last executing test programs:

36.212421238s ago: executing program 0 (id=2417):
r0 = prctl$auto_PR_SET_MM_START_BRK(0x1, 0x6, 0xffffffffffffffff, 0x100, 0x3533)
ioctl$auto(r0, 0x4c, 0xffffffffffffffff) (async)
ioctl$auto(r0, 0x4c, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffffd}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfff}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r0) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0)
sendmsg$auto_NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000003c0), r0)
sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x5}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24044) (async)
sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0x5}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24044)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x2}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xa}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x10}, @NL802154_ATTR_MAX_BE={0x5}]}, 0x34}}, 0x240000d4)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000640), r0) (async)
r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000640), r0)
sendmsg$auto_OVS_METER_CMD_FEATURES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xfa}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xff}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000890)
recvfrom$auto(r0, &(0x7f0000000740)="facd08ef3a17d3b40d5972c57359ac9eabeeb7cf65be5c1be1aa02347e41f1306ebc324ccefae5e66a196622d423", 0xa83, 0x0, &(0x7f0000000780)=@sco, &(0x7f00000007c0)=0x1000) (async)
recvfrom$auto(r0, &(0x7f0000000740)="facd08ef3a17d3b40d5972c57359ac9eabeeb7cf65be5c1be1aa02347e41f1306ebc324ccefae5e66a196622d423", 0xa83, 0x0, &(0x7f0000000780)=@sco, &(0x7f00000007c0)=0x1000)
sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc4, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xc4, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = timerfd_create$auto(0x6, 0x4)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b00), r0) (async)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b00), r0)
r8 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000b40)={@_si_pad}, 0x0, &(0x7f0000000bc0)={{0x4, 0x3}, {0x7, 0x5}, 0xfffffffffffffff8, 0x7f, 0x9, 0x6, 0x9, 0x3, 0xacea, 0x2884, 0x63, 0x10, 0x8000000000000000, 0xff, 0x3, 0x1000})
r9 = getsockopt$auto_SO_PEERPIDFD(r0, 0x1, 0x4d, &(0x7f0000000c80)=',[@\x00', &(0x7f0000000cc0)=0x5)
getuid() (async)
r10 = getuid()
sendmsg$auto_NL80211_CMD_DEL_PMK(r6, &(0x7f0000002240)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f0000000d00)={0x14ec, r7, 0x804, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1b9, 0x6e, 0x0, 0x1, [@nested={0x20, 0xc1, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @u32}, @nested={0x4, 0x23}, @typed={0x4, 0x8}, @nested={0x4, 0x79}, @typed={0x8, 0x13d, 0x0, 0x0, @pid=r8}]}, @generic="b323953a3dc971af3c16ef63ebf47995e81f831b0a69947531745f70643e69e1b1e69ba7a27aa8a951020c0826b4757de1020831fcda50b3739ecac820a55f7e447690f3f87ee7772d623670fc8543991ac92571da16339be91bad7343b9622de59456a90f35fe226f122ea8", @typed={0x8, 0x111, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r9}, @generic="5f99e1056772566b50b54e2b48aef9609e21240065fe98eb2ed06917b31a1d327d16f1ae93182d03c75e3c07af7d7f77e0f5545283f1ede5c0775c5f10a74594aea19cbecf12a7d94426619471c62e289b030a905690aab50e7df18a5f76102aa2248e57ff25fb0a4a876d0fad5d399fe1f3b1473894a987b77d436ef0edd55dccdfabd2f97417685d32252e50a90c16860b4f882b4820bb0adc075dac8f7334e6bea02507bbb9b9032e02d2f20f08e76b2e9ef5e25e9892155b2b5f9a05720b0426f46ace6eeddcb2c0e9ed007713b64fd2de17004fa4eba0d2ff735b9d6a9c191fd5cd0230f73a90f937d07a", @generic="44975515bc52fee13f0aa887cf3f9bb686e219cec13532979f4c7f9ede088bc23142053fd79471c441ccb68c"]}, @NL80211_ATTR_MLD_ADDR={0x3c, 0x13a, "61bf771847e3176d89868d13f82505c3e695a9a2028cbf52649365ff4d8ded7dea273c0a8b945b48dae516bf178760a9917b5d8b01463122"}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_TX_RATES={0x11c7, 0x5a, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @nested={0x8d, 0x2c, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0xa}, @nested={0x4, 0x37}, @nested={0x4, 0x46}, @generic="3f44f136de04817d544e2211edc72c0747cf8bcffe44dbedb50d8f1170e9968604c3f6f6272c883431d5e748fc2af49e1370ca3b7c43ca1a5e9665c0fbafdeb2bd5b6e41772b37c65f617a879668327c292555fb13f8fee36b776f77d16b31ba0e5ead4613152ca37b", @nested={0x4, 0x130}, @nested={0x4, 0xfc}]}, @typed={0x8, 0x51, 0x0, 0x0, @uid=r10}, @nested={0xc, 0x15c, 0x0, 0x1, [@typed={0x4, 0xe9}, @nested={0x4, 0x136}]}, @generic="7b7524406218361c4be00b81fa9f9661a805cf8e2f125d72a40cc3aacbf916e470465386ac6d4735cc97952d50f0b7d3422e60550e5e67ed86f3c48639ceb70c6fb9aa512ff1e15b5b4fcfb2d74ef14f6f7de5752e9b86b7bb757faa4bb6c078a55b10ba9888060429d946c9ac3313a0023db29383ba002f68b834d1a6711d59afb02988bb839e207ab4b20cb4904e7e495e9666645543d91f297e8da888bf5b6d1ffd24d7d6", @generic="ae1df2a3fc5f255aca65ff81938410756ff9f23bde86296de7fc752e5f7a9903cb1730f00756799cbe846c9713e32bf58a092f0d35af5bec372f891c73f66d6d0d14a1d3de9abac487deb82781868d6078371eb20b5bfa6e7cb058815a22043ceb605525f1", @generic="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", @nested={0xc, 0x11d, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @u32=0x8}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2d, 0x84, 0x0, 0x1, [@generic, @typed={0xc, 0x37, 0x0, 0x0, @u64=0x1}, @generic="4ba475cf9c1ec69103f5feaff4ccd63e194084039c5a4f950d82d4006c"]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xfc01}, @NL80211_ATTR_WIPHY_NAME={0x9, 0x2, ',,#/\x00'}, @NL80211_ATTR_MAC_HINT={0xca, 0xc8, "6f59fe5a443ad3b5a06876f7a88da8f7d4940d154d62898c6e8491b21587c57c6475f4ff2a73835d300b37d669b03b391fbee140c7d2c4f86be2d847911b623c94b3d90257179d33097ebf83df5d310b545bc1ea7b8427f36a3ad9fe7742e7cf1cf8148e647d19509a0bc8c1da150a0d2c3a9f1700d0c61742c322f2c8e2d5ebb2abfc65149b55c47bb27ab5366a15f8c2c4497cd9081af5c9324f4fd365819cab3a79483c0706a551dcfb263d7e77ae7d27dc89570857aa969c8160805e59931f11cad23f74"}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002280), r6) (async)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002280), r6)
r11 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
msgctl$auto_IPC_RMID(0x1b2, 0x0, &(0x7f0000002340)={{0x3bb6, r10, <r12=>0xffffffffffffffff, 0x3ff, 0x9df1, 0x8, 0x7}, &(0x7f00000022c0)=0x43, &(0x7f0000002300)=0x4, 0x7fffffff, 0x0, 0x8, 0x1, 0x400, 0x3, 0x71ce, 0x1, @raw=0xa0aa, @raw=0x40})
ioctl$auto_XFS_IOC_SWAPEXT(r11, 0xc0c0586d, &(0x7f00000023c0)={0x7, @inferred=<r13=>r9, @raw=0x6, 0x6, 0x807b, '\x00', {0x3, 0x2, 0xd, r10, r12, 0x1, 0x5, 0x7, {0x5, 0x3}, {0xe, 0x6}, {0x4, 0x12}, 0x1, 0x4, 0x7fff, 0x0, 0x8000, 0x8, 0x5, 0x5, 0x4, 0x7, '\x00', 0x6, 0x0, 0x5}})
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000002480), r13)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x880)
kexec_load$auto(0x92f5, 0x0, &(0x7f0000002640)={@buf=&(0x7f00000025c0)="c50b695ec1101b522e1aeab21e8e2dd742cc81738b74d74f2043ffdf95c1a3f57225bcb651e7ca282893ee6e852daf44cf603b623494416f0b8b46dc1162e7766858cccbd82c709b11df095c015830f5fee44e5788bb15c9d4cf66d9ff9e940695c2a176124e01e619e90221a1942a655ff6b0d2a4", 0x101, 0x1, 0x9}, 0x8)
kcmp$auto_KCMP_EPOLL_TFD(r8, r8, 0x7, r9, 0x9)

35.85962384s ago: executing program 0 (id=2418):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15) (async, rerun: 32)
madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 32)
fadvise64$auto(r0, 0x8, 0x4, 0x5) (async)
fanotify_init$auto(0x65, 0x2)
unshare$auto(0x20000080) (async, rerun: 32)
unshare$auto(0x40000080) (async, rerun: 32)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r1, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) (async, rerun: 32)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 32)
preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
listen$auto(r1, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/ip_vti0/ndisc_tclass\x00', 0x642, 0x0)
write$auto(r2, &(0x7f0000000200)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) (async, rerun: 64)
getsockopt$auto_SO_SELECT_ERR_QUEUE(r1, 0x8001, 0x2d, &(0x7f0000000080)='/dev/mtd0\x00', &(0x7f0000000100)=0x3) (async, rerun: 64)
close_range$auto(0xffffffffffffffff, 0xa, 0x0) (async)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async)
ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) (async)
mmap$auto(0x0, 0x400008, 0x20000000000e3, 0x20000000000010, 0x2, 0x8022)
socket(0xa, 0x801, 0x84) (async)
socket(0x10, 0x2, 0x0) (async)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

34.379402029s ago: executing program 0 (id=2420):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000380)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
r0 = io_uring_setup$auto(0x7fff, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000a00)="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", 0x314)
ioctl$auto_SNDRV_CTL_IOCTL_POWER(r0, 0xc00455d0, &(0x7f0000000340)=0x8)
ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
faccessat$auto(0xffffffffffffffff, 0x0, 0x4)
ioctl$auto_SNDCTL_SEQ_PANIC(r1, 0x5111, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x341000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9d82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xb, 0x1, 0xa2e}]})
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084)
lstat$auto(0x0, &(0x7f0000000240)={0x8, 0xd71, 0xb, 0x9, 0x0, 0x0, 0x0, 0xce, 0x2, 0x80000000400000a, 0x3, 0x1, 0x9, 0xffffffff80000000, 0x11, 0x1fffe000000000, 0x2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})

30.255747326s ago: executing program 0 (id=2426):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x40000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r1, 0x4161, 0x0)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x11, 0xffffffffffffffff, 0x8000)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(r1, r0, 0xfffffffe)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x59, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2003}}, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
io_uring_setup$auto(0x7, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040)
mmap$auto(0x0, 0xb85, 0xc1c, 0xfffffffffffffffc, r0, 0x7fff)

29.997082726s ago: executing program 0 (id=2428):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000)
write$auto(0x4, 0x0, 0x100082)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x408)
sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)

11.605702931s ago: executing program 2 (id=2455):
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x6)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x560a, r1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0)
connect$auto(0x3, 0x0, 0x54)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
pread64$auto(r0, 0x0, 0x101, 0x7fffffffffffffff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/002/001\x00', 0x62a543, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
unshare$auto(0x40000080)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x141041, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
syz_clone3(&(0x7f0000000400)={0x148000400, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/tty/ttyq0/dev\x00', 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x210300, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x199b81, 0x0)
close_range$auto(r1, r2, 0x2)
socketcall$auto(0x5, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)

8.978380004s ago: executing program 2 (id=2458):
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54)
mmap$auto(0x5, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
socket(0x2, 0x1, 0x0)
semctl$auto(0x201, 0xfffffffd, 0x3, 0x400000)
setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x100008)
listen$auto(0x3, 0x81)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0)
write$auto(r0, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x18, 0x1, 0x400000)
socket(0x2c, 0x3, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@can, 0x55)
ioctl$auto(0x3, 0x800005411, 0x38)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x1, 0x1000)
socket(0x15, 0x5, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x13, 0x80, 0x8ffff, 0x5, &(0x7f0000000140), 0xc692, 0x3, 0x80005, @stream_id=0x2, 0x0, 0xc, 0x0})
ioctl$auto_USBDEVFS_REAPURB32(r1, 0x4004550c, &(0x7f0000000300)=0x7f)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0x0, 0x7, 0x8080)
setfsuid$auto(0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0)
pread64$auto(r2, 0x0, 0x80000000, 0x7fff)
mount$auto(&(0x7f0000000000)='gre0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffeffff, &(0x7f0000000140))

8.78354901s ago: executing program 3 (id=2459):
r0 = socket(0x1e, 0x5, 0xffffbffe)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0)
read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/228, 0xe4)
setsockopt$auto(r1, 0x10000000084, 0x2, 0x0, 0x10005)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e)
sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
bind$auto(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x7)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0)
ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
socket(0x29, 0x80000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8001)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r3)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013d9fb40c90a116eb250100000020bf14561bb95c0f95ffdce2b3323e8cd2a1dcb35098e2d48a749bd6e4970ffe5f4b84c1a1ff030000000000007f6efea12c025d53e885dd690d00c98230cbbd5a3add34afa1c32dea8d241887b3dc0aa6708071ed1a6d000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800)
sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3401f900", @ANYRES16=r4, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
prctl$auto(0x10, 0x6, 0x7, 0xffffffffffffff78, 0x8)
r5 = socket(0xa, 0x5, 0x84)
setsockopt$auto(r5, 0x10000000084, 0x22, 0x0, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)

7.852383263s ago: executing program 2 (id=2460):
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050)
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd11\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}})
set_mempolicy$auto(0x6, 0x0, 0x4)
close_range$auto(r0, 0x8, 0x0)
socket(0x2b, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="e80c0000", @ANYRES16=0x0, @ANYBLOB="020025bd7000ffdbdf2502000000d30c0a807c01d88014000a00000000000000000000000000000000018c5e7904b62ded848c5a778ccb9fcd960d5745f5cea399f1393201d03ff61c8faad2714a3f3cb434cf059ecaabcadab9b937fa6270f5834c8977b164f51f8a5010c2391b321a51ed2e59e62b82050afea490c39f241c0bccc4eca2a23856a7463f5922c1e87d7c003922ae40afeb062934923dd36f2ebb228b936966e22c6ef66079c2fc3021977473b17d917d82c4b34eb65f20bd151f080442ea1e9e9145df1e2826836b038d77a91cf3bc1c8e336491d9e593c9de15e694a026b12d4b60593ccff1177b10e75c4ddc060f10dd75faa446540cd4d2789346397d7ec6ef83a74728f306d8a679df003a270e6bbe6d9d34a5c5bff4578c2b78df5f7a0108d105b44a38f769e5a4266a314301bc9d1f94d274645b0c1e5912937fa615ad900e00f090e3c8983552b54cea92f0821b21b88777ffb0b5bf967a7fb3d02a41fdbbbb8516b63c42db43e832d8619d2907d24873200a68c154338a239ec64a0400f8800400e580cea3b1eb5035f2ada7a6b369d9cae80acbce4557f0a5750e99a779e2b15337c19c29137b5f3c8b42c22922d5fc413ad50eac5db9d9600a977494ac571a4cc04d4ef62f297b19171852125f670e0986874ebd14c9069aa95a53648686fd3687a6e1b112d0f14449ee614bc9253faa00f7e2cb1278c5cb429df67247106ca66808003300ffffffffa2e51c731e48c1c636ffffe1588d1951c13ab2c929acd0618de874f0990a4b800400748014000500fe88000000000000000000000000000104004680a00d8ff41cccbf55c36b5d5793b6ad42435e2cc5368e1f7460d84ab4104519e965f9ddc2952e5c7833887d56fbf664f0c427fe74c8e656a2c630037a9b04033ce61f32864a8ca1909fb177864116d7e5b835df404cde2e7b18d069155563fbbe8c295df3fb0e4b465f9ad68cac8994bd7cb152b40f837efa7f8155c887cc82b77054893cb8183bd7d5283ad5b395492caad2d0e6114d4d314b6968b6858a1e20094f7e7c5243ebbaea2f639e9f0bf971a18f68326f7844933654971c4f0156eb94fd978407a40ea23d0e0fbfcd88be971646869ca13f179a0b673ae041c9c02e32a32dd05530f6c35ae0c5b7dcb4bb265fcf856a030b981bb322d4928329ec5ff77e4ad21dd42b1392491d534b63fb1aae4e2e5f3ffcd818ed6693a63d260bf76118ebdb0907505a66d6c8cd91e916af9c590fad600e3ed0ef3d07e73786b7f9f3c6901110485dca7b11b67b7aa70069d9b8b1192e04635a0b4ce37724474ee0863f57e9ece83eb6b69c2044386c8e8149e937230d3de3008c40677fb8ed85c878f90afc5ed28d2c58376f670287a6bd2a24aee95a20b0919851fdc7452fb1c7b1e250b8da8d0c7531733f26320c71530f76542165aaf05a98cb7dc328de86e9b77f674149b05eed59efa1cb0a824987cb56f39e62a1a2d65013005d04322e5ff87229c40c4646736970a9e738cbe590a0626430a7e5e138ac8c40ab68f912f327690b6a4d6c207470b7c4b3281619f61b3b8584107daba0cbd1dc9070a7b84481d21cb683a0ab9adf8dfd2d25c67eb0bc48b3ec953a666cd3439250e74857a01dad6300bf71ed5663dc21fb8d90bc956356e3d20fedb2869ad670b8d98d41a4434385f98de28c23e21731d643fc52792a72aab4417f9eebf9f9fa4c0a6efbaef5aac281d71d82fde9f23a44424e1ce141ab8187535ac9f11c1c5e6ddcca6efc5ff155b163f525b4cd7e712f4d8fbb53575094c83f1ca4e35aeaa81f677eeba0cf2846bd36bb0eeb1824f4dbb624edd230171a3dcdf639f2abd6a1f37f1a05c7824ad84966ea6d258ec0688a9abd4b6937ce9b6399c0db909f14427acd491832c1eccccde62c6fff59b6dbbe27ba3cfeae11986f08ed7719e612462de5988e5e8a528f1da1607f018c5fcf7314764cc7e6bee02b7651296a31f5d484c9c606964ac7b0eecdd703279a05e6c0203d794e63778e28b89b26a87cc3aba666909b55b11678b86492179e46b628d0af57d813c1176f998bd600e06f46134c85922bb2b8264ac3a1a71345282005f2ae235ad6b7fdfb1ce7aee64f8ed308e9e19b5dcaf289094c026410446cc31cc846947c872b6455afbcb0d99cd814cd51b606646b92af3a81b07dd25a7f7b2fe18bf5ff3489064b54fa1abb9a2c80a4adc93ced65cb3a1379105b22912a1a3da47a26d730ec30333269167b05768b87adb94c84fc4c888676f1a5350d03df3a75873f9d28a9150e3177d68607cbd779049daea4f37e1553e21f66dad10987dd51af2f1f59b47df0f2be4437cf158cbdd3a642d6453a0f83ed71bdc492dadbdc0c50af56a7f8aff757d3ae0fafb3dab14eb93330a0b76ee1db94d810965f4176d4bc8087b790369b89351033e27022479978679c59e5ddcef33a3770df6e6d7338130342e7fb6c13e0fd0813e689bb70ed3a05c377841afeba8ed5044a2cb0cf96799e30c120d55c193ab5ebab1add7bf6558838bfcab15ee29248d4bcb40aeb114e097f8edd3d647c014f68cb547ac73a5087a3f5de4b8822727d17a58d66c4e6fbe61d2e114cc266d3d94d3eae8987196fe922372241e197288fca4984e7bbd53d759fdc4de050c592958990f8acfea1f372df6c50f0d244ed85c19f2cc0b330298a80d50b995321d8585985a7ab7a5c6bb4f6a1a48dc757dc2c69c58f7e175790f1ac0e13d6731cae4d4d64a61d56aa5669e21893c47cdd8342ae69658f98d909f532deb250dde9c80bf2f6a9a66e5b6c4bde12091f543ce9b512bf423f965b0fc52f8218c609454463a2a2d542f23dff19998daeab5ae1b7012faeec6f7b912ab45427ef1242b756b47e810dd856352615f3e1d8998dc1ac5153316243ae2a4e2d9cf9d73a4aeab992294302c85670a37abb38b528000624149591ec596c755daa5d5bf2da6870d058cda6789550a68259b110b81a99c4cbe41eb901cb51ceaeeb704e9c77f19e47012ca35e523971dba1e0318b8862014264ef090b278d8a97f2a768729b44cd5ea820ed1fd06e7c6c16f04c0f1e12637cfbea83a0e54ff58242e5e3d2d7bf316d5832e051172cd1a314eef8969a4c64c2e45b5143e192dde9f3918b2da2f6f4b30a4a7a40df943688aee9b0f40532fc50a3ddfb7d86f71e8a8ca49390fa1113812084284c00133d9de60a69929bb47b0209f57c7eb24f42ec56c0923ca5022e8fc7b0e3889ebe35c55b550b96d1eed78f664bddc383ad13b5aecd83187322c3d1df34c453a9dc2692eb8682d7a52d84222a7197b175016974e561b7a4c808fe0e37fb1e4c5c47a77b2122e175f194f645d5a3fa56472bca44b31bd2e51533d379b68f39977dc2a756e6aa3bfffa5a83e71bbde0ad4a63887a5b2fbe6ef0046350ab304484d361dd113be886b4fabeb64a754eae54e4b76a638a450198d285e63dc939980c27febedea5790724b36ee7c038a2b7c80cec694743f13cd9e65fdef94b7453fe4282864fc85fe17b00e6e37a74aa773af30fbdc00883f44a47260a55a92984a6f8e362d3812e48205751ee40ebe614a66358a42e49f41d3f05b762c9506d9b9ad45cc42aedf35457b98286713e3016722177c82af73a075b74bbb6e2825cf48432df1a5f93c0d7a36db00b78e49e7704ea04ebecc16d9e49e1ea71e7c4cc46d9a3b200820e730f62ffa9c0ff3ee5e88dc8ee715ccf4812f4b8a8eaabc357b0d2ad7c52e03895f36b73d6df24cde8f27c45a711d4f3e082754ae51316105fc0a903bb07023694e5e66ff62878e53d1c9ef148bf886f96db601c6a8f0f181bc644a58b3ac3149afe1c329751ca5b833b645ef5adaa4ef4157f1652b6e9ecdb0009027ec80a27747cc43be7a243e955807b8bcc1a79f730d17dc0ce448c9b62ca48a8707cd4b15493135caaa305402dc969f6ee66a5b8650020df88bf4672cb382cd234fcb91d428ab88b6a794624a1b17c2db145983d5a9cf64dae3591bbb871f60657ff7614a82e0d8d710c5ac07eda7b7b506aa6032751d1b580322cfd0cea771827a2d1f62a003afd5ded7adc414bf828e69f5642a0b0b4652d3987b0226e864cfdb3cdb1dbdfe3e28f3850f7a11a3480c13201adbbae678d36a8bf59923c9b586c3afc5b75b827ade57f643a14595b914c973a369390e6bfb2fe25a488f8967b8d2912c14299b8b4f9d6d8a46c6c6bd54c6c937a45a412bc7311a20162a1ee859a7ec087e3c4895833e0323c4837d09ce4f000672e1fa0ebeb59fb041bcf4d6d46fc508712950a58514d6151b7675cbf7ba9eaaf23cd9e9bf56ab078b56d0ed50b1839e3db54d3420c1b4042dddd7867fcb86f3abed33f49040326091e384f124cc9d0afeceefa55525b630647420f1fb7764ba6909c52d36d58e188e5aa204bc9aa96081303a5d8b8bf603147f0617a97437db03901171e66970c3da108005b00", @ANYRES32=0x0, @ANYBLOB="04002b80adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc7200000014001c0000000000000000000000ffffe000000100"], 0xce8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0)
r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95)
sendfile$auto(r3, r3, 0x0, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0)

