last executing test programs: 7.112710075s ago: executing program 3 (id=227): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x400080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/184, 0xb8) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f) 6.077934252s ago: executing program 3 (id=230): mmap$auto(0xc, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {0x1, 0x0, 0xff0f}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x0, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 5.612126371s ago: executing program 2 (id=234): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x400080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/184, 0xb8) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f) 5.243744048s ago: executing program 2 (id=235): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r0, r0, 0x0, 0x3fffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) ioprio_set$auto(0x81b, 0xff, 0xffffffff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001880)=""/4101, 0x1005) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)=0x1ff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000002c80)="3f0be77a4f8954f9ec") madvise$auto(0x0, 0x400053, 0x9) 4.696849212s ago: executing program 1 (id=239): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x400080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/184, 0xb8) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f) 4.604850938s ago: executing program 2 (id=240): mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x4, 0x9, 0x4000000000e3, 0x40000000000ebf, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) bind$auto(r1, &(0x7f0000000040)=@isdn={0x22, 0xc5, 0x9, 0xe}, 0x20007) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x84) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x100) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0x11, 0x0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$auto(0x1fd, 0x6, 0xfdc, 0x1e, r2, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) pread64$auto(r5, 0x0, 0x54e3, 0x80000001) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) unshare$auto(0xa4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 4.428690029s ago: executing program 0 (id=242): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) 4.344479385s ago: executing program 3 (id=243): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r0, r0, 0x0, 0x3fffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001880)=""/4101, 0x1005) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)=0x1ff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000002c80)="3f0be77a4f8954f9ec") 4.195142378s ago: executing program 0 (id=244): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r0, 0x40045564, &(0x7f0000000440)=0x1) 4.002431177s ago: executing program 0 (id=245): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4bd029f0845c6b5196ced8ef9b1a53b4011ed14a904f19072629f7cc6ed922acba72edc667e917861d1e7dc8a72ee61bc9c") r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = mq_open$auto(&(0x7f0000000200)='\\\x00\xa9A\x00', 0x83, 0x7, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x380000}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000100)={{0x171a4c29, 0x0, 0xee01, 0x401, 0x9, 0xb, 0x2}, 0x8, 0x100, 0x1a56, 0x1, @inferred, @raw=0x8000, 0xe7d, 0x0, &(0x7f0000000000), &(0x7f0000000040)="1783a8"}) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={0x78, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x50, 0x7, 0x0, 0x1, [@nested={0x2c, 0x7e, 0x0, 0x1, [@typed={0x22, 0xbd, 0x0, 0x0, @binary="a7379b928b2fe53f4a96cc49fa078eb62dca03ca1694ea60fe7c14e53bd8"}, @nested={0x4, 0x9a}]}, @nested={0x20, 0x3b, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xf4, 0x0, 0x0, @str='+&+\x00'}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '{]-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0xc0, 0x7, 0x0, 0x1, [@typed={0xbc, 0x15, 0x0, 0x0, @binary="302137a9e1d1f6f465e7b5ea737a141e7d0dffa0ae07279f954c91fed78bf096aec08879b327de084dd01d906c867b790b16d1f55733fd277fa4e762428b7bcf5c031942400d1df0218ab1e61fa8e20320b5f511028f08d9ef3ccbc7005b58d818724409ee013adfd6253eb309d933da1588412e91def926938dfef2b341582487ba2a326dd81877faf5f0e3cdd55cc03aacc012e5e83098c9afba210ccb1ed5223d1562e0033486f411b783a1e20ce3d768a4c9d162e0bd"}]}]}, 0xf4}}, 0x14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/0:0:0:0\x00', 0x121641, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000280)="5fff575a2747b07cd670b8e58610c96d64ba76b6a60cc9bb1796ae711afdd441fab265037d00077ea24bbfc6e776cca12c7aa02bb1ff33618736aa4b3bb525987d076bbb472da95efc") mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, r1, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x9, 0x2, 0x4f4, 0x5}, 0x10) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r6, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) lsm_set_self_attr$auto(0x988, 0x0, 0xe7eb, 0x0) unshare$auto(0x40000080) 3.790013473s ago: executing program 3 (id=246): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) r1 = socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x400080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/184, 0xb8) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f) 3.783499306s ago: executing program 1 (id=247): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 2.704281755s ago: executing program 2 (id=248): openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/io\x00', 0x20880, 0x0) close_range$auto(0x2, 0x8, 0x0) lsm_get_self_attr$auto(0x64, &(0x7f0000001400)={0x10, 0x1, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1fb, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r1, 0x1) close_range$auto(0x2, r0, 0x0) time$auto(&(0x7f0000000000)=0x101) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) clone$auto(0xff, 0x8ae, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x2, 0x1b5) socket(0x2b, 0x801, 0x100) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) umount2$auto(&(0x7f0000000240)='ovs_ct_limit\x00', 0x0) 2.699830207s ago: executing program 0 (id=256): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x2012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) ioctl$auto_IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r1, 0x0, 0x40000000f42c, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='\x00\x00i\xffw', 0x4, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000180)={0x7f, 0x1, 0x1, 0x2, 0xffffffff}) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) setreuid$auto(0xffffffffffffffff, 0x8) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x37, 0x0, 0x110) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) connect$auto(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x25, "835aabaf5dc454e38226799f73aa"}, 0x3d) shutdown$auto(0x200000003, 0x2) bpf$auto(0x0, 0x0, 0x6f4) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) 2.699194932s ago: executing program 1 (id=249): close_range$auto(0x2, 0x8, 0x0) 2.467572495s ago: executing program 1 (id=250): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioprio_set$auto(0x81b, 0xff, 0xffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001880)=""/4101, 0x1005) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)=0x1ff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000002c80)="3f0be77a4f8954f9ec") madvise$auto(0x0, 0x400053, 0x9) 2.365143821s ago: executing program 3 (id=251): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030026bd0ecd72913be4837b00000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80202, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) fchown$auto(0xffffffffffffffff, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b70, r6, 0x4) setresgid$auto(0x81, 0x800000a0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000040)={0xc00000}, 0x0, &(0x7f0000000180), 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x0, 0x8, 0x8000) shmget$auto(0x8, 0x10563, 0x568d1af2) 1.874456914s ago: executing program 1 (id=252): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) 1.57260438s ago: executing program 1 (id=253): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) ioctl$auto_TIOCMGET2(r1, 0x5415, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nf_ft_offload_add/power/runtime_active_time\x00', 0x20042, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x66ab80, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r3, 0x40045564, &(0x7f0000000440)=0x1) unshare$auto(0x40000080) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x2, 0x0, 0xc) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) 1.005395803s ago: executing program 3 (id=254): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r0, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) 1.004566984s ago: executing program 0 (id=263): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x400080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000080)=""/184, 0xb8) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000180)=""/159, 0x9f) 943.236447ms ago: executing program 2 (id=255): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mlock$auto(0xfbe8, 0x4) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r0, r0, 0x0, 0x3fffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001880)=""/4101, 0x1005) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)=0x1ff) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, 0x0, 0x5, 0x20000000) ioctl$auto(0x3, 0x80000541b, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000002c80)="3f0be77a4f8954f9ec") 20.673295ms ago: executing program 0 (id=257): mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x4, 0x9, 0x4000000000e3, 0x40000000000ebf, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x0) bind$auto(r1, &(0x7f0000000040)=@isdn={0x22, 0xc5, 0x9, 0xe}, 0x20007) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x84) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x100) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0x11, 0x0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mmap$auto(0x1fd, 0x6, 0xfdc, 0x1e, r2, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) pread64$auto(r5, 0x0, 0x54e3, 0x80000001) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) unshare$auto(0xa4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 0s ago: executing program 2 (id=258): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x28, 0x3, 0xbfffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x81) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) splice$auto(0xffffffffffffffff, &(0x7f0000000200)=0x2, 0xffffffffffffffff, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc014}, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000e00)="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", 0xcb6) socket(0x8, 0x2, 0x1) mmap$auto(0x4, 0x7fffffff, 0x9, 0x56, r2, 0x1) mmap$auto(0x4000, 0x4000c, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 90.985491][ T5854] cgroup: Unknown subsys name 'net' [ 91.134453][ T5854] cgroup: Unknown subsys name 'cpuset' [ 91.143959][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.141497][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.477853][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.489300][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.490947][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.497743][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.504370][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.513043][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.518757][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.525911][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.533120][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.540502][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.548828][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.561438][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.572142][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.583405][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.599527][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.615212][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.617760][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.633042][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.651023][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.659207][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.314790][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 96.359313][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 96.406174][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 96.511479][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 96.616209][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.625944][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.634363][ T5865] bridge_slave_0: entered allmulticast mode [ 96.641767][ T5865] bridge_slave_0: entered promiscuous mode [ 96.695384][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.702792][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.710028][ T5865] bridge_slave_1: entered allmulticast mode [ 96.718569][ T5865] bridge_slave_1: entered promiscuous mode [ 96.726378][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.735362][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.742658][ T5863] bridge_slave_0: entered allmulticast mode [ 96.751054][ T5863] bridge_slave_0: entered promiscuous mode [ 96.795888][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.803168][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.811805][ T5863] bridge_slave_1: entered allmulticast mode [ 96.819067][ T5863] bridge_slave_1: entered promiscuous mode [ 96.832946][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.840127][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.848008][ T5866] bridge_slave_0: entered allmulticast mode [ 96.855331][ T5866] bridge_slave_0: entered promiscuous mode [ 96.906868][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.914439][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.922706][ T5866] bridge_slave_1: entered allmulticast mode [ 96.930015][ T5866] bridge_slave_1: entered promiscuous mode [ 