last executing test programs: 8.839581481s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x932, 0x0) 8.598504781s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setns(0xc9, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 7.072651345s ago: executing program 3 (id=18): r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2000000000}, {}, 0x0, 0xffffffff, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={&(0x7f0000000340)}}}, &(0x7f0000000500)=0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 7.066233242s ago: executing program 1 (id=2): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000080)='X', 0x1}], 0x1) syz_usb_connect$uac3(0x2, 0x109, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x9, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x43}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x5f, 0x7}, [@selector_unit={0x8, 0x24, 0xc, 0x5, 0x3, ', 3'}, @source_unit={0xc, 0x24, 0xb, 0xd9, 0x1}, @selector_unit={0xb, 0x24, 0xc, 0x7f, 0x6, "d7ad2dd2d40a"}, @extension_unit={0x1d, 0x24, 0xa, 0x3, 0x2, [0x1, 0x0, 0x1, 0x0, 0x2, 0x3]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x307, 0x6, 0x4, 0x5, 0x800, 0x5, 0x5, 0xc}, @cluster_info_segment={0x6, 0x20, 0x7, 0xb2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x1, 0x5, {0xa, 0x25, 0x25, 0x0, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0x3, "8ec775", '1s{'}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x5, 0x1, 0x5, 0x5, 0x9, 0xd9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe8, 0x2, 0x5, 0x52, 'B'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x0, 0x9, {0xa, 0x25, 0x25, 0x8, 0xfe, 0x9}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x5, 0x2, 0x4, 0x10, 0xf8}, 0x53, &(0x7f00000004c0)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x5f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xc9, "0a2c7c94db3cfdc6c843aeb76c1f87bb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x5, 0x51}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e9780752f39a1072472e0050f44ae7a4"}]}, 0x1, [{0x14, &(0x7f0000000540)=@string={0x14, 0x3, "149d1b02279552ddfe9c3179d3250888022d"}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x6, 0x5e12, 0x20, 0x13, 0x1, 0xde6, 0x9, 0x8000000000000, 0x8000000400007f, 0x3, 0x5, 0x0, 0x7fff, 0x9, 0x7ff], 0x50000, 0x1c0210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.26767622s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y', 0x1) 5.73245281s ago: executing program 1 (id=2): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000080)='X', 0x1}], 0x1) syz_usb_connect$uac3(0x2, 0x109, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x9, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x43}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x5f, 0x7}, [@selector_unit={0x8, 0x24, 0xc, 0x5, 0x3, ', 3'}, @source_unit={0xc, 0x24, 0xb, 0xd9, 0x1}, @selector_unit={0xb, 0x24, 0xc, 0x7f, 0x6, "d7ad2dd2d40a"}, @extension_unit={0x1d, 0x24, 0xa, 0x3, 0x2, [0x1, 0x0, 0x1, 0x0, 0x2, 0x3]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x307, 0x6, 0x4, 0x5, 0x800, 0x5, 0x5, 0xc}, @cluster_info_segment={0x6, 0x20, 0x7, 0xb2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x1, 0x5, {0xa, 0x25, 0x25, 0x0, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0x3, "8ec775", '1s{'}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x5, 0x1, 0x5, 0x5, 0x9, 0xd9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe8, 0x2, 0x5, 0x52, 'B'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x0, 0x9, {0xa, 0x25, 0x25, 0x8, 0xfe, 0x9}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x5, 0x2, 0x4, 0x10, 0xf8}, 0x53, &(0x7f00000004c0)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x5f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xc9, "0a2c7c94db3cfdc6c843aeb76c1f87bb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x5, 0x51}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e9780752f39a1072472e0050f44ae7a4"}]}, 0x1, [{0x14, &(0x7f0000000540)=@string={0x14, 0x3, "149d1b02279552ddfe9c3179d3250888022d"}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x6, 0x5e12, 0x20, 0x13, 0x1, 0xde6, 0x9, 0x8000000000000, 0x8000000400007f, 0x3, 0x5, 0x0, 0x7fff, 0x9, 0x7ff], 0x50000, 0x1c0210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.846416837s ago: executing program 3 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) syz_ublk_setup_io_uring(0x19a6, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000000)={0x0, 0xc6}, 0x2) pwrite64(r2, 0x0, 0xeffd, 0x8000c5b) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500000003000000000000000000000000006be9fcdf06e9f9419b66762dac2a0114564e6cbc410ccb9cc29c027b8bb2047f6e21a090f7ce5f0fae46f63ce0fcabd6935ac9ba6899b5792e7b52c91de6e199b906e36f0f539681f2bf1d133a6ce870fd721d6086f01596ffb4a47726fa3a523fd7608afc4f49da281b9e297e50ccffd8fe079738ca70ae8171cfd5e7769c41cf0c3c984040d20f18a26dca7cb804f8321d37643fab04a4b289b5061af85d9ce5e37989eaa7f5e27a165ef0e38886c2c18b0ac47cd945843a3b27", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) 4.844953498s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y', 0x1) 4.296742561s ago: executing program 1 (id=2): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000080)='X', 0x1}], 0x1) syz_usb_connect$uac3(0x2, 0x109, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x9, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x43}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x5f, 0x7}, [@selector_unit={0x8, 0x24, 0xc, 0x5, 0x3, ', 3'}, @source_unit={0xc, 0x24, 0xb, 0xd9, 0x1}, @selector_unit={0xb, 0x24, 0xc, 0x7f, 0x6, "d7ad2dd2d40a"}, @extension_unit={0x1d, 0x24, 0xa, 0x3, 0x2, [0x1, 0x0, 0x1, 0x0, 0x2, 0x3]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x307, 0x6, 0x4, 0x5, 0x800, 0x5, 0x5, 0xc}, @cluster_info_segment={0x6, 0x20, 0x7, 0xb2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x1, 0x5, {0xa, 0x25, 0x25, 0x0, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0x3, "8ec775", '1s{'}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x5, 0x1, 0x5, 0x5, 0x9, 0xd9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe8, 0x2, 0x5, 0x52, 'B'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x0, 0x9, {0xa, 0x25, 0x25, 0x8, 0xfe, 