last executing test programs:

1m54.008404078s ago: executing program 3 (id=1224):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timer_create$auto(0x803, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0)
memfd_secret$auto(0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0)
preadv2$auto(r2, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0)
ioctl$auto(0x3, 0x402c542d, r3)
write$auto(0x3, 0x0, 0xfffffdef)

1m51.981095579s ago: executing program 3 (id=1225):
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0)
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)=ANY=[@ANYBLOB="c98681e4", @ANYRES16=r4, @ANYBLOB="080027bd7000fddbdf2569000000060065000900000006004f01090000001700130013c366f9244357d432f6e44cc4bf4e5878fe5d00080002002f247b0005006000080000000500a3000200000045001f00ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e90000005c007580ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b08003800000400000800e600", @ANYRES32=r1, @ANYBLOB="05008a00080000000500f60007000000"], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0)
mlockall$auto(0x7)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
ptrace$auto(0x10, r0, 0x2, 0x1007ff)
ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193)

1m49.834509377s ago: executing program 3 (id=1229):
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x10, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r0, 0x5422, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x22, 0x3, 0x0)
ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
write$auto(r1, 0x0, 0x6051)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
msync$auto(0x0, 0xe0, 0x6)

1m48.242176351s ago: executing program 3 (id=1236):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40041, 0x0)
open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x0, 0x44c)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100)
bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)

1m47.909498183s ago: executing program 3 (id=1237):
socket(0x11, 0x80003, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x18, 0x3, 0x2)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
r0 = socket(0x11, 0x80003, 0x300)
sendfile$auto(0x1, r0, 0x0, 0x8fb5)
ioctl$auto(0xc8, 0x400454ce, 0xffffffffffffffff)
fcntl$auto(0x0, 0x408, 0x100000)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0)

1m46.802999603s ago: executing program 3 (id=1241):
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x14004010)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
sysfs$auto(0x2, 0x5, 0x0)
sched_setaffinity$auto(0x0, 0x100, &(0x7f0000000200)=0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x3}, 0x3)
mount$auto(&(0x7f0000000180)='nicvf0\x00', 0x0, 0x0, 0x4, &(0x7f00000004c0))
mmap$auto(0x0, 0xa8, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="0600e943b28fb20207cd994fbf2001", @ANYRES16, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x6, 0x0)
socket(0x2b, 0x1, 0x1)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x10)

1m31.533487233s ago: executing program 32 (id=1241):
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x14004010)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
sysfs$auto(0x2, 0x5, 0x0)
sched_setaffinity$auto(0x0, 0x100, &(0x7f0000000200)=0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
read$auto(0xffffffffffffffff, 0x0, 0x20)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x3}, 0x3)
mount$auto(&(0x7f0000000180)='nicvf0\x00', 0x0, 0x0, 0x4, &(0x7f00000004c0))
mmap$auto(0x0, 0xa8, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="0600e943b28fb20207cd994fbf2001", @ANYRES16, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
unshare$auto(0x40000080)
io_uring_setup$auto(0x6, 0x0)
socket(0x2b, 0x1, 0x1)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
sendmsg$auto_NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x10)

1m0.371820214s ago: executing program 1 (id=1341):
mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/devices/uprobe/format/retprobe\x00', 0x80, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100)
bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/system/cpu/kernel_max\x00', 0x101000, 0x0)
ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
writev$auto(r0, &(0x7f0000000140)={&(0x7f00000000c0)="64c0d57dd6f4fd527b7a0f950190fecfb99aa873f4f5eaa3675f1afdbc9d5f894c6424fcc7237f0a42c7ad00b8107f3aa6fe3f8d52afaf0b3aa71f4f2c9068a10473eda78634628f07d34c08782b78181e65bd011df0d85fdb4d1b76f7", 0x4}, 0x6)

58.999769142s ago: executing program 1 (id=1347):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0x7)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x15)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto_RTC_PIE_ON(r0, 0x7005, 0x0)
ioctl$auto_RTC_IRQP_SET(r0, 0x4008700c, &(0x7f0000000040)=0x8)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20020, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000004c0)={{@raw=0x5, 0xffffff7d, 0xa, 0xfffffffc, "50ddcc2d0a7b79ca0e62e667b5000000000000000000000000000000000100ffffffffffffffe700", @raw=0x3}, 0x1, @integer64=@value=[0x1, 0x9, 0x6b92, 0x6, 0xfffffffffffffffe, 0x7fffffff, 0x1, 0x5, 0xc, 0xffffffffffffff30, 0x6, 0x2000000002, 0x8, 0x7c1, 0x8000, 0x8, 0x2, 0x2, 0xca1, 0xfffffffffffffffc, 0xffffffff00000001, 0x2, 0xffff, 0x6, 0x6, 0xc, 0x4, 0x93, 0xaa, 0x4, 0x2, 0x9, 0x7, 0x8003, 0x749, 0x3, 0x4, 0x7, 0x1, 0x3, 0x9186, 0x1000000003, 0x1, 0x1, 0x8, 0x6, 0xfffffffffffffffc, 0x3, 0x4, 0x7fff, 0xc5ec, 0x1, 0xaa7, 0x0, 0xfffffffffffff41f, 0x6, 0x8000000e36c, 0x22e, 0x9, 0x10000000, 0xaca7, 0xf3c, 0x9660, 0x9], "bee8fd3b16a97731269aff7312ae1a01006266a3bde1f332e1078696becfd044280e7fb7719d4362b09d9f6cb070bad3af7185ae1e691c585914c0b11dd65468fb68dfc32254d8ed55c8d806a2ef4bba7bc65cd90676ce6dec79ff2f44034ad55049ff128dd27f04ac14d8dbaffacc77596ca0dffa00"})
ioctl$auto_SCSI_IOCTL_DOORLOCK(r1, 0x5380, &(0x7f00000001c0)="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")
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x8, 0x2, 0x84)
socket(0x2, 0x3, 0x1)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55)
sendmmsg$auto(0x3, &(0x7f00000001c0)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0)

58.580623413s ago: executing program 1 (id=1348):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe, 0x9, 0x2, 0xfffffffffffffffd, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(0x0, r0)
sendmsg$auto_NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1602c000}, 0x4000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x20000, 0x0)
pread64$auto(r4, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00\x00\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6)
openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/ns/cgroup\x00', 0x200000, 0x0)
write$auto(r1, 0x0, 0x100000a3d9)

56.514236226s ago: executing program 1 (id=1354):
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6)
shmctl$auto_IPC_SET(0x3, 0x1, &(0x7f0000000240)={{0xff6e, <r0=>0xee01, 0x0, 0x5, 0x3, 0x8, 0x3}, 0x80, 0x4, 0x101, 0x7, @inferred, @raw, 0x0, 0x0, &(0x7f0000000140)="0313d666924c3d63a0289947ec754e2f135933d65fdb0a19ec6f998d80a7da8f3ddb5df3060e0667904a7d534795b08b3d3acd0620e731966c34b030306f44a22d3d856576c2c50b1b29dbb42c2b5e5e13fce22d4ff7526bc97a085620240b3c22c9fcc90a1c467980928c8b3dcb1d0512e97a05caaced014ddca2f3627160876fbad77aea83674c343c409a4a22a6c38d1095dfb14ddcd860eab67e2caf0008d9354fa15c2d8c864c5fc08fbb3939e84ff2f08132b532ccc0474cb1919c13d4a58927be2767f73327169b5878e530de8f1a149ac153e8358f", &(0x7f0000000000)="65241ec2a60793e07a1dd2cfebb43389dea64dfbe3a183d7575002509df0c82e91dced19e65b663cd7e512d768605bd40eff4acd5b83342d9547fc8e39c3ffac77e742749bf48c5d6e097b188aab3eea149d8503c8a89a033c08b19bc8bfefab811b9008653c56024baef07b9a50992718632c18f11e2fcfc647dd9092eaac0c9ff17c3483fc46c9d18b7937b64a2c8c765af7b738ea87d9d647fa0c60f4b9c4"})
keyctl$auto(0x4, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x8)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55)
capget$auto(0x0, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_ADD_LINK(r2, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb90e9a6a7cb7d163}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x590, r3, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x564, 0x7f, "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"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x7}}]}, 0x590}, 0x1, 0x0, 0x0, 0x4}, 0x40080)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000810)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x101}, 0x0, @integer=@value=[0x6, 0x0, 0x5, 0x80, 0xfffffffffffffffe, 0x8b0, 0x4, 0x8000000000000001, 0x100000000000004, 0x2090, 0xf7a, 0x6, 0x3, 0x1, 0x0, 0x7fffffffffffffff, 0x9, 0x3, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x6, 0x2, 0x8, 0x10, 0xfffffffffffffffe, 0x3, 0x7, 0x6d, 0x3, 0xfffffffffffffff7, 0x10000, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x7, 0x200000000a78, 0x100000000000000, 0x100000004, 0x1, 0x0, 0x29, 0x81, 0x50, 0x5, 0x6, 0x8, 0x2afb, 0x803, 0x80, 0x4, 0x0, 0x4572, 0x9, 0xce13, 0x0, 0x4, 0x6, 0xd, 0x0, 0xfff, 0xc, 0xfffffffffffffffb, 0x6, 0xff, 0x10001, 0x0, 0x9, 0x9, 0x3, 0xd3ad, 0x9, 0x5, 0x7, 0x100000001, 0xffffffffffffffdc, 0x5, 0x1, 0x1000, 0x100000001, 0x100, 0x80000001, 0x8, 0x7, 0x4, 0x8, 0x800000000010, 0xff, 0x6, 0xff8000000, 0x2a4c32e3, 0x800, 0x18, 0x200000000000007, 0x4, 0x57, 0x1, 0x6, 0x7fffffffffffffff, 0x119af68c, 0x3, 0x4, 0x7, 0x6, 0x0, 0x8000000000000001, 0x5, 0x8, 0xc8d, 0x7, 0x7, 0x2, 0x9, 0xfffffffffffffff8, 0x4, 0xc, 0x6, 0xa, 0x10001, 0x4bb2, 0x2, 0x400, 0x401, 0x8, 0x7], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"})
r5 = epoll_create$auto(0x4)
r6 = socket(0x2, 0x5, 0x0)
epoll_ctl$auto(r5, 0x1, r6, 0x0)
r7 = epoll_create$auto(0x3e)
epoll_ctl$auto(r7, 0x1, r5, 0x0)
shutdown$auto(0x200000003, 0x2)
keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0)
acct$auto(&(0x7f00000000c0)='/proc/net/rpc/use-gss-\x06roxy\x00')

56.159942395s ago: executing program 1 (id=1356):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
r0 = epoll_create$auto(0x4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0)
write$auto(0x3, 0x0, 0x5c8)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, 0x0)
writev$auto(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0x80000000}, 0x9)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x480001, 0x0)
write$auto(r1, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
timerfd_gettime$auto(0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x19, 0xffffffffffffffff, 0x28000)
socket(0x2, 0x1, 0x106)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41)

54.01186783s ago: executing program 1 (id=1363):
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x9a28)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x5452, &(0x7f0000000080)={0xf, 0x6, 0x1, 0x7ff, 0x10001})
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0)
kill$auto(0x0, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x22, 0x4, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0)

38.812782748s ago: executing program 33 (id=1363):
bind$auto(0x3, 0x0, 0x6a)
mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x9a28)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x5452, &(0x7f0000000080)={0xf, 0x6, 0x1, 0x7ff, 0x10001})
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x40000000, 0x0, 0x25, 0x0, 0x0, 0x0)
kill$auto(0x0, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x22, 0x4, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0)

16.042489372s ago: executing program 5 (id=1455):
openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x121140, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40100, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9})
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x1d48, 0x0)
io_uring_register$auto(r1, 0x3, 0x0, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x3, 0x2, 0x4)
setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2})
socket(0xf, 0x800, 0x4)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0)
ioprio_set$auto(0x1, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x7, 0x9, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0)
write$auto(r2, &(0x7f00000001c0)=',\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)

15.736856266s ago: executing program 5 (id=1456):
write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)
sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x44)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
capset$auto(0x0, 0x0)
r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
r2 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_general\x00', 0x40aa2, 0x0)
write$auto_dfs_global_fops_debug(r2, &(0x7f0000000d80)='0', 0x1)
ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6)
mmap$auto(0x0, 0x7ffffe, 0x800000db, 0x1009b72, 0xffffffffffffffff, 0x8000008000)
adjtimex$auto(0x0)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x9, 0x0})
r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$auto_mISDN_fops_timerdev(r3, &(0x7f0000001a00)=""/4097, 0x1001)
ioctl$auto_IMADDTIMER(r3, 0x80044940, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_DUMP_SEID(r4, 0x0, 0x40008d7)

14.738167149s ago: executing program 5 (id=1460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="ea308f4dc14967a8000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf25070000007b00bd002233354110066cb97aa70ec1a1bef7ec0b397f9026ed55a808e56ad6aa7f417c7d5115e8df3b3004858fb16c588751fb38fd1b20bedb776d148c60670ecd38fc9350ec6d88de2f9d1de5e4963e7e34a29ef98ffd6f758ed91a0e1ba855021c96933090fbd1d75c3a228dafe742f0b9f446726fb336361f00060036000184000005001301060000000800a5000600"], 0xa8}, 0x1, 0x0, 0x0, 0x40880}, 0x20000800)
ioctl$auto(0xffffffffffffffff, 0x4bfa, 0x1)
fcntl$auto(0xffffffffffffffff, 0x400, 0x1)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200026bd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x6, 0x106)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, 0x0, 0x4)
bind$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x3, @empty}, 0x6a)
getsockopt$auto_SO_TXTIME(r2, 0x0, 0x3d, 0x0, &(0x7f0000000180)=0x3)
mmap$auto(0x0, 0x31c, 0x200df, 0x9b72, 0x7, 0x28000)
r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
ioctl$auto_I2C_SMBUS(r4, 0x720, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
ioctl$auto_OSS_ALSAEMULVER(0xffffffffffffffff, 0x40086602, &(0x7f0000000100))
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)

13.65857933s ago: executing program 5 (id=1462):
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
r0 = bpf$auto(0x0, 0x0, 0x6f4)
socket(0x11, 0x80003, 0x300)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
ioctl$auto_FIGETBSZ(r0, 0x2, 0x9)
r1 = socket(0x8, 0x2, 0x3)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r1)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/default/stable_secret\x00', 0x40d02, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
memfd_create$auto(0x0, 0x9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0xe8)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x2a081, 0x0)
write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0)
open(0x0, 0x40bc2, 0x1c0)
mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd)

12.394492018s ago: executing program 2 (id=1464):
r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, 0x0, 0x341, 0x0)
fcntl$auto_F_GETSIG(r0, 0xb, 0x29fb88a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48)
fchmodat$auto(r2, &(0x7f0000000080)='./cgroup\x00', 0x3)
recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r3 = socket(0xa, 0x2, 0x0)
getsockopt$auto(r3, 0x1, 0x49, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mprotect$auto(0x200000000000, 0x806121, 0x4)
gettimeofday$auto(&(0x7f0000000180)={0x7, 0x9}, 0x0)
tkill$auto(0x1, 0x9)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)

12.299905873s ago: executing program 5 (id=1466):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x123b80, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x3, 0x15)
r0 = socket(0x1d, 0x2, 0x6)
bind$auto(r0, 0x0, 0x13)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0x14f, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x2b242, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
open(0x0, 0x261c2, 0x84)
socket(0xa, 0x5, 0x84)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0)
write$auto(r1, 0x0, 0xc3)

11.920468216s ago: executing program 5 (id=1467):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r0, 0x0, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x101100, 0xa6)
r1 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mq_open$auto(0x0, 0x1, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006})
socket(0x2, 0x80805, 0x0)
r2 = eventfd$auto(0x9)
writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/14, 0xe)
read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000280)=""/27, 0xfe52)
getrlimit$auto(0x3, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/full_scans\x00', 0x40080, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$auto(r5, 0x110, 0x4, 0x0, 0x4)
preadv$auto(r0, 0x0, 0x8, 0x1101, 0x6)

10.093250603s ago: executing program 2 (id=1473):
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x7352, 0x36, 0x65f, 0x80000001, 0x7, 0x3, 0x2, 0x7, 0x7, 0x4, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x5)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket(0x2, 0x801, 0x84)
r0 = socket(0x2, 0x3, 0x1)
connect$auto(r0, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x4}, 0x2)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55)
capget$auto(0x0, 0xfffffffffffffffe)
setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, 0x0, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r2)
read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1200"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

7.582156085s ago: executing program 2 (id=1477):
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
r2 = open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r3 = socket(0x15, 0x5, 0x0)
setsockopt$auto_SO_BUSY_POLL_BUDGET(r3, 0x1, 0x46, 0x0, 0x94)
ioctl$auto(r0, 0xa, r1)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0)
ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)=<r5=>r0)
r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
clone$auto(0xffffffffffffff80, 0x8000000000000001, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x8000, 0xfff)
sendmsg$auto_TIPC_NL_LINK_SET(r5, &(0x7f0000000280)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001ac0)={0x1114, r6, 0x7480a65e61a86687, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x1018, 0x3, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@local}, @generic="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", @typed={0xc, 0x90, 0x0, 0x0, @u64=0x2}]}, @TIPC_NLA_UNSPEC={0xe2, 0x0, "69875069de9a0b90681ab7ba0afc89a074f09dd5cb659188a747bb5bf5185dc82f0a0a7f5e61f14287b56a623a97f64845be39200295b2de12faa690de93b7ab315e90c3ff2858b29d8055fd62e3f002ec873c851ff4f077f6a4580e8432064f41f4ba32bb565ad43fbd276104df2fd1cb8aea2791ac7ef9d9b9c040b9373c5430e3590eda5f824c20bc58f3a53051d49826450ab4b65ce027affe24a40f751989581ac9a427ae956be52aeb2d7b8f6a919b6e795fd5e142af4d6f29540df6c7854e76386150434e68c526c2053cae762feada68de87d7490f4ddf5fcb7f"}]}, 0x1114}}, 0x840)
pread64$auto(r4, 0x0, 0x8, 0x586)
ioctl$auto_BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000ac0)={@inferred=r2, "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"})
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r7, &(0x7f0000000200)={0x0, 0x9}, 0x7)

6.25938716s ago: executing program 2 (id=1479):
mmap$auto(0x0, 0x4020009, 0xde, 0x1f, 0xffffffffffffffff, 0x7ffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0)
ioprio_set$auto(0x3, 0x0, 0x4b34)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyv7\x00', 0xc8c0, 0x0)
capget$auto(0x0, 0xfffffffffffffffe)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4bf8, r0)
write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)="205c2c430cd9ca9a20370a", 0xb)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/driver/nvram\x00', 0x10f403, 0x0)
pread64$auto(r1, 0x0, 0x800003, 0x270)
mmap$auto(0x1, 0x400009, 0x200, 0x20009b76, 0x2, 0x8000)
setresuid$auto(0x0, 0x0, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb1\x00', 0x84963, 0x0)
write$auto_proc_mem_operations_base(r2, &(0x7f0000000300)="8115cebe0e720304bb4c9df8caf086cb05312566618f806c187cf872cc0953b3fa", 0x21)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7fff)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0)

5.78712244s ago: executing program 0 (id=1480):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40041, 0x0)
open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x0, 0x44c)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100)
bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200)

5.262901458s ago: executing program 0 (id=1481):
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0)
socket(0x29, 0x800, 0xa)
mmap$auto(0x0, 0x0, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
mq_timedsend$auto(0xffffffffffffffff, 0x0, 0xe74, 0x9, &(0x7f00000000c0)={0xfffffffffffffffd, 0x8})
sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4004010)
mknod$auto(0x0, 0x1001, 0x4)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
open(&(0x7f0000000080)='./file0\x00', 0x161702, 0x100)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0x201, 0x9b72, 0x2, 0x8000)
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x7)
r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0)
write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0xfffffc96)

