ T6851] ? tomoyo_path_number_perm+0x22e/0x580 [ 133.722184][ T6851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.722220][ T6851] ? find_held_lock+0x2b/0x80 [ 133.722234][ T6851] ? __fget_files+0x215/0x3d0 [ 133.722248][ T6851] ? hook_file_ioctl_common+0x146/0x410 [ 133.722271][ T6851] ? __fget_files+0x21f/0x3d0 [ 133.722288][ T6851] security_file_ioctl+0xd3/0x230 [ 133.722308][ T6851] __x64_sys_ioctl+0xb7/0x210 [ 133.722332][ T6851] do_syscall_64+0x106/0xf80 [ 133.722347][ T6851] ? clear_bhb_loop+0x40/0x90 [ 133.722365][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.722380][ T6851] RIP: 0033:0x7fea5479c819 [ 133.722393][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.722406][ T6851] RSP: 002b:00007fea5570d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.722421][ T6851] RAX: ffffffffffffffda RBX: 00007fea54a15fa0 RCX: 00007fea5479c819 [ 133.722430][ T6851] RDX: 0000000000000003 RSI: 0000000080204518 RDI: 0000000000000003 [ 133.722438][ T6851] RBP: 00007fea5570d090 R08: 0000000000000000 R09: 0000000000000000 [ 133.722446][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.722454][ T6851] R13: 00007fea54a16038 R14: 00007fea54a15fa0 R15: 00007fff74ccb938 [ 133.722473][ T6851] [ 133.722489][ T6851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.016132][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 134.403680][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 135.297151][ T6881] zswap: compressor  not available [ 135.701266][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.230'. [ 135.841398][ T6905] FAULT_INJECTION: forcing a failure. [ 135.841398][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 135.864102][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.2.232 Tainted: G I syzkaller #0 PREEMPT(full) [ 135.864149][ T6905] Tainted: [I]=FIRMWARE_WORKAROUND [ 135.864159][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.864175][ T6905] Call Trace: [ 135.864183][ T6905] [ 135.864193][ T6905] dump_stack_lvl+0x100/0x190 [ 135.864242][ T6905] should_fail_ex.cold+0x5/0xa [ 135.864280][ T6905] should_failslab+0xc2/0x120 [ 135.864313][ T6905] __kmalloc_cache_noprof+0x7a/0x6f0 [ 135.864350][ T6905] ? copy_net_ns+0x135/0x7c0 [ 135.864390][ T6905] copy_net_ns+0x135/0x7c0 [ 135.864417][ T6905] ? copy_cgroup_ns+0x71/0x970 [ 135.864450][ T6905] create_new_namespaces+0x3ea/0xac0 [ 135.864490][ T6905] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 135.864525][ T6905] ksys_unshare+0x473/0xad0 [ 135.864562][ T6905] ? __pfx_ksys_unshare+0x10/0x10 [ 135.864610][ T6905] __x64_sys_unshare+0x31/0x40 [ 135.864646][ T6905] do_syscall_64+0x106/0xf80 [ 135.864674][ T6905] ? clear_bhb_loop+0x40/0x90 [ 135.864720][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.864749][ T6905] RIP: 0033:0x7f759a59c819 [ 135.864770][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.864794][ T6905] RSP: 002b:00007f759b507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.864818][ T6905] RAX: ffffffffffffffda RBX: 00007f759a815fa0 RCX: 00007f759a59c819 [ 135.864836][ T6905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 135.864850][ T6905] RBP: 00007f759a632c91 R08: 0000000000000000 R09: 0000000000000000 [ 135.864867][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.864883][ T6905] R13: 00007f759a816038 R14: 00007f759a815fa0 R15: 00007ffed994d138 [ 135.864920][ T6905] [ 135.948927][ T6909] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 136.441799][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 137.473873][ T6937] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 138.808723][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'. [ 139.546547][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.247'. [ 140.063294][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 141.660651][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 142.442168][ T7047] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 143.057661][ T7052] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 143.708867][ T7063] netlink: 330 bytes leftover after parsing attributes in process `syz.3.263'. [ 143.789146][ T7063] –õ\­: renamed from lo (while UP) [ 144.389355][ T7075] futex_wake_op: syz.1.267 tries to shift op by -2048; fix this program [ 144.415949][ T7075] 0xffffffff00000001-0xffffffff00010000 : "" [ 144.423329][ T7075] mtd: partition "" is out of reach -- disabled [ 144.465670][ T7075] ftl_cs: FTL header not found. [ 145.021381][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 146.611496][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 147.510316][ T7136] netlink: 350 bytes leftover after parsing attributes in process `syz.3.278'. [ 147.898209][ T7142] futex_wake_op: syz.3.280 tries to shift op by -2048; fix this program [ 147.971095][ T7142] 0x000000000001-0x00000e744ee8 : "" [ 148.017702][ T7142] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 148.099496][ T7145] netlink: 52 bytes leftover after parsing attributes in process `syz.0.279'. [ 148.195820][ T7151] ptrace attach of "./syz-executor exec"[5822] was attempted by ""[7151] [ 148.219109][ T7142] FAULT_INJECTION: forcing a failure. [ 148.219109][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 148.274035][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.3.280 Tainted: G I syzkaller #0 PREEMPT(full) [ 148.274090][ T7142] Tainted: [I]=FIRMWARE_WORKAROUND [ 148.274100][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.274116][ T7142] Call Trace: [ 148.274124][ T7142] [ 148.274134][ T7142] dump_stack_lvl+0x100/0x190 [ 148.274183][ T7142] should_fail_ex.cold+0x5/0xa [ 148.274217][ T7142] should_failslab+0xc2/0x120 [ 148.274248][ T7142] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 148.274290][ T7142] ? __kernfs_new_node+0xd2/0x960 [ 148.274339][ T7142] __kernfs_new_node+0xd2/0x960 [ 148.274386][ T7142] ? __pfx___kernfs_new_node+0x10/0x10 [ 148.274438][ T7142] ? find_held_lock+0x2b/0x80 [ 148.274466][ T7142] ? kernfs_root+0xee/0x2a0 [ 148.274505][ T7142] ? kernfs_root+0xee/0x2a0 [ 148.274551][ T7142] kernfs_new_node+0x11b/0x1a0 [ 148.274580][ T7142] __kernfs_create_file+0x53/0x350 [ 148.274616][ T7142] sysfs_add_file_mode_ns+0x207/0x3c0 [ 148.274662][ T7142] internal_create_group+0x593/0xf40 [ 148.274711][ T7142] ? __pfx_internal_create_group+0x10/0x10 [ 148.274759][ T7142] ? kernfs_create_link+0x1bd/0x240 [ 148.274805][ T7142] internal_create_groups+0x9d/0x150 [ 148.274854][ T7142] device_add+0x77a/0x1950 [ 148.274895][ T7142] ? lockdep_init_map_type+0x5c/0x250 [ 148.274933][ T7142] ? __pfx_device_add+0x10/0x10 [ 148.274969][ T7142] ? lockdep_init_map_type+0x5c/0x250 [ 148.275008][ T7142] ? __init_waitqueue_head+0xca/0x150 [ 