last executing test programs: 24m57.851048087s ago: executing program 3 (id=504): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x481, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="5c7820d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) 24m57.576807113s ago: executing program 3 (id=505): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x0, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_settime$auto(0x0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x5d, 0x2, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x6, 0x8, 0x5, 0x8]}) mmap$auto(0x1a, 0x4, 0x4000000000df, 0x12, 0x401, 0x200300000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x5408, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000000c0)={@siginfo_0_0={0x414, 0xbfb, 0x200, @_rt={0x0, 0x0, @sival_ptr=&(0x7f0000000500)="cfc2ab2fce502b48670b1a336235797773cacebf1555a08678c2f305793c849bb4dff05e114f045c4df9e558b1183fe9ec4c7c87a03df1a841ec292312430f505937bbe248fd5a81e98b4b010b526cc275f1a6d229491858bf4e43940980309b23fdf7a45f5b215dd67c52acff19"}}}, 0x3, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) 24m56.278355738s ago: executing program 3 (id=506): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000200)={0x20071026}, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d02, 0x10, 0x1}]}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r2, 0x0, 0x1ff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x300, 0x703d28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc000085) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/writes_7\x00', 0x45e880, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 24m54.548139747s ago: executing program 3 (id=510): open(&(0x7f0000000800)='./file0\x00', 0x3cfb40, 0x39642ae5d3121abb) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='r', @ANYBLOB="1e"], 0x1ac}}, 0x0) r1 = memfd_create$auto(&(0x7f00000001c0)='\xc6\x00', 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_STATION(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xb8, r2, 0xb0afd18955e3d961, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [@typed={0x4, 0x42}, @typed={0x82, 0xb6, 0x0, 0x0, @binary="2a9d97b07f3be18e3144f6c6880966b98bbffda1343599243235c528f37f113dc3f57fb23c1d995bf7ef9aa6800cb9d01eb487b07127521857cf0380f692cdab0236b3a534f5d342ba5f6105216b043492141ac8a3ec4efbeb8ac8df935e440b4c876044b54c7955522f3390232f5eab97dd3800cc44447bdb2160039c3b"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e21}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48485}, 0x20000000) mmap$auto(0x0, 0x4020009, 0x40000000df, 0xeb1, 0x401, 0x8000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x1, 0x0) 24m54.086872561s ago: executing program 3 (id=511): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pwritev2$auto(0xffffffffffffffff, 0x0, 0x4, 0x7, 0x8, 0xffffffff) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) ppoll$auto(&(0x7f0000000040)={r0, 0x9, 0xfffe}, 0x7, &(0x7f0000000080)={0x2, 0x9}, &(0x7f00000000c0)={0x4}, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto(r2, 0x29, 0x40, 0x0, 0x110) r4 = socket(0x2a, 0x2, 0x800009) mmap$auto(0x0, 0x3, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000", @ANYRESDEC=r4, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES16], 0xd4}, 0x1, 0x0, 0x0, 0x24081050}, 0x2000c001) clone$auto(0x20003b4a, 0x2, 0x0, 0x0, 0x4000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram0/queue/nomerges\x00', 0xe3102, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendto$auto(r4, 0x0, 0x402, 0x0, &(0x7f0000000700)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x1c) close_range$auto(r2, 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x92) 24m53.449104595s ago: executing program 3 (id=513): open(0x0, 0x8c81, 0xd1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8a175d4554799439, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x98) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 24m38.212715951s ago: executing program 32 (id=513): open(0x0, 0x8c81, 0xd1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8a175d4554799439, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x0) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x98) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2m54.690324568s ago: executing program 2 (id=4237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, 0x0, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 2m53.651255999s ago: executing program 2 (id=4240): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000580), 0x8001, 0x0) read$auto_sco_debugfs_fops_(r1, &(0x7f0000000140)=""/211, 0xd3) madvise$auto(0x0, 0x200204, 0x15) r2 = socket(0xa, 0x5, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x5, 0x2020006, 0x1, 0x200ebd, 0xfffffffffffffffa, 0x8010) madvise$auto(0x0, 0xffffffffffff0005, 0x17) getsockopt$auto_SO_SNDLOWAT(r4, 0xd, 0x13, &(0x7f00000003c0)='*\x1d\xa9][\x00', &(0x7f0000000200)=0x2b) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0x12, r4, 0x8000) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) sysfs$auto(0x40004002, 0xa, 0xffb) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="08222dbd7000fddbdf25050089be0262677ec5d95b0000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000100)={{0x4, 0xee00, 0x0, 0x0, 0x8, 0x40004, 0x75}, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0xd, 0x5, 0x8, 0x3e9, 0x0, 0x1, 0xf2, 0x6, 0xfff, @raw=0xc81b, @raw=0x8}) bpf$auto(0x8, &(0x7f0000000480)=@link_create={@prog_fd=r3, @target_ifindex, 0x1, 0x1, @netfilter={0x0, 0x0, 0x10000, 0xeee0}}, 0x8d) epoll_ctl$auto(r6, 0x5, r4, &(0x7f0000000540)={0x7ff, 0xf}) statx$auto(r4, &(0x7f0000000180)='./file0\x00', 0x1, 0x2, &(0x7f0000000600)={0x3, 0x6, 0x100000000, 0x8, 0xee01, 0x0, 0x6, 0x4, 0xa45f, 0x1, 0x1, 0x7, {0x9, 0x1ff}, {0x2, 0x1}, {0x7, 0x24000000}, {0x100, 0x3}, 0x10, 0x81, 0x8001, 0x0, 0x7, 0x8000, 0xffffffff, 0x0, 0xfffffffd, 0x6, 0x7fff, 0x8, [0x5, 0xed6, 0x6, 0x5, 0x9, 0x2, 0x4, 0x4, 0x6]}) write$auto(r1, 0x0, 0x7fff) 2m51.953145926s ago: executing program 2 (id=4246): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8922, 0x24) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x109000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8b35, 0x91) socket(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r4, &(0x7f0000000180)='0l80211\x00', 0x1) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/options/fields\x00', 0x2, 0x0) mmap$auto(0x7, 0x10003, 0xdf, 0x100000000000eb1, 0x40000000000a5, 0x8000) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) newfstatat$auto(r5, 0x0, 0x0, 0xfffff29f) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r3, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 2m50.910513802s ago: executing program 2 (id=4252): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram1\x00', 0x14fa00, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_gettime$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r2, 0x7439) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) mkdir$auto(0x0, 0x353) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) 2m49.497749635s ago: executing program 2 (id=4258): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) socket(0x2, 0x80002, 0x73) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) setresgid$auto(0x0, 0x800000a0, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x0, 0x32, 0xfff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) fsconfig$auto(0xffffffffffffffff, 0x2, &(0x7f0000000080)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x9c\xbd\xba#_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2:sx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\x00\x00x\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2P\x8a\xb1Vh\x94$\xe9\xea\x0f!G\xb9\xb3\x11\xe1\xae\tg\xc2?8\x8e8\xce\xbf\x01W\xbc\x8b\xab\xa9\x91j\xcd\xb9`F\x02\'\x05\xb1d\xff\xedB\xa5W(q\xfa\xad\x9be\xbfX\x14\xb9\xf8\x1a\xe9\xed\xe6\x1a', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000080), 0x6b) 2m48.719505876s ago: executing program 2 (id=4260): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r0, 0x7, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000080)=@link_detach={r0}, 0xa) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = memfd_create$auto(0x0, 0x7) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r3, 0x64c6, 0x1e2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKTRACESTOP(r2, 0x1275, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) close_range$auto(0x2, 0x8, 0x0) 2m40.670594171s ago: executing program 4 (id=4294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=0x0}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 2m38.824247018s ago: executing program 4 (id=4300): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TUNSETSNDBUF2(r0, 0x400454d4, &(0x7f0000000040)=0x40) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4a8000, 0x0) (async) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x55c35ef, 0x2f, 0x3, 0x62, 0x28000, 0xfffffffffffffffe, 0x0, 0x800, 0x13, 0x8, 0x5, 0x40, 0xf, 0x1, 0x21fd, 0x0, 0xe7, 0x1000, 0x2, 0xffffffffffffffff, 0x2d8, 0x5, 0x7, 0x2, 0x7, 0x1, 0x4, 0x4, 0xe, 0x7, 0x8, [0x61, 0xd0e, 0x8, 0x5, 0x3ff, 0x7, 0x10000, 0x1ff, 0x3, 0x121980a3, 0x4, 0x8001, 0x5, 0x40, 0x7, 0xb1a3, 0x80000000, 0x5, 0x2a6, 0x100000000, 0x7, 0xfffffffffffffff9, 0x4, 0x3, 0x0, 0x6, 0xe43, 0x5, 0x9c8, 0x4, 0x2e1, 0x100, 0x1, 0xfffffffffffff538, 0x2, 0x8, 0x8, 0x100000000, 0x7f, 0xfffffffffffffff1, 0x8, 0x0, 0x2]}, 0x9, 0xcc) io_pgetevents$auto(0x8, 0xfffffffffffffffb, 0x3ff, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}) (async) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10002}, 0x6) (async) unshare$auto(0x40000080) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) (async) dup2$auto(0x5, 0x4) 2m37.475295978s ago: executing program 4 (id=4305): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000) r1 = io_uring_setup$auto(0x6, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000001740)={0x0, 0xf00, &(0x7f0000001700)={&(0x7f0000000a40)={0x3dc, r3, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3c4, 0x1, 0x0, 0x1, [@nested={0x3bf, 0x139, 0x0, 0x1, [@nested={0x35d, 0xeb, 0x0, 0x1, [@nested={0x26c, 0xba, 0x0, 0x1, [@nested={0x262, 0xf8, 0x0, 0x1, [@generic="42b0014a421c0a91e897befa7ad7074ad00bbfd3429572bd6a243efa7f7a83fdd037c790b9fcf2ab37d2c5bad60b6ba3adce74ae62e2cc95d2295c012fd24f97e61681b2478ba407f3802369fd6fedb1e2eb879e10222dc6c2f96bb53c80bedc0552cea952be38f64e6da511927dd3e84d1fc9cd7b56a361b5069bd08eedc9f0d671fe16818f0315daa2b43ad2f556f70803d54b7bc0a894dd07c06282da692b8d14cd2bae831bdbc6dc1b31282dfadcc488e114e1ebee9dbae30663239df2d2506c9013206fc1f3e0", @generic, @generic="914b967bd511ffc78c5b152223dd3a41fde5ff590301555045ea10e0f95961d86844b3b5c0d9eb2b82728fd4faa45a99d98981aa4ffdb225007e149d654626283f97f1c9a9e248c8b045023cea3c58580405f9464b86a5b79af1e504c11c3e5d66044cb36f61ff1ab28919c14607c77a9ac18f7509829d603ee3b0bd5f45f0e6bc08567f94e693b2853af61e5492be344ec17ea93c655dc6f5abfd4c9c21c10608a485c682859741087c0b776a6bae5757e72ccd2ac3e59ca4328bcedc7e2a5b0063ae1c31e5090326108bfd43b94cbc98fe7a6ced4a5619c00b37dd3985178e16", @typed={0xc, 0x14c, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x84}, @generic="8ece5af5bf9e1e4cf25513b9e8c5170f2f3c68e061e7b07955f5eb96d8f96c09279d04bcba51a3796f7f265a539c36b85cca7b6f0fc7f712cf074947c97f0463f494af1ab61ad1b8d3f3d1353e9d8ebe02d241184d970af78e062133620724aa5fe1377df478d2aecd114364fe00d3b133870a83bd73d7b0bb0647dfbc5b43852ca2989edf34c21ba8ee0710b9296c09a1c1b1f0259a1df9f1982c9a", @typed={0x8, 0x1, 0x0, 0x0, @u32=0xd797}]}, @nested={0x4, 0x158}]}, @generic="29312edbfabbfd8604808de3f8611fed169f9ae387ff40829dd84a0b2e7532c1b20f5d5d0b9941d386c54b6ab0f1c9ed5aabfd11753eef70dbd7d054c2660e3a34d6212098802ebfab98ac2136182418cd3eb6690ccaabfe75f2a53b1a1aeb95761404700e96c9c464cc31b3c789330a9313d208a5a9ad2c1b6c40633048067dad613688c3de88b3a826721ccd42b389710d7335053003acaa5f61e1b845ddedd42954bd9f5d485f81ef152f50511a36b3830a79a06a9c59e32df1859e0ffea0cdd89189720b161fac140a740ac323f3dc777f992acc939c88ce16f07113949b655ecd6dce5d1f8aefd1ee968a"]}, @generic="f50687b2d1d228b299978d0530b0ee260ce9bfb88ec4664681ea603b6a1d256afea55449170e0feac5e9217786b2af212a592a501939cbe610a7863485b3ea1c1ef28bf663e663a5e3f3d4cd0f1dd7b4d449ad00769c", @generic="5ecb8698ec"]}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x10000, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={"96df05d64c6a90c2bfcec01a969e7719543c4b882f8aa64d9e913a97028749d5", 0x400, 0x9, 0x7ff, 0x700d5237, 0x5, 0x0}) move_pages$auto(r4, 0x7, &(0x7f0000000180)=&(0x7f0000000100)="d3b62c3f885d4852add09304ccde4297e84f0fa0fa6682611a6af9944cb5e61192a17ecca877e33a59b8373bf8f94e697b3ded7aa468362f7e0bb56f1515d3b5b809cf697b72b963", &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x681d, 0x800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x40900, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r5) ioprio_set$auto(0x3, 0x0, 0x4b34) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=@link_create={@prog_fd, @target_ifindex, 0x7, 0xadad, @bpf_attr_link_create_4_1={0x5, 0x8}}, 0x3) sendmsg$auto_TIPC_NL_MEDIA_GET(r5, 0x0, 0x10) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) shmctl$auto_IPC_INFO(0x1, 0x3, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x9}, 0xfffffff0, 0x7, 0x7ff, 0xa00, @raw=0x2, @raw=0x81, 0x5, 0x0, 0x0, &(0x7f0000000400)}) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 2m36.274959643s ago: executing program 4 (id=4307): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) listen$auto(r0, 0xfffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_REG(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000844}, 0x4008810) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)={0x2, 0x0, 0x8000008, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0, [{0x81, 0x4, 0x2}, {0xbede, 0xfffffffe, 0xffff}]}) 2m35.802835298s ago: executing program 4 (id=4312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=0x0}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 2m33.043127662s ago: executing program 33 (id=4260): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r0, 0x7, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000080)=@link_detach={r0}, 0xa) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = memfd_create$auto(0x0, 0x7) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r3, 0x64c6, 0x1e2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BLKTRACESTOP(r2, 0x1275, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) close_range$auto(0x2, 0x8, 0x0) 2m32.023007786s ago: executing program 4 (id=4317): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ppoll$auto(&(0x7f0000000040)={r2, 0x200, 0xc00}, 0xc6bc, &(0x7f0000000080)={0x4, 0x1}, &(0x7f0000000140)={0x9}, 0x8) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, &(0x7f0000000180)="170c6d88b286f35d4d51e3e0e6a11e8f6d3792c0e3519b6832c5852cb73acaf8cdfca077aba790d10927eda4c20109def67a01f40d7a22fdb8c82cb4b30f4ae4892ebece065514e841e7676be745381aa2f31a86e0a9510c8d44be4edaee2d21") getdents64$auto(r3, 0x0, 0x40002) epoll_create1$auto(0x3) ioctl$auto(0x3, 0x5411, 0x7f) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) getsockopt$auto(r0, 0x29, 0x3, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)="e7696e5891a9bdcbf2a814c2b1c2da6a4642e705b349586bac2c4769426eeb89d0807a832cc22c", 0x27) 2m16.64632092s ago: executing program 34 (id=4317): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ppoll$auto(&(0x7f0000000040)={r2, 0x200, 0xc00}, 0xc6bc, &(0x7f0000000080)={0x4, 0x1}, &(0x7f0000000140)={0x9}, 0x8) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, &(0x7f0000000180)="170c6d88b286f35d4d51e3e0e6a11e8f6d3792c0e3519b6832c5852cb73acaf8cdfca077aba790d10927eda4c20109def67a01f40d7a22fdb8c82cb4b30f4ae4892ebece065514e841e7676be745381aa2f31a86e0a9510c8d44be4edaee2d21") getdents64$auto(r3, 0x0, 0x40002) epoll_create1$auto(0x3) ioctl$auto(0x3, 0x5411, 0x7f) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) getsockopt$auto(r0, 0x29, 0x3, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)="e7696e5891a9bdcbf2a814c2b1c2da6a4642e705b349586bac2c4769426eeb89d0807a832cc22c", 0x27) 2m8.975057092s ago: executing program 0 (id=4376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 2m7.765549045s ago: executing program 0 (id=4379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f23"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) read$auto_hwsim_fops_rx_rssi_(r6, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 2m6.558053049s ago: executing program 0 (id=4381): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2, 0x0) ioctl$auto_TIOCSTI(r0, 0x5412, &(0x7f0000000100)="ffffb80e15") syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x72f622, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=r4, @ANYBLOB="01022cbd7000741939d255a9d2110000e40f0000"], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) pread64$auto(r2, 0x0, 0x10001, 0x830) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/hw_queues\x00', 0x0, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/rq_affinity\x00', 0x10b042, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r7, 0x40044590, &(0x7f0000000000)=0x2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x5}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4805}, 0x2000c000) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, "0ac570c02249fb649bf5190699046213d43a532cc63ca921693bef3bcd1439c475c8e9631a4fe261a6751827e8a94cdaeec8d846ae6c3efc"}, 0x4c}, 0x1, 0x0, 0x0, 0x4000041}, 0x850) write$auto(r1, 0x0, 0xb) 2m6.318399849s ago: executing program 0 (id=4383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed42"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 2m5.325295393s ago: executing program 0 (id=4385): socket(0x2, 0xa, 0x1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x109100, 0xebff) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000040)={0x2143, 0xffffffffffffffff, @start={0x4, 0xd7, "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", "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"}, [0xfc, 0x4, 0x10001, 0x8, 0x7, 0x7, 0xff, 0x7f39, 0x9, 0x2e, 0x0, 0x33, 0x6, 0x7, 0x2, 0x3, 0x400, 0x8, 0x5, 0x0, 0xd667, 0x401, 0x8, 0x7f, 0x8, 0x80, 0x100000000000000, 0x5, 0x10000, 0x8, 0x401, 0x8, 0x1, 0x8, 0x4, 0x1000, 0x5, 0x8c, 0xe74, 0xf, 0xe, 0xc1, 0x2db2, 0x5, 0xb5a, 0xb6, 0x2, 0x7, 0xf, 0x8, 0x60eaa63, 0x4, 0x7f, 0xa2, 0x2, 0x100000000, 0x9, 0xa8, 0x7, 0x8, 0x0, 0x3, 0x80, 0x2]}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup$auto(0x86, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r3, 0xc0205647, r2) close_range$auto(0x2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r2) r4 = gettid() kill$auto(r4, 0x11) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, 0x0, 0xc800) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vlan0\x00'}) 2m3.950497439s ago: executing program 0 (id=4388): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r1) sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ffa727bd7000fedbdf250814000005000280f1000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) 1m49.105179242s ago: executing program 5 (id=4428): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyz3\x00', 0x179283, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r1 = prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, 0xffffffffffffffff, 0x6, 0x400) ioctl$auto_FS_IOC_GETFSLABEL2(r1, 0x81009431, &(0x7f00000001c0)="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") mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x3b) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) socket(0x23, 0x80805, 0x0) connect$auto(0x3, 0xfffffffffffffffe, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8600, 0xe6) mmap$auto(0xfffffffffffffffa, 0x6bcb, 0xdf, 0xebe, 0xffffffffffffffff, 0x4) socketpair$auto(0x1e, 0x6, 0x8, 0x0) r3 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x40854) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0x10, &(0x7f0000000140)={@buf=&(0x7f0000000380)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f00692cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x7, 0xffffffffffffff01}, 0x2) getsockopt$auto(r3, 0x11a, 0xfffffffa, 0x0, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto_snapshot_fops_user(r1, &(0x7f00000000c0)=""/57, 0x39) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r4, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/5/type\x00', 0x2400, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x40000000c07) 1m48.54622195s ago: executing program 35 (id=4388): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r1) sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="ffa727bd7000fedbdf250814000005000280f1000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) 1m47.696826694s ago: executing program 5 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed42"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 1m44.98467241s ago: executing program 5 (id=4436): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0xfb4b, r0) 1m44.582445859s ago: executing program 5 (id=4438): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x23, 0x80805, 0x0) setresuid$auto(0x0, 0x7, 0x8080) io_uring_setup$auto(0x1, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r2, 0x113, 0x1, 0x0, 0x81) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x2, 0x200000000000, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x3ff, 0x0, 0xf, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0xfffffffffffffffe, 0x24, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0xffffffffffffffff, 0x9, 0x20000000000002, 0x1, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1ff, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 1m43.978849268s ago: executing program 5 (id=4440): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x11, 