last executing test programs:

17m20.867954681s ago: executing program 3 (id=145):
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r0 = signalfd4$auto(0xffffffffffffffff, 0x0, 0x6, 0xa)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = eventfd$auto(0x0)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0)
pread64$auto(r2, 0x0, 0x682c3390, 0xcff)
readv$auto(r1, &(0x7f0000000380)={0x0, 0x8}, 0x100)
remap_file_pages$auto(0x0, 0x100000000, 0x5, 0x0, 0x4)
read$auto(r0, &(0x7f0000000000)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r3, 0x0, 0x8, 0x0)
write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8)
ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, &(0x7f0000000080)="7c5f0498760da8d01654b2f35091d652eb1d7bef505ad939eb378a74511d43305347e25f17404bab2b9a220c87cb1f5d8f3411d56ecff28609e0f8e18e22e64fc36757a5154aefec56665261")

17m18.473956226s ago: executing program 3 (id=149):
unshare$auto(0x1)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x400)
mmap$auto(0x1, 0xec000, 0x10000000df, 0x1000000000012, 0xffffffffffffffff, 0xffffffffffffe65e)
ustat$auto(0x801, 0x0)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000002c0)={{0x3ff, 0x0, 0xb20, 0x8e61}, "d3bb4b2093c0abff7efaa99647a60326600d45dd6bd2ab3caa319fbbf8a96319b6b879bb857b65e534029a651505f9ad962dbfedcd205bae05f4c4e90cd28549c5190933578ec0f196e7d900", 0xfffffff5})
mmap$auto(0x0, 0x5, 0x9, 0x72, 0x401, 0x2008000)
setuid$auto(0x800000000008)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x4, 0x2, 0xcb6}, 0xa6)
unshare$auto(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = mq_open$auto(&(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xa7e, 0x6, &(0x7f0000000100)={0x2, 0x200, 0x9, 0xd})
mmap$auto(0x80000, 0x3d01, 0x8000, 0xf8, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
write$auto_mousedev_fops_mousedev(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002240)={&(0x7f0000000940)=ANY=[@ANYBLOB="6126fc73b827f4cf994a8734cd24dde9cb418c1766b62104247dd808cb55db2b6cda19ef7eebf4fd013056b1c2bbbe38245e08510d1a032c67016969202286cbac8cf4b0380c264518207c5c82ac652d16e1c85b0446f65f827fbae4063a987cae4a1ecae99ec6d160437e1551b55bc2dbafac959cf28d22a375683db605a048a1fe68ad8f8ee42e9152f8fd48b8283413d8d858b6310c5e77550e31bfa74b08687e182b5edfb8bd247a3662705da90bbdf8ece8c4d57187febe9e63a00d0928e1040460d665d41eff1b7f91524f95cac83a37e414a9bda7c039420027eafb38c18de923cf2f8a69d5b9979b6cbd848ffc561e66823d6db3bdc2dd3678f038a629d15556783832b5cd2c01b7386f10875c78a0971b5e5b52a12912f31d92425bcf60a2ee4e5d42796ab809779554c7488bfa", @ANYRES32=r0, @ANYBLOB="00002dbd7000adfc012d18a17bae09fedbdf250500009a6785a13c0148bb6cb4b1f72bca400aa2c37f4460856c5867124f9ce8711213f5b88b809eb4cb7f2b325a62a933f8df2c432394d9fd365e868d823b81cdf9"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004)
sendmsg$auto_NFC_CMD_DEV_UP(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x10000}, 0x40000004)
epoll_create$auto(0x1)
r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec20\x00', 0x212102, 0x0)
epoll_ctl$auto(r4, 0x5, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r2, &(0x7f0000000180)='}^,$\\\x00', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_KEY_SET(r5, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="18040000", @ANYRES16, @ANYBLOB="010028bd7000fedbdf251700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xe040)

