last executing test programs: 4m22.822597736s ago: executing program 3 (id=3705): setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/pci_bus/0000:00/cpuaffinity\x00', 0x20800, 0x0) read$auto(r1, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) r2 = fcntl$auto(0xff80000000000000, 0x409, 0x13) mmap$auto(0x7ffffdfde000, 0x2020006, 0xa, 0x11, 0x8000000000000000, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000100)={0x84, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x6f, 0x128, "3f2c0e707a123baafd16a2d1ef8f88e6502e17563001c36e9ce37ab09ccb9b4b429e5fb92a63204bc18de03d951959a6098f5740514d27fb18208baa1a1c54b09212eff6a0243e3b59ecfd81bc629dd6a6b88e4097cfafa9c7708838852938935d3691c02c375f94c11efc"}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x24008015) 4m22.67770347s ago: executing program 3 (id=3707): mmap$auto(0x0, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/bInterfaceClass\x00', 0x8900, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) read$auto(r0, 0x0, 0x20) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.5/usb6/authorized\x00', 0x22000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003940)=""/4116, 0x1014) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read$auto(r3, &(0x7f0000000080)='\xbb\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x169a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r4, &(0x7f00000005c0)='Y', 0x1) 4m22.586630795s ago: executing program 3 (id=3708): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/crash_elfcorehdr_size\x00', 0x521980, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/116, 0x74) r1 = socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000340)=@link_update={0xffffffffffffffff, @new_map_fd, 0x2}, 0x4) (async) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000340)=@link_update={0xffffffffffffffff, @new_map_fd, 0x2}, 0x4) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20000000) (async) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20000000) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0) fanotify_init$auto(0x200, 0x1) socket(0x10, 0x2, 0xc) (async) r3 = socket(0x10, 0x2, 0xc) r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x217102, 0x0) recvmmsg$auto(r4, 0x0, 0xd, 0xc, 0x0) close_range$auto(r4, r2, 0x22) (async) close_range$auto(r4, r2, 0x22) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 4m22.340686501s ago: executing program 3 (id=3709): r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x814000, 0x0) mmap$auto(0x8, 0x4, 0xffff, 0x90, r0, 0x1) ioctl$auto_RTC_AIE_OFF(0xffffffffffffffff, 0x7002, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x4000008) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001100)={0x0, r0, 0x7e1, 0xb753, 0x40, 0x100000001}) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) 4m21.969149963s ago: executing program 3 (id=3712): mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x2000000000000e) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x101041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0xcc9749e2a29edf4, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mouse0\x00', 0x42000, 0x0) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) select$auto(0xd9cb, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffffff4, 0x1a, 0x1, 0x6, 0x5, 0x2, 0x13, 0x8a, 0x40003, 0x0, 0x2, 0x2000000de, 0xc, 0x2, 0xffffffffffffffff]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000300), 0xffffffffffffffff) socket(0x2b, 0x1, 0x8000000) r2 = pidfd_open$auto(0x1, 0x0) readahead$auto(r2, 0x10, 0xd8) ioctl$auto(0xffffffffffffffff, 0x8905, 0x38) r3 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000280), 0x410000, 0x0) readv$auto(r3, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x2) mmap$auto(0x0, 0x40000b, 0x2, 0x9b72, 0x2, 0x800008002) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0xe3102, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26c0e948, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r1, 0x7, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 4m20.114433434s ago: executing program 3 (id=3721): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000002c0), r1) setrlimit$auto(0x743, &(0x7f0000000040)={0xf, 0xffffffffffffffff}) mprotect$auto(0x110c230000, 0x1, 0x2) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) timer_create$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x8}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="584f4cee", @ANYRES16=r3, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r2, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0xfffffffffffffffa, 0x9}, 0x65, 0x7ff) fsconfig$auto(r1, 0x2, &(0x7f00000001c0)='A\xecmf\x98`\xd0\xdc\xb7\xf1+\x9c\'\xaer\x93\xe6\x1dP\xa8\xff\x9ejYV\xa6\xcc\xfew\x1bcMU\xa5\xaa\xa6m\xd8d0\xfa[D\x01\v\xa9N\xca\xac\x04r\xdc#{\xfb{\x93\n\x87@\x88\xa0\xe3&\'Z\xe9\x9f\xc6\xb2\x8a\x01X\x10A{\xa2\x12&g[7B\x1f\x8d\xf5i\xb5bR\xf9cI\xf4Gz\x16\x9f[\xb2\xc9&\'*S\xe8\xc2cN\xf0[]$\xcd+\xd2P\a\xbe\x8a\x86\x82\x9d`\x04=\x1e\tE\xdc\xfd\xc8w\xb3\xdc\xd15\xc0', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc8058", 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x1000200004, 0x4000000000e4, 0x40eb2, r5, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 4m5.070686633s ago: executing program 32 (id=3721): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000002c0), r1) setrlimit$auto(0x743, &(0x7f0000000040)={0xf, 0xffffffffffffffff}) mprotect$auto(0x110c230000, 0x1, 0x2) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) timer_create$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x8}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="584f4cee", @ANYRES16=r3, @ANYBLOB="090027bd7000fbdbdf250300000008000800", @ANYRES32=r2, @ANYBLOB="04000180"], 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0xc050) msgsnd$auto(0x2, &(0x7f0000000300)={0xfffffffffffffffa, 0x9}, 0x65, 0x7ff) fsconfig$auto(r1, 0x2, &(0x7f00000001c0)='A\xecmf\x98`\xd0\xdc\xb7\xf1+\x9c\'\xaer\x93\xe6\x1dP\xa8\xff\x9ejYV\xa6\xcc\xfew\x1bcMU\xa5\xaa\xa6m\xd8d0\xfa[D\x01\v\xa9N\xca\xac\x04r\xdc#{\xfb{\x93\n\x87@\x88\xa0\xe3&\'Z\xe9\x9f\xc6\xb2\x8a\x01X\x10A{\xa2\x12&g[7B\x1f\x8d\xf5i\xb5bR\xf9cI\xf4Gz\x16\x9f[\xb2\xc9&\'*S\xe8\xc2cN\xf0[]$\xcd+\xd2P\a\xbe\x8a\x86\x82\x9d`\x04=\x1e\tE\xdc\xfd\xc8w\xb3\xdc\xd15\xc0', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc8058", 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000011, 0x3, 0x5, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x1000200004, 0x4000000000e4, 0x40eb2, r5, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2m39.731963321s ago: executing program 0 (id=4062): sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x804) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop15\x00', 0x84100, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x6000000000000, 0xfffffffffffffffb, 0x1, 0x12, r0, 0x4) r1 = eventfd$auto(0x4) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101b00, 0x0) unshare$auto(0x40000080) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) setresgid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x802, 0x0) read$auto(r3, 0x0, 0x7) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) pipe$auto(&(0x7f0000000280)=r4) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone3(&(0x7f00000003c0)={0x284a200, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000500), {0x2d}, &(0x7f0000000500), 0x0, &(0x7f00000002c0)=""/79, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) process_madvise$auto_MADV_COLD(r5, &(0x7f00000004c0)={&(0x7f0000000440)="9f8e653135bfc5a70a47a6d8850f7e5b54aba29b991b1ee2e01011414815fdf81c2b9855e711611cbc5e8873d05f265e9f3d38e1ecdb3f2930c19f2f6bac05188a52f265465edd73eb8b1079117a30875607d6f4fb3320fa3a1bdb67569644c8e1a78509", 0x36}, 0x7, 0x14, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) ioctl$auto_TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d06, r2) syz_clone(0x40180311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x2}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 2m38.269621712s ago: executing program 0 (id=4069): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x2, 0x1c, 0x5, 0x0) socket(0xa, 0x801, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x7ffe, 0x0, 0x6) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptysd\x00', 0xa0000, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r3, 0x90006442, r3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20040010}, 0x20008000) 2m34.230294187s ago: executing program 2 (id=4087): ioctl$auto_FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x4) (async) ioctl$auto_FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x4) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x8) (async) r0 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x8) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xd10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) (async) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0xd10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) r2 = socket(0x29, 0x5, 0x3) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x45}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x101000, 0x0) (async) r3 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x101000, 0x0) r4 = prctl$auto_PR_SET_MM_START_BRK(0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000340)={@inferred=r4, 0xfffffffffffffff9, 0x6, @btrfs_ioctl_vol_args_v2_3_0={0xd, &(0x7f00000002c0)={0x0, 0x76b, 0x3, 0x9, {0x2, 0x6, 0x3, 0xffffffffffff7fff, 0x7ca}, [0x0, 0x8be9, 0x4, 0x3]}}, @name="b9b422a0c1af7d94d97b3625f7f166aa07b16d6fca7b2d8d52a16cfc3036ab10cb4379ad2fa63e441934259fa1434c2b7d7d70a469f430efd3e5e20faabde9f020a07e276491a71cdc32a59409b61c1a2c5e1cf826f335ee9cc794828b1160d40ee97ec73492b8c4956743375d6faecc60c7f5d239ab8a98851d1fdc3a6419080aa1667375e6f61ffff6c1e0918fd536528c678ac4cd32377f26caa3bbf0c85f6b5c3530a06973bf65ee4ef673842f943503e64047d906ae7c4abf20a0f341473a34e77f2a7187298ac43d5ae1ec1db53f9ace615d251135ab042d19914c58eb7d0bde174a97db50fbf9aeeeb2749d110c13359ee3460b98af8b507d20990eec778b2e5f093d80aa3f138571b5e254f55f288b218e9bc173947dd896585e32d9ec13e897b216159f115f5f02039f3ca6a5ea794a0eef01b5bbed7c8aa48fbe628b902477cd7b8a8a9a265b2382fb12f676537fae6ffc0971c7a0970f7c7887d90dfac7000c2a7facb36830d4df960f4e3f9d031dcee072229959c012d94a0c6f7a1f4f3a3161adb84957efa61c36b121344987ff2ef06bd30f2931cda6a546f90488a4d06cb7816119cb84f8566caebfc08cfb98da4bc2e9d53256d79c0433d18f6f3df3484fd5e23bedd9e911300c799b2596b0137a48476d479dca7b97df4491bf8c2dff7ad473dadee3160764a248427f3beba913cde8bc14386d53087072c74042df5a3ea78e4d96d4dc1d61b4d9651ec8ebbaa95eeb0b8948527936e8911a19a9e2b437b299c01613abdc298b2379fed2242100070cff2c22915322a4fc371e0bf89bbbc9db060296b36eff68db9694ec98013c5f37efd806c516fee6cbaa99f4415ded91e2ecfdc58e01e2238f8a7b69927b3ab8d24d2064610b8ba6db91b84b33c40c258c57bef8625525768aecebc3b82f6251819d2c679a640526d2c2b371ec90d50d4705b5bd3a84c2c072582180cac3a1a61e28ad4d0f09b641bda93f532f2b930f58511869b4464ad094998441769fd2e75aff5ac9144d2a39171a02990b96099a483d2e272f5a51ce32d1f84951fa31b2549aa4819f07cfc40ea577afdb551dd232d60b0aacf1839ca676ae808ab860ec23d90db674d05fa8ef0d4d9df35d41d3e8af48e42a3e96eb272ce87b0607c66d5d9ded2fa5f73514082f57151cbbfd510205ad1ad406f133b10f6dbdef3ea7537967567fb74c7cece067c4f3f5d682e79f4b744abba76af446f336ba83dd1f602560c4941eed34bb0fa273121ca990d9c932ad22670048314bc50b035a22c5c2e079d3499df21387011a11639134baedeba8f94fe99576fb9d264261e1e89947d4e79dc43ab30c9bcd6c1f218df4434e5a8659822da51905805bac5d22109eb5a9b1112a42fe52ba4bb3e8be73d84c8b31b2ef01e64aff4c6d61a101c8fc02dcaa716ffcced4a04ad3bb75c8b6087c92cb201e9dd80cb68f849aa0108a271807a8652de2a6b025542b15b3a2c9d98e432711b2f6c8a4dcd84415a4fdb16ea68940304d1360c21edb7ce6b8167a80dc3a473c810336099a7e57886a43bf3088e50d163e1a6edd7663fbf1524c172de535a10f3b329c18005652fe2fb0ae9f346df22893c7c4f190fb0e609d186fba8fb8203b737071477957350d7597341cb09cd8f6543f7689a545696ad1039e15eca0c9e21087b79d5aef1d9506aa65cd93f2ddc4aebf65e87b42a6371b84becf7a7c33d2ad2bc61cd69b2649d5b29dc7ad169c7aebba8eb94bf49738a6df212f352a0c68a974806875dca63677a1eed629ce295d198965eb70d20e20d38e919d0949e25f2fa980919512a3f43c408c58af9bbb796d2da78f4d7338c4eed03c1d377058c1cee129f181baeeb05729419bc1e94282dac643f3def4f246afb094ba08efc76e587c6db19051ac74300911ac3230d5ecbe210a06cda823cf384698dd03bbbc1921ea0cf1791cdaa972dc05781a090faec6af02fcc1f0639f9c230df0721d1d3b0dbe055bdcb727f7dba3203627ed560d6a1967a65c81878d239253326db3a28611284567bd5754d727c042456865081f62c8d334893a56e289fc80e7b5323d520f6a66d0dcc136ddf29e61dd2f9fdcf867cc18fad7e53e9a5cf25b2da17648499d53bbd6eb97baa23b0002e7f216a4e0b2466693f077f7b89908d5a8c4157622ad031fdbe70ef85181b4762ae4de317f24695c8d2d637ec316c935cfa6092215fb9bd3c094cdcee42110e0dad3e0216aec11e07caccc6dd66eca028d27f39b3183c111423f4b55944777ac9697b361366a26510efc630c223de6128d3ffd50f389972dc0955243c3dfc26db1e4ab20e9fcc89a3246a5328d4b3bb693bb421ac1a48e54dfd40605079d4d91b479b24d6a4e6d802436599ee00d5624fc706f2ad711a1220124b40af1d0e2c2db187bcae0a07f05bccbb849a7233eee277b0a754352ffe0d38adc398692389bb455a85bd119d35cf7ccea21d4f66159f19550da5068d81391520df3b332910e0cca7a6d9c8814dd611c54018ba5da15ee88bbf9b5676ae4c1830e0cfd62ffd6699aa1da25e113eb9a1e8d4514d54084f1a618b1dfabeb86322853ac5475b391e2e542830dcf8a551fb42c0675c442401605e049cbde6c7a55585203e4785da12b5c5051b5bbe8ac82144e6c2822d915b5df7a1391e0ebb7e6209f584862ca3ec229fa77be2130267a34ce1632931ce0a4213c6cefcb25b91cec345589b78cd7787dfdc4f588e88232d3c74cb4b731089aa44121a6e6bc1e1075e3cecfea1e02572d455be8f91ba7efaa4783423869bfc696d495eccaad717fd8a561bc8429b609318bb93bf254fba2c3ee7bd6a99f280ed272e3698f1f2f38aef4e1fd78169881deeb5e4569d07e7013d99a164585c37cc06d007ec5cd7b9ab9702b284ce7207e5490da5b7d3b9f6dfcd9f096f9e2e68b9cd8f4e99048e3c75c556a37b2361eb390831118abc3e55d1866ee0946d1e133592d8c20608b6140b66fce4275c62a322da9c1fb1245006acc4f0a9ded4e066541d372ffb8dac494900da0eedd9903f99411fa38fa3c78e4499f626f129799e5cb4b0f735af5f0bb4702b3384274f6b38543a75800aba165e9590bc453b91afe6c182f47b6992bc17d295c942b64c79f4d05778ccd38ca1b7481050cb5fdac41557e39e58026dc3d42ee0b6304a51aa372b7be91b465dfb7250b33adf73bbd714b4c4c5ec94634cfa8c9f619233a54a2c020dd32d60f4365924dd4ef539c1308f009c36fe68bd2a3241eca6af80861dbf88b4ea0fecb89475202184f673a0f9c89c9d32d5a5e0e294a355f82ce95973c33f8a90dbdec3fb0b27e2960990c27b4046bd479f0bf55376b0c1a209a55ddacadc6ca14343ded7d95b8fa741c8bb5b2ed275e2965f6078379d94d6d9cc3b8a1071bf85412a375e321d521752e618aaa1245f0a523806fa138f6f4d823a47a7f284f58dffdaf14a5e74e77777b838afc93ce0e86c57b00fab8ec3e8321f4e5764ebeceeb30631b4010ea517f6d401aa71a61965777841febbacdca68d6f4bfd53ccc3d5b15a7a0100b58209f7fe44a3be0dfa689b76e82cbec7a94eb39cfb33a6f1042d5464b790897f57eae4a2cd4f8e3e2c6c4eef520b949601cbf0d56f3414e4cf2bc8b8e7b7ceba86002d3b8cff7b08d77194e6f4a62edb4be9c791e4341274204c6815600d218c50b0922f7a36aaf1761382cec24eea4947ba177318d06a062b03d4a6f30691005225fa55ed29d19ad458fe2b0d7a6edc1e1475b3d0a0942c882dc640464035c696f464f834f5479fb05889df66bd1388c0dd4ab4c151b2e235e9c6908de880726ff3ba904d7d3adb470b96b5eefcb15b690ed3ea5b5b8a654c920ccc5e5cd4ac38a2bd2285a2749c1bd86c6f4f7ac4db0d82f18713aaeb814999194f069688b1d3cdc006fd98b214b3f97500662e813be9063137698cf7e8837a73559d46b25f73fe8a454cd20539f58f86f720df731f389aa1211cc22fd5b6e93fcb910953b4f6cd1bcb99748bf883172e368ccbe6bf60b65a8ee5c41af6f1f2b7e2d27706d2061b6d7368f8f8d74a1ce0db625a99c0edf2f437799648a8c4938477052b63b7883cf3e8b3a7e1064d297c91c125587db701b68063aca29674e435a6cf82aa9061049816bd993d315f5dd3a722eae39bceb3edce7c0834d2208c274dca61e4f62eda7e0d3011986029d4f5cbe404a9422479a9186b1849a78c9a5f758db84830f2aad79f357a2df057d2f17d3485fa6973126ee8ac961424216d02a3bd819826f260690a31b4df4a9b9bc120491a25f7ff55f817aef01da7a2b3c4664ac4a378b360be69e722b9d8d0efd2236538c58637b61dd8acb1cde218b885c8bb21ee18372f7eb2cb9e68394b2e5181ba5cb6205b742c67b8fd315fce347198479d7178b968a4af2293d2055f9d69900f913ea020c9b858b71ff9fcf49e81a86bebd9e1abc295b186f7c465150382e68299b175838902532cc89cb02215d254599fefde7de43d337feeb58a0819cb3a5cfe5de67a28a67c5ac01d6d7db77333b45477444c50e357f516f9aaf5b35ae99cb4ab2cb0465d96ed9a17c373fe8be8c28504fb782ecf86324ca32df07ab56cffec945655686ea83fd996a62e1e1347bd6a5c816de80aa3dde425c47cbb3c6960d10a69044d153a6bf4971524622c4f18d99c95fba9e64584e9db54b33969a362fc100c77874b19b56187f67aedac208039e50e28f4d8937b115de9ca8517d543700cfb9b28b6825db72fa1d2547d6828430e99ee2b8b29f06b01f5493334e7c6d8c96a8efa900e2c2a8c558fc2e306d6c1e0b2aeab0ef53acc59ff7c8b95a277defb028c4cf3b273b6dd7b4e44df23ffd64ea832af44abd7b8b11fd7504c6f10304f4084d86322f78ad5a78cbffcada163c06401e7ac0f7553a7577a6e92d59e4e25553740985cee3dbfce4e8a3a5015007c3359b42f014edea054ecf0904d1e1af2cbfd2eaf3332e4e32812262184ef9a7cf56aed8f1c417d0af5f3f1c5463290f61b455ba686ac12c65650a40906db45d73933724a554bf464b0fa1a2e1043b21bb10f94c2515dde8157ef02aee76bbb3d12b74f167083e351efd97c5ad0b67aa3681097dd75298f457f46cd38c556db96ff5c0432f8473cf1cb3d9374c6824e4afdefe6333a2a0e12a4a91da97fac7a417cdb4d547730e5f36d4551f6484fac582868bc73bba708ae72a8024440c465e732320affbf40dbf028a9afd69970b5f69a2c5f070d9919088f4448f883fc91a908a9397795c6c9903534f6500c3ee013e12dca40532f6f409bf60c06feb1683fc127cd021f54b292c4d1c160bce9c6760fbc5c174bc9db8ec26acf54f9dcfdf970a03a622f21e87eeb31ed608e734d80f71e0159e9ec5eea78bd773579aaa9d5427c28a3ab9d95bdbc09ab9d95bb8662877f911937ff53c7e8bf7602f0a558ad83dfdf2af4ae010c81d2a46f9ec3f011928b15f7564a2a997ffdecc4184b030c11502b4bbb695f53b23a8336999661449b3c714e9eecee42162d69e28d901ee436a7d62bb813f562c5ee12c11c7bcc86b904165719e8c8dc7e4ae172768224ba811d414feeccf4f278f7cfd797b0c161825ae88d5d66708dc27d27080edc7f4fe4b5b788f768ab1e51c27920bf5cb60c27f34947a3b0532f100827fd36de2f92b28c3cbf7b1f796ecd178"}) ioctl$auto_VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000001340)=0x9) ioctl$auto_NVRAM_SETCKS(r5, 0x7041, 0x0) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000001380)="612a72e753a2c4e7e59135d69ba078ffbab3e8b01e243b182deba10cf3d83b664d7404cc3c7c00f0c93048591d95d63fc3633fba2a637b9bc4bae9258069fb8a4d95fb3110ba814aab28f126de981391ea7f4395f3940e58c700a3238d355109d71b332f6a9412e416cf6a1e7ce2fa5a466338a01ef6daa881d86c68a8341af3c305b8a364fbbdfe3db6a378996a54d41c89cfa2cd7b8df3e082a96db0d3aa8b5faa5c228f1359ccb18fab6697e0274393630853e6", 0x8) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x2, 0x0) (async) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00', 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001480)='/dev/adsp1\x00', 0x40, 0x0) (async) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001480)='/dev/adsp1\x00', 0x40, 0x0) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r6, 0x80044dfd, &(0x7f00000014c0)="77557c08889b3b06461fe703cd326580b6f0ff86683cdec16cf6bdc62e4b4eeacc71ddac051c65ad780f03a661") ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000001500)={0xe481, r2, 0x7, "b4ac9f1f624ef4d1f1d403e8e1fbc60e"}) (async) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000001500)={0xe481, r2, 0x7, "b4ac9f1f624ef4d1f1d403e8e1fbc60e"}) r7 = pidfd_getfd$auto(r5, r5, 0x94) ioctl$auto_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x0) open(&(0x7f0000001540)='./file0\x00', 0x202, 0x11) (async) open(&(0x7f0000001540)='./file0\x00', 0x202, 0x11) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000001580), 0x40, 0x0) (async) r8 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000001580), 0x40, 0x0) setsockopt$auto_SO_NO_CHECK(r8, 0xe, 0xb, &(0x7f00000015c0)='%^\xa5^%\x00', 0x2) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000001600)='/dev/usbmon25\x00', 0x503a42, 0x0) read$auto_null_fops_mem(r0, &(0x7f0000001640)=""/47, 0x2f) r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000016c0), r7) r10 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000001700)={@_si_pad}, 0x2, &(0x7f0000001780)={{0xb, 0x7}, {0xca, 0xc}, 0x6, 0x6, 0x5, 0xd8c, 0x4, 0x5, 0x9, 0x0, 0x6, 0xae, 0x40100, 0x8, 0x210, 0x8000}) sendmsg$auto_IPVS_CMD_NEW_DEST(r5, &(0x7f0000002d00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002cc0)={&(0x7f0000001840)={0x1478, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x1454, 0x2, 0x0, 0x1, [@nested={0x11fd, 0x85, 0x0, 0x1, [@generic="74c265ebca8dfca97d1130b2830ff647967525a34ecdf3218f984a8b12c0c9a3cb9ad5b37380f6d0ccaa6c3bf42591afa1c725d4be6b307740de7d4e6871051fed71efb74caa29373bc4d7371e8328e683bd64417b9871a74e05e4d16cdaea931a24e22a51e417af4adaf9b16af0fb27b9ce18821e33b967f8d420e30c8ab8ed55596f003be654457c7a397f24ed5644866c3b1df142f87651f0265cb648628543616342c69d5b5675e5a4eb3e3984c845f6e663ae2466ea9994a301084055fa00f5218beb4af7ecf397925398f3d7047aae5ba19dad46", @nested={0x4, 0x124}, @generic="ca1281d6637fe58c06003185cc7efbf7d146bd566e4e503ddc7663905996c9aeeb9ec234c3e527639713433a2f29bedce2891ad043613fa707ff177fe3d27c6cc335d1c154f419017b114732e0aa5b41aa3146251c1b9539add1d196cc06749ee3c21291dfdd082fc9c85b169fbd14e9a8ff5cdaa56d1452b32a156b1a278ab2612f4511c6b153d9a35eaeee7bfc1fa83935d5fa70c4ed674bbd2ea06e7cf2755c8c4111fabb4b81693b317a26ab7ba7421f7f5534ce0786d06fd19baa0d33ebde79", @generic="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", @generic="c1f19281961495a0416d66c2fb9f2e85c04e2a95e26eb601ce05db6f4aa9363380cfae75eefdf4a254f6aba3f858d942382becd898d495c32a733890b989a6113fbddb98ef222a950765d9f66e76", @generic="e8cde8f607087a7ca5bca8e15461"]}, @typed={0x8, 0x11e, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x1}, @nested={0x59, 0x8f, 0x0, 0x1, [@generic="c899161f173e83c60766fdc37d19bfa0c7ea30edb9b9747f3b6a80fce0de298d9c63813b17ade0361e56aef48f3d8ffa7bf5cc9498f2f1e366ebcc26f2e10c640614cd9d47974b686169d8d9cce333d0ff07237c77"]}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@empty}, @nested={0x1d0, 0xa6, 0x0, 0x1, [@typed={0x5, 0x6e, 0x0, 0x0, @str='\x00'}, @generic="46e88388ca0d608649bd74585cf29f767939ec7d8c3e440177b0d7c4d0afc778b0e20763fa42f864a78e215642610fa8e2db8df0b6af902956e3dcf3f06f303ba9ada534d07691aabb97a890ba98e53e12593e7d959171d66f3279bcc72d5055ceae850782ae519ace8368b6e76bf9146ba5975571742d671c481929517f9d679c7490be891bd5ef", @generic="fef9d8756cdae7c2b1cd6c69502393f0bfabf0c680a7b2c0452c0d9618a05f41dab154e2d3f9ab6c510a69cecb2cf4a2c6f3276decd0b8db97e90486f61a6207255698d9e68ae70c997e628f8fd918e27df6091a4632a52e702e8de3caa10515960c951eb62f93eb0dac5f8d445a2b0ae59541579497f69890d4a778eb5203bc5c00ff4fc5c0d7a20c2edc4d1e61e2ac9683f1fa044f70a86383594d2ccf60a6dfcd4b2b6d3558c45cc443ba630529798dd34b587d6c4fde406cc6fdfcf49d3418d3788a3942c010888cd11c25e86da540506b43cbccb457bb5efcadf305", @typed={0x3b, 0x98, 0x0, 0x0, @str='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00'}, @generic="654b833940ab50db7afc1b2074b0a7fcac9a3751f519c2ed96fb3a290e65", @nested={0x4, 0x23}]}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0xe4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xca77}]}, 0x1478}, 0x1, 0x0, 0x0, 0x20048010}, 0x400c000) (async) sendmsg$auto_IPVS_CMD_NEW_DEST(r5, &(0x7f0000002d00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002cc0)={&(0x7f0000001840)={0x1478, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x1454, 0x2, 0x0, 0x1, [@nested={0x11fd, 0x85, 0x0, 0x1, [@generic="74c265ebca8dfca97d1130b2830ff647967525a34ecdf3218f984a8b12c0c9a3cb9ad5b37380f6d0ccaa6c3bf42591afa1c725d4be6b307740de7d4e6871051fed71efb74caa29373bc4d7371e8328e683bd64417b9871a74e05e4d16cdaea931a24e22a51e417af4adaf9b16af0fb27b9ce18821e33b967f8d420e30c8ab8ed55596f003be654457c7a397f24ed5644866c3b1df142f87651f0265cb648628543616342c69d5b5675e5a4eb3e3984c845f6e663ae2466ea9994a301084055fa00f5218beb4af7ecf397925398f3d7047aae5ba19dad46", @nested={0x4, 