7.740680147s ago: executing program 3 (id=2461):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_OSS_ALSAEMULVER(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)="f9b614d22aa4a460cfb56a95fe2004332cbcbb0ce134b2747fcbdf6ebd276a04e2fd612f6669e487ab52b2a827737588c833b38a8a8ab7a7147d9ebdf91b73fc35fdcc8548bd41b43e43f35716724de2624e51d44c499d4ff7c6e7535c376eaad9bbfef22d356a2115e4c9617145b4ffe47ce6")
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0xffffffffffffffff)
mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0)
ioctl$auto(0x3, 0x8208ae63, 0x38)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mprotect$auto(0x110c230000, 0xa588, 0x6)
mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0)
socket(0x23, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6)
sysfs$auto(0x2, 0x44, 0x0)
add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise$auto(0xfffffffffffffffb, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0x400053, 0xb)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.6/usb22/22-0:1.0/usb22-port3/power/runtime_suspended_time\x00', 0x68701, 0x0)
ioctl$auto_FIBMAP(r2, 0x1, 0x8000000000000000)
write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1)
close_range$auto(r0, 0xffffffffffffffff, 0x3)
syz_genetlink_get_family_id$auto_nl80211(0x0, r3)

6.351602614s ago: executing program 3 (id=2463):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000)
write$auto(0x4, 0x0, 0x100082)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(0x0, 0x0, 0x408)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)

5.839011585s ago: executing program 2 (id=2465):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000)
mmap$auto(0x0, 0x400008, 0x1df, 0x9b72, 0x2, 0x8000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x6, 0x1, 0xffffffff, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b620200f764f9", @raw=0x1000}, 0x0, @enumerated=@item=[0x9de5, 0x400, 0x8, 0x4, 0xfffffffe, 0x6, 0x4, 0xd113, 0x5, 0x9, 0x7447435e, 0x8, 0x3, 0x5352, 0x0, 0x5, 0x0, 0x8001, 0x0, 0x101, 0xffffff80, 0x0, 0xfffffff9, 0x101, 0x0, 0x8, 0x1, 0x5, 0x4, 0x623d, 0x10, 0x5, 0xfffffffa, 0x4, 0x0, 0x1, 0x81, 0x2, 0xfffffff9, 0x7c8, 0x1ff, 0x6, 0x1, 0x3, 0x1a, 0x1d48, 0x2, 0x5, 0x3, 0x12000, 0xae70, 0x0, 0x50, 0x9, 0x0, 0x7, 0x1, 0x1, 0x1, 0x7ff, 0x80e6, 0x0, 0x10000, 0x6, 0x7, 0x3, 0xd17, 0x7, 0x4, 0x8, 0x7d, 0x917, 0x4, 0xbef0, 0x4, 0xe, 0x5, 0x5, 0x7efd, 0x1, 0x7, 0x200, 0x1db, 0x9, 0xf, 0x2, 0x8, 0x1, 0x5, 0x0, 0x0, 0x4, 0x100, 0x401, 0x4, 0x5, 0x1, 0x0, 0x3f4, 0x3ff, 0x3, 0xf, 0x4, 0x7ff, 0x100, 0x32, 0xfffffffc, 0x403, 0xd, 0x8, 0xf, 0x68, 0x8, 0x80, 0x81, 0x2, 0x70, 0x3, 0x5, 0x6, 0xffffff04, 0xfffffff9, 0x80, 0x7, 0xfffffff6, 0x6, 0x0, 0x8], "528d458095d42b72adda0cac2d45bdaacf03000000000000008bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6cac1ba3023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8133ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"})
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r0, r0, 0x0, 0x2)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xffffffffffffffff, 0x300000000000)
pkey_mprotect$auto(0x80000000, 0x0, 0x7, 0x4)
io_uring_setup$auto(0x6, 0x0)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x40000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000000)="d02c4a2e5814c8c6d82c7078f259ecfc106c8d617a7e9b2ea05f5f6bb059ec08931a4c6e3f332a459154cee4fee56937fab6e085a30032657f0f5c3e78712b7a826ad7a6", 0x0, &(0x7f0000000140)={&(0x7f0000000080)="cf4a6f959ec7d7f7daa25da1aa2985e5fbd1be87cdf747642a097b7a10ecc6760b30f3e0a835b8a91ec984341915320e10712ed827b742d9054fa83d5246773407e72f127f2d419f344ea648f5ef424f91c1c3846e0565a025e10497b46730558680cecad05bd6e1d4df80c1d4faaf9ae01f5d0ccc1d55b1cd18de9642533b4b2de4b5a0a38d12e91af52830f27f", 0x1}, 0x80000001, &(0x7f0000000180)="4a574394d4d332d7c6a7946a38dd1936342efa259616b211e61539f9acab6f1e3376ec824833d1ed49ab4ef4a003c10599124d9aefeed6b9fd585efe4624b3a2178a4d3a0243826821bb75d5b63a37a2d1e07e6c", 0x2, 0x1}, 0x1}, 0xf, 0x100)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3)
r2 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r2, 0xc, &(0x7f0000000040), 0x8)
mremap$auto(0xa9, 0x1, 0x8, 0xc, 0x81b5)
open_tree$auto(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000)
mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x400007, 0x8, 0x9b72, 0xffffffffffffffff, 0x6)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10)
close_range$auto(0x2, 0x8, 0x0)

4.578313143s ago: executing program 1 (id=2467):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000)
setsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000080)='*\x00', 0xe6)
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0, @ANYBLOB="010097a9853ee707c1b130ac92"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044)
wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000})
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
getsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0xb29, 0x26, &(0x7f0000000100)='[(][+/:$!.\x00', 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc)
r2 = io_uring_setup$auto(0x6, 0x0)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
mmap$auto(0x0, 0x200, 0x800000000000e2, 0x9b72, r2, 0x7)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r2)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0011)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
kexec_load$auto(0x100000000000000, 0x0, 0x0, 0xffffffff)
close_range$auto(0x2, r2, 0x0)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r4, 0x0, 0x5f)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r4)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7d4c3169d2450e253bd212ce509dc5b58f2d7d0791f482f242f6cac8f8531720adbd9640dbf2f1009aedc19efc3e9e5500d5e03508790864634c42334b3802aed954fad3aab506cd4a55a27d7a0cba8af3ab938776e9be1c", @ANYRES16=r5, @ANYBLOB="200027bd7000fbdbdf251d0000000500240006000000050024009f00000008002c0024ed0000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x4)

4.39950746s ago: executing program 2 (id=2468):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/macvlan1/ndisc_tclass\x00', 0x40400, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x801, 0x84)
bind$auto(0x3, 0x0, 0x6a)
setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90)
sendfile$auto(r1, 0xffffffffffffffff, &(0x7f0000000140)=0x7d, 0x9)
r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x2, 0x0)
ioctl$auto_USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x5)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
open$dir(0x0, 0x10000, 0x6)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r3 = socket(0x10, 0x2, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x80302, 0x0)
sendfile$auto(r4, r4, 0x0, 0x2001)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfc0}, 0x8, 0x0, 0x8, 0x3}, 0x3}, 0xc, 0x4008)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
setresuid$auto(0x0, 0x0, 0x0)
waitid$auto(0xb3, r1, &(0x7f00000002c0)={@siginfo_0_0={0x7, 0x10, 0x5}}, 0x1, &(0x7f0000000340)={{0x2, 0x80}, {0x0, 0x4}, 0x5, 0x3ff, 0x7, 0x8d3f, 0x5, 0x8, 0x5, 0xfff, 0x2, 0x94, 0xa, 0x400, 0x7fffffffffffffff, 0xfffffffffffffffc})

4.222916739s ago: executing program 1 (id=2469):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0)
r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
write$auto(r0, &(0x7f0000000380)=' U\x15\xa2t\xe0\x1b\xb0\xff\xe8\x91@\x88\n\x92\xf1rL\x9c\rg-\xcc]\x0e\x06\x03\a0k\x85&YS\xb0;\xfd\xd6\x0eH\xb3 \xc2`\xbc\xec\f\xd0\x97\x19\xa6Y\xb0\x15Z/\xe2\xc3\x8e\xc1\xa7v\xe3\xc3\xb0d\x86\x8f\x86\x14S\xdc\xe2G\xb5\x8dN%\x84\xa3\xb4\xb8!\xf9\x01=4T\xb2\xff\xb6\x9dx\x1e\x8dU\xbe*\xa5\xe4q\xd23\xdf\xcce\x17\xc1WX\x0e\xb5\x16\xe6>R\x1b\xf6', 0x6)
r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x1000, 0x1c9}, 0x2, 0x7)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0)
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
madvise$auto(0x110d230000, 0x1, 0x9)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0)
sendfile$auto(r2, r3, 0x0, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0)
sendfile$auto(r4, r4, 0x0, 0x10000800000003)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0})
r6 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff)
fsetxattr$auto(r6, &(0x7f0000000280)='/dek\x85bus/usb/003/001\x00', &(0x7f00000001c0)="d9f6fd8f976809ec5affb5a0a3322d0a082b2b685a8e624d23fefa5ebd13269c7ed4f2a00da29f085217b737337fa6cb2a29ec02ecccc25406c6f6e50cac197d4e3988d74810ca0710cabbdde584064cff537696ffe35f24839c44e41cce1f19fe30c1", 0xfffffffffffffff7, 0x91d)

3.927509208s ago: executing program 2 (id=2470):
mmap$auto(0x0, 0x1009, 0xffb, 0x8000000008011, 0x3, 0x0)
mlockall$auto(0x800000000000005)
mmap$auto(0x0, 0x2020009, 0x3, 0x800002000000eb1, 0xfffffffffffffffa, 0x7fff)
r0 = socketcall$auto(0xffe, 0x0)
mlockall$auto(0x7)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0)
ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto(0x3, 0x4008ae61, r0)
kexec_load$auto(0x5, 0x2, 0x0, 0x4)
sysfs$auto(0x2, 0x23, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r2 = clone$auto(0xc9, 0x8, 0x0, 0x0, 0x4)
setpriority$auto_PRIO_PGRP(0x1, r2, 0x1)
mkdir$auto(0x0, 0x8001)
mount$auto(0x0, 0x0, 0x0, 0x1010000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1458338c81790c5bccfac40000008d0b9316220eca3f412cf0aa133ea21081bc623bed6c96c6f25f578da1de2ac2cdbb735416a1788925328da960a99ba86c5f85fd404dfb0000155469679cc3f66682725b2c85a02114ad89a425a51678a2aac239b04ccecd23b1162dcfff1024b4575dd52b98cd3060bb", @ANYRES16=r4, @ANYBLOB="010328bd7000ffdbdf252a000000"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0x80000086, 0x8, 0x0, 0x0, 0x4)

3.185470527s ago: executing program 1 (id=2471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r1, 0x1b, 0x70bd22, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x1c, 0x3, 0x0, 0x1, [@nested={0x18, 0x1, 0x0, 0x1, [@nested={0xc, 0x106, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @fd}]}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x8c810)
setresgid$auto(0x9, 0xffffffffffffffff, 0xffffffffffffffff)
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5)
r2 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040))
mmap$auto(0x1585, 0x5f, 0x1000010000000ff, 0xfa33, 0xffffffffffffffff, 0x2007)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r2)
lstat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x6, 0x2, 0x3, <r5=>0xee01, 0x0, 0x0, 0x8, 0xdf4, 0x3, 0x8f, 0x8, 0x1000, 0xc0a7, 0x2, 0x6, 0x1ff})
r6 = getsid$auto(0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x6, 0x8, 0x0, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r8, @ANYRES8=r7], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r8, 0x5, &(0x7f0000000600)="9f60ccae070cb254653838ed60d2199391a336a9ac490b535f22d588c3a50a5acb949b09172c410f1e5914416b8568b636893a4b0847fda219e39d725afc64bbc5d354f69618e63e7c983c62d843ee514de51583e65591e17d451079caf07fe83920e81b3dfb2ffd58e097c882a2f9add0d1a7080000000000000045da03cee39d12a13b46eb9788263ca57d498dca29e03593e06a20a7cd6c1791469a282a63b48ceab5005f352e4c68e826d2b8332040f3c5d493333a5ad4e78dbb3f9e9f7268cd8255382745622985207472ce53a5c4fc86295b2a19aeb16f023b5a3f15961905ef1ef8faebd7464b24a04ec1e94971944e00"/258, 0x200)
syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/user\x00')
stat$auto(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x1a, 0x9, 0x0, <r9=>0xee01, 0xee01, 0x0, 0x7521, 0x6, 0xe, 0x9, 0x2, 0x5, 0x80000001, 0x10000, 0x7, 0x2})
sendmsg$auto_TIPC_NL_NET_GET(r2, &(0x7f0000003700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000001980)={0x1d28, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x329, 0x3, 0x0, 0x1, [@generic="c17b67e2a3a2ae31847d84e0cde13bffbaf99f5785df8396341199e79b59d1f38b7b480b69d6bf6dc8f32a1ebdcaaf8185adaf720003f8ec", @generic="e3ba5f8d61e55e0b82171a5673f9a6f279e40b4e30acaca05cffcb906034cf0e3d1d759d3f94b75f1df605218c37b3cb0b4de598bcdfd1ce25f2573a7f7296a2c5d7e671a7a38dad302eb6f84c", @nested={0x29d, 0x11a, 0x0, 0x1, [@generic="b5dfd2190a537fa6900a8ce499ceddccb23bc5802216f88a7131e8ceaf9c92dcb9a5dcf7800d621753091ad081dd954e9ed34b1a258001a67e986272d247ba81773d0fb315e8e8bf70bc219d526e10ecc03faaa6e8d2d6a6f6d73c3f55a78158cf7d0e43a81f01bf6f1502bb10f26b76895162f4121b351c6e1929e52c6cd6852fead242f86768306db4341e2fc25d4dec65baee689c14acf63db848ac88a0cc969c858eac5ae426e9a4aea5291015e4fda1a2474bda1b", @nested={0x4, 0x5a}, @generic="6622909ea2f5bf83fd3531fa5bed3952cb267baac99972026dd3798aee11d06dbec1804d6785e040f2bf6d48825af339a085d04ef6e3dc19999a31f48385aa9d0f5bd790453c6663833fca44f2430385267fe75f0bf231be83075517a82e80efe057c4e480d8583c97a4d8cf6b7e6193754cf1d5158df60113325eecacf2fa9c31603f7d5b8e5fa8b9baa4b6a745e6fc8b4e7e5e6e9142287e10c178b61e14a72291f0e1355693af33b173e424d5548bfdb27561a944f51dc74a7dda9a17f8a999897c47b2412aae7209b808da3e326ec6903c979db2", @typed={0x16, 0x8b, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x4, 0x17}, @typed={0xdb, 0xb0, 0x0, 0x0, @binary="c4b4ef74c9388a35530e4ba11aa04144e2500cf3f9a3475d90599b951609dcb9c72e6d8720ee25f76f3645e17d6c4392e753e13cee2b897102d215345341f5b75af8b9a7d7f4ff12313355ef5f30b3f1a5ee2a7824821aa9073df1ddc2634fd02b78c25140a39b1c26f4c3524fb48828e24e5cfa8b3cc6f081c351a77d2eefdf57410221266a5cbd9879a33a2730c92aaa701d34b77c02340951c682c52961725a967a5ff04f0bf40f69fa75dbf75cdd73b47c9f36bd1a1b62121d25434cc68d2d8900ccd4995fc9c96ac31477fb5d991baee6321e2a9a"}, @nested={0x4, 0xee}, @typed={0x8, 0x66, 0x0, 0x0, @uid=r5}, @typed={0x4, 0x62}]}]}, @TIPC_NLA_NET={0x239, 0x7, 0x0, 0x1, [@generic="94492c19b1141d661f46e6c066c6c0222e1217f41fc9b94dbc135806a492993d9b3762b2353bc1ac3aaab47c56bcd3c262bead301bbb441353927945b72a0605f4a5659d99008570376b00019bb9f8e34c7385a2346b7f8e82fe9c3a6b59bde72595f9aceb9342208a35df5661c528a95a49450da882637e69188b893fbd6cb69ae332752be57e96d60ebe3d96e8ce4b42d3991589574c5bf166e35039738d3e06a2927238d915ac2eba66b14dc8dfd4e9671b780fc07d1160b559e597e6a3d73f7fa0b2ff91157d9da4167d2da005bb109c302a0f170af7bfd05807e3dac9a3d4744ffdd671c7e6465257b71ffadb673a1c8fa47064387d", @generic="2e0d86f3cf39c4d08d0801a425a4a312e693137fb7b25c7899a0d202425e8e7c2ba2e43303b51565f8310ef542bfbfe66d3af7d48ff4f5301b590c30c0be6bde096bb5ed87b407acd8a83f3d5ebc5acf6b237a8d55d51f1e27efd9", @typed={0x14, 0xde, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="7dd7fbcd11fd9fde23af839088f6f2d304ba634260fe65b3736a510b04e7cd29f479acd41c35898be577b9b372df2b28b68816b4c0156677537900757cbf53cb342b933f0d727476f7252ac5c4c33c6e051601ab2dea18405b956e9893dcd0626ec48aa447e8c4cd49f8d5cd6821609d0712e155d8188fa5b8751b61706e871172579d15d02a20a3b2aa02cfaa6668e79b32a688f848a6238ad0935fdb0d6a95ad91f3dcf562b09e6fe8a0a057ece6e1588a61f68f8f05144c3a6ab930eb4014df993e681a57", @nested={0x8, 0x8b, 0x0, 0x1, [@nested={0x4, 0x10d}]}]}, @TIPC_NLA_MON={0x1411, 0x9, 0x0, 0x1, [@nested={0xc2, 0x15e, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @pid=r6}, @generic="e8", @generic="c4bb8d0e55eec0b1ec8e57b3c069f5ced01b8820fe87341929515ba68b88f4", @generic="2f81a54d880b67927d4000e72c08444cea6e050727f1951b6d5b47814436d3578f8303e18d64da1f992c04a48130dc54e888c11c9216c564f4e44227ed97b5e724c9c2cbc8af5b26c650f199fb30c38ec9c865ea47669f42d27e504b2454f0ac0f3b632e6d33e6853749d34830ff46edcc2c0cd52768b78c1cfb1b9ed7b73db3464c10b1fc1629c9c51cdae0d4e2c89699328580111d"]}, @generic="4ee28d01f6e4ef6ecd073a5bf647fd69bc2993af39f19ae9dcac5c5a45d7b8a01053462f3a8b742fee8c9e974b6da3e412e6e0a6d73baf1d27d8f3e7e0a4ee6387624e8636f6743b46d321051ff1b8bca95679f97a23c67ecf99d87d19101b1563e30888d0545f1719df6d6d54554ee98eeff426a0c413339c941d859109fd5db76b1b3274c88c12b5a04b9ad374d88ee8fe6a2f19f0f5d1a5130600bef270a0a5c1119efe61f00f2b0b93", @typed={0xe6, 0xba, 0x0, 0x0, @binary="5cb372ba79516c9474919e0be4ed12512b012c3a93701516cae4ee67b2a28ec374ee1d1231254be04dc28a2abc00c68a011b629d8134ebfebf8ee61aceb83d50f34a010fa59eff80d2b28da34a952578b994f7609204cffb35f5396f7631d44d40312547a779c368f3b5f743164f619f4fea288f84c785b135b91b5540af280adf2fc2d6340d60af7220b9411c8f12ecc3d8f46b57c66ebaf905447c57e316ce1e39160dcdc02becc7baec16c6183124efee7a54b88b0f5f56c4d4911d5803df05004461b7292ce25f5554bb87b7fff4ac748659098a286002563cd6dc4e976565d6"}, @generic="bc9337aeacb9f73e6fdeb68392a15eb37e5c666e75dc9abefce92528545ceee9687e541660603f1687aa3b7d210cceac945bbda74f31d8815632291dcfafdd705d4b29243b0a3212c7567b81ed50be78e4f244bb0610e94f4c1dad7863e628cf41e77c7dd0b5dd0612bf13b16acb6450726caebe66d95feedda3db5dffd5d64e4b811a8d5f23410fb06f9e592e2cb10d3c3be5f68a031b8dab241191", @typed={0x4, 0xdf}, @generic="7d8952f59b09b229457244e911e3d6625ff2a453260958d9fbbe8d061d4829b773e9307616a9765223bfd8cb27b012d0e618f6d428d84c928e5334eed0004e74998544673a9b2d8f3ba4ca9c5e4df16acc4e66dd9f2562848edaa01d88b93c448b55783d8e27a6331b04eead505c0fba6ece94bf4a77feadef1d14030595c2b14438510d440a86000329bb46cf9ba69ed8a9f21329c282a5a00d69e7c9696a825148ec33278e6a23220798fc8e88ed0fb1e9859705cda40e4a405b49b90ba6c31e2fe16e468d65973aba85798d02d760d8e1", @generic="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", @nested={0x44, 0x77, 0x0, 0x1, [@generic="19f1c739a07f4aad61074bf1d285bba43eb193334b46b4f7bf432e33a00e54c149a6cdd3cba65d0e6ed3b35e9ebaf9ade7a6e561eea20ac07624db93fddb0799"]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@nested={0x3f, 0x97, 0x0, 0x1, [@generic="944b81b9484b3ba863996e4fd249fca698b8f6bcb8d5778fb175a4873f0b5b4abcaaa381f3da8deb1b294268d066f0348427945d25f320c1cbd164"]}, @nested={0x8, 0x64, 0x0, 0x1, [@nested={0x4, 0x154}]}, @typed={0xc, 0x48, 0x0, 0x0, @u64=0x7fff}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@nested={0xa6, 0x35, 0x0, 0x1, [@generic="978a237a954fdd438be9c43a79a6e4d6e61f865adae3c8a1d9f646e2f5c0e19b8352ace743212feef11a8d5f981fff805eb236829ee33dd0861cbf250f958ec509b8458f866c5f24e8381055d7d709ef506014457fe4821c4cbfa7ce50057d91d3da3567cf3ddb5d0a3e3c3107061a19b585cb8221cfee2f3afc9a6477923e39dab77033922eab6e7068637f2a9ae8549fe4c3a02c992245935a", @nested={0x4, 0x1a}, @nested={0x4, 0x8e}]}, @nested={0x2a, 0x5a, 0x0, 0x1, [@typed={0x14, 0x40, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @generic="a66d2354b63c0df3b161160e394c63ff248c"]}, @nested={0x2c, 0x1e, 0x0, 0x1, [@generic="c97734a0eaef4115873a0bf6a4934fa30247e24180c4d336cbd0309083ac0e8a997eb5eb764d6025"]}]}, @TIPC_NLA_NODE={0x222, 0x6, 0x0, 0x1, [@generic="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", @typed={0x9, 0x10a, 0x0, 0x0, @str=':])-\x00'}, @nested={0x112, 0x83, 0x0, 0x1, [@typed={0x4, 0x59}, @generic="c73829e602c83c5962be189f8e6e1fa9849688c4dbb6486fdacc43d2cd4b0e2e8c4b3ad29a6c948193645a6d2bc7a99280983cacf7e27db5e946a3de5ddd64", @generic="b712c044be29fafb19afeed640a5251b944b9763e8f5d3bff4a72e264c9e7c4ed32a7d5ce61399c12e65efd7ce4b5518356834330352e51a4a470d36bf1c131a58fd849f9d6fa9121992c123e2701f98ce62fbe3c3961d97f3bc71dd5327effd5bac282e9cb9b0eb2729d3d8a8a7e82faa9554805df5fd76dae88c42a9f946a9da5967e45dcfa62a5d85f7c3ad673e363a8dbef9ca2565c3a26431d62a72dc0375fdcbef99ffb26975de327cf23fff62c5de38de991c8b093484062b8e3d10f5ae9a2af76340607b430382"]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@nested={0x14, 0x4a, 0x0, 0x1, [@nested={0x4, 0xb}, @nested={0x4, 0xd8}, @typed={0x8, 0x35, 0x0, 0x0, @uid=r9}]}]}]}, 0x1d28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x986, 0xe, 0x9, 0x1, 0x1, "0b3a8a6f248ea647a4766111"})