4.040922341s ago: executing program 0 (id=1482):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r0, 0x0)
r2 = socket(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3)
read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0)
fanotify_init$auto(0x65, 0x2)
socket(0x22, 0x3, 0x0)
clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
write$auto(r2, &(0x7f0000000000)='-\xd3', 0xfdef)

3.769691418s ago: executing program 4 (id=1483):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0)
r1 = prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0)
ioctl$auto_OSS_ALSAEMULVER2(r1, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d5")
landlock_restrict_self$auto(r0, 0xfffffffe)
mmap$auto(0xc8, 0xe2, 0x3, 0xeb1, r0, 0x2)
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(r2, 0x8, 0x2000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
rename$auto(&(0x7f0000000100)='./cgroup\x00', &(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x61)
close_range$auto(0x2, 0x8, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
syz_clone(0x624b7400, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0)

3.10092182s ago: executing program 4 (id=1484):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/dev/cdrom/autoclose\x00', 0x2002, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
open(&(0x7f00000001c0)='./file0\x00', 0x60142, 0x130)
openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x101101, 0x0)
r2 = socket(0x23, 0x80805, 0x0)
getsockopt$auto(r2, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1d48, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
getsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0x4080aebf, 0x0)

3.098404669s ago: executing program 0 (id=1485):
unshare$auto(0x8)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f80, 0x0)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
fsopen$auto(0x0, 0x1)
prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0xb)
madvise$auto(0xfffffffffffffffa, 0x7f, 0x10)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r2)
sendmsg$auto_OVS_DP_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r4 = socket(0x1d, 0x3, 0x1)
getsockopt$auto(r4, 0x65, 0x6, 0xffffffffffffffff, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r5, r5, 0x0, 0x3)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

2.818399847s ago: executing program 2 (id=1486):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800)
timer_create$auto(0x9, 0x0, 0x0)
read$auto(0x3, 0x0, 0x8080)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64"})
process_mrelease$auto(0xffffffffffffffff, 0xa)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0)
r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec4\x00', 0x800, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x4, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x40, 0x5, 0x2, 0x4, 0x2})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)

1.960211296s ago: executing program 4 (id=1487):
socket(0x2, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socket(0xa, 0x2, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0xa, 0x801, 0x84)
r1 = socket(0xa, 0x2, 0x88)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x8a001, 0x0)
epoll_create$auto(0x20003f)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fcntl$auto(r3, 0x410, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)

1.697827565s ago: executing program 4 (id=1488):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x400001, 0x0)
r0 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
read$auto_dai_list_fops_(r0, &(0x7f00000001c0)=""/54, 0x36)
close_range$auto(0x2, 0x8, 0x0)
pipe2$auto(&(0x7f00000000c0), 0x0)
poll$auto(&(0x7f0000000d40)={0x3, 0x2, 0xa}, 0x5, 0x3fd)
close_range$auto(0x2, 0x8, 0x0)
r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
clone$auto(0x5, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x1, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r3, 0xc0104d08, r3)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x8, 0x0)
r4 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r4, 0x11, 0x64, 0x0, 0x8)
io_uring_enter$auto(r4, 0x31b65257, 0x10001, 0x80000001, &(0x7f0000000240)="743f76db515d9e5c4036d414a1ad6b7dcd22062553c16f9849cc28ddeda4847489ed1e3255494627cb36bd669af7077fadfd3d16627d6be8ace60bb8d3d7dfdabede1b8348ccf0c175977ca6c73cb09d3d39aa4246f3bbf332abc5a17fb0d6072c0a59162f9706abae62fdf3c211c7a73bfef9d72b76e7aeaade6d27ec64a7c6487c56c99a092f5bd7625656a98d17c546a9498e7fbc67b6e3e0000be6f7f8166dfcdf65ee0be2c8d69ad230b8fc3351dbad13", 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'})
close_range$auto(0x2, 0x8, 0x0)

1.260047142s ago: executing program 4 (id=1489):
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(0x0, 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(r0, 0x8, 0xfffffe02)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
socketcall$auto(0x8000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0x3, 0xae41, r3)

1.212939196s ago: executing program 0 (id=1490):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0)
mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)={0x18, r2, 0x1, 0x70bd29, 0xddfdc00, {}, [@HWSIM_ATTR_NO_VIF={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000083c}, 0x200008d0)
socket(0xa, 0x802, 0x3a)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r4 = fcntl$auto_F_DUPFD(r3, 0x0, r3)
ioctl$auto_vmwgfx_driver_fops_vmwgfx_drv(r4, 0x0, &(0x7f0000000000)="090bdb70d726e558a345cb58a01a9260fe797efced430832e041e5b4448edc94099e69b14ff229aaffe01b8c7cc0a4e4685c3e05699f4688b1ff06722e58877038caeb5a907ed463f4133ad88082cdf0207393724e3701ee9dcb69af2261a670ad24917121a7db34b8152aca9292b1bed9034d4e7baa6b6a23ea437a5995faf65fafa7b0df371cd7322417527efa70e95d3a3d32a69abd7e859e1057223c308821049e83e5e3399c65eddd235c0b2a35b1170f1800ea040a5dffa5c5d23151138887d66d85828b3bc39683280490b449a1029e8c7b7de03345f0d2625869fa1dfbc5ae982dcbc2ceda")
read$auto_tun_fops_tun(r4, &(0x7f0000000180)=""/106, 0x6a)
r5 = socket(0xa, 0x1, 0x100)
read$auto(r4, &(0x7f0000000980)='-$+!{!$!/&-]\x00', 0x7fff)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r5)
sendmsg$auto_NL80211_CMD_CONNECT(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x854}, 0x4)
r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r4, 0x8004b709, &(0x7f0000000200)=0x7f)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r8, 0x1, 0x7ff)
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x62, 0x27dd)
ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000240)={0x3, @raw=0x6, @raw=0x8, 0xdd2, 0x83, '\x00', {0x5, 0xffff, 0x20, <r9=>0xee00, 0x0, 0x3, 0x10001, 0xb, {0x1, 0xffffffff}, {0xb, 0x8}, {0x7f, 0x6}, 0x6, 0xae7c, 0xf6, 0xf, 0x8001, 0x7, 0x2, 0x3, 0x9, 0x9, '\x00', 0x7, 0x8, 0x5, 0x8}})
sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000009c0)={0x54c, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7fff}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x22d, 0x6e, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @pid=r7}, @nested={0x11f, 0xd1, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @pid=r8}, @nested={0x4, 0xa6}, @generic="75a23b06c0e6081c1d680dca9e556b5874042405b5735b9183b2", @typed={0x8, 0x85, 0x0, 0x0, @fd=r4}, @generic="c6fb2490c224ec999c952e5d3c87c9947d39fb81261cd02e407ff4c79c3edda3cb2ead6c26cec83e3a8883e4c02fbfaeb3db6bf4791d52097ef3945afa0df85562d06748ec124a654ea536411a0f964cbfdc25a504ab225dc9823d69e9de24d6e9d098c1f869321dd2ba066be0936c29228ba55ffed3d5c1c243f6607e32b6013850fcbf129eb45ac2a27eeaf7eb96de7853797dd43665e444c6624da106033767ea4d0e1e3e132895941656ed6eb4f05c7cc292f358acc0a2fa9deea531da8d18de64add4d2a928fb13a12f9105e3a5578fd261ee8f0a075716a13bf84aa70069", @typed={0x8, 0x25, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x116}]}, @generic="f00339fc0a9b7cc84cfce0dac0069e86cc6a610828c33d874240d5727a289db400a64744a01e245a05c61b5d8057c269203609ac6710bdb1d99d116f886dbfc25b04374537a1ffb6ee07b1e133a6f168698b2e93300d143babd12a90a2ee0e84f8f3691d4c09898b692b62e3d9345e06b59010e12eca73c87d1a5e2cfbd2c908541d05ed79d9b3", @generic="a0112d6458a55a8bcc3cf8cfff127a66ed6a92460e13ddbf09f7a2bff5f385657f6164900336e1a2bfa89f2f4ff5e92b4c33fdab52bd597fee13dab083f1a8291086654dd53022b1e543d3b2b6fa579d3f22033248880838d5e0a92e57120f28bec17177df5adf53c92a4a14a620ae624c8d", @typed={0x8, 0x16, 0x0, 0x0, @fd}]}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x380000}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x2f4, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x2ed, 0x2, "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"}]}]}, 0x54c}, 0x1, 0x0, 0x0, 0x800}, 0x4801)
close_range$auto(0x2, r0, 0x0)
openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)

856.936771ms ago: executing program 2 (id=1491):
openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x7, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d41, 0x7, 0x7, 0x6]}, 0x0)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket(0xa, 0x5, 0x84)
socket(0x2, 0x2, 0x0)
socketpair$auto(0xffffffff, 0x2, 0x63, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0)
ioctl$auto(0x3, 0x40106f52, r0)

85.378718ms ago: executing program 0 (id=1492):
openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000140), 0x121140, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40100, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9})
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x1d48, 0x0)
io_uring_register$auto(r1, 0x3, 0x0, 0x9)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x3, 0x2, 0x3, 0x1)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x3, 0x2, 0x4)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x401, 0x200000000000000, 0xfffffffffffffff8, 0x0)
setrlimit$auto(0xc, &(0x7f0000000040)={0x5, 0x2})
socket(0xf, 0x800, 0x4)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0)
ioprio_set$auto(0x1, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x8, 0x7, 0x9, 0x3)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0)
write$auto(r2, &(0x7f00000001c0)=',\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)

0s ago: executing program 4 (id=1493):
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0x14, 0xffffffffffffffff, 0x8000)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(0x0, 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24)

kernel console output (not intermixed with test programs):