0x9}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x5, 0x2, 0x4, 0x10, 0xf8}, 0x53, &(0x7f00000004c0)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x5f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xc9, "0a2c7c94db3cfdc6c843aeb76c1f87bb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x5, 0x51}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e9780752f39a1072472e0050f44ae7a4"}]}, 0x1, [{0x14, &(0x7f0000000540)=@string={0x14, 0x3, "149d1b02279552ddfe9c3179d3250888022d"}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x6, 0x5e12, 0x20, 0x13, 0x1, 0xde6, 0x9, 0x8000000000000, 0x8000000400007f, 0x3, 0x5, 0x0, 0x7fff, 0x9, 0x7ff], 0x50000, 0x1c0210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.705943941s ago: executing program 3 (id=23): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000380)=""/218, 0xda) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000480)={0x7, 0x1, 0x2, 0x7fffffff, 0xb, 0xfffffff7}) fchmodat(0xffffffffffffff9c, 0x0, 0x17f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) munmap(&(0x7f000077d000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) 3.701155822s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y', 0x1) 3.009025871s ago: executing program 0 (id=25): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 3.008742669s ago: executing program 1 (id=2): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000080)='X', 0x1}], 0x1) syz_usb_connect$uac3(0x2, 0x109, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x9, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x43}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x5f, 0x7}, [@selector_unit={0x8, 0x24, 0xc, 0x5, 0x3, ', 3'}, @source_unit={0xc, 0x24, 0xb, 0xd9, 0x1}, @selector_unit={0xb, 0x24, 0xc, 0x7f, 0x6, "d7ad2dd2d40a"}, @extension_unit={0x1d, 0x24, 0xa, 0x3, 0x2, [0x1, 0x0, 0x1, 0x0, 0x2, 0x3]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x307, 0x6, 0x4, 0x5, 0x800, 0x5, 0x5, 0xc}, @cluster_info_segment={0x6, 0x20, 0x7, 0xb2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x1, 0x5, {0xa, 0x25, 0x25, 0x0, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0x3, "8ec775", '1s{'}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x5, 0x1, 0x5, 0x5, 0x9, 0xd9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe8, 0x2, 0x5, 0x52, 'B'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x0, 0x9, {0xa, 0x25, 0x25, 0x8, 0xfe, 0x9}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x5, 0x2, 0x4, 0x10, 0xf8}, 0x53, &(0x7f00000004c0)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x5f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xc9, "0a2c7c94db3cfdc6c843aeb76c1f87bb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x5, 0x51}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e9780752f39a1072472e0050f44ae7a4"}]}, 0x1, [{0x14, &(0x7f0000000540)=@string={0x14, 0x3, "149d1b02279552ddfe9c3179d3250888022d"}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x6, 0x5e12, 0x20, 0x13, 0x1, 0xde6, 0x9, 0x8000000000000, 0x8000000400007f, 0x3, 0x5, 0x0, 0x7fff, 0x9, 0x7ff], 0x50000, 0x1c0210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.358967589s ago: executing program 0 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e153b3cba6a2b9c"}}}}, 0x3e) 2.358813832s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y', 0x1) 1.695253737s ago: executing program 0 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x100}]}, 0x2c}}, 0x0) 1.692596691s ago: executing program 1 (id=2): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000080)='X', 0x1}], 0x1) syz_usb_connect$uac3(0x2, 0x109, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x9, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x43}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x5f, 0x7}, [@selector_unit={0x8, 0x24, 0xc, 0x5, 0x3, ', 3'}, @source_unit={0xc, 0x24, 0xb, 0xd9, 0x1}, @selector_unit={0xb, 0x24, 0xc, 0x7f, 0x6, "d7ad2dd2d40a"}, @extension_unit={0x1d, 0x24, 0xa, 0x3, 0x2, [0x1, 0x0, 0x1, 0x0, 0x2, 0x3]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x307, 0x6, 0x4, 0x5, 0x800, 0x5, 0x5, 0xc}, @cluster_info_segment={0x6, 0x20, 0x7, 0xb2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x1, 0x5, {0xa, 0x25, 0x25, 0x0, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0x3, "8ec775", '1s{'}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x5, 0x1, 0x5, 0x5, 0x9, 0xd9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe8, 0x2, 0x5, 0x52, 'B'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x0, 0x9, {0xa, 0x25, 0x25, 0x8, 0xfe, 0x9}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x5, 0x2, 0x4, 0x10, 0xf8}, 0x53, &(0x7f00000004c0)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x5f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xc9, "0a2c7c94db3cfdc6c843aeb76c1f87bb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x5, 0x51}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e9780752f39a1072472e0050f44ae7a4"}]}, 0x1, [{0x14, &(0x7f0000000540)=@string={0x14, 0x3, "149d1b02279552ddfe9c3179d3250888022d"}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x6, 0x5e12, 0x20, 0x13, 0x1, 0xde6, 0x9, 0x8000000000000, 0x8000000400007f, 0x3, 0x5, 0x0, 0x7fff, 0x9, 0x7ff], 0x50000, 0x1c0210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.041590002s ago: executing program 0 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 1.041466564s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y', 0x1) 435.000489ms ago: executing program 0 (id=29): r0 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)={0x2, 0xc0, 0x11}, 0x18) mkdirat(r0, &(0x7f0000000000)='./trace\x00', 0x1ff) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000580)) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000340)=@sr0, 0x0, &(0x7f00000005c0)={0x0, 0xfffffffffffffffd, 0x1, 0x4}) faccessat2(r0, &(0x7f0000000380)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1, 0x100) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0xd3283d0369e269ba, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x9}}, 0x18) write(r2, &(0x7f0000000440)='44100,48000,88200,96000,', 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x80d83, 0xa1) 425.862927ms ago: executing program 1 (id=2): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000a80)=[{&(0x7f0000000080)='X', 0x1}], 0x1) syz_usb_connect$uac3(0x2, 0x109, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x3, 0x1, 0x9, 0xc0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x20, 0x30, 0x43}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x5f, 0x7}, [@selector_unit={0x8, 0x24, 0xc, 0x5, 0x3, ', 3'}, @source_unit={0xc, 0x24, 0xb, 0xd9, 0x1}, @selector_unit={0xb, 0x24, 0xc, 0x7f, 0x6, "d7ad2dd2d40a"}, @extension_unit={0x1d, 0x24, 0xa, 0x3, 0x2, [0x1, 0x0, 0x1, 0x0, 0x2, 0x3]}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x307, 0x6, 0x4, 0x5, 0x800, 0x5, 0x5, 0xc}, @cluster_info_segment={0x6, 0x20, 0x7, 0xb2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x3, 0x1, 0x5, {0xa, 0x25, 0x25, 0x0, 0x1, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xe3}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x10, 0x3, "8ec775", '1s{'}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5, 0x5, 0x1, 0x5, 0x5, 0x9, 0xd9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xe8, 0x2, 0x5, 0x52, 'B'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x88, 0x0, 0x9, {0xa, 0x25, 0x25, 0x8, 0xfe, 0x9}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x0, 0x5, 0x2, 0x4, 0x10, 0xf8}, 0x53, &(0x7f00000004c0)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xa0, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x5f, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xc9, "0a2c7c94db3cfdc6c843aeb76c1f87bb"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x3, 0x6, 0x5, 0x51}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e9780752f39a1072472e0050f44ae7a4"}]}, 0x1, [{0x14, &(0x7f0000000540)=@string={0x14, 0x3, "149d1b02279552ddfe9c3179d3250888022d"}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x6, 0x5e12, 0x20, 0x13, 0x1, 0xde6, 0x9, 0x8000000000000, 0x8000000400007f, 0x3, 0x5, 0x0, 0x7fff, 0x9, 0x7ff], 0x50000, 0x1c0210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.271074ms ago: executing program 3 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='md0', 0x3) write(0xffffffffffffffff, &(0x7f0000000300)='raid1', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1:0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='active', 0x6) write(0xffffffffffffffff, &(0x7f0000000540)='r', 0x1) 170.514µs ago: executing program 0 (id=31): gettid() r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xa000, 0x1) openat(r0, 0x0, 0x80000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='md0\n', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000080)="6e6f6e650ac21937000000", 0xb) 0s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 72.936858][ T5598] cgroup: Unknown subsys name 'net' [ 73.054237][ T5598] cgroup: Unknown subsys name 'cpuset' [ 73.062863][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.740165][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.950301][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.961447][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.965654][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.968612][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.979817][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.980595][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.980818][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.981408][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.982058][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.983178][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.983760][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.986233][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.987588][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.995371][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.009954][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.012292][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.013401][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.013718][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.016033][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.024671][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.608576][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.608751][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.608874][ T5609] bridge_slave_0: entered allmulticast mode [ 78.611698][ T5609] bridge_slave_0: entered promiscuous mode [ 78.616284][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.616447][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.616824][ T5609] bridge_slave_1: entered allmulticast mode [ 78.618635][ T5609] bridge_slave_1: entered promiscuous mode [ 78.653665][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.657888][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.716012][ T5609] team0: Port device team_slave_0 added [ 78.748861][ T5609] team0: Port device team_slave_1 added [ 78.761737][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.761834][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.761942][ T5611] bridge_slave_0: entered allmulticast mode [ 78.763850][ T5611] bridge_slave_0: entered promiscuous mode [ 78.804723][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.804827][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.804937][ T5611] bridge_slave_1: entered allmulticast mode [ 78.806851][ T5611] bridge_slave_1: entered promiscuous mode [ 78.863466][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.863609][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.863689][ T5608] bridge_slave_0: entered allmulticast mode [ 78.864847][ T5608] bridge_slave_0: entered promiscuous mode [ 78.868135][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.868238][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.869043][ T5608] bridge_slave_1: entered allmulticast mode [ 78.871351][ T5608] bridge_slave_1: entered promiscuous mode [ 78.873559][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.873571][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.873593][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.933111][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.933128][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.933150][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.953527][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.982615][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.982793][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.982914][ T5610] bridge_slave_0: entered allmulticast mode [ 78.985442][ T5610] bridge_slave_0: entered promiscuous mode [ 78.991482][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.994837][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.002701][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.002815][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.002935][ T5610] bridge_slave_1: entered allmulticast mode [ 79.005552][ T5610] bridge_slave_1: entered promiscuous mode [ 79.021843][ T5622] Bluetooth: hci0: command tx timeout [ 79.044473][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.100661][ T55] Bluetooth: hci3: command tx timeout [ 79.100856][ T5622] Bluetooth: hci2: command tx timeout [ 79.104089][ T5622] Bluetooth: hci1: command tx timeout [ 79.128519][ T5611] team0: Port device team_slave_0 added [ 79.150952][ T5609] hsr_slave_0: entered promiscuous mode [ 79.151767][ T5609] hsr_slave_1: entered promiscuous mode [ 79.166592][ T5611] team0: Port device team_slave_1 added [ 79.168920][ T5608] team0: Port device team_slave_0 added [ 79.175808][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.203407][ T5608] team0: Port device team_slave_1 added [ 79.204083][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.204097][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.204121][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.222083][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.252502][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.252519][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.252540][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.321061][ T5610] team0: Port device team_slave_0 added [ 79.321839][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.321854][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.321878][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.324212][ T5610] team0: Port device team_slave_1 added [ 79.370755][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.370773][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.370803][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.388743][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.388759][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.388780][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.437625][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.437641][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.437663][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.478778][ T5611] hsr_slave_0: entered promiscuous mode [ 79.479894][ T5611] hsr_slave_1: entered promiscuous mode [ 79.481079][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 79.481429][ T5611] Cannot create hsr debugfs directory [ 79.560234][ T5608] hsr_slave_0: entered promiscuous mode [ 79.561662][ T5608] hsr_slave_1: entered promiscuous mode [ 79.562427][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 79.562444][ T5608] Cannot create hsr debugfs directory [ 79.646742][ T5610] hsr_slave_0: entered promiscuous mode [ 79.647466][ T5610] hsr_slave_1: entered promiscuous mode [ 79.647924][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 79.647943][ T5610] Cannot create hsr debugfs directory [ 79.985985][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.994222][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.996704][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.009612][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.028959][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.034249][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.036658][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.049639][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.136959][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.145586][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.146475][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.154657][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.162355][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.172750][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.173700][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.183909][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.286472][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.304154][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.305288][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.308296][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.321410][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.329196][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.343258][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.350326][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.449881][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.468475][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.473709][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.486206][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.489569][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.503132][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.508805][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.526291][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.529657][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.552155][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.556271][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.595179][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.595276][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.626588][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.626743][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.644281][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.668277][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.668344][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.689997][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.690081][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.801870][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.896104][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.920118][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.958022][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.958138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.985174][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.985899][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.997529][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.027384][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.027520][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.059886][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.060004][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.101698][ T5622] Bluetooth: hci0: command tx timeout [ 81.181833][ T55] Bluetooth: hci2: command tx timeout [ 81.181869][ T55] Bluetooth: hci3: command tx timeout [ 81.181985][ T5622] Bluetooth: hci1: command tx timeout [ 81.779270][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.865392][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.992886][ T5611] veth0_vlan: entered promiscuous mode [ 82.036102][ T5611] veth1_vlan: entered promiscuous mode [ 82.116729][ T5609] veth0_vlan: entered promiscuous mode [ 82.171248][ T5609] veth1_vlan: entered promiscuous mode [ 82.212851][ T5611] veth0_macvtap: entered promiscuous mode [ 82.237636][ T5611] veth1_macvtap: entered promiscuous mode [ 82.308210][ T5609] veth0_macvtap: entered promiscuous mode [ 82.326748][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.354798][ T5609] veth1_macvtap: entered promiscuous mode [ 82.359109][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.415800][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.451438][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.469279][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.514896][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.633038][ T32] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633221][ T32] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633259][ T32] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633295][ T32] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633330][ T32] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633366][ T32] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.633401][ T32] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.728232][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.728255][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.790783][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.897885][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.897908][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.922086][ T5608] veth0_vlan: entered promiscuous mode [ 82.943810][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.943832][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.993503][ T5608] veth1_vlan: entered promiscuous mode [ 82.997348][ T5610] veth0_vlan: entered promiscuous mode [ 83.011505][ T5610] veth1_vlan: entered promiscuous mode [ 83.033673][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.070073][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.070097][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.180640][ T5622] Bluetooth: hci0: command tx timeout [ 83.199820][ T5610] veth0_macvtap: entered promiscuous mode [ 83.216668][ T5608] veth0_macvtap: entered promiscuous mode [ 83.233661][ T5610] veth1_macvtap: entered promiscuous mode [ 83.261171][ T55] Bluetooth: hci3: command tx timeout [ 83.261205][ T55] Bluetooth: hci2: command tx timeout [ 83.261465][ T5622] Bluetooth: hci1: command tx timeout [ 83.262573][ T5608] veth1_macvtap: entered promiscuous mode [ 83.324381][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.370202][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.381341][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.427503][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.440917][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.444131][ T5762] FAULT_INJECTION: forcing a failure. [ 83.444131][ T5762] name failslab, interval 1, probability 0, space 0, times 1 [ 83.444160][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 83.444182][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.444193][ T5762] Call Trace: [ 83.444202][ T5762] [ 83.444216][ T5762] dump_stack_lvl+0xe8/0x150 [ 83.444247][ T5762] should_fail_ex+0x3eb/0x540 [ 83.444289][ T5762] ? alloc_slab_obj_exts+0x5c/0x180 [ 83.444314][ T5762] should_failslab+0xa8/0x100 [ 83.444341][ T5762] ? alloc_slab_obj_exts+0x5c/0x180 [ 83.444368][ T5762] __kmalloc_flags_noprof+0x123/0x790 [ 83.444393][ T5762] ? alloc_slab_obj_exts+0x5c/0x180 [ 83.444426][ T5762] alloc_slab_obj_exts+0x5c/0x180 [ 83.444451][ T5762] __memcg_slab_post_alloc_hook+0x5f0/0xdb0 [ 83.444489][ T5762] ? pidfs_register_pid_gfp+0xa6/0x1c0 [ 83.444519][ T5762] kmem_cache_alloc_noprof+0x362/0x600 [ 83.444545][ T5762] ? pidfs_register_pid_gfp+0xa6/0x1c0 [ 83.444572][ T5762] ? kmem_cache_alloc_noprof+0x151/0x600 [ 83.444599][ T5762] ? pidfs_register_pid_gfp+0xa6/0x1c0 [ 83.444632][ T5762] pidfs_register_pid_gfp+0xa6/0x1c0 [ 83.444662][ T5762] unix_stream_connect+0x272/0x10e0 [ 83.444704][ T5762] p9_fd_create_unix+0x289/0x4f0 [ 83.444734][ T5762] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 83.444772][ T5762] ? __kmalloc_cache_noprof+0x31c/0x600 [ 83.444792][ T5762] ? __kmalloc_cache_noprof+0x148/0x600 [ 83.444819][ T5762] p9_client_create+0x3e5/0xc60 [ 83.444846][ T5762] ? __pfx_p9_client_create+0x10/0x10 [ 83.444880][ T5762] v9fs_session_init+0x46/0xd40 [ 83.444900][ T5762] ? __kmalloc_cache_noprof+0x148/0x600 [ 83.444918][ T5762] ? v9fs_get_tree+0xaa/0xac0 [ 83.444940][ T5762] ? v9fs_get_tree+0xaa/0xac0 [ 83.444971][ T5762] v9fs_get_tree+0xbd/0xac0 [ 83.444993][ T5762] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 83.445018][ T5762] ? __pfx_v9fs_get_tree+0x10/0x10 [ 83.445050][ T5762] vfs_get_tree+0x92/0x2a0 [ 83.445075][ T5762] do_new_mount+0x319/0xdc0 [ 83.445107][ T5762] ? __pfx_do_new_mount+0x10/0x10 [ 83.445136][ T5762] ? ns_capable+0x84/0xe0 [ 83.445161][ T5762] ? path_mount+0x647/0x1050 [ 83.445192][ T5762] ? user_path_at+0xd4/0x160 [ 83.445216][ T5762] __se_sys_mount+0x31d/0x420 [ 83.445251][ T5762] ? __pfx___se_sys_mount+0x10/0x10 [ 83.445300][ T5762] ? __x64_sys_mount+0x20/0xc0 [ 83.445330][ T5762] do_syscall_64+0x166/0x520 [ 83.445360][ T5762] ? trace_irq_disable+0x3b/0x140 [ 83.445383][ T5762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.445402][ T5762] ? clear_bhb_loop+0x70/0xc0 [ 83.445428][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.445448][ T5762] RIP: 0033:0x7f825439e159 [ 83.445470][ T5762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.445486][ T5762] RSP: 002b:00007f8255340028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.445510][ T5762] RAX: ffffffffffffffda RBX: 00007f8254625fa0 RCX: 00007f825439e159 [ 83.445525][ T5762] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 00002000000000c0 [ 83.445538][ T5762] RBP: 00007f825443506b R08: 0000200000000280 R09: 0000000000000000 [ 83.445552][ T5762] R10: 0000000000200802 R11: 0000000000000246 R12: 0000000000000000 [ 83.445566][ T5762] R13: 00007f8254626038 R14: 00007f8254625fa0 R15: 00007fff0170f268 [ 83.445599][ T5762] [ 83.445993][ T5762] 9pnet_fd: p9_fd_create_unix (5762): problem connecting socket: ./proc: -111 [ 83.490724][ T617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.490780][ T617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.792971][ T32] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.891590][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.892623][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.892664][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.892700][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.941446][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 84.013198][ T5630] udevd[5630]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 84.089897][ T5775] FAULT_INJECTION: forcing a failure. [ 84.089897][ T5775] name failslab, interval 1, probability 0, space 0, times 0 [ 84.089929][ T5775] CPU: 0 UID: 0 PID: 5775 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 84.089949][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.089959][ T5775] Call Trace: [ 84.089967][ T5775] [ 84.089975][ T5775] dump_stack_lvl+0xe8/0x150 [ 84.090005][ T5775] should_fail_ex+0x3eb/0x540 [ 84.090038][ T5775] should_failslab+0xa8/0x100 [ 84.090060][ T5775] ? sk_prot_alloc+0x57/0x210 [ 84.090086][ T5775] kmem_cache_alloc_noprof+0x9c/0x600 [ 84.090115][ T5775] ? sk_prot_alloc+0x57/0x210 [ 84.090145][ T5775] sk_prot_alloc+0x57/0x210 [ 84.090168][ T5775] ? sk_alloc+0x27/0x390 [ 84.090194][ T5775] sk_alloc+0x3a/0x390 [ 84.090235][ T5775] kcm_create+0xfe/0x550 [ 84.090268][ T5775] __sock_create+0x4b5/0xac0 [ 84.090298][ T5775] __sys_socket+0xd6/0x1b0 [ 84.090323][ T5775] __x64_sys_socket+0x7a/0x90 [ 84.090346][ T5775] do_syscall_64+0x166/0x520 [ 84.090371][ T5775] ? trace_irq_disable+0x3b/0x140 [ 84.090392][ T5775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.090412][ T5775] ? clear_bhb_loop+0x70/0xc0 [ 84.090435][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.090454][ T5775] RIP: 0033:0x7f825439e159 [ 84.090472][ T5775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.090488][ T5775] RSP: 002b:00007f8255340028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 84.090510][ T5775] RAX: ffffffffffffffda RBX: 00007f8254625fa0 RCX: 00007f825439e159 [ 84.090524][ T5775] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 84.090535][ T5775] RBP: 00007f825443506b R08: 0000000000000000 R09: 0000000000000000 [ 84.090547][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.090559][ T5775] R13: 00007f8254626038 R14: 00007f8254625fa0 R15: 00007fff0170f268 [ 84.090590][ T5775] [ 84.806270][ T1168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.999720][ T1168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.206124][ T1168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.261059][ T5615] Bluetooth: hci0: command tx timeout [ 85.289775][ T5786] aa_policy_admin_capable: cap_mac_admin? 1 [ 85.289845][ T5786] aa_policy_admin_capable: policy locked? 0 [ 85.289896][ T5786] aa_parse_debug_params: unknown debug type 'syz0' [ 85.340830][ T5615] Bluetooth: hci2: command tx timeout [ 85.344039][ T1168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.742712][ T1168] bridge_slave_1: left allmulticast mode [ 85.742765][ T1168] bridge_slave_1: left promiscuous mode [ 85.743618][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.788403][ T1168] bridge_slave_0: left allmulticast mode [ 85.788434][ T1168] bridge_slave_0: left promiscuous mode [ 85.788824][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.266268][ T5795] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 86.328839][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.358069][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.372248][ T1168] bond0 (unregistering): Released all slaves [ 86.453638][ T5801] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.681125][ T5806] FAULT_INJECTION: forcing a failure. [ 86.681125][ T5806] name failslab, interval 1, probability 0, space 0, times 0 [ 86.681160][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz.3.16 Not tainted syzkaller #0 PREEMPT(full) [ 86.681183][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.681194][ T5806] Call Trace: [ 86.681202][ T5806] [ 86.681212][ T5806] dump_stack_lvl+0xe8/0x150 [ 86.681245][ T5806] should_fail_ex+0x3eb/0x540 [ 86.681281][ T5806] should_failslab+0xa8/0x100 [ 86.681307][ T5806] ? security_inode_alloc+0x39/0x310 [ 86.681338][ T5806] kmem_cache_alloc_noprof+0x9c/0x600 [ 86.681370][ T5806] ? __pfx_make_kgid+0x10/0x10 [ 86.681391][ T5806] ? security_inode_alloc+0x39/0x310 [ 86.681427][ T5806] security_inode_alloc+0x39/0x310 [ 86.681459][ T5806] inode_init_always_gfp+0x97e/0xd30 [ 86.681495][ T5806] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 86.681521][ T5806] alloc_inode+0x82/0x1b0 [ 86.681550][ T5806] new_inode+0x1f/0x170 [ 86.681579][ T5806] ? bdev_alloc+0x18/0x370 [ 86.681605][ T5806] bdev_alloc+0x24/0x370 [ 86.681631][ T5806] __alloc_disk_node+0x11f/0x600 [ 86.681658][ T5806] __blk_alloc_disk+0x105/0x1d0 [ 86.681680][ T5806] ? __pfx___blk_alloc_disk+0x10/0x10 [ 86.681740][ T5806] ? __raw_spin_lock_init+0x45/0x100 [ 