2.966643213s ago: executing program 3 (id=2472):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e)
fchown$auto(r0, 0xff, 0x5)
fcntl$auto(r0, 0x4, 0xfffffffffffffff9)
init_module$auto(&(0x7f0000000000)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bebdb28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f205c443811c04595b40d1ecb58d9736d5c219e55d5c790d42b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1ad9034957426449775c1145dbc34aad7864c82c2f", 0x10000, 0x0)
init_module$auto(&(0x7f00000000c0)="ca94a099815ee87aa25026ebb219c9e7ea280f73390ecde5be3559eecef2e198f6194c14ab6ac356721796e02bb67fcc46ed4cee1c0204cccef5320e62f16121032a2048fcbd6243e901a6b8009259efd74cee", 0x9, &(0x7f0000000140)=']/[[{+\x00')
r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
bind$auto(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x67)

2.961891637s ago: executing program 1 (id=2473):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)="5a854caf7917", 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0xa, 0x5, 0x0)
socket(0xa, 0x3, 0xff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r1 = pidfd_open$auto(0x1, 0x0)
open_by_handle_at$auto(r1, 0x0, 0x800)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0)
readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000000200), 0x2}, 0x6)

2.929326027s ago: executing program 0 (id=2430):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
semget$auto(0x7, 0x6, 0x7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
set_mempolicy$auto(0x1, 0x0, 0x21)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0x4, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
poll$auto(&(0x7f0000000340)={r3, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x7c88, 0x7fff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
write$auto(r4, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5)
close_range$auto(0x2, 0x8, 0x0)

2.7971201s ago: executing program 1 (id=2474):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x801, 0x106)
setsockopt$auto(r0, 0x1, 0x2, 0x0, 0x7)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/free_buffer\x00', 0x80c01, 0x0)
pwritev$auto(r2, &(0x7f0000000080)={0x0, 0x10001}, 0xd, 0x1000000000000002, 0x4f)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x180400, 0x0)
read$auto_ftrace_subsystem_filter_fops_trace_events(r3, 0x0, 0x0)

2.773918861s ago: executing program 3 (id=2475):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x8, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000)
write$auto(0x4, 0x0, 0x100082)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x408)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
sendmsg$auto_TCP_METRICS_CMD_DEL(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)

1.81861649s ago: executing program 1 (id=2476):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
semget$auto(0x7, 0x6, 0x7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
set_mempolicy$auto(0x1, 0x0, 0x21)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0x4, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00')
poll$auto(&(0x7f0000000340)={r3, 0x5, 0x3}, 0x4, 0x101)
mlock$auto(0x7c88, 0x7fff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)

0s ago: executing program 3 (id=2478):
r0 = socket(0x1e, 0x5, 0xffffbffe)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0)
read$auto_proc_single_file_operations_base(r1, &(0x7f0000000040)=""/228, 0xe4)
setsockopt$auto(r1, 0x10000000084, 0x2, 0x0, 0x10005)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
bind$auto(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x800000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x7)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0)
ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
socket(0x29, 0x80000, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8001)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, 0x0, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r3)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013d9fb40c90a116eb250100000020bf14561bb95c0f95ffdce2b3323e8cd2a1dcb35098e2d48a749bd6e4970ffe5f4b84c1a1ff030000000000007f6efea12c025d53e885dd690d00c98230cbbd5a3add34afa1c32dea8d241887b3dc0aa6708071ed1a6d000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800)
sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3401f900", @ANYRES16=r4, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x4}, 0x4004)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
prctl$auto(0x10, 0x6, 0x7, 0xffffffffffffff78, 0x8)
r5 = socket(0xa, 0x5, 0x84)
setsockopt$auto(r5, 0x10000000084, 0x22, 0x0, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)

kernel console output (not intermixed with test programs):