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15e}, 0x6, 0x8, 0x5) pwritev$auto(r0, &(0x7f0000000040)={0x0, 0x1}, 0x9, 0x3, 0xd3b8) r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x3, 0xfdd) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev$auto(r3, &(0x7f0000000380)={&(0x7f00000002c0)="ffaf25e5", 0xe0d}, 0x8) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) mprotect$auto(0x200000000000, 0x806124, 0x8) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x2}, 0x0) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 1m41.555346144s ago: executing program 5 (id=4446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) 1m26.015300494s ago: executing program 36 (id=4446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) 54.303459691s ago: executing program 8 (id=4570): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyz3\x00', 0x179283, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, 0xffffffffffffffff, 0x6, 0x400) ioctl$auto_FS_IOC_GETFSLABEL2(r2, 0x81009431, &(0x7f00000001c0)="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") mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x3b) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) socket(0x23, 0x80805, 0x0) connect$auto(0x3, 0xfffffffffffffffe, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8600, 0xe6) mmap$auto(0xfffffffffffffffa, 0x6bcb, 0xdf, 0xebe, r1, 0x4) socketpair$auto(0x1e, 0x6, 0x8, 0x0) r4 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x40854) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0x10, &(0x7f0000000140)={@buf=&(0x7f0000000380)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f00692cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x7, 0xffffffffffffff01}, 0x2) getsockopt$auto(r4, 0x11a, 0xfffffffa, 0x0, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto_snapshot_fops_user(r2, &(0x7f00000000c0)=""/57, 0x39) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/5/type\x00', 0x2400, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x40000000c07) 53.546529313s ago: executing program 8 (id=4573): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) socket$auto(0x80000000, 0x497e, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x66}, 0x3) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) write$auto(r0, 0x0, 0x10007c) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x11b5f095) socket$nl_generic(0x10, 0x3, 0x10) 52.53964645s ago: executing program 8 (id=4576): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x0, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r0) write$auto_uprobe_events_ops_trace_uprobe(r0, &(0x7f0000000100)="703a3a7c5a0ced8889747f23d3b966c5c524faab393e0e36946a3bfad9d49bd50200000000000000007f4fd3acaebef263cf1a25fe32b1218ea9a4071529e722b83c6689f08b5e46d770c18af04f755695a24e5f970054152ecc3011182a85c6d03c9a047164158947bf2295e2a85665dfbcf2e0c33dd75329e8341995f57f7517c6fb51fea56a2562a588193a2a16a64525d3f97de468ce9ea132efcc391f6fe09676c91e000067d611e105bf27f0a0bdb713d7c2b857dba0d24bcf39e0d800", 0xc0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10801) (async) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/mem\x00', 0x401, 0x0) (rerun: 64) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) clone3$auto(0x0, 0x40) (async, rerun: 32) r3 = socket(0xa, 0x5, 0x0) (async, rerun: 32) setfsuid$auto(0xee01) (async) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x200200, 0x0) read$auto(0x3, 0x0, 0x8080) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r3, 0x0, 0x8001) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x801, 0x106) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r5) (rerun: 32) 51.427440951s ago: executing program 8 (id=4578): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae8a, &(0x7f00000000c0)={0xdd}) (fail_nth: 8) 49.423458399s ago: executing program 8 (id=4584): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x401) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x17, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x6, 0x3fe, 0x3, 0x2, 0xffffffff7ffffffb, 0x800a, 0x4, 0x200000100107}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x5, 0x84) getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 48.664911519s ago: executing program 8 (id=4586): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ppoll$auto(&(0x7f0000000040)={r2, 0x200, 0xc00}, 0xc6bc, &(0x7f0000000080)={0x4, 0x1}, &(0x7f0000000140)={0x9}, 0x8) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, &(0x7f0000000180)="170c6d88b286f35d4d51e3e0e6a11e8f6d3792c0e3519b6832c5852cb73acaf8cdfca077aba790d10927eda4c20109def67a01f40d7a22fdb8c82cb4b30f4ae4892ebece065514e841e7676be745381aa2f31a86e0a9510c8d44be4edaee2d21") getdents64$auto(r3, 0x0, 0x40002) epoll_create1$auto(0x3) ioctl$auto(0x3, 0x890b, 0x7f) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) getsockopt$auto(r0, 0x29, 0x3, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)="e7696e5891a9bdcbf2a814c2b1c2da6a4642e705b349586bac2c4769426eeb89d0807a832cc22c", 0x27) 33.32909112s ago: executing program 37 (id=4586): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ppoll$auto(&(0x7f0000000040)={r2, 0x200, 0xc00}, 0xc6bc, &(0x7f0000000080)={0x4, 0x1}, &(0x7f0000000140)={0x9}, 0x8) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, &(0x7f0000000180)="170c6d88b286f35d4d51e3e0e6a11e8f6d3792c0e3519b6832c5852cb73acaf8cdfca077aba790d10927eda4c20109def67a01f40d7a22fdb8c82cb4b30f4ae4892ebece065514e841e7676be745381aa2f31a86e0a9510c8d44be4edaee2d21") getdents64$auto(r3, 0x0, 0x40002) epoll_create1$auto(0x3) ioctl$auto(0x3, 0x890b, 0x7f) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) getsockopt$auto(r0, 0x29, 0x3, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)="e7696e5891a9bdcbf2a814c2b1c2da6a4642e705b349586bac2c4769426eeb89d0807a832cc22c", 0x27) 11.306016476s ago: executing program 1 (id=4659): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyz3\x00', 0x179283, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, 0xffffffffffffffff, 0x6, 0x400) ioctl$auto_FS_IOC_GETFSLABEL2(r2, 0x81009431, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x3b) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x20082, 0x0) socket(0x23, 0x80805, 0x0) connect$auto(0x3, 0xfffffffffffffffe, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8600, 0xe6) mmap$auto(0xfffffffffffffffa, 0x6bcb, 0xdf, 0xebe, r1, 0x4) socketpair$auto(0x1e, 0x6, 0x8, 0x0) r4 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x40854) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0x10, &(0x7f0000000140)={@buf=&(0x7f0000000380)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f00692cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x7, 0xffffffffffffff01}, 0x2) getsockopt$auto(r4, 0x11a, 0xfffffffa, 0x0, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto_snapshot_fops_user(r2, &(0x7f00000000c0)=""/57, 0x39) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/5/type\x00', 0x2400, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x40000000c07) 10.428458632s ago: executing program 1 (id=4661): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x8000, 0x1, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf2501000000140007800c0000800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) socket(0x28, 0x5, 0x0) connect$auto(0x3, 0x0, 0x80000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) mmap$auto(0x100, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x5) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) writev$auto(r5, &(0x7f0000000100)={&(0x7f0000000080), 0x7112}, 0x3) mmap$auto(0x100000001, 0x1, 0x2, 0x1ff, r5, 0xfffffffffffff785) writev$auto(r4, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 10.351437024s ago: executing program 7 (id=4662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x2, 0x2, 'Ll'}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f23"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) read$auto_hwsim_fops_rx_rssi_(r6, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 9.083440082s ago: executing program 1 (id=4665): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r1, r2, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r3, r3, 0x0, 0x10000800000003) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) r4 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) fsetxattr$auto(r4, &(0x7f0000000280)='/dek\x85bus/usb/003/001\x00', &(0x7f00000001c0)="d9f6fd8f976809ec5affb5a0a3322d0a082b2b685a8e624d23fefa5ebd13269c7ed4f2a00da29f085217b737337fa6cb2a29ec02ecccc25406c6f6e50cac197d4e3988d74810ca0710cabbdde584064cff537696ffe35f24839c44e41cce1f19fe30c1a2ecd3c358d116463925bd25c63d6f698b07d496239916b584c2b6a50a141150", 0xfffffffffffffff7, 0x91d) 7.938120011s ago: executing program 7 (id=4667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f23"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 6.603542474s ago: executing program 1 (id=4669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f23"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 5.831125029s ago: executing program 6 (id=4672): socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) socket(0xa, 0x3, 0x3b) socket(0x11, 0x2, 0x300) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) write$auto(r1, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) 5.794675284s ago: executing program 9 (id=4673): socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x201, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) socket(0xa, 0x3, 0x3b) socket(0x11, 0x2, 0x300) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) write$auto(r1, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) 5.427835992s ago: executing program 7 (id=4674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000500)={@siginfo_0_0={0x2, 0x4, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f23"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) socket(0x1d, 0x3, 0x1) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 5.342378244s ago: executing program 6 (id=4675): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(0x0, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) r4 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) fsetxattr$auto(r4, &(0x7f0000000280)='/dek\x85bus/usb/003/001\x00', &(0x7f00000001c0)="d9f6fd8f976809ec5affb5a0a3322d0a082b2b685a8e624d23fefa5ebd13269c7ed4f2a00da29f085217b737337fa6cb2a29ec02ecccc25406c6f6e50cac197d4e3988d74810ca0710cabbdde584064cff537696ffe35f24839c44e41cce1f19fe30c1a2ecd3c358d116463925bd25c63d6f698b07d496239916b584c2b6a50a141150", 0xfffffffffffffff7, 0x91d) 4.681505927s ago: executing program 9 (id=4676): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyz3\x00', 0x179283, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, 0xffffffffffffffff, 0x6, 0x400) ioctl$auto_FS_IOC_GETFSLABEL2(r2, 0x81009431, &(0x7f00000001c0)="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") mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x3b) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20082, 0x0) socket(0x23, 0x80805, 0x0) connect$auto(0x3, 0xfffffffffffffffe, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8600, 0xe6) mmap$auto(0xfffffffffffffffa, 0x6bcb, 0xdf, 0xebe, r1, 0x4) socketpair$auto(0x1e, 0x6, 0x8, 0x0) r4 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x40854) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0x10, &(0x7f0000000140)={@buf=&(0x7f0000000380)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f00692cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x7, 0xffffffffffffff01}, 0x2) getsockopt$auto(r4, 0x11a, 0xfffffffa, 0x0, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto_snapshot_fops_user(r2, &(0x7f00000000c0)=""/57, 0x39) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/5/type\x00', 0x2400, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x40000000c07) 4.642022418s ago: executing program 1 (id=4677): mmap$auto(0x8, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xffffffffffff2d52) read$auto_proc_timers_operations_base(0xffffffffffffffff, &(0x7f0000000200)=""/8, 0x8) fanotify_init$auto(0x5, 0x0) r0 = io_uring_setup$auto(0x5, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x484201, 0x0) prctl$auto(0xb, 0x6, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x4004, 0x8, 0x7, 0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0xffff, 0x4, 0xd, 0xe, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0xe, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0xa042, 0x0) write$auto_tracing_mark_fops_trace(r3, &(0x7f00000001c0)="df1533d1051d6a335028eb5350ce85a67491a5aa6ce2673fb3dd5a0bd3ec13dbb6a21d4905c597718f825382c35c1f0d34515a7c9eeb03ccc858a7bffb07b2238dd98b957e4d35efabc91ffead194f6bda496f5d5b", 0x55) mmap$auto(0x7fffffffffffffff, 0x400008, 0x20df, 0x9b71, r0, 0x8000) arch_prctl$auto(0x1022, 0xff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x5c5, 0x0, 0xdf, 0xfff, 0x401, 0x8000) r4 = socket(0x1f, 0x2, 0x7) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x448980, 0x0) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000080)='\xef', 0x8000) setsockopt$auto(r4, 0x6, 0x3, 0x0, 0xa1) signalfd4$auto(r4, &(0x7f0000000040)={0x6}, 0x8057, 0x5) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 3.283412112s ago: executing program 9 (id=4678): socket(0x2, 0xa, 0x1) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x5) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000000)={0x9, 0x6, 0xea, @lost_msgs={0x9}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x143262, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000480)={0x2e, 0x9, "cfef89dfa993d62362df469000730f5ee17574dacf250e12f2a4addd1382898824a824b7c83ce8947c9b730765a2"}, 0x7fffffff) ioctl$auto_TIOCGDEV2(r1, 0x5429, 0x0) process_mrelease$auto(r0, 0x10809) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x1, 0x4, &(0x7f0000000080)={0x4, 0x8}, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) socket(0xa, 0x2, 0x3a) socket(0x200000000000011, 0x2, 0x0) 3.146159715s ago: executing program 7 (id=4679): close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x3}, 0x3, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x509a40, 0x0) select$auto(0x8059, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x5, 0x6, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xa, 0x2495dae0, 0x52]}, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\xf8\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') fcntl$auto_F_WRLCK(0xffffffffffffffff, 0xb12, 0x1) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0x3, 0x0, 0x8) 2.910611348s ago: executing program 6 (id=4680): sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="edd454a9", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) (async) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="edd454a9", @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) (async) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x7, 0x4, 0x0, 0x4000000000003, 0x4303, 0x1, 0x9a8c, 0x800000009, 0x1010001]}, 0x0, 0x0, 0x0) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/028/001\x00', 0xa801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x2) (async) r3 = socket(0x1d, 0x2, 0x2) r4 = socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) write$auto(0x3, 0x0, 0x5c8) (async) write$auto(0x3, 0x0, 0x5c8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg2\x00'}) sendmsg$auto_NET_SHAPER_CMD_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x4040000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xc) (async) r6 = memfd_create$auto(0x0, 0xc) ioctl$auto_FS_IOC_UNRESVSP(r6, 0x40305829, 0x1) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb4, @inferred=r2}}) stat$auto(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000004c0)={0x10, 0x51, 0xe44e, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x8, 0x8, 0x8000000000000000, 0x4, 0x3, 0x1, 0x6d, 0xb89}) 2.080282606s ago: executing program 7 (id=4681): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = socket(0x2a, 0x2, 0x800009) sendto$auto(r0, 0x0, 0x402, 0x0, &(0x7f0000000700)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x1c) r1 = socket(0xa, 0x3, 0x5) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8000}, @NL802154_ATTR_WPAN_PHY_NAME={0xc, 0x2, '[V+%(]-\x00'}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000808c}, 0x8000) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) write$auto(r5, &(0x7f0000000240)='002.15.4 MAC\"', 0x3) splice$auto(0x4, 0x0, r4, 0x0, 0x6c06, 0x7) process_madvise$auto_MADV_DONTNEED_LOCKED(r4, &(0x7f0000001740)={&(0x7f0000000740)="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", 0x92}, 0x7, 0x18, 0x6) 1.966959704s ago: executing program 6 (id=4682): mmap$auto(0x8, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0xa042, 0x0) write$auto_tracing_mark_fops_trace(r0, &(0x7f0000000040)="d90c", 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x1022, 0xff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x5c5, 0x36f3, 0xdf, 0xfff, 0x401, 0x8000) r1 = socket(0xa, 0x1, 0x220107) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x448980, 0x0) r2 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, &(0x7f0000000080)='\xef', 0x8000) setsockopt$auto(r1, 0x6, 0x3, 0x0, 0xa1) signalfd4$auto(r1, &(0x7f0000000040)={0x6}, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x100000000000000, 0xb74, 0x66a) 1.591415521s ago: executing program 6 (id=4683): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) r1 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x28902, 0x0) read$auto_tracing_cpumask_fops_trace(r1, &(0x7f0000000140)=""/193, 0xc1) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0xfffffffd, 0x3192, 0x4, 0x0, 0x7, "50cfeeca8e00000c00"}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) sendfile$auto(r2, r2, 0x0, 0x800400000000ef0) socket(0x21, 0x2, 0xa) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) write$auto(r3, 0x0, 0x2) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r4, r4, 0x0) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29b, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8, 0x700) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) 1.464276864s ago: executing program 9 (id=4684): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c6, 0x1e2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/name\x00', 0xac00, 0x0) ioctl$auto(0x4000000000000c8, 0x400454c8, 0x6f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0xa5c, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x1487}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe85, &(0x7f0000000200)={0x0, 0xffe7}}, 0x881) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)=""/134, 0x86) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x180, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r4) 1.206804891s ago: executing program 1 (id=4685): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0xd, 0x400008, 0xe0, 0x1015, 0xffffffffffffffff, 0x7) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x541b, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000680)='/dev/usbmon22\x00', 0x800, 0x0) ioctl$auto_MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000740)={0x0, 0x0, 0x7fffffffffffffff}) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x8, 0xa, 0x8}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x0, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100fe) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r3 = pidfd_getfd$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x101, 0x5, 0xeb1, r3, 0x5) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000040)="9bbf5fa9", 0x4) r4 = socket(0x10, 0x2, 0xf) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET(r4, 0x0, 0x4000090) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r4, 0x9, &(0x7f0000000080)={@_si_pad}, 0x4) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/usb23-port4/over_current_count\x00', 0xe2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/usb/drivers/ath10k_usb/uevent\x00', 0x80000, 0x0) 1.119571404s ago: executing program 6 (id=4686): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(0x0, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0}) r4 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff) fsetxattr$auto(r4, &(0x7f0000000280)='/dek\x85bus/usb/003/001\x00', &(0x7f00000001c0)="d9f6fd8f976809ec5affb5a0a3322d0a082b2b685a8e624d23fefa5ebd13269c7ed4f2a00da29f085217b737337fa6cb2a29ec02ecccc25406c6f6e50cac197d4e3988d74810ca0710cabbdde584064cff537696ffe35f24839c44e41cce1f19fe30c1a2ecd3c358d116463925bd25c63d6f698b07d496239916b584c2b6a50a141150", 0xfffffffffffffff7, 0x91d) 1.006197188s ago: executing program 9 (id=4687): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyz3\x00', 0x179283, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_START(0x9, 0x8, 0xffffffffffffffff, 0x6, 0x400) ioctl$auto_FS_IOC_GETFSLABEL2(r2, 0x81009431, &(0x7f00000001c0)="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") mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x3b) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20082, 0x0) socket(0x23, 0x80805, 0x0) connect$auto(0x3, 0xfffffffffffffffe, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8600, 0xe6) mmap$auto(0xfffffffffffffffa, 0x6bcb, 0xdf, 0xebe, r1, 0x4) socketpair$auto(0x1e, 0x6, 0x8, 0x0) r4 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x40854) kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4) kexec_load$auto(0xff, 0x10, &(0x7f0000000140)={@buf=&(0x7f0000000380)="a4fc60c3cde5180ed6dc21253ad62d0090fd882763a3b9ac9585b08c1a24d3eb9af01273e4fe29f00692cb5746481f349463edfdedc2cdf1f84d059f7f446cc6627ac7f6c67aa84f193eeeebf8aacdc67263a7a116e6baef0d082e6234c97f1140955cab635ee98d6de0e180f081d0229975e43a", 0xfffffffffffffff8, 0x7, 0xffffffffffffff01}, 0x2) getsockopt$auto(r4, 0x11a, 0xfffffffa, 0x0, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto_snapshot_fops_user(r2, &(0x7f00000000c0)=""/57, 