86.681773][ T5806] dm_create+0x476/0xf70 [ 86.681808][ T5806] dev_create+0x1f7/0x400 [ 86.681831][ T5806] ? __pfx_dev_create+0x10/0x10 [ 86.681853][ T5806] ? __might_fault+0xaf/0x130 [ 86.681888][ T5806] dm_ctl_ioctl+0x9ec/0xe10 [ 86.681918][ T5806] ? __pfx_dev_create+0x10/0x10 [ 86.681937][ T5806] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 86.681991][ T5806] ? __fget_files+0x2a/0x420 [ 86.682015][ T5806] ? bpf_lsm_file_ioctl+0x9/0x20 [ 86.682039][ T5806] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 86.682057][ T5806] __se_sys_ioctl+0xfc/0x170 [ 86.682084][ T5806] do_syscall_64+0x166/0x520 [ 86.682114][ T5806] ? trace_irq_disable+0x3b/0x140 [ 86.682136][ T5806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.682157][ T5806] ? clear_bhb_loop+0x70/0xc0 [ 86.682190][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.682209][ T5806] RIP: 0033:0x7f9ac159e159 [ 86.682230][ T5806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.682246][ T5806] RSP: 002b:00007f9ac23d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.682269][ T5806] RAX: ffffffffffffffda RBX: 00007f9ac1825fa0 RCX: 00007f9ac159e159 [ 86.682284][ T5806] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 86.682298][ T5806] RBP: 00007f9ac163506b R08: 0000000000000000 R09: 0000000000000000 [ 86.682310][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.682323][ T5806] R13: 00007f9ac1826038 R14: 00007f9ac1825fa0 R15: 00007ffdf61a88b8 [ 86.682356][ T5806] [ 86.719724][ T1168] hsr_slave_0: left promiscuous mode [ 86.785851][ T1168] hsr_slave_1: left promiscuous mode [ 86.789807][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.789858][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.806111][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.806133][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.908082][ T1168] veth1_macvtap: left promiscuous mode [ 86.908138][ T1168] veth0_macvtap: left promiscuous mode [ 86.908321][ T1168] veth1_vlan: left promiscuous mode [ 86.908407][ T1168] veth0_vlan: left promiscuous mode [ 86.909235][ T5801] md/raid:md0: not clean -- starting background reconstruction [ 87.082097][ T5801] md/raid:md0: not enough operational devices (2/2 failed) [ 87.205429][ T198] cfg80211: failed to load regulatory.db [ 87.445045][ T5801] md/raid:md0: failed to run raid set. [ 87.445064][ T5801] md: pers->run() failed ... [ 87.719417][ T5821] FAULT_INJECTION: forcing a failure. [ 87.719417][ T5821] name failslab, interval 1, probability 0, space 0, times 0 [ 87.719455][ T5821] CPU: 1 UID: 0 PID: 5821 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 87.719477][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.719489][ T5821] Call Trace: [ 87.719497][ T5821] [ 87.719506][ T5821] dump_stack_lvl+0xe8/0x150 [ 87.719540][ T5821] should_fail_ex+0x3eb/0x540 [ 87.719576][ T5821] should_failslab+0xa8/0x100 [ 87.719604][ T5821] __kvmalloc_node_noprof+0x171/0x820 [ 87.719635][ T5821] ? __se_sys_add_key+0x289/0x420 [ 87.719656][ T5821] ? __se_sys_add_key+0x289/0x420 [ 87.719691][ T5821] __se_sys_add_key+0x289/0x420 [ 87.719716][ T5821] ? __pfx___se_sys_add_key+0x10/0x10 [ 87.719749][ T5821] ? __x64_sys_add_key+0x20/0xc0 [ 87.719773][ T5821] do_syscall_64+0x166/0x520 [ 87.719803][ T5821] ? trace_irq_disable+0x3b/0x140 [ 87.719827][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.719847][ T5821] ? clear_bhb_loop+0x70/0xc0 [ 87.719873][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.719892][ T5821] RIP: 0033:0x7f825439e159 [ 87.719912][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.719929][ T5821] RSP: 002b:00007f8255340028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 87.719962][ T5821] RAX: ffffffffffffffda RBX: 00007f8254625fa0 RCX: 00007f825439e159 [ 87.719976][ T5821] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 00002000000000c0 [ 87.719989][ T5821] RBP: 00007f825443506b R08: 000000001faa3f0d R09: 0000000000000000 [ 87.720003][ T5821] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 87.720015][ T5821] R13: 00007f8254626038 R14: 00007f8254625fa0 R15: 00007fff0170f268 [ 87.720046][ T5821] [ 87.771865][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 87.862112][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 88.160901][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 88.748558][ T1168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.894544][ T1168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.011424][ T1168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.040208][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 89.083877][ T1168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.408935][ T1168] bridge_slave_1: left allmulticast mode [ 89.408965][ T1168] bridge_slave_1: left promiscuous mode [ 89.409208][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.436438][ T1168] bridge_slave_0: left allmulticast mode [ 89.436466][ T1168] bridge_slave_0: left promiscuous mode [ 89.439533][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.882786][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.908136][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.922789][ T1168] bond0 (unregistering): Released all slaves [ 89.998026][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 90.061997][ T5861] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 90.069146][ T1168] hsr_slave_0: left promiscuous mode [ 90.082358][ T1168] hsr_slave_1: left promiscuous mode [ 90.083489][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.083510][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.105008][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.120439][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.137191][ T1168] veth1_macvtap: left promiscuous mode [ 90.137230][ T1168] veth0_macvtap: left promiscuous mode [ 90.137348][ T1168] veth1_vlan: left promiscuous mode [ 90.137420][ T1168] veth0_vlan: left promiscuous mode [ 90.441353][ T5873] Zero length message leads to an empty skb [ 90.655024][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 90.677406][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 91.579797][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.671311][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 