_sync+0x265/0x840
[  537.614852][T14887]  snd_pcm_oss_release+0x238/0x300
[  537.614872][T14887]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  537.614893][T14887]  __fput+0x3ff/0xb50
[  537.614918][T14887]  task_work_run+0x150/0x240
[  537.614935][T14887]  ? __pfx_task_work_run+0x10/0x10
[  537.614951][T14887]  ? rcu_is_watching+0x12/0xc0
[  537.614970][T14887]  exit_to_user_mode_loop+0x157/0x670
[  537.614993][T14887]  ? rcu_is_watching+0x12/0xc0
[  537.615011][T14887]  do_syscall_64+0x652/0x840
[  537.615032][T14887]  ? clear_bhb_loop+0x40/0x90
[  537.615050][T14887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.615065][T14887] RIP: 0033:0x7f896139ce59
[  537.615081][T14887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.615096][T14887] RSP: 002b:00007f895f5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  537.615127][T14887] RAX: 0000000000000000 RBX: 00007f8961615fa0 RCX: 00007f896139ce59
[  537.615138][T14887] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  537.615147][T14887] RBP: 00007f8961432d6f R08: 0000000000000000 R09: 0000000000000000
[  537.615157][T14887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  537.615167][T14887] R13: 00007f8961616038 R14: 00007f8961615fa0 R15: 00007ffc9f0263b8
[  537.615188][T14887]  </TASK>
[  539.381594][T14887] syz.0.1696: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  539.479357][T14887] CPU: 0 UID: 0 PID: 14887 Comm: syz.0.1696 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  539.479385][T14887] Tainted: [L]=SOFTLOCKUP
[  539.479391][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  539.479400][T14887] Call Trace:
[  539.479406][T14887]  <TASK>
[  539.479412][T14887]  dump_stack_lvl+0x100/0x190
[  539.479453][T14887]  warn_alloc.cold+0x95/0x1c1
[  539.479471][T14887]  ? __pfx_warn_alloc+0x10/0x10
[  539.479494][T14887]  ? lockdep_hardirqs_on+0x78/0x100
[  539.479519][T14887]  ? __get_vm_area_node+0x2cd/0x330
[  539.479542][T14887]  ? __get_vm_area_node+0x208/0x330
[  539.479564][T14887]  __vmalloc_node_range_noprof+0xccd/0x1630
[  539.479591][T14887]  ? __snd_dma_alloc_pages+0xd2/0x150
[  539.479611][T14887]  ? rcu_is_watching+0x12/0xc0
[  539.479629][T14887]  ? trace_contention_end+0x122/0x170
[  539.479647][T14887]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  539.479667][T14887]  ? do_alloc_pages+0xb7/0x200
[  539.479688][T14887]  ? do_alloc_pages+0xb7/0x200
[  539.479712][T14887]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  539.479735][T14887]  ? __snd_dma_alloc_pages+0xd2/0x150
[  539.479751][T14887]  __vmalloc_node_noprof+0xad/0xf0
[  539.479770][T14887]  ? __snd_dma_alloc_pages+0xd2/0x150
[  539.479786][T14887]  ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10
[  539.479802][T14887]  __snd_dma_alloc_pages+0xd2/0x150
[  539.479820][T14887]  snd_dma_alloc_dir_pages+0x151/0x240
[  539.479839][T14887]  do_alloc_pages+0xf4/0x200
[  539.479864][T14887]  snd_pcm_lib_malloc_pages+0x4bd/0x9b0
[  539.479890][T14887]  snd_pcm_hw_params+0x1673/0x1bf0
[  539.479909][T14887]  ? __pfx_snd_pcm_hw_params+0x10/0x10
[  539.479923][T14887]  ? snd_pcm_hw_param_near.constprop.0+0x578/0x850
[  539.479947][T14887]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  539.479971][T14887]  snd_pcm_kernel_ioctl+0x167/0x2e0
[  539.479986][T14887]  snd_pcm_oss_change_params_locked+0x1973/0x39f0
[  539.480016][T14887]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  539.480039][T14887]  ? __pfx___mutex_lock+0x10/0x10
[  539.480071][T14887]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[  539.480093][T14887]  snd_pcm_oss_sync+0x265/0x840
[  539.480116][T14887]  snd_pcm_oss_release+0x238/0x300
[  539.480136][T14887]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  539.480156][T14887]  __fput+0x3ff/0xb50
[  539.480184][T14887]  task_work_run+0x150/0x240
[  539.480199][T14887]  ? __pfx_task_work_run+0x10/0x10
[  539.480215][T14887]  ? rcu_is_watching+0x12/0xc0
[  539.480235][T14887]  exit_to_user_mode_loop+0x157/0x670
[  539.480259][T14887]  ? rcu_is_watching+0x12/0xc0
[  539.480277][T14887]  do_syscall_64+0x652/0x840
[  539.480296][T14887]  ? clear_bhb_loop+0x40/0x90
[  539.480314][T14887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.480329][T14887] RIP: 0033:0x7f896139ce59
[  539.480343][T14887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  539.480357][T14887] RSP: 002b:00007f895f5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  539.480373][T14887] RAX: 0000000000000000 RBX: 00007f8961615fa0 RCX: 00007f896139ce59
[  539.480383][T14887] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  539.480391][T14887] RBP: 00007f8961432d6f R08: 0000000000000000 R09: 0000000000000000
[  539.480400][T14887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  539.480409][T14887] R13: 00007f8961616038 R14: 00007f8961615fa0 R15: 00007ffc9f0263b8
[  539.480436][T14887]  </TASK>
[  539.880167][T14887] Mem-Info:
[  539.883810][T14887] active_anon:10534 inactive_anon:15561 isolated_anon:0
[  539.883810][T14887]  active_file:12910 inactive_file:43144 isolated_file:0
[  539.883810][T14887]  unevictable:768 dirty:574 writeback:0
[  539.883810][T14887]  slab_reclaimable:12043 slab_unreclaimable:91981
[  539.883810][T14887]  mapped:25617 shmem:16769 pagetables:1694
[  539.883810][T14887]  sec_pagetables:0 bounce:0
[  539.883810][T14887]  kernel_misc_reclaimable:0
[  539.883810][T14887]  free:1300530 free_pcp:11069 free_cma:0
[  539.930972][T14887] Node 0 active_anon:42136kB inactive_anon:62244kB active_file:51640kB inactive_file:172396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102464kB dirty:2296kB writeback:0kB shmem:65540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:12512kB pagetables:6612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  539.967187][T14887] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  540.000311][T14887] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  540.031473][T14887] lowmem_reserve[]: 0 2478 2479 2479 2479
[  540.037221][T14887] Node 0 DMA32 free:1252236kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42136kB inactive_anon:62244kB active_file:51640kB inactive_file:172396kB unevictable:1536kB writepending:2296kB zspages:792kB present:3129332kB managed:2537496kB mlocked:0kB bounce:0kB free_pcp:41376kB local_pcp:41376kB free_cma:0kB
[  540.071818][T14887] lowmem_reserve[]: 0 0 1 1 1
[  540.076530][T14887] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  540.107891][T14887] lowmem_reserve[]: 0 0 0 0 0
[  540.112696][T14887] Node 1 Normal free:3934520kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:180kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2900kB local_pcp:2900kB free_cma:0kB
[  540.146634][T14887] lowmem_reserve[]: 0 0 0 0 0
[  540.151914][T14887] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  540.164687][T14887] Node 0 DMA32: 10261*4kB (UME) 6239*8kB (UME) 3084*16kB (UME) 1258*32kB (UME) 461*64kB (UME) 336*128kB (UME) 187*256kB (UM) 90*512kB (UM) 52*1024kB (UME) 4*2048kB (UE) 206*4096kB (UM) = 1252236kB
[  540.184589][T14887] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  540.196776][T14887] Node 1 Normal: 5*4kB (UM) 4*8kB (M) 13*16kB (UM) 15*32kB (UM) 12*64kB (UM) 5*128kB (UM) 9*256kB (UM) 4*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 957*4096kB (UM) = 3934564kB
[  540.214652][T14887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  540.227325][T14887] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  540.248820][T14887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  540.263691][T14887] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  540.283358][T14887] 72882 total pagecache pages
[  540.293591][T14887] 67 pages in swap cache
[  540.303140][T14887] Free swap  = 111744kB
[  540.311618][T14887] Total swap = 124996kB
[  540.323116][T14887] 2097051 pages RAM
[  540.332254][T14887] 0 pages HighMem/MovableOnly
[  540.346009][T14887] 430784 pages reserved
[  540.362017][T14887] 0 pages cma reserved
[  540.501474][T14927] Zero length message leads to an empty skb
[  540.724207][T14935] process 'syz.3.1707' launched ':,' with NULL argv: empty string added
[  542.751209][T14974] ovs_����?: entered promiscuous mode
[  543.239848][T12904] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  543.862430][T12904] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11
[  543.872781][T12904] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11
[  544.855447][T14982] Process accounting resumed
[  545.231030][T15017] syz.0.1726 uses obsolete (PF_INET,SOCK_PACKET)
[  545.657555][T15026] syz.0.1727 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  545.706642][T15027] futex_wake_op: syz.0.1727 tries to shift op by -2048; fix this program
[  549.183395][   T29] audit: type=1800 audit(1781031748.364:22): pid=15074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1737" name="lu_gp_id" dev="configfs" ino=66152 res=0 errno=0
[  549.506222][T15096] bridge0: port 3(bond0) entered blocking state
[  549.528546][T15096] bridge0: port 3(bond0) entered disabled state
[  549.560793][T15096] bond0: entered allmulticast mode
[  549.575669][T15096] bond_slave_0: entered allmulticast mode
[  549.598991][T15096] bond_slave_1: entered allmulticast mode
[  549.637377][T15096] bond0: entered promiscuous mode
[  549.655262][T15096] bond_slave_0: entered promiscuous mode
[  549.672239][T15096] bond_slave_1: entered promiscuous mode
[  549.692504][T15096] bridge0: port 3(bond0) entered blocking state
[  549.701792][T15096] bridge0: port 3(bond0) entered forwarding state
[  551.807189][T15145] scsi_dev_info_list_add_str: bad dev info string ')���zD���5fk+*X��#�R8��4*�
�Vs�n�dv���qQW�}���~YrȀ-8VGDƘ���L�B�%v�†�v�}�Ypq|��?�O��[��,!��7xWDr���%�[�}�E�$3?�G����9��Ff=��l�r�GH;2L<��=��|�����8�-c��F�ո��"����[v�9�q��4��Mm�vq���k��[����(i���NDС�M��XPS��q��qX4�X`V��!;r�֍���)y]�W��zfI�H0���,�������v�{q8���שU�ܹ䑉m؛�H��T��w�C��z�-��nR%�2]��x0��5o�����Օ|3>�l�S*L���/�Cdgӑ��[C=Cw�e��m)����l#�' '��'�S���.�sHgi-��TY%ܹF��*8��nFT�H����?����i{' ''
[  552.457838][T15159] binder: 15158:15159 ioctl c0306201 200000000000 returned -14
[  556.748514][T15218] FAULT_INJECTION: forcing a failure.
[  556.748514][T15218] name failslab, interval 1, probability 0, space 0, times 0
[  556.806074][T15218] CPU: 0 UID: 0 PID: 15218 Comm: syz.1.1768 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  556.806103][T15218] Tainted: [L]=SOFTLOCKUP
[  556.806110][T15218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  556.806121][T15218] Call Trace:
[  556.806127][T15218]  <TASK>
[  556.806134][T15218]  dump_stack_lvl+0x100/0x190
[  556.806169][T15218]  should_fail_ex.cold+0x5/0xa
[  556.806192][T15218]  ? sk_prot_alloc+0x10b/0x2a0
[  556.806214][T15218]  should_failslab+0xc2/0x120
[  556.806234][T15218]  __kmalloc_noprof+0xe0/0x850
[  556.806261][T15218]  ? security_inode_alloc+0xcf/0x2c0
[  556.806283][T15218]  sk_prot_alloc+0x10b/0x2a0
[  556.806301][T15218]  sk_alloc+0x36/0xe80
[  556.806327][T15218]  __netlink_create+0x5e/0x2c0
[  556.806346][T15218]  __netlink_kernel_create+0xed/0x750
[  556.806366][T15218]  ? __pfx___netlink_kernel_create+0x10/0x10
[  556.806390][T15218]  ? __pfx_genl_pernet_init+0x10/0x10
[  556.806410][T15218]  genl_pernet_init+0xbd/0x160
[  556.806431][T15218]  ? __pfx_genl_pernet_init+0x10/0x10
[  556.806451][T15218]  ? lockdep_init_map_type+0x5c/0x250
[  556.806475][T15218]  ? __pfx_genl_rcv+0x10/0x10
[  556.806493][T15218]  ? __pfx_genl_bind+0x10/0x10
[  556.806510][T15218]  ? __pfx_genl_unbind+0x10/0x10
[  556.806528][T15218]  ? __pfx_genl_release+0x10/0x10
[  556.806548][T15218]  ? mutex_init_lockdep+0xf1/0x120
[  556.806565][T15218]  ops_init+0x1e2/0x5f0
[  556.806583][T15218]  setup_net+0x118/0x3a0
[  556.806599][T15218]  ? __pfx_setup_net+0x10/0x10
[  556.806614][T15218]  ? mutex_init_lockdep+0xf1/0x120
[  556.806632][T15218]  copy_net_ns+0x46f/0x7c0
[  556.806651][T15218]  create_new_namespaces+0x3ea/0xac0
[  556.806674][T15218]  unshare_nsproxy_namespaces+0xf2/0x220
[  556.806694][T15218]  ksys_unshare+0x438/0xab0
[  556.806726][T15218]  ? __pfx_ksys_unshare+0x10/0x10
[  556.806747][T15218]  ? xfd_validate_state+0x129/0x190
[  556.806762][T15218]  ? __x64_sys_kexec_load+0x1c9/0x230
[  556.806791][T15218]  __x64_sys_unshare+0x31/0x40
[  556.806811][T15218]  do_syscall_64+0x115/0x840
[  556.806831][T15218]  ? clear_bhb_loop+0x40/0x90
[  556.806849][T15218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.806864][T15218] RIP: 0033:0x7f5b63d9ce59
[  556.806878][T15218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.806892][T15218] RSP: 002b:00007f5b61ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  556.806907][T15218] RAX: ffffffffffffffda RBX: 00007f5b64015fa0 RCX: 00007f5b63d9ce59
[  556.806917][T15218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  556.806927][T15218] RBP: 00007f5b63e32d6f R08: 0000000000000000 R09: 0000000000000000
[  556.806936][T15218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  556.806945][T15218] R13: 00007f5b64016038 R14: 00007f5b64015fa0 R15: 00007ffdac984a78
[  556.806965][T15218]  </TASK>
[  557.152191][T15222] nbd: must specify at least one socket
[  557.283410][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.292732][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.301840][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.311935][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.321447][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.330578][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.339701][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.348737][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.357854][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  557.367274][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  559.317120][T15244] ima: policy update failed
[  559.345426][   T29] audit: type=1802 audit(1781031758.582:23): pid=15244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1774" res=0 errno=0
[  561.045196][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  561.059259][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  563.102426][T15330] random: crng reseeded on system resumption
[  564.959732][T15355] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  565.029882][T15355] PCI: Can't parse resource_alignment parameter: e�C/������OV�G�Df8��=�ֶ���2|���:ht��3�
[  565.901179][T15363] FAULT_INJECTION: forcing a failure.
[  565.901179][T15363] name failslab, interval 1, probability 0, space 0, times 0
[  566.039801][T15363] CPU: 0 UID: 0 PID: 15363 Comm: syz.0.1796 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  566.039835][T15363] Tainted: [L]=SOFTLOCKUP
[  566.039841][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  566.039852][T15363] Call Trace:
[  566.039858][T15363]  <TASK>
[  566.039865][T15363]  dump_stack_lvl+0x100/0x190
[  566.039906][T15363]  should_fail_ex.cold+0x5/0xa
[  566.039930][T15363]  should_failslab+0xc2/0x120
[  566.039951][T15363]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  566.039976][T15363]  ? ptlock_alloc+0x1f/0x70
[  566.040003][T15363]  ? do_raw_spin_lock+0x128/0x260
[  566.040022][T15363]  ptlock_alloc+0x1f/0x70
[  566.040043][T15363]  pte_alloc_one+0x82/0x3d0
[  566.040063][T15363]  do_fault+0x86c/0x1750
[  566.040081][T15363]  ? __pmd_alloc+0x3fb/0x950
[  566.040106][T15363]  __handle_mm_fault+0x187d/0x2a00
[  566.040135][T15363]  ? mt_find+0x45e/0x8e0
[  566.040161][T15363]  ? __pfx___handle_mm_fault+0x10/0x10
[  566.040183][T15363]  ? __pfx_mt_find+0x10/0x10
[  566.040214][T15363]  ? find_vma+0xbf/0x140
[  566.040230][T15363]  ? __pfx_find_vma+0x10/0x10
[  566.040250][T15363]  handle_mm_fault+0x37b/0xa30
[  566.040277][T15363]  do_user_addr_fault+0x74c/0x12f0
[  566.040312][T15363]  ? trace_page_fault_kernel+0x7a/0x200
[  566.040332][T15363]  exc_page_fault+0x6f/0xd0
[  566.040356][T15363]  asm_exc_page_fault+0x26/0x30
[  566.040374][T15363] RIP: 0010:rep_movs_alternative+0x30/0x90
[  566.040391][T15363] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  566.040406][T15363] RSP: 0018:ffffc90004d57a98 EFLAGS: 00050212
[  566.040419][T15363] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000024
[  566.040428][T15363] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004d57b28
[  566.040437][T15363] RBP: 0000000000000024 R08: 0000000000000001 R09: fffff520009aaf69
[  566.040447][T15363] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[  566.040456][T15363] R13: ffffc90004d57b28 R14: 0000000000000000 R15: 000000000000b6bd
[  566.040477][T15363]  _copy_from_user+0x98/0xd0
[  566.040501][T15363]  sg_write+0x2af/0xdb0
[  566.040620][T15363]  ? __pfx_sg_write+0x10/0x10
[  566.040662][T15363]  ? apparmor_file_permission+0x13f/0x1c0
[  566.040714][T15363]  ? bpf_lsm_file_permission+0x9/0x10
[  566.040731][T15363]  ? security_file_permission+0x76/0x210
[  566.040755][T15363]  ? rw_verify_area+0xce/0x6d0
[  566.040774][T15363]  vfs_write+0x2aa/0x1070
[  566.040794][T15363]  ? __pfx_sg_write+0x10/0x10
[  566.040816][T15363]  ? __pfx_vfs_write+0x10/0x10
[  566.040831][T15363]  ? find_held_lock+0x2b/0x80
[  566.040850][T15363]  ? __fget_files+0x215/0x3d0
[  566.040866][T15363]  ? __fget_files+0x215/0x3d0
[  566.040887][T15363]  ? __fget_files+0x21f/0x3d0
[  566.040908][T15363]  ksys_write+0x12a/0x250
[  566.040928][T15363]  ? __pfx_ksys_write+0x10/0x10
[  566.040947][T15363]  ? rcu_is_watching+0x12/0xc0
[  566.040967][T15363]  do_syscall_64+0x115/0x840
[  566.040987][T15363]  ? clear_bhb_loop+0x40/0x90
[  566.041005][T15363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.041020][T15363] RIP: 0033:0x7f896139ce59
[  566.041034][T15363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.041049][T15363] RSP: 002b:00007f895f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  566.041064][T15363] RAX: ffffffffffffffda RBX: 00007f8961615fa0 RCX: 00007f896139ce59
[  566.041074][T15363] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003
[  566.041084][T15363] RBP: 00007f8961432d6f R08: 0000000000000000 R09: 0000000000000000
[  566.041094][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.041103][T15363] R13: 00007f8961616038 R14: 00007f8961615fa0 R15: 00007ffc9f0263b8
[  566.041125][T15363]  </TASK>
[  566.588635][T15378] FAULT_INJECTION: forcing a failure.
[  566.588635][T15378] name failslab, interval 1, probability 0, space 0, times 0
[  566.601584][T15378] CPU: 0 UID: 0 PID: 15378 Comm: syz.3.1801 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  566.601611][T15378] Tainted: [L]=SOFTLOCKUP
[  566.601617][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  566.601631][T15378] Call Trace:
[  566.601643][T15378]  <TASK>
[  566.601652][T15378]  dump_stack_lvl+0x100/0x190
[  566.601694][T15378]  should_fail_ex.cold+0x5/0xa
[  566.601716][T15378]  should_failslab+0xc2/0x120
[  566.601735][T15378]  __kmalloc_cache_noprof+0x7a/0x6f0
[  566.601756][T15378]  ? kvm_dev_ioctl+0xa8d/0x1a50
[  566.601813][T15378]  kvm_dev_ioctl+0xa8d/0x1a50
[  566.601837][T15378]  ? find_held_lock+0x2b/0x80
[  566.601857][T15378]  ? __fget_files+0x215/0x3d0
[  566.601873][T15378]  ? hook_file_ioctl_common+0x149/0x410
[  566.601893][T15378]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  566.601914][T15378]  ? __fget_files+0x21f/0x3d0
[  566.601933][T15378]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  566.601953][T15378]  __x64_sys_ioctl+0x18e/0x210
[  566.601971][T15378]  do_syscall_64+0x115/0x840
[  566.601992][T15378]  ? clear_bhb_loop+0x40/0x90
[  566.602010][T15378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.602027][T15378] RIP: 0033:0x7f415839ce59
[  566.602042][T15378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.602056][T15378] RSP: 002b:00007f415929f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  566.602071][T15378] RAX: ffffffffffffffda RBX: 00007f4158615fa0 RCX: 00007f415839ce59
[  566.602081][T15378] RDX: 000000000000001f RSI: 000000000000ae01 RDI: 000000000000000b
[  566.602090][T15378] RBP: 00007f4158432d6f R08: 0000000000000000 R09: 0000000000000000
[  566.602099][T15378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.602108][T15378] R13: 00007f4158616038 R14: 00007f4158615fa0 R15: 00007ffe4036a858
[  566.602128][T15378]  </TASK>
[  567.198696][T15387] hub 1-0:1.0: USB hub found
[  567.231558][T15387] hub 1-0:1.0: 1 port detected
[  567.652891][T15380] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  567.659520][T15380] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  567.682479][T15380] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  567.713310][T13542] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 4 with max blocks 5 with error 117