0x39) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x2, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/5/type\x00', 0x2400, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x40000000c07) 991.319189ms ago: executing program 7 (id=4688): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000440)=[0xfff, 0xedc0]) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv6/conf/geneve0/disable_ipv6\x00', 0x40001, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x11, 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15e}, 0x6, 0x8, 0x5) pwritev$auto(r0, &(0x7f0000000040)={0x0, 0x1}, 0x9, 0x3, 0xd3b8) r2 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x3, 0xfdd) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev$auto(r3, &(0x7f0000000380)={&(0x7f00000002c0)="ffaf25e5", 0xe0d}, 0x8) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x0, 0x27, 0x0, 0xc) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)=0xf5000000) mprotect$auto(0x200000000000, 0x806124, 0x8) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x2}, 0x0) io_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 0s ago: executing program 9 (id=4689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYBLOB="1ed7504904c59df2465e774c34316d44c46efb883c56ebae51f17617795dd841eeee37d8e053918c3dbe3dc4d6dfc55c502308a45b3c6519bdc52004664c5f302c98357c767a0fbe347f09be4a8901c38ef8af5c11c4f1820462b55875bb9d07a0f046fa40c75c303aa085ab0c27a783f6d916f65376dbc9af089d128b1f81d7c76ee462c360c48cca18be507730b43ee6f79dbd7b73a22bbce5460128f1832f08e7141e3604adb59a73c02a7951bb", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x84) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bb00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000004) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0xfffffffffffffffa, 0x9, 0x19) open(&(0x7f0000000080)='./cgroup/file0\x00', 0x4e8401, 0xe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x3, 0x2, "4c6c8e"}, 0x2) waitid$auto_P_PIDFD(0x3, r3, 0x0, 0x20f5, &(0x7f0000000440)={{0x0, 0x80}, {0x8, 0x3}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0xffffffffffffffff, 0x101, 0x101, 0xfff, 0x0, 0x3, 0x9, 0x8, 0xfffffffffffffffa}) madvise$auto(0x0, 0x2003f2, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec23\x00', 0xc100, 0x0) ioctl$auto_CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x80000002, "9b2189084142725dff0d933475a77466", 0x8, 0x5, 0x9, 0x5, 0x2, 0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/hwsim/rx_rssi\x00', 0x140, 0x0) read$auto_hwsim_fops_rx_rssi_(r6, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) madvise$auto(0x0, 0xffffffffffff0005, 0x3) kernel console output (not intermixed with test programs): 293726][T22780] FAULT_INJECTION: forcing a failure. [ 1348.293726][T22780] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.293791][T22780] CPU: 0 UID: 0 PID: 22780 Comm: syz.2.3434 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.293818][T22780] Tainted: [L]=SOFTLOCKUP [ 1348.293825][T22780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1348.293836][T22780] Call Trace: [ 1348.293843][T22780] [ 1348.293850][T22780] dump_stack_lvl+0x100/0x190 [ 1348.293875][T22780] should_fail_ex.cold+0x5/0xa [ 1348.293899][T22780] should_failslab+0xc2/0x120 [ 1348.293921][T22780] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1348.293955][T22780] ? __pmd_alloc+0xbf/0x950 [ 1348.293984][T22780] __pmd_alloc+0xbf/0x950 [ 1348.294006][T22780] ? __pud_alloc+0x4fb/0x690 [ 1348.294031][T22780] walk_to_pmd+0x3a3/0x4c0 [ 1348.294057][T22780] get_locked_pte+0x25/0xc0 [ 1348.294082][T22780] map_ldt_struct+0x3c1/0xa70 [ 1348.294110][T22780] ? __pfx_map_ldt_struct+0x10/0x10 [ 1348.294135][T22780] ? alloc_pages_noprof+0xf9/0x160 [ 1348.294162][T22780] write_ldt+0x6d3/0xd40 [ 1348.294189][T22780] ? __pfx_write_ldt+0x10/0x10 [ 1348.294219][T22780] ? xfd_validate_state+0x129/0x190 [ 1348.294238][T22780] ? ksys_write+0x1ac/0x250 [ 1348.294265][T22780] __x64_sys_modify_ldt+0xb1/0x170 [ 1348.294289][T22780] do_syscall_64+0x10b/0xf80 [ 1348.294316][T22780] ? clear_bhb_loop+0x40/0x90 [ 1348.294339][T22780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.294357][T22780] RIP: 0033:0x7fc61e39cdd9 [ 1348.294373][T22780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.294390][T22780] RSP: 002b:00007fc61f1ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 1348.294409][T22780] RAX: ffffffffffffffda RBX: 00007fc61e615fa0 RCX: 00007fc61e39cdd9 [ 1348.294421][T22780] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 1348.294432][T22780] RBP: 00007fc61e432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1348.294443][T22780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.294454][T22780] R13: 00007fc61e616038 R14: 00007fc61e615fa0 R15: 00007fff9b53c298 [ 1348.294480][T22780] [ 1351.214451][T22814] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1351.524070][T22816] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1351.575020][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 1352.173825][T22824] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 1352.173879][T22824] CPU: 0 UID: 0 PID: 22824 Comm: syz.0.3447 Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.173907][T22824] Tainted: [L]=SOFTLOCKUP [ 1352.173914][T22824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1352.173926][T22824] Call Trace: [ 1352.173933][T22824] [ 1352.173940][T22824] dump_stack_lvl+0x100/0x190 [ 1352.173966][T22824] sysfs_warn_dup.cold+0x1c/0x28 [ 1352.173994][T22824] sysfs_do_create_link_sd+0x113/0x140 [ 1352.174018][T22824] sysfs_create_link+0x61/0xc0 [ 1352.174039][T22824] device_add+0x675/0x1950 [ 1352.174066][T22824] ? __pfx_device_add+0x10/0x10 [ 1352.174090][T22824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1352.174119][T22824] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 1352.174145][T22824] wiphy_register+0x1edd/0x2d90 [ 1352.174169][T22824] ? __rtnl_unlock+0xb9/0xf0 [ 1352.174199][T22824] ? __pfx_wiphy_register+0x10/0x10 [ 1352.174224][T22824] ? __asan_memset+0x23/0x50 [ 1352.174261][T22824] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 1352.174291][T22824] ieee80211_register_hw+0x3055/0x4570 [ 1352.174333][T22824] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1352.174365][T22824] ? __pfx___debug_object_init+0x10/0x10 [ 1352.174399][T22824] ? find_held_lock+0x2b/0x80 [ 1352.174425][T22824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1352.174454][T22824] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1352.174479][T22824] ? __hrtimer_setup+0x208/0x330 [ 1352.174502][T22824] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 1352.174538][T22824] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1352.174562][T22824] ? __asan_memcpy+0x3c/0x60 [ 1352.174592][T22824] hwsim_new_radio_nl+0xc5f/0x1370 [ 1352.174616][T22824] ? rcu_is_watching+0x12/0xc0 [ 1352.174640][T22824] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1352.174666][T22824] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1352.174696][T22824] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1352.174732][T22824] genl_family_rcv_msg_doit+0x214/0x300 [ 1352.174764][T22824] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1352.174793][T22824] ? genl_get_cmd+0x3e7/0x760 [ 1352.174826][T22824] ? bpf_lsm_capable+0x9/0x10 [ 1352.174847][T22824] ? security_capable+0x80/0x260 [ 1352.174875][T22824] ? ns_capable+0xd2/0xf0 [ 1352.174899][T22824] genl_rcv_msg+0x560/0x800 [ 1352.174931][T22824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1352.174961][T22824] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1352.174989][T22824] netlink_rcv_skb+0x159/0x420 [ 1352.175015][T22824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1352.175046][T22824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1352.175090][T22824] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1352.175120][T22824] genl_rcv+0x28/0x40 [ 1352.175161][T22824] netlink_unicast+0x585/0x850 [ 1352.175192][T22824] ? __pfx_netlink_unicast+0x10/0x10 [ 1352.175225][T22824] netlink_sendmsg+0x8b0/0xda0 [ 1352.175262][T22824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.175286][T22824] ? __import_iovec+0x1d2/0x640 [ 1352.175308][T22824] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1352.175339][T22824] ____sys_sendmsg+0x9e1/0xb70 [ 1352.175364][T22824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1352.175392][T22824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1352.175422][T22824] ? rcu_is_watching+0x12/0xc0 [ 1352.175443][T22824] ? ___sys_sendmsg+0x19d/0x1e0 [ 1352.175469][T22824] ? kfree+0x1dd/0x6c0 [ 1352.175499][T22824] ___sys_sendmsg+0x190/0x1e0 [ 1352.175527][T22824] ? __pfx____sys_sendmsg+0x10/0x10 [ 1352.175576][T22824] ? __pfx___might_resched+0x10/0x10 [ 1352.175602][T22824] __sys_sendmmsg+0x205/0x430 [ 1352.175626][T22824] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1352.175666][T22824] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1352.175695][T22824] ? kcov_ioctl+0x16a/0x720 [ 1352.175724][T22824] __x64_sys_sendmmsg+0x9c/0x100 [ 1352.175745][T22824] ? lockdep_hardirqs_on+0x78/0x100 [ 1352.175772][T22824] do_syscall_64+0x10b/0xf80 [ 1352.175798][T22824] ? clear_bhb_loop+0x40/0x90 [ 1352.175821][T22824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.175841][T22824] RIP: 0033:0x7fb9af59cdd9 [ 1352.175858][T22824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.175876][T22824] RSP: 002b:00007fb9b040b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1352.175895][T22824] RAX: ffffffffffffffda RBX: 00007fb9af816090 RCX: 00007fb9af59cdd9 [ 1352.175908][T22824] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1352.175919][T22824] RBP: 00007fb9af632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1352.175931][T22824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.175942][T22824] R13: 00007fb9af816128 R14: 00007fb9af816090 R15: 00007ffe43ee4248 [ 1352.175968][T22824] [ 1352.864165][T22832] dyndbg: expected <4096 bytes into control [ 1353.365556][T22844] Process accounting paused [ 1356.652950][T22871] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1357.189217][T22874] zswap: compressor 000 not available [ 1361.123577][ T29] audit: type=1800 audit(4294967440.030:19): pid=22919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3469" name="lu_gp_id" dev="configfs" ino=109129 res=0 errno=0 [ 1361.495922][T22915] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1362.001900][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.012919][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.877372][T22976] FAULT_INJECTION: forcing a failure. [ 1364.877372][T22976] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.943990][T22976] CPU: 0 UID: 0 PID: 22976 Comm: syz.1.3483 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.944022][T22976] Tainted: [L]=SOFTLOCKUP [ 1364.944029][T22976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1364.944040][T22976] Call Trace: [ 1364.944046][T22976] [ 1364.944054][T22976] dump_stack_lvl+0x100/0x190 [ 1364.944087][T22976] should_fail_ex.cold+0x5/0xa [ 1364.944111][T22976] should_failslab+0xc2/0x120 [ 1364.944134][T22976] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1364.944164][T22976] ? __pmd_alloc+0xbf/0x950 [ 1364.944193][T22976] __pmd_alloc+0xbf/0x950 [ 1364.944219][T22976] __handle_mm_fault+0xa9c/0x2a00 [ 1364.944252][T22976] ? mt_find+0x45e/0x8e0 [ 1364.944282][T22976] ? __pfx___handle_mm_fault+0x10/0x10 [ 1364.944309][T22976] ? __pfx_mt_find+0x10/0x10 [ 1364.944351][T22976] ? find_vma+0xbf/0x140 [ 1364.944371][T22976] ? __pfx_find_vma+0x10/0x10 [ 1364.944394][T22976] handle_mm_fault+0x36d/0xa20 [ 1364.944427][T22976] do_user_addr_fault+0x74c/0x12f0 [ 1364.944453][T22976] ? trace_page_fault_kernel+0x7a/0x200 [ 1364.944478][T22976] exc_page_fault+0x6f/0xd0 [ 1364.944506][T22976] asm_exc_page_fault+0x26/0x30 [ 1364.944525][T22976] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1364.944547][T22976] Code: e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f [ 1364.944565][T22976] RSP: 0018:ffffc9000434fae8 EFLAGS: 00050202 [ 1364.944582][T22976] RAX: 0000000000000030 RBX: 0000000000000000 RCX: 0000000000000002 [ 1364.944593][T22976] RDX: 0000000000000001 RSI: ffff8880342f4000 RDI: 0000000000000000 [ 1364.944605][T22976] RBP: ffffc9000434fd80 R08: 0000000000000000 R09: ffffed100685e800 [ 1364.944617][T22976] R10: ffff8880342f4001 R11: 0000000000000000 R12: 0000000000000002 [ 1364.944628][T22976] R13: 00007ffffffff000 R14: ffff8880342f4000 R15: 0000000000000002 [ 1364.944652][T22976] _copy_to_iter+0x391/0x1720 [ 1364.944673][T22976] ? sysfs_file_kobj+0xe4/0x290 [ 1364.944704][T22976] ? __pfx__copy_to_iter+0x10/0x10 [ 1364.944722][T22976] ? kernfs_seq_stop+0xcd/0x120 [ 1364.944752][T22976] ? kernfs_put_active+0x93/0xe0 [ 1364.944779][T22976] seq_read_iter+0xdab/0x1270 [ 1364.944809][T22976] kernfs_fop_read_iter+0x46c/0x610 [ 1364.944838][T22976] ? rw_verify_area+0xce/0x6d0 [ 1364.944856][T22976] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1364.944886][T22976] vfs_read+0x825/0xb30 [ 1364.944909][T22976] ? __pfx_vfs_read+0x10/0x10 [ 1364.944945][T22976] ksys_read+0x12a/0x250 [ 1364.944966][T22976] ? __pfx_ksys_read+0x10/0x10 [ 1364.944989][T22976] ? rcu_is_watching+0x12/0xc0 [ 1364.945015][T22976] do_syscall_64+0x10b/0xf80 [ 1364.945043][T22976] ? clear_bhb_loop+0x40/0x90 [ 1364.945070][T22976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.945090][T22976] RIP: 0033:0x7f657a59cdd9 [ 1364.945105][T22976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.945123][T22976] RSP: 002b:00007f657b4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1364.945140][T22976] RAX: ffffffffffffffda RBX: 00007f657a815fa0 RCX: 00007f657a59cdd9 [ 1364.945152][T22976] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 1364.945163][T22976] RBP: 00007f657b4de090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.945174][T22976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.945185][T22976] R13: 00007f657a816038 R14: 00007f657a815fa0 R15: 00007ffee63e2158 [ 1364.945208][T22976] [ 1365.939560][T22988] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1366.092779][T22992] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3488'. [ 1366.437187][T22999] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1366.483480][T22999] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1366.942004][T22992] gretap0: refused to change device tx_queue_len [ 1369.218594][T23019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.868333][T23047] FAULT_INJECTION: forcing a failure. [ 1369.868333][T23047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.916806][T23047] CPU: 0 UID: 0 PID: 23047 Comm: syz.4.3500 Tainted: G L syzkaller #0 PREEMPT(full) [ 1369.916839][T23047] Tainted: [L]=SOFTLOCKUP [ 1369.916846][T23047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1369.916858][T23047] Call Trace: [ 1369.916865][T23047] [ 1369.916872][T23047] dump_stack_lvl+0x100/0x190 [ 1369.916897][T23047] should_fail_ex.cold+0x5/0xa [ 1369.916931][T23047] _copy_from_user+0x2e/0xd0 [ 1369.916950][T23047] kstrtouint_from_user+0xd6/0x1d0 [ 1369.916976][T23047] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1369.917000][T23047] ? __lock_acquire+0x4a5/0x2630 [ 1369.917022][T23047] ? lock_acquire+0x1b1/0x370 [ 1369.917044][T23047] proc_fail_nth_write+0x83/0x220 [ 1369.917075][T23047] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1369.917111][T23047] vfs_write+0x2aa/0x1070 [ 1369.917133][T23047] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1369.917170][T23047] ? __pfx_vfs_write+0x10/0x10 [ 1369.917193][T23047] ? __fget_files+0x215/0x3d0 [ 1369.917221][T23047] ? __fget_files+0x21f/0x3d0 [ 1369.917249][T23047] ksys_write+0x12a/0x250 [ 1369.917271][T23047] ? __pfx_ksys_write+0x10/0x10 [ 1369.917294][T23047] ? rcu_is_watching+0x12/0xc0 [ 1369.917321][T23047] do_syscall_64+0x10b/0xf80 [ 1369.917348][T23047] ? clear_bhb_loop+0x40/0x90 [ 1369.917371][T23047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.917391][T23047] RIP: 0033:0x7efe4235d60e [ 1369.917407][T23047] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1369.917425][T23047] RSP: 002b:00007efe4330cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1369.917444][T23047] RAX: ffffffffffffffda RBX: 00007efe4330d6c0 RCX: 00007efe4235d60e [ 1369.917457][T23047] RDX: 0000000000000001 RSI: 00007efe4330d0a0 RDI: 0000000000000004 [ 1369.917468][T23047] RBP: 00007efe4330d090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.917479][T23047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.917490][T23047] R13: 00007efe42616038 R14: 00007efe42615fa0 R15: 00007ffcece9dc48 [ 1369.917514][T23047] [ 1371.025674][T23057] can0: slcan on ptm0. [ 1371.055469][T23073] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1371.427732][T23064] can0 (unregistered): slcan off ptm0. [ 1371.724115][T23086] zero sized request [ 1371.938181][T23095] random: crng reseeded on system resumption [ 1372.683413][T23115] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1373.096606][ T29] audit: type=1800 audit(4294967452.000:20): pid=23126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3515" name="lu_gp_id" dev="configfs" ino=110067 res=0 errno=0 [ 1373.388090][T23132] zero sized request [ 1374.481249][T23155] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1374.518474][T23154] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1374.595611][T23154] futex_wake_op: syz.2.3521 tries to shift op by -2048; fix this program [ 1374.796119][T23154] futex_wake_op: syz.2.3521 tries to shift op by -2048; fix this program [ 1375.419112][T23182] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1375.833885][T23192] FAULT_INJECTION: forcing a failure. [ 1375.833885][T23192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.020236][T23192] CPU: 0 UID: 0 PID: 23192 Comm: syz.2.3528 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.020270][T23192] Tainted: [L]=SOFTLOCKUP [ 1376.020278][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1376.020289][T23192] Call Trace: [ 1376.020295][T23192] [ 1376.020303][T23192] dump_stack_lvl+0x100/0x190 [ 1376.020329][T23192] should_fail_ex.cold+0x5/0xa [ 1376.020353][T23192] _copy_from_user+0x2e/0xd0 [ 1376.020373][T23192] generic_map_update_batch+0x452/0x800 [ 1376.020400][T23192] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1376.020424][T23192] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1376.020442][T23192] bpf_map_do_batch+0x66f/0x6d0 [ 1376.020470][T23192] __sys_bpf+0x302/0x4b90 [ 1376.020492][T23192] ? __pfx___sys_bpf+0x10/0x10 [ 1376.020510][T23192] ? proc_fail_nth_write+0x9f/0x220 [ 1376.020541][T23192] ? find_held_lock+0x2b/0x80 [ 1376.020569][T23192] ? find_held_lock+0x2b/0x80 [ 1376.020593][T23192] ? ksys_write+0x190/0x250 [ 1376.020614][T23192] ? ksys_write+0x190/0x250 [ 1376.020639][T23192] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1376.020668][T23192] ? kernel_write+0x5e3/0x6c0 [ 1376.020689][T23192] ? __fget_files+0x215/0x3d0 [ 1376.020721][T23192] ? fput+0x79/0x100 [ 1376.020746][T23192] ? ksys_write+0x1ac/0x250 [ 1376.020767][T23192] ? __pfx_ksys_write+0x10/0x10 [ 1376.020792][T23192] __x64_sys_bpf+0x7b/0xc0 [ 1376.020812][T23192] ? lockdep_hardirqs_on+0x78/0x100 [ 1376.020839][T23192] do_syscall_64+0x10b/0xf80 [ 1376.020865][T23192] ? clear_bhb_loop+0x40/0x90 [ 1376.020888][T23192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.020914][T23192] RIP: 0033:0x7fc61e39cdd9 [ 1376.020931][T23192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.020949][T23192] RSP: 002b:00007fc61f1ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1376.020969][T23192] RAX: ffffffffffffffda RBX: 00007fc61e616180 RCX: 00007fc61e39cdd9 [ 1376.020981][T23192] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a [ 1376.020992][T23192] RBP: 00007fc61f1ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.021004][T23192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.021015][T23192] R13: 00007fc61e616218 R14: 00007fc61e616180 R15: 00007fff9b53c298 [ 1376.021038][T23192] [ 1379.063017][T23239] CIFS mount error: No usable UNC path provided in device string! [ 1379.063017][T23239] [ 1379.145667][T23239] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1379.612240][T23249] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1379.883001][T23251] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1380.055771][T23256] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1380.884305][T23270] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1381.523673][T23273] zswap: compressor 000 not available [ 1381.635223][T23285] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1382.092806][T23292] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1382.177123][T23280] zswap: compressor 000 not available [ 1382.186435][T23294] netlink: 86 bytes leftover after parsing attributes in process `syz.4.3554'. [ 1382.823507][T23300] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1382.863971][T23301] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1382.883683][T23303] random: crng reseeded on system resumption [ 1383.420424][T23274] Process accounting resumed [ 1383.814654][T23315] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1389.515399][T23389] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1389.863545][T23394] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1390.634503][T23406] usbcore.quirks: string doesn't fit in 127 chars. [ 1390.911918][T23415] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1393.632719][T23443] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3583'. [ 1399.613622][T23537] zswap: compressor 000 not available [ 1399.748006][T23542] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1405.978451][T23615] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[20574] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[23615] [ 