17m16.275991177s ago: executing program 3 (id=154):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0)
ioctl$auto(r0, 0x5522, r0)
ioctl$auto(r0, 0x5521, 0xffffffffffffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28)
ioctl$auto(r1, 0x2400000, 0xffffffffffffffff)
futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/maps\x00', 0x0, 0x0)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0)
socket(0x18, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa)
fanotify_init$auto(0x9, 0x942)
write$auto(r2, 0x0, 0xfffffdf1)
linkat$auto(r2, 0x0, r2, &(0x7f0000000000)='&&\x00', 0x6)
fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1)
ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, &(0x7f00000000c0))
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00')
mprotect$auto(0x0, 0x8000000000000001, 0x8)
prctl$auto(0x4, 0x1, 0x0, 0x9, 0x0)

17m13.728373284s ago: executing program 3 (id=159):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyr0/power/runtime_active_time\x00', 0xa001, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyr0/power/runtime_active_time\x00', 0xa001, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram5/queue/dma_alignment\x00', 0x200c0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000240)=@prog_bind_map={r0, r1, 0x7}, 0xa)
shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f00000005c0)={{0x120000, 0xffffffffffffffff, <r4=>0x0, 0x3, 0x3, 0x1}, 0xda, 0x80000000, 0x8000, 0x1, @inferred, @inferred, 0x9, 0x0, &(0x7f0000000440)="3bb5bd098dbb83d3ff1739ad1290d8b7955bdfc2c57a5085a1fa7426ac0f09c5e295a066c081e8461ce70110798df27f8129f3cf75c60720f5228d90749d2e68a25fee192ab6412e2c8863856a894325ff9fc2baf5f77a7a6d4776ee9d027195a3dc4e47ff40a22981ffc0ea0353c36f78b8be9486f6525f630d1a1780214c0ddeb35fdf00075e722c2c5c6b8beefdabb85b0b65ba62", &(0x7f0000000500)="80ab95118765f4ca9e67b9db1b4fed2d1862c5ddb32781b2876270ee136324b43e9c2b28d4748680fd2335194bde2bbc38e6286442d6c4727f592be87d619f13cc228197d4c53c68cdc3536921f2905ee399a5229eb215c228504316ccdbb4e0606bc851788a523f054425dfe297ea789ab545460628ebf62de1b2431363ffa0dcac3fa269019ccb4d65836e6e9064f33e0e7c6afa431c78cefdb63bf82dfb286eca6359c84f41916b09e8aec18fa1aa54cc8ef87c5686af4d"})
fsconfig$auto(r3, 0x9, &(0x7f0000000300)='\x00', &(0x7f0000000340)="a3b86d82f6d3970d6e091a219b926c7a3f27ad7c57b7d5b49eec88bfbaf219dba234d66c6bece2e981e53ae27933fe37dc8738b48f4a9f0a3bd286bdab34c29ff89a65b8e9183121fe7d56851387885c25e6e725769a6b9e315fa576db725b39df298994e0e6eafd6c5e27a9a7ba25f5590238148ed2db5511c36f279db2e9453fa910a72fcb59f1c397a45729cbf66c9603b73be3f45a73736f4d6df120baadfda4ee20a729d255592d7650551d0bc259815dc3db879420de098b5503997e6382e6303321c56f4a5916320fca189cc8d3e9aa232a9bdc686ecdac87721e3c4f8c43aa1c22ffe86d7be4", r4) (async)
fsconfig$auto(r3, 0x9, &(0x7f0000000300)='\x00', &(0x7f0000000340)="a3b86d82f6d3970d6e091a219b926c7a3f27ad7c57b7d5b49eec88bfbaf219dba234d66c6bece2e981e53ae27933fe37dc8738b48f4a9f0a3bd286bdab34c29ff89a65b8e9183121fe7d56851387885c25e6e725769a6b9e315fa576db725b39df298994e0e6eafd6c5e27a9a7ba25f5590238148ed2db5511c36f279db2e9453fa910a72fcb59f1c397a45729cbf66c9603b73be3f45a73736f4d6df120baadfda4ee20a729d255592d7650551d0bc259815dc3db879420de098b5503997e6382e6303321c56f4a5916320fca189cc8d3e9aa232a9bdc686ecdac87721e3c4f8c43aa1c22ffe86d7be4", r4)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
socket(0x21, 0x6, 0x1003)
msgctl$auto(0x3e33228c, 0x8, &(0x7f0000000180)={{0xff, 0xee01, <r5=>0xee00, 0x7f, 0x9, 0x71d, 0x6}, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0xff, 0x81, 0x63, 0x5, 0x8, 0x7, 0x2, 0x7, 0x3, @inferred, @inferred=0xffffffffffffffff})
ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000200)={0xfffffffb, r5, 0x1, 0x40})
mmap$auto(0x80000001, 0x20008, 0x4000000000e1, 0xeb1, 0xffffffffffffffff, 0x8000)
mprotect$auto(0x0, 0x806121, 0x6)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) (async)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b) (async)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10003, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, 0x0, 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)