96.940255][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.992055][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.005971][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.016112][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.023625][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.031004][ T5864] bridge_slave_0: entered allmulticast mode [ 97.038161][ T5864] bridge_slave_0: entered promiscuous mode [ 97.075102][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.100282][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.107660][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.116456][ T5864] bridge_slave_1: entered allmulticast mode [ 97.124440][ T5864] bridge_slave_1: entered promiscuous mode [ 97.150262][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.204358][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.217158][ T5865] team0: Port device team_slave_0 added [ 97.225918][ T5865] team0: Port device team_slave_1 added [ 97.234464][ T5863] team0: Port device team_slave_0 added [ 97.243573][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.280321][ T5863] team0: Port device team_slave_1 added [ 97.301938][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.354360][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.362110][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.388228][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.415877][ T5866] team0: Port device team_slave_0 added [ 97.424073][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.432432][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.453403][ T1229] cfg80211: failed to load regulatory.db [ 97.462548][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.476323][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.484181][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.514797][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.545016][ T5864] team0: Port device team_slave_0 added [ 97.552772][ T5866] team0: Port device team_slave_1 added [ 97.589185][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.596746][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.596883][ T5879] Bluetooth: hci1: command tx timeout [ 97.626627][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.649721][ T5864] team0: Port device team_slave_1 added [ 97.659251][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.666748][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.671054][ T5879] Bluetooth: hci0: command tx timeout [ 97.693223][ T5878] Bluetooth: hci2: command tx timeout [ 97.702603][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.738369][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.746386][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.773205][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.784806][ T5878] Bluetooth: hci3: command tx timeout [ 97.859819][ T5865] hsr_slave_0: entered promiscuous mode [ 97.867198][ T5865] hsr_slave_1: entered promiscuous mode [ 97.875519][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.882570][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.909252][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.922746][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.929825][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.959657][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.051944][ T5863] hsr_slave_0: entered promiscuous mode [ 98.058379][ T5863] hsr_slave_1: entered promiscuous mode [ 98.066280][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 98.072473][ T5863] Cannot create hsr debugfs directory [ 98.095668][ T5866] hsr_slave_0: entered promiscuous mode [ 98.103196][ T5866] hsr_slave_1: entered promiscuous mode [ 98.109379][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 98.115349][ T5866] Cannot create hsr debugfs directory [ 98.256516][ T5864] hsr_slave_0: entered promiscuous mode [ 98.263427][ T5864] hsr_slave_1: entered promiscuous mode [ 98.269587][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 98.275961][ T5864] Cannot create hsr debugfs directory [ 98.680020][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.713103][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.727200][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.756303][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.824955][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.850108][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.864087][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.895031][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.978402][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.008376][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.037756][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.052991][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.152164][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.172830][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.194007][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.218270][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.292099][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.378394][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.393100][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.416952][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.433920][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.441367][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.479086][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.509117][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.526843][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.534253][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.547321][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.554480][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.584147][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.591463][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.628583][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.636487][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.649712][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.656976][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.671494][ T5878] Bluetooth: hci1: command tx timeout [ 99.704494][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.752308][ T5878] Bluetooth: hci2: command tx timeout [ 99.765043][ T5878] Bluetooth: hci0: command tx timeout [ 99.807007][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.831080][ T5878] Bluetooth: hci3: command tx timeout [ 99.836103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.844018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.901665][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.908948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.119301][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.478247][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.575425][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.612457][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.729239][ T5865] veth0_vlan: entered promiscuous mode [ 100.736176][ T5863] veth0_vlan: entered promiscuous mode [ 100.749869][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.794367][ T5865] veth1_vlan: entered promiscuous mode [ 100.806667][ T5866] veth0_vlan: entered promiscuous mode [ 100.814109][ T5863] veth1_vlan: entered promiscuous mode [ 100.842108][ T5866] veth1_vlan: entered promiscuous mode [ 100.899474][ T5865] veth0_macvtap: entered promiscuous mode [ 100.927613][ T5865] veth1_macvtap: entered promiscuous mode [ 100.961532][ T5864] veth0_vlan: entered promiscuous mode [ 100.989799][ T5863] veth0_macvtap: entered promiscuous mode [ 101.010202][ T5864] veth1_vlan: entered promiscuous mode [ 101.028507][ T5863] veth1_macvtap: entered promiscuous mode [ 101.041584][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.065302][ T5866] veth0_macvtap: entered promiscuous mode [ 101.083510][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.099028][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.116963][ T5866] veth1_macvtap: entered promiscuous mode [ 101.145003][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.154101][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.170343][ T1169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.195706][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.215575][ T5864] veth0_macvtap: entered promiscuous mode [ 101.227847][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.237870][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.249658][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.262207][ T5864] veth1_macvtap: entered promiscuous mode [ 101.281404][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.309295][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.325438][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.334495][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.365559][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.405578][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.414720][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.439114][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.474441][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.536716][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.569246][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.582487][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.583109][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.614294][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.623390][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.649403][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.654298][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.666341][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.717206][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.727570][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.753679][ T5878] Bluetooth: hci1: command tx timeout [ 101.779587][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.788995][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.802903][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.818340][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.833394][ T5878] Bluetooth: hci0: command tx timeout [ 101.839136][ T5878] Bluetooth: hci2: command tx timeout [ 101.912988][ T5878] Bluetooth: hci3: command tx timeout [ 101.919973][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.943396][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.966795][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.023796][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.055889][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.181401][ T5959] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.203338][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.242795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.339310][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.980819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.989578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.041820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 103.052008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.441010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.832129][ T5878] Bluetooth: hci1: command tx timeout [ 103.911323][ T5878] Bluetooth: hci2: command tx timeout [ 103.921037][ T5878] Bluetooth: hci0: command tx timeout [ 103.994087][ T5878] Bluetooth: hci3: command tx timeout [ 104.740944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.781805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.053068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.293081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.672101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.717917][ T6012] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.629160][ T6016] ima: policy update failed [ 106.638106][ T6016] netlink: 25 bytes leftover after parsing attributes in process `syz.0.14'. [ 106.662098][ T30] audit: type=1802 audit(1757315183.417:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.14" res=0 errno=0 [ 107.969657][ T6028] mmap: syz.1.18 (6028) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.059727][ T6018] openvswitch: netlink: IPv4 tunnel dst address is zero [ 109.717098][ T6051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.500910][ T6058] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.289877][ T6070] Zero length message leads to an empty skb [ 112.360301][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 113.300925][ T6087] process 'syz.3.30' launched ':,' with NULL argv: empty string added [ 114.337086][ T5878] Bluetooth: hci2: unexpected event 0x17 length: 440 > 6 [ 115.937068][ T6118] sd 0:0:1:0: PR command failed: 1026 [ 116.133121][ T6118] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 116.139917][ T6118] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 116.686094][ T6122] random: crng reseeded on system resumption [ 119.340766][ T6153] mkiss: ax0: crc mode is auto. [ 119.359621][ T6156] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.800708][ T6154] 0x000200000001-0xa29656a63616329 : "" [ 119.807067][ T6154] mtd: partition "" is out of reach -- disabled [ 119.868251][ T6154] ftl_cs: FTL header not found. [ 121.334832][ T30] audit: type=1800 audit(6052282494.108:3): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=8688 res=0 errno=0 [ 124.147844][ T6226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.53'. [ 124.210004][ T6227] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.841363][ T6254] netlink: 17 bytes leftover after parsing attributes in process `syz.1.57'. [ 127.894621][ T6252] ima: policy update failed [ 127.911213][ T30] audit: type=1802 audit(4294967300.080:4): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.57" res=0 errno=0 [ 131.057464][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 