0x124}, @generic="ca1281d6637fe58c06003185cc7efbf7d146bd566e4e503ddc7663905996c9aeeb9ec234c3e527639713433a2f29bedce2891ad043613fa707ff177fe3d27c6cc335d1c154f419017b114732e0aa5b41aa3146251c1b9539add1d196cc06749ee3c21291dfdd082fc9c85b169fbd14e9a8ff5cdaa56d1452b32a156b1a278ab2612f4511c6b153d9a35eaeee7bfc1fa83935d5fa70c4ed674bbd2ea06e7cf2755c8c4111fabb4b81693b317a26ab7ba7421f7f5534ce0786d06fd19baa0d33ebde79", @generic="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", @generic="c1f19281961495a0416d66c2fb9f2e85c04e2a95e26eb601ce05db6f4aa9363380cfae75eefdf4a254f6aba3f858d942382becd898d495c32a733890b989a6113fbddb98ef222a950765d9f66e76", @generic="e8cde8f607087a7ca5bca8e15461"]}, @typed={0x8, 0x11e, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x1}, @nested={0x59, 0x8f, 0x0, 0x1, [@generic="c899161f173e83c60766fdc37d19bfa0c7ea30edb9b9747f3b6a80fce0de298d9c63813b17ade0361e56aef48f3d8ffa7bf5cc9498f2f1e366ebcc26f2e10c640614cd9d47974b686169d8d9cce333d0ff07237c77"]}, @typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@empty}, @nested={0x1d0, 0xa6, 0x0, 0x1, [@typed={0x5, 0x6e, 0x0, 0x0, @str='\x00'}, @generic="46e88388ca0d608649bd74585cf29f767939ec7d8c3e440177b0d7c4d0afc778b0e20763fa42f864a78e215642610fa8e2db8df0b6af902956e3dcf3f06f303ba9ada534d07691aabb97a890ba98e53e12593e7d959171d66f3279bcc72d5055ceae850782ae519ace8368b6e76bf9146ba5975571742d671c481929517f9d679c7490be891bd5ef", @generic="fef9d8756cdae7c2b1cd6c69502393f0bfabf0c680a7b2c0452c0d9618a05f41dab154e2d3f9ab6c510a69cecb2cf4a2c6f3276decd0b8db97e90486f61a6207255698d9e68ae70c997e628f8fd918e27df6091a4632a52e702e8de3caa10515960c951eb62f93eb0dac5f8d445a2b0ae59541579497f69890d4a778eb5203bc5c00ff4fc5c0d7a20c2edc4d1e61e2ac9683f1fa044f70a86383594d2ccf60a6dfcd4b2b6d3558c45cc443ba630529798dd34b587d6c4fde406cc6fdfcf49d3418d3788a3942c010888cd11c25e86da540506b43cbccb457bb5efcadf305", @typed={0x3b, 0x98, 0x0, 0x0, @str='/sys/kernel/debug/netdevsim/netdevsim1/ports/1/pp_hold\x00'}, @generic="654b833940ab50db7afc1b2074b0a7fcac9a3751f519c2ed96fb3a290e65", @nested={0x4, 0x23}]}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0xe4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xca77}]}, 0x1478}, 0x1, 0x0, 0x0, 0x20048010}, 0x400c000) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000002d40), r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_VENDOR(r12, &(0x7f0000003080)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003040)={&(0x7f0000002e00)={0x220, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_ATTR_FILS_DISCOVERY={0x200, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0xfff}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x3c, 0x3, "ab1ca44a43802d2c281f7c08703d2501d122c548db96ed5765e25dc60132efe1bd04b932e4faa2fd25a3dc02bc6694c0ee254feefb6709b8"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0xcbb}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x1000}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x7}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x3}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xb6, 0x3, "3e51dd71465f45077c06ef290247b4898607537908baf9f8f9b8eb4e42bf412044f6a89abbe3657e1abdffd2a8fe9e976b44d1c156a8ef9be41c53aabce3eac2917d1118ef9d61025fcb39403a2fe6c7189a263833e7fc80fbf3d3f9dc6fa84c0f39b85eb3a32ec7573d880276a04dff2a5b91e35f5acde45bc141030e7c18debe5c19695bfdfc4c48392088a3f18366909e3c6aca72c2748dc2d04d34cfe2f9a67b4ff67e499d89d25f59e906d0a1b4351f"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xe0, 0x3, "d909708cebc2a8c4d177b8e30cb9478ff349f32cf3312eac1cb53e47cfcd8549bccf079201f547e9acb33f226cbeed77cd8fd93cc656dc0aaad779c9ad93a4bef0730231bc7382811b579dcce0a18e4c10e20da441b39c486e9d4d8b644c9e30be494e2e6c4ad2b6ae975b6fe92720447c33f9969f1e393d3c656b5942b78fffb56cb21894959599d2945237d07eaad66374c429412fa4a60e91ed022b7c5da0c53878b2473eae6a6c410811adc42acd0050212795655e2d807c8e7f7b18959a478c7eea2b7d4d08b515c249761c3ff05f8f1149070e5dc8846efa93"}]}, @NL80211_ATTR_DISABLE_HE={0x4}]}, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x4811) 2m33.907735136s ago: executing program 2 (id=4089): mmap$auto(0x0, 0x200006, 0xffffffffffffff00, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC], 0x1ac}}, 0x20008810) (async) move_pages$auto(r1, 0x9, 0x0, 0x0, 0x0, 0x40) (async) r2 = socket(0xa, 0x3, 0x3a) bind$auto(r2, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x6a) (async) r3 = getpid() process_vm_readv$auto(r3, 0x0, 0x1, 0x0, 0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 2m33.787638297s ago: executing program 2 (id=4091): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x7, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x8, 0x5, 0x0, 0x400, 0x7) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x1}, 0xf, 0xfa, 0xffffffffffffffff) mmap$auto(0x0, 0x7069, 0x8, 0x19, 0x401, 0x8ffd) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf25040000002c00018008000200391000000800010007000000080002008000000008000100001000000800020001000000181a018008000100f105000008000200010000000400030031fe01800400030004000180340001801c00018008000100cf00000008000100ec0e000008000100760000003c00018008000200e3000000080002000300000008000100e3ee170004000300040003000400030004000300080002000700000004000300040003003000018004000300080002000200000008000100030000008aff020002000000080001000080000008000200be000000"], 0x120}}, 0x5010) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) tee$auto(r3, r3, 0x6, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 2m32.411668601s ago: executing program 2 (id=4095): getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)='nbd\x00', &(0x7f00000001c0)={0x0, 0xa50}, 0x1000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x7fffffff, "9ba089084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) chroot$auto(&(0x7f00000002c0)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000065975a72c75", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080), 0x6, 0xa505}, 0x800}, 0x7, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram4\x00', 0x109f00, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04>V\x1b\x89\x0ek\x19&\xb4?[\x00\x00\x01\x00\xb6\x00'/31, 0x82) 2m32.172278922s ago: executing program 2 (id=4097): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd5/queue/iosched/writes_starved\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1, 0x7, 0x2817, 0x4, 0x200004, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x5, 0x8}, 0x10) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) (async) close_range$auto(0x2, r0, 0x0) r3 = socket(0x5, 0x3, 0x84) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x20004884) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) getsockopt$auto(r3, 0x84, 0x73, 0x0, 0x0) (async) r5 = socket(0x3, 0x6, 0x73) getsockname$auto(r5, 0x0, 0x0) 2m31.615915425s ago: executing program 2 (id=4101): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1d, 0x0, 0x6, 0x3, 0x3ff) madvise$auto(0x8000, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r3, 0x4b41, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(&(0x7f0000000040)={0x18, @raw=0x4, 0x40000008000002b, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/infiniband_mad/abi_version\x00', 0x20000, 0x0) 2m19.905653507s ago: executing program 33 (id=4084): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20040010}, 0x20008000) 2m15.664976776s ago: executing program 34 (id=4101): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1d, 0x0, 0x6, 0x3, 0x3ff) madvise$auto(0x8000, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r3, 0x4b41, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(&(0x7f0000000040)={0x18, @raw=0x4, 0x40000008000002b, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/infiniband_mad/abi_version\x00', 0x20000, 0x0) 1m49.182067219s ago: executing program 5 (id=4237): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyda\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xffffffffffffffff, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x6, 0x3}, 0xed7138c}, 0xb, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x9) arch_prctl$auto(0x5003, 0x800000000800) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0) mmap$auto(0x0, 0x400000004020007, 0x4af, 0xeb1, r3, 0x7ffe) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0x2c40, 0x0) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800602, 0x1, &(0x7f0000000500)=0xffff, 0x1, 0x40000003) ioctl$auto(r0, 0xca, r1) 1m46.726138402s ago: executing program 5 (id=4244): r0 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) poll$auto(0xfffffffffffffffe, 0x9, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0xe, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000480)='-_', 0x2) fsconfig$auto_HIDEPID_NO_ACCESS(r1, 0x80000001, &(0x7f0000000000)='\x04])-\x00', &(0x7f0000000080)="2a9b17b90aaada93e00ce3991bf7018b2049c4184c35e8bc94", 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r2, &(0x7f00000000c0)=',\x8a \x9e\xc2V\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\x006\xe0\xb1d)X6\x7f\xec\x94\xda\xfct\xf7N$\xd8*\n1l\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99', 0x80000000000) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x4, 0x0) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) mmap$auto(0x0, 0xe983, 0x3, 0x6b1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0xfdef) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x2000007) 1m45.897129074s ago: executing program 5 (id=4249): socket(0xa, 0x3, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) ioctl$auto(r0, 0x8912, 0x24) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x541b, 0x38) 1m44.90133207s ago: executing program 5 (id=4253): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x10000) close_range$auto(0x2, 0x8, 0x6) socketpair$auto(0xf03, 0x5, 0x2e, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x801, 0x84) (async) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0)=0x10000) (async) close_range$auto(0x2, 0x8, 0x6) (async) socketpair$auto(0xf03, 0x5, 0x2e, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) (async) 1m44.279747505s ago: executing program 5 (id=4255): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x40000000, 0x400008, 0xe1, 0x38, 0xffffffffffffffff, 0x8000) r1 = socket(0x15, 0x5, 0x0) ioctl$auto(0xffffffffffffffff, 0x40084d02, 0xffffffffffffffff) statmount$auto(&(0x7f0000000180)={0xd, @raw, 0x81, 0x0, 0x100000000}, &(0x7f0000000480)={0x10007ff, 0xde, 0x3, 0x1, 0x2, 0xffffffff, 0xffff, 0xfffeffff, 0x7, 0x8, 0xfff, 0x6, 0xc48, 0x5, 0x9ea, 0x1, 0x542, 0x0, 0xfffffa35, 0x9, 0xd76c, 0x5, 0xf2, 0x400, 0x8, 0x8001, 0x5, 0xf, 0xb, 0x3, 0x10000, [0x5, 0x8001, 0x7ff, 0x3, 0x1, 0x6, 0x43, 0x7ffffffffffffffc, 0x100000001, 0xfffffffffffffff1, 0x65, 0x2, 0x5, 0x6, 0x379aea6d, 0x7, 0x2, 0x1, 0xb, 0x2cc8ff0e, 0x0, 0x1, 0x1, 0x1000000004, 0xfffffffffffffffa, 0x8, 0x3, 0x7fffffffffffffff, 0x7, 0x4002, 0x4f, 0x29a, 0x41b5, 0x200, 0xdc, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3, 0x4, 0x5], "f7513f75280da3c13e6aced0de4d73eb14e6550ccb6eb84d4cca97168d2179f28291776fd25b0548f470d8bdbbc10c2d03dabfed650cd418a2078d87a916bd6e7453042d32ca272eae234fc9f903e18695e478774bcb08f085b4998e79471aaa8dd2e4552c75dc3ed21bd227b64214e28be43309527c35b3e875536213e28de2ebef6564705a537bc17f16689ff20d606c7fd611a304f5d0e82d"}, 0x1, 0xfff) setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) setresuid$auto(0x8, 0x0, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x842, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) read$auto_cachefiles_daemon_fops_internal(r2, &(0x7f0000000080)=""/232, 0xe8) write$auto(r2, &(0x7f00000001c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0xe0281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)="2d3780", 0x3) setsockopt$auto(0x3, 0x10000000084, 0x200081, 0x0, 0xb) keyctl$auto(0xb, 0x0, 0x0, 0x0, 0x5) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) 1m41.971283109s ago: executing program 5 (id=4264): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x200080c4) mmap$auto(0x0, 0x400004, 0x9, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)=0x10) close_range$auto(0x2, 0x8, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x8004b70b, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r1, 0x0, 0x18) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x1, 0x0) gettid() 1m26.881285975s ago: executing program 35 (id=4264): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x200080c4) mmap$auto(0x0, 0x400004, 0x9, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)=0x10) close_range$auto(0x2, 0x8, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x8004b70b, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r1, 0x0, 0x18) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x1, 0x0) gettid() 26.288907985s ago: executing program 6 (id=4557): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200001, 0x0) mmap$auto(0x4, 0x7, 0x401, 0xdd, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/dev_snmp6/veth1_macvtap\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) r2 = syz_clone(0x2400, &(0x7f0000000040)="45b2be7ffe9ad39cabb12d6078cd6cfe9c6249729554562f693cf28699bd3a08e98e47f4820a0d8597957bc95924adc522212ecaff6a393d8b7a06b37f99adeb6b9e1a3fde9ad02389d952c3fedfdacde979145cb06e", 0x56, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="ed6f31054c435429ead02a9100bad333a3729f572e64a4f9d76fef72f0b9caa10c3a61594dff1543") close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder0\x00', 0x119643, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x1f, 0x5, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/oobsize\x00', 0x40000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(r0, 0x0, 0x2000f, 0x100101, &(0x7f00000001c0)=@llc={0x1a, 0x200, 0x1, 0xcb, 0x0, 0x9, @broadcast}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(r4, 0x0) mmap$auto(0x7, 0x1ff, 0x28, 0xebf, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_PERSONALITY(r3, 0x9, &(0x7f0000000180)="1f9ccaed6650b1de184f8113cd1ecbc94d98fdf4ea4d2f4e46", 0xfffffffe) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x4, 0x5, r2, 0x1, 0x2000000000000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r5, 0x0, 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) madvise$auto(0x0, 0x200007, 0x19) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000400)=""/217, 0xd9) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001580)='/dev/mtdblock0\x00', 0x8001, 0x0) write$auto(r7, &(0x7f0000000040)='//\xf2\x00', 0x80000000) 25.663873963s ago: executing program 6 (id=4558): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/btrfs/features/supported_rescue_options\x00', 0x22000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x106) getsockopt$auto(r3, 0x29, 0x4e, 0x0, 0x0) (async) getsockopt$auto(r3, 0x29, 0x4e, 0x0, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kt\xdf\x1ao\x06\x89|%\'hf!\x04\xb4\x80U\xa14m\xfa\xf4\xa8g\ta{\xc4', 0x200000000009) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) 24.683904281s ago: executing program 6 (id=4564): unshare$auto(0x10008) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0x4, 0x3ff, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x6}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x30) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x401, 0x3, 0x3, 0xeb1, 0x7, 0x9c) mmap$auto(0x0, 0x2020005, 0x3, 0xffffffffffffffff, 0xfffffffffffffffa, 0x1000000008000) pipe2$auto(0x0, 0x80) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) close_range$auto(0x2, 0x8, 0x0) 23.977743719s ago: executing program 6 (id=4567): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x401070cd, 0x5) r1 = socket(0x2, 0x2, 0x88) shmat$auto(0x2, &(0x7f0000000000)='\x9a%\x00', 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}}, 0x6040005) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x2, 0xd76, 0x7, 0x8) keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x2, 0x9, 0x7, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6e}, 0x1, 0x0, 0x0, 0x44800}, 0x40080c8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 22.856926185s ago: executing program 6 (id=4570): socket(0x2, 0x3, 0xa) r0 = socket(0xa, 0x1, 0x84) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x8000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r0, 0x84, 0x7c, 0x0, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x384, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram1/integrity/tag_size\x00', 0x68e00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/112, 0x70) poll$auto(0x0, 0x5, 0x400) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x40, 0x5, 0x8000000008012, r2, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x1) lseek$auto(r3, 0x9, 0x0) getdents$auto(r3, 0x0, 0x62d4) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 22.384663851s ago: executing program 4 (id=4573): openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200003, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x12a00, 0x0) ioctl$auto_SCSI_IOCTL_SYNC(r4, 0x4, &(0x7f0000000240)="c5b306fcd85171b7cf9273a74273e53a8dea01ebb0723600577abec92141180926f4a21609ca2251bcec329b01cf89675f001cba5e4177bd1bea8b72973c33e4ac7e050b7e4d06780ebea7a9faf3880a30d2db7a8132025abf53ec9e3b98be1e870a578d7c4fd73b9c9465d2d6c977cf5e7bc7ebf3e850342c276fff494b6aa4fbdccf999bb6c0b3503256307ae1d127ff6069c7f9f05d5594729ccf2cbbbc0247f2c3c62525f1ed1ba99ae64e") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=0x9) read$auto(0xffffffffffffffff, &(0x7f0000000ac0)='vlan1\x00', 0x5) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) mmap$auto(0xffffffff00000000, 0x2020007, 0x0, 0x100000eb1, r1, 0x529) fsopen$auto(0x0, 0x1) 21.104672544s ago: executing program 4 (id=4576): unshare$auto(0x10008) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0x4, 0x3ff, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x6}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x30) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x401, 0x3, 0x3, 0xeb1, 0x7, 0x9c) mmap$auto(0x0, 0x2020005, 0x3, 0xffffffffffffffff, 0xfffffffffffffffa, 0x1000000008000) pipe2$auto(0x0, 0x80) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) close_range$auto(0x2, 0x8, 0x0) 20.785187895s ago: executing program 4 (id=4577): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x503000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0x400008, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) epoll_ctl$auto(r0, 0x7, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$auto(r1, 0x8004b709, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) syz_genetlink_get_family_id$auto_ethtool(0x0, r5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x80) read$auto(0xffffffffffffffff, 0x0, 0x1f40) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x9}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev1\x00', 0xa0280, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card2\x00', 0x10281, 0x0) select$auto(0x4, 0x0, &(0x7f0000000340)={[0xd, 0x40000040e9e, 0x7, 0x9, 0x33, 0x100000001, 0xa, 0xf, 0xd, 0x6, 0x3, 0x9448, 0x8, 0x100000ff, 0x2, 0x80080401]}, 0x0, 0x0) 20.014760748s ago: executing program 4 (id=4579): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0) sendfile$auto(r3, r3, 0x0, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) (async) close_range$auto(r0, 0x8, 0x0) (async, rerun: 64) brk$auto(0x40008000) (async, rerun: 64) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) (async) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r5, 0x40086602, 0xfffffffffffffffd) (async) pread64$auto(r4, 0x0, 0x800003, 0x270) (async) mlockall$auto(0x7) (async) mprotect$auto(0x110c230000, 0xa588, 0x6) (async) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) (async) move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) (async) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) (async, rerun: 32) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) (rerun: 32) fcntl$auto(r6, 0x402, 0x0) 19.912590405s ago: executing program 6 (id=4580): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2102, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x5, 0x0) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyu1\x00', 0x201, 0x0) socket(0x28, 0x0, 0x300) syz_clone(0x2280cd00, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE2(0xffffffffffffffff, 0x4112, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000001040)=0x80000000) mmap$auto(0x0, 0xfd6, 0x100003, 0x9000000eb1, r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/add_random\x00', 0x16dc01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(0x3, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/resend_igmp\x00', 0x1e2142, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x1e, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200000, 0x0) syz_clone(0xa6112000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) 18.915806115s ago: executing program 4 (id=4583): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000000)={0x3, 0x10002, 0x7f, 0x5, 0x6, 0x5, 0xffffffffffffffff, [], {0x2, 0x2005, 0x2, 0x8, 0x400, 0xb533, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x86fe, 0x0, 0x0, 0xb1}}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) io_uring_setup$auto(0x23, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b40, 0x1) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, 0x0, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00002134b57c00", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf250300000004000800", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x14) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket(0xa, 0x5, 0x84) socket(0xa, 0xa, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd4, 0x0, 0x4) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") 17.287121396s ago: executing program 4 (id=4586): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x4346, 0x8fd6, 0x1, 0x3, 0x15f4da0b, 0x3, 0x3, 0x62, 0x80000004, 0x7, 0xffffffffffffffff, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffe]}, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 6.045569184s ago: executing program 7 (id=4625): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) mmap$auto(0x0, 0x1000000020009, 0xdf, 0xeb4, 0x401, 0x8004) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mmap$auto(0x0, 0x9, 0x4000000040df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty63\x00', 0x0, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x8001, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/xmit_hash_policy\x00', 0x10b062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x40000f, 0xdf, 0x9b72, r0, 0x10001) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x25, 0x6, 0x80000000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0x102, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x3, 0x80000004, 0x3000}, 0x33d) fstat$auto(r1, 0x0) ioctl$auto(r3, 0x5393, r2) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="e3b72bbd7000fc000025190021001800018014000200647565d7161cd1c5ee7f000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x84) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 5.829635671s ago: executing program 7 (id=4626): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000300)={0xb, 