he_alloc_noprof+0x7b/0x6e0
[  222.687560][ T7497]  ? __proc_create+0x2cb/0x8c0
[  222.687598][ T7497]  __proc_create+0x2cb/0x8c0
[  222.687628][ T7497]  ? __pfx___proc_create+0x10/0x10
[  222.687662][ T7497]  ? _raw_write_unlock+0x28/0x50
[  222.687721][ T7497]  ? proc_register+0x559/0x8a0
[  222.687755][ T7497]  proc_create_reg+0x75/0x170
[  222.687789][ T7497]  proc_create_net_data+0x8e/0x1c0
[  222.687821][ T7497]  ? __pfx_proc_create_net_data+0x10/0x10
[  222.687849][ T7497]  ? net_generic+0xea/0x2a0
[  222.687897][ T7497]  ? __pfx_vlan_init_net+0x10/0x10
[  222.687928][ T7497]  vlan_proc_init+0xe6/0x160
[  222.687974][ T7497]  ops_init+0x1e2/0x5f0
[  222.688007][ T7497]  setup_net+0x118/0x3a0
[  222.688037][ T7497]  ? __pfx_setup_net+0x10/0x10
[  222.688064][ T7497]  ? lockdep_init_map_type+0x5c/0x250
[  222.688105][ T7497]  ? mutex_init_lockep+0x110/0x150
[  222.688152][ T7497]  copy_net_ns+0x46f/0x7c0
[  222.688188][ T7497]  create_new_namespaces+0x3ea/0xac0
[  222.688228][ T7497]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  222.688263][ T7497]  ksys_unshare+0x473/0xad0
[  222.688304][ T7497]  ? __pfx_ksys_unshare+0x10/0x10
[  222.688355][ T7497]  __x64_sys_unshare+0x31/0x40
[  222.688391][ T7497]  do_syscall_64+0x106/0xf80
[  222.688419][ T7497]  ? clear_bhb_loop+0x40/0x90
[  222.688455][ T7497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.688485][ T7497] RIP: 0033:0x7fb3d3b9c819
[  222.688517][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.688547][ T7497] RSP: 002b:00007fb3d4a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  222.688576][ T7497] RAX: ffffffffffffffda RBX: 00007fb3d3e15fa0 RCX: 00007fb3d3b9c819
[  222.688595][ T7497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  222.688612][ T7497] RBP: 00007fb3d3c32c91 R08: 0000000000000000 R09: 0000000000000000
[  222.688629][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.688646][ T7497] R13: 00007fb3d3e16038 R14: 00007fb3d3e15fa0 R15: 00007ffc6e4ef7f8
[  222.688693][ T7497]  </TASK>
[  222.975640][ T7497] 8021q: can't create entry in proc filesystem!
[  223.592062][ T7509] nvme_fcloop: unknown parameter or missing value '7'
[  224.457728][ T7519] futex_wake_op: syz.3.317 tries to shift op by -2048; fix this program
[  224.467480][ T7519] futex_wake_op: syz.3.317 tries to shift op by -2048; fix this program
[  224.492782][ T7518] 0x000000000001-0x000000020000 : ""
[  224.593131][ T7518] ftl_cs: FTL header corrupt!
[  227.393193][   T30] audit: type=1804 audit(4294967374.600:4): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.335" name="/newroot/80/file0" dev="tmpfs" ino=432 res=1 errno=0
[  227.442213][   T30] audit: type=1804 audit(4294967374.630:5): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.335" name="/newroot/80/file0" dev="tmpfs" ino=432 res=1 errno=0
[  229.200205][ T7590] nvme_fcloop: unknown parameter or missing value '7'
[  229.327420][ T7595] random: crng reseeded on system resumption
[  229.504100][ T7595] hub 1-0:1.0: USB hub found
[  229.530790][ T7595] hub 1-0:1.0: 1 port detected
[  230.111835][ T7614] netlink: 9 bytes leftover after parsing attributes in process `syz.0.341'.
[  232.229681][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'.
[  232.534028][ T7642] team0: Port device team_slave_1 removed
[  236.446384][ T7680] FAULT_INJECTION: forcing a failure.
[  236.446384][ T7680] name failslab, interval 1, probability 0, space 0, times 0
[  236.558852][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.1.355 Not tainted syzkaller #0 PREEMPT(full) 
[  236.558897][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  236.558915][ T7680] Call Trace:
[  236.558927][ T7680]  <TASK>
[  236.558940][ T7680]  dump_stack_lvl+0x100/0x190
[  236.558996][ T7680]  should_fail_ex.cold+0x5/0xa
[  236.559036][ T7680]  should_failslab+0xc2/0x120
[  236.559078][ T7680]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  236.559130][ T7680]  ? __proc_create+0x2cb/0x8c0
[  236.559171][ T7680]  __proc_create+0x2cb/0x8c0
[  236.559205][ T7680]  ? __pfx___proc_create+0x10/0x10
[  236.559252][ T7680]  _proc_mkdir+0xb9/0x210
[  236.559286][ T7680]  ? __pfx__proc_mkdir+0x10/0x10
[  236.559317][ T7680]  ? net_generic+0xea/0x2a0
[  236.559371][ T7680]  ? __pfx_vlan_init_net+0x10/0x10
[  236.559404][ T7680]  vlan_proc_init+0x93/0x160
[  236.559454][ T7680]  ops_init+0x1e2/0x5f0
[  236.559491][ T7680]  setup_net+0x118/0x3a0
[  236.559524][ T7680]  ? __pfx_setup_net+0x10/0x10
[  236.559554][ T7680]  ? lockdep_init_map_type+0x5c/0x250
[  236.559601][ T7680]  ? mutex_init_lockep+0x110/0x150
[  236.559655][ T7680]  copy_net_ns+0x46f/0x7c0
[  236.559702][ T7680]  create_new_namespaces+0x3ea/0xac0
[  236.559749][ T7680]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  236.559790][ T7680]  ksys_unshare+0x473/0xad0
[  236.559837][ T7680]  ? __pfx_ksys_unshare+0x10/0x10
[  236.559895][ T7680]  __x64_sys_unshare+0x31/0x40
[  236.559938][ T7680]  do_syscall_64+0x106/0xf80
[  236.559969][ T7680]  ? clear_bhb_loop+0x40/0x90
[  236.560009][ T7680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.560042][ T7680] RIP: 0033:0x7f443b99c819
[  236.560069][ T7680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.560099][ T7680] RSP: 002b:00007f4439bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  236.560129][ T7680] RAX: ffffffffffffffda RBX: 00007f443bc15fa0 RCX: 00007f443b99c819
[  236.560150][ T7680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  236.560169][ T7680] RBP: 00007f443ba32c91 R08: 0000000000000000 R09: 0000000000000000
[  236.560189][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.560209][ T7680] R13: 00007f443bc16038 R14: 00007f443bc15fa0 R15: 00007ffc0c3d0878
[  236.560252][ T7680]  </TASK>
[  236.820505][ T7680] 8021q: can't create entry in proc filesystem!
[  237.599330][ T7693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'.
[  237.641169][ T7693] vcan0: entered promiscuous mode
[  238.362667][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'.
[  238.373508][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'.
[  240.293831][ T7733] futex_wake_op: syz.2.365 tries to shift op by -2048; fix this program
[  240.308411][ T7733] futex_wake_op: syz.2.365 tries to shift op by -2048; fix this program
[  240.531053][ T7733] 0x000000000001-0x000000020000 : ""
[  240.705132][ T7733] ftl_cs: FTL header corrupt!
[  242.139196][   T30] audit: type=1804 audit(4294967389.330:6): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.369" name="/newroot/94/file0" dev="tmpfs" ino=505 res=1 errno=0
[  242.234276][   T30] audit: type=1804 audit(4294967389.330:7): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.369" name="/newroot/94/file0" dev="tmpfs" ino=505 res=1 errno=0
[  242.309444][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  244.493620][ T7786] netlink: 9 bytes leftover after parsing attributes in process `syz.1.378'.
[  245.897701][ T7802] futex_wake_op: syz.0.381 tries to shift op by -2048; fix this program
[  245.906856][ T7802] futex_wake_op: syz.0.381 tries to shift op by -2048; fix this program
[  246.030044][ T7802] 0x000000000001-0x000000020000 : ""
[  246.116939][ T7802] ftl_cs: FTL header corrupt!
[  246.128963][   T58] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow.
[  249.851351][ T7831] FAULT_INJECTION: forcing a failure.
[  249.851351][ T7831] name failslab, interval 1, probability 0, space 0, times 0
[  249.977775][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.1.395 Not tainted syzkaller #0 PREEMPT(full) 
[  249.977819][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  249.977853][ T7831] Call Trace:
[  249.977868][ T7831]  <TASK>
[  249.977883][ T7831]  dump_stack_lvl+0x100/0x190
[  249.977939][ T7831]  should_fail_ex.cold+0x5/0xa
[  249.977978][ T7831]  should_failslab+0xc2/0x120
[  249.978017][ T7831]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  249.978074][ T7831]  ? __proc_create+0x2cb/0x8c0
[  249.978118][ T7831]  __proc_create+0x2cb/0x8c0
[  249.978155][ T7831]  ? __pfx___proc_create+0x10/0x10
[  249.978195][ T7831]  ? _raw_write_unlock+0x28/0x50
[  249.978261][ T7831]  ? proc_register+0x559/0x8a0
[  249.978302][ T7831]  proc_create_reg+0x75/0x170
[  249.978342][ T7831]  proc_create_data+0x86/0x110
[  249.978380][ T7831]  ? __pfx_proc_create_data+0x10/0x10
[  249.978417][ T7831]  ? cache_register_net+0x137/0x5e0
[  249.978455][ T7831]  ? cache_register_net+0x137/0x5e0
[  249.978501][ T7831]  cache_register_net+0x25a/0x5e0
[  249.978542][ T7831]  gss_svc_init_net+0x98/0x640
[  249.978594][ T7831]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  249.978632][ T7831]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  249.978695][ T7831]  ops_init+0x1e2/0x5f0
[  249.978732][ T7831]  setup_net+0x118/0x3a0
[  249.978766][ T7831]  ? __pfx_setup_net+0x10/0x10
[  249.978796][ T7831]  ? lockdep_init_map_type+0x5c/0x250
[  249.978843][ T7831]  ? mutex_init_lockep+0x110/0x150
[  249.978896][ T7831]  copy_net_ns+0x46f/0x7c0
[  249.978938][ T7831]  create_new_namespaces+0x3ea/0xac0
[  249.978986][ T7831]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  249.979030][ T7831]  ksys_unshare+0x473/0xad0
[  249.979079][ T7831]  ? __pfx_ksys_unshare+0x10/0x10
[  249.979141][ T7831]  __x64_sys_unshare+0x31/0x40
[  249.979187][ T7831]  do_syscall_64+0x106/0xf80
[  249.979220][ T7831]  ? clear_bhb_loop+0x40/0x90
[  249.979301][ T7831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.979338][ T7831] RIP: 0033:0x7f443b99c819
[  249.979368][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  249.979402][ T7831] RSP: 002b:00007f4439bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  249.979435][ T7831] RAX: ffffffffffffffda RBX: 00007f443bc15fa0 RCX: 00007f443b99c819
[  249.979457][ T7831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  249.979478][ T7831] RBP: 00007f443ba32c91 R08: 0000000000000000 R09: 0000000000000000
[  249.979498][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  249.979517][ T7831] R13: 00007f443bc16038 R14: 00007f443bc15fa0 R15: 00007ffc0c3d0878
[  249.979562][ T7831]  </TASK>
[  251.008248][   T30] audit: type=1804 audit(4294967398.210:8): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.390" name="/newroot/97/file0" dev="tmpfs" ino=521 res=1 errno=0
[  251.100428][   T30] audit: type=1804 audit(4294967398.210:9): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.390" name="/newroot/97/file0" dev="tmpfs" ino=521 res=1 errno=0
[  251.793358][ T7872] futex_wake_op: syz.3.393 tries to shift op by -2048; fix this program
[  251.848004][ T7872] futex_wake_op: syz.3.393 tries to shift op by -2048; fix this program
[  251.983456][ T7871] 0x000000000001-0x000000020000 : ""
[  252.028671][ T7871] ftl_cs: FTL header corrupt!
[  256.073022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  256.079444][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  257.745603][ T7935] FAULT_INJECTION: forcing a failure.
[  257.745603][ T7935] name failslab, interval 1, probability 0, space 0, times 0
[  257.911901][ T7935] CPU: 0 UID: 0 PID: 7935 Comm: syz.2.406 Not tainted syzkaller #0 PREEMPT(full) 
[  257.911947][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  257.911966][ T7935] Call Trace:
[  257.911977][ T7935]  <TASK>
[  257.911989][ T7935]  dump_stack_lvl+0x100/0x190
[  257.912051][ T7935]  should_fail_ex.cold+0x5/0xa
[  257.912093][ T7935]  should_failslab+0xc2/0x120
[  257.912132][ T7935]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  257.912188][ T7935]  ? __proc_create+0x2cb/0x8c0
[  257.912231][ T7935]  __proc_create+0x2cb/0x8c0
[  257.912267][ T7935]  ? __pfx___proc_create+0x10/0x10
[  257.912311][ T7935]  ? mark_held_locks+0x40/0x70
[  257.912381][ T7935]  _proc_mkdir+0xb9/0x210
[  257.912417][ T7935]  ? __pfx__proc_mkdir+0x10/0x10
[  257.912451][ T7935]  ? sctp_defaults_init+0x720/0xd90
[  257.912496][ T7935]  sctp_proc_init+0x59/0x270
[  257.912552][ T7935]  ? __pfx_sctp_defaults_init+0x10/0x10
[  257.912592][ T7935]  sctp_defaults_init+0x758/0xd90
[  257.912629][ T7935]  ? __pfx_sctp_defaults_init+0x10/0x10
[  257.912664][ T7935]  ops_init+0x1e2/0x5f0
[  257.912703][ T7935]  setup_net+0x118/0x3a0
[  257.912739][ T7935]  ? __pfx_setup_net+0x10/0x10
[  257.912770][ T7935]  ? lockdep_init_map_type+0x5c/0x250
[  257.912819][ T7935]  ? mutex_init_lockep+0x110/0x150
[  257.912875][ T7935]  copy_net_ns+0x46f/0x7c0
[  257.912919][ T7935]  create_new_namespaces+0x3ea/0xac0
[  257.912967][ T7935]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  257.913010][ T7935]  ksys_unshare+0x473/0xad0
[  257.913059][ T7935]  ? __pfx_ksys_unshare+0x10/0x10
[  257.913122][ T7935]  __x64_sys_unshare+0x31/0x40
[  257.913167][ T7935]  do_syscall_64+0x106/0xf80
[  257.913200][ T7935]  ? clear_bhb_loop+0x40/0x90
[  257.913242][ T7935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.913277][ T7935] RIP: 0033:0x7fb3d3b9c819
[  257.913304][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.913336][ T7935] RSP: 002b:00007fb3d4a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  257.913367][ T7935] RAX: ffffffffffffffda RBX: 00007fb3d3e15fa0 RCX: 00007fb3d3b9c819
[  257.913389][ T7935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  257.913409][ T7935] RBP: 00007fb3d3c32c91 R08: 0000000000000000 R09: 0000000000000000
[  257.913429][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.913449][ T7935] R13: 00007fb3d3e16038 R14: 00007fb3d3e15fa0 R15: 00007ffc6e4ef7f8
[  257.913495][ T7935]  </TASK>
[  259.190177][ T7950] futex_wake_op: syz.3.408 tries to shift op by -2048; fix this program
[  259.317419][ T7950] futex_wake_op: syz.3.408 tries to shift op by -2048; fix this program
[  259.422071][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807f36f000: rx timeout, send abort
[  259.430826][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f36f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  260.431870][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  261.188472][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033e49c00: rx timeout, send abort
[  261.696888][    C1] vcan0: j1939_tp_rxtimer: 0xffff888033e49c00: abort rx timeout. Force session deactivation
[  263.156892][ T7975] syz.3.410 (7975) used greatest stack depth: 19672 bytes left
[  263.313274][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'.
[  263.350366][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'.
[  263.769103][ T8014] FAULT_INJECTION: forcing a failure.
[  263.769103][ T8014] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  263.840069][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.0.420 Not tainted syzkaller #0 PREEMPT(full) 
[  263.840115][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  263.840135][ T8014] Call Trace:
[  263.840145][ T8014]  <TASK>
[  263.840158][ T8014]  dump_stack_lvl+0x100/0x190
[  263.840218][ T8014]  should_fail_ex.cold+0x5/0xa
[  263.840253][ T8014]  ? prepare_alloc_pages+0x16d/0x5f0
[  263.840299][ T8014]  should_fail_alloc_page+0xeb/0x140
[  263.840341][ T8014]  prepare_alloc_pages+0x1f0/0x5f0
[  263.840391][ T8014]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  263.840454][ T8014]  ? rcu_is_watching+0x12/0xc0
[  263.840510][ T8014]  ? trace_mm_page_alloc+0x17a/0x1d0
[  263.840552][ T8014]  ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0
[  263.840718][ T8014]  ? kernel_text_address+0xa1/0x100
[  263.840760][ T8014]  ? unwind_get_return_address+0x59/0xa0
[  263.840788][ T8014]  ? arch_stack_walk+0xa6/0xf0
[  263.840813][ T8014]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  263.840866][ T8014]  ? stack_depot_save_flags+0x27/0x9d0
[  263.840898][ T8014]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  263.840935][ T8014]  ? pcpu_get_vm_areas+0x520/0x55d0
[  263.840960][ T8014]  ? pcpu_create_chunk+0x254/0x730
[  263.841032][ T8014]  ? pcpu_create_chunk+0x254/0x730
[  263.841071][ T8014]  ? pcpu_alloc_noprof+0x18c4/0x1c50
[  263.841112][ T8014]  alloc_pages_bulk_noprof+0x782/0x1490
[  263.841164][ T8014]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  263.841215][ T8014]  ? alloc_pages_noprof+0x238/0x390
[  263.841245][ T8014]  __kasan_populate_vmalloc+0xf0/0x210
[  263.841290][ T8014]  pcpu_get_vm_areas+0x2df1/0x55d0
[  263.841340][ T8014]  ? __pfx_pcpu_get_vm_areas+0x10/0x10
[  263.841382][ T8014]  pcpu_create_chunk+0x254/0x730
[  263.841428][ T8014]  pcpu_alloc_noprof+0x18c4/0x1c50
[  263.841481][ T8014]  bpf_map_alloc_percpu+0x9a/0xf0
[  263.841508][ T8014]  ? __pfx_bpf_map_alloc_percpu+0x10/0x10
[  263.841537][ T8014]  ? __pfx___might_resched+0x10/0x10
[  263.841575][ T8014]  ? __bpf_map_area_alloc+0x13a/0x200
[  263.841610][ T8014]  array_map_alloc+0x553/0x750
[  263.841648][ T8014]  ? __pfx_array_map_mem_usage+0x10/0x10
[  263.841679][ T8014]  map_create+0x84e/0x2ba0
[  263.841701][ T8014]  ? futex_unqueue+0x13d/0x2c0
[  263.841733][ T8014]  ? __futex_wait+0x256/0x300
[  263.841778][ T8014]  ? __pfx_map_create+0x10/0x10
[  263.841802][ T8014]  ? __might_fault+0xc5/0x140
[  263.841837][ T8014]  ? __might_fault+0xc5/0x140
[  263.841885][ T8014]  __sys_bpf+0x2091/0x4b90
[  263.841919][ T8014]  ? __pfx___sys_bpf+0x10/0x10
[  263.841949][ T8014]  ? __pfx_futex_wait+0x10/0x10
[  263.842040][ T8014]  ? do_writev+0x214/0x340
[  263.842070][ T8014]  ? do_futex+0x192/0x350
[  263.842121][ T8014]  ? xfd_validate_state+0x129/0x190
[  263.842165][ T8014]  __x64_sys_bpf+0x7b/0xc0
[  263.842195][ T8014]  ? lockdep_hardirqs_on+0x78/0x100
[  263.842219][ T8014]  do_syscall_64+0x106/0xf80
[  263.842242][ T8014]  ? clear_bhb_loop+0x40/0x90
[  263.842272][ T8014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.842297][ T8014] RIP: 0033:0x7f8eb159c819
[  263.842318][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.842341][ T8014] RSP: 002b:00007f8eb23aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  263.842365][ T8014] RAX: ffffffffffffffda RBX: 00007f8eb1815fa0 RCX: 00007f8eb159c819
[  263.842381][ T8014] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000
[  263.842395][ T8014] RBP: 00007f8eb1632c91 R08: 0000000000000000 R09: 0000000000000000
[  263.842410][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.842424][ T8014] R13: 00007f8eb1816038 R14: 00007f8eb1815fa0 R15: 00007ffcd3071c48
[  263.842455][ T8014]  </TASK>
[  264.600739][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'.
[  265.120544][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'.
[  270.535729][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[  270.557193][ T8076] netlink: 'syz.1.432': attribute type 1 has an invalid length.
[  270.566903][ T8076] netlink: 'syz.1.432': attribute type 6 has an invalid length.
[  272.758122][ T8104] Invalid ELF header magic: != ELF
[  273.644472][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'.
[  273.670555][ T8118] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[  273.678250][ T8118] netlink: 'syz.1.443': attribute type 6 has an invalid length.
[  274.338092][ T5828] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  276.196301][ T8154] FAULT_INJECTION: forcing a failure.
[  276.196301][ T8154] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  276.262552][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.3.452 Not tainted syzkaller #0 PREEMPT(full) 
[  276.262600][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  276.262621][ T8154] Call Trace:
[  276.262632][ T8154]  <TASK>
[  276.262645][ T8154]  dump_stack_lvl+0x100/0x190
[  276.262705][ T8154]  should_fail_ex.cold+0x5/0xa
[  276.262741][ T8154]  ? prepare_alloc_pages+0x16d/0x5f0
[  276.262787][ T8154]  should_fail_alloc_page+0xeb/0x140
[  276.262827][ T8154]  prepare_alloc_pages+0x1f0/0x5f0
[  276.262876][ T8154]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  276.262931][ T8154]  ? __lock_acquire+0x481/0x2630
[  276.262980][ T8154]  ? __pfx_css_rstat_updated+0x10/0x10
[  276.263023][ T8154]  ? lock_acquire+0x1cf/0x380
[  276.263068][ T8154]  ? find_held_lock+0x2b/0x80
[  276.263100][ T8154]  ? trace_ignore_this_task+0xbc/0x100
[  276.263157][ T8154]  ? rcu_is_watching+0x12/0xc0
[  276.263219][ T8154]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  276.263286][ T8154]  ? lru_gen_add_folio+0x20f/0x13e0
[  276.263329][ T8154]  ? lock_acquire+0x1cf/0x380
[  276.263375][ T8154]  ? find_held_lock+0x2b/0x80
[  276.263407][ T8154]  ? page_table_check_set+0x49a/0xa10
[  276.263442][ T8154]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  276.263480][ T8154]  ? policy_nodemask+0xed/0x4f0
[  276.263522][ T8154]  alloc_pages_mpol+0x1fb/0x550
[  276.263563][ T8154]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  276.263613][ T8154]  folio_alloc_mpol_noprof+0x36/0x340
[  276.263660][ T8154]  vma_alloc_folio_noprof+0xed/0x1d0
[  276.263704][ T8154]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  276.263765][ T8154]  do_anonymous_page+0xb3a/0x1fb0
[  276.263827][ T8154]  __handle_mm_fault+0x1d48/0x2b60
[  276.263888][ T8154]  ? __pfx___handle_mm_fault+0x10/0x10