1406.148547][T23620] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1406.308262][T23622] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1406.358503][T23608] zswap: compressor 000 not available [ 1408.009806][T23650] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1410.787465][T23706] futex_wake_op: syz.0.3633 tries to shift op by -1; fix this program [ 1411.937520][T23721] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1413.281026][T23746] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1414.118735][T23753] zswap: compressor 000 not available [ 1414.197511][T23753] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1415.386644][T23774] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1416.364669][T23784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3650'. [ 1416.584469][T23784] bond0: entered promiscuous mode [ 1416.657498][T23784] bond_slave_0: entered promiscuous mode [ 1416.713785][T23784] bond_slave_1: entered promiscuous mode [ 1420.242145][T22415] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1420.963376][T23837] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1421.483277][T23842] zswap: compressor 000 not available [ 1423.444850][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.454692][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.153905][T23911] zswap: compressor 000 not available [ 1432.225570][T23968] __vm_enough_memory: pid: 23968, comm: syz.4.3686, bytes: 4398046457856 not enough memory for the allocation [ 1439.904285][T24051] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1440.070976][T24051] usb usb3: usbfs: process 24051 (syz.1.3702) did not claim interface 0 before use [ 1440.172677][T24062] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3705'. [ 1440.861895][T24062] netlink: 'syz.2.3705': attribute type 2 has an invalid length. [ 1441.527787][T24088] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1441.972985][T24096] FAULT_INJECTION: forcing a failure. [ 1441.972985][T24096] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.064728][T24096] CPU: 0 UID: 0 PID: 24096 Comm: syz.2.3711 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.064762][T24096] Tainted: [L]=SOFTLOCKUP [ 1442.064769][T24096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1442.064781][T24096] Call Trace: [ 1442.064787][T24096] [ 1442.064795][T24096] dump_stack_lvl+0x100/0x190 [ 1442.064821][T24096] should_fail_ex.cold+0x5/0xa [ 1442.064845][T24096] ? __register_sysctl_table+0xac/0x1650 [ 1442.064870][T24096] should_failslab+0xc2/0x120 [ 1442.064893][T24096] __kmalloc_noprof+0xe0/0x850 [ 1442.064915][T24096] __register_sysctl_table+0xac/0x1650 [ 1442.064939][T24096] ? rcu_is_watching+0x12/0xc0 [ 1442.064961][T24096] ? trace_kmalloc+0xe3/0x110 [ 1442.064985][T24096] ? __pfx___register_sysctl_table+0x10/0x10 [ 1442.065009][T24096] ? rcu_is_cpu_rrupt_from_idle+0x1c1/0x270 [ 1442.065094][T24096] ? __asan_memcpy+0x3c/0x60 [ 1442.065124][T24096] register_pidns_sysctls+0x11d/0x1c0 [ 1442.065147][T24096] ? __ns_common_init+0x299/0x4b0 [ 1442.065175][T24096] copy_pid_ns+0x680/0x10a0 [ 1442.065194][T24096] ? __pfx_copy_pid_ns+0x10/0x10 [ 1442.065214][T24096] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1442.065242][T24096] ? create_new_namespaces+0x30/0xac0 [ 1442.065270][T24096] create_new_namespaces+0x2aa/0xac0 [ 1442.065299][T24096] unshare_nsproxy_namespaces+0xf2/0x220 [ 1442.065326][T24096] ksys_unshare+0x438/0xab0 [ 1442.065354][T24096] ? __pfx_ksys_unshare+0x10/0x10 [ 1442.065380][T24096] ? xfd_validate_state+0x129/0x190 [ 1442.065399][T24096] ? ksys_write+0x1ac/0x250 [ 1442.065426][T24096] __x64_sys_unshare+0x31/0x40 [ 1442.065453][T24096] do_syscall_64+0x10b/0xf80 [ 1442.065480][T24096] ? clear_bhb_loop+0x40/0x90 [ 1442.065501][T24096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.065520][T24096] RIP: 0033:0x7fc61e39cdd9 [ 1442.065537][T24096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.065555][T24096] RSP: 002b:00007fc61f1ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1442.065575][T24096] RAX: ffffffffffffffda RBX: 00007fc61e615fa0 RCX: 00007fc61e39cdd9 [ 1442.065587][T24096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1442.065598][T24096] RBP: 00007fc61e432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1442.065609][T24096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1442.065620][T24096] R13: 00007fc61e616038 R14: 00007fc61e615fa0 R15: 00007fff9b53c298 [ 1442.065643][T24096] [ 1443.277188][T24114] random: crng reseeded on system resumption [ 1445.153462][T24129] zswap: compressor 000 not available [ 1446.652181][T24149] block2mtd: too many arguments [ 1447.531499][T24177] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1451.221129][T24245] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1451.659864][T24251] blktrace: Concurrent blktraces are not allowed on sg0 [ 1451.713752][T24247] zswap: compressor 000 not available [ 1451.786070][T24261] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1452.995102][T24278] netlink: zone id is out of range [ 1453.016586][T24278] netlink: zone id is out of range [ 1453.049333][T24278] netlink: zone id is out of range [ 1453.087755][T24278] netlink: zone id is out of range [ 1453.110805][T24278] netlink: zone id is out of range [ 1453.132961][T24278] netlink: zone id is out of range [ 1453.154055][T24278] netlink: zone id is out of range [ 1453.177215][T24278] netlink: zone id is out of range [ 1453.205520][T24278] netlink: zone id is out of range [ 1453.245483][T24278] netlink: zone id is out of range [ 1454.433632][T24303] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1454.540404][T24298] zswap: compressor 000 not available [ 1456.834504][T24336] MTRR 2 not used [ 1463.693639][T24413] random: crng reseeded on system resumption [ 1463.844670][T24413] hub 1-0:1.0: USB hub found [ 1463.889834][T24413] hub 1-0:1.0: 1 port detected [ 1466.171954][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1466.188016][T24457] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 1466.345480][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1466.478859][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1466.591286][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 1468.953965][T24495] random: crng reseeded on system resumption [ 1469.091945][T24495] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1470.948862][T24521] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1471.085826][T24514] zswap: compressor 000 not available [ 1471.845636][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1472.350884][T24532] zero sized request [ 1474.044993][T24559] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1474.154308][T24551] zswap: compressor 000 not available [ 1477.604386][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3808'. [ 1478.137236][T24605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3808'. [ 1478.677693][T24616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3811'. [ 1478.988574][T24622] zero sized request [ 1479.215587][T24629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1480.452708][T24648] FAULT_INJECTION: forcing a failure. [ 1480.452708][T24648] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.513546][T24648] CPU: 0 UID: 0 PID: 24648 Comm: syz.1.3817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.513580][T24648] Tainted: [L]=SOFTLOCKUP [ 1480.513587][T24648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1480.513599][T24648] Call Trace: [ 1480.513606][T24648] [ 1480.513619][T24648] dump_stack_lvl+0x100/0x190 [ 1480.513646][T24648] should_fail_ex.cold+0x5/0xa [ 1480.513671][T24648] should_failslab+0xc2/0x120 [ 1480.513693][T24648] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1480.513721][T24648] ? vidtv_psi_eit_table_init+0x4c/0x320 [ 1480.513750][T24648] ? vidtv_psi_nit_table_update_sec_len+0x38c/0x4a0 [ 1480.513774][T24648] ? vidtv_psi_set_sec_len+0xa5/0x160 [ 1480.513802][T24648] vidtv_psi_eit_table_init+0x4c/0x320 [ 1480.513831][T24648] vidtv_channel_si_init+0xde5/0x18f0 [ 1480.513868][T24648] vidtv_mux_init+0x526/0xbf0 [ 1480.513888][T24648] vidtv_start_feed+0x34e/0x500 [ 1480.513911][T24648] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1480.513935][T24648] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1480.513972][T24648] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1480.514005][T24648] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1480.514035][T24648] dvb_demux_do_ioctl+0xe64/0x1200 [ 1480.514064][T24648] dvb_usercopy+0x167/0x340 [ 1480.514083][T24648] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1480.514107][T24648] ? __pfx_dvb_usercopy+0x10/0x10 [ 1480.514134][T24648] ? __fget_files+0x21f/0x3d0 [ 1480.514161][T24648] dvb_demux_ioctl+0x29/0x40 [ 1480.514180][T24648] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1480.514199][T24648] __x64_sys_ioctl+0x18e/0x210 [ 1480.514220][T24648] do_syscall_64+0x10b/0xf80 [ 1480.514247][T24648] ? clear_bhb_loop+0x40/0x90 [ 1480.514270][T24648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.514288][T24648] RIP: 0033:0x7f657a59cdd9 [ 1480.514305][T24648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.514323][T24648] RSP: 002b:00007f657b4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1480.514343][T24648] RAX: ffffffffffffffda RBX: 00007f657a815fa0 RCX: 00007f657a59cdd9 [ 1480.514355][T24648] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 1480.514367][T24648] RBP: 00007f657a632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1480.514379][T24648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.514391][T24648] R13: 00007f657a816038 R14: 00007f657a815fa0 R15: 00007ffee63e2158 [ 1480.514415][T24648] [ 1481.162639][T24655] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1481.830998][T24668] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1484.883359][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.892579][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.086414][T24764] zswap: compressor 000 not available [ 1487.226589][T24775] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1489.169045][T24801] zswap: compressor 000 not available [ 1489.232188][T24806] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1489.793366][T24816] ecryptfs_miscdev_write: Invalid packet size [192] [ 1492.434679][T24866] random: crng reseeded on system resumption [ 1492.870331][T24866] hub 1-0:1.0: USB hub found [ 1492.961523][T24866] hub 1-0:1.0: 1 port detected [ 1496.193265][T24934] ubi0: attaching mtd0 [ 1496.232760][T24934] ubi0: scanning is finished [ 1496.254318][T24934] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1496.500570][T24934] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1497.706077][T24963] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1498.276412][T24976] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1502.204799][T25058] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1502.283015][T25047] zswap: compressor 000 not available [ 1503.722798][T25078] random: crng reseeded on system resumption [ 1503.943669][T25078] hub 1-0:1.0: USB hub found [ 1504.004646][T25078] hub 1-0:1.0: 1 port detected [ 1507.270219][T25131] FAULT_INJECTION: forcing a failure. [ 1507.270219][T25131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.368507][T25131] CPU: 0 UID: 0 PID: 25131 Comm: syz.4.3920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1507.368538][T25131] Tainted: [L]=SOFTLOCKUP [ 1507.368545][T25131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1507.368556][T25131] Call Trace: [ 1507.368563][T25131] [ 1507.368570][T25131] dump_stack_lvl+0x100/0x190 [ 1507.368597][T25131] should_fail_ex.cold+0x5/0xa [ 1507.368621][T25131] _copy_to_user+0x32/0xd0 [ 1507.368645][T25131] simple_read_from_buffer+0xcb/0x170 [ 1507.368669][T25131] proc_fail_nth_read+0x1af/0x230 [ 1507.368700][T25131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1507.368731][T25131] ? rw_verify_area+0xce/0x6d0 [ 1507.368750][T25131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1507.368779][T25131] vfs_read+0x1e4/0xb30 [ 1507.368803][T25131] ? __pfx_vfs_read+0x10/0x10 [ 1507.368823][T25131] ? __fget_files+0x215/0x3d0 [ 1507.368850][T25131] ? __fget_files+0x21f/0x3d0 [ 1507.368877][T25131] ksys_read+0x12a/0x250 [ 1507.368898][T25131] ? __pfx_ksys_read+0x10/0x10 [ 1507.368922][T25131] ? rcu_is_watching+0x12/0xc0 [ 1507.368948][T25131] do_syscall_64+0x10b/0xf80 [ 1507.368975][T25131] ? clear_bhb_loop+0x40/0x90 [ 1507.368998][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.369017][T25131] RIP: 0033:0x7efe4235d60e [ 1507.369033][T25131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1507.369052][T25131] RSP: 002b:00007efe4330cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1507.369070][T25131] RAX: ffffffffffffffda RBX: 00007efe4330d6c0 RCX: 00007efe4235d60e [ 1507.369083][T25131] RDX: 000000000000000f RSI: 00007efe4330d0a0 RDI: 0000000000000004 [ 1507.369094][T25131] RBP: 00007efe4330d090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.369105][T25131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.369119][T25131] R13: 00007efe42616038 R14: 00007efe42615fa0 R15: 00007ffcece9dc48 [ 1507.369143][T25131] [ 1509.208698][T25161] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1509.274479][T25148] zswap: compressor 000 not available [ 1511.579660][T25191] zswap: compressor 000 not available [ 1513.841127][T25237] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1515.188230][T22415] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 1515.188262][T22415] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 1515.203839][T22415] Bluetooth: hci2: Dropping invalid advertising data [ 1515.211064][T22415] Bluetooth: hci2: Dropping invalid advertising data [ 1515.218633][T22415] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1515.966411][T25263] ecryptfs_miscdev_write: Invalid packet size [0] [ 1520.115507][T25334] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1520.905259][T25320] kexec: Could not allocate control_code_buffer [ 1523.447305][T25383] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3973'. [ 1525.237180][T25424] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1527.218905][T25444] zswap: compressor not available [ 1527.664239][T25462] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1529.123575][T25491] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1533.678585][T25574] netlink: 'syz.2.4016': attribute type 11 has an invalid length. [ 1533.741020][T25574] netlink: 'syz.2.4016': attribute type 11 has an invalid length. [ 1533.789590][T25574] netlink: 'syz.2.4016': attribute type 11 has an invalid length. [ 1534.767541][T25605] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1537.372708][T22415] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 1537.842459][T25678] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4041'. [ 1537.892470][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4041'. [ 1540.799503][ T29] audit: type=1807 audit(4294967332.420:21): UNKNOWN= [ 1540.828256][ T29] audit: type=1802 audit(4294967332.500:22): pid=25744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.4052" res=0 errno=0 [ 1541.347999][T25748] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1541.437692][T25729] ima: policy update failed [ 1541.524263][ T29] audit: type=1802 audit(4294967333.200:23): pid=25729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4052" res=0 errno=0 [ 1543.726698][T25791] netlink: 'syz.1.4067': attribute type 10 has an invalid length. [ 1543.756618][T25791] netlink: 230 bytes leftover after parsing attributes in process `syz.1.4067'. [ 1544.493638][T25801] FAULT_INJECTION: forcing a failure. [ 1544.493638][T25801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.574445][T25801] CPU: 0 UID: 0 PID: 25801 Comm: syz.4.4070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1544.574478][T25801] Tainted: [L]=SOFTLOCKUP [ 1544.574485][T25801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1544.574497][T25801] Call Trace: [ 1544.574504][T25801] [ 1544.574511][T25801] dump_stack_lvl+0x100/0x190 [ 1544.574538][T25801] should_fail_ex.cold+0x5/0xa [ 1544.574562][T25801] _copy_to_user+0x32/0xd0 [ 1544.574583][T25801] simple_read_from_buffer+0xcb/0x170 [ 1544.574607][T25801] proc_fail_nth_read+0x1af/0x230 [ 1544.574638][T25801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1544.574670][T25801] ? rw_verify_area+0xce/0x6d0 [ 1544.574689][T25801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1544.574719][T25801] vfs_read+0x1e4/0xb30 [ 1544.574743][T25801] ? __pfx_vfs_read+0x10/0x10 [ 1544.574769][T25801] ? __fget_files+0x215/0x3d0 [ 1544.574796][T25801] ? __fget_files+0x21f/0x3d0 [ 1544.574824][T25801] ksys_read+0x12a/0x250 [ 1544.574845][T25801] ? __pfx_ksys_read+0x10/0x10 [ 1544.574868][T25801] ? rcu_is_watching+0x12/0xc0 [ 1544.574894][T25801] do_syscall_64+0x10b/0xf80 [ 1544.574922][T25801] ? clear_bhb_loop+0x40/0x90 [ 1544.574945][T25801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.574964][T25801] RIP: 0033:0x7efe4235d60e [ 1544.574980][T25801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1544.574998][T25801] RSP: 002b:00007efe4330cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1544.575017][T25801] RAX: ffffffffffffffda RBX: 00007efe4330d6c0 RCX: 00007efe4235d60e [ 1544.575030][T25801] RDX: 000000000000000f RSI: 00007efe4330d0a0 RDI: 0000000000000004 [ 1544.575041][T25801] RBP: 00007efe4330d090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.575052][T25801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.575063][T25801] R13: 00007efe42616038 R14: 00007efe42615fa0 R15: 00007ffcece9dc48 [ 1544.575087][T25801] [ 1545.494222][T25829] FAULT_INJECTION: forcing a failure. [ 1545.494222][T25829] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.541454][T25829] CPU: 0 UID: 0 PID: 25829 Comm: syz.1.4071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.541489][T25829] Tainted: [L]=SOFTLOCKUP [ 1545.541496][T25829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1545.541511][T25829] Call Trace: [ 1545.541518][T25829] [ 1545.541527][T25829] dump_stack_lvl+0x100/0x190 [ 1545.541552][T25829] should_fail_ex.cold+0x5/0xa [ 1545.541575][T25829] should_failslab+0xc2/0x120 [ 1545.541598][T25829] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1545.541630][T25829] ? __d_alloc+0x34/0xa40 [ 1545.541659][T25829] __d_alloc+0x34/0xa40 [ 1545.541686][T25829] d_alloc_pseudo+0x1c/0xc0 [ 1545.541704][T25829] alloc_file_pseudo+0xcf/0x230 [ 1545.541733][T25829] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1545.541762][T25829] ? hugetlbfs_get_inode+0x3f5/0x700 [ 1545.541800][T25829] hugetlb_file_setup+0x2a8/0x5b0 [ 1545.541829][T25829] ksys_mmap_pgoff+0x242/0x610 [ 1545.541856][T25829] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1545.541878][T25829] ? xfd_validate_state+0x129/0x190 [ 1545.541897][T25829] ? ksys_write+0x1ac/0x250 [ 1545.541922][T25829] __x64_sys_mmap+0x125/0x190 [ 1545.541945][T25829] do_syscall_64+0x10b/0xf80 [ 1545.541972][T25829] ? clear_bhb_loop+0x40/0x90 [ 1545.541994][T25829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.542013][T25829] RIP: 0033:0x7f657a59cdd9 [ 1545.542030][T25829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.542050][T25829] RSP: 002b:00007f657b4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1545.542069][T25829] RAX: ffffffffffffffda RBX: 00007f657a815fa0 RCX: 00007f657a59cdd9 [ 1545.542082][T25829] RDX: 0000000000000002 RSI: 0000000000004005 RDI: 0000000001000000 [ 1545.542094][T25829] RBP: 00007f657a632d69 R08: 0000000000000401 R09: 0000300000000000 [ 1545.542107][T25829] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1545.542118][T25829] R13: 00007f657a816038 R14: 00007f657a815fa0 R15: 00007ffee63e2158 [ 1545.542141][T25829] [ 1546.049634][T25840] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1546.167952][T25828] zswap: compressor 000 not available [ 1546.329613][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.337800][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.727343][ T29] audit: type=1800 audit(4294967338.400:24): pid=25851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4082" name="file0" dev="tmpfs" ino=2385 res=0 errno=0 [ 1547.558130][T25864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4086'. [ 1549.185101][T25889] FAULT_INJECTION: forcing a failure. [ 1549.185101][T25889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.227817][T25889] CPU: 0 UID: 0 PID: 25889 Comm: syz.1.4095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1549.227850][T25889] Tainted: [L]=SOFTLOCKUP [ 1549.227864][T25889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1549.227876][T25889] Call Trace: [ 1549.227883][T25889] [ 1549.227890][T25889] dump_stack_lvl+0x100/0x190 [ 1549.227917][T25889] should_fail_ex.cold+0x5/0xa [ 1549.227941][T25889] _copy_to_iter+0x5a4/0x1720 [ 1549.227964][T25889] ? __pfx__copy_to_iter+0x10/0x10 [ 1549.227981][T25889] ? m_stop+0x39c/0x500 [ 1549.228004][T25889] ? m_stop+0x333/0x500 [ 1549.228024][T25889] seq_read_iter+0xdab/0x1270 [ 1549.228054][T25889] seq_read+0x33b/0x4c0 [ 1549.228074][T25889] ? __pfx_seq_read+0x10/0x10 [ 1549.228093][T25889] ? __pfx___might_resched+0x10/0x10 [ 1549.228128][T25889] ? rw_verify_area+0xce/0x6d0 [ 1549.228146][T25889] ? __pfx_seq_read+0x10/0x10 [ 1549.228167][T25889] vfs_read+0x1e4/0xb30 [ 1549.228190][T25889] ? __pfx_vfs_read+0x10/0x10 [ 1549.228210][T25889] ? find_held_lock+0x2b/0x80 [ 1549.228234][T25889] ? __fget_files+0x215/0x3d0 [ 1549.228256][T25889] ? __fget_files+0x215/0x3d0 [ 1549.228282][T25889] ? __fget_files+0x21f/0x3d0 [ 1549.228310][T25889] __x64_sys_pread64+0x1eb/0x250 [ 