132.707525][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.714824][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.749954][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759276][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.768230][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777917][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.801706][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.810590][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.277211][ T6197] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 133.277258][ T6197] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 133.294234][ T6197] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 133.294273][ T6197] Bluetooth: hci2: adv larger than maximum supported [ 133.301553][ T6197] Bluetooth: hci2: adv larger than maximum supported [ 133.308430][ T6197] Bluetooth: hci2: Malformed LE Event: 0x0d [ 133.438451][ T6197] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 133.438494][ T6197] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 133.460447][ T6197] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 133.460486][ T6197] Bluetooth: hci2: adv larger than maximum supported [ 133.467824][ T6197] Bluetooth: hci2: adv larger than maximum supported [ 133.474728][ T6197] Bluetooth: hci2: Malformed LE Event: 0x0d [ 134.561464][ T6365] Invalid ELF header magic: != ELF [ 138.394707][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.394763][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.512457][ T6418] FAULT_INJECTION: forcing a failure. [ 138.512457][ T6418] name failslab, interval 1, probability 0, space 0, times 1 [ 138.512499][ T6418] CPU: 0 UID: 0 PID: 6418 Comm: syz.3.83 Not tainted syzkaller #0 PREEMPT(full) [ 138.512520][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.512531][ T6418] Call Trace: [ 138.512537][ T6418] [ 138.512544][ T6418] dump_stack_lvl+0x16c/0x1f0 [ 138.512575][ T6418] should_fail_ex+0x512/0x640 [ 138.512604][ T6418] ? fs_reclaim_acquire+0xae/0x150 [ 138.512633][ T6418] ? tomoyo_encode2+0x100/0x3e0 [ 138.512658][ T6418] should_failslab+0xc2/0x120 [ 138.512682][ T6418] __kmalloc_noprof+0xd2/0x510 [ 138.512703][ T6418] ? d_absolute_path+0x136/0x1a0 [ 138.512733][ T6418] tomoyo_encode2+0x100/0x3e0 [ 138.512762][ T6418] tomoyo_encode+0x29/0x50 [ 138.512787][ T6418] tomoyo_realpath_from_path+0x18f/0x6e0 [ 138.512820][ T6418] tomoyo_path_number_perm+0x245/0x580 [ 138.512842][ T6418] ? tomoyo_path_number_perm+0x237/0x580 [ 138.512866][ T6418] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 138.512924][ T6418] ? find_held_lock+0x2b/0x80 [ 138.512947][ T6418] ? hook_file_ioctl_common+0x145/0x410 [ 138.512976][ T6418] ? __fget_files+0x20e/0x3c0 [ 138.513000][ T6418] security_file_ioctl+0x9b/0x240 [ 138.513025][ T6418] __x64_sys_ioctl+0xb7/0x210 [ 138.513055][ T6418] do_syscall_64+0xcd/0x490 [ 138.513085][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.513104][ T6418] RIP: 0033:0x7f0747d8ebe9 [ 138.513119][ T6418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.513137][ T6418] RSP: 002b:00007f0748c33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.513154][ T6418] RAX: ffffffffffffffda RBX: 00007f0747fc5fa0 RCX: 00007f0747d8ebe9 [ 138.513166][ T6418] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 138.513176][ T6418] RBP: 00007f0747e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 138.513186][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.513197][ T6418] R13: 00007f0747fc6038 R14: 00007f0747fc5fa0 R15: 00007ffd088a00e8 [ 138.513219][ T6418] [ 138.513235][ T6418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.155649][ T6421] : Can't lookup blockdev [ 140.275189][ T6444] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 140.404324][ T6444] FAULT_INJECTION: forcing a failure. [ 140.404324][ T6444] name failslab, interval 1, probability 0, space 0, times 0 [ 140.462094][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT(full) [ 140.462121][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.462133][ T6444] Call Trace: [ 140.462139][ T6444] [ 140.462147][ T6444] dump_stack_lvl+0x16c/0x1f0 [ 140.462180][ T6444] should_fail_ex+0x512/0x640 [ 140.462218][ T6444] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 140.462245][ T6444] should_failslab+0xc2/0x120 [ 140.462269][ T6444] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 140.462292][ T6444] ? __d_alloc+0x32/0xae0 [ 140.462317][ T6444] __d_alloc+0x32/0xae0 [ 140.462343][ T6444] d_alloc_parallel+0x111/0x1480 [ 140.462376][ T6444] ? find_held_lock+0x2b/0x80 [ 140.462395][ T6444] ? __d_lookup+0x25c/0x4a0 [ 140.462423][ T6444] ? __pfx_d_alloc_parallel+0x10/0x10 [ 140.462452][ T6444] ? __d_lookup+0x266/0x4a0 [ 140.462478][ T6444] ? lockdep_init_map_type+0x5c/0x280 [ 140.462504][ T6444] ? lockdep_init_map_type+0x5c/0x280 [ 140.462533][ T6444] proc_fill_cache+0x2e6/0x470 [ 140.462557][ T6444] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 140.462583][ T6444] ? __pfx_proc_fill_cache+0x10/0x10 [ 140.462629][ T6444] proc_pident_readdir+0x1bc/0x530 [ 140.462658][ T6444] iterate_dir+0x293/0xaf0 [ 140.462679][ T6444] __x64_sys_getdents+0x13c/0x2b0 [ 140.462697][ T6444] ? __pfx___x64_sys_getdents+0x10/0x10 [ 140.462715][ T6444] ? __pfx_filldir+0x10/0x10 [ 140.462739][ T6444] do_syscall_64+0xcd/0x490 [ 140.462769][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.462787][ T6444] RIP: 0033:0x7fcdf938ebe9 [ 140.462802][ T6444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.462819][ T6444] RSP: 002b:00007fcdf75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 140.462837][ T6444] RAX: ffffffffffffffda RBX: 00007fcdf95c5fa0 RCX: 00007fcdf938ebe9 [ 140.462848][ T6444] RDX: 00000000000003f1 RSI: 0000000000000000 RDI: 0000000000000007 [ 140.462859][ T6444] RBP: 00007fcdf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.462869][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.462879][ T6444] R13: 00007fcdf95c6038 R14: 00007fcdf95c5fa0 R15: 00007ffc2c547bd8 [ 140.462901][ T6444] [ 140.851507][ T6449] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 141.183507][ T6450] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 141.718020][ T6461] Invalid ELF header magic: != ELF [ 141.893985][ T6466] FAULT_INJECTION: forcing a failure. [ 141.893985][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 141.960622][ T6466] CPU: 1 UID: 0 PID: 6466 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(full) [ 141.960661][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.960675][ T6466] Call Trace: [ 141.960683][ T6466] [ 141.960693][ T6466] dump_stack_lvl+0x16c/0x1f0 [ 141.960737][ T6466] should_fail_ex+0x512/0x640 [ 141.960775][ T6466] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 141.960805][ T6466] should_failslab+0xc2/0x120 [ 141.960837][ T6466] __kmalloc_cache_noprof+0x6a/0x3e0 [ 141.960860][ T6466] ? __asan_memcpy+0x3c/0x60 [ 141.960883][ T6466] ? ip_vs_protocol_net_init+0xbe/0x300 [ 141.960913][ T6466] ip_vs_protocol_net_init+0xbe/0x300 [ 141.960942][ T6466] __ip_vs_init+0x239/0x520 [ 141.960975][ T6466] ? __pfx___ip_vs_init+0x10/0x10 [ 141.961003][ T6466] ops_init+0x1df/0x5f0 [ 141.961044][ T6466] setup_net+0x10f/0x380 [ 141.961062][ T6466] ? lockdep_init_map_type+0x5c/0x280 [ 141.961097][ T6466] ? __pfx_setup_net+0x10/0x10 [ 141.961129][ T6466] ? debug_mutex_init+0x37/0x70 [ 141.961157][ T6466] copy_net_ns+0x2a6/0x5f0 [ 141.961184][ T6466] create_new_namespaces+0x3ea/0xa90 [ 141.961220][ T6466] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 141.961252][ T6466] ksys_unshare+0x45b/0xa40 [ 141.961286][ T6466] ? __pfx_ksys_unshare+0x10/0x10 [ 141.961326][ T6466] ? xfd_validate_state+0x61/0x180 [ 141.961372][ T6466] __x64_sys_unshare+0x31/0x40 [ 141.961403][ T6466] do_syscall_64+0xcd/0x490 [ 141.961442][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.961465][ T6466] RIP: 0033:0x7f458c38ebe9 [ 141.961483][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.961505][ T6466] RSP: 002b:00007f458d289038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 141.961528][ T6466] RAX: ffffffffffffffda RBX: 00007f458c5c5fa0 RCX: 00007f458c38ebe9 [ 141.961544][ T6466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 141.961557][ T6466] RBP: 00007f458c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 141.961571][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.961584][ T6466] R13: 00007f458c5c6038 R14: 00007f458c5c5fa0 R15: 00007ffe4097f2d8 [ 141.961615][ T6466] [ 142.648587][ T6468] FAULT_INJECTION: forcing a failure. [ 142.648587][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 142.713726][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) [ 142.713768][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.713785][ T6468] Call Trace: [ 142.713796][ T6468] [ 142.713807][ T6468] dump_stack_lvl+0x16c/0x1f0 [ 142.713856][ T6468] should_fail_ex+0x512/0x640 [ 142.713898][ T6468] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 142.713939][ T6468] should_failslab+0xc2/0x120 [ 142.713980][ T6468] __kmalloc_cache_node_noprof+0x6d/0x420 [ 142.714014][ T6468] ? sbitmap_init_node+0x2ca/0x770 [ 142.714050][ T6468] ? sbitmap_queue_init_node+0x291/0x4a0 [ 142.714096][ T6468] sbitmap_queue_init_node+0x291/0x4a0 [ 142.714138][ T6468] blk_mq_init_tags+0x12d/0x2b0 [ 142.714190][ T6468] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 142.714244][ T6468] ? rcu_is_watching+0x12/0xc0 [ 142.714280][ T6468] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 142.714326][ T6468] blk_mq_alloc_tag_set+0x778/0x1260 [ 142.714382][ T6468] loop_add+0x3b2/0xb70 [ 142.714429][ T6468] ? __pfx_loop_add+0x10/0x10 [ 142.714495][ T6468] ? find_held_lock+0x2b/0x80 [ 142.714534][ T6468] loop_control_ioctl+0x13e/0x630 [ 142.714572][ T6468] ? __pfx_loop_control_ioctl+0x10/0x10 [ 142.714615][ T6468] ? __pfx_loop_control_ioctl+0x10/0x10 [ 142.714656][ T6468] __x64_sys_ioctl+0x18e/0x210 [ 142.714704][ T6468] do_syscall_64+0xcd/0x490 [ 142.714754][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.714784][ T6468] RIP: 0033:0x7fcdf938ebe9 [ 142.714810][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.714839][ T6468] RSP: 002b:00007fcdf75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.714868][ T6468] RAX: ffffffffffffffda RBX: 00007fcdf95c5fa0 RCX: 00007fcdf938ebe9 [ 142.714887][ T6468] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 142.714905][ T6468] RBP: 00007fcdf9411e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.714922][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.714939][ T6468] R13: 00007fcdf95c6038 R14: 00007fcdf95c5fa0 R15: 00007ffc2c547bd8 [ 142.714979][ T6468] [ 142.957293][ T6468] blk-mq: reduced tag depth (128 -> 64) [ 145.681817][ T6518] Invalid ELF header magic: != ELF [ 146.072348][ T980] usb usb38-port5: attempt power cycle [ 146.763443][ T980] usb usb38-port5: unable to enumerate USB device [ 147.023872][ T6531] Invalid ELF header magic: != ELF [ 148.623296][ T6552] ALSA: mixer_oss: invalid OSS volume '' [ 149.684744][ T6585] Invalid ELF header magic: != ELF [ 151.079601][ T6611] Invalid ELF header magic: != ELF [ 153.271022][ T6627] 0x000200000001-0xa29656a63616329 : "" [ 153.296549][ T6627] mtd: partition "" is out of reach -- disabled [ 153.339468][ T6627] ftl_cs: FTL header not found. [ 153.788943][ T6164] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:1: bg 1: bad block bitmap checksum [ 153.836409][ T6164] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1364 with max blocks 74 with error 74 [ 153.854343][ T6164] EXT4-fs (sda1): This should not happen!! Data will be lost [ 153.854343][ T6164] [ 157.348771][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.355693][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.365578][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.446800][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.464996][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.479119][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.499440][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.506085][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.531030][ T6697] 0x000200000001-0xa29656a63616329 : "" [ 157.536837][ T6697] mtd: partition "" is out of reach -- disabled [ 157.547328][ T6697] ftl_cs: FTL header not found. [ 160.352967][ T6721] deleting an unspecified loop device is not supported. [ 162.236421][ T6756] Invalid ELF header magic: != ELF [ 165.356480][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.373824][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.388681][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.397022][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.417152][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.423689][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.445218][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.452096][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.134752][ T6802] hugetlbfs: syz.1.162 (6802): Using mlock ulimits for SHM_HUGETLB is obsolete [ 167.216617][ T6819] Invalid ELF header magic: != ELF [ 172.530093][ T6895] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 172.588330][ T6895] FAULT_INJECTION: forcing a failure. [ 172.588330][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 172.608079][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.0.180 Not tainted syzkaller #0 PREEMPT(full) [ 172.608122][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.608140][ T6895] Call Trace: [ 172.608150][ T6895] [ 172.608161][ T6895] dump_stack_lvl+0x16c/0x1f0 [ 172.608215][ T6895] should_fail_ex+0x512/0x640 [ 172.608262][ T6895] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 172.608304][ T6895] should_failslab+0xc2/0x120 [ 172.608345][ T6895] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 172.608383][ T6895] ? __kernfs_new_node+0xd2/0x8e0 [ 172.608430][ T6895] __kernfs_new_node+0xd2/0x8e0 [ 172.608475][ T6895] ? __pfx___kernfs_new_node+0x10/0x10 [ 172.608526][ T6895] ? find_held_lock+0x2b/0x80 [ 172.608559][ T6895] ? kernfs_root+0xee/0x2a0 [ 172.608607][ T6895] kernfs_new_node+0x13c/0x1e0 [ 172.608659][ T6895] __kernfs_create_file+0x53/0x350 [ 172.608696][ T6895] sysfs_add_file_mode_ns+0x207/0x3c0 [ 172.608744][ T6895] sysfs_merge_group+0x1aa/0x340 [ 172.608788][ T6895] ? __pfx_sysfs_merge_group+0x10/0x10 [ 172.608842][ T6895] ? __pfx_dev_add_physical_location+0x10/0x10 [ 172.608877][ T6895] ? bus_to_subsys+0x131/0x160 [ 172.608920][ T6895] dpm_sysfs_add+0x237/0x280 [ 172.608955][ T6895] device_add+0x9a6/0x1aa0 [ 172.608993][ T6895] ? __pfx_device_add+0x10/0x10 [ 172.609026][ T6895] ? __pfx_exact_lock+0x10/0x10 [ 172.609072][ T6895] ? kobject_get+0xbb/0x150 [ 172.609130][ T6895] cdev_device_add+0xc2/0x1e0 [ 172.609172][ T6895] evdev_connect+0x3a4/0x4c0 [ 172.609215][ T6895] input_attach_handler.isra.0+0x176/0x250 [ 172.609255][ T6895] input_register_device+0xab9/0x1180 [ 172.609293][ T6895] ? input_ff_create+0x1d1/0x350 [ 172.609341][ T6895] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 172.609404][ T6895] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 172.609454][ T6895] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 172.609513][ T6895] ? find_held_lock+0x2b/0x80 [ 172.609567][ T6895] ? __pfx_uinput_ioctl+0x10/0x10 [ 172.609615][ T6895] __x64_sys_ioctl+0x18e/0x210 [ 172.609669][ T6895] do_syscall_64+0xcd/0x490 [ 172.609720][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.609751][ T6895] RIP: 0033:0x7ff8a3b8ebe9 [ 172.609777][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.609806][ T6895] RSP: 002b:00007ff8a4930038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.609844][ T6895] RAX: ffffffffffffffda RBX: 00007ff8a3dc5fa0 RCX: 00007ff8a3b8ebe9 [ 172.609864][ T6895] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 172.609881][ T6895] RBP: 00007ff8a3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.609898][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.609915][ T6895] R13: 00007ff8a3dc6038 R14: 00007ff8a3dc5fa0 R15: 00007ffdefbad238 [ 172.609957][ T6895] [ 172.947941][ T6895] input: failed to attach handler evdev to device input11, error: -12 [ 174.332158][ T6926] bond0: option all_slaves_active: invalid value () [ 175.206712][ T6939] Invalid ELF header magic: != ELF [ 176.477482][ T6955] Invalid ELF header magic: != ELF [ 177.156249][ T6970] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.712915][ T7132] FAULT_INJECTION: forcing a failure. [ 187.712915][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 187.810859][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 187.810901][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.810919][ T7132] Call Trace: [ 187.810929][ T7132] [ 187.810941][ T7132] dump_stack_lvl+0x16c/0x1f0 [ 187.811002][ T7132] should_fail_ex+0x512/0x640 [ 187.811048][ T7132] ? fs_reclaim_acquire+0xae/0x150 [ 187.811097][ T7132] should_failslab+0xc2/0x120 [ 187.811136][ T7132] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 187.811176][ T7132] ? __kernfs_new_node+0xd2/0x8e0 [ 187.811221][ T7132] __kernfs_new_node+0xd2/0x8e0 [ 187.811266][ T7132] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.811314][ T7132] ? find_held_lock+0x2b/0x80 [ 187.811346][ T7132] ? kernfs_root+0xee/0x2a0 [ 187.811393][ T7132] kernfs_new_node+0x13c/0x1e0 [ 187.811445][ T7132] __kernfs_create_file+0x53/0x350 [ 187.811483][ T7132] sysfs_add_file_mode_ns+0x207/0x3c0 [ 187.811530][ T7132] internal_create_group+0x578/0xf30 [ 187.811580][ T7132] ? __pfx_internal_create_group+0x10/0x10 [ 187.811628][ T7132] ? kernfs_create_link+0x1bd/0x240 [ 187.811667][ T7132] internal_create_groups+0x9d/0x150 [ 187.811709][ T7132] device_add+0x731/0x1aa0 [ 187.811748][ T7132] ? __pfx_device_add+0x10/0x10 [ 187.811776][ T7132] ? __pfx___might_resched+0x10/0x10 [ 187.811807][ T7132] ? is_dynamic_key+0xb4/0x160 [ 187.811860][ T7132] __add_disk+0x457/0xf00 [ 187.811916][ T7132] add_disk_fwnode+0x13f/0x5d0 [ 187.811975][ T7132] nbd_dev_add+0x783/0xbb0 [ 187.812025][ T7132] ? __pfx_nbd_dev_add+0x10/0x10 [ 187.812099][ T7132] ? bpf_lsm_capable+0x9/0x10 [ 187.812131][ T7132] ? __radix_tree_lookup+0x21f/0x2c0 [ 187.812176][ T7132] nbd_genl_connect+0x8b0/0x1c60 [ 187.812215][ T7132] ? __pfx_nbd_genl_connect+0x10/0x10 [ 187.812248][ T7132] ? __nla_parse+0x40/0x60 [ 187.812288][ T7132] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 187.812323][ T7132] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 187.812367][ T7132] genl_family_rcv_msg_doit+0x209/0x2f0 [ 187.812404][ T7132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.812438][ T7132] ? genl_get_cmd+0x194/0x580 [ 187.812482][ T7132] ? __radix_tree_lookup+0x21f/0x2c0 [ 187.812531][ T7132] genl_rcv_msg+0x55c/0x800 [ 187.812567][ T7132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.812601][ T7132] ? __pfx_nbd_genl_connect+0x10/0x10 [ 187.812649][ T7132] netlink_rcv_skb+0x158/0x420 [ 187.812696][ T7132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.812729][ T7132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.812794][ T7132] ? netlink_deliver_tap+0x1ae/0xd30 [ 187.812844][ T7132] genl_rcv+0x28/0x40 [ 187.812870][ T7132] netlink_unicast+0x5a7/0x870 [ 187.812919][ T7132] ? __pfx_netlink_unicast+0x10/0x10 [ 187.812973][ T7132] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 187.813017][ T7132] ? __lock_acquire+0xb97/0x1ce0 [ 187.813068][ T7132] netlink_sendmsg+0x8d1/0xdd0 [ 187.813124][ T7132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.813177][ T7132] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 187.813219][ T7132] ____sys_sendmsg+0xa95/0xc70 [ 187.813254][ T7132] ? copy_msghdr_from_user+0x10a/0x160 [ 187.813307][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.813352][ T7132] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.813405][ T7132] ___sys_sendmsg+0x134/0x1d0 [ 187.813455][ T7132] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.813557][ T7132] __sys_sendmsg+0x16d/0x220 [ 187.813600][ T7132] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.813640][ T7132] ? __x64_sys_futex+0x1e0/0x4c0 [ 187.813706][ T7132] do_syscall_64+0xcd/0x490 [ 187.813756][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.813787][ T7132] RIP: 0033:0x7ff8a3b8ebe9 [ 187.813812][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.813841][ T7132] RSP: 002b:00007ff8a4930038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.813869][ T7132] RAX: ffffffffffffffda RBX: 00007ff8a3dc5fa0 RCX: 00007ff8a3b8ebe9 [ 187.813889][ T7132] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 187.813906][ T7132] RBP: 00007ff8a3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 187.813923][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.813940][ T7132] R13: 00007ff8a3dc6038 R14: 00007ff8a3dc5fa0 R15: 00007ffdefbad238 [ 187.813991][ T7132] [ 188.421441][ T7132] nbd: failed to add new device [ 188.432567][ T7142] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.095870][ T7198] ================================================================== [ 192.095892][ T7198] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 192.095940][ T7198] Write of size 8 at addr ffffc90003db9000 by task syz.2.258/7198 [ 192.095965][ T7198] [ 192.095981][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) [ 192.096016][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.096035][ T7198] Call Trace: [ 192.096045][ T7198] [ 192.096057][ T7198] dump_stack_lvl+0x116/0x1f0 [ 192.096104][ T7198] print_report+0xcd/0x630 [ 192.096143][ T7198] ? __virt_addr_valid+0x81/0x610 [ 192.096185][ T7198] ? sys_imageblit+0x1a6f/0x1e60 [ 192.096220][ T7198] kasan_report+0xe0/0x110 [ 192.096261][ T7198] ? sys_imageblit+0x1a6f/0x1e60 [ 192.096301][ T7198] sys_imageblit+0x1a6f/0x1e60 [ 192.096341][ T7198] ? __pfx_sys_imageblit+0x10/0x10 [ 192.096376][ T7198] ? __pfx__prb_read_valid+0x10/0x10 [ 192.096420][ T7198] ? find_held_lock+0x2b/0x80 [ 192.096451][ T7198] ? up+0xcb/0x140 [ 192.096477][ T7198] ? do_raw_spin_unlock+0x172/0x230 [ 192.096528][ T7198] ? prb_read_valid+0x78/0xa0 [ 192.096573][ T7198] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 192.096621][ T7198] soft_cursor+0x521/0xa10 [ 192.096671][ T7198] ? fb_get_color_depth+0x120/0x250 [ 192.096726][ T7198] bit_cursor+0xe8c/0x17e0 [ 192.096776][ T7198] ? __pfx_bit_cursor+0x10/0x10 [ 192.096821][ T7198] ? __lock_acquire+0xb97/0x1ce0 [ 192.096863][ T7198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.096911][ T7198] ? get_color+0x1da/0x450 [ 192.096951][ T7198] ? __pfx_bit_cursor+0x10/0x10 [ 192.096996][ T7198] fbcon_cursor+0x40c/0x5f0 [ 192.097037][ T7198] ? add_softcursor+0x41/0x290 [ 192.097080][ T7198] set_cursor+0x1d8/0x250 [ 192.097120][ T7198] con_write+0x89/0xb0 [ 192.097166][ T7198] do_output_char+0x5d9/0x840 [ 192.097198][ T7198] n_tty_write+0x4ff/0x11e0 [ 192.097238][ T7198] ? __pfx_n_tty_write+0x10/0x10 [ 192.097271][ T7198] ? rcu_is_watching+0x12/0xc0 [ 192.097302][ T7198] ? __pfx_woken_wake_function+0x10/0x10 [ 192.097352][ T7198] ? kfree+0x24f/0x4d0 [ 192.097379][ T7198] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 192.097428][ T7198] ? __pfx_n_tty_write+0x10/0x10 [ 192.097462][ T7198] file_tty_write.constprop.0+0x504/0x9b0 [ 192.097514][ T7198] redirected_tty_write+0xd4/0x150 [ 192.097560][ T7198] vfs_write+0x7d0/0x11d0 [ 192.097596][ T7198] ? __pfx_redirected_tty_write+0x10/0x10 [ 192.097645][ T7198] ? __pfx_vfs_write+0x10/0x10 [ 192.097677][ T7198] ? find_held_lock+0x2b/0x80 [ 192.097726][ T7198] ksys_write+0x12a/0x250 [ 192.097761][ T7198] ? __pfx_ksys_write+0x10/0x10 [ 192.097801][ T7198] do_syscall_64+0xcd/0x490 [ 192.097850][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.097881][ T7198] RIP: 0033:0x7f458c38ebe9 [ 192.097905][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.097936][ T7198] RSP: 002b:00007f458d226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.097980][ T7198] RAX: ffffffffffffffda RBX: 00007f458c5c6270 RCX: 00007f458c38ebe9 [ 192.098001][ T7198] RDX: 0000000000000cb6 RSI: 0000200000000e00 RDI: 0000000000000004 [ 192.098020][ T7198] RBP: 00007f458c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.098047][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.098071][ T7198] R13: 00007f458c5c6308 R14: 00007f458c5c6270 R15: 00007ffe4097f2d8 [ 192.098101][ T7198] [ 192.098112][ T7198] [ 192.098120][ T7198] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003ab9000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 192.098184][ T7198] Memory state around the buggy address: [ 192.098201][ T7198] ffffc90003db8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 192.098222][ T7198] ffffc90003db8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 192.098244][ T7198] >ffffc90003db9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 192.098261][ T7198] ^ [ 192.098277][ T7198] ffffc90003db9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 192.098299][ T7198] ffffc90003db9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 192.098316][ T7198] ================================================================== [ 192.098334][ T7198] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.098352][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(full) [ 192.098388][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.098406][ T7198] Call Trace: [ 192.098416][ T7198] [ 192.098428][ T7198] dump_stack_lvl+0x3d/0x1f0 [ 192.098474][ T7198] vpanic+0x6e8/0x7a0 [ 192.098519][ T7198] ? __pfx_vpanic+0x10/0x10 [ 192.098563][ T7198] ? __pfx_vprintk_emit+0x10/0x10 [ 192.098599][ T7198] ? sys_imageblit+0x1a6f/0x1e60 [ 192.098633][ T7198] panic+0xca/0xd0 [ 192.098675][ T7198] ? __pfx_panic+0x10/0x10 [ 192.098734][ T7198] check_panic_on_warn+0xab/0xb0 [ 192.098781][ T7198] end_report+0x107/0x170 [ 192.098820][ T7198] kasan_report+0xee/0x110 [ 192.098861][ T7198] ? sys_imageblit+0x1a6f/0x1e60 [ 192.098902][ T7198] sys_imageblit+0x1a6f/0x1e60 [ 192.098943][ T7198] ? __pfx_sys_imageblit+0x10/0x10 [ 192.098976][ T7198] ? __pfx__prb_read_valid+0x10/0x10 [ 192.099017][ T7198] ? find_held_lock+0x2b/0x80 [ 192.099048][ T7198] ? up+0xcb/0x140 [ 192.099075][ T7198] ? do_raw_spin_unlock+0x172/0x230 [ 192.099127][ T7198] ? prb_read_valid+0x78/0xa0 [ 192.099172][ T7198] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 192.099219][ T7198] soft_cursor+0x521/0xa10 [ 192.099269][ T7198] ? fb_get_color_depth+0x120/0x250 [ 192.099316][ T7198] bit_cursor+0xe8c/0x17e0 [ 192.099367][ T7198] ? __pfx_bit_cursor+0x10/0x10 [ 192.099413][ T7198] ? __lock_acquire+0xb97/0x1ce0 [ 192.099457][ T7198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.099504][ T7198] ? get_color+0x1da/0x450 [ 192.099545][ T7198] ? __pfx_bit_cursor+0x10/0x10 [ 192.099591][ T7198] fbcon_cursor+0x40c/0x5f0 [ 192.099632][ T7198] ? add_softcursor+0x41/0x290 [ 192.099675][ T7198] set_cursor+0x1d8/0x250 [ 192.099722][ T7198] con_write+0x89/0xb0 [ 192.099767][ T7198] do_output_char+0x5d9/0x840 [ 192.099801][ T7198] n_tty_write+0x4ff/0x11e0 [ 192.099841][ T7198] ? __pfx_n_tty_write+0x10/0x10 [ 192.099868][ T7198] ? rcu_is_watching+0x12/0xc0 [ 192.099898][ T7198] ? __pfx_woken_wake_function+0x10/0x10 [ 192.099943][ T7198] ? kfree+0x24f/0x4d0 [ 192.099968][ T7198] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 192.100012][ T7198] ? __pfx_n_tty_write+0x10/0x10 [ 192.100043][ T7198] file_tty_write.constprop.0+0x504/0x9b0 [ 192.100090][ T7198] redirected_tty_write+0xd4/0x150 [ 192.100135][ T7198] vfs_write+0x7d0/0x11d0 [ 192.100168][ T7198] ? __pfx_redirected_tty_write+0x10/0x10 [ 192.100212][ T7198] ? __pfx_vfs_write+0x10/0x10 [ 192.100241][ T7198] ? find_held_lock+0x2b/0x80 [ 192.100279][ T7198] ksys_write+0x12a/0x250 [ 192.100313][ T7198] ? __pfx_ksys_write+0x10/0x10 [ 192.100354][ T7198] do_syscall_64+0xcd/0x490 [ 192.100396][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.100423][ T7198] RIP: 0033:0x7f458c38ebe9 [ 192.100445][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.100470][ T7198] RSP: 002b:00007f458d226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.100505][ T7198] RAX: ffffffffffffffda RBX: 00007f458c5c6270 RCX: 00007f458c38ebe9 [ 192.100529][ T7198] RDX: 0000000000000cb6 RSI: 0000200000000e00 RDI: 0000000000000004 [ 192.100547][ T7198] RBP: 00007f458c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.100564][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.100581][ T7198] R13: 00007f458c5c6308 R14: 00007f458c5c6270 R15: 00007ffe4097f2d8 [ 192.100610][ T7198] [ 192.100976][ T7198] Kernel Offset: disabled