[  276.263940][ T8154]  ? pte_offset_map_lock+0x174/0x320
[  276.263979][ T8154]  ? find_held_lock+0x2b/0x80
[  276.264026][ T8154]  ? follow_page_pte+0x5b3/0x1400
[  276.264077][ T8154]  handle_mm_fault+0x36d/0xa20
[  276.264134][ T8154]  __get_user_pages+0xf9c/0x34d0
[  276.264198][ T8154]  ? __pfx___get_user_pages+0x10/0x10
[  276.264255][ T8154]  populate_vma_page_range+0x267/0x3f0
[  276.264304][ T8154]  ? __pfx_populate_vma_page_range+0x10/0x10
[  276.264350][ T8154]  ? __pfx_find_vma_intersection+0x10/0x10
[  276.264392][ T8154]  ? do_mmap+0x93f/0x12f0
[  276.264437][ T8154]  __mm_populate+0x107/0x3a0
[  276.264482][ T8154]  ? __pfx___mm_populate+0x10/0x10
[  276.264528][ T8154]  ? up_write+0x290/0x4f0
[  276.264584][ T8154]  vm_mmap_pgoff+0x37f/0x470
[  276.264631][ T8154]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  276.264676][ T8154]  ? do_futex+0x192/0x350
[  276.264723][ T8154]  ? __pfx_do_futex+0x10/0x10
[  276.264765][ T8154]  ? find_held_lock+0x2b/0x80
[  276.264799][ T8154]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  276.264845][ T8154]  ksys_mmap_pgoff+0xe1/0x650
[  276.264885][ T8154]  ? __x64_sys_futex+0x34f/0x4d0
[  276.264929][ T8154]  ? __x64_sys_futex+0x358/0x4d0
[  276.264976][ T8154]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  276.265015][ T8154]  ? xfd_validate_state+0x129/0x190
[  276.265074][ T8154]  __x64_sys_mmap+0x125/0x190
[  276.265131][ T8154]  do_syscall_64+0x106/0xf80
[  276.265163][ T8154]  ? clear_bhb_loop+0x40/0x90
[  276.265212][ T8154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.265247][ T8154] RIP: 0033:0x7fbf8859c819
[  276.265277][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.265309][ T8154] RSP: 002b:00007fbf894c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  276.265342][ T8154] RAX: ffffffffffffffda RBX: 00007fbf88815fa0 RCX: 00007fbf8859c819
[  276.265364][ T8154] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  276.265384][ T8154] RBP: 00007fbf88632c91 R08: 0000000000000002 R09: 0000000000008000
[  276.265404][ T8154] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  276.265425][ T8154] R13: 00007fbf88816038 R14: 00007fbf88815fa0 R15: 00007ffcaae3f0e8
[  276.265468][ T8154]  </TASK>
[  277.600047][ T5833] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  277.732939][   T30] audit: type=1804 audit(4294967424.940:10): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.459" name="/newroot/110/file0" dev="tmpfs" ino=597 res=1 errno=0
[  277.770611][   T30] audit: type=1804 audit(4294967424.970:11): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.459" name="/newroot/110/file0" dev="tmpfs" ino=597 res=1 errno=0
[  278.875839][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  280.721557][   T30] audit: type=1804 audit(4294967427.920:12): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.470" name="/newroot/113/file0" dev="tmpfs" ino=606 res=1 errno=0
[  280.773356][   T30] audit: type=1804 audit(4294967427.920:13): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.470" name="/newroot/113/file0" dev="tmpfs" ino=606 res=1 errno=0
[  284.902906][ T8295] FAULT_INJECTION: forcing a failure.
[  284.902906][ T8295] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  284.941070][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.1.482 Not tainted syzkaller #0 PREEMPT(full) 
[  284.941115][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  284.941136][ T8295] Call Trace:
[  284.941147][ T8295]  <TASK>
[  284.941167][ T8295]  dump_stack_lvl+0x100/0x190
[  284.941227][ T8295]  should_fail_ex.cold+0x5/0xa
[  284.941262][ T8295]  ? prepare_alloc_pages+0x16d/0x5f0
[  284.941309][ T8295]  should_fail_alloc_page+0xeb/0x140
[  284.941352][ T8295]  prepare_alloc_pages+0x1f0/0x5f0
[  284.941402][ T8295]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  284.941465][ T8295]  ? rcu_is_watching+0x12/0xc0
[  284.941521][ T8295]  ? trace_mm_page_alloc+0x17a/0x1d0
[  284.941566][ T8295]  ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0
[  284.941626][ T8295]  ? kernel_text_address+0xa1/0x100
[  284.941687][ T8295]  ? unwind_get_return_address+0x59/0xa0
[  284.941728][ T8295]  ? arch_stack_walk+0xa6/0xf0
[  284.941765][ T8295]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  284.941843][ T8295]  ? stack_depot_save_flags+0x27/0x9d0
[  284.941892][ T8295]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  284.941954][ T8295]  ? pcpu_get_vm_areas+0x520/0x55d0
[  284.941991][ T8295]  ? pcpu_create_chunk+0x254/0x730
[  284.942052][ T8295]  ? pcpu_create_chunk+0x254/0x730
[  284.942102][ T8295]  ? pcpu_alloc_noprof+0x18c4/0x1c50
[  284.942171][ T8295]  alloc_pages_bulk_noprof+0x782/0x1490
[  284.942247][ T8295]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  284.942323][ T8295]  ? alloc_pages_noprof+0x238/0x390
[  284.942367][ T8295]  __kasan_populate_vmalloc+0xf0/0x210
[  284.942431][ T8295]  pcpu_get_vm_areas+0x2df1/0x55d0
[  284.942506][ T8295]  ? __pfx_pcpu_get_vm_areas+0x10/0x10
[  284.942558][ T8295]  pcpu_create_chunk+0x254/0x730
[  284.942616][ T8295]  pcpu_alloc_noprof+0x18c4/0x1c50
[  284.942691][ T8295]  bpf_map_alloc_percpu+0x9a/0xf0
[  284.942728][ T8295]  ? __pfx_bpf_map_alloc_percpu+0x10/0x10
[  284.942770][ T8295]  ? __pfx___might_resched+0x10/0x10
[  284.942824][ T8295]  ? __bpf_map_area_alloc+0x13a/0x200
[  284.942874][ T8295]  array_map_alloc+0x553/0x750
[  284.942927][ T8295]  ? __pfx_array_map_mem_usage+0x10/0x10
[  284.942971][ T8295]  map_create+0x84e/0x2ba0
[  284.943004][ T8295]  ? preempt_schedule_thunk+0x16/0x30
[  284.943066][ T8295]  ? __pfx_map_create+0x10/0x10
[  284.943098][ T8295]  ? __might_fault+0xc5/0x140
[  284.943148][ T8295]  ? __might_fault+0xc5/0x140
[  284.943227][ T8295]  __sys_bpf+0x2091/0x4b90
[  284.943268][ T8295]  ? futex_private_hash_put+0x107/0x1c0
[  284.943316][ T8295]  ? __pfx___sys_bpf+0x10/0x10
[  284.943361][ T8295]  ? __pfx_futex_wake+0x10/0x10
[  284.943422][ T8295]  ? do_writev+0x214/0x340
[  284.943464][ T8295]  ? do_futex+0x192/0x350
[  284.943536][ T8295]  ? xfd_validate_state+0x129/0x190
[  284.943600][ T8295]  __x64_sys_bpf+0x7b/0xc0
[  284.943641][ T8295]  ? lockdep_hardirqs_on+0x78/0x100
[  284.943677][ T8295]  do_syscall_64+0x106/0xf80
[  284.943709][ T8295]  ? clear_bhb_loop+0x40/0x90
[  284.943753][ T8295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.943789][ T8295] RIP: 0033:0x7f443b99c819
[  284.943817][ T8295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.943849][ T8295] RSP: 002b:00007f4439bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  284.943882][ T8295] RAX: ffffffffffffffda RBX: 00007f443bc15fa0 RCX: 00007f443b99c819
[  284.943904][ T8295] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000
[  284.943925][ T8295] RBP: 00007f443ba32c91 R08: 0000000000000000 R09: 0000000000000000
[  284.943945][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.943965][ T8295] R13: 00007f443bc16038 R14: 00007f443bc15fa0 R15: 00007ffc0c3d0878
[  284.944017][ T8295]  </TASK>
[  285.289694][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  286.681809][ T8305] binder: 8301:8305 ioctl c00c620f 2000000001c0 returned -22
[  287.102264][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'.
[  287.925163][ T5828] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  289.286430][ T8359] FAULT_INJECTION: forcing a failure.
[  289.286430][ T8359] name failslab, interval 1, probability 0, space 0, times 0
[  289.328916][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: syz.3.490 Not tainted syzkaller #0 PREEMPT(full) 
[  289.328960][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  289.328986][ T8359] Call Trace:
[  289.328997][ T8359]  <TASK>
[  289.329009][ T8359]  dump_stack_lvl+0x100/0x190
[  289.329067][ T8359]  should_fail_ex.cold+0x5/0xa
[  289.329107][ T8359]  should_failslab+0xc2/0x120
[  289.329146][ T8359]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  289.329200][ T8359]  ? alloc_empty_file+0x55/0x1c0
[  289.329255][ T8359]  alloc_empty_file+0x55/0x1c0
[  289.329302][ T8359]  alloc_file_pseudo+0x13a/0x230
[  289.329352][ T8359]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  289.329399][ T8359]  ? alloc_fd+0x476/0x790
[  289.329442][ T8359]  sock_alloc_file+0x50/0x210
[  289.329479][ T8359]  __sys_socket+0x1c0/0x260
[  289.329526][ T8359]  ? __pfx___sys_socket+0x10/0x10
[  289.329607][ T8359]  __x64_sys_socket+0x72/0xb0
[  289.329652][ T8359]  ? lockdep_hardirqs_on+0x78/0x100
[  289.329689][ T8359]  do_syscall_64+0x106/0xf80
[  289.329721][ T8359]  ? clear_bhb_loop+0x40/0x90
[  289.329765][ T8359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.329801][ T8359] RIP: 0033:0x7fbf8859c819
[  289.329828][ T8359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.329861][ T8359] RSP: 002b:00007fbf894c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  289.329893][ T8359] RAX: ffffffffffffffda RBX: 00007fbf88815fa0 RCX: 00007fbf8859c819
[  289.329915][ T8359] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  289.329935][ T8359] RBP: 00007fbf88632c91 R08: 0000000000000000 R09: 0000000000000000
[  289.329955][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.329984][ T8359] R13: 00007fbf88816038 R14: 00007fbf88815fa0 R15: 00007ffcaae3f0e8
[  289.330028][ T8359]  </TASK>
[  290.741526][ T8387] FAULT_INJECTION: forcing a failure.
[  290.741526][ T8387] name failslab, interval 1, probability 0, space 0, times 0
[  290.758453][ T8387] CPU: 0 UID: 0 PID: 8387 Comm: syz.3.499 Not tainted syzkaller #0 PREEMPT(full) 
[  290.758500][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  290.758521][ T8387] Call Trace:
[  290.758531][ T8387]  <TASK>
[  290.758544][ T8387]  dump_stack_lvl+0x100/0x190
[  290.758605][ T8387]  should_fail_ex.cold+0x5/0xa
[  290.758645][ T8387]  ? udp_init_sock+0x24e/0x450
[  290.758695][ T8387]  should_failslab+0xc2/0x120
[  290.758734][ T8387]  __kmalloc_noprof+0xe0/0x850
[  290.758788][ T8387]  ? lockdep_init_map_type+0x5c/0x250
[  290.758854][ T8387]  udp_init_sock+0x24e/0x450
[  290.758900][ T8387]  ? __pfx_udp_init_sock+0x10/0x10
[  290.758950][ T8387]  inet_create+0x94c/0x1060
[  290.758994][ T8387]  ? inet_create+0x94/0x1060
[  290.759043][ T8387]  __sock_create+0x339/0x860
[  290.759095][ T8387]  __sys_socket+0x14d/0x260
[  290.759140][ T8387]  ? __pfx___sys_socket+0x10/0x10
[  290.759199][ T8387]  __x64_sys_socket+0x72/0xb0
[  290.759241][ T8387]  ? lockdep_hardirqs_on+0x78/0x100
[  290.759276][ T8387]  do_syscall_64+0x106/0xf80
[  290.759307][ T8387]  ? clear_bhb_loop+0x40/0x90
[  290.759349][ T8387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.759383][ T8387] RIP: 0033:0x7fbf8859c819
[  290.759411][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.759442][ T8387] RSP: 002b:00007fbf894c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  290.759474][ T8387] RAX: ffffffffffffffda RBX: 00007fbf88815fa0 RCX: 00007fbf8859c819
[  290.759496][ T8387] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  290.759515][ T8387] RBP: 00007fbf88632c91 R08: 0000000000000000 R09: 0000000000000000
[  290.759535][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.759555][ T8387] R13: 00007fbf88816038 R14: 00007fbf88815fa0 R15: 00007ffcaae3f0e8
[  290.759598][ T8387]  </TASK>
[  291.202075][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'.
[  294.156437][ T8427] FAULT_INJECTION: forcing a failure.
[  294.156437][ T8427] name failslab, interval 1, probability 0, space 0, times 0
[  294.171414][ T8427] CPU: 1 UID: 0 PID: 8427 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT(full) 
[  294.171460][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  294.171480][ T8427] Call Trace:
[  294.171491][ T8427]  <TASK>
[  294.171504][ T8427]  dump_stack_lvl+0x100/0x190
[  294.171565][ T8427]  should_fail_ex.cold+0x5/0xa
[  294.171607][ T8427]  ? udp_init_sock+0x24e/0x450
[  294.171654][ T8427]  should_failslab+0xc2/0x120
[  294.171694][ T8427]  __kmalloc_noprof+0xe0/0x850
[  294.171749][ T8427]  ? lockdep_init_map_type+0x5c/0x250
[  294.171806][ T8427]  udp_init_sock+0x24e/0x450
[  294.171852][ T8427]  ? __pfx_udp_init_sock+0x10/0x10
[  294.171903][ T8427]  inet_create+0x94c/0x1060
[  294.171948][ T8427]  ? inet_create+0x94/0x1060
[  294.171997][ T8427]  __sock_create+0x339/0x860
[  294.172049][ T8427]  __sys_socket+0x14d/0x260
[  294.172096][ T8427]  ? __pfx___sys_socket+0x10/0x10
[  294.172153][ T8427]  __x64_sys_socket+0x72/0xb0
[  294.172198][ T8427]  ? lockdep_hardirqs_on+0x78/0x100
[  294.172232][ T8427]  do_syscall_64+0x106/0xf80
[  294.172265][ T8427]  ? clear_bhb_loop+0x40/0x90
[  294.172318][ T8427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.172359][ T8427] RIP: 0033:0x7fbf8859c819
[  294.172387][ T8427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.172420][ T8427] RSP: 002b:00007fbf894c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  294.172453][ T8427] RAX: ffffffffffffffda RBX: 00007fbf88815fa0 RCX: 00007fbf8859c819
[  294.172475][ T8427] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  294.172495][ T8427] RBP: 00007fbf88632c91 R08: 0000000000000000 R09: 0000000000000000
[  294.172516][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.172536][ T8427] R13: 00007fbf88816038 R14: 00007fbf88815fa0 R15: 00007ffcaae3f0e8
[  294.172580][ T8427]  </TASK>
[  295.725333][ T8433] Invalid ELF header magic: != ELF
[  301.113889][ T8533] FAULT_INJECTION: forcing a failure.
[  301.113889][ T8533] name failslab, interval 1, probability 0, space 0, times 0
[  301.168477][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) 
[  301.168545][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  301.168567][ T8533] Call Trace:
[  301.168579][ T8533]  <TASK>
[  301.168593][ T8533]  dump_stack_lvl+0x100/0x190
[  301.168654][ T8533]  should_fail_ex.cold+0x5/0xa
[  301.168707][ T8533]  ? udp_init_sock+0x24e/0x450
[  301.168753][ T8533]  should_failslab+0xc2/0x120
[  301.168792][ T8533]  __kmalloc_noprof+0xe0/0x850
[  301.168846][ T8533]  ? lockdep_init_map_type+0x5c/0x250
[  301.168901][ T8533]  udp_init_sock+0x24e/0x450
[  301.168946][ T8533]  ? __pfx_udp_init_sock+0x10/0x10
[  301.168996][ T8533]  inet_create+0x94c/0x1060
[  301.169040][ T8533]  ? inet_create+0x94/0x1060
[  301.169089][ T8533]  __sock_create+0x339/0x860
[  301.169140][ T8533]  __sys_socket+0x14d/0x260
[  301.169186][ T8533]  ? __pfx___sys_socket+0x10/0x10
[  301.169243][ T8533]  __x64_sys_socket+0x72/0xb0
[  301.169286][ T8533]  ? lockdep_hardirqs_on+0x78/0x100
[  301.169321][ T8533]  do_syscall_64+0x106/0xf80
[  301.169354][ T8533]  ? clear_bhb_loop+0x40/0x90
[  301.169394][ T8533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.169428][ T8533] RIP: 0033:0x7fbf8859c819
[  301.169454][ T8533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  301.169486][ T8533] RSP: 002b:00007fbf894c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  301.169518][ T8533] RAX: ffffffffffffffda RBX: 00007fbf88815fa0 RCX: 00007fbf8859c819
[  301.169540][ T8533] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  301.169560][ T8533] RBP: 00007fbf88632c91 R08: 0000000000000000 R09: 0000000000000000
[  301.169579][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  301.169598][ T8533] R13: 00007fbf88816038 R14: 00007fbf88815fa0 R15: 00007ffcaae3f0e8
[  301.169641][ T8533]  </TASK>
[  301.405952][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'.
[  303.211636][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  303.922933][ T8569] bridge0: port 3(gretap0) entered blocking state
[  303.931343][ T8569] bridge0: port 3(gretap0) entered disabled state
[  303.938081][ T8569] gretap0: entered allmulticast mode
[  303.946038][ T8569] gretap0: entered promiscuous mode
[  303.953066][ T8569] bridge0: port 3(gretap0) entered blocking state
[  303.960341][ T8569] bridge0: port 3(gretap0) entered forwarding state
[  308.144948][ T8632] FAULT_INJECTION: forcing a failure.
[  308.144948][ T8632] name failslab, interval 1, probability 0, space 0, times 0
[  308.238877][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.0.550 Not tainted syzkaller #0 PREEMPT(full) 
[  308.238924][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  308.238949][ T8632] Call Trace:
[  308.238961][ T8632]  <TASK>
[  308.238974][ T8632]  dump_stack_lvl+0x100/0x190
[  308.239036][ T8632]  should_fail_ex.cold+0x5/0xa
[  308.239077][ T8632]  should_failslab+0xc2/0x120
[  308.239119][ T8632]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  308.239156][ T8632]  ? __kthread_create_on_node+0x186/0x3f0
[  308.239210][ T8632]  kvasprintf+0xbc/0x150
[  308.239285][ T8632]  ? __pfx_kvasprintf+0x10/0x10
[  308.239360][ T8632]  ? __pfx_tomoyo_gc_thread+0x10/0x10
[  308.239406][ T8632]  __kthread_create_on_node+0x186/0x3f0
[  308.239454][ T8632]  ? __pfx___kthread_create_on_node+0x10/0x10
[  308.239519][ T8632]  ? __pfx_tomoyo_gc_thread+0x10/0x10
[  308.239565][ T8632]  kthread_create_on_node+0xc7/0x100
[  308.239608][ T8632]  ? __pfx_kthread_create_on_node+0x10/0x10
[  308.239654][ T8632]  ? lockdep_hardirqs_on+0x78/0x100
[  308.239690][ T8632]  ? find_held_lock+0x2b/0x80
[  308.239723][ T8632]  ? tomoyo_notify_gc+0xc6/0x480
[  308.239776][ T8632]  tomoyo_notify_gc+0x102/0x480
[  308.239818][ T8632]  ? ima_iint_find+0xe9/0x130
[  308.239850][ T8632]  ? __pfx_tomoyo_release+0x10/0x10
[  308.239902][ T8632]  tomoyo_release+0x31/0x40
[  308.239951][ T8632]  __fput+0x3ff/0xb40
[  308.239997][ T8632]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.240054][ T8632]  task_work_run+0x150/0x240
[  308.240107][ T8632]  ? __pfx_task_work_run+0x10/0x10
[  308.240172][ T8632]  exit_to_user_mode_loop+0x100/0x4a0
[  308.240223][ T8632]  do_syscall_64+0x668/0xf80
[  308.240256][ T8632]  ? clear_bhb_loop+0x40/0x90
[  308.240299][ T8632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.240343][ T8632] RIP: 0033:0x7f8eb159c819
[  308.240371][ T8632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.240404][ T8632] RSP: 002b:00007f8eaf7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  308.240444][ T8632] RAX: 0000000000000000 RBX: 00007f8eb1816180 RCX: 00007f8eb159c819
[  308.240466][ T8632] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  308.240486][ T8632] RBP: 00007f8eb1632c91 R08: 0000000000000000 R09: 0000000000000000
[  308.240507][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.240526][ T8632] R13: 00007f8eb1816218 R14: 00007f8eb1816180 R15: 00007ffcd3071c48
[  308.240572][ T8632]  </TASK>
[  308.602351][ T8627] binder: 8620:8627 ioctl c00c620f 2000000001c0 returned -22
[  308.802516][ T8615] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  308.818804][ T8615] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  308.839720][ T8615] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  308.884384][ T8615] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  309.108822][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout
[  310.868991][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[  310.879385][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[  310.951432][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout
[  312.270859][ T8672] program syz.3.560 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  314.563340][ T5893] Process accounting resumed
[  317.044517][ T8750] Invalid ELF header magic: != ELF
[  317.515480][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.528881][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  319.756455][ T8772] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  319.904689][ T8772] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  319.911354][ T8772] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  319.983719][ T8772] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  321.189005][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout
[  321.988910][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[  321.988931][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  322.012892][ T8793] tipc: Started in network mode
[  322.018337][ T8793] tipc: Node identity ee00, cluster identity 4711
[  322.025589][ T8793] tipc: Node number set to 60928
[  322.069052][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  322.471743][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.587'.
[  322.519058][ T8815] Invalid ELF header magic: != ELF
[  323.654237][ T8835] FAULT_INJECTION: forcing a failure.
[  323.654237][ T8835] name fail_futex, interval 1, probability 0, space 0, times 1
[  323.667521][ T8835] CPU: 0 UID: 0 PID: 8835 Comm: syz.1.594 Not tainted syzkaller #0 PREEMPT(full) 
[  323.667563][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  323.667584][ T8835] Call Trace:
[  323.667595][ T8835]  <TASK>
[  323.667607][ T8835]  dump_stack_lvl+0x100/0x190
[  323.667668][ T8835]  should_fail_ex.cold+0x5/0xa
[  323.667721][ T8835]  get_futex_key+0x1d2/0x1620
[  323.667771][ T8835]  ? __pfx_get_futex_key+0x10/0x10
[  323.667831][ T8835]  futex_wake+0xea/0x530
[  323.667905][ T8835]  ? __pfx_futex_wake+0x10/0x10