17m12.64369103s ago: executing program 3 (id=161):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e/uevent\x00', 0x40000, 0x0)
mmap$auto(0x8, 0x20000007, 0x9, 0x9b72, 0x2, 0x8000)
timer_create$auto(0x2, 0x0, 0x0)
timer_create$auto(0x9, 0x0, 0x0)
timer_delete$auto(0x1)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e24, @multicast1}, 0x50)
r0 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_rx\x00', 0x8000, 0x0)
r1 = setfsuid$auto(0xee00)
r2 = setfsuid$auto(0xee01)
setresuid$auto(r1, r2, r1)
r3 = socket(0xa, 0x1, 0x84)
setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x5f)
read$auto_dfs_sched_itmt_fops_itmt(r0, 0x0, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
socket(0x15, 0x5, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, &(0x7f0000000180)})
select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0xe8, 0x9, 0xffffffffffffff7f, 0x0, 0x7, 0x80000000004, 0x6, 0x7, 0x9, 0x100000000000000c, 0x8, 0x1, 0x10fcc, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
write$auto(0xffffffffffffffff, 0x0, 0x81)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
mlockall$auto(0x7)

17m11.635538054s ago: executing program 3 (id=166):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/amidi2\x00', 0x2, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000001d00)=0x800) (async)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
mmap$auto(0x40000000000009, 0xa, 0x1000000000000000, 0x100000014, r1, 0x8000) (async)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
mincore$auto(0x0, 0x10000, 0x0) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
timer_settime$auto(0x1, 0x3, 0x0, 0x0) (async)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket(0xa, 0x3, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async)
ioctl$auto(r2, 0x400454ca, 0x38) (async)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyc3\x00', 0x420400, 0x0)
ioctl$auto(r3, 0x4bfa, 0x9) (async)
r4 = fcntl$getown(r2, 0x9)
prctl$auto(0x79, 0x7, r4, 0x4d, 0x1) (async)
getrlimit$auto(0x80, 0x0) (async)
ioctl$auto_TUNSETVNETLE2(r2, 0x400454dc, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) (async)
openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0)
socket(0xa, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x6) (async)
setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
io_uring_setup$auto(0x59, 0x0)

16m56.245004345s ago: executing program 32 (id=166):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/amidi2\x00', 0x2, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000001d00)=0x800) (async)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
mmap$auto(0x40000000000009, 0xa, 0x1000000000000000, 0x100000014, r1, 0x8000) (async)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
mincore$auto(0x0, 0x10000, 0x0) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
timer_settime$auto(0x1, 0x3, 0x0, 0x0) (async)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
socket(0xa, 0x3, 0x8)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async)
ioctl$auto(r2, 0x400454ca, 0x38) (async)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyc3\x00', 0x420400, 0x0)
ioctl$auto(r3, 0x4bfa, 0x9) (async)
r4 = fcntl$getown(r2, 0x9)
prctl$auto(0x79, 0x7, r4, 0x4d, 0x1) (async)
getrlimit$auto(0x80, 0x0) (async)
ioctl$auto_TUNSETVNETLE2(r2, 0x400454dc, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) (async)
openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0)
socket(0xa, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x6) (async)
setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
io_uring_setup$auto(0x59, 0x0)