148.275067][ T7142] add_mtd_device+0x928/0x17a0 [ 148.275107][ T7142] ? __pfx_add_mtd_device+0x10/0x10 [ 148.275147][ T7142] mtd_add_partition+0x30a/0x660 [ 148.275183][ T7142] ? __pfx_mtd_add_partition+0x10/0x10 [ 148.275215][ T7142] ? __might_fault+0xc5/0x140 [ 148.275255][ T7142] ? __might_fault+0xc5/0x140 [ 148.275310][ T7142] mtdchar_blkpg_ioctl+0x207/0x250 [ 148.275345][ T7142] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 148.275412][ T7142] mtdchar_ioctl+0x1670/0x1fd0 [ 148.275453][ T7142] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 148.275488][ T7142] ? lock_acquire+0x1cf/0x380 [ 148.275534][ T7142] ? trace_contention_end+0x140/0x180 [ 148.275580][ T7142] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 148.275616][ T7142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.275661][ T7142] ? __pfx___mutex_lock+0x10/0x10 [ 148.275698][ T7142] ? find_held_lock+0x2b/0x80 [ 148.275740][ T7142] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 148.275774][ T7142] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 148.275812][ T7142] __x64_sys_ioctl+0x18e/0x210 [ 148.275857][ T7142] do_syscall_64+0x106/0xf80 [ 148.275885][ T7142] ? clear_bhb_loop+0x40/0x90 [ 148.275920][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.275946][ T7142] RIP: 0033:0x7f397979c819 [ 148.275967][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.275992][ T7142] RSP: 002b:00007f397a6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.276016][ T7142] RAX: ffffffffffffffda RBX: 00007f3979a15fa0 RCX: 00007f397979c819 [ 148.276032][ T7142] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000007 [ 148.276046][ T7142] RBP: 00007f3979832c91 R08: 0000000000000000 R09: 0000000000000000 [ 148.276070][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.276085][ T7142] R13: 00007f3979a16038 R14: 00007f3979a15fa0 R15: 00007fff21a1edb8 [ 148.276119][ T7142] [ 148.278280][ T7142] ------------[ cut here ]------------ [ 148.613814][ T7142] !list_empty(&mtd->part.node) [ 148.613825][ T7142] WARNING: drivers/mtd/mtdpart.c:37 at release_mtd_partition+0x71/0x90, CPU#1: syz.3.280/7142 [ 148.628850][ T7142] Modules linked in: [ 148.632909][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.3.280 Tainted: G I syzkaller #0 PREEMPT(full) [ 148.643716][ T7142] Tainted: [I]=FIRMWARE_WORKAROUND [ 148.648821][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.658906][ T7142] RIP: 0010:release_mtd_partition+0x71/0x90 [ 148.664847][ T7142] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 7f f8 db fb 48 89 df 5b 5d e9 75 f8 db fb e8 70 71 7c fb 90 <0f> 0b 90 eb c2 e8 a5 09 e8 fb eb db 48 89 ef e8 9b 09 e8 fb eb a5 [ 148.684513][ T7142] RSP: 0018:ffffc90007bf7818 EFLAGS: 00010287 [ 148.690576][ T7142] RAX: 000000000002dcb2 RBX: ffff88805e771000 RCX: ffffc900062c1000 [ 148.698587][ T7142] RDX: 0000000000080000 RSI: ffffffff868bd1d0 RDI: ffff88805e771000 [ 148.706644][ T7142] RBP: ffff88805e771698 R08: 0000000000000001 R09: 0000000000000001 [ 148.714644][ T7142] R10: 0000000000000002 R11: ffffffff81000130 R12: 0000000000000000 [ 148.722634][ T7142] R13: dffffc0000000000 R14: ffff88807b758220 R15: 0000000000000000 [ 148.730685][ T7142] FS: 00007f397a6b16c0(0000) GS:ffff888124440000(0000) knlGS:0000000000000000 [ 148.739676][ T7142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.746372][ T7142] CR2: 00007f4069617cb2 CR3: 000000007aa98000 CR4: 00000000003526f0 [ 148.754387][ T7142] Call Trace: [ 148.757684][ T7142] [ 148.760626][ T7142] mtd_release+0xa0/0xd0 [ 148.764901][ T7142] ? __pfx_mtd_release+0x10/0x10 [ 148.769843][ T7142] device_release+0xd2/0x270 [ 148.774491][ T7142] kobject_put+0x1f7/0x640 [ 148.778905][ T7142] put_device+0x1f/0x30 [ 148.783139][ T7142] add_mtd_device+0xbd7/0x17a0 [ 148.787898][ T7142] ? __pfx_add_mtd_device+0x10/0x10 [ 148.793128][ T7142] mtd_add_partition+0x30a/0x660 [ 148.798078][ T7142] ? __pfx_mtd_add_partition+0x10/0x10 [ 148.803617][ T7142] ? __might_fault+0xc5/0x140 [ 148.808316][ T7142] ? __might_fault+0xc5/0x140 [ 148.813036][ T7142] mtdchar_blkpg_ioctl+0x207/0x250 [ 148.818146][ T7142] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 148.823821][ T7142] mtdchar_ioctl+0x1670/0x1fd0 [ 148.828585][ T7142] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 148.833732][ T7142] ? lock_acquire+0x1cf/0x380 [ 148.838409][ T7142] ? trace_contention_end+0x140/0x180 [ 148.843821][ T7142] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 148.849197][ T7142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.854245][ T7142] ? __pfx___mutex_lock+0x10/0x10 [ 148.859264][ T7142] ? find_held_lock+0x2b/0x80 [ 148.863986][ T7142] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 148.869526][ T7142] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 148.875440][ T7142] __x64_sys_ioctl+0x18e/0x210 [ 148.880202][ T7142] do_syscall_64+0x106/0xf80 [ 148.884812][ T7142] ? clear_bhb_loop+0x40/0x90 [ 148.889491][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.895409][ T7142] RIP: 0033:0x7f397979c819 [ 148.899825][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.919492][ T7142] RSP: 002b:00007f397a6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.927939][ T7142] RAX: ffffffffffffffda RBX: 00007f3979a15fa0 RCX: 00007f397979c819 [ 148.935925][ T7142] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000007 [ 148.943904][ T7142] RBP: 00007f3979832c91 R08: 0000000000000000 R09: 0000000000000000 [ 148.951910][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.959869][ T7142] R13: 00007f3979a16038 R14: 00007f3979a15fa0 R15: 00007fff21a1edb8 [ 148.967956][ T7142] [ 148.971014][ T7142] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.978305][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.3.280 Tainted: G I syzkaller #0 PREEMPT(full) [ 148.989078][ T7142] Tainted: [I]=FIRMWARE_WORKAROUND [ 148.994187][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.004229][ T7142] Call Trace: [ 149.007523][ T7142] [ 149.010458][ T7142] dump_stack_lvl+0x100/0x190 [ 149.015137][ T7142] vpanic+0x552/0x970 [ 149.019186][ T7142] ? __pfx_vpanic+0x10/0x10 [ 149.023700][ T7142] panic+0xd1/0xe0 [ 149.027444][ T7142] ? __pfx_panic+0x10/0x10 [ 149.031858][ T7142] check_panic_on_warn.cold+0x19/0x34 [ 149.037235][ T7142] ? release_mtd_partition+0x71/0x90 [ 149.042512][ T7142] __warn.cold+0x191/0x348 [ 149.046920][ T7142] __report_bug+0x296/0x3d0 [ 149.051437][ T7142] ? release_mtd_partition+0x71/0x90 [ 149.056718][ T7142] ? __pfx___report_bug+0x10/0x10 [ 149.061753][ T7142] ? delete_node+0x20a/0x8f0 [ 149.066338][ T7142] ? release_mtd_partition+0x71/0x90 [ 149.071610][ T7142] report_bug+0xb2/0x220 [ 149.075840][ T7142] ? release_mtd_partition+0x71/0x90 [ 149.081122][ T7142] handle_bug+0x16a/0x2a0 [ 149.085453][ T7142] exc_invalid_op+0x17/0x50 [ 149.089945][ T7142] asm_exc_invalid_op+0x1a/0x20 [ 149.094783][ T7142] RIP: 0010:release_mtd_partition+0x71/0x90 [ 149.100672][ T7142] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 7f f8 db fb 48 89 df 5b 5d e9 75 f8 db fb e8 70 71 7c fb 90 <0f> 0b 90 eb c2 e8 a5 09 e8 fb eb db 48 89 ef e8 9b 09 e8 fb eb a5 [ 149.120274][ T7142] RSP: 0018:ffffc90007bf7818 EFLAGS: 00010287 [ 149.126338][ T7142] RAX: 000000000002dcb2 RBX: ffff88805e771000 RCX: ffffc900062c1000 [ 149.134299][ T7142] RDX: 0000000000080000 RSI: ffffffff868bd1d0 RDI: ffff88805e771000 [ 149.142266][ T7142] RBP: ffff88805e771698 R08: 0000000000000001 R09: 0000000000000001 [ 149.150239][ T7142] R10: 0000000000000002 R11: ffffffff81000130 R12: 0000000000000000 [ 149.158223][ T7142] R13: dffffc0000000000 R14: ffff88807b758220 R15: 0000000000000000 [ 149.166206][ T7142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.172280][ T7142] ? release_mtd_partition+0x70/0x90 [ 149.177562][ T7142] ? release_mtd_partition+0x70/0x90 [ 149.182836][ T7142] mtd_release+0xa0/0xd0 [ 149.187071][ T7142] ? __pfx_mtd_release+0x10/0x10 [ 149.191998][ T7142] device_release+0xd2/0x270 [ 149.196583][ T7142] kobject_put+0x1f7/0x640 [ 149.200992][ T7142] put_device+0x1f/0x30 [ 149.205142][ T7142] add_mtd_device+0xbd7/0x17a0 [ 149.209902][ T7142] ? __pfx_add_mtd_device+0x10/0x10 [ 149.215123][ T7142] mtd_add_partition+0x30a/0x660 [ 149.220052][ T7142] ? __pfx_mtd_add_partition+0x10/0x10 [ 149.225497][ T7142] ? __might_fault+0xc5/0x140 [ 149.230171][ T7142] ? __might_fault+0xc5/0x140 [ 149.234849][ T7142] mtdchar_blkpg_ioctl+0x207/0x250 [ 149.239964][ T7142] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 149.245600][ T7142] mtdchar_ioctl+0x1670/0x1fd0 [ 149.250383][ T7142] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 149.255491][ T7142] ? lock_acquire+0x1cf/0x380 [ 149.260185][ T7142] ? trace_contention_end+0x140/0x180 [ 149.265552][ T7142] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 149.270925][ T7142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 149.275946][ T7142] ? __pfx___mutex_lock+0x10/0x10 [ 149.280967][ T7142] ? find_held_lock+0x2b/0x80 [ 149.285664][ T7142] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 149.290851][ T7142] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 149.296748][ T7142] __x64_sys_ioctl+0x18e/0x210 [ 149.301512][ T7142] do_syscall_64+0x106/0xf80 [ 149.306091][ T7142] ? clear_bhb_loop+0x40/0x90 [ 149.310765][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.316654][ T7142] RIP: 0033:0x7f397979c819 [ 149.321061][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.340666][ T7142] RSP: 002b:00007f397a6b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.349070][ T7142] RAX: ffffffffffffffda RBX: 00007f3979a15fa0 RCX: 00007f397979c819 [ 149.357031][ T7142] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000007 [ 149.365007][ T7142] RBP: 00007f3979832c91 R08: 0000000000000000 R09: 0000000000000000 [ 149.372963][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.380924][ T7142] R13: 00007f3979a16038 R14: 00007f3979a15fa0 R15: 00007fff21a1edb8 [ 149.388907][ T7142] [ 149.392264][ T7142] Kernel Offset: disabled [ 149.396600][ T7142] Rebooting in 86400 seconds..