[  323.667961][ T8835]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[  323.668029][ T8835]  do_futex+0x32b/0x350
[  323.668078][ T8835]  ? __pfx_do_futex+0x10/0x10
[  323.668126][ T8835]  ? __pfx___might_resched+0x10/0x10
[  323.668180][ T8835]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[  323.668245][ T8835]  __x64_sys_futex+0x34f/0x4d0
[  323.668304][ T8835]  ? __pfx___x64_sys_futex+0x10/0x10
[  323.668369][ T8835]  do_syscall_64+0x106/0xf80
[  323.668403][ T8835]  ? clear_bhb_loop+0x40/0x90
[  323.668447][ T8835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.668483][ T8835] RIP: 0033:0x7f443b99c819
[  323.668512][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.668544][ T8835] RSP: 002b:00007f4439bac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  323.668577][ T8835] RAX: ffffffffffffffda RBX: 00007f443bc16188 RCX: 00007f443b99c819
[  323.668600][ T8835] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f443bc1618c
[  323.668621][ T8835] RBP: 00007f443bc16180 R08: 0000000000000000 R09: 0000000000000000
[  323.668642][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.668662][ T8835] R13: 00007f443bc16218 R14: 00007ffc0c3d0790 R15: 00007ffc0c3d0878
[  323.668715][ T8835]  </TASK>
[  326.189184][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'.
[  326.331587][ T8870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'.
[  334.320560][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'.
[  337.321617][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  338.914905][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  339.889400][ T9088] netlink: 342 bytes leftover after parsing attributes in process `syz.3.644'.
[  340.597940][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'.
[  343.430982][ T9138] netlink: 25 bytes leftover after parsing attributes in process `syz.3.653'.
[  343.454242][ T9136] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  343.538951][ T9136] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  343.545113][ T9136] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  343.590655][ T9136] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  343.703743][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'.
[  344.764572][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'.
[  345.032315][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout
[  345.590179][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout
[  345.590232][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  345.682357][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  346.270362][ T9198] vivid-007: =================  START STATUS  =================
[  346.302884][ T9198] vivid-007: Generate PTS: true
[  346.307822][ T9198] vivid-007: Generate SCR: true
[  346.338874][ T9198] tpg source WxH: 320x240 (Y'CbCr)
[  346.367182][ T9198] tpg field: 1
[  346.376574][ T9198] tpg crop: (0,0)/320x240
[  346.415158][ T9198] tpg compose: (0,0)/320x240
[  346.463773][ T9198] tpg colorspace: 8
[  346.500087][ T9198] tpg transfer function: 0/0
[  346.514818][ T9198] tpg Y'CbCr encoding: 0/0
[  346.543872][ T9198] tpg quantization: 0/0
[  346.565933][ T9198] tpg RGB range: 0/2
[  346.591672][ T9198] vivid-007: ==================  END STATUS  ==================
[  347.154096][ T9212] netlink: 342 bytes leftover after parsing attributes in process `syz.2.665'.
[  347.387282][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'.
[  350.995228][ T9267] Invalid ELF header magic: != ELF
[  353.222544][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'.
[  353.720529][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[  354.637590][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'.
[  354.735058][   T30] audit: type=1800 audit(4294967501.940:14): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.685" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  356.204529][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'.
[  357.036757][ T9342] Invalid ELF header magic: != ELF
[  358.669649][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  359.656197][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'.
[  359.818125][ T9380] netlink: 342 bytes leftover after parsing attributes in process `syz.3.698'.
[  360.652787][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'.
[  362.355240][ T9415] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  362.362274][ T9415] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  362.375797][ T9415] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  362.399266][ T9415] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  362.893202][    C1] vcan0: j1939_tp_rxtimer: 0xffff888037289c00: rx timeout, send abort
[  362.901937][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888037289c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  363.444412][ T9430] netlink: 342 bytes leftover after parsing attributes in process `syz.0.709'.
[  364.149028][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout
[  364.398916][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout
[  364.406306][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[  364.470001][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout
[  367.605876][ T9481] netlink: 342 bytes leftover after parsing attributes in process `syz.3.721'.
[  368.444427][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'.
[  369.614252][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'.
[  370.974548][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'.
[  371.219598][ T9538] netlink: 342 bytes leftover after parsing attributes in process `syz.3.732'.
[  373.289879][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'.
[  373.613634][ T9574] binder: 9569:9574 ioctl c00c620f 2000000001c0 returned -22
[  374.130516][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[  374.328843][ T9588] FAULT_INJECTION: forcing a failure.
[  374.328843][ T9588] name failslab, interval 1, probability 0, space 0, times 0
[  374.342309][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz.2.743 Not tainted syzkaller #0 PREEMPT(full) 
[  374.342342][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  374.342357][ T9588] Call Trace:
[  374.342365][ T9588]  <TASK>
[  374.342373][ T9588]  dump_stack_lvl+0x100/0x190
[  374.342417][ T9588]  should_fail_ex.cold+0x5/0xa
[  374.342446][ T9588]  ? realloc_user_queue+0xe9/0x320
[  374.342486][ T9588]  should_failslab+0xc2/0x120
[  374.342514][ T9588]  __kmalloc_noprof+0xe0/0x850
[  374.342559][ T9588]  realloc_user_queue+0xe9/0x320
[  374.342595][ T9588]  ? __pfx_snd_timer_user_open+0x10/0x10
[  374.342630][ T9588]  snd_timer_user_open+0xfc/0x180
[  374.342664][ T9588]  snd_open+0x22d/0x4c0
[  374.342693][ T9588]  ? __pfx_snd_open+0x10/0x10
[  374.342721][ T9588]  chrdev_open+0x234/0x6a0
[  374.342746][ T9588]  ? __pfx_apparmor_file_open+0x10/0x10
[  374.342774][ T9588]  ? __pfx_chrdev_open+0x10/0x10
[  374.342801][ T9588]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  374.342835][ T9588]  do_dentry_open+0x6d8/0x1660
[  374.342859][ T9588]  ? __pfx_chrdev_open+0x10/0x10
[  374.342892][ T9588]  vfs_open+0x82/0x3f0
[  374.342927][ T9588]  path_openat+0x208c/0x31a0
[  374.342963][ T9588]  ? __pfx_path_openat+0x10/0x10
[  374.342993][ T9588]  ? irqentry_exit+0x180/0x670
[  374.343016][ T9588]  ? lockdep_hardirqs_on+0x78/0x100
[  374.343043][ T9588]  do_file_open+0x20e/0x430
[  374.343071][ T9588]  ? __pfx_do_file_open+0x10/0x10
[  374.343118][ T9588]  ? alloc_fd+0x476/0x790
[  374.343146][ T9588]  ? do_getname+0x191/0x390
[  374.343186][ T9588]  do_sys_openat2+0x10d/0x1e0
[  374.343219][ T9588]  ? __pfx_do_sys_openat2+0x10/0x10
[  374.343255][ T9588]  ? __fget_files+0x21f/0x3d0
[  374.343284][ T9588]  __x64_sys_openat+0x12d/0x210
[  374.343319][ T9588]  ? __pfx___x64_sys_openat+0x10/0x10
[  374.343365][ T9588]  do_syscall_64+0x106/0xf80
[  374.343387][ T9588]  ? clear_bhb_loop+0x40/0x90
[  374.343417][ T9588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.343442][ T9588] RIP: 0033:0x7fb3d3b9c819
[  374.343462][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  374.343491][ T9588] RSP: 002b:00007fb3d4a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  374.343514][ T9588] RAX: ffffffffffffffda RBX: 00007fb3d3e15fa0 RCX: 00007fb3d3b9c819
[  374.343531][ T9588] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  374.343546][ T9588] RBP: 00007fb3d3c32c91 R08: 0000000000000000 R09: 0000000000000000
[  374.343560][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.343575][ T9588] R13: 00007fb3d3e16038 R14: 00007fb3d3e15fa0 R15: 00007ffc6e4ef7f8
[  374.343605][ T9588]  </TASK>
[  375.170613][ T9596] FAULT_INJECTION: forcing a failure.
[  375.170613][ T9596] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  375.188962][ T9596] CPU: 1 UID: 0 PID: 9596 Comm: syz.0.745 Not tainted syzkaller #0 PREEMPT(full) 
[  375.189007][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  375.189027][ T9596] Call Trace:
[  375.189037][ T9596]  <TASK>
[  375.189048][ T9596]  dump_stack_lvl+0x100/0x190
[  375.189106][ T9596]  should_fail_ex.cold+0x5/0xa
[  375.189141][ T9596]  ? prepare_alloc_pages+0x16d/0x5f0
[  375.189186][ T9596]  should_fail_alloc_page+0xeb/0x140
[  375.189235][ T9596]  prepare_alloc_pages+0x1f0/0x5f0
[  375.189285][ T9596]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  375.189348][ T9596]  ? rcu_is_watching+0x12/0xc0
[  375.189404][ T9596]  ? trace_mm_page_alloc+0x17a/0x1d0
[  375.189447][ T9596]  ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0
[  375.189508][ T9596]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  375.189564][ T9596]  ? stack_trace_save+0x8e/0xc0
[  375.189604][ T9596]  ? stack_depot_save_flags+0x27/0x9d0
[  375.189652][ T9596]  ? __lock_acquire+0x4a5/0x2630
[  375.189701][ T9596]  ? kasan_save_stack+0x3f/0x50
[  375.189733][ T9596]  ? kasan_save_track+0x14/0x30
[  375.189764][ T9596]  ? __kasan_slab_free+0x5f/0x80
[  375.189795][ T9596]  ? kmem_cache_free+0x124/0x6a0
[  375.189842][ T9596]  ? pcpu_get_vm_areas+0x21c0/0x55d0
[  375.189878][ T9596]  ? pcpu_create_chunk+0x254/0x730
[  375.189927][ T9596]  ? pcpu_alloc_noprof+0x18c4/0x1c50
[  375.189979][ T9596]  ? bpf_map_alloc_percpu+0x9a/0xf0
[  375.190013][ T9596]  ? array_map_alloc+0x553/0x750
[  375.190058][ T9596]  ? map_create+0x84e/0x2ba0
[  375.190089][ T9596]  ? __sys_bpf+0x2091/0x4b90
[  375.190139][ T9596]  alloc_pages_bulk_noprof+0x782/0x1490
[  375.190213][ T9596]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  375.190294][ T9596]  ? alloc_pages_noprof+0x238/0x390
[  375.190337][ T9596]  __kasan_populate_vmalloc+0xf0/0x210
[  375.190402][ T9596]  pcpu_get_vm_areas+0x2df1/0x55d0
[  375.190476][ T9596]  ? __pfx_pcpu_get_vm_areas+0x10/0x10
[  375.190528][ T9596]  pcpu_create_chunk+0x254/0x730
[  375.190584][ T9596]  pcpu_alloc_noprof+0x18c4/0x1c50
[  375.190657][ T9596]  bpf_map_alloc_percpu+0x9a/0xf0
[  375.190693][ T9596]  ? __pfx_bpf_map_alloc_percpu+0x10/0x10
[  375.190735][ T9596]  ? __pfx___might_resched+0x10/0x10
[  375.190788][ T9596]  ? __bpf_map_area_alloc+0x13a/0x200
[  375.190838][ T9596]  array_map_alloc+0x553/0x750
[  375.190891][ T9596]  ? __pfx_array_map_mem_usage+0x10/0x10
[  375.190935][ T9596]  map_create+0x84e/0x2ba0
[  375.190970][ T9596]  ? preempt_schedule_thunk+0x16/0x30
[  375.191029][ T9596]  ? __pfx_map_create+0x10/0x10
[  375.191063][ T9596]  ? __might_fault+0xc5/0x140
[  375.191112][ T9596]  ? __might_fault+0xc5/0x140
[  375.191180][ T9596]  __sys_bpf+0x2091/0x4b90
[  375.191219][ T9596]  ? futex_private_hash_put+0x107/0x1c0
[  375.191273][ T9596]  ? __pfx___sys_bpf+0x10/0x10
[  375.191318][ T9596]  ? __pfx_futex_wake+0x10/0x10
[  375.191378][ T9596]  ? do_writev+0x214/0x340
[  375.191420][ T9596]  ? do_futex+0x192/0x350
[  375.191491][ T9596]  ? xfd_validate_state+0x129/0x190
[  375.191555][ T9596]  __x64_sys_bpf+0x7b/0xc0
[  375.191596][ T9596]  ? lockdep_hardirqs_on+0x78/0x100
[  375.191631][ T9596]  do_syscall_64+0x106/0xf80
[  375.191663][ T9596]  ? clear_bhb_loop+0x40/0x90
[  375.191707][ T9596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.191743][ T9596] RIP: 0033:0x7f8eb159c819
[  375.191771][ T9596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.191805][ T9596] RSP: 002b:00007f8eb23aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  375.191837][ T9596] RAX: ffffffffffffffda RBX: 00007f8eb1815fa0 RCX: 00007f8eb159c819
[  375.191860][ T9596] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000
[  375.191880][ T9596] RBP: 00007f8eb1632c91 R08: 0000000000000000 R09: 0000000000000000
[  375.191901][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.191921][ T9596] R13: 00007f8eb1816038 R14: 00007f8eb1815fa0 R15: 00007ffcd3071c48
[  375.191966][ T9596]  </TASK>
[  375.848083][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'.
[  377.169411][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.749'.
[  377.307813][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'.
[  377.320236][ T9633] netlink: 'syz.2.753': attribute type 1 has an invalid length.
[  377.327950][ T9633] netlink: 5 bytes leftover after parsing attributes in process `syz.2.753'.
[  378.969205][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.975658][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.156613][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'.
[  382.610171][ T9675] kexec: Could not allocate control_code_buffer
[  383.346878][    C0] vcan0: j1939_tp_rxtimer: 0xffff888035f65c00: rx timeout, send abort
[  383.855332][    C0] vcan0: j1939_tp_rxtimer: 0xffff888035f65c00: abort rx timeout. Force session deactivation
[  384.164803][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'.
[  385.876996][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'.
[  386.857555][ T9767] netlink: 342 bytes leftover after parsing attributes in process `syz.0.775'.
[  386.886284][   T30] audit: type=1800 audit(4294967534.090:15): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.776" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  387.641677][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'.
[  390.833045][ T9803] program syz.2.783 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  391.094710][ T9830] netlink: 342 bytes leftover after parsing attributes in process `syz.3.787'.
[  392.655087][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'.
[  392.923070][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  394.584053][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.794'.
[  396.411764][ T9881] kexec: Could not allocate control_code_buffer
[  397.274828][ T9892] Invalid ELF header magic: != ELF
[  403.811240][ T9991] netlink: 330 bytes leftover after parsing attributes in process `syz.1.816'.
[  403.820825][ T9991] mac80211_hwsim hwsim4 �: renamed from wlan0 (while UP)
[  405.061376][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'.
[  406.466789][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'.
[  407.124073][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802c148400: rx timeout, send abort
[  407.632423][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802c148400: abort rx timeout. Force session deactivation
[  408.386035][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[  409.468255][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'.
[  409.517615][T10040] netlink: 354 bytes leftover after parsing attributes in process `syz.2.827'.
[  410.052798][T10045] netlink: 342 bytes leftover after parsing attributes in process `syz.1.829'.
[  411.089689][T10062] program syz.3.828 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  412.029532][T10079] binder: 10071:10079 ioctl c00c620f 2000000001c0 returned -22
[  416.755423][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'.
[  416.813631][T10159] netlink: 25 bytes leftover after parsing attributes in process `syz.1.852'.
[  416.896728][T10163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.853'.
[  420.933064][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'.
[  420.943725][T10230] netlink: 354 bytes leftover after parsing attributes in process `syz.1.868'.
[  422.246572][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'.
[  432.225760][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'.
[  434.765607][T10418] FAULT_INJECTION: forcing a failure.
[  434.765607][T10418] name failslab, interval 1, probability 0, space 0, times 0
[  434.778363][T10418] CPU: 0 UID: 0 PID: 10418 Comm: syz.2.905 Not tainted syzkaller #0 PREEMPT(full) 
[  434.778394][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  434.778410][T10418] Call Trace:
[  434.778418][T10418]  <TASK>
[  434.778428][T10418]  dump_stack_lvl+0x100/0x190
[  434.778472][T10418]  should_fail_ex.cold+0x5/0xa
[  434.778501][T10418]  should_failslab+0xc2/0x120
[  434.778528][T10418]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  434.778567][T10418]  ? __d_alloc+0x34/0xa80
[  434.778593][T10418]  ? __kasan_kmalloc+0xaa/0xb0
[  434.778662][T10418]  __d_alloc+0x34/0xa80
[  434.778710][T10418]  d_alloc_pseudo+0x1c/0xc0
[  434.778747][T10418]  alloc_file_pseudo+0xcf/0x230
[  434.778782][T10418]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  434.778814][T10418]  ? alloc_fd+0x476/0x790
[  434.778871][T10418]  sock_alloc_file+0x50/0x210
[  434.778909][T10418]  __sys_socket+0x1c0/0x260
[  434.778952][T10418]  ? __pfx___sys_socket+0x10/0x10
[  434.778992][T10418]  __x64_sys_socket+0x72/0xb0
[  434.779023][T10418]  ? lockdep_hardirqs_on+0x78/0x100
[  434.779047][T10418]  do_syscall_64+0x106/0xf80
[  434.779070][T10418]  ? clear_bhb_loop+0x40/0x90
[  434.779100][T10418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.779125][T10418] RIP: 0033:0x7fb3d3b9c819
[  434.779153][T10418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.779176][T10418] RSP: 002b:00007fb3d4a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  434.779200][T10418] RAX: ffffffffffffffda RBX: 00007fb3d3e15fa0 RCX: 00007fb3d3b9c819
[  434.779216][T10418] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  434.779230][T10418] RBP: 00007fb3d3c32c91 R08: 0000000000000000 R09: 0000000000000000
[  434.779245][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.779259][T10418] R13: 00007fb3d3e16038 R14: 00007fb3d3e15fa0 R15: 00007ffc6e4ef7f8
[  434.779289][T10418]  </TASK>
[  437.476199][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'.
[  438.455267][T10468] netlink: 342 bytes leftover after parsing attributes in process `syz.1.913'.
[  440.395075][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.401792][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  442.359430][T10531] random: crng reseeded on system resumption
[  443.421196][T10540] netlink: 342 bytes leftover after parsing attributes in process `syz.1.925'.
[  450.450144][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805abaf000: rx timeout, send abort
[  450.958574][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805abaf000: abort rx timeout. Force session deactivation
[  453.004723][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'.
[  455.836891][T10693] netlink: 9 bytes leftover after parsing attributes in process `syz.1.958'.
[  457.424646][T10704] program syz.0.957 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  460.632534][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806b6d0000: rx timeout, send abort
[  461.090132][T10728] kexec: Could not allocate control_code_buffer
[  461.141188][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806b6d0000: abort rx timeout. Force session deactivation
[  464.003815][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880317a7800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated.
[  467.117974][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880595ff000: rx timeout, send abort
[  467.626395][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880595ff000: abort rx timeout. Force session deactivation
[  468.549801][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'.
[  470.062732][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'.
[  470.137985][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'.
[  471.807540][T10862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.995'.
[  475.443753][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'.
[  478.804553][T10935] kexec: Could not allocate control_code_buffer
[  479.838510][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'.
[  481.366885][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'.
[  481.802331][   T30] audit: type=1800 audit(4294967629.000:16): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1015" name="sr0" dev="devtmpfs" ino=2869 res=0 errno=0
[  482.178100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  486.139499][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  487.181266][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'.
[  489.900641][T11059] kexec: Could not allocate control_code_buffer
[  490.690068][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'.