13m52.415253521s ago: executing program 1 (id=699):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
mmap$auto(0x4, 0xd945, 0x2, 0x40eb1, r0, 0x300000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0x400053, 0x9)
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0)
getpid()
unshare$auto(0x40000080)
prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2)
socket(0x10, 0x2, 0xc)
r4 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
getsockopt$auto_SO_TIMESTAMP_NEW(r4, 0x4, 0x3f, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x616)
mmap$auto(0x7fffffff, 0x2000c, 0xdd, 0x20eb1, 0x40000000000a5, 0x8000)
r5 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3f, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x285, 0x200, 0x0, 0x7d, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xffffeffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x84e6, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x2645]}, 0x202, 0xd)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r6=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r5, &(0x7f0000000c80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\a\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf251b000000ea060280f20036800400888004007b8008002500", @ANYRES32=0x0, @ANYBLOB="0800ba00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x744}, 0x1, 0x0, 0x0, 0x1}, 0x801)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc1}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)

13m47.807585069s ago: executing program 1 (id=709):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB, @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

13m47.57898254s ago: executing program 1 (id=710):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x40076f3f, 0x38)
r0 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4)
fallocate$auto(r0, 0x0, 0x9, 0x4cbd5d)
syz_genetlink_get_family_id$auto_nl802154(0x0, r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r1 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f00000001c0)="dd2fe40a09", 0x5ac, &(0x7f0000000100)={&(0x7f0000000340), 0x21}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x1010001, 0x100000003)
madvise$auto(0x1000, 0x400050, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0)
write$auto(r2, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0xf04, 0x0)
io_uring_setup$auto(0x12, 0x0)
close_range$auto(0x2, 0x8, 0x0)
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5)
futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000)
close_range$auto(0x2, 0x8, 0x0)
writev$auto(0xffffffffffffffff, 0x0, 0x6)

13m46.19656679s ago: executing program 1 (id=715):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/vlan1\x00', 0x0, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x4b52, 0x1)
mmap$auto(0x800000000000, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x800000000000, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x440000, 0x0)
r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/video4linux/swradio13/dev_debug\x00', 0x2, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/video4linux/swradio13/dev_debug\x00', 0x2, 0x0)
pwritev$auto(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x8001) (async)
pwritev$auto(r2, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x8001)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x40000000000000)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fddbdf250d000000050007"], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) (async)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012bbd7000fddbdf250d000000050007"], 0x1c}, 0x1, 0x0, 0x0, 0x60040440}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (async)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) (async)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1051d012c600ffdbdf251f0000004400fe008acdd7f1f6d1b500ffffffaf5c8f1d2352681904aecf67fd2aff1c8ace4eb79968ad598e18bd17569d8e89263b084300d969e8faf21fbba61d126c5932df349c4f"], 0x58}, 0x1, 0x0, 0x0, 0x88d5}, 0x800)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef)
mmap$auto(0x1003, 0x9d7, 0x9, 0x1d, 0xffffffffffffffff, 0x40000000) (async)
mmap$auto(0x1003, 0x9d7, 0x9, 0x1d, 0xffffffffffffffff, 0x40000000)
unshare$auto(0x40000080)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8040, 0x0) (async)
r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8040, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000180)=0x7)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) (async)
r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, 0x0)
close_range$auto(0x2, 0xa, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE2(0xffffffffffffffff, 0x2272, &(0x7f0000000180))