0xffffffff, 0x8, 0x2, 0x2, 0x7ffffffd, "0310740700", 0xb, 0x3, 0x10, 0x5, 0x2, 0x4, 0x2}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_register$auto(r0, 0x4, &(0x7f0000000080)="99dce391a509e32c3fafbb89d55ede99f969a093e63e760b50784f230210abcf90cbe6cb2a62db2e6de252107a59ed43caaf5975dfb29c64547c43d459db7131f74828b6f3ea534e3a4b46ef5e894bd6600477ce1e7635abc8805e2c09d754092f506fe9cf9de2e9538c6359f38098f2d97504479bf9a68ede0868898376ebece203767c0bae9b5a57f266363b0dbe64", 0x17e1) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x8001, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0x4) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2000c800) read$auto(0xffffffffffffffff, &(0x7f00000000c0)='/sys/devices/porm/vhci_hcd.7/uwb2\xb6\x9d23-0:1.0/ep\xdf\x001/interval\x00\x00\x00\x00\x00', 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_PGID(0x2, r1, 0x0, 0x7, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000004) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r3, 0x0, 0x400000, 0x405) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x141f02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r4, 0x0) r5 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00'}) 5.735845282s ago: executing program 1 (id=4627): unshare$auto(0x40000080) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r0, 0x722, 0xfffffffffffffffe) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0) close_range$auto(r1, r1, 0x49) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48f, 0x7, 0x40}]}) utimensat$auto(r2, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x23, 0x3ffffffe}, 0x1000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x62a82, 0x0) r4 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40000000000eb1, r4, 0x88000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) read$auto(0x3, 0x0, 0x80) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f00000002c0)="4be4135abeefcc84bf8a65a55709f57f1b13c5eea613e2f6855e9ba81b9e09100054de1cbafc1209d886474076e146bcb024ef15055e4215b607ecf0aee7c267726ec3b8b079009b5f038a3ca31257ecd0c47dc05427298a7e644d0d664f53249eb992bbf779218e6a", 0x80}, 0x6, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) 5.331908783s ago: executing program 7 (id=4628): mmap$auto(0x0, 0x400008, 0xdf, 0x17, 0x2, 0x2000000000000e) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x101041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0xcc9749e2a29edf4, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mouse0\x00', 0x42000, 0x0) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x7, 0x5, 0x6, 0x7, 0x400d, 0xffffffffffffffff, [0x3, 0x0, 0x2], {0x406, 0x6, 0x7, 0x3, 0x8, 0x1, 0x100, 0x6, 0x4}, {0x7551, 0xfffffffd, 0x40101, 0x85, 0xade, 0x24, 0x8000, 0x2, 0x5}}) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, 0x0, 0x0) select$auto(0xd9cb, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffffff4, 0x1a, 0x1, 0x6, 0x5, 0x2, 0x13, 0x8a, 0x40003, 0x0, 0x2, 0x2000000de, 0xc, 0x2, 0xffffffffffffffff]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000300), 0xffffffffffffffff) socket(0x2b, 0x1, 0x8000000) r4 = pidfd_open$auto(0x1, 0x0) readahead$auto(r4, 0x10, 0xd8) ioctl$auto(0xffffffffffffffff, 0x8905, 0x38) r5 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000280), 0x410000, 0x0) readv$auto(r5, &(0x7f0000000200)={&(0x7f0000000080), 0x9}, 0x2) mmap$auto(0x0, 0x40000b, 0x2, 0x9b72, 0x2, 0x800008002) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "f99c0301d407000000e50400"}, 0x55) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0xe3102, 0x0) sendfile$auto(r6, r6, 0x0, 0x2) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x5e30523b26c0e948, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r3, 0x7, r1) close_range$auto(0x2, 0x8, 0x0) 5.042257201s ago: executing program 1 (id=4629): socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6c) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) 4.47781745s ago: executing program 36 (id=4580): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2102, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x5, 0x0) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyu1\x00', 0x201, 0x0) socket(0x28, 0x0, 0x300) syz_clone(0x2280cd00, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE2(0xffffffffffffffff, 0x4112, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000001040)=0x80000000) mmap$auto(0x0, 0xfd6, 0x100003, 0x9000000eb1, r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/block/sda/queue/add_random\x00', 0x16dc01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(0x3, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/resend_igmp\x00', 0x1e2142, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x1e, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x200000, 0x0) syz_clone(0xa6112000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) 3.698699895s ago: executing program 1 (id=4631): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd7\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) arch_prctl$auto(0x5003, 0x800000000800) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r2, 0x80204d01, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) read$auto_drm_debugfs_entry_fops_drm_debugfs(r1, &(0x7f0000000e80)=""/4096, 0x1000) ioctl$auto(0x3, 0x402c542b, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/340], 0x478}, 0x1, 0x0, 0x0, 0x4010}, 0x4040001) 3.691692081s ago: executing program 7 (id=4638): r0 = open(&(0x7f0000000000)='&&\x00', 0x161342, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x1, 0x84) r3 = getsockopt$auto(r2, 0x84, 0x3, 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r4, 0x0, 0xfffffdf1) linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x222000, 0x154) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x2b6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e") mmap$auto(0x4, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000000000001) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x6) r5 = bpf$auto(0x5, &(0x7f0000000200)=@info={0xffffffffffffffff, 0x9, 0x8}, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x4, 0x4e0a9, 0x0, 0x3, 0x828) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dri/card0\x00', 0x0, 0x0) setsockopt$auto_SO_RCVLOWAT(r7, 0x7, 0x12, &(0x7f00000002c0)='-{*^\x00', 0x3) ioctl$auto(r7, 0x900064b7, r7) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto_proc_oom_adj_operations_base(r5, &(0x7f0000000040)="cd8028c3a6038b3bc9a3771d48b10b4f5ab07a1b537e758153bd7493a37d7ce3c0785f74dee104c36671eb07", 0x2c) sendfile$auto(0x3, r3, 0x0, 0x400000000006) 2.521049708s ago: executing program 1 (id=4632): r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 2.270119309s ago: executing program 1 (id=4633): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) lchown$auto(&(0x7f0000000480)='}[,&*}\x00', 0x0, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xa0) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x9, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) adjtimex$auto(&(0x7f0000000140)={0xaf91, 0x0, 0x1, 0x5, 0x4, 0x2, 0x81, 0x0, 0x3, 0x3, 0x80000000, {0xa, 0x10}, 0x2, 0xffa0000000000000, 0x26, 0x6, 0x0, 0x5, 0x3, 0x8001, 0x10000, 0x9, 0x3}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SG_GET_TIMEOUT(r0, 0x2202, &(0x7f00000002c0)="146de00033165e9e9adb9ac98fb4ea82e0677c5846463b7d0c08b571c37958089a53bec0abdbbb38362e3739642d3e95cb4f021b29a87513f7eb6f826bed23b11dadf51cba607cdff4fd9ea5eab5c4f6a963bef086676a31083caf51c8bfe0969d63ba7c81c8cb0a3f719cb1024a4a5450f3ffaf514eb76963be73ea9cd42cd6699de4f86c8c2b7e7858a130db85d76143977e958ba74a677fd8207efd7f2e495973a338eb761f9b557058540534aaf5977598e11e7438dd2fbe4eba226972afdcca155c7084f5839509108cb30381994541e25f61ba0758cd94b2c6b0f6bba755edcce51b160e0bd439e341bc06c6d825aee798cfb6097cf8") io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x5, 0x84) set_mempolicy$auto(0x1, &(0x7f0000000080)=0x2, 0x80000000) getsockopt$auto(r2, 0x84, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) 2.180794432s ago: executing program 37 (id=4586): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/usbmon8\x00', 0x801, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400, 0x0) select$auto(0xc, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x4346, 0x8fd6, 0x1, 0x3, 0x15f4da0b, 0x3, 0x3, 0x62, 0x80000004, 0x7, 0xffffffffffffffff, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffe]}, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000006c0)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b756, 0x10001}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) 1.598142306s ago: executing program 1 (id=4635): socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44131011", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd5/queue/write_zeroes_max_bytes\x00', 0x0, 0x0) socket(0x2, 0x3, 0xa) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) 1.056614289s ago: executing program 7 (id=4636): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100dbdf2597000000d494bebd14381d1ff02053f68c1f0bf84c470964f5d3ffa4eef3d4fcb09c16847597aeea455c076817da6297301472394bfa0000000000000000b4593744b299191a1ec15a4aa9858c4bc5b4aedf9d7dd28c762aef9224e5e49994a4c5de32aed895e32950fdb4f9785e900d816f22f80af768c380ac91cbf4dfe6ebdc51b22b59eb863fb2a013181016b2e615308dbbfa01c2308913630be0964fc9307d933bbae5b4ee2232f6be35b8d9beb66707ee227294a2b60b1098d4c681abe88dfc12d3480ee172b8421a7a"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x448c4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) socket(0x1e, 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/bdi/7:5/strict_limit\x00', 0x62, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r4, 0x0, 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) msgctl$auto(0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 7 (id=4637): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) acct$auto(&(0x7f0000000040)='/dev/video1\x00') prctl$auto(0x23, 0x4000000000000001, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x4, 0x2, 0x1, 0x2) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x24, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty0\x00', 0x102, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x1, 0x0, 0x2, 0xd}, 0xacc}, 0x3, 0x10000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee01) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) prctl$auto(0x2b, 0x17000000, 0x0, 0x0, 0x0) acct$auto(&(0x7f0000000000)='/proc/self/net/rpc/use-gss-proxy\x00') read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x40, 0x0) ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xc54, 0x20009, 0xdf, 0x800eb1, 0x3fd, 0x8000) kernel console output (not intermixed with test programs): [U]=USER, [L]=SOFTLOCKUP [ 935.873056][T23491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 935.873072][T23491] Call Trace: [ 935.873081][T23491] [ 935.873092][T23491] dump_stack_lvl+0x100/0x190 [ 935.873133][T23491] should_fail_ex.cold+0x5/0xa [ 935.873180][T23491] should_failslab+0xc2/0x120 [ 935.873220][T23491] __kmalloc_cache_noprof+0x80/0x810 [ 935.873251][T23491] ? smc_stats_init+0x4e/0x160 [ 935.873295][T23491] ? smc_stats_init+0x4e/0x160 [ 935.873332][T23491] ? __pfx_smc_net_stat_init+0x10/0x10 [ 935.873358][T23491] smc_stats_init+0x4e/0x160 [ 935.873393][T23491] ? smc_net_init+0x39/0x50 [ 935.873418][T23491] ops_init+0x1e2/0x5f0 [ 935.873465][T23491] setup_net+0x118/0x3a0 [ 935.873492][T23491] ? __pfx_setup_net+0x10/0x10 [ 935.873514][T23491] ? lockdep_init_map_type+0x5c/0x250 [ 935.873555][T23491] ? mutex_init_lockep+0x110/0x150 [ 935.873601][T23491] copy_net_ns+0x46f/0x7c0 [ 935.873634][T23491] create_new_namespaces+0x3ea/0xab0 [ 935.873674][T23491] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 935.873710][T23491] ksys_unshare+0x455/0xab0 [ 935.873752][T23491] ? __pfx_ksys_unshare+0x10/0x10 [ 935.873792][T23491] ? xfd_validate_state+0x129/0x190 [ 935.873848][T23491] __x64_sys_unshare+0x31/0x40 [ 935.873895][T23491] do_syscall_64+0xc9/0xf80 [ 935.873935][T23491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.873963][T23491] RIP: 0033:0x7fa396d9aeb9 [ 935.873986][T23491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.874014][T23491] RSP: 002b:00007fa397b7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 935.874042][T23491] RAX: ffffffffffffffda RBX: 00007fa397015fa0 RCX: 00007fa396d9aeb9 [ 935.874062][T23491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 935.874080][T23491] RBP: 00007fa396e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 935.874098][T23491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.874116][T23491] R13: 00007fa397016038 R14: 00007fa397015fa0 R15: 00007ffde7544e18 [ 935.874154][T23491] [ 937.106742][T23528] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 938.043412][T23557] FAULT_INJECTION: forcing a failure. [ 938.043412][T23557] name failslab, interval 1, probability 0, space 0, times 0 [ 938.075326][T23557] CPU: 0 UID: 0 PID: 23557 Comm: syz.0.3685 Tainted: G U L syzkaller #0 PREEMPT(full) [ 938.075374][T23557] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 938.075385][T23557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 938.075402][T23557] Call Trace: [ 938.075413][T23557] [ 938.075424][T23557] dump_stack_lvl+0x100/0x190 [ 938.075466][T23557] should_fail_ex.cold+0x5/0xa [ 938.075511][T23557] should_failslab+0xc2/0x120 [ 938.075552][T23557] __kmalloc_cache_noprof+0x80/0x810 [ 938.075584][T23557] ? rcu_is_watching+0x12/0xc0 [ 938.075610][T23557] ? snd_virmidi_input_open+0xc8/0x4d0 [ 938.075652][T23557] ? snd_virmidi_input_open+0xc8/0x4d0 [ 938.075684][T23557] snd_virmidi_input_open+0xc8/0x4d0 [ 938.075732][T23557] open_substream+0x480/0x9e0 [ 938.075776][T23557] rawmidi_open_priv+0x524/0x6f0 [ 938.075822][T23557] snd_rawmidi_open+0x4c9/0xba0 [ 938.075870][T23557] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 938.075912][T23557] ? __pfx_default_wake_function+0x10/0x10 [ 938.075945][T23557] ? soundcore_open+0x231/0x5a0 [ 938.075972][T23557] ? soundcore_open+0x231/0x5a0 [ 938.076005][T23557] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 938.076047][T23557] soundcore_open+0x2e3/0x5a0 [ 938.076081][T23557] ? __pfx_soundcore_open+0x10/0x10 [ 938.076111][T23557] chrdev_open+0x234/0x6a0 [ 938.076145][T23557] ? __pfx_apparmor_file_open+0x10/0x10 [ 938.076180][T23557] ? __pfx_chrdev_open+0x10/0x10 [ 938.076210][T23557] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 938.076246][T23557] do_dentry_open+0x73e/0x1570 [ 938.076274][T23557] ? __pfx_chrdev_open+0x10/0x10 [ 938.076304][T23557] ? security_inode_permission+0xbf/0x250 [ 938.076345][T23557] vfs_open+0x82/0x3f0 [ 938.076387][T23557] path_openat+0x21dc/0x3120 [ 938.076432][T23557] ? __pfx_path_openat+0x10/0x10 [ 938.076480][T23557] do_filp_open+0x1f7/0x420 [ 938.076518][T23557] ? __pfx_do_filp_open+0x10/0x10 [ 938.076578][T23557] ? _raw_spin_unlock+0x28/0x50 [ 938.076609][T23557] ? alloc_fd+0x476/0x790 [ 938.076653][T23557] do_sys_openat2+0x12e/0x220 [ 938.076705][T23557] ? __pfx_do_sys_openat2+0x10/0x10 [ 938.076765][T23557] __x64_sys_openat+0x12d/0x210 [ 938.076810][T23557] ? __pfx___x64_sys_openat+0x10/0x10 [ 938.076851][T23557] ? xfd_validate_state+0x129/0x190 [ 938.076910][T23557] do_syscall_64+0xc9/0xf80 [ 938.076945][T23557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.076972][T23557] RIP: 0033:0x7f3818f9aeb9 [ 938.076995][T23557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.077024][T23557] RSP: 002b:00007f38171f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 938.077053][T23557] RAX: ffffffffffffffda RBX: 00007f3819215fa0 RCX: 00007f3818f9aeb9 [ 938.077072][T23557] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 938.077091][T23557] RBP: 00007f3819008c1f R08: 0000000000000000 R09: 0000000000000000 [ 938.077109][T23557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.077127][T23557] R13: 00007f3819216038 R14: 00007f3819215fa0 R15: 00007ffc685741b8 [ 938.077163][T23557] [ 938.731434][T23576] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 939.932388][T23599] FAULT_INJECTION: forcing a failure. [ 939.932388][T23599] name failslab, interval 1, probability 0, space 0, times 0 [ 939.979924][T23599] CPU: 0 UID: 0 PID: 23599 Comm: syz.2.3696 Tainted: G U L syzkaller #0 PREEMPT(full) [ 939.979953][T23599] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 939.979960][T23599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.979969][T23599] Call Trace: [ 939.979976][T23599] [ 939.979982][T23599] dump_stack_lvl+0x100/0x190 [ 939.980007][T23599] should_fail_ex.cold+0x5/0xa [ 939.980033][T23599] should_failslab+0xc2/0x120 [ 939.980054][T23599] kmem_cache_alloc_noprof+0x83/0x780 [ 939.980075][T23599] ? getname_flags.part.0+0x4c/0x540 [ 939.980101][T23599] ? getname_flags.part.0+0x4c/0x540 [ 939.980122][T23599] getname_flags.part.0+0x4c/0x540 [ 939.980145][T23599] getname_flags+0x93/0xf0 [ 939.980161][T23599] do_sys_openat2+0xc5/0x220 [ 939.980183][T23599] ? __pfx_do_sys_openat2+0x10/0x10 [ 939.980206][T23599] ? find_held_lock+0x2b/0x80 [ 939.980226][T23599] __x64_sys_openat+0x12d/0x210 [ 939.980248][T23599] ? __pfx___x64_sys_openat+0x10/0x10 [ 939.980270][T23599] ? xfd_validate_state+0x129/0x190 [ 939.980299][T23599] do_syscall_64+0xc9/0xf80 [ 939.980319][T23599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.980335][T23599] RIP: 0033:0x7ff18439aeb9 [ 939.980348][T23599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.980364][T23599] RSP: 002b:00007ff18527b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 939.980380][T23599] RAX: ffffffffffffffda RBX: 00007ff184615fa0 RCX: 00007ff18439aeb9 [ 939.980389][T23599] RDX: 0000000000020000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 939.980399][T23599] RBP: 00007ff184408c1f R08: 0000000000000000 R09: 0000000000000000 [ 939.980408][T23599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.980417][T23599] R13: 00007ff184616038 R14: 00007ff184615fa0 R15: 00007ffc90889488 [ 939.980444][T23599] [ 940.178309][T23605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3694'. [ 940.416529][T23610] random: crng reseeded on system resumption [ 940.477659][T23610] hub 1-0:1.0: USB hub found [ 940.505328][T23610] hub 1-0:1.0: 1 port detected [ 941.046425][T23618] zswap: compressor not available [ 941.097764][T23631] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 941.451239][T23644] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 942.276068][T23665] random: crng reseeded on system resumption [ 942.444901][T23665] hub 1-0:1.0: USB hub found [ 942.458880][T23665] hub 1-0:1.0: 1 port detected [ 944.542891][T14628] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 909 with max blocks 7 with error 117 [ 944.572394][T14628] EXT4-fs (sda1): This should not happen!! Data will be lost [ 944.572394][T14628] [ 945.307072][T23735] ubi0: attaching mtd0 [ 945.803825][T23735] ubi0: scanning is finished [ 945.808867][T23735] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 945.894260][T23741] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 945.933919][T23735] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 946.169991][T23752] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 946.245157][T23753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3729'. [ 946.263972][T23753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.306062][T23753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.390583][T23753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.433645][T23753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.734083][T23771] FAULT_INJECTION: forcing a failure. [ 947.734083][T23771] name failslab, interval 1, probability 0, space 0, times 0 [ 947.747626][T23771] CPU: 1 UID: 0 PID: 23771 Comm: syz.1.3732 Tainted: G U L syzkaller #0 PREEMPT(full) [ 947.747653][T23771] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 947.747667][T23771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 947.747676][T23771] Call Trace: [ 947.747682][T23771] [ 947.747688][T23771] dump_stack_lvl+0x100/0x190 [ 947.747711][T23771] should_fail_ex.cold+0x5/0xa [ 947.747734][T23771] should_failslab+0xc2/0x120 [ 947.747754][T23771] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 947.747774][T23771] ? __d_alloc+0x34/0xa80 [ 947.747795][T23771] ? __d_alloc+0x34/0xa80 [ 947.747810][T23771] __d_alloc+0x34/0xa80 [ 947.747829][T23771] d_alloc_pseudo+0x1c/0xc0 [ 947.747841][T23771] alloc_file_pseudo+0xcf/0x230 [ 947.747863][T23771] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 947.747883][T23771] ? alloc_fd+0x476/0x790 [ 947.747902][T23771] sock_alloc_file+0x50/0x210 [ 947.747928][T23771] __sys_socket+0x1c0/0x260 [ 947.747943][T23771] ? fput+0x79/0x100 [ 947.747961][T23771] ? __pfx___sys_socket+0x10/0x10 [ 947.747976][T23771] ? xfd_validate_state+0x129/0x190 [ 947.748002][T23771] __x64_sys_socket+0x72/0xb0 [ 947.748018][T23771] ? lockdep_hardirqs_on+0x78/0x100 [ 947.748034][T23771] do_syscall_64+0xc9/0xf80 [ 947.748053][T23771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.748067][T23771] RIP: 0033:0x7fa396d9aeb9 [ 947.748079][T23771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.748093][T23771] RSP: 002b:00007fa394ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 947.748108][T23771] RAX: ffffffffffffffda RBX: 00007fa397016090 RCX: 00007fa396d9aeb9 [ 947.748117][T23771] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 947.748126][T23771] RBP: 00007fa396e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 947.748135][T23771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.748143][T23771] R13: 00007fa397016128 R14: 00007fa397016090 R15: 00007ffde7544e18 [ 947.748162][T23771] [ 948.243567][T23784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3735'. [ 948.252770][T23784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.484815][T23784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.192478][T23804] ubi0: attaching mtd0 [ 949.223177][T23804] ubi0: scanning is finished [ 949.227881][T23804] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 949.540244][T23804] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 949.748172][T23822] futex_wake_op: syz.1.3740 tries to shift op by -2048; fix this program [ 949.779427][T23822] futex_wake_op: syz.1.3740 tries to shift op by -2048; fix this program [ 950.090773][T23827] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 951.177857][T23853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3746'. [ 951.290557][T23857] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 951.341574][T23857] binder: 23854:23857 ioctl c018620c 0 returned -1 [ 952.733256][T23881] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 954.066463][T23906] random: crng reseeded on system resumption [ 954.428674][T23902] hub 1-0:1.0: USB hub found [ 954.434368][T23902] hub 1-0:1.0: 1 port detected [ 954.903103][T23917] netlink: 'syz.0.3760': attribute type 11 has an invalid length. [ 955.262479][T23921] ubi0: attaching mtd0 [ 955.313427][T23921] ubi0: scanning is finished [ 955.336894][T23921] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 955.731003][T23921] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 956.313639][T23941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3767'. [ 958.205712][T23974] netlink: 