1549.228333][T25889] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1549.228359][T25889] ? rcu_is_watching+0x12/0xc0 [ 1549.228385][T25889] do_syscall_64+0x10b/0xf80 [ 1549.228412][T25889] ? clear_bhb_loop+0x40/0x90 [ 1549.228434][T25889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.228454][T25889] RIP: 0033:0x7f657a59cdd9 [ 1549.228470][T25889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.228489][T25889] RSP: 002b:00007f657b4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1549.228508][T25889] RAX: ffffffffffffffda RBX: 00007f657a815fa0 RCX: 00007f657a59cdd9 [ 1549.228520][T25889] RDX: 0000000000010001 RSI: 0000000000000000 RDI: 0000000000000004 [ 1549.228531][T25889] RBP: 00007f657b4de090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.228542][T25889] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1549.228554][T25889] R13: 00007f657a816038 R14: 00007f657a815fa0 R15: 00007ffee63e2158 [ 1549.228577][T25889] [ 1549.805837][T25897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4097'. [ 1549.839509][T25897] veth1_macvtap: entered allmulticast mode [ 1553.853851][T25979] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1554.151644][T25986] FAULT_INJECTION: forcing a failure. [ 1554.151644][T25986] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.218331][T25986] CPU: 0 UID: 0 PID: 25986 Comm: syz.1.4120 Tainted: G L syzkaller #0 PREEMPT(full) [ 1554.218365][T25986] Tainted: [L]=SOFTLOCKUP [ 1554.218372][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1554.218383][T25986] Call Trace: [ 1554.218390][T25986] [ 1554.218398][T25986] dump_stack_lvl+0x100/0x190 [ 1554.218425][T25986] should_fail_ex.cold+0x5/0xa [ 1554.218448][T25986] ? constrain_params_by_rules+0x175/0xcc0 [ 1554.218467][T25986] should_failslab+0xc2/0x120 [ 1554.218489][T25986] __kmalloc_noprof+0xe0/0x850 [ 1554.218506][T25986] ? look_up_lock_class+0x55/0x120 [ 1554.218536][T25986] constrain_params_by_rules+0x175/0xcc0 [ 1554.218559][T25986] ? __lock_acquire+0x4a5/0x2630 [ 1554.218579][T25986] ? __pfx_stack_trace_save+0x10/0x10 [ 1554.218605][T25986] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1554.218686][T25986] ? stack_depot_save_flags+0x27/0x9d0 [ 1554.218721][T25986] ? __mutex_lock+0x26d/0x1b10 [ 1554.218749][T25986] ? snd_interval_refine+0x2d0/0x580 [ 1554.218774][T25986] snd_pcm_hw_refine+0x7e7/0xad0 [ 1554.218797][T25986] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1554.218820][T25986] ? do_raw_spin_lock+0x128/0x260 [ 1554.218845][T25986] ? mark_held_locks+0x40/0x70 [ 1554.218866][T25986] snd_pcm_hw_params+0x3b3/0x1bf0 [ 1554.218885][T25986] ? snd_pcm_hw_param_near.constprop.0+0x573/0x850 [ 1554.218913][T25986] ? kfree+0x223/0x6c0 [ 1554.218940][T25986] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1554.218960][T25986] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 1554.218992][T25986] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1554.219024][T25986] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 1554.219046][T25986] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 1554.219085][T25986] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1554.219131][T25986] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1554.219162][T25986] snd_pcm_oss_read+0x3d4/0x730 [ 1554.219198][T25986] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1554.219227][T25986] vfs_read+0x1e4/0xb30 [ 1554.219251][T25986] ? __pfx_vfs_read+0x10/0x10 [ 1554.219270][T25986] ? find_held_lock+0x2b/0x80 [ 1554.219293][T25986] ? __fget_files+0x215/0x3d0 [ 1554.219314][T25986] ? __fget_files+0x215/0x3d0 [ 1554.219340][T25986] ? __fget_files+0x21f/0x3d0 [ 1554.219368][T25986] ksys_read+0x12a/0x250 [ 1554.219388][T25986] ? __pfx_ksys_read+0x10/0x10 [ 1554.219411][T25986] ? rcu_is_watching+0x12/0xc0 [ 1554.219437][T25986] do_syscall_64+0x10b/0xf80 [ 1554.219462][T25986] ? clear_bhb_loop+0x40/0x90 [ 1554.219485][T25986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.219504][T25986] RIP: 0033:0x7f657a59cdd9 [ 1554.219519][T25986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.219537][T25986] RSP: 002b:00007f657b4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1554.219556][T25986] RAX: ffffffffffffffda RBX: 00007f657a815fa0 RCX: 00007f657a59cdd9 [ 1554.219568][T25986] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1554.219579][T25986] RBP: 00007f657a632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1554.219590][T25986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.219601][T25986] R13: 00007f657a816038 R14: 00007f657a815fa0 R15: 00007ffee63e2158 [ 1554.219632][T25986] [ 1558.499474][T26055] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1558.603619][T26045] zswap: compressor 000 not available [ 1560.530981][T26081] FAULT_INJECTION: forcing a failure. [ 1560.530981][T26081] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.596528][T26081] CPU: 0 UID: 0 PID: 26081 Comm: syz.4.4141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.596570][T26081] Tainted: [L]=SOFTLOCKUP [ 1560.596577][T26081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1560.596588][T26081] Call Trace: [ 1560.596596][T26081] [ 1560.596604][T26081] dump_stack_lvl+0x100/0x190 [ 1560.596629][T26081] should_fail_ex.cold+0x5/0xa [ 1560.596655][T26081] should_failslab+0xc2/0x120 [ 1560.596678][T26081] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1560.596707][T26081] ? alloc_empty_file+0x5b/0x1c0 [ 1560.596735][T26081] ? __pfx_stack_trace_save+0x10/0x10 [ 1560.596764][T26081] alloc_empty_file+0x5b/0x1c0 [ 1560.596792][T26081] path_openat+0xe8/0x31a0 [ 1560.596814][T26081] ? kasan_save_stack+0x3f/0x50 [ 1560.596831][T26081] ? kasan_save_stack+0x30/0x50 [ 1560.596847][T26081] ? kasan_save_track+0x14/0x30 [ 1560.596864][T26081] ? __kasan_slab_alloc+0x89/0x90 [ 1560.596882][T26081] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1560.596910][T26081] ? do_getname+0x35/0x390 [ 1560.596935][T26081] ? do_sys_openat2+0xc5/0x1e0 [ 1560.596962][T26081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.596984][T26081] ? __pfx_path_openat+0x10/0x10 [ 1560.597015][T26081] do_file_open+0x20e/0x430 [ 1560.597040][T26081] ? __pfx_do_file_open+0x10/0x10 [ 1560.597078][T26081] ? alloc_fd+0x476/0x790 [ 1560.597102][T26081] ? do_getname+0x191/0x390 [ 1560.597131][T26081] do_sys_openat2+0x10d/0x1e0 [ 1560.597159][T26081] ? __pfx_do_sys_openat2+0x10/0x10 [ 1560.597196][T26081] __x64_sys_openat+0x12d/0x210 [ 1560.597225][T26081] ? __pfx___x64_sys_openat+0x10/0x10 [ 1560.597253][T26081] ? ksys_write+0x1ac/0x250 [ 1560.597277][T26081] ? rcu_is_watching+0x12/0xc0 [ 1560.597301][T26081] do_syscall_64+0x10b/0xf80 [ 1560.597327][T26081] ? clear_bhb_loop+0x40/0x90 [ 1560.597349][T26081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.597368][T26081] RIP: 0033:0x7efe4239cdd9 [ 1560.597384][T26081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.597401][T26081] RSP: 002b:00007efe4330d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1560.597419][T26081] RAX: ffffffffffffffda RBX: 00007efe42615fa0 RCX: 00007efe4239cdd9 [ 1560.597431][T26081] RDX: 0000000000169000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1560.597443][T26081] RBP: 00007efe42432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1560.597454][T26081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.597465][T26081] R13: 00007efe42616038 R14: 00007efe42615fa0 R15: 00007ffcece9dc48 [ 1560.597488][T26081] [ 1564.806352][T26176] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1565.952037][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4168'. [ 1572.159743][T19422] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:1: bg 1: bad block bitmap checksum [ 1572.245234][T19422] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 4771 with max blocks 1 with error 74 [ 1572.347112][T19422] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1572.347112][T19422] [ 1575.447513][T26354] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1576.447761][T22415] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 1576.447793][T22415] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 1576.465312][T22415] Bluetooth: hci0: Dropping invalid advertising data [ 1576.472604][T22415] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 1576.472632][T22415] Bluetooth: hci0: Dropping invalid advertising data [ 1576.494148][T22415] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1581.144290][T26442] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1582.104148][T26462] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1582.171207][T26452] zswap: compressor 000 not available [ 1586.718785][T26557] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1588.917461][T26596] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1590.277631][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1593.728353][T26690] ubi0: attaching mtd0 [ 1593.740920][T26690] ubi0: scanning is finished [ 1593.751246][T26690] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1593.853136][T26690] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1594.918946][T26710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1597.830824][T26750] netlink: 'syz.0.4285': attribute type 1 has an invalid length. [ 1597.870940][T26750] net_ratelimit: 69 callbacks suppressed [ 1597.870958][T26750] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1597.917528][T26754] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1598.101416][T26758] FAULT_INJECTION: forcing a failure. [ 1598.101416][T26758] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.286535][T26758] CPU: 0 UID: 0 PID: 26758 Comm: syz.4.4287 Tainted: G L syzkaller #0 PREEMPT(full) [ 1598.286568][T26758] Tainted: [L]=SOFTLOCKUP [ 1598.286575][T26758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.286586][T26758] Call Trace: [ 1598.286593][T26758] [ 1598.286600][T26758] dump_stack_lvl+0x100/0x190 [ 1598.286626][T26758] should_fail_ex.cold+0x5/0xa [ 1598.286650][T26758] should_failslab+0xc2/0x120 [ 1598.286673][T26758] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1598.286694][T26758] ? register_pidns_sysctls+0x48/0x1c0 [ 1598.286712][T26758] ? rcu_is_watching+0x12/0xc0 [ 1598.286738][T26758] kmemdup_noprof+0x29/0x60 [ 1598.286758][T26758] register_pidns_sysctls+0x48/0x1c0 [ 1598.286780][T26758] ? __ns_common_init+0x299/0x4b0 [ 1598.286809][T26758] copy_pid_ns+0x680/0x10a0 [ 1598.286829][T26758] ? __pfx_copy_pid_ns+0x10/0x10 [ 1598.286848][T26758] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1598.286876][T26758] ? create_new_namespaces+0x30/0xac0 [ 1598.286903][T26758] create_new_namespaces+0x2aa/0xac0 [ 1598.286932][T26758] unshare_nsproxy_namespaces+0xf2/0x220 [ 1598.286958][T26758] ksys_unshare+0x438/0xab0 [ 1598.286991][T26758] ? __pfx_ksys_unshare+0x10/0x10 [ 1598.287017][T26758] ? xfd_validate_state+0x129/0x190 [ 1598.287036][T26758] ? ksys_write+0x1ac/0x250 [ 1598.287062][T26758] __x64_sys_unshare+0x31/0x40 [ 1598.287089][T26758] do_syscall_64+0x10b/0xf80 [ 1598.287116][T26758] ? clear_bhb_loop+0x40/0x90 [ 1598.287139][T26758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.287158][T26758] RIP: 0033:0x7efe4239cdd9 [ 1598.287175][T26758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.287193][T26758] RSP: 002b:00007efe4330d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1598.287212][T26758] RAX: ffffffffffffffda RBX: 00007efe42615fa0 RCX: 00007efe4239cdd9 [ 1598.287224][T26758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1598.287235][T26758] RBP: 00007efe42432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1598.287246][T26758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.287257][T26758] R13: 00007efe42616038 R14: 00007efe42615fa0 R15: 00007ffcece9dc48 [ 1598.287279][T26758] [ 1599.159973][T26772] futex_wake_op: syz.1.4289 tries to shift op by -2048; fix this program [ 1599.194711][T26772] 0x000000000001-0x000000020000 : "" [ 1599.253654][T26772] ftl_cs: FTL header corrupt! [ 1600.456691][T26800] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.0.127), cmd(12) [ 1602.782316][T26834] : Can't lookup blockdev [ 1603.515378][T26845] netlink: zone id is out of range [ 1603.584355][T26845] netlink: zone id is out of range [ 1603.641565][T26845] netlink: zone id is out of range [ 1603.705746][T26845] netlink: zone id is out of range [ 1603.819264][T26845] netlink: zone id is out of range [ 1603.921841][T26845] netlink: zone id is out of range [ 1603.984162][T26845] netlink: zone id is out of range [ 1604.046179][T26845] netlink: zone id is out of range [ 1604.097300][T26845] netlink: zone id is out of range [ 1604.156570][T26845] netlink: zone id is out of range [ 1604.658794][T26859] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1607.760552][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.775412][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.124589][T26893] zswap: compressor 000 not available [ 1608.501070][T19412] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1608.527561][T19412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1608.536163][T19412] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1608.552207][T19412] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1608.567140][T19412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1609.154242][T26892] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1610.641070][T19412] Bluetooth: hci4: command tx timeout [ 1610.698789][T26898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.731020][T26898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.764011][T26898] bridge_slave_0: entered allmulticast mode [ 1610.795135][T26909] block2mtd: too many arguments [ 1610.801220][T26898] bridge_slave_0: entered promiscuous mode [ 1610.828084][T26898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.863321][T26898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.894757][T26898] bridge_slave_1: entered allmulticast mode [ 1610.926105][T26898] bridge_slave_1: entered promiscuous mode [ 1611.055551][T26898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.128538][T26898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.351304][T26898] team0: Port device team_slave_0 added [ 1611.388001][T26898] team0: Port device team_slave_1 added [ 1611.570528][T26898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.606802][T26898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1611.720492][T26898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.927188][T26898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.958150][T26898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.046723][T26898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.719341][T19412] Bluetooth: hci4: command tx timeout [ 1612.965676][T26898] hsr_slave_0: entered promiscuous mode [ 1612.994640][T26898] hsr_slave_1: entered promiscuous mode [ 1613.015900][T26898] debugfs: 'hsr0' already exists in 'hsr' [ 1613.035235][T26898] Cannot create hsr debugfs directory [ 1614.227962][T26898] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1614.279481][T26898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1614.306245][T26898] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1614.339845][T26898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1614.367353][T26898] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1614.398845][T26898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1614.437211][T26898] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1614.464496][T26898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1614.723450][T26898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.780003][T26898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1614.803124][T19412] Bluetooth: hci4: command tx timeout [ 1614.830408][T19407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.837556][T19407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1614.904358][T19407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.911626][T19407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.156395][T26898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.879534][T19412] Bluetooth: hci4: command tx timeout [ 1616.911105][T26898] veth0_vlan: entered promiscuous mode [ 1616.950874][T26898] veth1_vlan: entered promiscuous mode [ 1617.151249][T26898] veth0_macvtap: entered promiscuous mode [ 1617.200189][T26898] veth1_macvtap: entered promiscuous mode [ 1617.294119][T26898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.330977][T26898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1617.390929][T19424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.418792][T19424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.470689][T19424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.506844][T19424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.870986][T19424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.907263][T19424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.988540][T19480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.030795][T19480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.402956][T27011] futex_wake_op: syz.0.4332 tries to shift op by -2048; fix this program [ 1618.503466][T27016] netlink: 338 bytes leftover after parsing attributes in process `syz.5.4316'. [ 1618.514737][T27011] futex_wake_op: syz.0.4332 tries to shift op by -2048; fix this program [ 1618.901698][T27026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1619.494214][T27030] x_tables: duplicate underflow at hook 4 [ 1619.998706][T27036] dyndbg: expected <4096 bytes into control [ 1620.833680][T27048] zswap: compressor 000 not available [ 1620.872673][T27060] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1621.425269][T27063] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1622.305329][T27080] netlink: 330 bytes leftover after parsing attributes in process `syz.5.4347'. [ 1622.340956][T27080] MTRR 2 not used [ 1623.815759][T27096] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1624.099061][T27100] program syz.1.4351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1624.674403][T22415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1624.685032][T22415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1624.686398][T22415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1624.687915][T22415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1624.690608][T22415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1626.526814][T27124] random: crng reseeded on system resumption [ 1626.721117][T22415] Bluetooth: hci5: command tx timeout [ 1627.779413][T27150] ptp ptp0: new virtual clock ptp1 [ 1627.802329][T27150] ptp ptp0: guarantee physical clock free running [ 1628.461811][T27103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.488884][T27103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.525225][T27103] bridge_slave_0: entered allmulticast mode [ 1628.566736][T27103] bridge_slave_0: entered promiscuous mode [ 1628.616513][T27103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.657067][T27103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.701425][T27103] bridge_slave_1: entered allmulticast mode [ 1628.735424][T27103] bridge_slave_1: entered promiscuous mode [ 1628.799841][T22415] Bluetooth: hci5: command tx timeout [ 1628.927294][T27103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.011467][T27103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.171186][T27103] team0: Port device team_slave_0 added [ 1629.216663][T27103] team0: Port device team_slave_1 added [ 1629.351576][T27103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.395325][T27103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.473096][T27199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1629.510591][T27103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.589032][T27103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.622748][T27103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.732937][T27103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.868136][T27103] hsr_slave_0: entered promiscuous mode [ 1629.891086][T27103] hsr_slave_1: entered promiscuous mode [ 1629.915591][T27103] debugfs: 'hsr0' already exists in 'hsr' [ 1629.936262][T27103] Cannot create hsr debugfs directory [ 1630.247757][T27210] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1630.334735][T27203] zswap: compressor 000 not available [ 1630.879436][T22415] Bluetooth: hci5: command tx timeout [ 1631.171031][T27103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1631.285520][T27103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1631.331963][T27103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1631.392627][T27103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1631.461131][T27103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1631.532888][T27103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1631.585823][T27103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1631.633628][T27103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1632.273343][T27103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.397260][T27103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.459791][T19424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.467035][T19424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.585891][T19424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.593100][T19424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.959994][T22415] Bluetooth: hci5: command tx timeout [ 1634.661317][T27103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1635.996149][T27103] veth0_vlan: entered promiscuous mode [ 1636.266089][T27103] veth1_vlan: entered promiscuous mode [ 1636.436447][T27103] veth0_macvtap: entered promiscuous mode [ 1636.622366][T27103] veth1_macvtap: entered promiscuous mode [ 