13m43.81463713s ago: executing program 1 (id=720):
mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
ioctl$auto_FIONREAD(r0, 0x541b, 0x7)
close_range$auto(r0, 0x8, 0x10000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
r2 = socket(0x29, 0x5, 0x0)
sendmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080), 0x34000}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f7ffffe, 0xd9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0)
write$auto_sg_fops_sg(r3, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmsg$auto_IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x10, 0x80002, 0x0)
r4 = socket(0x18, 0x800, 0x1)
getpeername$auto(r4, 0x0, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001080), r0)
r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x280, 0x0)
ioctl$auto_UI_SET_SWBIT(r6, 0x4004556d, &(0x7f0000000680)=0x1)
sendmsg$auto_L2TP_CMD_NOOP(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4)

13m42.739254066s ago: executing program 1 (id=724):
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x1d, 0x2, 0x7)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x6b, 0x3, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x20499d, 0x9)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x7ff)
socket(0xa, 0x3, 0x3b)
prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7)
msync$auto(0x200000, 0x2000000005, 0x6)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

13m27.460658803s ago: executing program 33 (id=724):
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x4, 0x0)
socket(0x1d, 0x2, 0x7)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x6b, 0x3, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x20499d, 0x9)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
socket(0xa, 0x5, 0x84)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x7ff)
socket(0xa, 0x3, 0x3b)
prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7)
msync$auto(0x200000, 0x2000000005, 0x6)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

7.931206607s ago: executing program 0 (id=2934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="05"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x8, 0x0, 0x1, 0xd}, 0x803}, 0x10a, 0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
userfaultfd$auto(0x1)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0x4138ae84, &(0x7f0000000140)={0x7})
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0xffffffffffffffff, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r4 = epoll_create$auto(0x1)
capset$auto(0x0, 0x0)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1280, 0x0)
epoll_ctl$auto(r4, 0x1, r3, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0)
read$auto(r5, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)
close_range$auto(0xffffffffffffffff, r3, 0x0)
socket(0x2, 0x1, 0x0)
socketpair$auto(0x7ff, 0x3, 0x101, 0x0)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0)
syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff)

6.90765846s ago: executing program 5 (id=2938):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x1)
r1 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000040)=@raw_tracepoint={0x401, r0, 0x0, 0x2}, 0x2)
fdatasync$auto(r1)

6.697415712s ago: executing program 5 (id=2939):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)="158f4a2b")
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$auto(0x0, 0x0)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

6.164305142s ago: executing program 4 (id=2940):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0xd, 0x0)
setitimer$auto(0x2, &(0x7f0000000080)={{0x7, 0x5}, {0x0, 0x8}}, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x800000000, 0x400008, 0xdf, 0x9b73, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}}}, 0x66)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mmap$auto(0x0, 0x600006, 0x2, 0x406b1, 0xffffffffffffffff, 0x300000000000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
open(0x0, 0x163340, 0x16e)
fcntl$auto(0xffffffffffffffff, 0x80000001, 0xa553)
sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-touch3\x00', 0x88382, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/plpmtud_probe_interval\x00', 0x88002, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000100)="244b9aa6", 0x4)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1)

6.127578209s ago: executing program 0 (id=2942):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketcall$auto(0xa, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0501, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0)
write$auto(0x3, 0x0, 0xffd8)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x7b7202, 0x408}, 0x18)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0)
ioctl$auto(r3, 0x10, r0)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/execdomains\x00', 0x0, 0x0)
pread64$auto(r4, 0x0, 0x8100000041, 0x413e)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae93, 0x0)