186 bytes leftover after parsing attributes in process `syz.1.3771'. [ 958.255265][T23970] can: request_module (can-proto-5) failed. [ 958.451050][ T30] audit: type=1800 audit(52364.537:62): pid=23977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3770" name="features" dev="configfs" ino=122104 res=0 errno=0 [ 959.045438][T17280] Process accounting paused [ 959.275370][T20426] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 959.286939][T20426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 959.315932][T20426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 959.322585][ T30] audit: type=1800 audit(52365.421:63): pid=23995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3779" name="dbroot" dev="configfs" ino=121516 res=0 errno=0 [ 959.347116][T20426] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 959.367395][T20426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 960.614969][T24046] random: crng reseeded on system resumption [ 960.769388][T24046] hub 1-0:1.0: USB hub found [ 960.782582][T24046] hub 1-0:1.0: 1 port detected [ 960.805068][T23997] chnl_net:caif_netlink_parms(): no params data found [ 961.439143][T20426] Bluetooth: hci2: command tx timeout [ 961.484824][T23997] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.492054][T23997] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.564550][T23997] bridge_slave_0: entered allmulticast mode [ 961.590785][T23997] bridge_slave_0: entered promiscuous mode [ 961.650992][T23997] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.662069][T23997] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.669618][T23997] bridge_slave_1: entered allmulticast mode [ 961.680418][T23997] bridge_slave_1: entered promiscuous mode [ 961.947947][T23997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.990477][T23997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.270961][T23997] team0: Port device team_slave_0 added [ 962.326374][T23997] team0: Port device team_slave_1 added [ 962.502102][T23997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.537039][T23997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.626567][T23997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.672376][T23997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.719431][T23997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.789192][T23997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.939109][T24076] mkiss: ax0: crc mode is auto. [ 963.080342][T23997] hsr_slave_0: entered promiscuous mode [ 963.107143][T23997] hsr_slave_1: entered promiscuous mode [ 963.132716][T23997] debugfs: 'hsr0' already exists in 'hsr' [ 963.149251][T23997] Cannot create hsr debugfs directory [ 963.505640][T20426] Bluetooth: hci2: command tx timeout [ 964.055724][T24091] FAULT_INJECTION: forcing a failure. [ 964.055724][T24091] name fail_futex, interval 1, probability 0, space 0, times 0 [ 964.110856][T23997] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 964.119400][T24091] CPU: 0 UID: 0 PID: 24091 Comm: syz.2.3796 Tainted: G U L syzkaller #0 PREEMPT(full) [ 964.119452][T24091] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 964.119464][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 964.119483][T24091] Call Trace: [ 964.119493][T24091] [ 964.119505][T24091] dump_stack_lvl+0x100/0x190 [ 964.119566][T24091] should_fail_ex.cold+0x5/0xa [ 964.119608][T24091] ? kasan_save_stack+0x3f/0x50 [ 964.119648][T24091] get_futex_key+0x1d2/0x1620 [ 964.119691][T24091] ? __pfx_get_futex_key+0x10/0x10 [ 964.119729][T24091] ? __lock_acquire+0x4a5/0x2630 [ 964.119791][T24091] futex_wait_setup+0x81/0x500 [ 964.119830][T24091] __futex_wait+0x19f/0x300 [ 964.119860][T24091] ? __pfx___futex_wait+0x10/0x10 [ 964.119898][T24091] ? __pfx_futex_wake_mark+0x10/0x10 [ 964.119941][T24091] ? futex_hash+0x2c5/0x380 [ 964.119980][T24091] futex_wait+0xed/0x380 [ 964.120004][T24091] ? __pfx_futex_wait+0x10/0x10 [ 964.120033][T24091] ? do_vfs_ioctl+0x226/0x13e0 [ 964.120077][T24091] do_futex+0x1ef/0x350 [ 964.120109][T24091] ? __pfx_do_futex+0x10/0x10 [ 964.120144][T24091] ? find_held_lock+0x2b/0x80 [ 964.120172][T24091] __x64_sys_futex+0x34f/0x4d0 [ 964.120210][T24091] ? __fget_files+0x21f/0x3d0 [ 964.120250][T24091] ? __pfx___x64_sys_futex+0x10/0x10 [ 964.120289][T24091] ? fput+0x79/0x100 [ 964.120331][T24091] do_syscall_64+0xc9/0xf80 [ 964.120368][T24091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.120397][T24091] RIP: 0033:0x7ff18439aeb9 [ 964.120418][T24091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.120446][T24091] RSP: 002b:00007ff18527b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 964.120473][T24091] RAX: ffffffffffffffda RBX: 00007ff184615fa8 RCX: 00007ff18439aeb9 [ 964.120493][T24091] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff184615fa8 [ 964.120511][T24091] RBP: 00007ff184615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 964.120529][T24091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.120544][T24091] R13: 00007ff184616038 R14: 00007ffc908893a0 R15: 00007ffc90889488 [ 964.120578][T24091] [ 964.582910][T24092] FAULT_INJECTION: forcing a failure. [ 964.582910][T24092] name failslab, interval 1, probability 0, space 0, times 0 [ 964.607914][T24092] CPU: 0 UID: 0 PID: 24092 Comm: syz.1.3795 Tainted: G U L syzkaller #0 PREEMPT(full) [ 964.607967][T24092] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 964.607979][T24092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 964.607997][T24092] Call Trace: [ 964.608008][T24092] [ 964.608020][T24092] dump_stack_lvl+0x100/0x190 [ 964.608063][T24092] should_fail_ex.cold+0x5/0xa [ 964.608111][T24092] should_failslab+0xc2/0x120 [ 964.608151][T24092] ? tomoyo_encode2+0xfb/0x3c0 [ 964.608189][T24092] __kmalloc_noprof+0xf6/0x9c0 [ 964.608231][T24092] ? tomoyo_encode2+0xfb/0x3c0 [ 964.608258][T24092] tomoyo_encode2+0xfb/0x3c0 [ 964.608293][T24092] tomoyo_encode+0x29/0x50 [ 964.608320][T24092] tomoyo_realpath_from_path+0x18c/0x690 [ 964.608358][T24092] tomoyo_check_open_permission+0x2af/0x3c0 [ 964.608403][T24092] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 964.608487][T24092] ? do_raw_spin_lock+0x128/0x260 [ 964.608535][T24092] ? path_get+0x61/0x80 [ 964.608579][T24092] tomoyo_file_open+0x6b/0x90 [ 964.608629][T24092] security_file_open+0xb5/0x1e0 [ 964.608659][T24092] do_dentry_open+0x58c/0x1570 [ 964.608697][T24092] ? security_inode_permission+0xbf/0x250 [ 964.608752][T24092] vfs_open+0x82/0x3f0 [ 964.608798][T24092] path_openat+0x21dc/0x3120 [ 964.608845][T24092] ? __pfx_path_openat+0x10/0x10 [ 964.608893][T24092] do_filp_open+0x1f7/0x420 [ 964.608929][T24092] ? __pfx_do_filp_open+0x10/0x10 [ 964.608989][T24092] ? _raw_spin_unlock+0x28/0x50 [ 964.609019][T24092] ? alloc_fd+0x476/0x790 [ 964.609063][T24092] do_sys_openat2+0x12e/0x220 [ 964.609123][T24092] ? __pfx_do_sys_openat2+0x10/0x10 [ 964.609187][T24092] __x64_sys_openat+0x12d/0x210 [ 964.609233][T24092] ? __pfx___x64_sys_openat+0x10/0x10 [ 964.609276][T24092] ? xfd_validate_state+0x129/0x190 [ 964.609335][T24092] do_syscall_64+0xc9/0xf80 [ 964.609373][T24092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.609404][T24092] RIP: 0033:0x7fa396d9aeb9 [ 964.609428][T24092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.609457][T24092] RSP: 002b:00007fa394ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 964.609486][T24092] RAX: ffffffffffffffda RBX: 00007fa397016090 RCX: 00007fa396d9aeb9 [ 964.609507][T24092] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 964.609526][T24092] RBP: 00007fa396e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 964.609545][T24092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.609563][T24092] R13: 00007fa397016128 R14: 00007fa397016090 R15: 00007ffde7544e18 [ 964.609602][T24092] [ 964.609634][T24092] ERROR: Out of memory at tomoyo_realpath_from_path. [ 964.906648][T23997] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 964.996609][T23997] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 965.049285][T23997] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 965.575283][T20426] Bluetooth: hci2: command tx timeout [ 965.659526][T23997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.782492][T23997] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.911974][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.919331][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.999566][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.006855][ T6148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.792470][T24136] random: crng reseeded on system resumption [ 966.839117][T24136] hub 1-0:1.0: USB hub found [ 966.845108][T24136] hub 1-0:1.0: 1 port detected [ 966.989467][T23997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.645222][T20426] Bluetooth: hci2: command tx timeout [ 968.711320][T23997] veth0_vlan: entered promiscuous mode [ 968.726868][T23997] veth1_vlan: entered promiscuous mode [ 968.973967][T23997] veth0_macvtap: entered promiscuous mode [ 969.052392][T23997] veth1_macvtap: entered promiscuous mode [ 969.154742][T23997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.230230][T23997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.382880][T14628] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.460895][T14628] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.584622][T14628] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.690703][T14628] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.021395][T10058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.053462][T10058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.158280][T14125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.185276][T14125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.394690][T24183] forcing mempool usage for bio_alloc_bioset+0x392/0x850 [ 970.697487][T24186] ubi0: attaching mtd0 [ 970.728209][T24194] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 970.729230][T24186] ubi0: scanning is finished [ 970.771641][T24186] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 970.804013][T24195] random: crng reseeded on system resumption [ 971.024134][T24186] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 971.071316][T24195] hub 1-0:1.0: USB hub found [ 971.087708][T24195] hub 1-0:1.0: 1 port detected [ 971.819501][T24219] random: crng reseeded on system resumption [ 972.620283][T24233] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 972.741234][T24241] snd_virmidi snd_virmidi.0: control 1:-5:4194312:1Յ:0 is already present [ 973.345031][T24252] random: crng reseeded on system resumption [ 974.387449][T24264] sd 0:0:1:0: PR command failed: 1026 [ 974.387486][T24264] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 974.387516][T24264] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 974.977479][ T6148] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 915 with max blocks 1 with error 117 [ 975.054813][ T6148] EXT4-fs (sda1): This should not happen!! Data will be lost [ 975.054813][ T6148] [ 975.609509][T24281] Invalid ELF header magic: != ELF [ 977.386676][T12300] usb usb40-port2: attempt power cycle [ 977.806742][T24319] random: crng reseeded on system resumption [ 978.045922][T12300] usb usb40-port2: unable to enumerate USB device [ 979.431801][T24342] FAULT_INJECTION: forcing a failure. [ 979.431801][T24342] name fail_futex, interval 1, probability 0, space 0, times 0 [ 979.467938][T24342] CPU: 1 UID: 0 PID: 24342 Comm: syz.0.3841 Tainted: G U L syzkaller #0 PREEMPT(full) [ 979.467968][T24342] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 979.467974][T24342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 979.467984][T24342] Call Trace: [ 979.467990][T24342] [ 979.467997][T24342] dump_stack_lvl+0x100/0x190 [ 979.468020][T24342] should_fail_ex.cold+0x5/0xa [ 979.468046][T24342] get_futex_key+0x1d2/0x1620 [ 979.468068][T24342] ? __pfx_get_futex_key+0x10/0x10 [ 979.468093][T24342] futex_wait_setup+0x81/0x500 [ 979.468112][T24342] __futex_wait+0x19f/0x300 [ 979.468128][T24342] ? __pfx___futex_wait+0x10/0x10 [ 979.468146][T24342] ? __pfx_futex_wake_mark+0x10/0x10 [ 979.468173][T24342] ? find_held_lock+0x2b/0x80 [ 979.468189][T24342] ? futex_wake+0x456/0x530 [ 979.468215][T24342] futex_wait+0xed/0x380 [ 979.468229][T24342] ? __pfx_futex_wait+0x10/0x10 [ 979.468248][T24342] ? do_vfs_ioctl+0x226/0x13e0 [ 979.468273][T24342] do_futex+0x1ef/0x350 [ 979.468293][T24342] ? __pfx_do_futex+0x10/0x10 [ 979.468313][T24342] ? find_held_lock+0x2b/0x80 [ 979.468330][T24342] __x64_sys_futex+0x34f/0x4d0 [ 979.468351][T24342] ? __fget_files+0x21f/0x3d0 [ 979.468367][T24342] ? __pfx___x64_sys_futex+0x10/0x10 [ 979.468392][T24342] ? fput+0x79/0x100 [ 979.468416][T24342] do_syscall_64+0xc9/0xf80 [ 979.468436][T24342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.468452][T24342] RIP: 0033:0x7f3818f9aeb9 [ 979.468466][T24342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.468480][T24342] RSP: 002b:00007f38171f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 979.468496][T24342] RAX: ffffffffffffffda RBX: 00007f3819215fa8 RCX: 00007f3818f9aeb9 [ 979.468506][T24342] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3819215fa8 [ 979.468516][T24342] RBP: 00007f3819215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 979.468526][T24342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.468535][T24342] R13: 00007f3819216038 R14: 00007ffc685740d0 R15: 00007ffc685741b8 [ 979.468555][T24342] [ 980.611446][T24372] FAULT_INJECTION: forcing a failure. [ 980.611446][T24372] name failslab, interval 1, probability 0, space 0, times 0 [ 980.627146][T24371] netlink: zone id is out of range [ 980.634733][T24372] CPU: 1 UID: 0 PID: 24372 Comm: syz.0.3848 Tainted: G U L syzkaller #0 PREEMPT(full) [ 980.634788][T24372] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 980.634799][T24372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 980.634814][T24372] Call Trace: [ 980.634823][T24372] [ 980.634833][T24372] dump_stack_lvl+0x100/0x190 [ 980.634872][T24372] should_fail_ex.cold+0x5/0xa [ 980.634915][T24372] should_failslab+0xc2/0x120 [ 980.634953][T24372] __kvmalloc_node_noprof+0x101/0xac0 [ 980.634985][T24372] ? down_write+0x146/0x1f0 [ 980.635018][T24372] ? cache_write_procfs+0xd7/0x160 [ 980.635058][T24372] ? __pfx_cache_write_procfs+0x10/0x10 [ 980.635096][T24372] ? cache_write_procfs+0xd7/0x160 [ 980.635129][T24372] cache_write_procfs+0xd7/0x160 [ 980.635165][T24372] ? __pfx_cache_write_procfs+0x10/0x10 [ 980.635201][T24372] proc_reg_write+0x240/0x330 [ 980.635242][T24372] vfs_write+0x2aa/0x1070 [ 980.635273][T24372] ? __pfx_proc_reg_write+0x10/0x10 [ 980.635313][T24372] ? __pfx_vfs_write+0x10/0x10 [ 980.635340][T24372] ? find_held_lock+0x2b/0x80 [ 980.635367][T24372] ? __fget_files+0x215/0x3d0 [ 980.635403][T24372] ? __fget_files+0x21f/0x3d0 [ 980.635442][T24372] ksys_write+0x12a/0x250 [ 980.635472][T24372] ? __pfx_ksys_write+0x10/0x10 [ 980.635512][T24372] do_syscall_64+0xc9/0xf80 [ 980.635555][T24372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.635582][T24372] RIP: 0033:0x7f3818f9aeb9 [ 980.635604][T24372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.635629][T24372] RSP: 002b:00007f38171f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.635654][T24372] RAX: ffffffffffffffda RBX: 00007f3819215fa0 RCX: 00007f3818f9aeb9 [ 980.635672][T24372] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000004 [ 980.635688][T24372] RBP: 00007f38171f6090 R08: 0000000000000000 R09: 0000000000000000 [ 980.635704][T24372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.635720][T24372] R13: 00007f3819216038 R14: 00007f3819215fa0 R15: 00007ffc685741b8 [ 980.635757][T24372] [ 980.992151][T24374] vhci_hcd vhci_hcd.2: default hub control req: 0600 v0001 i0000 l1 [ 981.948537][T24394] hub 1-0:1.0: USB hub found [ 982.036013][T24394] hub 1-0:1.0: 1 port detected [ 982.504049][T24408] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 982.800985][T24416] FAULT_INJECTION: forcing a failure. [ 982.800985][T24416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.952211][T24416] CPU: 1 UID: 0 PID: 24416 Comm: syz.0.3858 Tainted: G U L syzkaller #0 PREEMPT(full) [ 982.952238][T24416] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 982.952244][T24416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 982.952253][T24416] Call Trace: [ 982.952258][T24416] [ 982.952264][T24416] dump_stack_lvl+0x100/0x190 [ 982.952286][T24416] should_fail_ex.cold+0x5/0xa [ 982.952309][T24416] _copy_from_user+0x2e/0xd0 [ 982.952339][T24416] cache_do_downcall+0x47/0x130 [ 982.952360][T24416] cache_write_procfs+0xf5/0x160 [ 982.952379][T24416] ? __pfx_cache_write_procfs+0x10/0x10 [ 982.952398][T24416] proc_reg_write+0x240/0x330 [ 982.952420][T24416] vfs_write+0x2aa/0x1070 [ 982.952438][T24416] ? __pfx_proc_reg_write+0x10/0x10 [ 982.952460][T24416] ? __pfx_vfs_write+0x10/0x10 [ 982.952473][T24416] ? find_held_lock+0x2b/0x80 [ 982.952488][T24416] ? __fget_files+0x215/0x3d0 [ 982.952507][T24416] ? __fget_files+0x21f/0x3d0 [ 982.952528][T24416] ksys_write+0x12a/0x250 [ 982.952544][T24416] ? __pfx_ksys_write+0x10/0x10 [ 982.952565][T24416] do_syscall_64+0xc9/0xf80 [ 982.952584][T24416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.952598][T24416] RIP: 0033:0x7f3818f9aeb9 [ 982.952610][T24416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.952624][T24416] RSP: 002b:00007f38171f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.952638][T24416] RAX: ffffffffffffffda RBX: 00007f3819215fa0 RCX: 00007f3818f9aeb9 [ 982.952648][T24416] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000004 [ 982.952656][T24416] RBP: 00007f38171f6090 R08: 0000000000000000 R09: 0000000000000000 [ 982.952665][T24416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 982.952673][T24416] R13: 00007f3819216038 R14: 00007f3819215fa0 R15: 00007ffc685741b8 [ 982.952692][T24416] [ 984.074808][T24436] Invalid ELF header magic: != ELF [ 984.888877][T24444] ubi0: attaching mtd0 [ 984.915665][T24444] ubi0: scanning is finished [ 984.920445][T24444] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 985.390526][T24444] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 985.475523][ T30] audit: type=1800 audit(52391.694:64): pid=24450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3866" name="dbroot" dev="configfs" ino=124832 res=0 errno=0 [ 985.889814][T24464] snd_virmidi snd_virmidi.0: control 1:-5:0:1п:0 is already present [ 987.441451][ T5837] Process accounting resumed [ 989.292595][T24527] mkiss: ax0: crc mode is auto. [ 990.389754][T24555] sd 0:0:1:0: PR command failed: 1026 [ 990.414960][T24555] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 990.458961][T24555] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 991.141991][T24577] ubi0: attaching mtd0 [ 991.148042][T24577] ubi0: scanning is finished [ 991.173408][T24577] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 991.507799][T24577] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 992.091840][T24603] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 992.414137][T24598] mkiss: ax0: crc mode is auto. [ 993.452703][ T30] audit: type=1800 audit(52399.711:65): pid=24625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3898" name="dbroot" dev="configfs" ino=126157 res=0 errno=0 [ 993.626277][T24636] netlink: 'syz.2.3899': attribute type 1 has an invalid length. [ 993.825525][T24640] netlink: zone id is out of range [ 994.341355][ T30] audit: type=1400 audit(52400.595:66): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24646 comm="syz.4.3903" [ 995.245317][T24669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3907'. [ 995.328044][T24670] vivid-003: ================= START STATUS ================= [ 995.339080][T24670] vivid-003: Radio HW Seek Mode: Bounded [ 995.345366][T24670] vivid-003: Radio Programmable HW Seek: false [ 995.398453][T24670] vivid-003: RDS Rx I/O Mode: Block I/O [ 995.425844][T24670] vivid-003: Generate RBDS Instead of RDS: false [ 995.441567][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.458059][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.583123][T24670] vivid-003: RDS Reception: true [ 995.691183][T24670] vivid-003: RDS Program Type: 0 inactive [ 995.771275][T24670] vivid-003: RDS PS Name: inactive [ 995.781315][T24670] vivid-003: RDS Radio Text: inactive [ 995.792676][T24670] vivid-003: RDS Traffic Announcement: false inactive [ 995.939213][T24670] vivid-003: RDS Traffic Program: false inactive [ 996.040108][T24670] vivid-003: RDS Music: false inactive [ 996.045666][T24670] vivid-003: ================== END STATUS ================== [ 996.062231][T24678] mkiss: ax0: crc mode is auto. [ 998.723844][T24709] ubi0: attaching mtd0 [ 998.799287][T24709] ubi0: scanning is finished [ 998.804014][T24709] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 999.775882][T24709] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1000.200103][T24730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1000.236977][T24730] netlink: 'syz.2.3917': attribute type 1 has an invalid length. [ 1000.270256][T24730] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1001.197698][T24743] FAULT_INJECTION: forcing a failure. [ 1001.197698][T24743] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.272493][T24743] CPU: 1 UID: 0 PID: 24743 Comm: syz.2.3921 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1001.272546][T24743] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1001.272558][T24743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1001.272575][T24743] Call Trace: [ 1001.272586][T24743] [ 1001.272598][T24743] dump_stack_lvl+0x100/0x190 [ 1001.272640][T24743] should_fail_ex.cold+0x5/0xa [ 1001.272687][T24743] should_failslab+0xc2/0x120 [ 1001.272729][T24743] kmem_cache_alloc_noprof+0x83/0x780 [ 1001.272767][T24743] ? __pfx_futex_wake+0x10/0x10 [ 1001.272809][T24743] ? getname_flags.part.0+0x4c/0x540 [ 1001.272860][T24743] ? getname_flags.part.0+0x4c/0x540 [ 1001.272901][T24743] getname_flags.part.0+0x4c/0x540 [ 1001.272947][T24743] getname_flags+0x93/0xf0 [ 1001.272977][T24743] do_sys_openat2+0xc5/0x220 [ 1001.273021][T24743] ? __pfx_do_sys_openat2+0x10/0x10 [ 1001.273067][T24743] ? find_held_lock+0x2b/0x80 [ 1001.273107][T24743] __x64_sys_openat+0x12d/0x210 [ 1001.273148][T24743] ? __pfx___x64_sys_openat+0x10/0x10 [ 1001.273188][T24743] ? xfd_validate_state+0x129/0x190 [ 1001.273241][T24743] do_syscall_64+0xc9/0xf80 [ 1001.273279][T24743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.273309][T24743] RIP: 0033:0x7ff18439aeb9 [ 1001.273333][T24743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.273363][T24743] RSP: 002b:00007ff18527b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1001.273393][T24743] RAX: ffffffffffffffda RBX: 00007ff184615fa0 RCX: 00007ff18439aeb9 [ 1001.273422][T24743] RDX: 0000000000020000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1001.273441][T24743] RBP: 00007ff184408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1001.273459][T24743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.273475][T24743] R13: 00007ff184616038 R14: 00007ff184615fa0 R15: 00007ffc90889488 [ 1001.273511][T24743] [ 1002.065581][T24753] phram: not enough arguments [ 1003.547248][T24772] random: crng reseeded on