1636.823917][T27103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.940720][T27103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.076283][T19422] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.110170][T19422] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.215337][T19422] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.252684][T19422] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.555790][T19422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.597985][T19422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1637.838820][T19407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1637.884864][T19407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.205779][T27339] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1638.277505][T27333] zswap: compressor 000 not available [ 1638.372161][T27341] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1640.363151][T27366] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1640.484181][T27362] zswap: compressor 000 not available [ 1641.071993][T27371] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4397'. [ 1649.729714][T27493] FAULT_INJECTION: forcing a failure. [ 1649.729714][T27493] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.783040][T27493] CPU: 0 UID: 0 PID: 27493 Comm: syz.6.4420 Tainted: G L syzkaller #0 PREEMPT(full) [ 1649.783076][T27493] Tainted: [L]=SOFTLOCKUP [ 1649.783083][T27493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1649.783094][T27493] Call Trace: [ 1649.783101][T27493] [ 1649.783109][T27493] dump_stack_lvl+0x100/0x190 [ 1649.783135][T27493] should_fail_ex.cold+0x5/0xa [ 1649.783165][T27493] should_failslab+0xc2/0x120 [ 1649.783188][T27493] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1649.783217][T27493] ? security_inode_alloc+0x3b/0x2c0 [ 1649.783248][T27493] ? lockdep_init_map_type+0x5c/0x250 [ 1649.783270][T27493] security_inode_alloc+0x3b/0x2c0 [ 1649.783302][T27493] inode_init_always_gfp+0xcc0/0x1000 [ 1649.783329][T27493] alloc_inode+0x8e/0x250 [ 1649.783358][T27493] new_inode+0x22/0x1c0 [ 1649.783388][T27493] hugetlbfs_get_inode+0x39a/0x700 [ 1649.783413][T27493] ? do_futex+0x192/0x350 [ 1649.783436][T27493] hugetlb_file_setup+0x15b/0x5b0 [ 1649.783475][T27493] ksys_mmap_pgoff+0x242/0x610 [ 1649.783502][T27493] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1649.783525][T27493] ? xfd_validate_state+0x129/0x190 [ 1649.783544][T27493] ? ksys_write+0x1ac/0x250 [ 1649.783569][T27493] __x64_sys_mmap+0x125/0x190 [ 1649.783592][T27493] do_syscall_64+0x10b/0xf80 [ 1649.783620][T27493] ? clear_bhb_loop+0x40/0x90 [ 1649.783642][T27493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.783660][T27493] RIP: 0033:0x7f9d4a19cdd9 [ 1649.783676][T27493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.783693][T27493] RSP: 002b:00007f9d4b0d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1649.783712][T27493] RAX: ffffffffffffffda RBX: 00007f9d4a415fa0 RCX: 00007f9d4a19cdd9 [ 1649.783724][T27493] RDX: 0000000000000002 RSI: 0000000000004005 RDI: 0000000007000000 [ 1649.783736][T27493] RBP: 00007f9d4a232d69 R08: 0000000000000401 R09: 0000300000000000 [ 1649.783748][T27493] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1649.783760][T27493] R13: 00007f9d4a416038 R14: 00007f9d4a415fa0 R15: 00007ffe26aacf68 [ 1649.783784][T27493] [ 1651.505172][T27511] zswap: compressor 000 not available [ 1651.548790][T27510] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1651.950042][T27501] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1652.601474][T27531] ubi9: attaching mtd0 [ 1652.646339][T27531] ubi9 error: ubi_attach_mtd_dev: bad VID header (32768) or data offsets (32832) [ 1652.707729][T19412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1652.723248][T19412] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1652.733975][T19412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1652.750206][T19412] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1652.762284][T19412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1654.879427][T22415] Bluetooth: hci6: command tx timeout [ 1656.666768][T27533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.707758][T27533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.752129][T27533] bridge_slave_0: entered allmulticast mode [ 1656.794176][T27533] bridge_slave_0: entered promiscuous mode [ 1656.828383][T27533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.853880][T27533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.877316][T27533] bridge_slave_1: entered allmulticast mode [ 1656.913774][T27533] bridge_slave_1: entered promiscuous mode [ 1656.960195][T22415] Bluetooth: hci6: command tx timeout [ 1657.051123][T27533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.120730][T27533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.417091][T27533] team0: Port device team_slave_0 added [ 1657.598006][T27533] team0: Port device team_slave_1 added [ 1657.887357][T27533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.915141][T27533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.002200][T27533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.057007][T27533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.102313][T27533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.211780][T27533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.418953][T27619] FAULT_INJECTION: forcing a failure. [ 1658.418953][T27619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.474914][T27533] hsr_slave_0: entered promiscuous mode [ 1658.498387][T27619] CPU: 0 UID: 0 PID: 27619 Comm: syz.1.4444 Tainted: G L syzkaller #0 PREEMPT(full) [ 1658.498420][T27619] Tainted: [L]=SOFTLOCKUP [ 1658.498427][T27619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1658.498438][T27619] Call Trace: [ 1658.498445][T27619] [ 1658.498453][T27619] dump_stack_lvl+0x100/0x190 [ 1658.498479][T27619] should_fail_ex.cold+0x5/0xa [ 1658.498502][T27619] _copy_from_iter+0x1f4/0x1690 [ 1658.498524][T27619] ? __asan_memset+0x23/0x50 [ 1658.498554][T27619] ? __pfx__copy_from_iter+0x10/0x10 [ 1658.498572][T27619] ? __pfx___alloc_skb+0x10/0x10 [ 1658.498592][T27619] ? __pfx___might_resched+0x10/0x10 [ 1658.498614][T27619] ? __lock_acquire+0x4a5/0x2630 [ 1658.498638][T27619] netlink_sendmsg+0x808/0xda0 [ 1658.498674][T27619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1658.498699][T27619] ? __import_iovec+0x1d2/0x640 [ 1658.498720][T27619] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1658.498753][T27619] ____sys_sendmsg+0x9e1/0xb70 [ 1658.498779][T27619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1658.498808][T27619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1658.498843][T27619] ___sys_sendmsg+0x190/0x1e0 [ 1658.498873][T27619] ? __pfx____sys_sendmsg+0x10/0x10 [ 1658.498926][T27619] __sys_sendmsg+0x170/0x220 [ 1658.498948][T27619] ? __pfx___sys_sendmsg+0x10/0x10 [ 1658.498978][T27619] ? rcu_is_watching+0x12/0xc0 [ 1658.499004][T27619] do_syscall_64+0x10b/0xf80 [ 1658.499032][T27619] ? clear_bhb_loop+0x40/0x90 [ 1658.499055][T27619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.499074][T27619] RIP: 0033:0x7f657a59cdd9 [ 1658.499090][T27619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.499109][T27619] RSP: 002b:00007f657b4de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.499128][T27619] RAX: ffffffffffffffda RBX: 00007f657a815fa0 RCX: 00007f657a59cdd9 [ 1658.499141][T27619] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 1658.499152][T27619] RBP: 00007f657b4de090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.499163][T27619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.499174][T27619] R13: 00007f657a816038 R14: 00007f657a815fa0 R15: 00007ffee63e2158 [ 1658.499197][T27619] [ 1658.831173][T27533] hsr_slave_1: entered promiscuous mode [ 1658.838336][T27533] debugfs: 'hsr0' already exists in 'hsr' [ 1658.844134][T27533] Cannot create hsr debugfs directory [ 1659.093950][T22415] Bluetooth: hci6: command tx timeout [ 1659.827834][T27637] ubi0: attaching mtd0 [ 1659.883121][T27637] ubi0: scanning is finished [ 1659.898778][T27637] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1660.065619][T27637] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1660.075539][T27533] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1660.107784][T27533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1660.167084][T27533] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1660.219767][T27533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1660.283085][T27533] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1660.333474][T27533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1660.361864][T27533] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1660.407625][T27533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1660.944328][T27533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.024181][T27533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.095526][T19426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.102880][T19426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.124780][T22415] Bluetooth: hci6: command tx timeout [ 1661.246186][T19455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.253489][T19455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.748718][T27682] __vm_enough_memory: pid: 27682, comm: syz.6.4454, bytes: 4398046457856 not enough memory for the allocation [ 1663.130879][T27533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.373137][T27690] zswap: compressor 000 not available [ 1664.113651][T27533] veth0_vlan: entered promiscuous mode [ 1664.210777][T27533] veth1_vlan: entered promiscuous mode [ 1664.332982][T27533] veth0_macvtap: entered promiscuous mode [ 1664.398161][T27533] veth1_macvtap: entered promiscuous mode [ 1664.490268][T27533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.552452][T27533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.615424][T19818] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.658467][T19818] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.726048][T19818] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.761992][T19818] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.388583][T19818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.422778][T19818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.605736][T19455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.638872][T19455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.371268][T27740] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.8388608.4294967291), cmd(3) [ 1666.820113][T27735] FAULT_INJECTION: forcing a failure. [ 1666.820113][T27735] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1666.933498][T27735] CPU: 0 UID: 0 PID: 27735 Comm: syz.7.4429 Tainted: G L syzkaller #0 PREEMPT(full) [ 1666.933532][T27735] Tainted: [L]=SOFTLOCKUP [ 1666.933540][T27735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1666.933551][T27735] Call Trace: [ 1666.933558][T27735] [ 1666.933566][T27735] dump_stack_lvl+0x100/0x190 [ 1666.933591][T27735] should_fail_ex.cold+0x5/0xa [ 1666.933616][T27735] get_futex_key+0x295/0x1510 [ 1666.933638][T27735] ? __pfx_get_futex_key+0x10/0x10 [ 1666.933656][T27735] ? lock_acquire+0x1b1/0x370 [ 1666.933680][T27735] futex_wake+0xea/0x530 [ 1666.933707][T27735] ? __pfx_futex_wake+0x10/0x10 [ 1666.933739][T27735] ? exit_mm_release+0x19/0x30 [ 1666.933772][T27735] do_futex+0x32b/0x350 [ 1666.933793][T27735] ? __pfx_do_futex+0x10/0x10 [ 1666.933812][T27735] ? __might_fault+0xc5/0x140 [ 1666.933847][T27735] mm_release+0x24a/0x2f0 [ 1666.933872][T27735] do_exit+0x707/0x2a60 [ 1666.933904][T27735] ? __pfx_do_exit+0x10/0x10 [ 1666.933933][T27735] ? do_raw_spin_lock+0x128/0x260 [ 1666.933955][T27735] ? find_held_lock+0x2b/0x80 [ 1666.933979][T27735] ? get_signal+0x7e0/0x21e0 [ 1666.934004][T27735] do_group_exit+0xd5/0x2a0 [ 1666.934030][T27735] get_signal+0x1ec7/0x21e0 [ 1666.934062][T27735] ? __pfx_get_signal+0x10/0x10 [ 1666.934088][T27735] ? do_futex+0x192/0x350 [ 1666.934110][T27735] arch_do_signal_or_restart+0x91/0x7a0 [ 1666.934140][T27735] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1666.934191][T27735] ? rcu_is_watching+0x12/0xc0 [ 1666.934218][T27735] exit_to_user_mode_loop+0x8b/0x4f0 [ 1666.934241][T27735] ? rcu_is_watching+0x12/0xc0 [ 1666.934266][T27735] do_syscall_64+0x6f2/0xf80 [ 1666.934293][T27735] ? clear_bhb_loop+0x40/0x90 [ 1666.934316][T27735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.934335][T27735] RIP: 0033:0x7f302939cdd9 [ 1666.934351][T27735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.934370][T27735] RSP: 002b:00007f30275f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1666.934390][T27735] RAX: fffffffffffffe00 RBX: 00007f3029616188 RCX: 00007f302939cdd9 [ 1666.934403][T27735] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3029616188 [ 1666.934414][T27735] RBP: 00007f3029616180 R08: 0000000000000000 R09: 0000000000000000 [ 1666.934425][T27735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1666.934437][T27735] R13: 00007f3029616218 R14: 00007ffe472c24b0 R15: 00007ffe472c2598 [ 1666.934460][T27735] [ 1667.912605][T27755] zswap: compressor 000 not available [ 1669.206515][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.206564][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.302406][T27802] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1671.346234][T27802] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 1672.894478][T27834] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1675.210419][T19412] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1675.226495][T19412] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1675.245005][T19412] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1675.258242][T19412] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1675.270893][T19412] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1677.331618][T27897] net_ratelimit: 69 callbacks suppressed [ 1677.331638][T27897] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1677.360357][T19412] Bluetooth: hci7: command tx timeout [ 1677.534353][T27892] FAULT_INJECTION: forcing a failure. [ 1677.534353][T27892] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.568648][T27903] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1677.628197][T27890] zswap: compressor 000 not available [ 1677.646295][T27892] CPU: 0 UID: 0 PID: 27892 Comm: syz.1.4491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1677.646327][T27892] Tainted: [L]=SOFTLOCKUP [ 1677.646334][T27892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1677.646345][T27892] Call Trace: [ 1677.646352][T27892] [ 1677.646360][T27892] dump_stack_lvl+0x100/0x190 [ 1677.646386][T27892] should_fail_ex.cold+0x5/0xa [ 1677.646409][T27892] should_failslab+0xc2/0x120 [ 1677.646432][T27892] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1677.646453][T27892] ? kasprintf+0xc7/0x100 [ 1677.646472][T27892] ? __lock_acquire+0x4a5/0x2630 [ 1677.646492][T27892] kvasprintf+0xbc/0x150 [ 1677.646511][T27892] ? __pfx_kvasprintf+0x10/0x10 [ 1677.646538][T27892] kasprintf+0xc7/0x100 [ 1677.646557][T27892] ? __pfx_kasprintf+0x10/0x10 [ 1677.646577][T27892] ? __is_module_percpu_address+0x1c2/0x430 [ 1677.646614][T27892] wq_init_lockdep+0x3f/0xe0 [ 1677.646642][T27892] alloc_workqueue_noprof+0xdc/0x130 [ 1677.646669][T27892] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1677.646702][T27892] ? __pfx___debug_object_init+0x10/0x10 [ 1677.646735][T27892] nci_register_device+0x394/0xb80 [ 1677.646759][T27892] ? __pfx_nci_register_device+0x10/0x10 [ 1677.646784][T27892] ? lockdep_init_map_type+0x5c/0x250 [ 1677.646806][T27892] virtual_ncidev_open+0x141/0x220 [ 1677.646836][T27892] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1677.646864][T27892] misc_open+0x26d/0x450 [ 1677.646887][T27892] ? __pfx_misc_open+0x10/0x10 [ 1677.646909][T27892] chrdev_open+0x234/0x6a0 [ 1677.646932][T27892] ? __pfx_apparmor_file_open+0x10/0x10 [ 1677.646962][T27892] ? __pfx_chrdev_open+0x10/0x10 [ 1677.646987][T27892] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1677.647016][T27892] do_dentry_open+0x6d8/0x1660 [ 1677.647038][T27892] ? __pfx_chrdev_open+0x10/0x10 [ 1677.647066][T27892] vfs_open+0x82/0x3f0 [ 1677.647095][T27892] path_openat+0x208c/0x31a0 [ 1677.647138][T27892] ? __pfx_path_openat+0x10/0x10 [ 1677.647170][T27892] do_file_open+0x20e/0x430 [ 1677.647195][T27892] ? __pfx_do_file_open+0x10/0x10 [ 1677.647236][T27892] ? alloc_fd+0x476/0x790 [ 1677.647260][T27892] ? do_getname+0x191/0x390 [ 1677.647290][T27892] do_sys_openat2+0x10d/0x1e0 [ 1677.647319][T27892] ? __pfx_do_sys_openat2+0x10/0x10 [ 1677.647350][T27892] ? __sys_sendmsg+0x18f/0x220 [ 1677.647376][T27892] __x64_sys_openat+0x12d/0x210 [ 1677.647405][T27892] ? __pfx___x64_sys_openat+0x10/0x10 [ 1677.647438][T27892] ? rcu_is_watching+0x12/0xc0 [ 1677.647463][T27892] do_syscall_64+0x10b/0xf80 [ 1677.647490][T27892] ? clear_bhb_loop+0x40/0x90 [ 1677.647512][T27892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.647531][T27892] RIP: 0033:0x7f657a59cdd9 [ 1677.647548][T27892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.647566][T27892] RSP: 002b:00007f657b4de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1677.647585][T27892] RAX: ffffffffffffffda RBX: 00007f657a815fa0 RCX: 00007f657a59cdd9 [ 1677.647597][T27892] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1677.647609][T27892] RBP: 00007f657a632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1677.647621][T27892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.647632][T27892] R13: 00007f657a816038 R14: 00007f657a815fa0 R15: 00007ffee63e2158 [ 1677.647656][T27892] [ 1679.141888][T27863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.174581][T27863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.212629][T27863] bridge_slave_0: entered allmulticast mode [ 1679.247743][T27863] bridge_slave_0: entered promiscuous mode [ 1679.295930][T27863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.346756][T27863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.386873][T27863] bridge_slave_1: entered allmulticast mode [ 1679.433275][T27863] bridge_slave_1: entered promiscuous mode [ 1679.449118][T19412] Bluetooth: hci7: command tx timeout [ 1679.749240][T27863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1679.925468][T27863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.260641][T27863] team0: Port device team_slave_0 added [ 1680.306019][T27863] team0: Port device team_slave_1 added [ 1680.436044][T27863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.456105][T27863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.540167][T27863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.578301][T27863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.601124][T27863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.660679][T27863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.891402][T27932] zswap: compressor 000 not available [ 1680.907962][T27863] hsr_slave_0: entered promiscuous mode [ 1680.953258][T27863] hsr_slave_1: entered promiscuous mode [ 1680.969270][T27939] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1680.987732][T27863] debugfs: 'hsr0' already exists in 'hsr' [ 1681.011115][T27863] Cannot create hsr debugfs directory [ 1681.520189][T19412] Bluetooth: hci7: command tx timeout [ 1683.556818][T27863] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1683.590339][T27863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1683.595340][T27863] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1683.601401][T19412] Bluetooth: hci7: command tx timeout [ 1683.645481][T27863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1683.647854][T27863] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1683.672053][T27863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1683.675529][T27863] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1683.687135][T27863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1684.116274][T27863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.221911][T27863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.310823][T19426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.318153][T19426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.385287][T19426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.392587][T19426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.677907][T28002] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1684.794611][T27995] zswap: compressor 000 not available [ 1686.637012][T27863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.650506][T27863] veth0_vlan: entered promiscuous mode [ 1687.888950][T27863] veth1_vlan: entered promiscuous mode [ 1688.063281][T27863] veth0_macvtap: entered promiscuous mode [ 1688.138643][T27863] veth1_macvtap: entered promiscuous mode [ 1688.398919][T27863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.403534][T27863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.509940][T19426] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.510110][T19426] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.510147][T19426] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.510181][T19426] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.932983][T19426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.997689][T19426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.079341][T28068] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1689.203350][T28059] zswap: compressor 000 not available [ 1689.376103][T19407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.415842][T19407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.509517][T28091] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1690.578065][T28082] zswap: compressor 000 not available [ 