5.981934466s ago: executing program 2 (id=2943):
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x6) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x6)
socket(0x2, 0x2, 0x0) (async)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x6, @empty}, 0x67)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x201, 0xff, 0xf7, 0x6f, 0x6}, 0x50)
select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x7, 0x0, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8002, 0xa, 0xfffffffffffffffe]}, 0x0) (async)
select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x7, 0x0, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8002, 0xa, 0xfffffffffffffffe]}, 0x0)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000140)="ac3a506ea4567b118ed33dd925eb402489d0f8e6d5ffe3f72d746969a4e68837bb012230e4e283ca24de0bd4f9667550d84cd396ddccb9dc0191beb64bc48528fa105a67bc514c561eb90ff62bf60cf25209b259946e87f5aed529a0577edf37893bad8e34cf31510ec20db1f1f6032178a411a972550890d7cbd73cb8e062928f4c1c7bb3", 0x85)
semctl$auto(0x7, 0x6, 0x13, 0x1) (async)
semctl$auto(0x7, 0x6, 0x13, 0x1)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x82, 0x0)
socket(0x2, 0x3, 0x8)
socket(0x2, 0x1, 0x0)
epoll_create$auto(0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r0, 0x0)
epoll_ctl$auto(0x5, 0x9, r0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2, 0x3, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x54) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x54)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0xfffffff0) (async)
ioctl$auto_PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0xfffffff0)
sigaltstack$auto(0x0, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

5.80378018s ago: executing program 0 (id=2944):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140))
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
unshare$auto(0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x1d, 0x2, 0x7)
getsockopt$auto(r2, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0)
r3 = prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410)
madvise$auto(0x8, 0x6, 0x8)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/45, 0x2d)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0)
ioctl$auto_USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0)
read$auto(r1, 0x0, 0x9)

5.715437396s ago: executing program 5 (id=2945):
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xf, "0000e100"}, 0x1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), 0xffffffffffffffff)
r2 = waitid$auto_P_ALL(0x0, 0xd, &(0x7f00000000c0)={@siginfo_0_0={0x4, 0x2, 0xabe, @_kill={0xffffffffffffffff, 0xee01}}}, 0x4, &(0x7f0000000140)={{0x7, 0xdbc}, {0xffffffffffffffff, 0x3}, 0x100, 0x6, 0x800, 0x6, 0x9, 0x9, 0x5, 0x7, 0x1, 0x7, 0x6, 0x100000000, 0x64, 0x8})
sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="000226bd7000fddbdf25010000000800010000000000910102801800ae800c00bd00010000000100000008006400", @ANYRES32=r0, @ANYBLOB="9900648004002a8008004700", @ANYRES32=r2, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
r3 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_VHOST_SET_LOG_FD2(r3, 0x4004af07, &(0x7f0000000080)=r5)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000700}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket(0x15, 0x5, 0x0)
prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7)
unshare$auto(0x40000080)

5.448994103s ago: executing program 4 (id=2946):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)="158f4a2b")
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$auto(0x0, 0x0)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

4.979136805s ago: executing program 0 (id=2947):
unshare$auto(0x40000080)
mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0)
write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
bind$auto(0x3, 0x0, 0x6d)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
socket(0x2, 0x801, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
fanotify_init$auto(0xf, 0x0)
mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1085, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
open(0x0, 0x80000, 0xf3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8d4)

4.864426461s ago: executing program 2 (id=2948):
unshare$auto(0x40000080)
mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0)
write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
bind$auto(0x3, 0x0, 0x6d)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
socket(0x2, 0x801, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
fanotify_init$auto(0xf, 0x0)
mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1085, 0x9)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')
open(0x0, 0x80000, 0xf3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8d4)

3.770693827s ago: executing program 4 (id=2949):
r0 = socket(0x72b023b65585996e, 0x5, 0x84)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x20499d, 0x9)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
io_uring_setup$auto(0xb, &(0x7f0000000040)={0x5fa, 0x80, 0x9, 0x3, 0x7fff, 0x8000, r0, [0x2, 0xa49, 0xa6e], {0x8, 0x81, 0xffff, 0x40, 0x5, 0x9, 0xfd, 0x3}, {0x8000, 0xdeb, 0x9, 0x7, 0xf5b, 0x7d19, 0x7fff000, 0xe, 0x1}})
r1 = socket(0xa, 0x3, 0x4)
r2 = getsockopt$auto(r1, 0xff, 0x7, 0x0, 0x0)
mmap$auto(0x1, 0xffff, 0xbfb, 0x13, r2, 0x1007ffe)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000)
ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0x2)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001e00)='/sys/kernel/debug/tracing/set_event\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2})