system resumption [ 1003.657605][T24772] hub 1-0:1.0: USB hub found [ 1003.664729][T24772] hub 1-0:1.0: 1 port detected [ 1006.654477][T24811] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1009.003761][T24844] random: crng reseeded on system resumption [ 1009.070868][T24837] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3939: iget: checksum invalid [ 1009.157113][T24837] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1009.175601][T24837] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3939: iget: checksum invalid [ 1009.191812][T24837] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1009.318351][T24837] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3939: iget: checksum invalid [ 1009.386863][T24837] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1009.493384][T24837] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.3939: iget: checksum invalid [ 1009.559360][T24837] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1009.634412][T24837] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1009.782480][T24837] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1010.793152][T24868] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1010.835855][T24865] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1013.399322][T24908] random: crng reseeded on system resumption [ 1013.440125][T24908] hub 1-0:1.0: USB hub found [ 1013.440447][T24908] hub 1-0:1.0: 1 port detected [ 1015.202154][T24921] FAULT_INJECTION: forcing a failure. [ 1015.202154][T24921] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1015.309474][T24921] CPU: 1 UID: 0 PID: 24921 Comm: syz.0.3956 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1015.309521][T24921] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1015.309532][T24921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1015.309550][T24921] Call Trace: [ 1015.309559][T24921] [ 1015.309570][T24921] dump_stack_lvl+0x100/0x190 [ 1015.309610][T24921] should_fail_ex.cold+0x5/0xa [ 1015.309656][T24921] get_futex_key+0x1d2/0x1620 [ 1015.309694][T24921] ? __pfx_get_futex_key+0x10/0x10 [ 1015.309742][T24921] futex_wake+0xea/0x530 [ 1015.309789][T24921] ? __pfx_futex_wake+0x10/0x10 [ 1015.309836][T24921] ? ksys_write+0x190/0x250 [ 1015.309867][T24921] ? ksys_write+0x190/0x250 [ 1015.309906][T24921] do_futex+0x32b/0x350 [ 1015.309955][T24921] ? __pfx_do_futex+0x10/0x10 [ 1015.310003][T24921] __x64_sys_futex+0x34f/0x4d0 [ 1015.310044][T24921] ? fput+0x79/0x100 [ 1015.310081][T24921] ? __pfx___x64_sys_futex+0x10/0x10 [ 1015.310119][T24921] ? xfd_validate_state+0x129/0x190 [ 1015.310170][T24921] do_syscall_64+0xc9/0xf80 [ 1015.310210][T24921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.310236][T24921] RIP: 0033:0x7f3818f9aeb9 [ 1015.310259][T24921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.310286][T24921] RSP: 002b:00007f38171f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1015.310313][T24921] RAX: ffffffffffffffda RBX: 00007f3819215fa8 RCX: 00007f3818f9aeb9 [ 1015.310330][T24921] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3819215fac [ 1015.310348][T24921] RBP: 00007f3819215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1015.310364][T24921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.310380][T24921] R13: 00007f3819216038 R14: 00007ffc685740d0 R15: 00007ffc685741b8 [ 1015.310413][T24921] [ 1015.708485][T24920] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1015.814434][T24926] FAULT_INJECTION: forcing a failure. [ 1015.814434][T24926] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.912678][T24926] CPU: 0 UID: 0 PID: 24926 Comm: syz.4.3957 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1015.912719][T24926] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1015.912726][T24926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1015.912736][T24926] Call Trace: [ 1015.912744][T24926] [ 1015.912750][T24926] dump_stack_lvl+0x100/0x190 [ 1015.912774][T24926] should_fail_ex.cold+0x5/0xa [ 1015.912800][T24926] should_failslab+0xc2/0x120 [ 1015.912822][T24926] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 1015.912843][T24926] ? register_pidns_sysctls+0x4b/0x1c0 [ 1015.912868][T24926] ? kmemdup_noprof+0x29/0x60 [ 1015.912885][T24926] kmemdup_noprof+0x29/0x60 [ 1015.912904][T24926] register_pidns_sysctls+0x4b/0x1c0 [ 1015.912942][T24926] ? __ns_common_init+0x295/0x4b0 [ 1015.912980][T24926] copy_pid_ns+0x67a/0x1090 [ 1015.913014][T24926] ? __memcg_slab_post_alloc_hook+0x473/0x880 [ 1015.913055][T24926] ? __pfx_copy_pid_ns+0x10/0x10 [ 1015.913076][T24926] ? copy_mnt_ns+0x10b/0xc40 [ 1015.913094][T24926] ? kmem_cache_alloc_noprof+0x2ff/0x780 [ 1015.913113][T24926] ? create_new_namespaces+0x30/0xab0 [ 1015.913133][T24926] create_new_namespaces+0x2aa/0xab0 [ 1015.913154][T24926] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1015.913173][T24926] ksys_unshare+0x455/0xab0 [ 1015.913194][T24926] ? __pfx_ksys_unshare+0x10/0x10 [ 1015.913221][T24926] __x64_sys_unshare+0x31/0x40 [ 1015.913241][T24926] do_syscall_64+0xc9/0xf80 [ 1015.913261][T24926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.913277][T24926] RIP: 0033:0x7f2101b9aeb9 [ 1015.913290][T24926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.913306][T24926] RSP: 002b:00007f21029c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1015.913322][T24926] RAX: ffffffffffffffda RBX: 00007f2101e15fa0 RCX: 00007f2101b9aeb9 [ 1015.913333][T24926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1015.913342][T24926] RBP: 00007f2101c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1015.913351][T24926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.913360][T24926] R13: 00007f2101e16038 R14: 00007f2101e15fa0 R15: 00007ffd6cf3e568 [ 1015.913380][T24926] [ 1017.068408][T24922] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1018.317958][T24967] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1020.447548][T25008] random: crng reseeded on system resumption [ 1020.606034][T25008] hub 1-0:1.0: USB hub found [ 1020.672238][T25008] hub 1-0:1.0: 1 port detected [ 1021.477088][T25022] random: crng reseeded on system resumption [ 1021.604138][T25022] hub 1-0:1.0: USB hub found [ 1021.646795][T25022] hub 1-0:1.0: 1 port detected [ 1022.944925][T25037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1022.954968][T25044] ubi0: attaching mtd0 [ 1022.960850][T25044] ubi0: scanning is finished [ 1023.053125][T25044] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1023.494429][T25044] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1023.829900][T25058] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1023.929448][T25058] : renamed from bond_slave_0 (while UP) [ 1023.968269][T25058] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1026.172530][T25087] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3992'. [ 1026.191335][T25086] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3992'. [ 1026.495898][T25101] ubi0: attaching mtd0 [ 1026.510924][T25101] ubi0: scanning is finished [ 1026.583178][T25101] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1026.923488][T25101] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1027.568294][T25113] FAULT_INJECTION: forcing a failure. [ 1027.568294][T25113] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.632300][T25113] CPU: 1 UID: 0 PID: 25113 Comm: syz.0.3997 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1027.632327][T25113] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1027.632332][T25113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1027.632341][T25113] Call Trace: [ 1027.632347][T25113] [ 1027.632353][T25113] dump_stack_lvl+0x100/0x190 [ 1027.632375][T25113] should_fail_ex.cold+0x5/0xa [ 1027.632398][T25113] should_failslab+0xc2/0x120 [ 1027.632418][T25113] kmem_cache_alloc_noprof+0x83/0x780 [ 1027.632436][T25113] ? vm_area_dup+0x27/0x8e0 [ 1027.632455][T25113] ? vm_area_dup+0x27/0x8e0 [ 1027.632468][T25113] vm_area_dup+0x27/0x8e0 [ 1027.632483][T25113] __split_vma+0x18c/0xe30 [ 1027.632510][T25113] ? __pfx___split_vma+0x10/0x10 [ 1027.632530][T25113] ? __pfx_mas_prev+0x10/0x10 [ 1027.632553][T25113] vms_gather_munmap_vmas+0x3aa/0x1320 [ 1027.632572][T25113] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1027.632588][T25113] ? __pfx___up_read+0x10/0x10 [ 1027.632608][T25113] ? validate_mm+0x261/0x4e0 [ 1027.632621][T25113] ? validate_mm+0x261/0x4e0 [ 1027.632637][T25113] ? mas_find+0x2dd/0x740 [ 1027.632655][T25113] ? validate_mm+0x392/0x4e0 [ 1027.632671][T25113] do_vmi_align_munmap+0x287/0x5f0 [ 1027.632690][T25113] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1027.632731][T25113] do_vmi_munmap+0x1f8/0x3e0 [ 1027.632750][T25113] __vm_munmap+0x196/0x390 [ 1027.632768][T25113] ? __pfx___vm_munmap+0x10/0x10 [ 1027.632785][T25113] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 1027.632814][T25113] __x64_sys_munmap+0x59/0x80 [ 1027.632836][T25113] do_syscall_64+0xc9/0xf80 [ 1027.632854][T25113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.632868][T25113] RIP: 0033:0x7f3818f9ace7 [ 1027.632881][T25113] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.632895][T25113] RSP: 002b:00007f38171d3d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1027.632909][T25113] RAX: ffffffffffffffda RBX: 00007f3810000000 RCX: 00007f3818f9ace7 [ 1027.632918][T25113] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 00007f380f000000 [ 1027.632927][T25113] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1027.632936][T25113] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1027.632944][T25113] R13: 0000000000001000 R14: 00007f3814000000 R15: 0000000001000000 [ 1027.632963][T25113] [ 1030.940872][T25147] NFSD: Failed to start, no listeners configured. [ 1031.226984][T25157] random: crng reseeded on system resumption [ 1033.304437][T25192] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1033.369942][T25192] : renamed from bond_slave_0 (while UP) [ 1033.397890][T25192] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1033.407009][T25188] ima: policy update failed [ 1033.439627][ T30] audit: type=1802 audit(52439.879:67): pid=25188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.4015" res=0 errno=0 [ 1034.365522][T25204] usbip-vudc usbip-vudc.0: gadget not bound [ 1034.778565][T25229] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1034.785941][T25229] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1035.828362][T25242] random: crng reseeded on system resumption [ 1035.916690][T25242] hub 1-0:1.0: USB hub found [ 1035.932586][T25242] hub 1-0:1.0: 1 port detected [ 1036.222283][T25251] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4028'. [ 1037.543853][T25285] random: crng reseeded on system resumption [ 1037.642176][T25291] hub 1-0:1.0: USB hub found [ 1037.677646][T25291] hub 1-0:1.0: 1 port detected [ 1037.894051][T25298] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1038.970710][T25319] ubi0: attaching mtd0 [ 1039.010511][T25319] ubi0: scanning is finished [ 1039.015224][T25319] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1039.416386][T25319] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1039.430524][T25314] ubi0: attaching mtd0 [ 1039.477833][T25314] ubi0: scanning is finished [ 1039.482702][T25314] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1039.770974][T25314] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1039.986824][T25342] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1040.242642][T25347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1040.313898][T25347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.321151][T25347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.328896][T25347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.336307][T25347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.392350][T25347] bridge0: entered promiscuous mode [ 1040.471633][T25347] bridge0: entered allmulticast mode [ 1041.765475][T25374] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1043.248395][T25395] FAULT_INJECTION: forcing a failure. [ 1043.248395][T25395] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1043.290404][T25395] CPU: 1 UID: 0 PID: 25395 Comm: syz.0.4058 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1043.290437][T25395] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1043.290443][T25395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1043.290452][T25395] Call Trace: [ 1043.290457][T25395] [ 1043.290463][T25395] dump_stack_lvl+0x100/0x190 [ 1043.290486][T25395] should_fail_ex.cold+0x5/0xa [ 1043.290509][T25395] get_futex_key+0x1d2/0x1620 [ 1043.290530][T25395] ? __pfx_get_futex_key+0x10/0x10 [ 1043.290553][T25395] futex_wake+0xea/0x530 [ 1043.290573][T25395] ? rcu_is_watching+0x12/0xc0 [ 1043.290587][T25395] ? lockdep_hardirqs_on+0x78/0x100 [ 1043.290605][T25395] ? __pfx_futex_wake+0x10/0x10 [ 1043.290627][T25395] ? fd_install+0x223/0x580 [ 1043.290641][T25395] ? putname+0xf5/0x1a0 [ 1043.290663][T25395] do_futex+0x32b/0x350 [ 1043.290682][T25395] ? __pfx_do_futex+0x10/0x10 [ 1043.290704][T25395] ? __pfx_do_sys_openat2+0x10/0x10 [ 1043.290727][T25395] ? __fget_files+0x21f/0x3d0 [ 1043.290743][T25395] __x64_sys_futex+0x34f/0x4d0 [ 1043.290763][T25395] ? __x64_sys_openat+0x12d/0x210 [ 1043.290783][T25395] ? __pfx___x64_sys_futex+0x10/0x10 [ 1043.290801][T25395] ? xfd_validate_state+0x129/0x190 [ 1043.290835][T25395] do_syscall_64+0xc9/0xf80 [ 1043.290854][T25395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.290869][T25395] RIP: 0033:0x7f3818f9aeb9 [ 1043.290880][T25395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.290894][T25395] RSP: 002b:00007f38171d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1043.290910][T25395] RAX: ffffffffffffffda RBX: 00007f3819216098 RCX: 00007f3818f9aeb9 [ 1043.290920][T25395] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f381921609c [ 1043.290929][T25395] RBP: 00007f3819216090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.290937][T25395] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 1043.290946][T25395] R13: 00007f3819216128 R14: 00007ffc685740d0 R15: 00007ffc685741b8 [ 1043.290964][T25395] [ 1043.689062][T25397] ubi0: attaching mtd0 [ 1043.695753][T25397] ubi0: scanning is finished [ 1043.783739][T25397] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1043.931529][T25397] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1044.240311][T25405] bond0: option packets_per_slave: invalid value ( Xnp) [ 1044.352222][T25405] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1044.637370][T25424] FAULT_INJECTION: forcing a failure. [ 1044.637370][T25424] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.771035][T25424] CPU: 1 UID: 0 PID: 25424 Comm: syz.0.4062 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1044.771085][T25424] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1044.771096][T25424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1044.771115][T25424] Call Trace: [ 1044.771126][T25424] [ 1044.771138][T25424] dump_stack_lvl+0x100/0x190 [ 1044.771180][T25424] should_fail_ex.cold+0x5/0xa [ 1044.771227][T25424] should_failslab+0xc2/0x120 [ 1044.771268][T25424] kmem_cache_alloc_noprof+0x83/0x780 [ 1044.771305][T25424] ? __proc_create+0xc2/0x8c0 [ 1044.771347][T25424] ? __proc_create+0x2cb/0x8c0 [ 1044.771397][T25424] ? __proc_create+0x2cb/0x8c0 [ 1044.771437][T25424] __proc_create+0x2cb/0x8c0 [ 1044.771488][T25424] ? __pfx___proc_create+0x10/0x10 [ 1044.771539][T25424] ? _raw_write_unlock+0x28/0x50 [ 1044.771571][T25424] ? proc_register+0x559/0x8a0 [ 1044.771602][T25424] proc_create_reg+0x75/0x170 [ 1044.771633][T25424] proc_create_net_data+0x8e/0x1c0 [ 1044.771656][T25424] ? __pfx_proc_create_net_data+0x10/0x10 [ 1044.771685][T25424] ? __pfx_proc_create_net_data+0x10/0x10 [ 1044.771721][T25424] ? __pfx_ping_v4_proc_init_net+0x10/0x10 [ 1044.771751][T25424] ping_v4_proc_init_net+0x5b/0xd0 [ 1044.771777][T25424] ? udp4_proc_init_net+0x63/0x80 [ 1044.771812][T25424] ops_init+0x1e2/0x5f0 [ 1044.771860][T25424] setup_net+0x118/0x3a0 [ 1044.771889][T25424] ? __pfx_setup_net+0x10/0x10 [ 1044.771911][T25424] ? lockdep_init_map_type+0x5c/0x250 [ 1044.771948][T25424] ? mutex_init_lockep+0x110/0x150 [ 1044.771991][T25424] copy_net_ns+0x46f/0x7c0 [ 1044.772023][T25424] create_new_namespaces+0x3ea/0xab0 [ 1044.772059][T25424] copy_namespaces+0x468/0x5e0 [ 1044.772090][T25424] copy_process+0x32d5/0x7890 [ 1044.772138][T25424] ? __pfx_copy_process+0x10/0x10 [ 1044.772189][T25424] kernel_clone+0xfc/0x930 [ 1044.772227][T25424] ? __pfx_futex_wait+0x10/0x10 [ 1044.772256][T25424] ? __pfx_kernel_clone+0x10/0x10 [ 1044.772313][T25424] __do_sys_clone+0xd9/0x120 [ 1044.772351][T25424] ? __pfx___do_sys_clone+0x10/0x10 [ 1044.772386][T25424] ? find_held_lock+0x2b/0x80 [ 1044.772426][T25424] ? xfd_validate_state+0x129/0x190 [ 1044.772482][T25424] do_syscall_64+0xc9/0xf80 [ 1044.772519][T25424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.772547][T25424] RIP: 0033:0x7f3818f9aeb9 [ 1044.772571][T25424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.772599][T25424] RSP: 002b:00007f38171b3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1044.772627][T25424] RAX: ffffffffffffffda RBX: 00007f3819216180 RCX: 00007f3818f9aeb9 [ 1044.772644][T25424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 1044.772659][T25424] RBP: 00007f3819008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1044.772699][T25424] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1044.772716][T25424] R13: 00007f3819216218 R14: 00007f3819216180 R15: 00007ffc685741b8 [ 1044.772753][T25424] [ 1046.213791][T25453] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1046.445743][T25459] ubi0: attaching mtd0 [ 1046.455534][T25459] ubi0: scanning is finished [ 1046.460185][T25459] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1046.574600][T25459] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1048.022087][T25497] ubi0: attaching mtd0 [ 1048.028352][T25497] ubi0: scanning is finished [ 1048.033026][T25497] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1048.269312][T25506] FAULT_INJECTION: forcing a failure. [ 1048.269312][T25506] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1048.324680][T25506] CPU: 1 UID: 0 PID: 25506 Comm: syz.0.4082 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1048.324728][T25506] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1048.324739][T25506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1048.324754][T25506] Call Trace: [ 1048.324763][T25506] [ 1048.324774][T25506] dump_stack_lvl+0x100/0x190 [ 1048.324814][T25506] should_fail_ex.cold+0x5/0xa [ 1048.324855][T25506] ? __kernel_text_address+0xd/0x30 [ 1048.324904][T25506] get_futex_key+0x1d2/0x1620 [ 1048.324946][T25506] ? __pfx_get_futex_key+0x10/0x10 [ 1048.324987][T25506] ? stack_trace_save+0x8e/0xc0 [ 1048.325019][T25506] ? __pfx_stack_trace_save+0x10/0x10 [ 1048.325061][T25506] futex_wait_setup+0x81/0x500 [ 1048.325098][T25506] __futex_wait+0x19f/0x300 [ 1048.325129][T25506] ? __pfx___futex_wait+0x10/0x10 [ 1048.325161][T25506] ? __pfx_futex_wake_mark+0x10/0x10 [ 1048.325210][T25506] ? futex_hash+0x2c5/0x380 [ 1048.325256][T25506] futex_wait+0xed/0x380 [ 1048.325283][T25506] ? __pfx_futex_wait+0x10/0x10 [ 1048.325368][T25506] ? kmem_cache_free+0x48f/0x720 [ 1048.325405][T25506] do_futex+0x1ef/0x350 [ 1048.325445][T25506] ? __pfx_do_futex+0x10/0x10 [ 1048.325483][T25506] ? __pfx___might_resched+0x10/0x10 [ 1048.325524][T25506] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1048.325563][T25506] __x64_sys_futex+0x34f/0x4d0 [ 1048.325604][T25506] ? __pfx_task_work_run+0x10/0x10 [ 1048.325640][T25506] ? __pfx___x64_sys_futex+0x10/0x10 [ 1048.325688][T25506] do_syscall_64+0xc9/0xf80 [ 1048.325726][T25506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.325755][T25506] RIP: 0033:0x7f3818f9aeb9 [ 1048.325779][T25506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.325808][T25506] RSP: 002b:00007f38171f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1048.325834][T25506] RAX: ffffffffffffffda RBX: 00007f3819215fa8 RCX: 00007f3818f9aeb9 [ 1048.325854][T25506] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3819215fa8 [ 1048.325871][T25506] RBP: 00007f3819215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1048.325888][T25506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.325910][T25506] R13: 00007f3819216038 R14: 00007ffc685740d0 R15: 00007ffc685741b8 [ 1048.325949][T25506] [ 1048.962639][T25497] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1050.534446][T25543] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek 1 [ 1064.562211][ T5999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1064.598182][ T5999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1064.608565][ T5999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1064.627690][ T5999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1065.333875][T25730] hub 1-0:1.0: USB hub found [ 1065.370121][T25724] chnl_net:caif_netlink_parms(): no params data found [ 1065.392320][T25730] hub 1-0:1.0: 1 port detected [ 1065.810919][T25724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.857769][T25724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.883892][T25724] bridge_slave_0: entered allmulticast mode [ 1065.932158][T25724] bridge_slave_0: entered promiscuous mode [ 1065.962950][T25724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.041071][T25724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.113938][T25724] bridge_slave_1: entered allmulticast mode [ 1066.150564][T25724] bridge_slave_1: entered promiscuous mode [ 1066.267327][T25724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.398597][T25724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.482114][T25724] team0: Port device team_slave_0 added [ 1066.501504][T25724] team0: Port device team_slave_1 added [ 1066.737770][T25724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.757644][T25724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.789372][ T5999] Bluetooth: hci4: command tx timeout [ 1066.877033][T25724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.919520][T25724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.926504][T25724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.035092][T25724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.504117][T25724] hsr_slave_0: entered promiscuous mode [ 1067.525188][T25724] hsr_slave_1: entered promiscuous mode [ 1067.531652][T25724] debugfs: 'hsr0' already exists in 'hsr' [ 1067.563862][T25724] Cannot create hsr debugfs directory [ 1068.647745][T25724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1068.693890][T25724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1068.848230][T20426] Bluetooth: hci4: command tx timeout [ 1068.854877][T20426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1068.873703][T25724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1068.882730][T20426] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1068.908322][T20426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1068.919190][T20426] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1068.926834][T20426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1069.170983][T25724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1070.466083][T25724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.535396][T25724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.817073][T25765] chnl_net:caif_netlink_parms(): no