[  492.382996][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'.
[  492.393233][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'.
[  494.169859][T11141] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1047'.
[  495.872700][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805ae42c00: rx timeout, send abort
[  495.881359][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ae42c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  497.798451][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c526800: rx timeout, send abort
[  497.902115][T11168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'.
[  497.911940][T11168] ipvlan1: entered promiscuous mode
[  497.917211][T11168] ipvlan1: entered allmulticast mode
[  497.938735][T11168] veth0_vlan: entered allmulticast mode
[  498.169816][T11179] futex_wake_op: syz.2.1055 tries to shift op by -2048; fix this program
[  498.179013][T11179] futex_wake_op: syz.2.1055 tries to shift op by -2048; fix this program
[  498.202464][T11179] 0x000000000001-0x000000020000 : ""
[  498.243737][T11179] ftl_cs: FTL header corrupt!
[  498.306768][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805c526800: abort rx timeout. Force session deactivation
[  498.878779][T11195] device-mapper: ioctl: device name cannot contain '/'
[  498.938364][T11195] vhci_hcd vhci_hcd.2: invalid port number 194
[  498.976965][T11195] vhci_hcd vhci_hcd.2: invalid port number 194
[  500.287061][T11218] program syz.2.1062 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  501.597783][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880226fac00: rx timeout, send abort
[  501.625123][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880226fac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  502.347693][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  502.354931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  503.351255][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880226fa800: rx timeout, send abort
[  503.359673][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880226f8400: rx timeout, send abort
[  503.645501][T11244] futex_wake_op: syz.1.1066 tries to shift op by -2048; fix this program
[  503.654345][T11244] futex_wake_op: syz.1.1066 tries to shift op by -2048; fix this program
[  503.664991][T11244] 0x000000000001-0x000000020000 : ""
[  503.680457][T11244] ftl_cs: FTL header corrupt!
[  503.867934][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880226f8400: abort rx timeout. Force session deactivation
[  504.215366][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'.
[  504.809588][T11262] random: crng reseeded on system resumption
[  506.794584][T11270] Invalid ELF header magic: != ELF
[  509.008016][T11274] kexec: Could not allocate control_code_buffer
[  509.665255][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'.
[  510.332944][T11312] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  510.406150][T11312] File: /dev/nullb0 PID: 11312 Comm: syz.1.1082
[  512.080770][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'.
[  512.382802][T11340] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead.
[  513.207076][T11360] netlink: 'syz.3.1091': attribute type 1 has an invalid length.
[  514.805709][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'.
[  515.994508][T11363] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow.
[  518.014916][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'.
[  519.427715][T11438] netlink: 'syz.2.1105': attribute type 1 has an invalid length.
[  520.028875][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'.
[  522.124157][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'.
[  523.185821][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'.
[  523.838067][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'.
[  524.625717][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'.
[  525.977894][T11509] program syz.3.1117 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  526.000570][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'.
[  526.652270][T11517] Invalid ELF header magic: != ELF
[  527.414048][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1123'.
[  528.469879][T11547] futex_wake_op: syz.2.1126 tries to shift op by -2048; fix this program
[  528.718910][T11368] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6
[  529.178161][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'.
[  529.196696][T11564] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1130'.
[  529.494416][T11566] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1129'.
[  532.037299][T11578] program syz.1.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  532.120217][T11598] random: crng reseeded on system resumption
[  532.219147][T11598] hub 1-0:1.0: USB hub found
[  532.224227][T11598] hub 1-0:1.0: 1 port detected
[  532.657563][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'.
[  533.402635][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'.
[  534.230992][T11639] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  538.566378][T11684] program syz.0.1150 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  540.980200][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'.
[  542.488420][T11749] futex_wake_op: syz.0.1166 tries to shift op by -2048; fix this program
[  544.386995][T11780] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1171'.
[  545.057276][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  545.821152][T11803] program syz.0.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  546.136924][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b077000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated.
[  549.089890][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b077c00: rx timeout, send abort
[  549.598291][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805b077c00: abort rx timeout. Force session deactivation
[  551.122434][T11852] bridge0: port 3(gretap0) entered blocking state
[  551.168736][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'.
[  551.188452][T11852] bridge0: port 3(gretap0) entered disabled state
[  551.257991][T11852] gretap0: entered allmulticast mode
[  551.300024][T11852] gretap0: entered promiscuous mode
[  551.310537][T11852] FAULT_INJECTION: forcing a failure.
[  551.310537][T11852] name failslab, interval 1, probability 0, space 0, times 0
[  551.324047][T11852] CPU: 1 UID: 0 PID: 11852 Comm: syz.1.1187 Not tainted syzkaller #0 PREEMPT(full) 
[  551.324092][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  551.324113][T11852] Call Trace:
[  551.324124][T11852]  <TASK>
[  551.324136][T11852]  dump_stack_lvl+0x100/0x190
[  551.324197][T11852]  should_fail_ex.cold+0x5/0xa
[  551.324241][T11852]  should_failslab+0xc2/0x120
[  551.324270][T11852]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  551.324310][T11852]  ? __alloc_skb+0x140/0x710
[  551.324353][T11852]  __alloc_skb+0x140/0x710
[  551.324388][T11852]  ? __alloc_skb+0x5b7/0x710
[  551.324424][T11852]  ? __pfx___alloc_skb+0x10/0x10
[  551.324463][T11852]  ? __pfx_fdb_create+0x10/0x10
[  551.324496][T11852]  fdb_notify+0xa2/0x190
[  551.324529][T11852]  fdb_add_local+0x184/0x1c0
[  551.324570][T11852]  br_fdb_add_local+0x39/0x60
[  551.324603][T11852]  __vlan_add+0x1820/0x2dd0
[  551.324656][T11852]  ? __pfx___vlan_add+0x10/0x10
[  551.324699][T11852]  nbp_vlan_add+0x258/0x3e0
[  551.324737][T11852]  nbp_vlan_init+0x373/0x500
[  551.324773][T11852]  ? __pfx_nbp_vlan_init+0x10/0x10
[  551.324814][T11852]  ? __local_bh_enable_ip+0x9e/0x120
[  551.324841][T11852]  ? lockdep_hardirqs_on+0x78/0x100
[  551.324865][T11852]  ? br_fdb_add_local+0x43/0x60
[  551.324896][T11852]  ? __local_bh_enable_ip+0x9e/0x120
[  551.324928][T11852]  br_add_if+0xf79/0x1b40
[  551.324965][T11852]  ? veth_get_iflink+0x273/0x2c0
[  551.325010][T11852]  add_del_if+0x114/0x160
[  551.325049][T11852]  br_dev_siocdevprivate+0x8ac/0x1650
[  551.325089][T11852]  ? __lock_acquire+0x4a5/0x2630
[  551.325121][T11852]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  551.325171][T11852]  ? do_raw_spin_lock+0x128/0x260
[  551.325214][T11852]  ? mark_held_locks+0x40/0x70
[  551.325250][T11852]  ? netdev_name_node_lookup+0x107/0x150
[  551.325284][T11852]  ? __mutex_lock+0x26a/0x1b90
[  551.325313][T11852]  dev_ifsioc+0xc1e/0x1e90
[  551.325351][T11852]  ? __pfx_dev_ifsioc+0x10/0x10
[  551.325385][T11852]  ? __pfx___mutex_lock+0x10/0x10
[  551.325421][T11852]  ? dev_load+0x8e/0x240
[  551.325452][T11852]  ? dev_load+0x8e/0x240
[  551.325493][T11852]  dev_ioctl+0x70e/0x1070
[  551.325532][T11852]  sock_ioctl+0x494/0x6b0
[  551.325563][T11852]  ? __pfx_sock_ioctl+0x10/0x10
[  551.325593][T11852]  ? hook_file_ioctl_common+0x146/0x410
[  551.325630][T11852]  ? __fget_files+0x21f/0x3d0
[  551.325666][T11852]  ? __pfx_sock_ioctl+0x10/0x10
[  551.325698][T11852]  __x64_sys_ioctl+0x18e/0x210
[  551.325738][T11852]  do_syscall_64+0x106/0xf80
[  551.325761][T11852]  ? clear_bhb_loop+0x40/0x90
[  551.325791][T11852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.325816][T11852] RIP: 0033:0x7f443b99c819
[  551.325837][T11852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.325862][T11852] RSP: 002b:00007f4439bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  551.325886][T11852] RAX: ffffffffffffffda RBX: 00007f443bc16090 RCX: 00007f443b99c819
[  551.325903][T11852] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 000000000000000a
[  551.325918][T11852] RBP: 00007f443ba32c91 R08: 0000000000000000 R09: 0000000000000000
[  551.325932][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.325947][T11852] R13: 00007f443bc16128 R14: 00007f443bc16090 R15: 00007ffc0c3d0878
[  551.325978][T11852]  </TASK>
[  551.655461][T11852] bridge0: port 3(gretap0) entered blocking state
[  551.662176][T11852] bridge0: port 3(gretap0) entered forwarding state
[  553.792002][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1193'.
[  555.632976][T11386] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow.
[  558.520525][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'.
[  561.813503][T11975] futex_wake_op: syz.1.1215 tries to shift op by -2048; fix this program
[  562.598385][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'.
[  563.273825][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.280581][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.402001][T11368] Bluetooth: hci0: unexpected event 0x14 length: 440 > 6
[  566.888609][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  570.034485][T12045] futex_wake_op: syz.3.1229 tries to shift op by -2048; fix this program
[  570.761891][T11368] Bluetooth: hci0: unexpected event 0x14 length: 440 > 6
[  571.535899][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1234'.
[  572.663749][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'.
[  573.131458][T12099] FAULT_INJECTION: forcing a failure.
[  573.131458][T12099] name failslab, interval 1, probability 0, space 0, times 0
[  573.145340][T12099] CPU: 0 UID: 0 PID: 12099 Comm: syz.3.1241 Not tainted syzkaller #0 PREEMPT(full) 
[  573.145373][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  573.145388][T12099] Call Trace:
[  573.145395][T12099]  <TASK>
[  573.145404][T12099]  dump_stack_lvl+0x100/0x190
[  573.145446][T12099]  should_fail_ex.cold+0x5/0xa
[  573.145475][T12099]  should_failslab+0xc2/0x120
[  573.145502][T12099]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  573.145541][T12099]  ? alloc_vfsmnt+0x23/0x6a0
[  573.145579][T12099]  alloc_vfsmnt+0x23/0x6a0
[  573.145612][T12099]  path_mount+0x1e6b/0x23d0
[  573.145646][T12099]  ? __pfx_path_mount+0x10/0x10
[  573.145674][T12099]  ? lockdep_hardirqs_on+0x78/0x100
[  573.145701][T12099]  ? putname+0xb1/0x110
[  573.145727][T12099]  ? kmem_cache_free+0x124/0x6a0
[  573.145780][T12099]  ? __x64_sys_mount+0x293/0x310
[  573.145809][T12099]  __x64_sys_mount+0x293/0x310
[  573.145839][T12099]  ? __pfx___x64_sys_mount+0x10/0x10
[  573.145879][T12099]  do_syscall_64+0x106/0xf80
[  573.145902][T12099]  ? clear_bhb_loop+0x40/0x90
[  573.145931][T12099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.145956][T12099] RIP: 0033:0x7fbf8859c819
[  573.145975][T12099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.145999][T12099] RSP: 002b:00007fbf894a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  573.146022][T12099] RAX: ffffffffffffffda RBX: 00007fbf88816090 RCX: 00007fbf8859c819
[  573.146038][T12099] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000
[  573.146053][T12099] RBP: 00007fbf88632c91 R08: 0000000000000000 R09: 0000000000000000
[  573.146067][T12099] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[  573.146081][T12099] R13: 00007fbf88816128 R14: 00007fbf88816090 R15: 00007ffcaae3f0e8
[  573.146112][T12099]  </TASK>
[  576.500807][T12114] futex_wake_op: syz.2.1245 tries to shift op by -2048; fix this program
[  576.734263][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a9bc400: rx timeout, send abort
[  576.742785][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a9bf000: rx timeout, send abort
[  576.751506][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a9bc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  576.765975][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a9bf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  577.893057][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'.
[  578.242014][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'.
[  579.621693][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1250'.
[  580.164861][T12161] Invalid ELF header magic: != ELF
[  581.631634][T12180] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1256'.
[  588.159172][T12187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  588.169616][T12187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  588.179579][T12187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  588.189242][T12187] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  588.197028][T12187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  588.381986][T12185] chnl_net:caif_netlink_parms(): no params data found
[  588.482763][T12185] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.490172][T12185] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.498454][T12185] bridge_slave_0: entered allmulticast mode
[  588.506792][T12185] bridge_slave_0: entered promiscuous mode
[  588.517777][T12185] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.525404][T12185] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.533583][T12185] bridge_slave_1: entered allmulticast mode
[  588.542118][T12185] bridge_slave_1: entered promiscuous mode
[  588.602414][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  588.616463][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  588.684257][T12185] team0: Port device team_slave_0 added
[  588.753992][T12185] team0: Port device team_slave_1 added
[  588.929826][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  588.953235][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.007657][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  589.252813][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.380177][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.459116][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  589.891957][T12185] hsr_slave_0: entered promiscuous mode
[  589.929291][T12185] hsr_slave_1: entered promiscuous mode
[  589.935878][T12185] debugfs: 'hsr0' already exists in 'hsr'
[  589.977644][T12185] Cannot create hsr debugfs directory
[  590.228995][T11368] Bluetooth: hci4: command tx timeout
[  590.378039][T12187] block nbd0: Receive control failed (result -32)
[  590.682381][T12185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  590.714009][T12185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  590.760154][T12185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  590.781657][T12185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  590.931992][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'.
[  591.093268][T12185] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.150181][T12185] 8021q: adding VLAN 0 to HW filter on device team0
[  591.269965][T11353] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.277159][T11353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.351681][T11648] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.358912][T11648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.140974][T12185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.309335][T12187] Bluetooth: hci4: command tx timeout
[  593.309263][T12185] veth0_vlan: entered promiscuous mode
[  593.363836][T12185] veth1_vlan: entered promiscuous mode
[  593.518001][T12185] veth0_macvtap: entered promiscuous mode
[  593.546423][T12185] veth1_macvtap: entered promiscuous mode
[  593.584757][T12185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.626942][T12185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.654159][T12232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.665543][T12232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.699089][T12232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.723338][T12232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.857309][T11648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.876383][T11648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.950137][T11648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.968250][T11648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.389311][T12187] Bluetooth: hci4: command tx timeout
[  595.019072][   T30] audit: type=1800 audit(4294967742.230:17): pid=12285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1278" name="sr0" dev="devtmpfs" ino=2869 res=0 errno=0
[  596.469615][T12187] Bluetooth: hci4: command tx timeout
[  596.989750][T12308] FAULT_INJECTION: forcing a failure.
[  596.989750][T12308] name failslab, interval 1, probability 0, space 0, times 0
[  597.019433][T12308] CPU: 1 UID: 0 PID: 12308 Comm: syz.2.1273 Not tainted syzkaller #0 PREEMPT(full) 
[  597.019466][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  597.019481][T12308] Call Trace:
[  597.019488][T12308]  <TASK>
[  597.019497][T12308]  dump_stack_lvl+0x100/0x190
[  597.019539][T12308]  should_fail_ex.cold+0x5/0xa
[  597.019568][T12308]  should_failslab+0xc2/0x120
[  597.019596][T12308]  __kmalloc_node_noprof+0xe6/0x850
[  597.019648][T12308]  ? __blk_mq_realloc_hw_ctxs+0x579/0x820
[  597.019687][T12308]  __blk_mq_realloc_hw_ctxs+0x579/0x820
[  597.019723][T12308]  ? lockdep_init_map_type+0x5c/0x250
[  597.019761][T12308]  blk_mq_init_allocated_queue+0x308/0x1440
[  597.019791][T12308]  ? blk_alloc_queue+0x627/0x790
[  597.019825][T12308]  ? blk_alloc_queue+0x1a3/0x790
[  597.019862][T12308]  blk_mq_alloc_queue+0x1bd/0x290
[  597.019889][T12308]  ? __pfx_blk_mq_alloc_queue+0x10/0x10
[  597.019933][T12308]  ? blk_mq_alloc_tag_set+0xe2c/0x1330
[  597.019965][T12308]  __blk_mq_alloc_disk+0x29/0x120
[  597.019991][T12308]  loop_add+0x498/0xb60
[  597.020028][T12308]  ? __pfx_loop_add+0x10/0x10
[  597.020083][T12308]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  597.020117][T12308]  loop_control_ioctl+0xae/0x620
[  597.020157][T12308]  ? __pfx_loop_control_ioctl+0x10/0x10
[  597.020195][T12308]  ? xfd_validate_state+0x129/0x190
[  597.020233][T12308]  ? __pfx_loop_control_ioctl+0x10/0x10
[  597.020274][T12308]  __x64_sys_ioctl+0x18e/0x210
[  597.020313][T12308]  do_syscall_64+0x106/0xf80
[  597.020337][T12308]  ? clear_bhb_loop+0x40/0x90
[  597.020366][T12308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.020395][T12308] RIP: 0033:0x7fb3d3b9c819
[  597.020414][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.020438][T12308] RSP: 002b:00007fb3d4a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  597.020460][T12308] RAX: ffffffffffffffda RBX: 00007fb3d3e15fa0 RCX: 00007fb3d3b9c819
[  597.020476][T12308] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002
[  597.020491][T12308] RBP: 00007fb3d3c32c91 R08: 0000000000000000 R09: 0000000000000000
[  597.020506][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  597.020520][T12308] R13: 00007fb3d3e16038 R14: 00007fb3d3e15fa0 R15: 00007ffc6e4ef7f8
[  597.020551][T12308]  </TASK>
[  597.599706][T12317] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[12317]
[  599.024124][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'.
[  599.310350][T12347] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  599.674075][T12356] QAT: Stopping all acceleration devices.
[  599.890247][T12359] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1283'.
[  600.759325][T12356] QAT: Invalid ioctl 35077
[  601.168160][T12375] zswap: compressor  not available
[  601.962386][T12391] program syz.0.1289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  602.959487][T12187] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  602.980359][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'.