[  567.811414][T13542] EXT4-fs (sda1): This should not happen!! Data will be lost
[  567.811414][T13542] 
[  567.825724][T15380] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  567.968758][T15400] __nla_validate_parse: 57 callbacks suppressed
[  567.968776][T15400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1806'.
[  569.291209][T15437] capability: warning: `syz.0.1815' uses 32-bit capabilities (legacy support in use)
[  569.548382][T15437] FAULT_INJECTION: forcing a failure.
[  569.548382][T15437] name fail_futex, interval 1, probability 0, space 0, times 0
[  569.562459][T12904] Bluetooth: hci0: command 0x0406 tx timeout
[  569.622619][T15437] CPU: 0 UID: 0 PID: 15437 Comm: syz.0.1815 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  569.622643][T15437] Tainted: [L]=SOFTLOCKUP
[  569.622648][T15437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  569.622657][T15437] Call Trace:
[  569.622662][T15437]  <TASK>
[  569.622668][T15437]  dump_stack_lvl+0x100/0x190
[  569.622696][T15437]  should_fail_ex.cold+0x5/0xa
[  569.622715][T15437]  get_futex_key+0x295/0x1510
[  569.622739][T15437]  ? __pfx_get_futex_key+0x10/0x10
[  569.622760][T15437]  ? lock_acquire+0x1b1/0x370
[  569.622787][T15437]  futex_wake+0xea/0x530
[  569.622805][T15437]  ? __pfx_futex_wake+0x10/0x10
[  569.622828][T15437]  ? exit_mm_release+0x19/0x30
[  569.622853][T15437]  do_futex+0x32b/0x350
[  569.622868][T15437]  ? __pfx_do_futex+0x10/0x10
[  569.622880][T15437]  ? __might_fault+0xc5/0x140
[  569.622907][T15437]  mm_release+0x24a/0x2f0
[  569.622924][T15437]  do_exit+0x707/0x2af0
[  569.622946][T15437]  ? __pfx_do_exit+0x10/0x10
[  569.622965][T15437]  ? do_raw_spin_lock+0x128/0x260
[  569.622979][T15437]  ? find_held_lock+0x2b/0x80
[  569.622994][T15437]  ? get_signal+0x7e5/0x2210
[  569.623013][T15437]  do_group_exit+0xd5/0x2a0
[  569.623034][T15437]  get_signal+0x20ff/0x2210
[  569.623057][T15437]  ? __pfx_get_signal+0x10/0x10
[  569.623075][T15437]  ? do_futex+0x192/0x350
[  569.623090][T15437]  arch_do_signal_or_restart+0x91/0x7a0
[  569.623111][T15437]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  569.623137][T15437]  ? rcu_is_watching+0x12/0xc0
[  569.623156][T15437]  exit_to_user_mode_loop+0x98/0x670
[  569.623177][T15437]  ? rcu_is_watching+0x12/0xc0
[  569.623194][T15437]  do_syscall_64+0x652/0x840
[  569.623213][T15437]  ? clear_bhb_loop+0x40/0x90
[  569.623229][T15437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.623244][T15437] RIP: 0033:0x7f896139ce59
[  569.623256][T15437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  569.623270][T15437] RSP: 002b:00007f895f5720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  569.623284][T15437] RAX: fffffffffffffe00 RBX: 00007f8961616368 RCX: 00007f896139ce59
[  569.623293][T15437] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8961616368
[  569.623301][T15437] RBP: 00007f8961616360 R08: 0000000000000000 R09: 0000000000000000
[  569.623309][T15437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  569.623317][T15437] R13: 00007f89616163f8 R14: 00007ffc9f0262d0 R15: 00007ffc9f0263b8
[  569.623336][T15437]  </TASK>
[  569.943253][T12904] Bluetooth: hci2: command 0x0c1a tx timeout
[  569.949748][T12904] Bluetooth: hci1: command 0x0406 tx timeout
[  569.956301][T12904] Bluetooth: hci3: command 0x0406 tx timeout
[  570.041479][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'.
[  570.917411][T15470] type: 768 invalid
[  572.106042][T15497] program syz.2.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  572.729811][T15486] kexec: Could not allocate control_code_buffer
[  574.030404][T15528] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  574.060296][T15528] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  574.119415][T15528] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  574.160199][T15528] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  574.241068][T15546] mmap: syz.0.1840 (15546) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  574.586617][T15561] nbd: must specify at least one socket
[  574.720716][T15554] ceph: Failed to parse sending metrics switch value 'P^'
[  575.219493][   T29] audit: type=1800 audit(1781031774.542:24): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1843" name="dbroot" dev="configfs" ino=68997 res=0 errno=0
[  575.368850][T15553] Process accounting paused
[  575.440239][T13354] Bluetooth: hci0: command 0x0406 tx timeout
[  576.057016][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'.
[  576.076890][T13354] Bluetooth: hci1: command 0x0406 tx timeout
[  576.155680][T12904] Bluetooth: hci2: command 0x0c1a tx timeout
[  576.162552][T13354] Bluetooth: hci3: command 0x0406 tx timeout
[  576.456572][T15577] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  576.498258][T15577] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  576.537543][T15577] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  576.596122][T15577] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  577.825953][T13354] Bluetooth: hci0: command 0x0406 tx timeout
[  578.541799][T13354] Bluetooth: hci2: command 0x0c1a tx timeout
[  578.547911][T12904] Bluetooth: hci1: command 0x0406 tx timeout
[  578.621329][T13354] Bluetooth: hci3: command 0x0406 tx timeout
[  579.067029][T15630] kexec: Could not allocate control_code_buffer
[  581.032811][T15676] random: crng reseeded on system resumption
[  581.250481][T15692] FAULT_INJECTION: forcing a failure.
[  581.250481][T15692] name failslab, interval 1, probability 0, space 0, times 0
[  581.403733][T15692] CPU: 0 UID: 0 PID: 15692 Comm: syz.1.1864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  581.403761][T15692] Tainted: [L]=SOFTLOCKUP
[  581.403766][T15692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  581.403775][T15692] Call Trace:
[  581.403781][T15692]  <TASK>
[  581.403787][T15692]  dump_stack_lvl+0x100/0x190
[  581.403818][T15692]  should_fail_ex.cold+0x5/0xa
[  581.403838][T15692]  should_failslab+0xc2/0x120
[  581.403856][T15692]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  581.403879][T15692]  ? alloc_inode+0x68/0x250
[  581.403903][T15692]  ? simple_start_creating+0xb0/0x110
[  581.403921][T15692]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  581.404064][T15692]  alloc_inode+0x68/0x250
[  581.404090][T15692]  new_inode+0x22/0x1c0
[  581.404116][T15692]  __debugfs_create_file+0x105/0x4f0
[  581.404136][T15692]  debugfs_create_file_full+0x41/0x60
[  581.404154][T15692]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  581.404170][T15692]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  581.404201][T15692]  ? lockdep_init_map_type+0x5c/0x250
[  581.404228][T15692]  preinit_net.part.0+0x43b/0x920
[  581.404246][T15692]  copy_net_ns+0x339/0x7c0
[  581.404266][T15692]  create_new_namespaces+0x3ea/0xac0
[  581.404290][T15692]  unshare_nsproxy_namespaces+0xf2/0x220
[  581.404313][T15692]  ksys_unshare+0x438/0xab0
[  581.404336][T15692]  ? __pfx_ksys_unshare+0x10/0x10
[  581.404354][T15692]  ? xfd_validate_state+0x129/0x190
[  581.404368][T15692]  ? ksys_write+0x1ac/0x250
[  581.404391][T15692]  __x64_sys_unshare+0x31/0x40
[  581.404411][T15692]  do_syscall_64+0x115/0x840
[  581.404432][T15692]  ? clear_bhb_loop+0x40/0x90
[  581.404450][T15692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.404465][T15692] RIP: 0033:0x7f5b63d9ce59
[  581.404487][T15692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.404502][T15692] RSP: 002b:00007f5b61fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  581.404517][T15692] RAX: ffffffffffffffda RBX: 00007f5b64016090 RCX: 00007f5b63d9ce59
[  581.404527][T15692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  581.404537][T15692] RBP: 00007f5b63e32d6f R08: 0000000000000000 R09: 0000000000000000
[  581.404546][T15692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  581.404555][T15692] R13: 00007f5b64016128 R14: 00007f5b64016090 R15: 00007ffdac984a78
[  581.404575][T15692]  </TASK>
[  581.404614][T15692] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888059c7a9b8'
[  583.469314][T13528] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 929 with max blocks 1 with error 117
[  583.506859][T15733] syz.3.1872 (15733): attempted to duplicate a private mapping with mremap.  This is not supported.
[  583.562892][T13528] EXT4-fs (sda1): This should not happen!! Data will be lost
[  583.562892][T13528] 
[  584.962239][   T29] audit: type=1804 audit(1781031784.338:25): pid=15748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1875" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3820 res=1 errno=0
[  585.126025][   T29] audit: type=1804 audit(1781031784.398:26): pid=15748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1875" name="/newroot/sys/kernel/debug/tracing/README" dev="tracefs" ino=3820 res=1 errno=0
[  585.576412][T15759] can0: slcan on ttyS2.
[  585.829279][T15758] can0 (unregistered): slcan off ttyS2.
[  587.283408][T15816] ubi0: attaching mtd6
[  587.319991][T15816] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65)
[  589.203389][T15853] openvswitch: netlink: Tunnel attr 242 out of range max 16
[  589.385668][T15852] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  590.103090][   T29] audit: type=1804 audit(1781031789.507:27): pid=15864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1893" name="/newroot/450/file0" dev="tmpfs" ino=2379 res=1 errno=0
[  591.368205][T15897] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1900'.
[  591.541544][T15883] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input25
[  592.240072][T15913] nbd: must specify at least one socket
[  593.459717][T15920] nbd: must specify at least one socket
[  595.294277][T15969] nbd: must specify at least one socket
[  596.966384][T15990] openvswitch: netlink: Flow key attribute not present in set flow.
[  600.092175][T16047] binder: 16043:16047 unknown command 808858671
[  600.135574][T16047] binder: 16043:16047 ioctl c0306201 0 returned -22
[  600.191191][T16047] nbd: must specify at least one socket
[  601.554966][T16087] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1936'.
[  602.766699][T16097] zswap: compressor Z(u not available
[  603.261495][T16101] FAULT_INJECTION: forcing a failure.
[  603.261495][T16101] name failslab, interval 1, probability 0, space 0, times 0
[  603.330693][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.1.1939 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  603.330722][T16101] Tainted: [L]=SOFTLOCKUP
[  603.330727][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  603.330738][T16101] Call Trace:
[  603.330743][T16101]  <TASK>
[  603.330749][T16101]  dump_stack_lvl+0x100/0x190
[  603.330781][T16101]  should_fail_ex.cold+0x5/0xa
[  603.330801][T16101]  should_failslab+0xc2/0x120
[  603.330830][T16101]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  603.330855][T16101]  ? shmem_alloc_inode+0x25/0x50
[  603.330875][T16101]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  603.330896][T16101]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  603.330915][T16101]  shmem_alloc_inode+0x25/0x50
[  603.330932][T16101]  alloc_inode+0x68/0x250
[  603.330954][T16101]  new_inode+0x22/0x1c0
[  603.330977][T16101]  shmem_get_inode+0x1e3/0xfb0
[  603.330998][T16101]  ? __pfx_shmem_get_inode+0x10/0x10
[  603.331023][T16101]  __shmem_file_setup+0x382/0x460
[  603.331043][T16101]  ? __pfx___shmem_file_setup+0x10/0x10
[  603.331065][T16101]  ? vm_area_alloc+0x1f/0x160
[  603.331088][T16101]  shmem_zero_setup+0x96/0x1b0
[  603.331104][T16101]  __mmap_region+0x2509/0x2dd0
[  603.331129][T16101]  ? __pfx___mmap_region+0x10/0x10
[  603.331150][T16101]  ? tomoyo_path_perm+0x29c/0x460
[  603.331171][T16101]  ? rcu_is_watching+0x12/0xc0
[  603.331188][T16101]  ? trace_pelt_se_tp+0x13b/0x190
[  603.331216][T16101]  ? do_raw_spin_lock+0x128/0x260
[  603.331236][T16101]  ? __lock_acquire+0x4a5/0x2630
[  603.331260][T16101]  ? do_raw_spin_unlock+0x145/0x1e0
[  603.331284][T16101]  ? find_held_lock+0x2b/0x80
[  603.331302][T16101]  ? rcu_is_watching+0x12/0xc0
[  603.331326][T16101]  ? mark_held_locks+0x40/0x70
[  603.331348][T16101]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  603.331391][T16101]  ? rcu_is_watching+0x12/0xc0
[  603.331411][T16101]  mmap_region+0x35d/0x620
[  603.331425][T16101]  ? rcu_is_watching+0x12/0xc0
[  603.331441][T16101]  ? __pfx_mmap_region+0x10/0x10
[  603.331457][T16101]  ? cap_mmap_addr+0x4b/0x120
[  603.331470][T16101]  ? bpf_lsm_mmap_addr+0x9/0x30
[  603.331484][T16101]  ? security_mmap_addr+0x71/0x1e0
[  603.331503][T16101]  ? __get_unmapped_area+0x255/0x3e0
[  603.331524][T16101]  do_mmap+0xc63/0x12f0
[  603.331545][T16101]  ? __pfx_do_mmap+0x10/0x10
[  603.331562][T16101]  ? __pfx_down_write_killable+0x10/0x10
[  603.331590][T16101]  vm_mmap_pgoff+0x29e/0x470
[  603.331612][T16101]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  603.331631][T16101]  ? do_futex+0x192/0x350
[  603.331648][T16101]  ? __pfx_do_futex+0x10/0x10
[  603.331667][T16101]  ksys_mmap_pgoff+0xe4/0x610
[  603.331685][T16101]  ? __x64_sys_futex+0x358/0x4d0
[  603.331701][T16101]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  603.331718][T16101]  ? xfd_validate_state+0x129/0x190
[  603.331737][T16101]  __x64_sys_mmap+0x125/0x190
[  603.331754][T16101]  do_syscall_64+0x115/0x840
[  603.331774][T16101]  ? clear_bhb_loop+0x40/0x90
[  603.331793][T16101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.331808][T16101] RIP: 0033:0x7f5b63d9ce59
[  603.331829][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.331845][T16101] RSP: 002b:00007f5b61fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  603.331861][T16101] RAX: ffffffffffffffda RBX: 00007f5b64016090 RCX: 00007f5b63d9ce59
[  603.331871][T16101] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[  603.331881][T16101] RBP: 00007f5b63e32d6f R08: fffffffffffffffa R09: 0000000000008000
[  603.331891][T16101] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  603.331900][T16101] R13: 00007f5b64016128 R14: 00007f5b64016090 R15: 00007ffdac984a78
[  603.331921][T16101]  </TASK>
[  604.412905][T16144] binder: 16139:16144 unknown command 859321391
[  604.509786][T16144] binder: 16139:16144 ioctl c0306201 0 returned -22
[  604.571395][T16147] nbd: must specify at least one socket
[  605.506895][T16167] nbd: must specify at least one socket
[  605.587245][T16173] capability: warning: `syz.0.1957' uses deprecated v2 capabilities in a way that may be insecure
[  606.906747][T16163] Process accounting resumed
[  607.644821][T16208] nbd: must specify at least one socket
[  608.126125][T16192] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1960'.
[  608.622424][T16230] FAULT_INJECTION: forcing a failure.
[  608.622424][T16230] name failslab, interval 1, probability 0, space 0, times 0
[  608.762278][T16230] CPU: 0 UID: 0 PID: 16230 Comm: syz.2.1968 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.762306][T16230] Tainted: [L]=SOFTLOCKUP
[  608.762311][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  608.762321][T16230] Call Trace:
[  608.762327][T16230]  <TASK>
[  608.762333][T16230]  dump_stack_lvl+0x100/0x190
[  608.762364][T16230]  should_fail_ex.cold+0x5/0xa
[  608.762385][T16230]  should_failslab+0xc2/0x120
[  608.762405][T16230]  __kmalloc_cache_noprof+0x7a/0x6f0
[  608.762426][T16230]  ? kobject_uevent_env+0x263/0x18b0
[  608.762443][T16230]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  608.762469][T16230]  kobject_uevent_env+0x263/0x18b0
[  608.762489][T16230]  ? bus_to_subsys+0x114/0x150
[  608.762511][T16230]  device_add+0x116e/0x1950
[  608.762529][T16230]  ? __pfx_device_add+0x10/0x10
[  608.762544][T16230]  ? lockdep_init_map_type+0x5c/0x250
[  608.762568][T16230]  ? __init_waitqueue_head+0xca/0x150
[  608.762590][T16230]  rfkill_register+0x1ad/0xb30
[  608.762703][T16230]  nfc_register_device+0x11f/0x3e0
[  608.762777][T16230]  nci_register_device+0x7f1/0xb80
[  608.762822][T16230]  ? __pfx_nci_register_device+0x10/0x10
[  608.762842][T16230]  ? lockdep_init_map_type+0x5c/0x250
[  608.762870][T16230]  virtual_ncidev_open+0x141/0x220
[  608.762922][T16230]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  608.762938][T16230]  misc_open+0x26d/0x450
[  608.762989][T16230]  ? __pfx_misc_open+0x10/0x10
[  608.763005][T16230]  chrdev_open+0x234/0x6a0
[  608.763025][T16230]  ? __pfx_apparmor_file_open+0x10/0x10
[  608.763043][T16230]  ? __pfx_chrdev_open+0x10/0x10
[  608.763062][T16230]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  608.763087][T16230]  do_dentry_open+0x6ab/0x14d0
[  608.763105][T16230]  ? __pfx_chrdev_open+0x10/0x10
[  608.763127][T16230]  vfs_open+0x82/0x3f0
[  608.763151][T16230]  path_openat+0x208c/0x31a0
[  608.763176][T16230]  ? __pfx_path_openat+0x10/0x10
[  608.763201][T16230]  do_file_open+0x20e/0x430
[  608.763221][T16230]  ? __pfx_do_file_open+0x10/0x10
[  608.763253][T16230]  ? alloc_fd+0x476/0x790
[  608.763272][T16230]  ? do_getname+0x191/0x390
[  608.763294][T16230]  do_sys_openat2+0x10d/0x1e0
[  608.763316][T16230]  ? __pfx_do_sys_openat2+0x10/0x10
[  608.763340][T16230]  ? __fget_files+0x21f/0x3d0
[  608.763360][T16230]  __x64_sys_openat+0x12d/0x210
[  608.763382][T16230]  ? __pfx___x64_sys_openat+0x10/0x10
[  608.763408][T16230]  ? rcu_is_watching+0x12/0xc0
[  608.763427][T16230]  do_syscall_64+0x115/0x840
[  608.763447][T16230]  ? clear_bhb_loop+0x40/0x90
[  608.763465][T16230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.763480][T16230] RIP: 0033:0x7f0c8079ce59
[  608.763495][T16230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.763510][T16230] RSP: 002b:00007f0c8166a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  608.763526][T16230] RAX: ffffffffffffffda RBX: 00007f0c80a16180 RCX: 00007f0c8079ce59
[  608.763536][T16230] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  608.763545][T16230] RBP: 00007f0c80832d6f R08: 0000000000000000 R09: 0000000000000000
[  608.763554][T16230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  608.763563][T16230] R13: 00007f0c80a16218 R14: 00007f0c80a16180 R15: 00007ffe62f49568
[  608.763584][T16230]  </TASK>
[  609.570016][T16246] vivid-007: =================  START STATUS  =================
[  609.587355][T16246] vivid-007: Generate PTS: true
[  609.599762][T16246] vivid-007: Generate SCR: true
[  609.604834][T16246] tpg source WxH: 320x240 (Y'CbCr)
[  609.610630][T16246] tpg field: 1
[  609.614472][T16246] tpg crop: (0,0)/320x240
[  609.633714][T16246] tpg compose: (0,0)/320x240
[  609.645229][T16246] tpg colorspace: 8
[  609.652423][T16246] tpg transfer function: 0/0
[  609.663175][T16246] tpg Y'CbCr encoding: 0/0
[  609.675221][T16246] tpg quantization: 0/0
[  609.697505][T16246] tpg RGB range: 0/2
[  609.712254][T16246] vivid-007: ==================  END STATUS  ==================
[  610.883784][T16266] libceph: secret too big 63
[  611.886444][T16281] hub 1-0:1.0: USB hub found
[  611.912026][T16281] hub 1-0:1.0: 1 port detected
[  612.194061][T13354] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  612.528619][T16302] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1982'.
[  613.667907][T16314] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16314]
[  614.132608][T13531] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 929 with max blocks 1 with error 117
[  614.231976][T13531] EXT4-fs (sda1): This should not happen!! Data will be lost
[  614.231976][T13531] 
[  614.483754][T16334] vivid-007: =================  START STATUS  =================
[  614.632661][T16334] vivid-007: Enable Output Cropping: true
[  614.675108][T13542] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 884 with max blocks 45 with error 117
[  614.745039][T16334] vivid-007: Enable Output Composing: true
[  614.752823][T13542] EXT4-fs (sda1): This should not happen!! Data will be lost
[  614.752823][T13542] 
[  614.765813][T16343] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1991'.
[  614.862254][T16334] vivid-007: Enable Output Scaler: true
[  614.923601][T16334] vivid-007: Tx RGB Quantization Range: Automatic
[  614.978629][T16334] vivid-007: Transmit Mode: HDMI
[  615.011441][T16334] vivid-007: Hotplug Present: 0x00000000
[  615.093785][T16334] vivid-007: RxSense Present: 0x00000000
[  615.134577][T16334] vivid-007: EDID Present: 0x00000000
[  615.159925][T16334] vivid-007: ==================  END STATUS  ==================
[  617.245852][T16376] nbd: must specify at least one socket