params data found [ 1070.859054][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.866178][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.918887][T20426] Bluetooth: hci4: command tx timeout [ 1070.991314][T24302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.998587][T24302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.007398][T20426] Bluetooth: hci5: command tx timeout [ 1071.593381][T25724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1071.654763][T25724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.978198][T25765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.016785][T25765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.061713][T25765] bridge_slave_0: entered allmulticast mode [ 1072.114405][T25765] bridge_slave_0: entered promiscuous mode [ 1072.163045][T25765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.170213][T25765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.212249][T25765] bridge_slave_1: entered allmulticast mode [ 1072.272762][T25765] bridge_slave_1: entered promiscuous mode [ 1072.360045][T25765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.431290][T25765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.613410][T25765] team0: Port device team_slave_0 added [ 1072.896365][T25765] team0: Port device team_slave_1 added [ 1072.990053][T20426] Bluetooth: hci4: command tx timeout [ 1073.012223][T25765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.033715][T25765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.068085][T20426] Bluetooth: hci5: command tx timeout [ 1073.121062][T25765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.160396][T25765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.197902][T25765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.319363][T25765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.384330][T25724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.614522][T25765] hsr_slave_0: entered promiscuous mode [ 1073.656416][T25765] hsr_slave_1: entered promiscuous mode [ 1073.666167][T25765] debugfs: 'hsr0' already exists in 'hsr' [ 1073.695068][T25765] Cannot create hsr debugfs directory [ 1074.110353][T25724] veth0_vlan: entered promiscuous mode [ 1074.140426][T25724] veth1_vlan: entered promiscuous mode [ 1074.206193][T25765] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1074.256564][T25765] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1074.280034][T25765] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1074.308429][T25724] veth0_macvtap: entered promiscuous mode [ 1074.320995][T25765] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1074.370745][T25724] veth1_macvtap: entered promiscuous mode [ 1074.411209][T25724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.449012][T25724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.545207][T14627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.571685][T14627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.628227][T14627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.695054][T14627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.846727][T25765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.873990][T25765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.931204][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.938326][ T7372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.005139][T14624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.012315][T14624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.024106][ T7372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.046024][ T7372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.148203][T20426] Bluetooth: hci5: command tx timeout [ 1075.270000][T14638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.280299][T14638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.856246][T25858] ubi0: attaching mtd0 [ 1075.876343][T25858] ubi0: scanning is finished [ 1075.880981][T25858] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1075.996654][T25765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.158135][T25858] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1076.384842][T25842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4152: iget: checksum invalid [ 1076.466638][T25842] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1076.588420][T25842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4152: iget: checksum invalid [ 1076.821611][T25842] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1077.187117][T25765] veth0_vlan: entered promiscuous mode [ 1077.211641][T20426] Bluetooth: hci5: command tx timeout [ 1077.226466][T25842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4152: iget: checksum invalid [ 1077.243547][T25765] veth1_vlan: entered promiscuous mode [ 1077.284397][T25765] veth0_macvtap: entered promiscuous mode [ 1077.297404][T25765] veth1_macvtap: entered promiscuous mode [ 1077.346605][T25765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.378028][T25842] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1077.441033][T25842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4152: iget: checksum invalid [ 1077.543971][T25842] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1077.580250][T25842] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1077.722264][T25765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.729799][T25842] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1078.205951][T25889] random: crng reseeded on system resumption [ 1078.276408][T25889] hub 1-0:1.0: USB hub found [ 1078.281813][T25889] hub 1-0:1.0: 1 port detected [ 1078.517784][T14624] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.533403][T14624] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.769849][T14624] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.797246][T14624] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.941107][T14624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.949061][T14624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.108331][ T6262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.120626][ T6262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.904356][T25909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4162'. [ 1081.911803][T25949] Invalid ELF header magic: != ELF [ 1082.201999][T25956] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1084.140558][T20426] Bluetooth: hci2: command 0x0406 tx timeout [ 1084.699537][T25994] random: crng reseeded on system resumption [ 1084.742344][T25996] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1084.803337][T25994] hub 1-0:1.0: USB hub found [ 1084.849904][T25994] hub 1-0:1.0: 1 port detected [ 1088.459005][T26063] ubi0: attaching mtd0 [ 1088.506979][T26063] ubi0: scanning is finished [ 1088.533057][T26063] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1088.831315][T26063] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1089.520740][T26088] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1089.979689][T26101] random: crng reseeded on system resumption [ 1090.149445][T26107] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1090.246942][T26101] hub 1-0:1.0: USB hub found [ 1090.270962][T26101] hub 1-0:1.0: 1 port detected [ 1091.995077][T26138] FAULT_INJECTION: forcing a failure. [ 1091.995077][T26138] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.244132][T26138] CPU: 0 UID: 0 PID: 26138 Comm: syz.1.4223 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1092.244185][T26138] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1092.244196][T26138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1092.244214][T26138] Call Trace: [ 1092.244224][T26138] [ 1092.244235][T26138] dump_stack_lvl+0x100/0x190 [ 1092.244276][T26138] should_fail_ex.cold+0x5/0xa [ 1092.244320][T26138] should_failslab+0xc2/0x120 [ 1092.244357][T26138] kmem_cache_alloc_noprof+0x83/0x780 [ 1092.244392][T26138] ? __proc_create+0xc2/0x8c0 [ 1092.244435][T26138] ? __proc_create+0x2cb/0x8c0 [ 1092.244482][T26138] ? __proc_create+0x2cb/0x8c0 [ 1092.244522][T26138] __proc_create+0x2cb/0x8c0 [ 1092.244564][T26138] ? __pfx___proc_create+0x10/0x10 [ 1092.244607][T26138] ? _raw_write_unlock+0x28/0x50 [ 1092.244637][T26138] ? proc_register+0x559/0x8a0 [ 1092.244664][T26138] proc_create_reg+0x75/0x170 [ 1092.244692][T26138] proc_create_net_data+0x8e/0x1c0 [ 1092.244718][T26138] ? __pfx_proc_create_net_data+0x10/0x10 [ 1092.244755][T26138] sctp_proc_init+0xfb/0x270 [ 1092.244793][T26138] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1092.244828][T26138] sctp_defaults_init+0x758/0xd90 [ 1092.244868][T26138] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1092.244904][T26138] ops_init+0x1e2/0x5f0 [ 1092.244949][T26138] setup_net+0x118/0x3a0 [ 1092.244975][T26138] ? __pfx_setup_net+0x10/0x10 [ 1092.244997][T26138] ? lockdep_init_map_type+0x5c/0x250 [ 1092.245036][T26138] ? mutex_init_lockep+0x110/0x150 [ 1092.245091][T26138] copy_net_ns+0x46f/0x7c0 [ 1092.245122][T26138] create_new_namespaces+0x3ea/0xab0 [ 1092.245163][T26138] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1092.245200][T26138] ksys_unshare+0x455/0xab0 [ 1092.245240][T26138] ? __pfx_ksys_unshare+0x10/0x10 [ 1092.245279][T26138] ? xfd_validate_state+0x129/0x190 [ 1092.245333][T26138] __x64_sys_unshare+0x31/0x40 [ 1092.245373][T26138] do_syscall_64+0xc9/0xf80 [ 1092.245411][T26138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.245440][T26138] RIP: 0033:0x7fa396d9aeb9 [ 1092.245464][T26138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.245492][T26138] RSP: 002b:00007fa397b7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1092.245522][T26138] RAX: ffffffffffffffda RBX: 00007fa397015fa0 RCX: 00007fa396d9aeb9 [ 1092.245541][T26138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1092.245559][T26138] RBP: 00007fa396e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1092.245576][T26138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.245594][T26138] R13: 00007fa397016038 R14: 00007fa397015fa0 R15: 00007ffde7544e18 [ 1092.245634][T26138] [ 1093.346042][T26157] ubi0: attaching mtd0 [ 1093.364129][T26157] ubi0: scanning is finished [ 1093.371961][T26157] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1093.664360][T26157] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1094.688058][T26184] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1096.178751][T26202] ubi0: attaching mtd0 [ 1096.201280][T26202] ubi0: scanning is finished [ 1096.205975][T26202] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1096.589001][T26202] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1098.044531][T26271] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.050937][T26271] binder: 26231:26271 ioctl 4018620d 9 returned -16 [ 1098.625784][T26286] FAULT_INJECTION: forcing a failure. [ 1098.625784][T26286] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.688012][T26286] CPU: 1 UID: 0 PID: 26286 Comm: syz.1.4251 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1098.688061][T26286] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1098.688072][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1098.688089][T26286] Call Trace: [ 1098.688099][T26286] [ 1098.688110][T26286] dump_stack_lvl+0x100/0x190 [ 1098.688150][T26286] should_fail_ex.cold+0x5/0xa [ 1098.688197][T26286] should_failslab+0xc2/0x120 [ 1098.688250][T26286] kmem_cache_alloc_noprof+0x83/0x780 [ 1098.688290][T26286] ? vm_area_alloc+0x1f/0x160 [ 1098.688328][T26286] ? vm_area_alloc+0x1f/0x160 [ 1098.688357][T26286] vm_area_alloc+0x1f/0x160 [ 1098.688387][T26286] __mmap_region+0x101e/0x2820 [ 1098.688425][T26286] ? __pfx___mmap_region+0x10/0x10 [ 1098.688482][T26286] ? finish_task_switch.isra.0+0x204/0xb70 [ 1098.688516][T26286] ? lockdep_hardirqs_on+0x78/0x100 [ 1098.688549][T26286] ? finish_task_switch.isra.0+0x204/0xb70 [ 1098.688646][T26286] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1098.688691][T26286] ? rcu_is_watching+0x12/0xc0 [ 1098.688734][T26286] mmap_region+0x180/0x3e0 [ 1098.688775][T26286] do_mmap+0xc63/0x12f0 [ 1098.688825][T26286] ? __pfx_do_mmap+0x10/0x10 [ 1098.688867][T26286] ? __pfx_down_write_killable+0x10/0x10 [ 1098.688913][T26286] vm_mmap_pgoff+0x29e/0x470 [ 1098.688961][T26286] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1098.689003][T26286] ? __pfx___might_resched+0x10/0x10 [ 1098.689045][T26286] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1098.689085][T26286] ? __x64_sys_futex+0x34f/0x4d0 [ 1098.689123][T26286] ? __x64_sys_futex+0x358/0x4d0 [ 1098.689163][T26286] ksys_mmap_pgoff+0x7d/0x5b0 [ 1098.689210][T26286] __x64_sys_mmap+0x125/0x190 [ 1098.689279][T26286] do_syscall_64+0xc9/0xf80 [ 1098.689317][T26286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.689348][T26286] RIP: 0033:0x7fa396d9aeb9 [ 1098.689372][T26286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.689399][T26286] RSP: 002b:00007fa397b7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1098.689428][T26286] RAX: ffffffffffffffda RBX: 00007fa397015fa0 RCX: 00007fa396d9aeb9 [ 1098.689449][T26286] RDX: 0000000000000007 RSI: 0000000002020009 RDI: 0000000000000000 [ 1098.689466][T26286] RBP: 00007fa396e08c1f R08: fffffffffffffffa R09: 0000000000008000 [ 1098.689483][T26286] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1098.689498][T26286] R13: 00007fa397016038 R14: 00007fa397015fa0 R15: 00007ffde7544e18 [ 1098.689533][T26286] [ 1099.402239][T26286] netlink: 504 bytes leftover after parsing attributes in process `syz.1.4251'. [ 1099.427828][T26297] random: crng reseeded on system resumption [ 1099.441880][T26297] hub 1-0:1.0: USB hub found [ 1099.447328][T26297] hub 1-0:1.0: 1 port detected [ 1099.497670][T26286] netlink: 350 bytes leftover after parsing attributes in process `syz.1.4251'. [ 1100.044174][T26310] zram0: detected capacity change from 0 to 8 [ 1103.505744][T26363] FAULT_INJECTION: forcing a failure. [ 1103.505744][T26363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1103.544797][T26363] CPU: 1 UID: 0 PID: 26363 Comm: syz.6.4269 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1103.544844][T26363] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1103.544858][T26363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1103.544875][T26363] Call Trace: [ 1103.544884][T26363] [ 1103.544896][T26363] dump_stack_lvl+0x100/0x190 [ 1103.544937][T26363] should_fail_ex.cold+0x5/0xa [ 1103.544986][T26363] ? prepare_alloc_pages+0x16d/0x5f0 [ 1103.545035][T26363] should_fail_alloc_page+0xeb/0x140 [ 1103.545079][T26363] prepare_alloc_pages+0x1f0/0x5f0 [ 1103.545128][T26363] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1103.545162][T26363] ? arch_stack_walk+0xa6/0xf0 [ 1103.545210][T26363] ? stack_trace_save+0x8e/0xc0 [ 1103.545244][T26363] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1103.545280][T26363] ? stack_depot_save_flags+0x27/0x9c0 [ 1103.545335][T26363] ? __kasan_slab_alloc+0x89/0x90 [ 1103.545371][T26363] ? kmem_cache_alloc_noprof+0x2ad/0x780 [ 1103.545406][T26363] ? __pmd_alloc+0xbf/0x9c0 [ 1103.545447][T26363] ? __handle_mm_fault+0xa99/0x2b50 [ 1103.545475][T26363] ? handle_mm_fault+0x36d/0xa20 [ 1103.545503][T26363] ? __get_user_pages+0xf9c/0x34d0 [ 1103.545542][T26363] ? populate_vma_page_range+0x267/0x3f0 [ 1103.545585][T26363] ? __mm_populate+0x107/0x3a0 [ 1103.545608][T26363] ? vm_mmap_pgoff+0x37f/0x470 [ 1103.545647][T26363] ? ksys_mmap_pgoff+0x7d/0x5b0 [ 1103.545684][T26363] ? __x64_sys_mmap+0x125/0x190 [ 1103.545709][T26363] ? do_syscall_64+0xc9/0xf80 [ 1103.545742][T26363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.545770][T26363] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1103.545804][T26363] ? policy_nodemask+0xed/0x4f0 [ 1103.545846][T26363] alloc_pages_mpol+0x1fb/0x550 [ 1103.545887][T26363] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1103.545937][T26363] alloc_pages_noprof+0x131/0x390 [ 1103.546011][T26363] pte_alloc_one+0x1e/0x3e0 [ 1103.546050][T26363] __pte_alloc+0x6d/0x3f0 [ 1103.546090][T26363] ? __pfx___pte_alloc+0x10/0x10 [ 1103.546131][T26363] ? do_raw_spin_lock+0x128/0x260 [ 1103.546172][T26363] ? find_held_lock+0x2b/0x80 [ 1103.546203][T26363] do_anonymous_page+0x13a2/0x1f40 [ 1103.546235][T26363] ? do_raw_spin_unlock+0x145/0x1e0 [ 1103.546278][T26363] ? _raw_spin_unlock+0x28/0x50 [ 1103.546306][T26363] ? __pmd_alloc+0x6aa/0x9c0 [ 1103.546352][T26363] __handle_mm_fault+0x1d3a/0x2b50 [ 1103.546388][T26363] ? mt_find+0x45e/0x8e0 [ 1103.546425][T26363] ? __pfx___handle_mm_fault+0x10/0x10 [ 1103.546454][T26363] ? __pfx_mt_find+0x10/0x10 [ 1103.546531][T26363] handle_mm_fault+0x36d/0xa20 [ 1103.546571][T26363] __get_user_pages+0xf9c/0x34d0 [ 1103.546629][T26363] ? __pfx___get_user_pages+0x10/0x10 [ 1103.546683][T26363] populate_vma_page_range+0x267/0x3f0 [ 1103.546729][T26363] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1103.546771][T26363] ? __pfx_find_vma_intersection+0x10/0x10 [ 1103.546814][T26363] ? do_mmap+0x93f/0x12f0 [ 1103.546859][T26363] __mm_populate+0x107/0x3a0 [ 1103.546887][T26363] ? __pfx___mm_populate+0x10/0x10 [ 1103.546934][T26363] ? up_write+0x290/0x4f0 [ 1103.546985][T26363] vm_mmap_pgoff+0x37f/0x470 [ 1103.547033][T26363] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1103.547084][T26363] ? __x64_sys_futex+0x34f/0x4d0 [ 1103.547122][T26363] ? __x64_sys_futex+0x358/0x4d0 [ 1103.547167][T26363] ksys_mmap_pgoff+0x7d/0x5b0 [ 1103.547214][T26363] __x64_sys_mmap+0x125/0x190 [ 1103.547246][T26363] do_syscall_64+0xc9/0xf80 [ 1103.547283][T26363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.547313][T26363] RIP: 0033:0x7fa8b599aeb9 [ 1103.547337][T26363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.547366][T26363] RSP: 002b:00007fa8b6790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1103.547395][T26363] RAX: ffffffffffffffda RBX: 00007fa8b5c15fa0 RCX: 00007fa8b599aeb9 [ 1103.547416][T26363] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1103.547434][T26363] RBP: 00007fa8b5a08c1f R08: 0000000000000002 R09: 0000000000008000 [ 1103.547452][T26363] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1103.547470][T26363] R13: 00007fa8b5c16038 R14: 00007fa8b5c15fa0 R15: 00007fffaf3d2a68 [ 1103.547509][T26363] [ 1104.831895][T26370] netlink: 'syz.4.4271': attribute type 1 has an invalid length. [ 1105.441296][T26383] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1106.701112][ T30] audit: type=1800 audit(2147483667.706:68): pid=26398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4281" name="members" dev="configfs" ino=137851 res=0 errno=0 [ 1108.198153][T26414] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4284'. [ 1108.303710][T26424] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1109.852604][T26444] netlink: 146 bytes leftover after parsing attributes in process `syz.1.4293'. [ 1110.778167][T26455] random: crng reseeded on system resumption [ 1110.990298][T26456] hub 1-0:1.0: USB hub found [ 1111.038573][T26456] hub 1-0:1.0: 1 port detected [ 1113.135903][T26490] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1113.834615][T26505] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4306: iget: checksum invalid [ 1113.856895][T26505] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1113.965179][T26504] netlink: 'syz.1.4306': attribute type 4 has an invalid length. [ 1113.975211][T26505] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4306: iget: checksum invalid [ 1114.050208][T26505] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1114.146267][T26505] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4306: iget: checksum invalid [ 1114.236986][T26505] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1114.257969][T26505] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4306: iget: checksum invalid [ 1114.294662][T26505] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1114.342960][T26505] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1114.417408][T26505] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1115.430860][ T797] Process accounting resumed [ 1116.115413][T26535] Process accounting resumed [ 1117.449033][T26571] hub 1-0:1.0: USB hub found [ 1117.455811][T26571] hub 1-0:1.0: 1 port detected [ 1117.553421][T26573] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1117.567167][T26573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1117.577569][T26573] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1117.616747][T26573] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1117.625514][T26573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1117.747201][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.754123][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.385975][T26589] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1118.577960][T26592] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1118.663408][T26572] chnl_net:caif_netlink_parms(): no params data found [ 1119.243122][T26572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.250495][T26572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.258337][T26572] bridge_slave_0: entered allmulticast mode [ 1119.272235][T26572] bridge_slave_0: entered promiscuous mode [ 1119.297233][T26572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.314186][T26572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.331959][T26572] bridge_slave_1: entered allmulticast mode [ 1119.342746][T26572] bridge_slave_1: entered promiscuous mode [ 1119.693962][T26572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.738894][T26573] Bluetooth: hci6: command tx timeout [ 1119.751327][T26572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.869974][T26572] team0: Port device team_slave_0 added [ 1119.884074][T26572] team0: Port device team_slave_1 added [ 1119.959942][T26572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.966964][T26572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.035159][T26572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.087546][T26572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.122318][T26572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.223480][T26623] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1120.257737][T26572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.513244][T26572] hsr_slave_0: entered promiscuous mode [ 1120.529024][T26572] hsr_slave_1: entered promiscuous mode [ 1120.551619][T26572] debugfs: 'hsr0' already exists in 'hsr' [ 1120.566601][T26572] Cannot create hsr debugfs directory [ 1121.218657][T26644] random: crng reseeded on system resumption [ 1121.236072][T26644] hub 1-0:1.0: USB hub found [ 1121.246178][T26644] hub 1-0:1.0: 1 port detected [ 1121.804354][T26573] Bluetooth: hci6: command tx timeout [ 1122.223523][T26572] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1122.270899][T26572] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1122.316006][T26572] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1122.358916][T26572] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1122.566941][T26573] Bluetooth: hci2: unexpected event 0x3e length: 0 < 1 [ 