92.854140][ T5919] syzkaller1: entered promiscuous mode [ 92.854166][ T5919] syzkaller1: entered allmulticast mode [ 93.699160][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 94.650306][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 95.189803][ T5975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.206898][ T5976] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.252092][ T5975] md: could not open device unknown-block(1,0). [ 95.315685][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 95.400260][ T5975] md/raid:md0: not clean -- starting background reconstruction [ 95.403252][ T5975] md/raid:md0: device ram0 operational as raid disk 0 [ 95.448531][ T5975] md/raid:md0: raid level 5 active with 1 out of 1 devices, algorithm 0 [ 95.449195][ T5975] --------- ** replaying previous printk message ** [ 95.449195][ T5975] ------------[ cut here ]------------ [ 95.449206][ T5975] UBSAN: shift-out-of-bounds in ./include/linux/log2.h:57:13 [ 95.449224][ T5975] shift exponent 64 is too large for 64-bit type 'unsigned long' [ 95.449242][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.3.30 Not tainted syzkaller #0 PREEMPT(full) [ 95.449264][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.449276][ T5975] Call Trace: [ 95.449285][ T5975] [ 95.449294][ T5975] dump_stack_lvl+0xe8/0x150 [ 95.449328][ T5975] ubsan_epilogue+0xa/0x30 [ 95.449358][ T5975] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 95.449387][ T5975] ? up_write+0x19d/0x4a0 [ 95.449439][ T5975] raid5_set_limits+0x538/0x660 [ 95.449471][ T5975] ? kernfs_put+0x7b9/0x820 [ 95.449501][ T5975] ? __pfx_raid5_set_limits+0x10/0x10 [ 95.449574][ T5975] raid5_run+0x1e86/0x2560 [ 95.449602][ T5975] ? get_pers+0x22b/0x2e0 [ 95.449653][ T5975] md_run+0xc3d/0x1cd0 [ 95.449680][ T5975] ? __lock_acquire+0x747/0x2de0 [ 95.449722][ T5975] ? __pfx_md_run+0x10/0x10 [ 95.449750][ T5975] ? set_disk_ro+0x1da/0x220 [ 95.449769][ T5975] ? __pfx_set_disk_ro+0x10/0x10 [ 95.449802][ T5975] do_md_run+0x35/0x720 [ 95.449827][ T5975] array_state_store+0x958/0xe90 [ 95.449867][ T5975] md_attr_store+0x3b7/0x640 [ 95.449905][ T5975] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.449924][ T5975] kernfs_fop_write_iter+0x3a4/0x540 [ 95.449960][ T5975] vfs_write+0x612/0xba0 [ 95.449993][ T5975] ? __pfx_vfs_write+0x10/0x10 [ 95.450020][ T5975] ? __fget_files+0x3a2/0x420 [ 95.450039][ T5975] ? __fget_files+0x2a/0x420 [ 95.450065][ T5975] ? fdget+0x1ac/0x250 [ 95.450094][ T5975] ksys_write+0x150/0x270 [ 95.450119][ T5975] ? __pfx_ksys_write+0x10/0x10 [ 95.450156][ T5975] do_syscall_64+0x166/0x520 [ 95.450185][ T5975] ? trace_irq_disable+0x3b/0x140 [ 95.450209][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.450230][ T5975] ? clear_bhb_loop+0x70/0xc0 [ 95.450256][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.450276][ T5975] RIP: 0033:0x7f9ac159e159 [ 95.450296][ T5975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.450313][ T5975] RSP: 002b:00007f9ac23d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.450336][ T5975] RAX: ffffffffffffffda RBX: 00007f9ac1825fa0 RCX: 00007f9ac159e159 [ 95.450350][ T5975] RDX: 0000000000000006 RSI: 0000200000000500 RDI: 0000000000000007 [ 95.450362][ T5975] RBP: 00007f9ac163506b R08: 0000000000000000 R09: 0000000000000000 [ 95.450373][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.450385][ T5975] R13: 00007f9ac1826038 R14: 00007f9ac1825fa0 R15: 00007ffdf61a88b8 [ 95.450420][ T5975] [ 95.460783][ T5975] ---[ end trace ]--- [ 95.460799][ T5975] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 95.746828][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.3.30 Not tainted syzkaller #0 PREEMPT(full) [ 95.755975][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.766063][ T5975] Call Trace: [ 95.769460][ T5975] [ 95.772429][ T5975] vpanic+0x26f/0x710 [ 95.776465][ T5975] panic+0xc5/0xd0 [ 95.780311][ T5975] ? __pfx_panic+0x10/0x10 [ 95.784765][ T5975] ? __pfx__printk+0x10/0x10 [ 95.789410][ T5975] check_panic_on_warn+0x89/0xb0 [ 95.794389][ T5975] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 95.801013][ T5975] ? up_write+0x19d/0x4a0 [ 95.805401][ T5975] raid5_set_limits+0x538/0x660 [ 95.810294][ T5975] ? kernfs_put+0x7b9/0x820 [ 95.814837][ T5975] ? __pfx_raid5_set_limits+0x10/0x10 [ 95.820290][ T5975] raid5_run+0x1e86/0x2560 [ 95.824749][ T5975] ? get_pers+0x22b/0x2e0 [ 95.829217][ T5975] md_run+0xc3d/0x1cd0 [ 95.833324][ T5975] ? __lock_acquire+0x747/0x2de0 [ 95.838315][ T5975] ? __pfx_md_run+0x10/0x10 [ 95.842864][ T5975] ? set_disk_ro+0x1da/0x220 [ 95.847487][ T5975] ? __pfx_set_disk_ro+0x10/0x10 [ 95.852472][ T5975] do_md_run+0x35/0x720 [ 95.856683][ T5975] array_state_store+0x958/0xe90 [ 95.861686][ T5975] md_attr_store+0x3b7/0x640 [ 95.866324][ T5975] ? __pfx_sysfs_kf_write+0x10/0x10 [ 95.871536][ T5975] kernfs_fop_write_iter+0x3a4/0x540 [ 95.876872][ T5975] vfs_write+0x612/0xba0 [ 95.881169][ T5975] ? __pfx_vfs_write+0x10/0x10 [ 95.885946][ T5975] ? __fget_files+0x3a2/0x420 [ 95.890628][ T5975] ? __fget_files+0x2a/0x420 [ 95.895231][ T5975] ? fdget+0x1ac/0x250 [ 95.899315][ T5975] ksys_write+0x150/0x270 [ 95.903653][ T5975] ? __pfx_ksys_write+0x10/0x10 [ 95.908527][ T5975] do_syscall_64+0x166/0x520 [ 95.913133][ T5975] ? trace_irq_disable+0x3b/0x140 [ 95.918172][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.924286][ T5975] ? clear_bhb_loop+0x70/0xc0 [ 95.928995][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.934901][ T5975] RIP: 0033:0x7f9ac159e159 [ 95.939382][ T5975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.959009][ T5975] RSP: 002b:00007f9ac23d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 95.967429][ T5975] RAX: ffffffffffffffda RBX: 00007f9ac1825fa0 RCX: 00007f9ac159e159 [ 95.975407][ T5975] RDX: 0000000000000006 RSI: 0000200000000500 RDI: 0000000000000007 [ 95.983385][ T5975] RBP: 00007f9ac163506b R08: 0000000000000000 R09: 0000000000000000 [ 95.991380][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.999357][ T5975] R13: 00007f9ac1826038 R14: 00007f9ac1825fa0 R15: 00007ffdf61a88b8 [ 96.007349][ T5975] [ 96.010525][ T5975] Kernel Offset: disabled [ 96.014880][ T5975] Rebooting in 86400 seconds..