[  618.107823][T16395] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k��}�Oq�D@��.��Z�Cg^�'
[  620.586659][T16435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2014'.
[  622.141187][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  622.152892][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  622.233509][T13354] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  622.258387][T16474] vivid-008: =================  START STATUS  =================
[  622.383581][T16474] vivid-008: ==================  END STATUS  ==================
[  623.788595][T16513] nbd: must specify at least one socket
[  623.929032][T16516] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2027'.
[  624.008059][T13528] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 914 with max blocks 16 with error 117
[  624.105819][T13528] EXT4-fs (sda1): This should not happen!! Data will be lost
[  624.105819][T13528] 
[  624.281442][T12904] Bluetooth: hci0: command 0x0406 tx timeout
[  625.393920][T13354] block nbd0: Receive control failed (result -32)
[  625.616499][T16537] ovs_����?: entered promiscuous mode
[  626.350498][T13354] Bluetooth: hci0: command 0x0406 tx timeout
[  626.676581][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2038'.
[  628.760186][T13542] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 911 with max blocks 19 with error 117
[  628.830301][T13542] EXT4-fs (sda1): This should not happen!! Data will be lost
[  628.830301][T13542] 
[  628.983003][T13542] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 911 with max blocks 1 with error 117
[  629.068711][T13542] EXT4-fs (sda1): This should not happen!! Data will be lost
[  629.068711][T13542] 
[  629.151080][T16606] FAULT_INJECTION: forcing a failure.
[  629.151080][T16606] name failslab, interval 1, probability 0, space 0, times 0
[  629.238843][T16606] CPU: 0 UID: 0 PID: 16606 Comm: syz.2.2046 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  629.238879][T16606] Tainted: [L]=SOFTLOCKUP
[  629.238884][T16606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  629.238897][T16606] Call Trace:
[  629.238902][T16606]  <TASK>
[  629.238908][T16606]  dump_stack_lvl+0x100/0x190
[  629.238942][T16606]  should_fail_ex.cold+0x5/0xa
[  629.238962][T16606]  should_failslab+0xc2/0x120
[  629.238980][T16606]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  629.239002][T16606]  ? xas_split_alloc+0x11c/0x4a0
[  629.239028][T16606]  xas_split_alloc+0x11c/0x4a0
[  629.239052][T16606]  __folio_split+0x5e5/0x1690
[  629.239079][T16606]  ? find_held_lock+0x2b/0x80
[  629.239097][T16606]  ? __pfx___folio_split+0x10/0x10
[  629.239116][T16606]  ? folio_alloc_swap+0xbd4/0x1eb0
[  629.239139][T16606]  ? folio_alloc_swap+0x4c6/0x1eb0
[  629.239157][T16606]  shmem_writeout+0x79f/0x1a90
[  629.239184][T16606]  ? __pfx_shmem_writeout+0x10/0x10
[  629.239205][T16606]  ? __pfx_try_to_unmap+0x10/0x10
[  629.239226][T16606]  ? find_held_lock+0x2b/0x80
[  629.239244][T16606]  ? inode_to_bdi+0x9e/0x160
[  629.239261][T16606]  ? folio_clear_dirty_for_io+0x178/0x810
[  629.239281][T16606]  shrink_folio_list+0x3bbd/0x60c0
[  629.239308][T16606]  ? __lock_acquire+0x4a5/0x2630
[  629.239330][T16606]  ? __pfx_shrink_folio_list+0x10/0x10
[  629.239352][T16606]  ? __lock_acquire+0x4a5/0x2630
[  629.239376][T16606]  ? lock_acquire+0x1b1/0x370
[  629.239401][T16606]  ? lock_acquire+0x1b1/0x370
[  629.239422][T16606]  ? find_held_lock+0x2b/0x80
[  629.239439][T16606]  ? is_bpf_text_address+0x8a/0x1a0
[  629.239475][T16606]  ? __css_rstat_updated+0x1ce/0x5a0
[  629.239497][T16606]  ? __pfx___css_rstat_updated+0x10/0x10
[  629.239521][T16606]  reclaim_folio_list+0xdc/0x5e0
[  629.239544][T16606]  ? __pfx_reclaim_folio_list+0x10/0x10
[  629.239564][T16606]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[  629.239595][T16606]  ? lru_gen_update_size+0x431/0xe20
[  629.239619][T16606]  ? lru_gen_del_folio+0x382/0x5f0
[  629.239640][T16606]  reclaim_pages+0x428/0x5e0
[  629.239663][T16606]  ? __pfx_reclaim_pages+0x10/0x10
[  629.239683][T16606]  ? madvise_cold_or_pageout_pte_range+0x2177/0x2620
[  629.239704][T16606]  ? folio_isolate_lru+0xd6/0xe90
[  629.239728][T16606]  madvise_cold_or_pageout_pte_range+0x14c9/0x2620
[  629.239756][T16606]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  629.239776][T16606]  ? tomoyo_check_open_permission+0x1a2/0x3c0
[  629.239799][T16606]  ? register_lock_class+0x40/0x560
[  629.239822][T16606]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  629.239843][T16606]  walk_pgd_range+0xc1a/0x1dd0
[  629.239880][T16606]  ? __pfx_walk_pgd_range+0x10/0x10
[  629.239896][T16606]  ? rcu_is_watching+0x12/0xc0
[  629.239916][T16606]  __walk_page_range+0x171/0x850
[  629.239932][T16606]  ? do_raw_spin_lock+0x128/0x260
[  629.239955][T16606]  walk_page_range_vma_unsafe+0x209/0x8f0
[  629.239975][T16606]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  629.239995][T16606]  ? find_held_lock+0x2b/0x80
[  629.240012][T16606]  ? mlock_drain_local+0x254/0x4e0
[  629.240025][T16606]  ? mlock_drain_local+0x254/0x4e0
[  629.240042][T16606]  walk_page_range_vma+0x63/0x90
[  629.240059][T16606]  madvise_pageout+0x259/0x540
[  629.240077][T16606]  ? __pfx_madvise_pageout+0x10/0x10
[  629.240095][T16606]  ? rcu_is_watching+0x12/0xc0
[  629.240119][T16606]  ? mtree_range_walk+0x72b/0xb70
[  629.240140][T16606]  madvise_vma_behavior+0x452/0x2240
[  629.240162][T16606]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  629.240186][T16606]  ? find_vma_prev+0xd8/0x150
[  629.240203][T16606]  ? futex_unqueue+0x133/0x2c0
[  629.240216][T16606]  ? __pfx_find_vma_prev+0x10/0x10
[  629.240239][T16606]  ? __futex_wait+0x256/0x300
[  629.240261][T16606]  madvise_walk_vmas+0x2fe/0xa90
[  629.240283][T16606]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  629.240307][T16606]  madvise_do_behavior+0x1ea/0x510
[  629.240328][T16606]  ? __pfx_madvise_do_behavior+0x10/0x10
[  629.240348][T16606]  ? down_read+0x13b/0x450
[  629.240369][T16606]  do_madvise+0x195/0x240
[  629.240388][T16606]  ? __pfx_do_madvise+0x10/0x10
[  629.240406][T16606]  ? do_futex+0x192/0x350
[  629.240432][T16606]  ? ksys_write+0x1ac/0x250
[  629.240449][T16606]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  629.240473][T16606]  __x64_sys_madvise+0xa9/0x110
[  629.240492][T16606]  ? lockdep_hardirqs_on+0x78/0x100
[  629.240512][T16606]  do_syscall_64+0x115/0x840
[  629.240531][T16606]  ? clear_bhb_loop+0x40/0x90
[  629.240549][T16606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.240564][T16606] RIP: 0033:0x7f0c8079ce59
[  629.240584][T16606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.240603][T16606] RSP: 002b:00007f0c8168b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  629.240619][T16606] RAX: ffffffffffffffda RBX: 00007f0c80a16090 RCX: 00007f0c8079ce59
[  629.240630][T16606] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000
[  629.240639][T16606] RBP: 00007f0c80832d6f R08: 0000000000000000 R09: 0000000000000000
[  629.240648][T16606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  629.240657][T16606] R13: 00007f0c80a16128 R14: 00007f0c80a16090 R15: 00007ffe62f49568
[  629.240677][T16606]  </TASK>
[  629.815106][T16608] [U] ^R
[  631.528336][T16644] FAULT_INJECTION: forcing a failure.
[  631.528336][T16644] name failslab, interval 1, probability 0, space 0, times 0
[  631.662101][T16644] CPU: 0 UID: 0 PID: 16644 Comm: syz.1.2052 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  631.662127][T16644] Tainted: [L]=SOFTLOCKUP
[  631.662133][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  631.662142][T16644] Call Trace:
[  631.662148][T16644]  <TASK>
[  631.662154][T16644]  dump_stack_lvl+0x100/0x190
[  631.662186][T16644]  should_fail_ex.cold+0x5/0xa
[  631.662205][T16644]  should_failslab+0xc2/0x120
[  631.662224][T16644]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  631.662257][T16644]  ? __alloc_skb+0x140/0x710
[  631.662272][T16644]  ? __alloc_skb+0x5b7/0x710
[  631.662288][T16644]  __alloc_skb+0x140/0x710
[  631.662303][T16644]  ? __alloc_skb+0x5b7/0x710
[  631.662316][T16644]  ? __pfx___alloc_skb+0x10/0x10
[  631.662336][T16644]  alloc_skb_with_frags+0xdd/0x760
[  631.662359][T16644]  sock_alloc_send_pskb+0x801/0x980
[  631.662383][T16644]  ? find_held_lock+0x2b/0x80
[  631.662405][T16644]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  631.662427][T16644]  ? ip6_output+0x2eb/0xa60
[  631.662532][T16644]  ? __pfx_ip6_output+0x10/0x10
[  631.662562][T16644]  __ip6_append_data+0x2a6a/0x4bf0
[  631.662592][T16644]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  631.662620][T16644]  ? __pfx___ip6_append_data+0x10/0x10
[  631.662641][T16644]  ? __pfx_ip6_mtu+0x10/0x10
[  631.662687][T16644]  ? ip6_setup_cork+0x5be/0x14c0
[  631.662710][T16644]  ip6_make_skb+0x2a3/0x3b0
[  631.662735][T16644]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  631.662756][T16644]  ? __pfx_ip6_make_skb+0x10/0x10
[  631.662784][T16644]  ? sk_dst_check+0x1e6/0x540
[  631.662809][T16644]  ? udpv6_sendmsg+0x2231/0x2c20
[  631.662851][T16644]  udpv6_sendmsg+0x2231/0x2c20
[  631.662868][T16644]  ? __lock_acquire+0x4a5/0x2630
[  631.662891][T16644]  ? aa_label_sk_perm+0x131/0x5f0
[  631.662917][T16644]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  631.662937][T16644]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  631.662963][T16644]  ? __pfx___might_resched+0x10/0x10
[  631.662989][T16644]  ? __import_iovec+0x1d2/0x640
[  631.663013][T16644]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  631.663030][T16644]  ? inet6_sendmsg+0x105/0x140
[  631.663046][T16644]  inet6_sendmsg+0x105/0x140
[  631.663063][T16644]  ____sys_sendmsg+0x704/0xb70
[  631.663090][T16644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  631.663112][T16644]  ? rcu_is_watching+0x12/0xc0
[  631.663127][T16644]  ? ___sys_sendmsg+0x19d/0x1e0
[  631.663145][T16644]  ? kfree+0x1dd/0x6c0
[  631.663167][T16644]  ___sys_sendmsg+0x190/0x1e0
[  631.663188][T16644]  ? __pfx____sys_sendmsg+0x10/0x10
[  631.663223][T16644]  ? __pfx___might_resched+0x10/0x10
[  631.663251][T16644]  __sys_sendmmsg+0x205/0x430
[  631.663270][T16644]  ? __pfx___sys_sendmmsg+0x10/0x10
[  631.663284][T16644]  ? __local_bh_enable_ip+0x9e/0x120
[  631.663307][T16644]  ? __pfx_do_futex+0x10/0x10
[  631.663333][T16644]  ? xfd_validate_state+0x129/0x190
[  631.663353][T16644]  __x64_sys_sendmmsg+0x9c/0x100
[  631.663368][T16644]  ? lockdep_hardirqs_on+0x78/0x100
[  631.663389][T16644]  do_syscall_64+0x115/0x840
[  631.663409][T16644]  ? clear_bhb_loop+0x40/0x90
[  631.663427][T16644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.663442][T16644] RIP: 0033:0x7f5b63d9ce59
[  631.663457][T16644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.663471][T16644] RSP: 002b:00007f5b61ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  631.663487][T16644] RAX: ffffffffffffffda RBX: 00007f5b64015fa0 RCX: 00007f5b63d9ce59
[  631.663497][T16644] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003
[  631.663506][T16644] RBP: 00007f5b63e32d6f R08: 0000000000000000 R09: 0000000000000000
[  631.663515][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  631.663524][T16644] R13: 00007f5b64016038 R14: 00007f5b64015fa0 R15: 00007ffdac984a78
[  631.663543][T16644]  </TASK>
[  632.449204][T16650] zswap: compressor 000 not available
[  633.521519][T16689] hub 1-0:1.0: USB hub found
[  633.603607][T16689] hub 1-0:1.0: 1 port detected
[  633.924403][T16712] bond0: option slaves: interface -��]���=,D�on?�I|�a �CB does not exist!
[  634.591000][T16716] raw_sendmsg: syz.2.2065 forgot to set AF_INET. Fix it!
[  635.267484][T16738] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2070'.
[  635.665184][   T29] audit: type=1326 audit(1781097372.329:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.1.2073" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b63d9ce59 code=0x0
[  636.337863][T16772] nbd: must specify at least one socket
[  636.515000][T16776] nbd: must specify at least one socket
[  637.175218][T16773] Process accounting paused
[  637.566435][T12904] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  637.566463][T12904] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15
[  637.585638][T12904] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  638.293139][T16808] FAULT_INJECTION: forcing a failure.
[  638.293139][T16808] name failslab, interval 1, probability 0, space 0, times 0
[  638.402576][T16808] CPU: 0 UID: 0 PID: 16808 Comm: syz.1.2087 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  638.402607][T16808] Tainted: [L]=SOFTLOCKUP
[  638.402614][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  638.402625][T16808] Call Trace:
[  638.402633][T16808]  <TASK>
[  638.402641][T16808]  dump_stack_lvl+0x100/0x190
[  638.402677][T16808]  should_fail_ex.cold+0x5/0xa
[  638.402702][T16808]  should_failslab+0xc2/0x120
[  638.402722][T16808]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  638.402745][T16808]  ? alloc_empty_file+0x5b/0x1c0
[  638.402774][T16808]  alloc_empty_file+0x5b/0x1c0
[  638.402796][T16808]  alloc_file_pseudo+0x13a/0x230
[  638.402818][T16808]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  638.402841][T16808]  ? security_inode_init_security_anon+0x7b/0x230
[  638.402864][T16808]  __anon_inode_getfile+0xe8/0x280
[  638.402888][T16808]  new_userfaultfd+0x255/0x400
[  638.402907][T16808]  __x64_sys_userfaultfd+0x4b/0xb0
[  638.402928][T16808]  do_syscall_64+0x115/0x840
[  638.402952][T16808]  ? clear_bhb_loop+0x40/0x90
[  638.402971][T16808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.402986][T16808] RIP: 0033:0x7f5b63d9ce59
[  638.403009][T16808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.403025][T16808] RSP: 002b:00007f5b61ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143
[  638.403042][T16808] RAX: ffffffffffffffda RBX: 00007f5b64015fa0 RCX: 00007f5b63d9ce59
[  638.403053][T16808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  638.403064][T16808] RBP: 00007f5b63e32d6f R08: 0000000000000000 R09: 0000000000000000
[  638.403075][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  638.403085][T16808] R13: 00007f5b64016038 R14: 00007f5b64015fa0 R15: 00007ffdac984a78
[  638.403107][T16808]  </TASK>
[  638.652289][T16802] Process accounting resumed
[  639.247090][T16817] nbd: must specify at least one socket
[  641.866423][T16882] FAULT_INJECTION: forcing a failure.
[  641.866423][T16882] name failslab, interval 1, probability 0, space 0, times 0
[  642.078476][T16882] CPU: 0 UID: 0 PID: 16882 Comm: syz.3.2101 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  642.078505][T16882] Tainted: [L]=SOFTLOCKUP
[  642.078511][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  642.078520][T16882] Call Trace:
[  642.078527][T16882]  <TASK>
[  642.078533][T16882]  dump_stack_lvl+0x100/0x190
[  642.078566][T16882]  should_fail_ex.cold+0x5/0xa
[  642.078588][T16882]  should_failslab+0xc2/0x120
[  642.078607][T16882]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  642.078631][T16882]  ? __d_alloc+0x34/0xa40
[  642.078655][T16882]  __d_alloc+0x34/0xa40
[  642.078676][T16882]  d_alloc_pseudo+0x1c/0xc0
[  642.078690][T16882]  alloc_file_pseudo+0xcf/0x230
[  642.078713][T16882]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  642.078734][T16882]  ? alloc_fd+0x476/0x790
[  642.078754][T16882]  sock_alloc_file+0x50/0x210
[  642.078772][T16882]  __sys_socket+0x1c0/0x260
[  642.078792][T16882]  ? __pfx___sys_socket+0x10/0x10
[  642.078810][T16882]  ? ksys_write+0x1ac/0x250
[  642.078831][T16882]  __x64_sys_socket+0x72/0xb0
[  642.078850][T16882]  ? lockdep_hardirqs_on+0x78/0x100
[  642.078871][T16882]  do_syscall_64+0x115/0x840
[  642.078891][T16882]  ? clear_bhb_loop+0x40/0x90
[  642.078909][T16882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.078925][T16882] RIP: 0033:0x7f415839ce59
[  642.078947][T16882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.078962][T16882] RSP: 002b:00007f415925c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  642.078978][T16882] RAX: ffffffffffffffda RBX: 00007f4158616180 RCX: 00007f415839ce59
[  642.078988][T16882] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d
[  642.078997][T16882] RBP: 00007f4158432d6f R08: 0000000000000000 R09: 0000000000000000
[  642.079007][T16882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  642.079016][T16882] R13: 00007f4158616218 R14: 00007f4158616180 R15: 00007ffe4036a858
[  642.079036][T16882]  </TASK>
[  642.446507][T16891] input: jJǸ-���9�%v����l��Q�	J8hǙn�?aԙ/rk
[  642.446507][T16891] l6���x� �b6�Yh$X�.=��_ as /devices/virtual/input/input27
[  642.679256][T16893] Console: switching to colour VGA+ 80x25
[  644.284100][T16919] FAULT_INJECTION: forcing a failure.
[  644.284100][T16919] name failslab, interval 1, probability 0, space 0, times 0
[  644.355476][T16919] CPU: 0 UID: 0 PID: 16919 Comm: syz.2.2110 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  644.355505][T16919] Tainted: [L]=SOFTLOCKUP
[  644.355511][T16919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  644.355521][T16919] Call Trace:
[  644.355526][T16919]  <TASK>
[  644.355532][T16919]  dump_stack_lvl+0x100/0x190
[  644.355564][T16919]  should_fail_ex.cold+0x5/0xa
[  644.355584][T16919]  should_failslab+0xc2/0x120
[  644.355603][T16919]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  644.355625][T16919]  ? __pmd_alloc+0xbf/0x950
[  644.355648][T16919]  __pmd_alloc+0xbf/0x950
[  644.355668][T16919]  __handle_mm_fault+0xa9c/0x2a00
[  644.355693][T16919]  ? mt_find+0x45e/0x8e0
[  644.355724][T16919]  ? __pfx___handle_mm_fault+0x10/0x10
[  644.355745][T16919]  ? __pfx_mt_find+0x10/0x10
[  644.355782][T16919]  handle_mm_fault+0x37b/0xa30
[  644.355809][T16919]  __get_user_pages+0x1178/0x32a0
[  644.355836][T16919]  ? __pfx___get_user_pages+0x10/0x10
[  644.355859][T16919]  populate_vma_page_range+0x267/0x3f0
[  644.355879][T16919]  ? __pfx_populate_vma_page_range+0x10/0x10
[  644.355898][T16919]  ? __pfx_find_vma_intersection+0x10/0x10
[  644.355916][T16919]  ? do_mmap+0x93f/0x12f0
[  644.355935][T16919]  __mm_populate+0x107/0x3a0
[  644.355955][T16919]  ? __pfx___mm_populate+0x10/0x10
[  644.355974][T16919]  ? up_write+0x28c/0x4f0
[  644.355992][T16919]  vm_mmap_pgoff+0x37f/0x470
[  644.356013][T16919]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  644.356032][T16919]  ? do_futex+0x192/0x350
[  644.356047][T16919]  ? __pfx_do_futex+0x10/0x10
[  644.356065][T16919]  ksys_mmap_pgoff+0xe4/0x610
[  644.356082][T16919]  ? __x64_sys_futex+0x358/0x4d0
[  644.356098][T16919]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  644.356114][T16919]  ? xfd_validate_state+0x129/0x190
[  644.356128][T16919]  ? ksys_write+0x1ac/0x250
[  644.356148][T16919]  __x64_sys_mmap+0x125/0x190
[  644.356166][T16919]  do_syscall_64+0x115/0x840
[  644.356186][T16919]  ? clear_bhb_loop+0x40/0x90
[  644.356203][T16919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.356218][T16919] RIP: 0033:0x7f0c8079ce59
[  644.356232][T16919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.356246][T16919] RSP: 002b:00007f0c816ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  644.356261][T16919] RAX: ffffffffffffffda RBX: 00007f0c80a15fa0 RCX: 00007f0c8079ce59
[  644.356272][T16919] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000
[  644.356281][T16919] RBP: 00007f0c80832d6f R08: 0000000000000002 R09: 0000000000008000
[  644.356290][T16919] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  644.356300][T16919] R13: 00007f0c80a16038 R14: 00007f0c80a15fa0 R15: 00007ffe62f49568
[  644.356320][T16919]  </TASK>
[  644.976025][T16913] ima: policy update failed
[  645.031480][   T29] audit: type=1802 audit(1781097381.712:29): pid=16913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2109" res=0 errno=0
[  648.577410][T16960] random: crng reseeded on system resumption
[  650.126438][T17006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2127'.
[  650.452560][T17015] ptp ptp0: only physical clock in use now
[  650.534724][T17006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  650.617050][T17006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.835837][T16984] bond0: option slaves: interface -��]���=,D�o does not exist!
[  654.150086][T17092] rnbd_client L202: map_device: Unknown parameter or missing value '0�="�/�'
[  654.539530][T17120] nbd: must specify at least one socket
[  654.673205][T17109] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  655.416207][T17138] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2140'.