[  603.521238][T12412] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1294'.
[  603.759559][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'.
[  604.653172][T12187] block nbd1: Receive control failed (result -32)
[  604.898070][T12433] program syz.1.1299 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  605.741362][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'.
[  605.958711][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  606.073488][T12447] Invalid ELF header magic: != ELF
[  606.717290][T12187] Bluetooth: hci2: unexpected event 0x14 length: 440 > 6
[  607.532238][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'.
[  607.828424][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'.
[  608.588667][T12187] block nbd2: Receive control failed (result -32)
[  608.822128][T12490] program syz.1.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  609.406170][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'.
[  609.946416][T12512] FAULT_INJECTION: forcing a failure.
[  609.946416][T12512] name failslab, interval 1, probability 0, space 0, times 0
[  609.965740][T12512] CPU: 1 UID: 0 PID: 12512 Comm: syz.0.1316 Not tainted syzkaller #0 PREEMPT(full) 
[  609.965789][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  609.965804][T12512] Call Trace:
[  609.965812][T12512]  <TASK>
[  609.965822][T12512]  dump_stack_lvl+0x100/0x190
[  609.965864][T12512]  should_fail_ex.cold+0x5/0xa
[  609.965893][T12512]  should_failslab+0xc2/0x120
[  609.965920][T12512]  __kmalloc_cache_noprof+0x7a/0x6f0
[  609.965955][T12512]  ? snd_fasync_helper+0xe2/0x290
[  609.965982][T12512]  ? __might_fault+0xc5/0x140
[  609.966018][T12512]  ? __might_fault+0xc5/0x140
[  609.966057][T12512]  snd_fasync_helper+0xe2/0x290
[  609.966085][T12512]  ? __pfx_snd_timer_user_fasync+0x10/0x10
[  609.966115][T12512]  do_vfs_ioctl+0xfb2/0x13e0
[  609.966153][T12512]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  609.966197][T12512]  ? find_held_lock+0x2b/0x80
[  609.966221][T12512]  ? __fget_files+0x215/0x3d0
[  609.966243][T12512]  ? hook_file_ioctl_common+0x146/0x410
[  609.966280][T12512]  ? __fget_files+0x21f/0x3d0
[  609.966312][T12512]  __x64_sys_ioctl+0x114/0x210
[  609.966350][T12512]  do_syscall_64+0x106/0xf80
[  609.966373][T12512]  ? clear_bhb_loop+0x40/0x90
[  609.966403][T12512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.966427][T12512] RIP: 0033:0x7f8eb159c819
[  609.966446][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.966470][T12512] RSP: 002b:00007f8eb23aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  609.966492][T12512] RAX: ffffffffffffffda RBX: 00007f8eb1815fa0 RCX: 00007f8eb159c819
[  609.966508][T12512] RDX: 0000200000000080 RSI: 0000000000005452 RDI: 0000000000000005
[  609.966531][T12512] RBP: 00007f8eb1632c91 R08: 0000000000000000 R09: 0000000000000000
[  609.966546][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  609.966560][T12512] R13: 00007f8eb1816038 R14: 00007f8eb1815fa0 R15: 00007ffcd3071c48
[  609.966591][T12512]  </TASK>
[  610.616628][T12519] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[12519]
[  612.473374][T12542] program syz.1.1323 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  612.792012][T12187] block nbd3: Receive control failed (result -32)
[  613.055841][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'.
[  614.977308][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'.
[  615.336526][T12588] program syz.1.1335 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  615.569847][T12591] QAT: Stopping all acceleration devices.
[  616.398734][T12601] smpboot: CPU 1 is now offline
[  616.678277][T12591] QAT: Invalid ioctl 35077
[  617.161776][T12604] FAULT_INJECTION: forcing a failure.
[  617.161776][T12604] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  617.291910][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.0.1337 Not tainted syzkaller #0 PREEMPT(full) 
[  617.291943][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  617.291958][T12604] Call Trace:
[  617.291966][T12604]  <TASK>
[  617.291975][T12604]  dump_stack_lvl+0x100/0x190
[  617.292018][T12604]  should_fail_ex.cold+0x5/0xa
[  617.292041][T12604]  ? prepare_alloc_pages+0x16d/0x5f0
[  617.292073][T12604]  should_fail_alloc_page+0xeb/0x140
[  617.292102][T12604]  prepare_alloc_pages+0x1f0/0x5f0
[  617.292135][T12604]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  617.292182][T12604]  ? lock_acquire+0x1cf/0x380
[  617.292213][T12604]  ? find_held_lock+0x2b/0x80
[  617.292241][T12604]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  617.292284][T12604]  ? rcu_is_watching+0x12/0xc0
[  617.292322][T12604]  ? trace_sched_exit_tp+0x13a/0x180
[  617.292357][T12604]  ? lock_acquire+0x1cf/0x380
[  617.292388][T12604]  ? find_held_lock+0x2b/0x80
[  617.292411][T12604]  ? page_table_check_set+0x49a/0xa10
[  617.292435][T12604]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  617.292462][T12604]  ? policy_nodemask+0xed/0x4f0
[  617.292490][T12604]  alloc_pages_mpol+0x1fb/0x550
[  617.292517][T12604]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  617.292551][T12604]  folio_alloc_mpol_noprof+0x36/0x340
[  617.292585][T12604]  vma_alloc_folio_noprof+0xed/0x1d0
[  617.292615][T12604]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  617.292655][T12604]  do_anonymous_page+0xb3a/0x1fb0
[  617.292700][T12604]  __handle_mm_fault+0x1d48/0x2b60
[  617.292742][T12604]  ? __pfx___handle_mm_fault+0x10/0x10
[  617.292777][T12604]  ? pte_offset_map_lock+0x174/0x320
[  617.292803][T12604]  ? find_held_lock+0x2b/0x80
[  617.292835][T12604]  ? follow_page_pte+0x5b3/0x1400
[  617.292876][T12604]  handle_mm_fault+0x36d/0xa20
[  617.292915][T12604]  __get_user_pages+0xf9c/0x34d0
[  617.292954][T12604]  ? __pfx___get_user_pages+0x10/0x10
[  617.292991][T12604]  populate_vma_page_range+0x267/0x3f0
[  617.293024][T12604]  ? __pfx_populate_vma_page_range+0x10/0x10
[  617.293053][T12604]  ? __pfx_find_vma_intersection+0x10/0x10
[  617.293088][T12604]  __mm_populate+0x107/0x3a0
[  617.293119][T12604]  ? __pfx___mm_populate+0x10/0x10
[  617.293151][T12604]  ? up_write+0x406/0x4f0
[  617.293189][T12604]  vm_mmap_pgoff+0x37f/0x470
[  617.293221][T12604]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  617.293251][T12604]  ? do_futex+0x192/0x350
[  617.293283][T12604]  ? __pfx_do_futex+0x10/0x10
[  617.293312][T12604]  ? __pfx_do_sys_openat2+0x10/0x10
[  617.293350][T12604]  ksys_mmap_pgoff+0xe1/0x650
[  617.293377][T12604]  ? __x64_sys_futex+0x34f/0x4d0
[  617.293407][T12604]  ? __x64_sys_futex+0x358/0x4d0
[  617.293440][T12604]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  617.293467][T12604]  ? xfd_validate_state+0x129/0x190
[  617.293508][T12604]  __x64_sys_mmap+0x125/0x190
[  617.293548][T12604]  do_syscall_64+0x106/0xf80
[  617.293571][T12604]  ? clear_bhb_loop+0x40/0x90
[  617.293599][T12604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.293624][T12604] RIP: 0033:0x7f8eb159c819
[  617.293644][T12604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.293667][T12604] RSP: 002b:00007f8eb2389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  617.293689][T12604] RAX: ffffffffffffffda RBX: 00007f8eb1816090 RCX: 00007f8eb159c819
[  617.293705][T12604] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  617.293719][T12604] RBP: 00007f8eb1632c91 R08: ffffffffffffffff R09: 0000000000000000
[  617.293734][T12604] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  617.293747][T12604] R13: 00007f8eb1816128 R14: 00007f8eb1816090 R15: 00007ffcd3071c48
[  617.293778][T12604]  </TASK>
[  618.788999][T12187] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  619.120728][T12617] =======================================================
[  619.120728][T12617] WARNING: The mand mount option has been deprecated and
[  619.120728][T12617]          and is ignored by this kernel. Remove the mand
[  619.120728][T12617]          option from the mount to silence this warning.
[  619.120728][T12617] =======================================================
[  619.490613][T12187] Bluetooth: hci0: unexpected event 0x10 length: 440 > 1
[  619.492513][T11368] Bluetooth: hci0: hardware error 0x00
[  619.988458][T12628] kexec: Could not allocate control_code_buffer
[  620.599630][T12641] FAULT_INJECTION: forcing a failure.
[  620.599630][T12641] name failslab, interval 1, probability 0, space 0, times 0
[  620.654071][T12641] CPU: 0 UID: 0 PID: 12641 Comm: syz.4.1346 Not tainted syzkaller #0 PREEMPT(full) 
[  620.654104][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  620.654119][T12641] Call Trace:
[  620.654127][T12641]  <TASK>
[  620.654135][T12641]  dump_stack_lvl+0x100/0x190
[  620.654178][T12641]  should_fail_ex.cold+0x5/0xa
[  620.654206][T12641]  ? udp_init_sock+0x24e/0x450
[  620.654239][T12641]  should_failslab+0xc2/0x120
[  620.654266][T12641]  __kmalloc_noprof+0xe0/0x850
[  620.654304][T12641]  ? lockdep_init_map_type+0x5c/0x250
[  620.654343][T12641]  udp_init_sock+0x24e/0x450
[  620.654375][T12641]  ? __pfx_udp_init_sock+0x10/0x10
[  620.654410][T12641]  inet_create+0x94c/0x1060
[  620.654441][T12641]  ? inet_create+0x94/0x1060
[  620.654476][T12641]  __sock_create+0x339/0x860
[  620.654512][T12641]  __sys_socket+0x14d/0x260
[  620.654544][T12641]  ? __pfx___sys_socket+0x10/0x10
[  620.654592][T12641]  __x64_sys_socket+0x72/0xb0
[  620.654623][T12641]  ? lockdep_hardirqs_on+0x78/0x100
[  620.654647][T12641]  do_syscall_64+0x106/0xf80
[  620.654670][T12641]  ? clear_bhb_loop+0x40/0x90
[  620.654699][T12641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.654725][T12641] RIP: 0033:0x7f1b8c19c819
[  620.654744][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.654768][T12641] RSP: 002b:00007f1b8cfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  620.654791][T12641] RAX: ffffffffffffffda RBX: 00007f1b8c415fa0 RCX: 00007f1b8c19c819
[  620.654807][T12641] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  620.654821][T12641] RBP: 00007f1b8c232c91 R08: 0000000000000000 R09: 0000000000000000
[  620.654835][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  620.654849][T12641] R13: 00007f1b8c416038 R14: 00007f1b8c415fa0 R15: 00007fff50dc9d68
[  620.654879][T12641]  </TASK>
[  620.858205][T12643] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1347'.
[  621.588689][T11368] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  621.737833][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'.
[  622.623063][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'.
[  623.778743][T12692] program syz.2.1359 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  624.714743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  624.721507][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  625.688136][T12722] FAULT_INJECTION: forcing a failure.
[  625.688136][T12722] name failslab, interval 1, probability 0, space 0, times 0
[  625.751326][T12722] CPU: 0 UID: 0 PID: 12722 Comm: syz.1.1363 Not tainted syzkaller #0 PREEMPT(full) 
[  625.751361][T12722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  625.751375][T12722] Call Trace:
[  625.751390][T12722]  <TASK>
[  625.751399][T12722]  dump_stack_lvl+0x100/0x190
[  625.751442][T12722]  should_fail_ex.cold+0x5/0xa
[  625.751471][T12722]  should_failslab+0xc2/0x120
[  625.751499][T12722]  __kmalloc_cache_noprof+0x7a/0x6f0
[  625.751532][T12722]  ? snd_fasync_helper+0xe2/0x290
[  625.751559][T12722]  ? __might_fault+0xc5/0x140
[  625.751594][T12722]  ? __might_fault+0xc5/0x140
[  625.751633][T12722]  snd_fasync_helper+0xe2/0x290
[  625.751661][T12722]  ? __pfx_snd_timer_user_fasync+0x10/0x10
[  625.751692][T12722]  do_vfs_ioctl+0xfb2/0x13e0
[  625.751729][T12722]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  625.751774][T12722]  ? find_held_lock+0x2b/0x80
[  625.751797][T12722]  ? __fget_files+0x215/0x3d0
[  625.751820][T12722]  ? hook_file_ioctl_common+0x146/0x410
[  625.751857][T12722]  ? __fget_files+0x21f/0x3d0
[  625.751888][T12722]  __x64_sys_ioctl+0x114/0x210
[  625.751927][T12722]  do_syscall_64+0x106/0xf80
[  625.751950][T12722]  ? clear_bhb_loop+0x40/0x90
[  625.751980][T12722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.752004][T12722] RIP: 0033:0x7f443b99c819
[  625.752024][T12722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.752048][T12722] RSP: 002b:00007f4439bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  625.752071][T12722] RAX: ffffffffffffffda RBX: 00007f443bc15fa0 RCX: 00007f443b99c819
[  625.752087][T12722] RDX: 0000200000000080 RSI: 0000000000005452 RDI: 0000000000000005
[  625.752102][T12722] RBP: 00007f443ba32c91 R08: 0000000000000000 R09: 0000000000000000
[  625.752116][T12722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  625.752130][T12722] R13: 00007f443bc16038 R14: 00007f443bc15fa0 R15: 00007ffc0c3d0878
[  625.752161][T12722]  </TASK>
[  626.427506][T12723] FAULT_INJECTION: forcing a failure.
[  626.427506][T12723] name failslab, interval 1, probability 0, space 0, times 0
[  626.531921][T12723] CPU: 0 UID: 0 PID: 12723 Comm: syz.0.1372 Not tainted syzkaller #0 PREEMPT(full) 
[  626.531955][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  626.531970][T12723] Call Trace:
[  626.531978][T12723]  <TASK>
[  626.531987][T12723]  dump_stack_lvl+0x100/0x190
[  626.532028][T12723]  should_fail_ex.cold+0x5/0xa
[  626.532057][T12723]  ? sk_prot_alloc+0x10b/0x2a0
[  626.532083][T12723]  should_failslab+0xc2/0x120
[  626.532111][T12723]  __kmalloc_noprof+0xe0/0x850
[  626.532156][T12723]  sk_prot_alloc+0x10b/0x2a0
[  626.532186][T12723]  sk_alloc+0x36/0xe80
[  626.532223][T12723]  __netlink_create+0x5e/0x2c0
[  626.532257][T12723]  ? __wake_up+0x3f/0x60
[  626.532286][T12723]  netlink_create+0x293/0x610
[  626.532332][T12723]  ? __pfx_genl_bind+0x10/0x10
[  626.532357][T12723]  ? __pfx_genl_unbind+0x10/0x10
[  626.532382][T12723]  ? __pfx_genl_release+0x10/0x10
[  626.532412][T12723]  __sock_create+0x339/0x860
[  626.532448][T12723]  __sys_socket+0x14d/0x260
[  626.532478][T12723]  ? exc_page_fault+0x6f/0xd0
[  626.532501][T12723]  ? __pfx___sys_socket+0x10/0x10
[  626.532535][T12723]  ? do_user_addr_fault+0x8d6/0x12f0
[  626.532562][T12723]  __x64_sys_socket+0x72/0xb0
[  626.532593][T12723]  ? lockdep_hardirqs_on+0x78/0x100
[  626.532616][T12723]  do_syscall_64+0x106/0xf80
[  626.532639][T12723]  ? clear_bhb_loop+0x40/0x90
[  626.532668][T12723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.532692][T12723] RIP: 0033:0x7f8eb159e087
[  626.532713][T12723] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.532736][T12723] RSP: 002b:00007f8eb2387f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  626.532759][T12723] RAX: ffffffffffffffda RBX: 00007f8eb1816090 RCX: 00007f8eb159e087
[  626.532775][T12723] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  626.532790][T12723] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  626.532804][T12723] R10: 0000200000001500 R11: 0000000000000286 R12: 0000000000000000
[  626.532819][T12723] R13: 00007f8eb1816128 R14: 00007f8eb1816090 R15: 00007ffcd3071c48
[  626.532851][T12723]  </TASK>
[  626.884141][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'.
[  628.283305][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'.
[  629.219980][T12767] program syz.0.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  629.315254][T12774] FAULT_INJECTION: forcing a failure.
[  629.315254][T12774] name failslab, interval 1, probability 0, space 0, times 0
[  629.363599][T12774] CPU: 0 UID: 0 PID: 12774 Comm: syz.4.1374 Not tainted syzkaller #0 PREEMPT(full) 
[  629.363633][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  629.363648][T12774] Call Trace:
[  629.363655][T12774]  <TASK>
[  629.363664][T12774]  dump_stack_lvl+0x100/0x190
[  629.363707][T12774]  should_fail_ex.cold+0x5/0xa
[  629.363736][T12774]  ? udp_init_sock+0x24e/0x450
[  629.363771][T12774]  should_failslab+0xc2/0x120
[  629.363799][T12774]  __kmalloc_noprof+0xe0/0x850
[  629.363838][T12774]  ? lockdep_init_map_type+0x5c/0x250
[  629.363883][T12774]  udp_init_sock+0x24e/0x450
[  629.363915][T12774]  ? __pfx_udp_init_sock+0x10/0x10
[  629.363951][T12774]  inet_create+0x94c/0x1060
[  629.363982][T12774]  ? inet_create+0x94/0x1060
[  629.364017][T12774]  __sock_create+0x339/0x860
[  629.364052][T12774]  __sys_socket+0x14d/0x260
[  629.364084][T12774]  ? __pfx___sys_socket+0x10/0x10
[  629.364124][T12774]  __x64_sys_socket+0x72/0xb0
[  629.364154][T12774]  ? lockdep_hardirqs_on+0x78/0x100
[  629.364179][T12774]  do_syscall_64+0x106/0xf80
[  629.364201][T12774]  ? clear_bhb_loop+0x40/0x90
[  629.364231][T12774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.364255][T12774] RIP: 0033:0x7f1b8c19c819
[  629.364275][T12774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.364299][T12774] RSP: 002b:00007f1b8cfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  629.364322][T12774] RAX: ffffffffffffffda RBX: 00007f1b8c415fa0 RCX: 00007f1b8c19c819
[  629.364338][T12774] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  629.364352][T12774] RBP: 00007f1b8c232c91 R08: 0000000000000000 R09: 0000000000000000
[  629.364367][T12774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  629.364380][T12774] R13: 00007f1b8c416038 R14: 00007f1b8c415fa0 R15: 00007fff50dc9d68
[  629.364415][T12774]  </TASK>
[  629.805067][T11368] Bluetooth: hci2: unexpected event 0x0e length: 440 > 260
[  629.805961][T11368] Bluetooth: hci2: unexpected event for opcode 0x0f00
[  633.024266][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'.
[  633.045826][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  633.831675][T11368] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  633.843396][T11368] Bluetooth: hci2: Injecting HCI hardware error event
[  633.853562][T12187] Bluetooth: hci2: hardware error 0x00
[  634.107524][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'.
[  634.218959][T12843] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input14
[  635.910589][T12187] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  637.479810][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'.
[  640.050952][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'.
[  640.392572][T12965] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1403'.
[  641.513444][T11368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  641.523906][T11368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  641.532717][T11368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  641.541873][T11368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  641.549757][T11368] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  641.626500][T12982] FAULT_INJECTION: forcing a failure.
[  641.626500][T12982] name failslab, interval 1, probability 0, space 0, times 0
[  641.709699][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.4.1407 Not tainted syzkaller #0 PREEMPT(full) 
[  641.709732][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  641.709748][T12982] Call Trace:
[  641.709756][T12982]  <TASK>
[  641.709765][T12982]  dump_stack_lvl+0x100/0x190
[  641.709808][T12982]  should_fail_ex.cold+0x5/0xa
[  641.709836][T12982]  ? lsm_blob_alloc+0x68/0x90
[  641.709873][T12982]  should_failslab+0xc2/0x120
[  641.709901][T12982]  __kmalloc_noprof+0xe0/0x850
[  641.709940][T12982]  ? trace_kmem_cache_alloc+0xf3/0x120
[  641.709972][T12982]  lsm_blob_alloc+0x68/0x90
[  641.710019][T12982]  security_sk_alloc+0x2d/0x290
[  641.710047][T12982]  sk_prot_alloc+0x1d1/0x2a0
[  641.710082][T12982]  sk_alloc+0x36/0xe80
[  641.710120][T12982]  inet_create+0x3a0/0x1060
[  641.710153][T12982]  ? inet_create+0x94/0x1060
[  641.710188][T12982]  __sock_create+0x339/0x860
[  641.710223][T12982]  __sys_socket+0x14d/0x260
[  641.710255][T12982]  ? __pfx___sys_socket+0x10/0x10
[  641.710295][T12982]  __x64_sys_socket+0x72/0xb0
[  641.710325][T12982]  ? lockdep_hardirqs_on+0x78/0x100
[  641.710350][T12982]  do_syscall_64+0x106/0xf80
[  641.710372][T12982]  ? clear_bhb_loop+0x40/0x90
[  641.710402][T12982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.710427][T12982] RIP: 0033:0x7f1b8c19c819
[  641.710448][T12982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.710471][T12982] RSP: 002b:00007f1b8cfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  641.710494][T12982] RAX: ffffffffffffffda RBX: 00007f1b8c415fa0 RCX: 00007f1b8c19c819
[  641.710510][T12982] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002
[  641.710524][T12982] RBP: 00007f1b8c232c91 R08: 0000000000000000 R09: 0000000000000000
[  641.710538][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  641.710552][T12982] R13: 00007f1b8c416038 R14: 00007f1b8c415fa0 R15: 00007fff50dc9d68
[  641.710582][T12982]  </TASK>
[  643.065377][T12986] ovs_: entered promiscuous mode
[  643.593064][T11368] Bluetooth: hci5: command tx timeout
[  643.723529][T12979] chnl_net:caif_netlink_parms(): no params data found
[  643.935690][T12994] FAULT_INJECTION: forcing a failure.