1692.485879][T28118] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1692.732975][T28119] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1692.749067][T28123] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1693.065578][T28133] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1694.950760][T28167] FAULT_INJECTION: forcing a failure. [ 1694.950760][T28167] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1695.113993][T28167] CPU: 0 UID: 0 PID: 28167 Comm: syz.1.4535 Tainted: G L syzkaller #0 PREEMPT(full) [ 1695.114028][T28167] Tainted: [L]=SOFTLOCKUP [ 1695.114035][T28167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1695.114047][T28167] Call Trace: [ 1695.114054][T28167] [ 1695.114062][T28167] dump_stack_lvl+0x100/0x190 [ 1695.114088][T28167] should_fail_ex.cold+0x5/0xa [ 1695.114112][T28167] get_futex_key+0x1d2/0x1510 [ 1695.114134][T28167] ? __pfx_get_futex_key+0x10/0x10 [ 1695.114151][T28167] ? futex_hash+0x2ad/0x370 [ 1695.114170][T28167] ? futex_hash+0x141/0x370 [ 1695.114193][T28167] futex_wake+0xea/0x530 [ 1695.114217][T28167] ? __pfx_futex_wait+0x10/0x10 [ 1695.114242][T28167] ? __pfx_futex_wake+0x10/0x10 [ 1695.114267][T28167] ? __lock_acquire+0x4a5/0x2630 [ 1695.114285][T28167] ? do_sys_openat2+0x1b4/0x1e0 [ 1695.114317][T28167] do_futex+0x32b/0x350 [ 1695.114338][T28167] ? __pfx_do_futex+0x10/0x10 [ 1695.114359][T28167] ? find_held_lock+0x2b/0x80 [ 1695.114385][T28167] __x64_sys_futex+0x34f/0x4d0 [ 1695.114407][T28167] ? __fget_files+0x21f/0x3d0 [ 1695.114428][T28167] ? __pfx___x64_sys_futex+0x10/0x10 [ 1695.114453][T28167] ? rcu_is_watching+0x12/0xc0 [ 1695.114477][T28167] do_syscall_64+0x10b/0xf80 [ 1695.114505][T28167] ? clear_bhb_loop+0x40/0x90 [ 1695.114527][T28167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.114546][T28167] RIP: 0033:0x7f657a59cdd9 [ 1695.114562][T28167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.114580][T28167] RSP: 002b:00007f657b49c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1695.114599][T28167] RAX: ffffffffffffffda RBX: 00007f657a816188 RCX: 00007f657a59cdd9 [ 1695.114611][T28167] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f657a81618c [ 1695.114622][T28167] RBP: 00007f657a816180 R08: 0000000000000001 R09: 0000000000000000 [ 1695.114634][T28167] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1695.114646][T28167] R13: 00007f657a816218 R14: 00007ffee63e2070 R15: 00007ffee63e2158 [ 1695.114669][T28167] [ 1696.366392][T28177] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1696.463722][T28184] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4540'. [ 1696.509891][T28184] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1697.665691][T28203] FAULT_INJECTION: forcing a failure. [ 1697.665691][T28203] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.774213][T28203] CPU: 0 UID: 0 PID: 28203 Comm: syz.8.4543 Tainted: G L syzkaller #0 PREEMPT(full) [ 1697.774245][T28203] Tainted: [L]=SOFTLOCKUP [ 1697.774253][T28203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1697.774264][T28203] Call Trace: [ 1697.774273][T28203] [ 1697.774282][T28203] dump_stack_lvl+0x100/0x190 [ 1697.774307][T28203] should_fail_ex.cold+0x5/0xa [ 1697.774333][T28203] should_failslab+0xc2/0x120 [ 1697.774356][T28203] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1697.774383][T28203] ? vkms_plane_duplicate_state+0x45/0x130 [ 1697.774409][T28203] vkms_plane_duplicate_state+0x45/0x130 [ 1697.774431][T28203] drm_atomic_get_plane_state+0x279/0x760 [ 1697.774460][T28203] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1697.774480][T28203] ? rcu_is_watching+0x12/0xc0 [ 1697.774507][T28203] ? __mutex_lock+0x26d/0x1b10 [ 1697.774538][T28203] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1697.774557][T28203] ? drm_master_internal_acquire+0x21/0x80 [ 1697.774609][T28203] drm_client_modeset_commit_locked+0x14d/0x580 [ 1697.774632][T28203] drm_client_modeset_commit+0x4f/0x80 [ 1697.774652][T28203] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1697.774685][T28203] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1697.774719][T28203] drm_fbdev_client_restore+0x1b/0x30 [ 1697.774743][T28203] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1697.774768][T28203] drm_client_dev_restore+0x205/0x2a0 [ 1697.774802][T28203] drm_release+0x2c6/0x360 [ 1697.774830][T28203] ? __pfx_drm_release+0x10/0x10 [ 1697.774976][T28203] __fput+0x3ff/0xb50 [ 1697.775014][T28203] task_work_run+0x150/0x240 [ 1697.775035][T28203] ? __pfx_task_work_run+0x10/0x10 [ 1697.775062][T28203] ? rcu_is_watching+0x12/0xc0 [ 1697.775088][T28203] exit_to_user_mode_loop+0x107/0x4f0 [ 1697.775108][T28203] ? rcu_is_watching+0x12/0xc0 [ 1697.775134][T28203] do_syscall_64+0x6f2/0xf80 [ 1697.775161][T28203] ? clear_bhb_loop+0x40/0x90 [ 1697.775184][T28203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.775203][T28203] RIP: 0033:0x7f82fe99cdd9 [ 1697.775220][T28203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1697.775238][T28203] RSP: 002b:00007f82ff84c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1697.775257][T28203] RAX: 0000000000000000 RBX: 00007f82fec15fa0 RCX: 00007f82fe99cdd9 [ 1697.775269][T28203] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1697.775280][T28203] RBP: 00007f82fea32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1697.775292][T28203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1697.775304][T28203] R13: 00007f82fec16038 R14: 00007f82fec15fa0 R15: 00007ffff87cfe48 [ 1697.775329][T28203] [ 1698.348907][T19412] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1698.358415][T19412] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 1700.089297][T28240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1700.377105][T28249] ima: policy update failed [ 1700.440961][ T29] audit: type=1802 audit(4294967380.230:25): pid=28249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.4552" res=0 errno=0 [ 1701.076608][T28253] zswap: compressor not available [ 1701.909061][T28255] zswap: compressor not available [ 1702.390041][T28284] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1702.423067][T28274] zswap: compressor 000 not available [ 1703.351640][T28301] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1703.496778][T28292] zswap: compressor 000 not available [ 1703.677537][T28307] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1704.035167][T28299] zswap: compressor 000 not available [ 1704.163723][T28315] IPVS: length: 131 != 8 [ 1704.209331][T28316] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1704.559539][T28309] zswap: compressor 000 not available [ 1707.276890][T28360] deleting an unspecified loop device is not supported. [ 1708.159330][T28376] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1708.248430][T28363] zswap: compressor 000 not available [ 1708.357142][ T29] audit: type=1804 audit(4294967388.150:26): pid=28381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.4576" name="/newroot/sys/kernel/tracing/uprobe_events" dev="tracefs" ino=22 res=1 errno=0 [ 1708.397248][T28348] block2mtd: too many arguments [ 1708.797340][T28388] Invalid ELF header magic: != ELF [ 1709.424695][T28391] FAULT_INJECTION: forcing a failure. [ 1709.424695][T28391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1709.501934][T28391] CPU: 0 UID: 0 PID: 28391 Comm: syz.8.4578 Tainted: G L syzkaller #0 PREEMPT(full) [ 1709.501968][T28391] Tainted: [L]=SOFTLOCKUP [ 1709.501975][T28391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1709.501987][T28391] Call Trace: [ 1709.501993][T28391] [ 1709.502001][T28391] dump_stack_lvl+0x100/0x190 [ 1709.502028][T28391] should_fail_ex.cold+0x5/0xa [ 1709.502052][T28391] _copy_from_user+0x2e/0xd0 [ 1709.502073][T28391] kstrtouint_from_user+0xd6/0x1d0 [ 1709.502098][T28391] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1709.502122][T28391] ? __lock_acquire+0x4a5/0x2630 [ 1709.502144][T28391] ? lock_acquire+0x1b1/0x370 [ 1709.502166][T28391] proc_fail_nth_write+0x83/0x220 [ 1709.502196][T28391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1709.502233][T28391] vfs_write+0x2aa/0x1070 [ 1709.502256][T28391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1709.502288][T28391] ? __pfx_vfs_write+0x10/0x10 [ 1709.502309][T28391] ? __fget_files+0x215/0x3d0 [ 1709.502336][T28391] ? __fget_files+0x21f/0x3d0 [ 1709.502364][T28391] ksys_write+0x12a/0x250 [ 1709.502386][T28391] ? __pfx_ksys_write+0x10/0x10 [ 1709.502409][T28391] ? rcu_is_watching+0x12/0xc0 [ 1709.502434][T28391] do_syscall_64+0x10b/0xf80 [ 1709.502462][T28391] ? clear_bhb_loop+0x40/0x90 [ 1709.502484][T28391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.502504][T28391] RIP: 0033:0x7f82fe95d60e [ 1709.502524][T28391] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1709.502543][T28391] RSP: 002b:00007f82ff84bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1709.502562][T28391] RAX: ffffffffffffffda RBX: 00007f82ff84c6c0 RCX: 00007f82fe95d60e [ 1709.502575][T28391] RDX: 0000000000000001 RSI: 00007f82ff84c0a0 RDI: 0000000000000005 [ 1709.502586][T28391] RBP: 00007f82ff84c090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.502597][T28391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.502608][T28391] R13: 00007f82fec16038 R14: 00007f82fec15fa0 R15: 00007ffff87cfe48 [ 1709.502632][T28391] [ 1710.582479][T28401] : Can't lookup blockdev [ 1710.722902][T19412] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1710.745389][T19412] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1710.755083][T19412] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1710.771973][T19412] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1710.781587][T19412] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1711.499720][T28416] bridge0: port 3(veth1) entered blocking state [ 1711.550227][T28416] bridge0: port 3(veth1) entered disabled state [ 1711.563140][T28417] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1711.605462][T28416] veth1: entered allmulticast mode [ 1711.694230][T28416] veth1: entered promiscuous mode [ 1711.725168][T28416] bridge0: port 3(veth1) entered blocking state [ 1711.733367][T28416] bridge0: port 3(veth1) entered forwarding state [ 1711.771918][T28404] zswap: compressor 000 not available [ 1712.270639][T28426] random: crng reseeded on system resumption [ 1712.879666][T19412] Bluetooth: hci8: command tx timeout [ 1713.467227][T28443] block2mtd: too many arguments [ 1713.537360][T28460] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1714.959725][T19412] Bluetooth: hci8: command tx timeout [ 1715.495106][T28402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.526667][T28402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.547277][T28402] bridge_slave_0: entered allmulticast mode [ 1715.576067][T28402] bridge_slave_0: entered promiscuous mode [ 1715.601175][T28402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.630632][T28402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.663755][T28402] bridge_slave_1: entered allmulticast mode [ 1715.702469][T28402] bridge_slave_1: entered promiscuous mode [ 1715.864705][T28402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.892113][T28481] zswap: compressor 000 not available [ 1715.912198][T28402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.956779][T28486] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1716.092940][T28402] team0: Port device team_slave_0 added [ 1716.120230][T28402] team0: Port device team_slave_1 added [ 1716.229758][T28402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.265403][T28402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.366395][T28402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.373440][T28402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.373459][T28402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.373484][T28402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.526666][T28402] hsr_slave_0: entered promiscuous mode [ 1716.532034][T28402] hsr_slave_1: entered promiscuous mode [ 1716.535390][T28402] debugfs: 'hsr0' already exists in 'hsr' [ 1716.535413][T28402] Cannot create hsr debugfs directory [ 1717.040226][T19412] Bluetooth: hci8: command tx timeout [ 1717.225723][T28402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.570154][T28496] netlink: zone id is out of range [ 1717.583772][T28402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.600199][T28496] netlink: zone id is out of range [ 1717.618929][T28496] netlink: zone id is out of range [ 1717.643996][T28496] netlink: zone id is out of range [ 1717.662973][T28496] netlink: zone id is out of range [ 1717.677981][T28496] netlink: zone id is out of range [ 1717.690185][T28496] netlink: zone id is out of range [ 1717.723829][T28496] netlink: zone id is out of range [ 1717.752293][T28496] netlink: zone id is out of range [ 1717.783247][T28496] netlink: zone id is out of range [ 1717.882321][T28402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.011255][T28402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.602596][T28402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1718.638329][T28402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1718.663182][T28402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1718.701914][T28402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1718.733691][T28402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1718.773926][T28402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1718.802661][T28402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1718.856152][T28402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1719.120522][T19412] Bluetooth: hci8: command tx timeout [ 1719.386282][T28402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.468621][T28402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.518757][T28456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.526046][T28456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.589679][T28027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.598358][T28027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.146510][T28523] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1721.083594][T28543] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1721.128621][T28402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.143716][T28533] zswap: compressor 000 not available [ 1721.254812][T28402] veth0_vlan: entered promiscuous mode [ 1721.292409][T28402] veth1_vlan: entered promiscuous mode [ 1721.354369][T28402] veth0_macvtap: entered promiscuous mode [ 1721.373046][T28402] veth1_macvtap: entered promiscuous mode [ 1721.417698][T28402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1721.452139][T28402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.482851][T28454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.516141][T28454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.545828][T28454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.578815][T28454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.837580][T28449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.866823][T28449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.004040][T19480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1722.023521][T19480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.692118][T28560] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1723.882611][T28579] zswap: compressor 000 not available [ 1723.970017][T28579] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1727.157078][T28624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4610'. [ 1727.583597][T22415] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1727.608671][T22415] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1727.628033][T22415] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1727.644206][T22415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1727.655680][T22415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1728.292411][T28639] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1728.340674][T28639] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 1729.301756][T28646] zswap: compressor 000 not available [ 1729.398813][T28646] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1729.589411][T28660] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1729.651086][T28651] zswap: compressor 000 not available [ 1729.764675][T22415] Bluetooth: hci1: command tx timeout [ 1730.350097][T28628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.361429][T28628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.368892][T28628] bridge_slave_0: entered allmulticast mode [ 1730.387201][T28628] bridge_slave_0: entered promiscuous mode [ 1730.402643][T28628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.414526][T28628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.422018][T28628] bridge_slave_1: entered allmulticast mode [ 1730.432641][T28628] bridge_slave_1: entered promiscuous mode [ 1730.497832][T28628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.519957][T28628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.583652][T28628] team0: Port device team_slave_0 added [ 1730.624209][T28628] team0: Port device team_slave_1 added [ 1730.659895][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.667614][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.818726][T28628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.846388][T28628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.920442][T28628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.939054][T28628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.946729][T28628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.003366][T28628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.186240][T28628] hsr_slave_0: entered promiscuous mode [ 1731.224519][T28628] hsr_slave_1: entered promiscuous mode [ 1731.257977][T28628] debugfs: 'hsr0' already exists in 'hsr' [ 1731.277613][T28628] Cannot create hsr debugfs directory [ 1731.592967][T28673] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1731.692484][T28673] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1731.840796][T19412] Bluetooth: hci1: command tx timeout [ 1732.315819][T28686] hub 3-0:1.0: USB hub found [ 1732.368943][T28686] hub 3-0:1.0: 1 port detected [ 1732.537070][T28686] usb usb3: authorized to connect [ 1732.628659][T28628] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1732.676462][T28628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1732.707565][T28628] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1732.732271][T19412] Bluetooth: hci4: command 0x0406 tx timeout [ 1732.792708][T28628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1732.894208][T28628] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1732.914466][T28692] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 1732.914828][T28628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1733.029674][T28628] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1733.063394][T28628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1733.919991][T22415] Bluetooth: hci1: command tx timeout [ 1733.970510][T28628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1734.045446][T28628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1734.104888][T28455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.112360][T28455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1734.186284][T28455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.193565][T28455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1734.326958][T28716] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1734.434830][T28719] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4625'. [ 1734.467388][T28718] FAULT_INJECTION: forcing a failure. [ 1734.467388][T28718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1734.545453][T28718] CPU: 1 UID: 0 PID: 28718 Comm: syz.6.4626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1734.545503][T28718] Tainted: [L]=SOFTLOCKUP [ 1734.545515][T28718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1734.545532][T28718] Call Trace: [ 1734.545542][T28718] [ 1734.545553][T28718] dump_stack_lvl+0x100/0x190 [ 1734.545592][T28718] should_fail_ex.cold+0x5/0xa [ 1734.545629][T28718] get_futex_key+0x295/0x1510 [ 1734.545664][T28718] ? __pfx_get_futex_key+0x10/0x10 [ 1734.545691][T28718] ? lock_acquire+0x1b1/0x370 [ 1734.545732][T28718] futex_wake+0xea/0x530 [ 1734.545774][T28718] ? __pfx_futex_wake+0x10/0x10 [ 1734.545809][T28718] ? exit_mm_release+0x19/0x30 [ 1734.545865][T28718] do_futex+0x32b/0x350 [ 1734.545898][T28718] ? __pfx_do_futex+0x10/0x10 [ 1734.545927][T28718] ? __might_fault+0xc5/0x140 [ 1734.545983][T28718] mm_release+0x24a/0x2f0 [ 1734.546020][T28718] do_exit+0x707/0x2a60 [ 1734.546071][T28718] ? __pfx_do_exit+0x10/0x10 [ 1734.546115][T28718] ? do_raw_spin_lock+0x128/0x260 [ 1734.546148][T28718] ? find_held_lock+0x2b/0x80 [ 1734.546184][T28718] ? get_signal+0x7e0/0x21e0 [ 1734.546224][T28718] do_group_exit+0xd5/0x2a0 [ 1734.546253][T28718] get_signal+0x1ec7/0x21e0 [ 1734.546304][T28718] ? __pfx_get_signal+0x10/0x10 [ 1734.546349][T28718] ? do_futex+0x192/0x350 [ 1734.546383][T28718] arch_do_signal_or_restart+0x91/0x7a0 [ 1734.546427][T28718] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1734.546484][T28718] ? rcu_is_watching+0x12/0xc0 [ 1734.546523][T28718] exit_to_user_mode_loop+0x8b/0x4f0 [ 1734.546550][T28718] ? rcu_is_watching+0x12/0xc0 [ 1734.546586][T28718] do_syscall_64+0x6f2/0xf80 [ 1734.546628][T28718] ? clear_bhb_loop+0x40/0x90 [ 1734.546664][T28718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.546693][T28718] RIP: 0033:0x7f9d4a19cdd9 [ 1734.546719][T28718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.546746][T28718] RSP: 002b:00007f9d4b0d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1734.546775][T28718] RAX: fffffffffffffe00 RBX: 00007f9d4a415fa8 RCX: 00007f9d4a19cdd9 [ 1734.546793][T28718] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9d4a415fa8 [ 1734.546817][T28718] RBP: 00007f9d4a415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.546836][T28718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.546852][T28718] R13: 00007f9d4a416038 R14: 00007ffe26aace80 R15: 00007ffe26aacf68 [ 1734.546892][T28718] [ 1735.947780][T28628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1736.001505][T22415] Bluetooth: hci1: command tx timeout [ 1736.219361][T28730] zswap: compressor 000 not available [ 1736.359322][T28743] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1736.660878][T28733] zswap: compressor 000 not available [ 1736.979294][T28628] veth0_vlan: entered promiscuous mode [ 1737.004054][T28628] veth1_vlan: entered promiscuous mode [ 1737.146020][T28628] veth0_macvtap: entered promiscuous mode [ 1737.182730][T28628] veth1_macvtap: entered promiscuous mode [ 1737.246110][T28628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1737.311706][T28628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1737.530064][T28456] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.572004][T28456] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.758204][T28456] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1737.898843][T28456] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1738.458975][T28455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.478027][T28455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.636850][T28455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1738.675932][T28455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.215524][T28788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4634'. [ 1741.542536][T28800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4639'. [ 1741.666415][T28803] FAULT_INJECTION: forcing a failure. [ 1741.666415][T28803] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.735618][T28803] CPU: 1 UID: 0 PID: 28803 Comm: syz.7.4638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1741.735670][T28803] Tainted: [L]=SOFTLOCKUP [ 1741.735682][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1741.735700][T28803] Call Trace: [ 1741.735711][T28803] [ 1741.735724][T28803] dump_stack_lvl+0x100/0x190 [ 1741.735765][T28803] should_fail_ex.cold+0x5/0xa [ 1741.735806][T28803] should_failslab+0xc2/0x120 [ 1741.735844][T28803] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1741.735883][T28803] ? proc_self_get_link+0x189/0x1f0 [ 1741.735928][T28803] proc_self_get_link+0x189/0x1f0 [ 1741.735965][T28803] pick_link+0xac2/0x13c0 [ 1741.735996][T28803] ? __pfx_proc_self_get_link+0x10/0x10 [ 1741.736038][T28803] step_into_slowpath+0x9ba/0xf90 [ 1741.736080][T28803] ? __pfx_step_into_slowpath+0x10/0x10 [ 1741.736121][T28803] ? lookup_fast+0x2da/0x600 [ 1741.736148][T28803] ? inode_permission+0x374/0x620 [ 1741.736201][T28803] link_path_walk+0xf28/0x1cc0 [ 1741.736247][T28803] path_openat+0x1be/0x31a0 [ 1741.736284][T28803] ? kasan_save_stack+0x3f/0x50 [ 1741.736313][T28803] ? kasan_save_stack+0x30/0x50 [ 1741.736342][T28803] ? kasan_save_track+0x14/0x30 [ 1741.736372][T28803] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1741.736432][T28803] ? __pfx_path_openat+0x10/0x10 [ 1741.736496][T28803] do_file_open+0x20e/0x430 [ 1741.736540][T28803] ? __pfx_do_file_open+0x10/0x10 [ 1741.736611][T28803] ? alloc_fd+0x476/0x790 [ 1741.736660][T28803] ? do_getname+0x191/0x390 [ 1741.736707][T28803] do_sys_openat2+0x10d/0x1e0 [ 1741.736750][T28803] ? __pfx_do_sys_openat2+0x10/0x10 [ 1741.736803][T28803] __x64_sys_openat+0x12d/0x210 [ 1741.736849][T28803] ? __pfx___x64_sys_openat+0x10/0x10 [ 1741.736889][T28803] ? ksys_write+0x1ac/0x250 [ 1741.736927][T28803] ? rcu_is_watching+0x12/0xc0 [ 1741.736964][T28803] do_syscall_64+0x10b/0xf80 [ 1741.737004][T28803] ? clear_bhb_loop+0x40/0x90 [ 1741.737037][T28803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.737067][T28803] RIP: 0033:0x7f302939cdd9 [ 1741.737093][T28803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.737120][T28803] RSP: 002b:00007f30275f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1741.737148][T28803] RAX: ffffffffffffffda RBX: 00007f3029616180 RCX: 00007f302939cdd9 [ 1741.737169][T28803] RDX: 0000000000080c02 RSI: 0000200000002440 RDI: ffffffffffffff9c [ 1741.737188][T28803] RBP: 00007f3029432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1741.737205][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.737223][T28803] R13: 00007f3029616218 R14: 00007f3029616180 R15: 00007ffe472c2598 [ 1741.737262][T28803] [ 1742.114125][T28811] random: crng reseeded on system resumption [ 1742.428897][T28813] hub 1-0:1.0: USB hub found [ 1742.458208][T28813] hub 1-0:1.0: 1 port detected [ 1742.753471][T28810] zswap: compressor 000 not available [ 1743.116589][T19422] bridge_slave_1: left allmulticast mode [ 1743.125817][T19422] bridge_slave_1: left promiscuous mode [ 1743.135193][T19422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.154374][T19422] bridge_slave_0: left allmulticast mode [ 1743.163956][T19422] bridge_slave_0: left promiscuous mode [ 1743.179090][T19422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.944201][T19422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.028367][T19422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.097334][T19422] bond0 (unregistering): Released all slaves [ 1745.085346][T28851] net_ratelimit: 69 callbacks suppressed [ 1745.085373][T28851] netlink: zone id is out of range [ 1745.217819][T28851] netlink: zone id is out of range [ 1745.266685][T28851] netlink: zone id is out of range [ 1745.299211][T28851] netlink: zone id is out of range [ 1745.331765][T28851] netlink: zone id is out of range [ 1745.368118][T28851] netlink: zone id is out of range [ 1745.395019][T28851] netlink: zone id is out of range [ 1745.421869][T28851] netlink: zone id is out of range [ 1745.472149][T28851] netlink: zone id is out of range [ 1745.484119][T28851] netlink: zone id is out of range [ 1745.876288][T19422] hsr_slave_0: left promiscuous mode [ 1745.893593][T19422] hsr_slave_1: left promiscuous mode [ 1745.912164][T19422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.936074][T19422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.979728][T19422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1746.037821][T19422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1746.154006][T19422] veth0_macvtap: left promiscuous mode [ 1746.178534][T19422] veth1_vlan: left promiscuous mode [ 1746.205873][T19422] veth0_vlan: left promiscuous mode [ 1746.277912][T28883] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1746.355547][T28871] zswap: compressor 000 not available [ 1746.838396][T28873] zswap: compressor 000 not available [ 1747.838171][T19422] team0 (unregistering): Port device team_slave_1 removed [ 1747.896425][T19422] team0 (unregistering): Port device team_slave_0 removed [ 1748.084615][T22415] Bluetooth: hci5: command 0x0406 tx timeout [ 1748.684182][T28889] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1749.078458][T28906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1750.453437][T28945] nbd: socks must be embedded in a SOCK_ITEM attr [ 1750.874929][T28947] zswap: compressor 000 not available [ 1751.006630][T28947] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1751.597496][T28966] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1751.602418][T28963] zswap: compressor 000 not available [ 1752.501536][T28978] zswap: compressor 000 not available [ 1752.936836][T28983] zswap: compressor 000 not available [ 1756.097324][T29033] zswap: compressor 000 not available [ 1756.233033][T29033] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1759.384100][T29086] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1760.243363][T29104] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1760.338836][T29089] zswap: compressor 000 not available [ 1760.720225][ T30] INFO: task syz.4.4317:26903 blocked for more than 143 seconds. [ 1760.753421][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1760.803396][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1760.847264][ T30] task:syz.4.4317 state:D stack:26536 pid:26903 tgid:26902 ppid:20574 task_flags:0x400140 flags:0x00080002 [ 1760.893367][ T30] Call Trace: [ 1760.908804][ T30] [ 1760.914012][ T30] __schedule+0x1295/0x67a0 [ 1760.931367][ T30] ? __pfx___schedule+0x10/0x10 [ 1760.951490][ T30] ? find_held_lock+0x2b/0x80 [ 1760.968571][ T30] ? schedule+0x2bf/0x390 [ 1760.985405][ T30] schedule+0xdd/0x390 [ 1761.002426][ T30] schedule_preempt_disabled+0x13/0x30 [ 1761.020737][ T30] __mutex_lock+0xced/0x1b10 [ 1761.044040][ T30] ? expkey_flush+0x18/0x90 [ 1761.067483][ T30] ? do_raw_spin_lock+0x128/0x260 [ 1761.087838][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1761.113259][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1761.133371][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1761.147776][ T30] ? __pfx_cache_clean+0x10/0x10 [ 1761.177327][ T30] ? __pfx___might_resched+0x10/0x10 [ 1761.214548][ T30] ? __pfx_expkey_flush+0x10/0x10 [ 1761.254227][ T30] ? expkey_flush+0x18/0x90 [ 1761.263329][ T30] expkey_flush+0x18/0x90 [ 1761.274885][ T30] write_flush.isra.0+0x2af/0x3d0 [ 1761.304709][ T30] ? __pfx_write_flush.isra.0+0x10/0x10 [ 1761.322915][ T30] ? __pfx___might_resched+0x10/0x10 [ 1761.353054][ T30] ? iovec_from_user+0xda/0x140 [ 1761.435157][ T30] ? __pfx_write_flush_procfs+0x10/0x10 [ 1761.479167][ T30] proc_reg_write+0x240/0x330 [ 1761.491676][ T30] ? __pfx_proc_reg_write+0x10/0x10 [ 1761.512179][ T30] vfs_writev+0x5ea/0xe10 [ 1761.519079][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 1761.526214][ T30] ? __fget_files+0x21f/0x3d0 [ 1761.531898][ T30] ? do_writev+0x13e/0x340 [ 1761.536422][ T30] do_writev+0x13e/0x340 [ 1761.542895][ T30] ? __pfx_do_writev+0x10/0x10 [ 1761.547879][ T30] ? rcu_is_watching+0x12/0xc0 [ 1761.556796][ T30] do_syscall_64+0x10b/0xf80 [ 1761.568327][ T30] ? clear_bhb_loop+0x40/0x90 [ 1761.611595][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.636684][ T30] RIP: 0033:0x7efe4239cdd9 [ 1761.652582][ T30] RSP: 002b:00007efe4330d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1761.705059][ T30] RAX: ffffffffffffffda RBX: 00007efe42615fa0 RCX: 00007efe4239cdd9 [ 1761.818993][ T30] RDX: 000000000000000a RSI: 0000200000000240 RDI: 0000000000000004 [ 1761.894432][ T30] RBP: 00007efe42432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1761.941551][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.955994][ T30] R13: 00007efe42616038 R14: 00007efe42615fa0 R15: 00007ffcece9dc48 [ 1761.974626][ T30] [ 1761.981950][ T30] [ 1761.981950][ T30] Showing all locks held in the system: [ 1761.996646][ T30] 1 lock held by khungtaskd/30: [ 1762.071550][ T30] #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1762.083468][ T30] 2 locks held by getty/22838: [ 1762.088547][ T30] #0: ffff888032e090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1762.104618][ T30] #1: ffffc90004cdb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1762.121568][ T30] 2 locks held by syz.2.4260/26658: [ 1762.137535][ T30] #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1762.163969][ T30] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 1762.184950][ T30] 3 locks held by syz.4.4317/26903: [ 1762.196169][ T30] #0: ffff88807b2a5970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1762.221819][ T30] #1: ffff88802a36e410 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1762.245565][ T30] #2: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 1762.259750][ T30] 1 lock held by syz-executor/27098: [ 1762.265310][ T30] 3 locks held by syz-executor/27103: [ 1762.272933][ T30] #0: ffff888048838ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1762.283318][ T30] #1: ffff8880488380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1762.297273][ T30] #2: ffffffff8e7f0e28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1762.310727][ T30] 2 locks held by syz.0.4388/27323: [ 1762.316034][ T30] #0: ffff888035fa60d8 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1762.350461][ T30] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1762.379230][ T30] 3 locks held by kworker/0:4/27328: [ 1762.389507][ T30] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1762.411119][ T30] #1: ffffc900039f7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1762.439156][ T30] #2: ffffffff8e7f0e28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1762.459158][ T30] 1 lock held by syz-executor/27533: [ 1762.464538][ T30] 2 locks held by syz.5.4446/27626: [ 1762.479187][ T30] #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1762.487574][ T30] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1762.498330][ T30] 2 locks held by syz.5.4446/27627: [ 1762.503940][ T30] #0: ffffffff906bd588 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1762.513075][ T30] #1: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 1762.523785][ T30] 3 locks held by syz.8.4586/28425: [ 1762.529068][ T30] #0: ffff888080287cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1762.538730][ T30] #1: ffff888036886410 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1762.548612][ T30] #2: ffffffff8ec61b20 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 1762.557968][ T30] 4 locks held by kworker/u10:18/28454: [ 1762.569834][ T30] #0: ffff88801c6ae140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1762.589199][ T30] #1: ffffc90003687d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1762.609254][ T30] #2: ffffffff905f6368 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1762.622939][ T30] #3: ffffffff9060f0a0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1762.637275][ T30] 1 lock held by syz.9.4671/29020: [ 1762.647450][ T30] 1 lock held by syz.9.4689/29115: [ 1762.656924][ T30] #0: ffffffff905f6368 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1762.690861][ T30] [ 1762.699615][ T30] ============================================= [ 1762.699615][ T30] [ 1762.736447][ T30] NMI backtrace for cpu 0 [ 1762.736478][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.736518][ T30] Tainted: [L]=SOFTLOCKUP [ 1762.736529][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1762.736546][ T30] Call Trace: [ 1762.736555][ T30] [ 1762.736567][ T30] dump_stack_lvl+0x100/0x190 [ 1762.736606][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1762.736642][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1762.736676][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1762.736715][ T30] sys_info+0x141/0x190 [ 1762.736743][ T30] watchdog+0xcb1/0x1030 [ 1762.736806][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1762.736859][ T30] ? __pfx_watchdog+0x10/0x10 [ 1762.736902][ T30] ? __kthread_parkme+0x18c/0x230 [ 1762.736959][ T30] ? kthread+0x13a/0x450 [ 1762.736985][ T30] ? __pfx_watchdog+0x10/0x10 [ 1762.737023][ T30] kthread+0x370/0x450 [ 1762.737050][ T30] ? __pfx_kthread+0x10/0x10 [ 1762.737080][ T30] ret_from_fork+0x72b/0xd50 [ 1762.737115][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1762.737151][ T30] ? __switch_to+0x800/0x1100 [ 1762.737190][ T30] ? __switch_to_asm+0x39/0x70 [ 1762.737227][ T30] ? __pfx_kthread+0x10/0x10 [ 1762.737256][ T30] ret_from_fork_asm+0x1a/0x30 [ 1762.737314][ T30] [ 1762.737325][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1762.886264][ C1] NMI backtrace for cpu 1 [ 1762.886291][ C1] CPU: 1 UID: 0 PID: 28402 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.886327][ C1] Tainted: [L]=SOFTLOCKUP [ 1762.886336][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1762.886349][ C1] RIP: 0010:unwind_next_frame+0x1308/0x2090 [ 1762.886384][ C1] Code: 0f 9e c7 40 84 f6 40 0f 95 c6 40 84 f7 0f 85 ae 0b 00 00 83 e0 07 38 c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 97 0b 00 00 <4c> 0f bf 31 4d 01 fe e9 9e f9 ff ff 48 b8 00 00 00 00 00 fc ff df [ 1762.886406][ C1] RSP: 0018:ffffc900041df668 EFLAGS: 00000246 [ 1762.886427][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91775fe6 [ 1762.886442][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1762.886456][ C1] RBP: ffffc900041df720 R08: ffffffff91775fea R09: 0000000000000007 [ 1762.886471][ C1] R10: 0000000000000200 R11: 000000000000c788 R12: ffffc900041df728 [ 1762.886486][ C1] R13: ffffc900041df6d8 R14: 0000000000000003 R15: ffffc900041dfc60 [ 1762.886502][ C1] FS: 0000000000000000(0000) GS:ffff888124477000(0000) knlGS:0000000000000000 [ 1762.886525][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1762.886541][ C1] CR2: 000055a2debafee8 CR3: 000000007f852000 CR4: 00000000003526f0 [ 1762.886556][ C1] Call Trace: [ 1762.886564][ C1] [ 1762.886573][ C1] ? do_group_exit+0xd5/0x2a0 [ 1762.886596][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1762.886627][ C1] arch_stack_walk+0x94/0xf0 [ 1762.886657][ C1] ? do_group_exit+0xd5/0x2a0 [ 1762.886680][ C1] stack_trace_save+0x8e/0xc0 [ 1762.886708][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1762.886738][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1762.886761][ C1] save_stack+0x162/0x1e0 [ 1762.886784][ C1] ? __pfx_save_stack+0x10/0x10 [ 1762.886806][ C1] ? __free_frozen_pages+0x747/0x1040 [ 1762.886835][ C1] ? vfree+0x15f/0x8d0 [ 1762.886858][ C1] ? kcov_close+0x34/0x60 [ 1762.886886][ C1] ? __fput+0x3ff/0xb50 [ 1762.886913][ C1] ? task_work_run+0x150/0x240 [ 1762.886935][ C1] ? do_exit+0x8d2/0x2a60 [ 1762.886964][ C1] ? do_group_exit+0xd5/0x2a0 [ 1762.886987][ C1] ? page_ext_put+0x3e/0xd0 [ 1762.887012][ C1] __reset_page_owner+0x84/0x190 [ 1762.887037][ C1] __free_frozen_pages+0x747/0x1040 [ 1762.887069][ C1] vfree+0x15f/0x8d0 [ 1762.887094][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1762.887122][ C1] ? rcu_is_watching+0x12/0xc0 [ 1762.887148][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1762.887178][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1762.887206][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1762.887240][ C1] kcov_close+0x34/0x60 [ 1762.887269][ C1] __fput+0x3ff/0xb50 [ 1762.887298][ C1] ? cleanup_mnt+0x263/0x450 [ 1762.887323][ C1] task_work_run+0x150/0x240 [ 1762.887345][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1762.887371][ C1] do_exit+0x8d2/0x2a60 [ 1762.887404][ C1] ? __pfx_do_exit+0x10/0x10 [ 1762.887435][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1762.887458][ C1] ? find_held_lock+0x2b/0x80 [ 1762.887484][ C1] ? get_signal+0x7e0/0x21e0 [ 1762.887511][ C1] do_group_exit+0xd5/0x2a0 [ 1762.887532][ C1] get_signal+0x1ec7/0x21e0 [ 1762.887557][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 1762.887581][ C1] ? __asan_memset+0x23/0x50 [ 1762.887615][ C1] ? __pfx_get_signal+0x10/0x10 [ 1762.887645][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1762.887677][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 1762.887733][ C1] ? get_timespec64+0x136/0x1b0 [ 1762.887763][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1762.887798][ C1] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1762.887828][ C1] ? rcu_is_watching+0x12/0xc0 [ 1762.887854][ C1] exit_to_user_mode_loop+0x8b/0x4f0 [ 1762.887882][ C1] ? rcu_is_watching+0x12/0xc0 [ 1762.887908][ C1] do_syscall_64+0x6f2/0xf80 [ 1762.887937][ C1] ? clear_bhb_loop+0x40/0x90 [ 1762.887961][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.887982][ C1] RIP: 0033:0x7f54bff5d60e [ 1762.888000][ C1] Code: Unable to access opcode bytes at 0x7f54bff5d5e4. [ 1762.888010][ C1] RSP: 002b:00007ffc0afd4448 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1762.888039][ C1] RAX: 0000000000000000 RBX: 0000555571e43500 RCX: 00007f54bff5d60e [ 1762.888054][ C1] RDX: 00007ffc0afd44a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1762.888068][ C1] RBP: 00007ffc0afd450c R08: 0000000000000000 R09: 0000000000000000 [ 1762.888082][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1762.888097][ C1] R13: 00000000000927c0 R14: 00000000001ae01d R15: 00007ffc0afd4560 [ 1762.888120][ C1] [ 1763.362098][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1763.369008][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1763.379995][ T30] Tainted: [L]=SOFTLOCKUP [ 1763.384337][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1763.394494][ T30] Call Trace: [ 1763.397804][ T30] [ 1763.400753][ T30] dump_stack_lvl+0x100/0x190 [ 1763.405723][ T30] vpanic+0x552/0x970 [ 1763.409834][ T30] ? __pfx_vpanic+0x10/0x10 [ 1763.414394][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1763.420587][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1763.426870][ T30] panic+0xd1/0xe0 [ 1763.430654][ T30] ? __pfx_panic+0x10/0x10 [ 1763.435100][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1763.441289][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1763.447503][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1763.453698][ T30] ? watchdog.cold+0x1ec/0x234 [ 1763.458492][ T30] ? watchdog+0xcc1/0x1030 [ 1763.462939][ T30] watchdog.cold+0x1fd/0x234 [ 1763.467568][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1763.473408][ T30] ? __pfx_watchdog+0x10/0x10 [ 1763.478116][ T30] ? __kthread_parkme+0x18c/0x230 [ 1763.483179][ T30] ? kthread+0x13a/0x450 [ 1763.487442][ T30] ? __pfx_watchdog+0x10/0x10 [ 1763.492233][ T30] kthread+0x370/0x450 [ 1763.496432][ T30] ? __pfx_kthread+0x10/0x10 [ 1763.501049][ T30] ret_from_fork+0x72b/0xd50 [ 1763.505783][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1763.510949][ T30] ? __switch_to+0x800/0x1100 [ 1763.515661][ T30] ? __switch_to_asm+0x39/0x70 [ 1763.520457][ T30] ? __pfx_kthread+0x10/0x10 [ 1763.525154][ T30] ret_from_fork_asm+0x1a/0x30 [ 1763.529983][ T30] [ 1763.533478][ T30] Kernel Offset: disabled [ 1763.537820][ T30] Rebooting in 86400 seconds..