syzkaller
syzkaller login: [  656.559816][T17168] nvme_fcloop: unknown parameter or missing value '7�="����;��&L�=��"'
[  656.859075][T17174] ecryptfs_miscdev_write: Invalid packet size [192]
[  657.065268][T17166] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2146'.
[  658.066178][T17200] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2152'.
[  658.101995][T17204] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2152'.
[  659.561221][T17224] bond0: option slaves: interface -�� does not exist!
[  660.402917][   T29] audit: type=1807 audit(1781097397.210:30): UNKNOWN=nl80211 res=0
[  660.447560][   T29] audit: type=1802 audit(1781097397.260:31): pid=17233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.2160" res=0 errno=0
[  660.763063][T17231] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  661.075828][T17230] ima: policy update failed
[  661.104916][   T29] audit: type=1802 audit(1781097397.914:32): pid=17230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2160" res=0 errno=0
[  661.871235][T17265] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2167'.
[  662.152829][T17269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2168'.
[  662.183559][T17278] nbd: must specify at least one socket
[  662.432864][T17269] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.440131][T17269] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.536117][T17269] bridge0: entered promiscuous mode
[  663.371717][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'.
[  663.423723][T17285] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2171'.
[  664.342368][T12904] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  664.606856][T17315] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2176'.
[  665.439904][T17328] block nbd0: shutting down sockets
[  666.362510][T12904] Bluetooth: hci2: command 0x0c1a tx timeout
[  667.645370][T17344] Process accounting resumed
[  668.445410][T13354] Bluetooth: hci2: command 0x0c1a tx timeout
[  668.698107][T17362] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  668.719707][T17362] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  668.727485][T17390] Process accounting paused
[  668.740736][T17362] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  668.752221][T17388] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2187'.
[  668.767639][T17362] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  668.781710][T17380] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  668.977547][T17397] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  668.995654][T12904] Bluetooth: hci0: command 0x0406 tx timeout
[  670.736385][T12904] Bluetooth: hci2: command 0x0c1a tx timeout
[  670.742538][T13354] Bluetooth: hci1: command 0x0406 tx timeout
[  670.787593][T17440] i2c i2c-0: delete_device: Can't find device in list
[  670.815711][T12904] Bluetooth: hci3: command 0x0406 tx timeout
[  673.708984][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'.
[  673.818403][T17497] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2211'.
[  674.061931][T17480] ima: policy update failed
[  674.072217][   T29] audit: type=1802 audit(1781097410.958:33): pid=17480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2209" res=0 errno=0
[  676.309754][T17555] nbd: must specify at least one socket
[  676.393632][T17557] nbd: must specify at least one socket
[  677.324703][T17566] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2224'.
[  677.568502][T17577] FAULT_INJECTION: forcing a failure.
[  677.568502][T17577] name failslab, interval 1, probability 0, space 0, times 0
[  677.718267][T17577] CPU: 0 UID: 0 PID: 17577 Comm: syz.1.2227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  677.718296][T17577] Tainted: [L]=SOFTLOCKUP
[  677.718302][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  677.718312][T17577] Call Trace:
[  677.718317][T17577]  <TASK>
[  677.718324][T17577]  dump_stack_lvl+0x100/0x190
[  677.718364][T17577]  should_fail_ex.cold+0x5/0xa
[  677.718385][T17577]  ? landlock_init_hierarchy_log+0x186/0x820
[  677.718413][T17577]  should_failslab+0xc2/0x120
[  677.718431][T17577]  __kmalloc_noprof+0xe0/0x850
[  677.718460][T17577]  landlock_init_hierarchy_log+0x186/0x820
[  677.718485][T17577]  landlock_merge_ruleset+0x676/0x830
[  677.718502][T17577]  ? prepare_creds+0x5ee/0x950
[  677.718520][T17577]  __do_sys_landlock_restrict_self+0x2af/0x9e0
[  677.718536][T17577]  ? rcu_is_watching+0x12/0xc0
[  677.718555][T17577]  do_syscall_64+0x115/0x840
[  677.718575][T17577]  ? clear_bhb_loop+0x40/0x90
[  677.718593][T17577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.718608][T17577] RIP: 0033:0x7f5b63d9ce59
[  677.718622][T17577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.718637][T17577] RSP: 002b:00007f5b61ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[  677.718652][T17577] RAX: ffffffffffffffda RBX: 00007f5b64015fa0 RCX: 00007f5b63d9ce59
[  677.718662][T17577] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000005
[  677.718671][T17577] RBP: 00007f5b63e32d6f R08: 0000000000000000 R09: 0000000000000000
[  677.718680][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  677.718688][T17577] R13: 00007f5b64016038 R14: 00007f5b64015fa0 R15: 00007ffdac984a78
[  677.718707][T17577]  </TASK>
[  679.992275][T17606] nbd: must specify at least one socket
[  680.596054][T17619] random: crng reseeded on system resumption
[  681.181584][T17620] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2235'.
[  682.569461][T17642] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2239'.
[  683.231225][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  683.242167][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  683.527587][T17675] nbd: must specify at least one socket
[  684.749020][T17683] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2246'.
[  686.952845][T17715] FAULT_INJECTION: forcing a failure.
[  686.952845][T17715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  687.128024][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.2.2253 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  687.128054][T17715] Tainted: [L]=SOFTLOCKUP
[  687.128060][T17715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  687.128070][T17715] Call Trace:
[  687.128075][T17715]  <TASK>
[  687.128084][T17715]  dump_stack_lvl+0x100/0x190
[  687.128117][T17715]  should_fail_ex.cold+0x5/0xa
[  687.128137][T17715]  _copy_from_user+0x2e/0xd0
[  687.128164][T17715]  copy_msghdr_from_user+0x9f/0x4f0
[  687.128188][T17715]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  687.128212][T17715]  ? __lock_acquire+0x4a5/0x2630
[  687.128239][T17715]  ___sys_recvmsg+0xdd/0x1a0
[  687.128259][T17715]  ? __pfx____sys_recvmsg+0x10/0x10
[  687.128281][T17715]  ? find_held_lock+0x2b/0x80
[  687.128310][T17715]  do_recvmmsg+0x301/0x760
[  687.128332][T17715]  ? __pfx_do_recvmmsg+0x10/0x10
[  687.128351][T17715]  ? ksys_write+0x190/0x250
[  687.128372][T17715]  ? do_futex+0x192/0x350
[  687.128396][T17715]  ? __x64_sys_futex+0x34f/0x4d0
[  687.128413][T17715]  __x64_sys_recvmmsg+0x22a/0x280
[  687.128430][T17715]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  687.128448][T17715]  ? rcu_is_watching+0x12/0xc0
[  687.128468][T17715]  do_syscall_64+0x115/0x840
[  687.128488][T17715]  ? clear_bhb_loop+0x40/0x90
[  687.128506][T17715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.128521][T17715] RIP: 0033:0x7f0c8079ce59
[  687.128535][T17715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  687.128550][T17715] RSP: 002b:00007f0c8168b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  687.128566][T17715] RAX: ffffffffffffffda RBX: 00007f0c80a16090 RCX: 00007f0c8079ce59
[  687.128575][T17715] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003
[  687.128584][T17715] RBP: 00007f0c80832d6f R08: 0000000000000000 R09: 0000000000000000
[  687.128593][T17715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  687.128601][T17715] R13: 00007f0c80a16128 R14: 00007f0c80a16090 R15: 00007ffe62f49568
[  687.128621][T17715]  </TASK>
[  688.971021][T17747] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5)
[  689.397515][T17756] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2258'.
[  691.142543][   T29] audit: type=1804 audit(1781097428.125:34): pid=17801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2266" name="/newroot/581/file0" dev="tmpfs" ino=3071 res=1 errno=0
[  691.273687][   T29] audit: type=1804 audit(1781097428.165:35): pid=17802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2266" name="/newroot/581/file0" dev="tmpfs" ino=3071 res=1 errno=0
[  693.428569][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'.
[  693.503298][T13689] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 6 with max blocks 27 with error 117
[  693.526431][T17874] netlink: 28905 bytes leftover after parsing attributes in process `syz.2.2275'.
[  693.558151][T13689] EXT4-fs (sda1): This should not happen!! Data will be lost
[  693.558151][T13689] 
[  693.747153][T17884] nbd: must specify at least one socket
[  695.878987][T17929] nbd: must specify at least one socket
[  695.944125][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'.
[  697.325386][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  697.336595][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  697.915720][T17971] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2295'.
[  698.026873][T17958] Process accounting paused
[  698.387289][T17978] random: crng reseeded on system resumption
[  698.901345][T17979] Restarting kernel threads ...
[  699.019379][T17979] Done restarting kernel threads.
[  699.596376][T17992] =======================================================
[  699.596376][T17992] WARNING: The mand mount option has been deprecated and
[  699.596376][T17992]          and is ignored by this kernel. Remove the mand
[  699.596376][T17992]          option from the mount to silence this warning.
[  699.596376][T17992] =======================================================
[  699.828011][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'.
[  700.426681][T17968] Process accounting resumed
[  701.052989][T18011] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2304'.
[  701.630317][T18016] bond0: option arp_validate: invalid value ()
[  702.203564][T18036] openvswitch: netlink: Tunnel attr 242 out of range max 16
[  702.698844][T18049] ubi0: attaching mtd6
[  702.728363][T18049] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65)
[  703.647310][T18059] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2314'.
[  705.185642][T18076] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2316'.
[  708.071346][T18123] nbd: must specify at least one socket
[  709.370622][T18142] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input28
[  712.153601][T18175] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2335'.
[  712.783365][T18184] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  712.893439][T18184] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  713.049422][T18184] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  714.308794][T13354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  714.326488][T13354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  714.339101][T13354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  714.347109][T13354] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  714.390030][T13354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  716.475652][T12904] Bluetooth: hci4: command tx timeout
[  716.503253][T18202] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.518639][T18202] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.533758][T18202] bridge_slave_0: entered allmulticast mode
[  716.553575][T18202] bridge_slave_0: entered promiscuous mode
[  716.588333][T18202] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.606018][T18202] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.623722][T18202] bridge_slave_1: entered allmulticast mode
[  716.632162][T18245] kafs: addr_prefs: Invalid Command
[  716.640923][T18202] bridge_slave_1: entered promiscuous mode
[  716.771331][T18202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.912545][T18202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  717.133814][T18252] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2346'.
[  717.234830][T18202] team0: Port device team_slave_0 added
[  717.257073][T18202] team0: Port device team_slave_1 added
[  717.546044][T18202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  717.561310][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  717.673889][T18202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  717.714473][T18202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  717.733092][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  717.793340][T18202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  718.303667][T13689] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.543670][T12904] Bluetooth: hci4: command tx timeout
[  718.609495][T18202] hsr_slave_0: entered promiscuous mode
[  718.616165][T18202] hsr_slave_1: entered promiscuous mode
[  718.622497][T18202] debugfs: 'hsr0' already exists in 'hsr'
[  718.628895][T18202] Cannot create hsr debugfs directory
[  718.686393][T13689] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.929426][T13689] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.305160][T13689] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.448380][T13689] bond0: left allmulticast mode
[  720.496237][T13689] bond_slave_0: left allmulticast mode
[  720.542712][T13689] bond_slave_1: left allmulticast mode
[  720.608588][T13689] bond0: left promiscuous mode
[  720.613485][T12904] Bluetooth: hci4: command tx timeout
[  720.635330][T13689] bond_slave_0: left promiscuous mode
[  720.667099][T13689] bond_slave_1: left promiscuous mode
[  720.719250][T13689] bridge0: port 3(bond0) entered disabled state
[  720.833348][T13689] bridge_slave_1: left allmulticast mode
[  720.869365][T13689] bridge_slave_1: left promiscuous mode
[  720.915353][T13689] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.998570][T13689] bridge_slave_0: left allmulticast mode
[  721.051203][T13689] bridge_slave_0: left promiscuous mode
[  721.101030][T13689] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.984162][T18322] nbd: must specify at least one socket
[  722.148132][T13689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.175935][T13689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.199356][T13689] bond0 (unregistering): Released all slaves
[  722.349733][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1
[  722.374956][T13689] HfR: left promiscuous mode
[  722.680100][T12904] Bluetooth: hci4: command tx timeout
[  722.766667][T13689] ovs_����?: left promiscuous mode
[  723.901282][T18335] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2359'.
[  724.676898][T13689] hsr_slave_0: left promiscuous mode
[  724.695577][T13689] hsr_slave_1: left promiscuous mode
[  724.769415][T13689] veth1_macvtap: left promiscuous mode
[  724.786853][T13689] veth0_macvtap: left promiscuous mode
[  724.797518][T13689] veth1_vlan: left promiscuous mode
[  724.804621][T13689] veth0_vlan: left promiscuous mode
[  725.299180][T13689] team0 (unregistering): Port device team_slave_1 removed
[  725.318783][T13689] team0 (unregistering): Port device team_slave_0 removed
[  726.174344][T18202] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  726.296143][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  726.460894][T18371] nbd: must specify at least one socket
[  726.648950][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'.
[  726.822329][T18202] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  726.911266][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  726.977575][T18202] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  727.023696][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  727.203975][T18202] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  727.398318][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  727.514958][T18367] FAULT_INJECTION: forcing a failure.
[  727.514958][T18367] name failslab, interval 1, probability 0, space 0, times 0
[  727.690115][T18367] CPU: 0 UID: 0 PID: 18367 Comm: syz.0.2363 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  727.690144][T18367] Tainted: [L]=SOFTLOCKUP
[  727.690150][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  727.690160][T18367] Call Trace:
[  727.690165][T18367]  <TASK>
[  727.690172][T18367]  dump_stack_lvl+0x100/0x190
[  727.690204][T18367]  should_fail_ex.cold+0x5/0xa
[  727.690225][T18367]  should_failslab+0xc2/0x120
[  727.690243][T18367]  __kmalloc_cache_node_noprof+0x7d/0x770
[  727.690259][T18367]  ? __pfx_stack_trace_save+0x10/0x10
[  727.690279][T18367]  ? __get_vm_area_node+0x101/0x330
[  727.690300][T18367]  __get_vm_area_node+0x101/0x330
[  727.690317][T18367]  ? kasan_save_stack+0x3f/0x50
[  727.690332][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  727.690431][T18367]  __vmalloc_node_range_noprof+0x228/0x1630
[  727.690452][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  727.690468][T18367]  ? vfs_read+0x1e4/0xb30
[  727.690484][T18367]  ? ksys_read+0x12a/0x250
[  727.690499][T18367]  ? do_syscall_64+0x115/0x840
[  727.690518][T18367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.690538][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  727.690560][T18367]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  727.690587][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  727.690603][T18367]  vmalloc_user_noprof+0x9e/0xe0
[  727.690622][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  727.690646][T18367]  vb2_vmalloc_alloc+0x135/0x410
[  727.690663][T18367]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  727.690682][T18367]  __vb2_queue_alloc+0x8d5/0x1160
[  727.690708][T18367]  vb2_core_reqbufs+0x899/0xf30
[  727.690727][T18367]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  727.690754][T18367]  __vb2_init_fileio+0x32d/0x1000
[  727.690769][T18367]  ? aa_file_perm+0x7f3/0x14d0
[  727.690796][T18367]  __vb2_perform_fileio+0x91e/0x1380
[  727.690818][T18367]  ? __pfx___vb2_perform_fileio+0x10/0x10
[  727.690833][T18367]  ? __pfx___might_resched+0x10/0x10
[  727.690855][T18367]  vb2_fop_read+0x211/0x520
[  727.690872][T18367]  v4l2_read+0x229/0x2c0
[  727.690929][T18367]  ? __pfx_v4l2_read+0x10/0x10
[  727.690952][T18367]  vfs_read+0x1e4/0xb30
[  727.690972][T18367]  ? __pfx_vfs_read+0x10/0x10
[  727.690987][T18367]  ? find_held_lock+0x2b/0x80
[  727.691004][T18367]  ? __fget_files+0x215/0x3d0
[  727.691021][T18367]  ? __fget_files+0x215/0x3d0
[  727.691041][T18367]  ? __fget_files+0x21f/0x3d0
[  727.691062][T18367]  ksys_read+0x12a/0x250
[  727.691078][T18367]  ? __pfx_ksys_read+0x10/0x10
[  727.691095][T18367]  ? rcu_is_watching+0x12/0xc0
[  727.691114][T18367]  do_syscall_64+0x115/0x840
[  727.691133][T18367]  ? clear_bhb_loop+0x40/0x90
[  727.691153][T18367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.691168][T18367] RIP: 0033:0x7f896139ce59
[  727.691183][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.691197][T18367] RSP: 002b:00007f895f5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  727.691213][T18367] RAX: ffffffffffffffda RBX: 00007f8961616180 RCX: 00007f896139ce59
[  727.691223][T18367] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004
[  727.691232][T18367] RBP: 00007f8961432d6f R08: 0000000000000000 R09: 0000000000000000
[  727.691241][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  727.691250][T18367] R13: 00007f8961616218 R14: 00007f8961616180 R15: 00007ffc9f0263b8
[  727.691270][T18367]  </TASK>
[  728.033943][T18396] Process accounting resumed
[  728.141634][T18367] syz.0.2363: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  728.156736][T18367] CPU: 0 UID: 0 PID: 18367 Comm: syz.0.2363 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  728.156763][T18367] Tainted: [L]=SOFTLOCKUP
[  728.156768][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  728.156778][T18367] Call Trace:
[  728.156787][T18367]  <TASK>
[  728.156793][T18367]  dump_stack_lvl+0x100/0x190
[  728.156824][T18367]  warn_alloc.cold+0x95/0x1c1
[  728.156841][T18367]  ? __pfx_warn_alloc+0x10/0x10
[  728.156863][T18367]  ? trace_kmalloc+0xe3/0x110
[  728.156881][T18367]  ? __kmalloc_cache_node_noprof+0x2d9/0x770
[  728.156899][T18367]  ? __kasan_kmalloc+0x8a/0xb0
[  728.156915][T18367]  ? __get_vm_area_node+0x208/0x330
[  728.156934][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  728.156953][T18367]  __vmalloc_node_range_noprof+0xccd/0x1630
[  728.156972][T18367]  ? vfs_read+0x1e4/0xb30
[  728.156986][T18367]  ? ksys_read+0x12a/0x250
[  728.157003][T18367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.157023][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  728.157046][T18367]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  728.157073][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  728.157089][T18367]  vmalloc_user_noprof+0x9e/0xe0
[  728.157108][T18367]  ? vb2_vmalloc_alloc+0x135/0x410
[  728.157124][T18367]  vb2_vmalloc_alloc+0x135/0x410
[  728.157140][T18367]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  728.157158][T18367]  __vb2_queue_alloc+0x8d5/0x1160
[  728.157182][T18367]  vb2_core_reqbufs+0x899/0xf30
[  728.157209][T18367]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  728.157236][T18367]  __vb2_init_fileio+0x32d/0x1000
[  728.157253][T18367]  ? aa_file_perm+0x7f3/0x14d0
[  728.157282][T18367]  __vb2_perform_fileio+0x91e/0x1380
[  728.157304][T18367]  ? __pfx___vb2_perform_fileio+0x10/0x10
[  728.157319][T18367]  ? __pfx___might_resched+0x10/0x10
[  728.157342][T18367]  vb2_fop_read+0x211/0x520
[  728.157360][T18367]  v4l2_read+0x229/0x2c0
[  728.157381][T18367]  ? __pfx_v4l2_read+0x10/0x10
[  728.157403][T18367]  vfs_read+0x1e4/0xb30
[  728.157422][T18367]  ? __pfx_vfs_read+0x10/0x10
[  728.157436][T18367]  ? find_held_lock+0x2b/0x80
[  728.157453][T18367]  ? __fget_files+0x215/0x3d0
[  728.157470][T18367]  ? __fget_files+0x215/0x3d0
[  728.157490][T18367]  ? __fget_files+0x21f/0x3d0
[  728.157519][T18367]  ksys_read+0x12a/0x250
[  728.157537][T18367]  ? __pfx_ksys_read+0x10/0x10
[  728.157556][T18367]  ? rcu_is_watching+0x12/0xc0
[  728.157576][T18367]  do_syscall_64+0x115/0x840
[  728.157597][T18367]  ? clear_bhb_loop+0x40/0x90
[  728.157616][T18367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.157632][T18367] RIP: 0033:0x7f896139ce59
[  728.157646][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.157660][T18367] RSP: 002b:00007f895f5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  728.157675][T18367] RAX: ffffffffffffffda RBX: 00007f8961616180 RCX: 00007f896139ce59
[  728.157686][T18367] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004
[  728.157695][T18367] RBP: 00007f8961432d6f R08: 0000000000000000 R09: 0000000000000000
[  728.157704][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  728.157714][T18367] R13: 00007f8961616218 R14: 00007f8961616180 R15: 00007ffc9f0263b8
[  728.157734][T18367]  </TASK>
[  728.157741][T18367] Mem-Info:
[  728.552992][T18367] active_anon:23402 inactive_anon:126 isolated_anon:0
[  728.552992][T18367]  active_file:17223 inactive_file:41087 isolated_file:0
[  728.552992][T18367]  unevictable:768 dirty:409 writeback:0
[  728.552992][T18367]  slab_reclaimable:11985 slab_unreclaimable:93802
[  728.552992][T18367]  mapped:28702 shmem:3963 pagetables:1767
[  728.552992][T18367]  sec_pagetables:0 bounce:0
[  728.552992][T18367]  kernel_misc_reclaimable:0
[  728.552992][T18367]  free:1291993 free_pcp:15602 free_cma:0
[  728.636189][T18367] Node 0 active_anon:98080kB inactive_anon:504kB active_file:64424kB inactive_file:163212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114804kB dirty:1636kB writeback:0kB shmem:14316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:55296kB kernel_stack:12448kB pagetables:6956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  728.712649][T18367] Node 1 active_anon:0kB inactive_anon:0kB active_file:7156kB inactive_file:1136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  728.778418][T18367] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  728.864926][T18367] lowmem_reserve[]: 0 2478 2479 2479 2479
[  728.879805][T18367] Node 0 DMA32 free:1237196kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104216kB inactive_anon:504kB active_file:70184kB inactive_file:163212kB unevictable:1536kB writepending:1740kB zspages:768kB present:3129332kB managed:2537496kB mlocked:0kB bounce:0kB free_pcp:29252kB local_pcp:29252kB free_cma:0kB
[  728.966337][T18367] lowmem_reserve[]: 0 0 1 1 1
[  728.971684][T18367] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  729.032096][T18367] lowmem_reserve[]: 0 0 0 0 0
[  729.042117][T18367] Node 1 Normal free:3902992kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:7156kB inactive_file:1136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26436kB local_pcp:26436kB free_cma:0kB
[  729.249566][T18367] lowmem_reserve[]: 0 0 0 0 0
[  729.281025][T18367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  729.315630][T13528] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 4 with max blocks 5 with error 117
[  729.373838][T18367] Node 0 DMA32: 5056*4kB (UM) 6820*8kB (UME) 4684*16kB (UM) 2300*32kB (UME) 1212*64kB (UME) 587*128kB (UM) 400*256kB (UM) 188*512kB (UM) 103*1024kB (UME) 8*2048kB (UME) 130*4096kB (UM) = 1229024kB
[  729.408149][T13528] EXT4-fs (sda1): This should not happen!! Data will be lost
[  729.408149][T13528] 
[  729.483064][T18367] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  729.550664][T18367] Node 1 Normal: 8*4kB (UM) 12*8kB (UM) 9*16kB (U) 10*32kB (U) 11*64kB (U) 4*128kB (UM) 5*256kB (UM) 1*512kB (U) 2*1024kB (UM) 1*2048kB (U) 951*4096kB (M) = 3902992kB
[  729.639554][T18367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  729.698098][T18367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  729.738707][T18367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  729.771398][T18367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  729.802652][T18367] 64500 total pagecache pages
[  729.820986][T18367] 120 pages in swap cache
[  729.829791][T18367] Free swap  = 123612kB
[  729.843872][T18367] Total swap = 124996kB
[  729.858885][T18367] 2097051 pages RAM
[  729.869458][T18367] 0 pages HighMem/MovableOnly
[  729.885331][   T29] audit: type=1800 audit(1781097467.086:36): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2368" name="lu_gp_id" dev="configfs" ino=86159 res=0 errno=0
[  729.909118][T18367] 430784 pages reserved
[  729.922849][T18367] 0 pages cma reserved
[  730.291952][T18202] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.373380][T18367] Process accounting paused
[  730.436375][T18202] 8021q: adding VLAN 0 to HW filter on device team0
[  730.600675][T13528] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.607938][T13528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  730.722845][T13528] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.730066][T13528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.782017][T18433] vivid-007: =================  START STATUS  =================
[  730.837182][T18433] vivid-007: Enable Output Cropping: true grabbed
[  730.935988][T18433] vivid-007: Enable Output Composing: true grabbed
[  731.043337][T18433] vivid-007: Enable Output Scaler: true grabbed
[  731.113051][T18435] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 6 with max blocks 1 with error 117
[  731.169684][T18433] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  731.195079][T18435] EXT4-fs (sda1): This should not happen!! Data will be lost
[  731.195079][T18435] 
[  731.313777][T18433] vivid-007: Transmit Mode: HDMI grabbed
[  731.403663][T18433] vivid-007: Hotplug Present: 0x00000000
[  731.447214][T18450] nbd: must specify at least one socket
[  731.496518][T18433] vivid-007: RxSense Present: 0x00000000
[  731.583652][T18433] vivid-007: EDID Present: 0x00000000
[  731.655129][T18433] vivid-007: ==================  END STATUS  ==================
[  731.760698][   T29] audit: type=1800 audit(1781097468.977:37): pid=18454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2373" name="file0" dev="tmpfs" ino=3007 res=0 errno=0
[  732.291720][T18439] syz.0.2369(18439): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  732.347995][T18466] nbd: must specify at least one socket
[  732.669123][T18202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  733.001272][T18475] nbd: must specify at least one socket
[  733.631912][T18202] veth0_vlan: entered promiscuous mode
[  733.781835][T18202] veth1_vlan: entered promiscuous mode
[  734.199057][T18491] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2378'.
[  734.823529][T18202] veth0_macvtap: entered promiscuous mode
[  734.898040][T18202] veth1_macvtap: entered promiscuous mode
[  735.035126][T18202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  735.105420][T18202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  735.178448][T13542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  735.212824][T13542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  735.280527][T13542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  735.336112][T13542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  735.608129][T18506] nbd: must specify at least one socket
[  735.724135][T13528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.770566][T13528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.025832][T13542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  736.077244][T13542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.276139][T18202] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  737.557973][T18533] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k��}�Oq�D@��.��Z�Cg^�'
[  737.930098][T13354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  737.948061][T13354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  737.958565][T13354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  737.971115][T13354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  737.983647][T13354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  738.161464][T18543] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  739.211372][T18558] random: crng reseeded on system resumption
[  739.401086][T13542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.981329][T13542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.100998][T13354] Bluetooth: hci2: command tx timeout
[  740.261873][T13542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.341359][T13542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.344497][T13542] bridge_slave_1: left allmulticast mode
[  741.355462][T13542] bridge_slave_1: left promiscuous mode
[  741.368711][T13542] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.389447][T13542] bridge_slave_0: left allmulticast mode
[  741.404673][T13542] bridge_slave_0: left promiscuous mode
[  741.419208][T13542] bridge0: port 1(bridge_slave_0) entered disabled state
[  741.748771][T13542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  741.773614][T13542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  741.789386][T13542] bond0 (unregistering): Released all slaves
[  741.855811][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1
[  742.169841][T13354] Bluetooth: hci2: command tx timeout
[  742.370210][T18538] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.404413][T18538] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.444520][T18538] bridge_slave_0: entered allmulticast mode
[  742.472378][T18538] bridge_slave_0: entered promiscuous mode
[  742.532561][T13542] hsr_slave_1: left promiscuous mode
[  742.548322][T13542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  742.572818][T13542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  742.596711][T13542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  742.610280][T13542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  742.642039][T13542] veth1_macvtap: left promiscuous mode
[  742.654438][T13542] veth0_macvtap: left promiscuous mode
[  742.667374][T13542] veth1_vlan: left promiscuous mode
[  742.683460][T13542] veth0_vlan: left promiscuous mode
[  743.086764][T13542] team0 (unregistering): Port device team_slave_1 removed
[  743.111858][T13542] team0 (unregistering): Port device team_slave_0 removed
[  743.266859][T18629] sd 0:0:1:0: PR command failed: 1026
[  743.291206][T18630] sd 0:0:1:0: PR command failed: 1026