[  643.935690][T12994] name failslab, interval 1, probability 0, space 0, times 0
[  644.038716][T12994] CPU: 0 UID: 0 PID: 12994 Comm: syz.4.1409 Not tainted syzkaller #0 PREEMPT(full) 
[  644.038750][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  644.038764][T12994] Call Trace:
[  644.038772][T12994]  <TASK>
[  644.038781][T12994]  dump_stack_lvl+0x100/0x190
[  644.038824][T12994]  should_fail_ex.cold+0x5/0xa
[  644.038853][T12994]  should_failslab+0xc2/0x120
[  644.038881][T12994]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  644.038919][T12994]  ? seq_open+0x55/0x170
[  644.038955][T12994]  ? __pfx_snd_info_seq_show+0x10/0x10
[  644.038989][T12994]  seq_open+0x55/0x170
[  644.039021][T12994]  ? __pfx_snd_info_seq_show+0x10/0x10
[  644.039051][T12994]  single_open+0xfc/0x1d0
[  644.039087][T12994]  snd_info_text_entry_open+0x284/0x2f0
[  644.039119][T12994]  ? trace_kmem_cache_alloc+0xf3/0x120
[  644.039147][T12994]  ? __pfx_snd_info_text_entry_open+0x10/0x10
[  644.039180][T12994]  ? kmem_cache_alloc_noprof+0x292/0x6e0
[  644.039218][T12994]  ? proc_reg_open+0x23f/0x5f0
[  644.039259][T12994]  ? __pfx_snd_info_text_entry_open+0x10/0x10
[  644.039294][T12994]  proc_reg_open+0x2ab/0x5f0
[  644.039335][T12994]  do_dentry_open+0x6d8/0x1660
[  644.039361][T12994]  ? __pfx_proc_reg_open+0x10/0x10
[  644.039407][T12994]  vfs_open+0x82/0x3f0
[  644.039442][T12994]  path_openat+0x208c/0x31a0
[  644.039479][T12994]  ? __pfx_path_openat+0x10/0x10
[  644.039516][T12994]  do_file_open+0x20e/0x430
[  644.039553][T12994]  ? __pfx_do_file_open+0x10/0x10
[  644.039602][T12994]  ? alloc_fd+0x476/0x790
[  644.039629][T12994]  ? do_getname+0x191/0x390
[  644.039664][T12994]  do_sys_openat2+0x10d/0x1e0
[  644.039697][T12994]  ? __pfx_do_sys_openat2+0x10/0x10
[  644.039733][T12994]  ? __fget_files+0x21f/0x3d0
[  644.039763][T12994]  __x64_sys_openat+0x12d/0x210
[  644.039797][T12994]  ? __pfx___x64_sys_openat+0x10/0x10
[  644.039843][T12994]  do_syscall_64+0x106/0xf80
[  644.039866][T12994]  ? clear_bhb_loop+0x40/0x90
[  644.039895][T12994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.039920][T12994] RIP: 0033:0x7f1b8c19c819
[  644.039939][T12994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.039963][T12994] RSP: 002b:00007f1b8cfcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  644.039986][T12994] RAX: ffffffffffffffda RBX: 00007f1b8c416090 RCX: 00007f1b8c19c819
[  644.040002][T12994] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  644.040017][T12994] RBP: 00007f1b8c232c91 R08: 0000000000000000 R09: 0000000000000000
[  644.040032][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.040046][T12994] R13: 00007f1b8c416128 R14: 00007f1b8c416090 R15: 00007fff50dc9d68
[  644.040077][T12994]  </TASK>
[  644.798690][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'.
[  645.218444][T12979] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.271460][T12979] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.317272][T12979] bridge_slave_0: entered allmulticast mode
[  645.352404][T12979] bridge_slave_0: entered promiscuous mode
[  645.382198][T12979] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.421225][T12979] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.460596][T13047] program syz.4.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  645.470459][T12979] bridge_slave_1: entered allmulticast mode
[  645.508775][T12979] bridge_slave_1: entered promiscuous mode
[  645.676917][T12979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  645.690405][T11368] Bluetooth: hci5: command tx timeout
[  645.774116][T12979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.065895][T12979] team0: Port device team_slave_0 added
[  646.112083][T12979] team0: Port device team_slave_1 added
[  646.329246][T12979] batman_adv: batadv0: Adding interface: batadv_slave_0
[  646.336367][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.559078][T12979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  646.645299][T12979] batman_adv: batadv0: Adding interface: batadv_slave_1
[  646.702625][T12979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.898631][T12979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  647.180839][T12979] hsr_slave_0: entered promiscuous mode
[  647.187648][T12979] hsr_slave_1: entered promiscuous mode
[  647.244114][T12979] debugfs: 'hsr0' already exists in 'hsr'
[  647.299515][T12979] Cannot create hsr debugfs directory
[  647.435460][T13075] futex_wake_op: syz.4.1419 tries to shift op by -2048; fix this program
[  647.749473][T11368] Bluetooth: hci5: command tx timeout
[  648.720121][T12979] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  648.829910][T12979] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  648.962248][T12979] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  648.996698][T12979] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  649.562468][T12979] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.657580][T12979] 8021q: adding VLAN 0 to HW filter on device team0
[  649.753348][T11387] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.760564][T11387] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.807805][T11387] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.815082][T11387] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.829454][T11368] Bluetooth: hci5: command tx timeout
[  650.452556][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'.
[  650.845097][T12979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.881225][T13134] can: request_module (can-proto-4) failed.
[  651.889553][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'.
[  652.255332][T12979] veth0_vlan: entered promiscuous mode
[  652.313659][T12979] veth1_vlan: entered promiscuous mode
[  652.437987][T12979] veth0_macvtap: entered promiscuous mode
[  652.591369][T12979] veth1_macvtap: entered promiscuous mode
[  652.674399][T12979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.736790][T12979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.859730][T11648] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.912480][T11648] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.953883][T11648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.192250][T11648] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.399160][T11387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.435867][T11387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.806617][T11387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.848664][T11387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.159383][T13193] program syz.5.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  655.480225][T13183] FAULT_INJECTION: forcing a failure.
[  655.480225][T13183] name failslab, interval 1, probability 0, space 0, times 0
[  655.622735][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.2.1433 Not tainted syzkaller #0 PREEMPT(full) 
[  655.622769][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  655.622784][T13183] Call Trace:
[  655.622792][T13183]  <TASK>
[  655.622800][T13183]  dump_stack_lvl+0x100/0x190
[  655.622843][T13183]  should_fail_ex.cold+0x5/0xa
[  655.622873][T13183]  should_failslab+0xc2/0x120
[  655.622900][T13183]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  655.622945][T13183]  ? seq_open+0x55/0x170
[  655.622981][T13183]  ? __pfx_snd_info_seq_show+0x10/0x10
[  655.623013][T13183]  seq_open+0x55/0x170
[  655.623046][T13183]  ? __pfx_snd_info_seq_show+0x10/0x10
[  655.623076][T13183]  single_open+0xfc/0x1d0
[  655.623111][T13183]  snd_info_text_entry_open+0x284/0x2f0
[  655.623144][T13183]  ? trace_kmem_cache_alloc+0xf3/0x120
[  655.623172][T13183]  ? __pfx_snd_info_text_entry_open+0x10/0x10
[  655.623205][T13183]  ? kmem_cache_alloc_noprof+0x292/0x6e0
[  655.623243][T13183]  ? proc_reg_open+0x23f/0x5f0
[  655.623285][T13183]  ? __pfx_snd_info_text_entry_open+0x10/0x10
[  655.623320][T13183]  proc_reg_open+0x2ab/0x5f0
[  655.623362][T13183]  do_dentry_open+0x6d8/0x1660
[  655.623388][T13183]  ? __pfx_proc_reg_open+0x10/0x10
[  655.623434][T13183]  vfs_open+0x82/0x3f0
[  655.623608][T13183]  path_openat+0x208c/0x31a0
[  655.623648][T13183]  ? __pfx_path_openat+0x10/0x10
[  655.623688][T13183]  do_file_open+0x20e/0x430
[  655.623719][T13183]  ? __pfx_do_file_open+0x10/0x10
[  655.623774][T13183]  ? alloc_fd+0x476/0x790
[  655.623802][T13183]  ? do_getname+0x191/0x390
[  655.623837][T13183]  do_sys_openat2+0x10d/0x1e0
[  655.623871][T13183]  ? __pfx_do_sys_openat2+0x10/0x10
[  655.623907][T13183]  ? __fget_files+0x21f/0x3d0
[  655.623938][T13183]  __x64_sys_openat+0x12d/0x210
[  655.623972][T13183]  ? __pfx___x64_sys_openat+0x10/0x10
[  655.624018][T13183]  do_syscall_64+0x106/0xf80
[  655.624042][T13183]  ? clear_bhb_loop+0x40/0x90
[  655.624072][T13183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.624098][T13183] RIP: 0033:0x7fb3d3b9c819
[  655.624120][T13183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  655.624143][T13183] RSP: 002b:00007fb3d4a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  655.624167][T13183] RAX: ffffffffffffffda RBX: 00007fb3d3e16090 RCX: 00007fb3d3b9c819
[  655.624183][T13183] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  655.624199][T13183] RBP: 00007fb3d3c32c91 R08: 0000000000000000 R09: 0000000000000000
[  655.624215][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  655.624230][T13183] R13: 00007fb3d3e16128 R14: 00007fb3d3e16090 R15: 00007ffc6e4ef7f8
[  655.624262][T13183]  </TASK>
[  656.320046][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1436'.
[  656.711361][T11368] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  657.687552][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'.
[  661.279258][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'.
[  661.765934][T13271] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  663.143245][T13291] netlink: 'syz.2.1452': attribute type 1 has an invalid length.
[  663.174696][T13291] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1452'.
[  663.729159][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  663.863687][T13302] netlink: 'syz.2.1454': attribute type 1 has an invalid length.
[  663.982233][T13302] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1454'.
[  666.170505][T13333] FAULT_INJECTION: forcing a failure.
[  666.170505][T13333] name failslab, interval 1, probability 0, space 0, times 0
[  666.235560][T13333] CPU: 0 UID: 0 PID: 13333 Comm: syz.5.1462 Not tainted syzkaller #0 PREEMPT(full) 
[  666.235594][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  666.235608][T13333] Call Trace:
[  666.235616][T13333]  <TASK>
[  666.235625][T13333]  dump_stack_lvl+0x100/0x190
[  666.235668][T13333]  should_fail_ex.cold+0x5/0xa
[  666.235698][T13333]  should_failslab+0xc2/0x120
[  666.235725][T13333]  __kmalloc_cache_noprof+0x7a/0x6f0
[  666.235758][T13333]  ? mem_cgroup_css_alloc+0x858/0x1e00
[  666.235802][T13333]  mem_cgroup_css_alloc+0x858/0x1e00
[  666.235852][T13333]  cgroup_apply_control_enable+0x4c3/0xbd0
[  666.235904][T13333]  cgroup_mkdir+0x57f/0x1330
[  666.235931][T13333]  ? __pfx_cgroup_mkdir+0x10/0x10
[  666.235956][T13333]  kernfs_iop_mkdir+0x111/0x190
[  666.235979][T13333]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  666.236017][T13333]  vfs_mkdir+0x361/0x850
[  666.236058][T13333]  filename_mkdirat+0x48b/0x5e0
[  666.236090][T13333]  ? __pfx_filename_mkdirat+0x10/0x10
[  666.236118][T13333]  ? strncpy_from_user+0x19d/0x2d0
[  666.236152][T13333]  ? do_getname+0x191/0x390
[  666.236187][T13333]  __x64_sys_mkdir+0x6b/0x90
[  666.236216][T13333]  do_syscall_64+0x106/0xf80
[  666.236239][T13333]  ? clear_bhb_loop+0x40/0x90
[  666.236268][T13333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.236293][T13333] RIP: 0033:0x7fae1299c819
[  666.236312][T13333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.236336][T13333] RSP: 002b:00007fae10bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  666.236359][T13333] RAX: ffffffffffffffda RBX: 00007fae12c15fa0 RCX: 00007fae1299c819
[  666.236390][T13333] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000
[  666.236405][T13333] RBP: 00007fae12a32c91 R08: 0000000000000000 R09: 0000000000000000
[  666.236420][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  666.236434][T13333] R13: 00007fae12c16038 R14: 00007fae12c15fa0 R15: 00007ffefa0602d8
[  666.236465][T13333]  </TASK>
[  669.789317][T13389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1473'.
[  673.140849][T11386] netdevsim netdevsim106 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  673.303677][T13417] bond0: no command found in slaves file - use +ifname or -ifname
[  675.800114][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1482'.
[  675.831597][T13440] netlink: 'syz.0.1482': attribute type 1 has an invalid length.
[  675.891408][T13440] netlink: 51505 bytes leftover after parsing attributes in process `syz.0.1482'.
[  677.166105][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'.
[  679.749349][   T31] INFO: task kworker/u10:2:11367 blocked for more than 142 seconds.
[  679.759064][   T31]       Not tainted syzkaller #0
[  679.764288][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  679.840138][   T31] task:kworker/u10:2   state:D stack:24072 pid:11367 tgid:11367 ppid:2      task_flags:0x4208060 flags:0x00080000
[  679.899754][   T31] Workqueue: netns cleanup_net
[  679.904630][   T31] Call Trace:
[  679.907927][   T31]  <TASK>
[  679.976430][   T31]  __schedule+0xfee/0x6120
[  679.990210][   T31]  ? __lock_acquire+0x4a5/0x2630
[  679.995354][   T31]  ? __pfx___schedule+0x10/0x10
[  680.060282][   T31]  ? find_held_lock+0x2b/0x80
[  680.065065][   T31]  ? schedule+0x2bf/0x390
[  680.103832][   T31]  schedule+0xdd/0x390
[  680.108025][   T31]  schedule_timeout+0x1b2/0x280
[  680.158613][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  680.164180][   T31]  ? mark_held_locks+0x40/0x70
[  680.212338][   T31]  __wait_for_common+0x2e7/0x4c0
[  680.217406][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  680.294017][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  680.316358][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  680.350265][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[  680.356165][   T31]  __flush_workqueue+0x3f7/0x1200
[  680.408636][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  680.414278][   T31]  ? net_generic+0xea/0x2a0
[  680.463845][   T31]  ? rxrpc_discard_prealloc+0x752/0x9c0
[  680.509403][   T31]  ? rxrpc_release_calls_on_socket+0x384/0x4e0
[  680.515665][   T31]  rxrpc_release+0x2a7/0x6a0
[  680.559350][   T31]  sock_release+0x91/0x1c0
[  680.593084][   T31]  afs_close_socket+0x21b/0x3e0
[  680.598021][   T31]  ? afs_wait_for_servers+0xec/0x220
[  680.645808][   T31]  ? __pfx_afs_close_socket+0x10/0x10
[  680.661521][   T31]  ? __timer_delete_sync+0x151/0x1c0
[  680.666880][   T31]  ? __timer_delete_sync+0x10f/0x1c0
[  680.731331][   T31]  ? __pfx_afs_net_exit+0x10/0x10
[  680.736432][   T31]  afs_net_exit+0x93/0x150
[  680.790062][   T31]  ops_undo_list+0x2ee/0xab0
[  680.794730][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  680.847716][   T31]  ? cleanup_net+0x332/0x920
[  680.859001][   T31]  ? idr_destroy+0x62/0x2e0
[  680.908562][   T31]  cleanup_net+0x499/0x920
[  680.913077][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  680.918068][   T31]  ? rcu_is_watching+0x12/0xc0
[  681.032112][   T31]  process_one_work+0xa23/0x19a0
[  681.037240][   T31]  ? __pfx_process_one_work+0x10/0x10
[  681.109335][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  681.114397][   T31]  worker_thread+0x5ef/0xe50
[  681.174881][   T31]  ? kthread+0x13a/0x450
[  681.208630][   T31]  ? __pfx_worker_thread+0x10/0x10
[  681.213835][   T31]  kthread+0x370/0x450
[  681.217955][   T31]  ? __pfx_kthread+0x10/0x10
[  681.248618][   T31]  ret_from_fork+0x754/0xd80
[  681.253306][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  681.289431][   T31]  ? __switch_to+0x7b4/0x1120
[  681.294278][   T31]  ? __pfx_kthread+0x10/0x10
[  681.324666][   T31]  ret_from_fork_asm+0x1a/0x30
[  681.338839][   T31]  </TASK>
[  681.357119][   T31] 
[  681.357119][   T31] Showing all locks held in the system:
[  681.408699][   T31] 1 lock held by khungtaskd/31:
[  681.413629][   T31]  #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  681.509053][   T31] 3 locks held by kworker/0:5/5893:
[  681.514328][   T31]  #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  681.558572][   T31]  #1: ffff88806b8c6008 (&____s->seqcount#15){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100
[  681.600650][   T31]  #2: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0
[  681.648672][   T31] 3 locks held by kworker/u10:2/11367:
[  681.654187][   T31]  #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[  681.698610][   T31]  #1: ffffc90004f57d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[  681.719294][   T31]  #2: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  681.738788][   T31] 1 lock held by syz.3.1241/12096:
[  681.744035][   T31]  #0: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  681.769804][   T31] 2 locks held by getty/12478:
[  681.782301][   T31]  #0: ffff888037eca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  681.808588][   T31]  #1: ffffc90004ad52f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  681.829361][   T31] 1 lock held by syz.1.1363/12722:
[  681.834538][   T31]  #0: ffffffff905fe050 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[  681.858560][   T31] 1 lock held by syz.5.1467/13363:
[  681.863729][   T31]  #0: ffff8880469187c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  681.898621][   T31] 1 lock held by syz.2.1477/13408:
[  681.903792][   T31]  #0: ffffffff906168a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  681.930889][   T31] 1 lock held by syz.0.1482/13438:
[  681.936088][   T31]  #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  681.969402][   T31] 1 lock held by syz.4.1488/13468:
[  681.991958][   T31] 
[  681.994370][   T31] =============================================
[  681.994370][   T31] 
[  682.028616][   T31] NMI backtrace for cpu 0
[  682.028636][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  682.028663][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  682.028676][   T31] Call Trace:
[  682.028683][   T31]  <TASK>
[  682.028692][   T31]  dump_stack_lvl+0x100/0x190
[  682.028732][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  682.028772][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  682.028808][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  682.028844][   T31]  sys_info+0x141/0x190
[  682.028870][   T31]  watchdog+0xd25/0x1050
[  682.028902][   T31]  ? __pfx_watchdog+0x10/0x10
[  682.028925][   T31]  ? __kthread_parkme+0x18c/0x230
[  682.028955][   T31]  ? kthread+0x13a/0x450
[  682.028985][   T31]  ? __pfx_watchdog+0x10/0x10
[  682.029006][   T31]  kthread+0x370/0x450
[  682.029036][   T31]  ? __pfx_kthread+0x10/0x10
[  682.029069][   T31]  ret_from_fork+0x754/0xd80
[  682.029105][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  682.029143][   T31]  ? __switch_to+0x7b4/0x1120
[  682.029169][   T31]  ? __pfx_kthread+0x10/0x10
[  682.029202][   T31]  ret_from_fork_asm+0x1a/0x30
[  682.029247][   T31]  </TASK>
[  682.478858][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  682.485767][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  682.494903][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  682.505063][   T31] Call Trace:
[  682.508354][   T31]  <TASK>
[  682.511298][   T31]  dump_stack_lvl+0x100/0x190
[  682.516034][   T31]  vpanic+0x552/0x970
[  682.520036][   T31]  ? __pfx_vpanic+0x10/0x10
[  682.524799][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  682.531018][   T31]  panic+0xd1/0xe0
[  682.534769][   T31]  ? __pfx_panic+0x10/0x10
[  682.539214][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  682.545572][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  682.551776][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  682.557972][   T31]  ? watchdog.cold+0x198/0x1ca
[  682.562770][   T31]  ? watchdog+0xd35/0x1050
[  682.567402][   T31]  watchdog.cold+0x1a9/0x1ca
[  682.572051][   T31]  ? __pfx_watchdog+0x10/0x10
[  682.576855][   T31]  ? __kthread_parkme+0x18c/0x230
[  682.581967][   T31]  ? kthread+0x13a/0x450
[  682.586263][   T31]  ? __pfx_watchdog+0x10/0x10
[  682.590991][   T31]  kthread+0x370/0x450
[  682.595104][   T31]  ? __pfx_kthread+0x10/0x10
[  682.599728][   T31]  ret_from_fork+0x754/0xd80
[  682.604528][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  682.610572][   T31]  ? __switch_to+0x7b4/0x1120
[  682.615423][   T31]  ? __pfx_kthread+0x10/0x10
[  682.620065][   T31]  ret_from_fork_asm+0x1a/0x30
[  682.625001][   T31]  </TASK>
[  682.628116][   T31] Kernel Offset: disabled
[  682.632468][   T31] Rebooting in 86400 seconds..