1122.769337][T26572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.785407][T26668] QAT: Device 0 not found [ 1122.859476][T26572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.903169][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.910434][ T7372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.004770][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.011935][T14627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.873179][T26573] Bluetooth: hci6: command tx timeout [ 1124.047680][T26572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.131915][T26572] veth0_vlan: entered promiscuous mode [ 1125.157588][T26572] veth1_vlan: entered promiscuous mode [ 1125.292206][T26572] veth0_macvtap: entered promiscuous mode [ 1125.346886][T26572] veth1_macvtap: entered promiscuous mode [ 1125.692640][T26572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.748802][T26572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.939992][T26573] Bluetooth: hci6: command tx timeout [ 1126.106508][T14624] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.282853][T14624] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.361586][T14624] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.395668][T14624] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.812248][ T7372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.854237][ T7372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.923621][T26757] netlink: 'syz.6.4362': attribute type 5 has an invalid length. [ 1126.964670][T26757] netlink: 'syz.6.4362': attribute type 1 has an invalid length. [ 1126.976469][T14627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.994922][T26757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4362'. [ 1127.005017][T14627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.398770][T26771] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4322'. [ 1127.464695][T26771] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1128.858744][T26801] random: crng reseeded on system resumption [ 1129.008192][T26801] hub 1-0:1.0: USB hub found [ 1129.033930][T26801] hub 1-0:1.0: 1 port detected [ 1131.263999][T26836] netlink: 'syz.4.4378': attribute type 4 has an invalid length. [ 1131.876140][T26854] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1133.774248][T26893] FAULT_INJECTION: forcing a failure. [ 1133.774248][T26893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.788194][ T30] audit: type=1326 audit(2147483694.924:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26890 comm="syz.1.4390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa396d9aeb9 code=0x0 [ 1133.820622][T26893] CPU: 0 UID: 0 PID: 26893 Comm: syz.1.4390 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1133.820665][T26893] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1133.820674][T26893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1133.820687][T26893] Call Trace: [ 1133.820700][T26893] [ 1133.820713][T26893] dump_stack_lvl+0x100/0x190 [ 1133.820751][T26893] should_fail_ex.cold+0x5/0xa [ 1133.820792][T26893] _copy_to_iter+0x5a4/0x1720 [ 1133.820837][T26893] ? __pfx__copy_to_iter+0x10/0x10 [ 1133.820873][T26893] ? __pfx___drm_printfn_seq_file+0x10/0x10 [ 1133.820911][T26893] ? __pfx___drm_puts_seq_file+0x10/0x10 [ 1133.820952][T26893] ? seq_read_iter+0x819/0x1270 [ 1133.820977][T26893] ? aa_file_perm+0x268/0x1540 [ 1133.821011][T26893] seq_read_iter+0xdab/0x1270 [ 1133.821053][T26893] seq_read+0x33b/0x4c0 [ 1133.821079][T26893] ? __pfx_seq_read+0x10/0x10 [ 1133.821111][T26893] ? lock_acquire+0x17c/0x330 [ 1133.821152][T26893] ? rcu_is_watching+0x12/0xc0 [ 1133.821186][T26893] full_proxy_read+0x135/0x1a0 [ 1133.821225][T26893] ? __pfx_full_proxy_read+0x10/0x10 [ 1133.821265][T26893] vfs_read+0x1e4/0xb30 [ 1133.821299][T26893] ? __pfx_vfs_read+0x10/0x10 [ 1133.821324][T26893] ? find_held_lock+0x2b/0x80 [ 1133.821350][T26893] ? __fget_files+0x215/0x3d0 [ 1133.821385][T26893] ? __fget_files+0x21f/0x3d0 [ 1133.821423][T26893] ksys_read+0x12a/0x250 [ 1133.821450][T26893] ? __pfx_ksys_read+0x10/0x10 [ 1133.821490][T26893] do_syscall_64+0xc9/0xf80 [ 1133.821530][T26893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.821557][T26893] RIP: 0033:0x7fa396d9aeb9 [ 1133.821578][T26893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.821603][T26893] RSP: 002b:00007fa394ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1133.821629][T26893] RAX: ffffffffffffffda RBX: 00007fa397016090 RCX: 00007fa396d9aeb9 [ 1133.821646][T26893] RDX: 00000000000000c2 RSI: 0000200000000240 RDI: 0000000000000006 [ 1133.821662][T26893] RBP: 00007fa396e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1133.821678][T26893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.821694][T26893] R13: 00007fa397016128 R14: 00007fa397016090 R15: 00007ffde7544e18 [ 1133.821730][T26893] [ 1135.184537][T26910] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1136.779711][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1137.290607][T26946] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1139.317861][T26980] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.4406: iget: checksum invalid [ 1139.442597][T26980] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1139.497844][T26980] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.4406: iget: checksum invalid [ 1139.581023][T26980] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1139.597808][T26992] UHID_CREATE from different security context by process 1964 (syz.1.4407), this is not allowed. [ 1139.626699][T26980] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.4406: iget: checksum invalid [ 1139.689214][T26980] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1139.758797][T26980] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.4406: iget: checksum invalid [ 1139.811200][T26980] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1139.822997][T26980] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1139.871705][T26980] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1141.422290][T27010] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1142.431988][T26573] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1144.755683][T27075] random: crng reseeded on system resumption [ 1146.389297][T27094] Process accounting paused [ 1146.765161][T27116] ubi0: attaching mtd0 [ 1146.786491][T27116] ubi0: scanning is finished [ 1146.791304][T27116] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1147.209700][T27116] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1147.471915][T27130] vivid-007: ================= START STATUS ================= [ 1147.568616][T27130] vivid-007: Generate PTS: true [ 1147.588800][T27130] vivid-007: Generate SCR: true [ 1147.593827][T27130] tpg source WxH: 320x240 (Y'CbCr) [ 1147.696008][T27130] tpg field: 1 [ 1147.720193][T27130] tpg crop: (0,0)/320x240 [ 1147.741645][T27130] tpg compose: (0,0)/320x240 [ 1147.760911][T27130] tpg colorspace: 8 [ 1147.816894][T27130] tpg transfer function: 0/0 [ 1147.826970][T27130] tpg Y'CbCr encoding: 0/0 [ 1147.831486][T27130] tpg quantization: 0/0 [ 1147.875942][T27130] tpg RGB range: 0/2 [ 1147.906267][T27130] vivid-007: ================== END STATUS ================== [ 1149.730987][T27167] random: crng reseeded on system resumption [ 1149.942940][T27168] hub 1-0:1.0: USB hub found [ 1149.997742][T27168] hub 1-0:1.0: 1 port detected [ 1150.340743][T27164] TCP: TCP_TX_DELAY enabled [ 1152.535280][T27214] FAULT_INJECTION: forcing a failure. [ 1152.535280][T27214] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.550209][T27214] CPU: 1 UID: 0 PID: 27214 Comm: syz.6.4453 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1152.550239][T27214] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1152.550245][T27214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1152.550254][T27214] Call Trace: [ 1152.550261][T27214] [ 1152.550267][T27214] dump_stack_lvl+0x100/0x190 [ 1152.550291][T27214] should_fail_ex.cold+0x5/0xa [ 1152.550316][T27214] should_failslab+0xc2/0x120 [ 1152.550338][T27214] __kmalloc_cache_noprof+0x80/0x810 [ 1152.550354][T27214] ? snd_seq_prioq_new+0x3f/0x110 [ 1152.550379][T27214] ? snd_seq_prioq_new+0x3f/0x110 [ 1152.550399][T27214] snd_seq_prioq_new+0x3f/0x110 [ 1152.550426][T27214] snd_seq_queue_alloc+0x12b/0x590 [ 1152.550455][T27214] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1152.550481][T27214] call_seq_client_ctl+0xa3/0x130 [ 1152.550498][T27214] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1152.550515][T27214] alloc_seq_queue+0xdb/0x180 [ 1152.550533][T27214] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1152.550559][T27214] ? mark_held_locks+0x40/0x70 [ 1152.550577][T27214] ? _raw_spin_unlock_irq+0x23/0x50 [ 1152.550593][T27214] ? lockdep_hardirqs_on+0x78/0x100 [ 1152.550620][T27214] snd_seq_oss_open+0x2b2/0xa10 [ 1152.550641][T27214] odev_open+0x79/0xc0 [ 1152.550655][T27214] ? __pfx_odev_open+0x10/0x10 [ 1152.550671][T27214] soundcore_open+0x2e3/0x5a0 [ 1152.550691][T27214] ? __pfx_soundcore_open+0x10/0x10 [ 1152.550707][T27214] chrdev_open+0x234/0x6a0 [ 1152.550726][T27214] ? __pfx_apparmor_file_open+0x10/0x10 [ 1152.550745][T27214] ? __pfx_chrdev_open+0x10/0x10 [ 1152.550764][T27214] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1152.550787][T27214] do_dentry_open+0x73e/0x1570 [ 1152.550806][T27214] ? __pfx_chrdev_open+0x10/0x10 [ 1152.550824][T27214] ? security_inode_permission+0xbf/0x250 [ 1152.550850][T27214] vfs_open+0x82/0x3f0 [ 1152.550875][T27214] path_openat+0x21dc/0x3120 [ 1152.550899][T27214] ? __pfx_path_openat+0x10/0x10 [ 1152.550923][T27214] do_filp_open+0x1f7/0x420 [ 1152.550942][T27214] ? __pfx_do_filp_open+0x10/0x10 [ 1152.550972][T27214] ? _raw_spin_unlock+0x28/0x50 [ 1152.550987][T27214] ? alloc_fd+0x476/0x790 [ 1152.551009][T27214] do_sys_openat2+0x12e/0x220 [ 1152.551030][T27214] ? __pfx_do_sys_openat2+0x10/0x10 [ 1152.551053][T27214] ? __fget_files+0x21f/0x3d0 [ 1152.551077][T27214] __x64_sys_openat+0x12d/0x210 [ 1152.551100][T27214] ? __pfx___x64_sys_openat+0x10/0x10 [ 1152.551121][T27214] ? xfd_validate_state+0x129/0x190 [ 1152.551151][T27214] do_syscall_64+0xc9/0xf80 [ 1152.551172][T27214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.551188][T27214] RIP: 0033:0x7fa8b599aeb9 [ 1152.551201][T27214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.551217][T27214] RSP: 002b:00007fa8b676f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1152.551233][T27214] RAX: ffffffffffffffda RBX: 00007fa8b5c16090 RCX: 00007fa8b599aeb9 [ 1152.551243][T27214] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1152.551253][T27214] RBP: 00007fa8b5a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1152.551263][T27214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.551272][T27214] R13: 00007fa8b5c16128 R14: 00007fa8b5c16090 R15: 00007fffaf3d2a68 [ 1152.551293][T27214] [ 1153.418526][T27218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1153.691924][T27227] hub 1-0:1.0: USB hub found [ 1153.741480][T27227] hub 1-0:1.0: 1 port detected [ 1154.396659][T27229] netlink: 146 bytes leftover after parsing attributes in process `syz.4.4459'. [ 1155.286333][T27250] FAULT_INJECTION: forcing a failure. [ 1155.286333][T27250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.324469][T27250] CPU: 1 UID: 0 PID: 27250 Comm: syz.7.4463 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1155.324516][T27250] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1155.324526][T27250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1155.324543][T27250] Call Trace: [ 1155.324552][T27250] [ 1155.324563][T27250] dump_stack_lvl+0x100/0x190 [ 1155.324599][T27250] should_fail_ex.cold+0x5/0xa [ 1155.324640][T27250] _copy_from_user+0x2e/0xd0 [ 1155.324680][T27250] drm_ioctl+0x520/0xc60 [ 1155.324717][T27250] ? __pfx_vgem_fence_signal_ioctl+0x10/0x10 [ 1155.324760][T27250] ? __pfx_drm_ioctl+0x10/0x10 [ 1155.324791][T27250] ? find_held_lock+0x2b/0x80 [ 1155.324836][T27250] ? __pfx_drm_ioctl+0x10/0x10 [ 1155.324867][T27250] __x64_sys_ioctl+0x18e/0x210 [ 1155.324911][T27250] do_syscall_64+0xc9/0xf80 [ 1155.324947][T27250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.324973][T27250] RIP: 0033:0x7efdd059aeb9 [ 1155.324993][T27250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.325018][T27250] RSP: 002b:00007efdd13f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.325043][T27250] RAX: ffffffffffffffda RBX: 00007efdd0815fa0 RCX: 00007efdd059aeb9 [ 1155.325059][T27250] RDX: 0000000000000003 RSI: 0000000090006442 RDI: 0000000000000003 [ 1155.325075][T27250] RBP: 00007efdd13f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.325092][T27250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.325107][T27250] R13: 00007efdd0816038 R14: 00007efdd0815fa0 R15: 00007ffe2a199ea8 [ 1155.325142][T27250] [ 1155.502297][T27248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4462'. [ 1155.511753][T27248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.519217][T27248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.845847][T27248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.928753][T27248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.550446][T27284] [U] ^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\^\ [ 1158.065843][T27300] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4474'. [ 1158.106981][T27300] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4474'. [ 1159.290397][T27322] hub 1-0:1.0: USB hub found [ 1159.299573][T27322] hub 1-0:1.0: 1 port detected [ 1160.069511][T27335] ubi0: attaching mtd0 [ 1160.074719][T27335] ubi0: scanning is finished [ 1160.136717][T27335] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1160.336463][T27335] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1161.429456][T27362] random: crng reseeded on system resumption [ 1161.682886][T27372] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 1163.471760][T27404] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1163.665798][T27399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4496'. [ 1163.726067][T27399] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1164.117075][T27414] bridge0: port 3(gretap0) entered blocking state [ 1164.295200][T27414] bridge0: port 3(gretap0) entered disabled state [ 1164.345176][T27414] gretap0: entered allmulticast mode [ 1164.380377][T27414] FAULT_INJECTION: forcing a failure. [ 1164.380377][T27414] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.445099][T27414] CPU: 1 UID: 0 PID: 27414 Comm: syz.7.4498 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1164.445149][T27414] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1164.445162][T27414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1164.445184][T27414] Call Trace: [ 1164.445194][T27414] [ 1164.445205][T27414] dump_stack_lvl+0x100/0x190 [ 1164.445244][T27414] should_fail_ex.cold+0x5/0xa [ 1164.445288][T27414] should_failslab+0xc2/0x120 [ 1164.445323][T27414] kmem_cache_alloc_noprof+0x83/0x780 [ 1164.445359][T27414] ? __kernfs_new_node+0xd2/0x960 [ 1164.445414][T27414] ? __kernfs_new_node+0xd2/0x960 [ 1164.445447][T27414] __kernfs_new_node+0xd2/0x960 [ 1164.445486][T27414] ? __pfx___kernfs_new_node+0x10/0x10 [ 1164.445528][T27414] ? find_held_lock+0x2b/0x80 [ 1164.445568][T27414] ? kernfs_root+0xee/0x2a0 [ 1164.445606][T27414] ? kernfs_root+0xee/0x2a0 [ 1164.445650][T27414] kernfs_new_node+0x11b/0x1a0 [ 1164.445702][T27414] kernfs_create_link+0xcc/0x240 [ 1164.445738][T27414] sysfs_do_create_link_sd+0x90/0x140 [ 1164.445779][T27414] sysfs_create_link+0x61/0xc0 [ 1164.445814][T27414] __netdev_adjacent_dev_insert+0x43e/0xbf0 [ 1164.445859][T27414] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 1164.445916][T27414] __netdev_upper_dev_link+0x3d8/0x7e0 [ 1164.445953][T27414] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 1164.445990][T27414] ? kernfs_add_one+0x214/0x850 [ 1164.446043][T27414] netdev_master_upper_dev_link+0x9f/0xd0 [ 1164.446077][T27414] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 1164.446134][T27414] ? lockdep_rtnl_is_held+0x26/0x40 [ 1164.446169][T27414] ? netdev_is_rx_handler_busy+0x83/0x140 [ 1164.446220][T27414] br_add_if+0x9fd/0x1b40 [ 1164.446262][T27414] ? security_capable+0x80/0x260 [ 1164.446302][T27414] add_del_if+0x114/0x160 [ 1164.446343][T27414] br_dev_siocdevprivate+0x8ac/0x1650 [ 1164.446397][T27414] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1164.446463][T27414] ? lock_acquire+0x17c/0x330 [ 1164.446502][T27414] ? __pfx___might_resched+0x10/0x10 [ 1164.446547][T27414] ? netdev_name_node_lookup+0x107/0x150 [ 1164.446581][T27414] ? __mutex_lock+0x26a/0x1b90 [ 1164.446620][T27414] dev_ifsioc+0xc15/0x1eb0 [ 1164.446660][T27414] ? __pfx_dev_ifsioc+0x10/0x10 [ 1164.446695][T27414] ? __pfx___mutex_lock+0x10/0x10 [ 1164.446744][T27414] ? dev_load+0x8e/0x240 [ 1164.446779][T27414] ? dev_load+0x8e/0x240 [ 1164.446822][T27414] dev_ioctl+0x70e/0x1070 [ 1164.446861][T27414] sock_ioctl+0x494/0x6b0 [ 1164.446890][T27414] ? __pfx_sock_ioctl+0x10/0x10 [ 1164.446940][T27414] ? __pfx_sock_ioctl+0x10/0x10 [ 1164.446974][T27414] __x64_sys_ioctl+0x18e/0x210 [ 1164.447019][T27414] do_syscall_64+0xc9/0xf80 [ 1164.447057][T27414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.447086][T27414] RIP: 0033:0x7efdd059aeb9 [ 1164.447109][T27414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.447137][T27414] RSP: 002b:00007efdd13b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.447166][T27414] RAX: ffffffffffffffda RBX: 00007efdd0816180 RCX: 00007efdd059aeb9 [ 1164.447186][T27414] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 1164.447204][T27414] RBP: 00007efdd0608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1164.447221][T27414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.447237][T27414] R13: 00007efdd0816218 R14: 00007efdd0816180 R15: 00007ffe2a199ea8 [ 1164.447275][T27414] [ 1165.261556][T27414] gretap0: left allmulticast mode [ 1166.269122][ T30] audit: type=1804 audit(2147483727.546:70): pid=27443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4506" name="/newroot/sys/kernel/tracing/buffer_subbuf_size_kb" dev="tracefs" ino=1195 res=1 errno=0 [ 1167.216714][T27453] random: crng reseeded on system resumption [ 1169.141750][T27469] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 1170.590533][T27472] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 1172.502018][T27529] random: crng reseeded on system resumption [ 1172.516178][T27532] FAULT_INJECTION: forcing a failure. [ 1172.516178][T27532] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.529710][T27532] CPU: 1 UID: 0 PID: 27532 Comm: syz.1.4530 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1172.529739][T27532] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1172.529745][T27532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1172.529755][T27532] Call Trace: [ 1172.529761][T27532] [ 1172.529768][T27532] dump_stack_lvl+0x100/0x190 [ 1172.529792][T27532] should_fail_ex.cold+0x5/0xa [ 1172.529818][T27532] should_failslab+0xc2/0x120 [ 1172.529838][T27532] kmem_cache_alloc_noprof+0x83/0x780 [ 1172.529860][T27532] ? jbd2__journal_start+0x194/0x6a0 [ 1172.529880][T27532] ? jbd2__journal_start+0x194/0x6a0 [ 1172.529893][T27532] jbd2__journal_start+0x194/0x6a0 [ 1172.529909][T27532] __ext4_journal_start_sb+0x32a/0x5c0 [ 1172.529934][T27532] ? ext4_do_writepages+0xc2a/0x3df0 [ 1172.529956][T27532] ext4_do_writepages+0xc2a/0x3df0 [ 1172.529990][T27532] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1172.530019][T27532] ? ext4_writepages+0x347/0x790 [ 1172.530038][T27532] ext4_writepages+0x347/0x790 [ 1172.530058][T27532] ? __pfx_ext4_writepages+0x10/0x10 [ 1172.530083][T27532] ? do_writepages+0x4b5/0x600 [ 1172.530097][T27532] ? do_writepages+0x4b5/0x600 [ 1172.530113][T27532] ? __pfx_ext4_writepages+0x10/0x10 [ 1172.530151][T27532] do_writepages+0x278/0x600 [ 1172.530168][T27532] ? __pfx_do_writepages+0x10/0x10 [ 1172.530181][T27532] ? do_raw_spin_unlock+0x145/0x1e0 [ 1172.530203][T27532] ? _raw_spin_unlock+0x28/0x50 [ 1172.530221][T27532] filemap_writeback+0x22d/0x2e0 [ 1172.530238][T27532] ? __pfx_filemap_writeback+0x10/0x10 [ 1172.530252][T27532] ? __lock_acquire+0x4a5/0x2630 [ 1172.530297][T27532] file_write_and_wait_range+0xcd/0x140 [ 1172.530317][T27532] ext4_sync_file+0x306/0xe50 [ 1172.530340][T27532] ? __pfx_ext4_sync_file+0x10/0x10 [ 1172.530374][T27532] vfs_fsync_range+0x142/0x230 [ 1172.530439][T27532] __do_sys_msync+0x3ca/0x590 [ 1172.530480][T27532] do_syscall_64+0xc9/0xf80 [ 1172.530517][T27532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.530546][T27532] RIP: 0033:0x7fa396d9aeb9 [ 1172.530568][T27532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.530589][T27532] RSP: 002b:00007fa397b7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 1172.530613][T27532] RAX: ffffffffffffffda RBX: 00007fa397015fa0 RCX: 00007fa396d9aeb9 [ 1172.530624][T27532] RDX: 0000000400000004 RSI: 0180000000000000 RDI: 000000001ffff000 [ 1172.530634][T27532] RBP: 00007fa396e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1172.530644][T27532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.530654][T27532] R13: 00007fa397016038 R14: 00007fa397015fa0 R15: 00007ffde7544e18 [ 1172.530675][T27532] [ 1172.837257][T27532] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 2021; err -12 [ 1173.642594][T27551] netlink: 186 bytes leftover after parsing attributes in process `syz.7.4535'. [ 1173.702617][T27546] hub 1-0:1.0: USB hub found [ 1173.715856][T27546] hub 1-0:1.0: 1 port detected [ 1174.444529][T27568] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4539'. [ 1175.440742][T27589] binder: 27588:27589 ioctl c00c6211 0 returned -14 [ 1176.129312][T27601] random: crng reseeded on system resumption [ 1176.590547][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1177.282867][T27574] Process accounting resumed [ 1177.905951][T27646] random: crng reseeded on system resumption [ 1178.228940][T27651] hub 1-0:1.0: USB hub found [ 1178.274307][T27651] hub 1-0:1.0: 1 port detected [ 1178.900068][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.906599][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.421334][T27691] sd 0:0:1:0: PR command failed: 1026 [ 1180.447401][T27691] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1180.513631][T27691] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1183.919453][T27746] zswap: compressor not available [ 1185.350589][T27765] random: crng reseeded on system resumption [ 1188.915611][ T30] audit: type=1804 audit(2147483750.303:71): pid=27811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4589" name="/newroot/64/file0" dev="tmpfs" ino=345 res=1 errno=0 [ 1188.938884][T27811] zram0: detected capacity change from 8 to 0 [ 1191.165868][T27818] Bluetooth: hci4: command 0x0406 tx timeout [ 1191.174763][T27818] Bluetooth: hci5: command 0x0406 tx timeout [ 1191.969774][T27856] No such timeout policy "" [ 1191.982164][T27856] netlink: Failed to associated timeout policy '' [ 1192.728302][T27872] futex_wake_op: syz.7.4604 tries to shift op by -2048; fix this program [ 1192.765563][T27872] futex_wake_op: syz.7.4604 tries to shift op by -2048; fix this program [ 1192.824877][T27872] 0x000000000001-0x000000020000 : "" [ 1192.880209][T27872] ftl_cs: FTL header corrupt! [ 1193.194480][T27878] snd_virmidi snd_virmidi.0: control 1:-5:4195336:1Յ:0 is already present [ 1194.051153][T27895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1194.108984][T27895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.129214][T27895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.150866][T27895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.169002][T27895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.157023][T27905] ubi0: attaching mtd0 [ 1195.162215][T27905] ubi0: scanning is finished [ 1195.194974][T27905] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1195.241579][T27899] random: crng reseeded on system resumption [ 1195.268613][T27899] hub 1-0:1.0: USB hub found [ 1195.286920][T27899] hub 1-0:1.0: 1 port detected [ 1195.322840][T27905] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1195.932231][T27915] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4616'. [ 1197.152324][T27930] random: crng reseeded on system resumption [ 1197.248398][T27936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4622'. [ 1197.261980][T27930] hub 1-0:1.0: USB hub found [ 1197.266786][T27936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.274641][T27936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.297091][T27930] hub 1-0:1.0: 1 port detected [ 1197.414895][T27936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.433601][T27936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.888784][T27960] random: crng reseeded on system resumption [ 1198.976694][T27960] hub 1-0:1.0: USB hub found [ 1198.998035][T27960] hub 1-0:1.0: 1 port detected [ 1200.191625][T20426] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1200.206515][T20426] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1200.216289][T20426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1200.224328][T20426] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1200.232046][T20426] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1200.520944][T27988] futex_wake_op: syz.1.4631 tries to shift op by -2048; fix this program [ 1200.559475][T27988] futex_wake_op: syz.1.4631 tries to shift op by -2048; fix this program [ 1200.636514][T27988] 0x000000000001-0x000000020000 : "" [ 1200.698383][T27988] ftl_cs: FTL header corrupt! [ 1201.622364][T27979] chnl_net:caif_netlink_parms(): no params data found [ 1201.856178][T28019] : Can't lookup blockdev [ 1201.879856][T28019] FAULT_INJECTION: forcing a failure. [ 1201.879856][T28019] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.942275][T28019] CPU: 1 UID: 0 PID: 28019 Comm: syz.1.4633 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1201.942326][T28019] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1201.942337][T28019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1201.942355][T28019] Call Trace: [ 1201.942366][T28019] [ 1201.942378][T28019] dump_stack_lvl+0x100/0x190 [ 1201.942420][T28019] should_fail_ex.cold+0x5/0xa [ 1201.942469][T28019] should_failslab+0xc2/0x120 [ 1201.942510][T28019] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1201.942558][T28019] ? mas_alloc_nodes+0x280/0x390 [ 1201.942590][T28019] ? shmem_alloc_inode+0x25/0x50 [ 1201.942637][T28019] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1201.942679][T28019] ? shmem_alloc_inode+0x25/0x50 [ 1201.942719][T28019] shmem_alloc_inode+0x25/0x50 [ 1201.942761][T28019] alloc_inode+0x68/0x250 [ 1201.942803][T28019] new_inode+0x22/0x1c0 [ 1201.942849][T28019] shmem_get_inode+0x197/0xf30 [ 1201.942878][T28019] ? __vm_enough_memory+0x184/0x390 [ 1201.942923][T28019] __shmem_file_setup+0x279/0x330 [ 1201.942958][T28019] shmem_zero_setup+0x93/0x1b0 [ 1201.942995][T28019] __mmap_region+0x2101/0x2820 [ 1201.943034][T28019] ? __pfx___mmap_region+0x10/0x10 [ 1201.943077][T28019] ? trace_pelt_se_tp+0xed/0x130 [ 1201.943130][T28019] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1201.943163][T28019] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 1201.943214][T28019] ? __schedule+0xff8/0x5fa0 [ 1201.943292][T28019] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1201.943337][T28019] ? rcu_is_watching+0x12/0xc0 [ 1201.943375][T28019] mmap_region+0x180/0x3e0 [ 1201.943415][T28019] do_mmap+0xc63/0x12f0 [ 1201.943463][T28019] ? __pfx_do_mmap+0x10/0x10 [ 1201.943505][T28019] ? __pfx_down_write_killable+0x10/0x10 [ 1201.943560][T28019] vm_mmap_pgoff+0x29e/0x470 [ 1201.943610][T28019] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1201.943663][T28019] ? __x64_sys_futex+0x34f/0x4d0 [ 1201.943701][T28019] ? __x64_sys_futex+0x358/0x4d0 [ 1201.943745][T28019] ksys_mmap_pgoff+0x7d/0x5b0 [ 1201.943791][T28019] __x64_sys_mmap+0x125/0x190 [ 1201.943824][T28019] do_syscall_64+0xc9/0xf80 [ 1201.943864][T28019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.943893][T28019] RIP: 0033:0x7fa396d9aeb9 [ 1201.943918][T28019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.943946][T28019] RSP: 002b:00007fa397b7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1201.943971][T28019] RAX: ffffffffffffffda RBX: 00007fa397015fa0 RCX: 00007fa396d9aeb9 [ 1201.943990][T28019] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1201.944007][T28019] RBP: 00007fa396e08c1f R08: 0000000000000401 R09: 0000000000008000 [ 1201.944024][T28019] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1201.944042][T28019] R13: 00007fa397016038 R14: 00007fa397015fa0 R15: 00007ffde7544e18 [ 1201.944079][T28019] [ 1202.381015][T20426] Bluetooth: hci7: command tx timeout [ 1202.454882][T27818] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1202.474680][T27818] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1202.523180][T27818] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1202.587511][T27979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.591069][T27818] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1202.594974][T27979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.609720][T27818] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1202.629580][T27979] bridge_slave_0: entered allmulticast mode [ 1202.640093][T27979] bridge_slave_0: entered promiscuous mode [ 1202.666710][T27979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.688861][T27979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.696101][T27979] bridge_slave_1: entered allmulticast mode [ 1202.719754][T27979] bridge_slave_1: entered promiscuous mode [ 1202.821291][T27979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.873306][T27979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.008959][T27979] team0: Port device team_slave_0 added [ 1203.046148][T27979] team0: Port device team_slave_1 added [ 1203.131703][T27979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.150349][T27979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.216455][T27979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.256560][T27979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.263610][T27979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.413507][T27979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.599025][T27979] hsr_slave_0: entered promiscuous mode [ 1203.613913][T27979] hsr_slave_1: entered promiscuous mode [ 1203.627598][T27979] debugfs: 'hsr0' already exists in 'hsr' [ 1203.644453][T27979] Cannot create hsr debugfs directory [ 1203.820815][T28024] chnl_net:caif_netlink_parms(): no params data found [ 1204.254762][T28024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.281310][T28024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.288562][T28024] bridge_slave_0: entered allmulticast mode [ 1204.332697][T28024] bridge_slave_0: entered promiscuous mode [ 1204.353346][T28024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.360531][T28024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.388949][ T31] INFO: task syz.2.4101:25584 blocked for more than 143 seconds. [ 1204.390933][T28024] bridge_slave_1: entered allmulticast mode [ 1204.397077][ T31] Tainted: G U L syzkaller #0 [ 1204.415290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1204.428155][ T31] task:syz.2.4101 state:D stack:27464 pid:25584 tgid:25580 ppid:17536 task_flags:0x400140 flags:0x00080002 [ 1204.442274][ T31] Call Trace: [ 1204.445765][ T31] [ 1204.448785][ T31] ? __schedule+0xf67/0x5fa0 [ 1204.452364][T28024] bridge_slave_1: entered promiscuous mode [ 1204.454755][T27818] Bluetooth: hci7: command tx timeout [ 1204.474021][ T31] __schedule+0xfe6/0x5fa0 [ 1204.478727][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1204.484838][ T31] ? __pfx___schedule+0x10/0x10 [ 1204.491540][ T31] ? find_held_lock+0x2b/0x80 [ 1204.496581][ T31] ? schedule+0x2bf/0x390 [ 1204.502927][ T31] schedule+0xdd/0x390 [ 1204.507150][ T31] schedule_preempt_disabled+0x13/0x30 [ 1204.513091][ T31] __mutex_lock+0xc9a/0x1b90 [ 1204.517824][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1204.528547][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1204.535521][ T31] ? net_generic+0xea/0x2a0 [ 1204.542673][ T31] ? net_generic+0xea/0x2a0 [ 1204.547389][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1204.553949][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1204.559638][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1204.565788][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1204.577128][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1204.587044][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1204.593060][ T31] ? security_capable+0x80/0x260 [ 1204.601333][ T31] genl_rcv_msg+0x560/0x800 [ 1204.605979][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1204.612855][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1204.619146][ T31] netlink_rcv_skb+0x159/0x420 [ 1204.624779][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1204.639831][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1204.645313][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1204.651947][ T31] genl_rcv+0x28/0x40 [ 1204.656159][ T31] netlink_unicast+0x5aa/0x870 [ 1204.667294][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1204.668415][T28024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.675059][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1204.693695][T27818] Bluetooth: hci8: command tx timeout [ 1204.706624][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1204.712841][ T31] ? __import_iovec+0x1d2/0x640 [ 1204.717856][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1204.733532][ T31] ____sys_sendmsg+0xa54/0xc30 [ 1204.738548][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1204.746597][ T31] ? try_to_wake_up+0x644/0x1a60 [ 1204.752164][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1204.756898][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1204.762744][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 1204.768364][ T31] ? find_held_lock+0x2b/0x80 [ 1204.776522][ T31] __sys_sendmsg+0x170/0x220 [ 1204.781709][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1204.786971][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1204.796944][ T31] do_syscall_64+0xc9/0xf80 [ 1204.807465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.813821][ T31] RIP: 0033:0x7ff18439aeb9 [ 1204.818566][ T31] RSP: 002b:00007ff185239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1204.840031][ T31] RAX: ffffffffffffffda RBX: 00007ff184616180 RCX: 00007ff18439aeb9 [ 1204.848052][ T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000004 [ 1204.869611][ T31] RBP: 00007ff184408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1204.897723][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.919417][ T31] R13: 00007ff184616218 R14: 00007ff184616180 R15: 00007ffc90889488 [ 1204.927573][ T31] [ 1204.938912][ T31] [ 1204.938912][ T31] Showing all locks held in the system: [ 1204.947419][ T31] 1 lock held by khungtaskd/31: [ 1204.953037][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1204.988993][ T31] 2 locks held by syz-executor/5812: [ 1204.990685][T28024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.994450][ T31] 2 locks held by syz-executor/18099: [ 1205.025107][ T31] #0: ffff888054ac20e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1205.047971][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1205.058456][ T31] 2 locks held by getty/23581: [ 1205.063310][ T31] #0: ffff8880311120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1205.074241][ T31] #1: ffffc9000d2f32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1205.090618][ T31] 1 lock held by syz.3.3721/23722: [ 1205.095786][ T31] 2 locks held by syz-executor/23997: [ 1205.103311][ T31] #0: ffff88807d7100e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1205.113883][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1205.124140][ T31] 2 locks held by syz.0.4084/25514: [ 1205.134414][ T31] #0: ffffffff904a2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1205.147448][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1205.169991][ T31] 2 locks held by syz.2.4101/25584: [ 1205.171479][T28024] team0: Port device team_slave_0 added [ 1205.175575][ T31] #0: ffffffff904a2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1205.193676][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1205.207647][ T31] 2 locks held by syz-executor/25724: [ 1205.213176][ T31] #0: ffff888022aa40e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1205.218822][T28024] team0: Port device team_slave_1 added [ 1205.224656][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1205.277034][ T31] 2 locks held by syz-executor/25765: [ 1205.282457][ T31] #0: ffff88802269c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1205.316799][ T31] #1: ffffffff8ea476a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1205.336442][ T31] 1 lock held by syz-executor/27979: [ 1205.351510][ T31] #0: ffffffff903f5d68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1205.360982][T27979] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1205.388194][ T31] 1 lock held by syz-executor/28024: [ 1205.394252][ T31] #0: ffffffff903f5d68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1205.426371][ T31] [ 1205.428747][ T31] ============================================= [ 1205.428747][ T31] [ 1205.486858][ T31] NMI backtrace for cpu 0 [ 1205.486887][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1205.486928][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1205.486938][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1205.486954][ T31] Call Trace: [ 1205.486963][ T31] [ 1205.486974][ T31] dump_stack_lvl+0x100/0x190 [ 1205.487031][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1205.487064][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1205.487106][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1205.487151][ T31] sys_info+0x141/0x190 [ 1205.487184][ T31] watchdog+0xcc3/0xfe0 [ 1205.487229][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.487257][ T31] ? __kthread_parkme+0x18c/0x230 [ 1205.487300][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.487329][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.487354][ T31] kthread+0x3b3/0x730 [ 1205.487389][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.487422][ T31] ? ret_from_fork+0x79/0xaf0 [ 1205.487444][ T31] ? ret_from_fork+0x79/0xaf0 [ 1205.487468][ T31] ? rcu_is_watching+0x12/0xc0 [ 1205.487495][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.487530][ T31] ret_from_fork+0x754/0xaf0 [ 1205.487556][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1205.487584][ T31] ? __switch_to+0x7b9/0x10c0 [ 1205.487615][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.487652][ T31] ret_from_fork_asm+0x1a/0x30 [ 1205.487705][ T31] [ 1205.487715][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1205.556779][T28024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.557060][ C1] NMI backtrace for cpu 1 [ 1205.557084][ C1] CPU: 1 UID: 0 PID: 28024 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1205.557120][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1205.557130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1205.557150][ C1] RIP: 0010:io_serial_out+0x8f/0xb0 [ 1205.557187][ C1] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 21 64 08 fd eb a0 e8 aa 64 08 [ 1205.557210][ C1] RSP: 0018:ffffc9000bd76cb8 EFLAGS: 00000002 [ 1205.557229][ C1] RAX: 0000000000000031 RBX: 00000000000003f8 RCX: 0000000000000000 [ 1205.557243][ C1] RDX: 00000000000003f8 RSI: ffffffff85674435 RDI: ffffffff9b1f3260 [ 1205.557259][ C1] RBP: ffffffff9b1f3220 R08: 0000000000000001 R09: 000000000000001f [ 1205.557274][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1205.557287][ C1] R13: 0000000000000031 R14: 0000000000000010 R15: ffffffff856743d0 [ 1205.557302][ C1] FS: 000055556c485500(0000) GS:ffff8881246e2000(0000) knlGS:0000000000000000 [ 1205.557326][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1205.557341][ C1] CR2: 000055e8a8d90ee8 CR3: 0000000089fea000 CR4: 00000000003526f0 [ 1205.557357][ C1] Call Trace: [ 1205.557364][ C1] [ 1205.557375][ C1] serial8250_console_write+0xde8/0x1900 [ 1205.557407][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1205.557433][ C1] ? lock_acquire+0x17c/0x330 [ 1205.557471][ C1] console_flush_one_record+0x790/0xe50 [ 1205.557498][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1205.557530][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1205.557558][ C1] console_unlock+0x103/0x260 [ 1205.557580][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1205.557602][ C1] ? lock_acquire+0xc0/0x330 [ 1205.557637][ C1] vprintk_emit+0x407/0x6b0 [ 1205.557660][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1205.557689][ C1] _printk+0xcf/0x110 [ 1205.557710][ C1] ? __pfx__printk+0x10/0x10 [ 1205.557730][ C1] ? find_held_lock+0x2b/0x80 [ 1205.557752][ C1] ? dev_add_pack+0x18e/0x320 [ 1205.557780][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1205.557818][ C1] batadv_hardif_enable_interface+0x7e7/0xb60 [ 1205.557854][ C1] ? __pfx_batadv_meshif_slave_add+0x10/0x10 [ 1205.557887][ C1] batadv_meshif_slave_add+0xfc/0x120 [ 1205.557921][ C1] do_set_master+0x40f/0x730 [ 1205.557954][ C1] do_setlink.isra.0+0xb2b/0x3e50 [ 1205.557991][ C1] ? rcu_is_watching+0x12/0xc0 [ 1205.558013][ C1] ? trace_sched_exit_tp+0xcd/0x100 [ 1205.558041][ C1] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1205.558075][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1205.558112][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1205.558152][ C1] ? mark_held_locks+0x40/0x70 [ 1205.558188][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1205.558214][ C1] ? __mutex_lock+0x7ca/0x1b90 [ 1205.558241][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1205.558268][ C1] ? __mutex_lock+0x7ca/0x1b90 [ 1205.558295][ C1] ? __mutex_lock+0x26a/0x1b90 [ 1205.558323][ C1] ? rtnl_newlink+0x8bb/0x2380 [ 1205.558359][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1205.558388][ C1] ? apparmor_capable+0x1d7/0x4e0 [ 1205.558425][ C1] ? netlink_ns_capable+0xfa/0x130 [ 1205.558459][ C1] rtnl_newlink+0x11bd/0x2380 [ 1205.558498][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1205.558532][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1205.558561][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1205.558596][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1205.558625][ C1] ? stack_depot_save_flags+0x27/0x9c0 [ 1205.558659][ C1] ? stack_trace_save+0x8e/0xc0 [ 1205.558692][ C1] ? find_held_lock+0x2b/0x80 [ 1205.558713][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1205.558746][ C1] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1205.558781][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1205.558815][ C1] rtnetlink_rcv_msg+0x95e/0xe90 [ 1205.558850][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1205.558888][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1205.558921][ C1] netlink_rcv_skb+0x159/0x420 [ 1205.558942][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1205.558977][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1205.559005][ C1] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1205.559041][ C1] netlink_unicast+0x5aa/0x870 [ 1205.559078][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1205.559112][ C1] ? __pfx___might_resched+0x10/0x10 [ 1205.559157][ C1] netlink_sendmsg+0x8b0/0xda0 [ 1205.559195][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.559243][ C1] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1205.559274][ C1] __sys_sendto+0x4aa/0x520 [ 1205.559305][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1205.559342][ C1] ? __fput+0x68a/0xb40 [ 1205.559380][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 1205.559415][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 1205.559445][ C1] ? do_syscall_64+0x94/0xf80 [ 1205.559471][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1205.559497][ C1] do_syscall_64+0xc9/0xf80 [ 1205.559525][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.559548][ C1] RIP: 0033:0x7f9d1c15b78e [ 1205.559566][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1205.559588][ C1] RSP: 002b:00007fffbd0683d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1205.559609][ C1] RAX: ffffffffffffffda RBX: 000055556c485500 RCX: 00007f9d1c15b78e [ 1205.559625][ C1] RDX: 0000000000000028 RSI: 00007f9d1cf44670 RDI: 0000000000000003 [ 1205.559640][ C1] RBP: 0000000000000001 R08: 00007fffbd068454 R09: 000000000000000c [ 1205.559654][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1205.559668][ C1] R13: 0000000000000000 R14: 00007f9d1cf44670 R15: 0000000000000000 [ 1205.559692][ C1] [ 1205.634099][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1205.634129][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1205.634174][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1205.634185][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1205.634201][ T31] Call Trace: [ 1205.634211][ T31] [ 1205.634222][ T31] dump_stack_lvl+0x100/0x190 [ 1205.634259][ T31] vpanic+0x20d/0x630 [ 1205.634286][ T31] panic+0xd1/0xd1 [ 1205.634309][ T31] ? __pfx_panic+0x10/0x10 [ 1205.634337][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1205.634377][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1205.634415][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1205.634452][ T31] ? watchdog.cold+0x198/0x1ca [ 1205.634478][ T31] ? watchdog+0xcd3/0xfe0 [ 1205.634508][ T31] watchdog.cold+0x1a9/0x1ca [ 1205.634545][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.634573][ T31] ? __kthread_parkme+0x18c/0x230 [ 1205.634605][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.634634][ T31] ? __pfx_watchdog+0x10/0x10 [ 1205.634659][ T31] kthread+0x3b3/0x730 [ 1205.634700][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.634733][ T31] ? ret_from_fork+0x79/0xaf0 [ 1205.634757][ T31] ? ret_from_fork+0x79/0xaf0 [ 1205.634786][ T31] ? rcu_is_watching+0x12/0xc0 [ 1205.634812][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.634849][ T31] ret_from_fork+0x754/0xaf0 [ 1205.634875][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1205.634903][ T31] ? __switch_to+0x7b9/0x10c0 [ 1205.634934][ T31] ? __pfx_kthread+0x10/0x10 [ 1205.634971][ T31] ret_from_fork_asm+0x1a/0x30 [ 1205.635023][ T31] [ 1205.636434][ T31] Kernel Offset: disabled