[  743.308051][T18630] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  743.331751][T18538] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.347044][T18629] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  743.360684][T18538] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.372829][T18629] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  743.385051][T18538] bridge_slave_1: entered allmulticast mode
[  743.391286][T18630] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  743.402142][T18538] bridge_slave_1: entered promiscuous mode
[  743.427516][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2
[  743.628459][T18538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  743.668558][T18538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.701265][T18638] ubi3: attaching mtd1
[  744.033002][T18538] team0: Port device team_slave_0 added
[  744.139048][T18538] team0: Port device team_slave_1 added
[  744.237949][T13354] Bluetooth: hci2: command tx timeout
[  744.313766][T18538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  744.339627][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  744.346114][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  744.368855][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  744.520694][T18538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  744.646083][T18538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  744.669686][T18538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  744.770076][T18538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  745.147812][T18538] hsr_slave_0: entered promiscuous mode
[  745.156613][T18538] hsr_slave_1: entered promiscuous mode
[  745.167554][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3
[  746.086999][T18682] libceph: secret too big 63
[  746.305426][T13354] Bluetooth: hci2: command tx timeout
[  748.449150][T18727] nbd: must specify at least one socket
[  748.716225][T18723] Process accounting resumed
[  748.995186][T18538] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  749.044395][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  749.106239][T18538] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  749.171685][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  749.581793][T18538] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  749.631171][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  749.684010][T18538] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  749.750535][T18538] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  750.250008][T18538] 8021q: adding VLAN 0 to HW filter on device bond0
[  750.400766][T18538] 8021q: adding VLAN 0 to HW filter on device team0
[  750.480338][T13528] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.487669][T13528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  750.600369][T13528] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.607561][T13528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.673400][T18777] ubi0: attaching mtd0
[  751.705084][T18777] ubi0: scanning is finished
[  751.737680][T18777] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  752.118247][T18777] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  752.911531][T18821] nbd: must specify at least one socket
[  752.930409][T18538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.850301][T18538] veth0_vlan: entered promiscuous mode
[  753.942807][T18538] veth1_vlan: entered promiscuous mode
[  754.372571][T18538] veth0_macvtap: entered promiscuous mode
[  754.473114][T18538] veth1_macvtap: entered promiscuous mode
[  754.499906][T14054] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 6 with max blocks 4 with error 117
[  754.606426][T18538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.616597][T14054] EXT4-fs (sda1): This should not happen!! Data will be lost
[  754.616597][T14054] 
[  754.688495][T18538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.778009][T13542] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.850482][T13542] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.930400][T13542] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.983151][T13542] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.434834][T13542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.501062][T13542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.716837][T18849] FAULT_INJECTION: forcing a failure.
[  755.716837][T18849] name failslab, interval 1, probability 0, space 0, times 0
[  755.756331][T13531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  755.804866][T13531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  755.813197][T18849] CPU: 0 UID: 0 PID: 18849 Comm: syz.3.2424 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  755.813223][T18849] Tainted: [L]=SOFTLOCKUP
[  755.813228][T18849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  755.813238][T18849] Call Trace:
[  755.813243][T18849]  <TASK>
[  755.813250][T18849]  dump_stack_lvl+0x100/0x190
[  755.813281][T18849]  should_fail_ex.cold+0x5/0xa
[  755.813301][T18849]  should_failslab+0xc2/0x120
[  755.813320][T18849]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  755.813343][T18849]  ? __pmd_alloc+0xbf/0x950
[  755.813364][T18849]  __pmd_alloc+0xbf/0x950
[  755.813384][T18849]  move_page_tables+0x2f7c/0x4610
[  755.813408][T18849]  ? __pfx_copy_vma+0x10/0x10
[  755.813437][T18849]  ? __pfx_move_page_tables+0x10/0x10
[  755.813473][T18849]  copy_vma_and_data+0x25c/0x7c0
[  755.813497][T18849]  ? __pfx_copy_vma_and_data+0x10/0x10
[  755.813530][T18849]  ? __vma_start_write+0x17f/0x280
[  755.813550][T18849]  ? __pfx___vma_start_write+0x10/0x10
[  755.813587][T18849]  move_vma+0x574/0x1920
[  755.813613][T18849]  ? __pfx_move_vma+0x10/0x10
[  755.813638][T18849]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  755.813657][T18849]  ? cap_mmap_addr+0x4b/0x120
[  755.813671][T18849]  ? bpf_lsm_mmap_addr+0x9/0x30
[  755.813685][T18849]  ? security_mmap_addr+0x71/0x1e0
[  755.813705][T18849]  ? __get_unmapped_area+0x255/0x3e0
[  755.813725][T18849]  ? vrm_set_new_addr+0x204/0x290
[  755.813749][T18849]  mremap_to+0x234/0x4c0
[  755.813771][T18849]  ? mas_walk+0x6ef/0x9b0
[  755.813791][T18849]  ? __pfx_mremap_to+0x10/0x10
[  755.813812][T18849]  ? check_prep_vma+0x912/0xe60
[  755.813837][T18849]  __do_sys_mremap+0x88c/0x1850
[  755.813865][T18849]  ? __pfx___do_sys_mremap+0x10/0x10
[  755.813891][T18849]  ? do_futex+0x192/0x350
[  755.813906][T18849]  ? __pfx_do_futex+0x10/0x10
[  755.813926][T18849]  ? __x64_sys_futex+0x34f/0x4d0
[  755.813948][T18849]  ? rcu_is_watching+0x12/0xc0
[  755.813968][T18849]  do_syscall_64+0x115/0x840
[  755.813988][T18849]  ? clear_bhb_loop+0x40/0x90
[  755.814005][T18849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.814021][T18849] RIP: 0033:0x7fad1939ce59
[  755.814035][T18849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  755.814050][T18849] RSP: 002b:00007fad1a20c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  755.814065][T18849] RAX: ffffffffffffffda RBX: 00007fad19615fa0 RCX: 00007fad1939ce59
[  755.814075][T18849] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000
[  755.814084][T18849] RBP: 00007fad19432d6f R08: 0000000100000000 R09: 0000000000000000
[  755.814094][T18849] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  755.814103][T18849] R13: 00007fad19616038 R14: 00007fad19615fa0 R15: 00007fff4194ba68
[  755.814123][T18849]  </TASK>
[  756.900888][T18876] FAULT_INJECTION: forcing a failure.
[  756.900888][T18876] name failslab, interval 1, probability 0, space 0, times 0
[  757.000615][T18876] CPU: 0 UID: 0 PID: 18876 Comm: syz.3.2429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  757.000643][T18876] Tainted: [L]=SOFTLOCKUP
[  757.000649][T18876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  757.000658][T18876] Call Trace:
[  757.000664][T18876]  <TASK>
[  757.000671][T18876]  dump_stack_lvl+0x100/0x190
[  757.000702][T18876]  should_fail_ex.cold+0x5/0xa
[  757.000722][T18876]  should_failslab+0xc2/0x120
[  757.000740][T18876]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  757.000766][T18876]  ? xas_split_alloc+0x11c/0x4a0
[  757.000792][T18876]  xas_split_alloc+0x11c/0x4a0
[  757.000817][T18876]  __folio_split+0x5e5/0x1690
[  757.000844][T18876]  ? find_held_lock+0x2b/0x80
[  757.000862][T18876]  ? __pfx___folio_split+0x10/0x10
[  757.000882][T18876]  ? folio_alloc_swap+0xbd4/0x1eb0
[  757.000905][T18876]  ? folio_alloc_swap+0x4c6/0x1eb0
[  757.000923][T18876]  shmem_writeout+0x79f/0x1a90
[  757.000950][T18876]  ? __pfx_shmem_writeout+0x10/0x10
[  757.000971][T18876]  ? __pfx_try_to_unmap+0x10/0x10
[  757.000992][T18876]  ? find_held_lock+0x2b/0x80
[  757.001010][T18876]  ? inode_to_bdi+0x9e/0x160
[  757.001027][T18876]  ? folio_clear_dirty_for_io+0x178/0x810
[  757.001046][T18876]  shrink_folio_list+0x3bbd/0x60c0
[  757.001074][T18876]  ? __lock_acquire+0x4a5/0x2630
[  757.001096][T18876]  ? __pfx_shrink_folio_list+0x10/0x10
[  757.001126][T18876]  ? __lock_acquire+0x4a5/0x2630
[  757.001151][T18876]  ? lock_acquire+0x1b1/0x370
[  757.001177][T18876]  ? lock_acquire+0x1b1/0x370
[  757.001199][T18876]  ? find_held_lock+0x2b/0x80
[  757.001216][T18876]  ? is_bpf_text_address+0x8a/0x1a0
[  757.001251][T18876]  ? __lock_acquire+0x4a5/0x2630
[  757.001272][T18876]  ? __css_rstat_updated+0x1ce/0x5a0
[  757.001295][T18876]  ? __pfx___css_rstat_updated+0x10/0x10
[  757.001318][T18876]  reclaim_folio_list+0xdc/0x5e0
[  757.001342][T18876]  ? __pfx_reclaim_folio_list+0x10/0x10
[  757.001361][T18876]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[  757.001392][T18876]  ? lru_gen_update_size+0x431/0xe20
[  757.001416][T18876]  ? lru_gen_del_folio+0x382/0x5f0
[  757.001437][T18876]  reclaim_pages+0x428/0x5e0
[  757.001460][T18876]  ? __pfx_reclaim_pages+0x10/0x10
[  757.001480][T18876]  ? madvise_cold_or_pageout_pte_range+0x2177/0x2620
[  757.001501][T18876]  ? folio_isolate_lru+0xd6/0xe90
[  757.001525][T18876]  madvise_cold_or_pageout_pte_range+0x14c9/0x2620
[  757.001553][T18876]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  757.001574][T18876]  ? __lock_acquire+0x4a5/0x2630
[  757.001595][T18876]  ? __css_rstat_updated+0x1ce/0x5a0
[  757.001616][T18876]  ? __pfx___css_rstat_updated+0x10/0x10
[  757.001638][T18876]  ? register_lock_class+0x40/0x560
[  757.001661][T18876]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  757.001681][T18876]  walk_pgd_range+0xc1a/0x1dd0
[  757.001701][T18876]  ? rcu_read_unlock+0x17/0x60
[  757.001726][T18876]  ? __pfx_walk_pgd_range+0x10/0x10
[  757.001741][T18876]  ? folios_put_refs+0x716/0xa90
[  757.001757][T18876]  __walk_page_range+0x171/0x850
[  757.001773][T18876]  ? find_held_lock+0x2b/0x80
[  757.001797][T18876]  walk_page_range_vma_unsafe+0x209/0x8f0
[  757.001815][T18876]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  757.001835][T18876]  ? find_held_lock+0x2b/0x80
[  757.001851][T18876]  ? mlock_drain_local+0x254/0x4e0
[  757.001865][T18876]  ? mlock_drain_local+0x254/0x4e0
[  757.001881][T18876]  walk_page_range_vma+0x63/0x90
[  757.001898][T18876]  madvise_pageout+0x259/0x540
[  757.001916][T18876]  ? __pfx_madvise_pageout+0x10/0x10
[  757.001935][T18876]  ? rcu_is_watching+0x12/0xc0
[  757.001959][T18876]  ? mtree_range_walk+0x72b/0xb70
[  757.001980][T18876]  madvise_vma_behavior+0x452/0x2240
[  757.002002][T18876]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  757.002027][T18876]  ? find_vma_prev+0xd8/0x150
[  757.002043][T18876]  ? futex_unqueue+0x133/0x2c0
[  757.002057][T18876]  ? __pfx_find_vma_prev+0x10/0x10
[  757.002080][T18876]  ? __futex_wait+0x256/0x300
[  757.002102][T18876]  madvise_walk_vmas+0x2fe/0xa90
[  757.002131][T18876]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  757.002157][T18876]  madvise_do_behavior+0x1ea/0x510
[  757.002178][T18876]  ? __pfx_madvise_do_behavior+0x10/0x10
[  757.002199][T18876]  ? down_read+0x13b/0x450
[  757.002221][T18876]  do_madvise+0x195/0x240
[  757.002240][T18876]  ? __pfx_do_madvise+0x10/0x10
[  757.002258][T18876]  ? do_futex+0x192/0x350
[  757.002284][T18876]  ? ksys_write+0x1ac/0x250
[  757.002301][T18876]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  757.002325][T18876]  __x64_sys_madvise+0xa9/0x110
[  757.002344][T18876]  ? lockdep_hardirqs_on+0x78/0x100
[  757.002364][T18876]  do_syscall_64+0x115/0x840
[  757.002383][T18876]  ? clear_bhb_loop+0x40/0x90
[  757.002401][T18876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.002416][T18876] RIP: 0033:0x7fad1939ce59
[  757.002431][T18876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  757.002445][T18876] RSP: 002b:00007fad1a1eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  757.002461][T18876] RAX: ffffffffffffffda RBX: 00007fad19616090 RCX: 00007fad1939ce59
[  757.002474][T18876] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000
[  757.002609][T18876] RBP: 00007fad19432d6f R08: 0000000000000000 R09: 0000000000000000
[  757.002623][T18876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  757.002637][T18876] R13: 00007fad19616128 R14: 00007fad19616090 R15: 00007fff4194ba68
[  757.002661][T18876]  </TASK>
[  757.828639][T18879] [U] ^R
[  757.984541][T18853] Process accounting paused
[  758.553263][T18889] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2432'.
[  758.671978][T12904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  758.708009][T12904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  758.725656][T12904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  758.900444][T13187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  758.968183][T13187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  760.222814][T13187] Bluetooth: hci2: ACL packet too small
[  760.667672][T13187] block nbd0: Receive control failed (result -32)
[  761.102575][T13187] Bluetooth: hci3: command tx timeout
[  762.027730][T13528] batadv0: left allmulticast mode
[  762.050257][T13528] batadv0: left promiscuous mode
[  762.089591][T13528] bridge0: port 3(batadv0) entered disabled state
[  762.119998][T13528] bridge_slave_1: left allmulticast mode
[  762.145093][T13528] bridge_slave_1: left promiscuous mode
[  762.167656][T13528] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.194655][T13528] bridge_slave_0: left allmulticast mode
[  762.215626][T13528] bridge_slave_0: left promiscuous mode
[  762.238071][T13528] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.788102][T13528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.828258][T13528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.875004][T13528] bond0 (unregistering): Released all slaves
[  762.970195][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1
[  763.034023][T13528] ovs_����?: left promiscuous mode
[  763.170564][T13187] Bluetooth: hci3: command tx timeout
[  764.940166][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2
[  765.092709][T13528] hsr_slave_0: left promiscuous mode
[  765.133591][T13528] hsr_slave_1: left promiscuous mode
[  765.153675][T13528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.186584][T13528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  765.208625][T13528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  765.237689][T13187] Bluetooth: hci3: command tx timeout
[  765.251736][T13528] veth1_macvtap: left promiscuous mode
[  765.272337][T13528] veth1_vlan: left promiscuous mode
[  766.028696][T13528] team0 (unregistering): Port device team_slave_1 removed
[  766.078229][T13528] team0 (unregistering): Port device team_slave_0 removed
[  766.340658][T18890] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.359069][T18890] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.389481][T18890] bridge_slave_0: entered allmulticast mode
[  766.414865][T18890] bridge_slave_0: entered promiscuous mode
[  766.435521][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3
[  766.447448][T18890] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.484063][T18890] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.529309][T18890] bridge_slave_1: entered allmulticast mode
[  766.576029][T18890] bridge_slave_1: entered promiscuous mode
[  766.726112][T18890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.816683][T18890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.959885][T19011] FAULT_INJECTION: forcing a failure.
[  766.959885][T19011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.026611][T18890] team0: Port device team_slave_0 added
[  767.053324][T19011] CPU: 0 UID: 0 PID: 19011 Comm: syz.3.2444 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  767.053354][T19011] Tainted: [L]=SOFTLOCKUP
[  767.053361][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  767.053372][T19011] Call Trace:
[  767.053378][T19011]  <TASK>
[  767.053386][T19011]  dump_stack_lvl+0x100/0x190
[  767.053422][T19011]  should_fail_ex.cold+0x5/0xa
[  767.053443][T19011]  _copy_from_user+0x2e/0xd0
[  767.053468][T19011]  copy_msghdr_from_user+0x9f/0x4f0
[  767.053494][T19011]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  767.053518][T19011]  ? rcu_is_watching+0x12/0xc0
[  767.053537][T19011]  ? ___sys_sendmsg+0x19d/0x1e0
[  767.053555][T19011]  ? kfree+0x1dd/0x6c0
[  767.053592][T19011]  ___sys_sendmsg+0x106/0x1e0
[  767.053615][T19011]  ? __pfx____sys_sendmsg+0x10/0x10
[  767.053658][T19011]  ? __pfx___might_resched+0x10/0x10
[  767.053681][T19011]  __sys_sendmmsg+0x205/0x430
[  767.053701][T19011]  ? __pfx___sys_sendmmsg+0x10/0x10
[  767.053715][T19011]  ? __local_bh_enable_ip+0x9e/0x120
[  767.053739][T19011]  ? __pfx_do_futex+0x10/0x10
[  767.053763][T19011]  ? xfd_validate_state+0x129/0x190
[  767.053784][T19011]  __x64_sys_sendmmsg+0x9c/0x100
[  767.053799][T19011]  ? lockdep_hardirqs_on+0x78/0x100
[  767.053821][T19011]  do_syscall_64+0x115/0x840
[  767.053840][T19011]  ? clear_bhb_loop+0x40/0x90
[  767.053859][T19011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.053876][T19011] RIP: 0033:0x7fad1939ce59
[  767.053890][T19011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.053905][T19011] RSP: 002b:00007fad1a20c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  767.053921][T19011] RAX: ffffffffffffffda RBX: 00007fad19615fa0 RCX: 00007fad1939ce59
[  767.053931][T19011] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003
[  767.053940][T19011] RBP: 00007fad19432d6f R08: 0000000000000000 R09: 0000000000000000
[  767.053949][T19011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  767.053957][T19011] R13: 00007fad19616038 R14: 00007fad19615fa0 R15: 00007fff4194ba68
[  767.053976][T19011]  </TASK>
[  767.549716][T13187] Bluetooth: hci3: command tx timeout
[  768.005009][T19033] nbd: must specify at least one socket
[  768.126933][T18890] team0: Port device team_slave_1 added
[  768.557200][T18890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  768.591452][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  768.648782][T18890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  768.692406][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4
[  768.752370][T18890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  768.759652][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  768.789915][T18890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.998458][T18890] hsr_slave_0: entered promiscuous mode
[  769.005206][T18890] hsr_slave_1: entered promiscuous mode
[  769.039157][T18890] debugfs: 'hsr0' already exists in 'hsr'
[  769.045256][T18890] Cannot create hsr debugfs directory
[  769.497555][T13354] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  771.521654][T13187] Bluetooth: hci2: command 0x2016 tx timeout
[  773.591248][T13187] Bluetooth: hci2: command 0x2016 tx timeout
[  774.808406][T18890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  774.868696][T18890] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  774.912098][T18890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  774.983435][T18890] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  775.028558][T18890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  775.158368][T18890] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  775.256149][T18890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  775.323479][T18890] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  777.514628][T18890] 8021q: adding VLAN 0 to HW filter on device bond0
[  777.634891][T18890] 8021q: adding VLAN 0 to HW filter on device team0
[  777.692879][T14054] bridge0: port 1(bridge_slave_0) entered blocking state
[  777.700272][T14054] bridge0: port 1(bridge_slave_0) entered forwarding state
[  777.802493][T14054] bridge0: port 2(bridge_slave_1) entered blocking state
[  777.809719][T14054] bridge0: port 2(bridge_slave_1) entered forwarding state
[  778.028415][T19177] nbd: must specify at least one socket
[  778.729050][T19171] Process accounting paused
[  780.932948][T18890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  781.007190][T19243] random: crng reseeded on system resumption
[  781.205613][T13354] Bluetooth: hci2: unexpected event for opcode 0x7c89
[  781.353879][T18890] veth0_vlan: entered promiscuous mode
[  781.585258][T18890] veth1_vlan: entered promiscuous mode
[  781.839015][T18890] veth0_macvtap: entered promiscuous mode
[  781.998287][T18890] veth1_macvtap: entered promiscuous mode
[  782.106943][T18890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  782.202995][T18890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  782.289199][T13542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  782.344322][T13542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  782.384350][T19259] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2468'.
[  782.537457][T13542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  782.578423][T19264] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  782.619962][T13542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  783.099255][T13542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  783.152536][T13542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  783.294287][T14054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  783.345669][T14054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  783.667919][T19278] Invalid ELF header magic: != ELF
[  783.876576][T19284] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  785.881211][T13187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  785.899158][T13187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  785.912418][T13187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  785.927373][T13187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  785.942473][T13187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  786.624362][ T6600] ------------[ cut here ]------------
[  786.630353][ T6600] ODEBUG: free active (active state 0) object: ffff8880629cd438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0
[  786.643435][ T6600] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.2.128/6600
[  786.653664][ T6600] Modules linked in:
[  786.657710][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.2.128 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  786.668709][ T6600] Tainted: [L]=SOFTLOCKUP
[  786.673130][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  786.684741][ T6600] RIP: 0010:debug_print_object+0x19b/0x2a0
[  786.690998][ T6600] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 03 e2 0b 41 56 48 8b 14 dd 40 58 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c 7e d7 0b 01 48 83 c4 18 5b 5d 41 5c 41
[  786.711312][ T6600] RSP: 0018:ffffc900032676f8 EFLAGS: 00010246
[  786.717541][ T6600] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  786.726337][ T6600] RDX: ffffffff8c1c5780 RSI: ffffffff8c1c53a0 RDI: ffffffff90e1ff70
[  786.734307][ T6600] RBP: 0000000000000001 R08: ffff8880629cd438 R09: ffffffff8bb2c6a0
[  786.742548][ T6600] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c53a0
[  786.750645][ T6600] R13: ffffffff8bb2c6e0 R14: ffffffff8a916ee0 R15: ffffc900032677f8
[  786.758678][ T6600] FS:  0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000
[  786.768444][ T6600] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  786.775559][ T6600] CR2: 00007f462e0df440 CR3: 0000000033958000 CR4: 00000000003526f0
[  786.783546][ T6600] Call Trace:
[  786.787373][ T6600]  <TASK>
[  786.790660][ T6600]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  786.796429][ T6600]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  786.802459][ T6600]  debug_check_no_obj_freed+0x4da/0x630
[  786.808141][ T6600]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  786.814223][ T6600]  ? __page_table_check_zero+0x333/0x410
[  786.820094][ T6600]  ? __page_table_check_zero+0x338/0x410
[  786.826244][ T6600]  __free_frozen_pages+0x3fc/0x10a0
[  786.831639][ T6600]  hci_release_dev+0x4ef/0x630
[  786.836884][ T6600]  ? __pfx_hci_release_dev+0x10/0x10
[  786.842186][ T6600]  ? device_release+0x97/0x270
[  786.847224][ T6600]  ? rcu_is_watching+0x12/0xc0
[  786.852190][ T6600]  ? device_release+0x97/0x270
[  786.857153][ T6600]  bt_host_release+0x6b/0xb0
[  786.861748][ T6600]  ? __pfx_bt_host_release+0x10/0x10
[  786.867174][ T6600]  device_release+0xd2/0x270
[  786.871795][ T6600]  kobject_put+0x1f7/0x640
[  786.877049][ T6600]  put_device+0x1f/0x30
[  786.881316][ T6600]  vhci_release+0x185/0x230
[  786.886210][ T6600]  ? __pfx_vhci_release+0x10/0x10
[  786.891872][ T6600]  __fput+0x3ff/0xb50
[  786.896377][ T6600]  task_work_run+0x150/0x240
[  786.900994][ T6600]  ? __pfx_task_work_run+0x10/0x10
[  786.906150][ T6600]  ? free_uts_ns+0x16e/0x330
[  786.910761][ T6600]  do_exit+0x951/0x2af0
[  786.915065][ T6600]  ? __pfx_do_exit+0x10/0x10
[  786.919648][ T6600]  ? do_raw_spin_lock+0x128/0x260
[  786.924874][ T6600]  ? find_held_lock+0x2b/0x80
[  786.929928][ T6600]  ? get_signal+0x7e5/0x2210
[  786.934851][ T6600]  do_group_exit+0xd5/0x2a0
[  786.939464][ T6600]  get_signal+0x20ff/0x2210
[  786.944196][ T6600]  ? prune_tree_chunks+0x70/0xd60
[  786.949348][ T6600]  ? __pfx_get_signal+0x10/0x10
[  786.955176][ T6600]  ? do_futex+0x192/0x350
[  786.959685][ T6600]  arch_do_signal_or_restart+0x91/0x7a0
[  786.965281][ T6600]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  786.971964][ T6600]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  786.978415][ T6600]  ? exc_page_fault+0x6f/0xd0
[  786.983112][ T6600]  ? rcu_is_watching+0x12/0xc0
[  786.987923][ T6600]  exit_to_user_mode_loop+0x98/0x670
[  786.993829][ T6600]  ? rcu_is_watching+0x12/0xc0
[  786.998588][ T6600]  do_syscall_64+0x652/0x840
[  787.003256][ T6600]  ? clear_bhb_loop+0x40/0x90
[  787.008621][ T6600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.014663][ T6600] RIP: 0033:0x7f0c8079ce59
[  787.019071][ T6600] Code: Unable to access opcode bytes at 0x7f0c8079ce2f.
[  787.026338][ T6600] RSP: 002b:00007f0c816ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  787.035642][ T6600] RAX: fffffffffffffe00 RBX: 00007f0c80a15fa8 RCX: 00007f0c8079ce59
[  787.044158][ T6600] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c80a15fa8
[  787.052657][ T6600] RBP: 00007f0c80a15fa0 R08: 0000000000000000 R09: 0000000000000000
[  787.060673][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  787.068951][ T6600] R13: 00007f0c80a16038 R14: 00007ffe62f49480 R15: 00007ffe62f49568
[  787.077313][ T6600]  </TASK>
[  787.080383][ T6600] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  787.087742][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.2.128 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  787.098610][ T6600] Tainted: [L]=SOFTLOCKUP
[  787.103465][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  787.113784][ T6600] Call Trace:
[  787.117093][ T6600]  <TASK>
[  787.120073][ T6600]  dump_stack_lvl+0x100/0x190
[  787.124857][ T6600]  vpanic+0x552/0x970
[  787.128846][ T6600]  ? __pfx_vpanic+0x10/0x10
[  787.133355][ T6600]  panic+0xd1/0xe0
[  787.137082][ T6600]  ? __pfx_panic+0x10/0x10
[  787.141494][ T6600]  ? check_panic_on_warn+0x1f/0x90
[  787.146603][ T6600]  check_panic_on_warn.cold+0x19/0x34
[  787.151965][ T6600]  ? debug_print_object+0x18e/0x2a0
[  787.157409][ T6600]  __warn.cold+0x191/0x328
[  787.161850][ T6600]  __report_bug+0x296/0x3d0
[  787.166443][ T6600]  ? debug_print_object+0x18e/0x2a0
[  787.171653][ T6600]  ? __pfx___report_bug+0x10/0x10
[  787.177157][ T6600]  ? rcu_is_watching+0x12/0xc0
[  787.181966][ T6600]  report_bug_entry+0xe1/0x290
[  787.187112][ T6600]  ? debug_print_object+0x19b/0x2a0
[  787.192312][ T6600]  handle_bug+0x1cd/0x2a0
[  787.197072][ T6600]  exc_invalid_op+0x17/0x50
[  787.201586][ T6600]  asm_exc_invalid_op+0x1a/0x20
[  787.206512][ T6600] RIP: 0010:debug_print_object+0x19b/0x2a0
[  787.212329][ T6600] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 03 e2 0b 41 56 48 8b 14 dd 40 58 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 4c 7e d7 0b 01 48 83 c4 18 5b 5d 41 5c 41
[  787.232205][ T6600] RSP: 0018:ffffc900032676f8 EFLAGS: 00010246
[  787.238277][ T6600] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  787.246253][ T6600] RDX: ffffffff8c1c5780 RSI: ffffffff8c1c53a0 RDI: ffffffff90e1ff70
[  787.254248][ T6600] RBP: 0000000000000001 R08: ffff8880629cd438 R09: ffffffff8bb2c6a0
[  787.262302][ T6600] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c53a0
[  787.270300][ T6600] R13: ffffffff8bb2c6e0 R14: ffffffff8a916ee0 R15: ffffc900032677f8
[  787.278297][ T6600]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  787.283783][ T6600]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  787.289321][ T6600]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  787.295299][ T6600]  debug_check_no_obj_freed+0x4da/0x630
[  787.300855][ T6600]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  787.306916][ T6600]  ? __page_table_check_zero+0x333/0x410
[  787.312635][ T6600]  ? __page_table_check_zero+0x338/0x410
[  787.318267][ T6600]  __free_frozen_pages+0x3fc/0x10a0
[  787.323474][ T6600]  hci_release_dev+0x4ef/0x630
[  787.328241][ T6600]  ? __pfx_hci_release_dev+0x10/0x10
[  787.333519][ T6600]  ? device_release+0x97/0x270
[  787.338287][ T6600]  ? rcu_is_watching+0x12/0xc0
[  787.343048][ T6600]  ? device_release+0x97/0x270
[  787.347827][ T6600]  bt_host_release+0x6b/0xb0
[  787.352642][ T6600]  ? __pfx_bt_host_release+0x10/0x10
[  787.358124][ T6600]  device_release+0xd2/0x270
[  787.362736][ T6600]  kobject_put+0x1f7/0x640
[  787.367159][ T6600]  put_device+0x1f/0x30
[  787.371338][ T6600]  vhci_release+0x185/0x230
[  787.376201][ T6600]  ? __pfx_vhci_release+0x10/0x10
[  787.381236][ T6600]  __fput+0x3ff/0xb50
[  787.385245][ T6600]  task_work_run+0x150/0x240
[  787.389957][ T6600]  ? __pfx_task_work_run+0x10/0x10
[  787.395093][ T6600]  ? free_uts_ns+0x16e/0x330
[  787.399724][ T6600]  do_exit+0x951/0x2af0
[  787.403880][ T6600]  ? __pfx_do_exit+0x10/0x10
[  787.408671][ T6600]  ? do_raw_spin_lock+0x128/0x260
[  787.413706][ T6600]  ? find_held_lock+0x2b/0x80
[  787.418497][ T6600]  ? get_signal+0x7e5/0x2210
[  787.423151][ T6600]  do_group_exit+0xd5/0x2a0
[  787.427665][ T6600]  get_signal+0x20ff/0x2210
[  787.432263][ T6600]  ? prune_tree_chunks+0x70/0xd60
[  787.437310][ T6600]  ? __pfx_get_signal+0x10/0x10
[  787.442192][ T6600]  ? do_futex+0x192/0x350
[  787.446528][ T6600]  arch_do_signal_or_restart+0x91/0x7a0
[  787.452155][ T6600]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  787.458591][ T6600]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  787.464847][ T6600]  ? exc_page_fault+0x6f/0xd0
[  787.469700][ T6600]  ? rcu_is_watching+0x12/0xc0
[  787.474480][ T6600]  exit_to_user_mode_loop+0x98/0x670
[  787.480137][ T6600]  ? rcu_is_watching+0x12/0xc0
[  787.484961][ T6600]  do_syscall_64+0x652/0x840
[  787.489553][ T6600]  ? clear_bhb_loop+0x40/0x90
[  787.494226][ T6600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.500143][ T6600] RIP: 0033:0x7f0c8079ce59
[  787.504558][ T6600] Code: Unable to access opcode bytes at 0x7f0c8079ce2f.
[  787.511578][ T6600] RSP: 002b:00007f0c816ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  787.519994][ T6600] RAX: fffffffffffffe00 RBX: 00007f0c80a15fa8 RCX: 00007f0c8079ce59
[  787.528177][ T6600] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0c80a15fa8
[  787.536253][ T6600] RBP: 00007f0c80a15fa0 R08: 0000000000000000 R09: 0000000000000000
[  787.544247][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  787.552469][ T6600] R13: 00007f0c80a16038 R14: 00007ffe62f49480 R15: 00007ffe62f49568
[  787.560714][ T6600]  </TASK>
[  787.563800][ T6600] Kernel Offset: disabled
[  787.568317][ T6600] Rebooting in 86400 seconds..