3.717856031s ago: executing program 0 (id=2950):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0xc, 0xb, 0x6}, 0x0)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000540)={0x5, 0x0, '\x00', "1aef09f075b8e6b77c3fa8db259056a2", "9649efcec918d7563fb34bf487b99df832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a373793ff0f00007aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c403966e25bae3ea9e00000000005ed727190a9b59c895c6fd3f4857dd7652acc9fc8eaaf6552ac0128d06000000000300000000000000699577b2ad1a822a23d98d5dcef24a81ad3101f9c69ebdea766c97d5a8214e6804939ac95778faffffffc4da43984d0b0f00"})
r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x1, 0x4000010, 0x100, 0x6, 0x1, 0x80a, 0xffffffffffffffff, [0x0, 0x3ff, 0x8], {0x4, 0x10001, 0x3, 0x2de, 0x8e, 0x1, 0x101, 0x8, 0x200000d}, {0x6, 0x3, 0x52, 0x1a4, 0x10001, 0x9, 0x76c5, 0x8, 0x400}})
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r1, 0xc2604110, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0)
r3 = getpid()
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@inferred=r3, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r3})
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={r3, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x3, 0x803}, 0xee)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0x9, 0xa)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
syz_clone3(&(0x7f0000000400)={0x4000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
mincore$auto(0x1000, 0x8001, 0x0)
r5 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r5, 0x8)

3.315946448s ago: executing program 2 (id=2951):
r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/version\x00', 0x80, 0x0)
finit_module$auto(r0, 0x0, 0x1)

2.988080095s ago: executing program 2 (id=2952):
socket(0x11, 0x3, 0xe)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0803, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1)
clone$auto(0x20003b48, 0x2, 0x0, 0x0, 0x5)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0xc, 0x2000000000940, 0x1ffde, 0x7, 0x4, 0x3fe, 0x9, 0x1, 0x2, 0x7, 0x9, 0x8, 0x8, 0x407, 0x5, 0x8000000007, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe3a]}, 0x400, 0x81)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x3c)
write$auto(r1, &(0x7f00000003c0)='+&\x00', 0x273f)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24048040}, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@inferred, 0x10001, 0x10, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @inferred=0xffffffffffffffff}, 0x4, 0x2000966, 0x3, @raw=0x404, @enumerated={0x67, 0xfffffffb, "c603162ebe5b1abc9f610e815c4cf247ac0f93118382ecb2c7a7f4b3709667da32a9547f444e5e179acbc275a3cf0957a84ca65e5840c8288438c0feaa2eb39b", 0x101, 0x2}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='.'], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
read$auto_cgwb_debug_stats_fops_(r3, 0x0, 0x72)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'g\t$K\xcb\x12\xfa\x00\x00\xcfk', 0xb7f)
select$auto(0x1, &(0x7f0000000040)={[0xfffffffffffff91e, 0x40, 0x4, 0x80, 0x7, 0x3, 0x80000001, 0x7c, 0x3, 0xfffffffffffffffc, 0x5, 0xb, 0x4, 0x7, 0x0, 0x6]}, &(0x7f00000000c0)={[0x3, 0x4, 0x0, 0x1, 0x39, 0x6, 0x7f, 0x3, 0x2, 0xc6d, 0x8, 0xffffffff, 0x1, 0x0, 0x7491, 0x40]}, 0x0, &(0x7f00000001c0)={0x9, 0x1})
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r5, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC<s\xbf\xf4\xf37o\xec\f\xf4\xde\x06\xb4x\xcep|\xa1\xd5\xc3r\x8d\xe5\xda#\f\xa7-\xaf@\xc3x\xa2\"h\xec\xa0\x9ay\'\x99\xca\x9a\xa6\xda6\xb3E\xe1-\x17I!J\xf0\xb7\xc9O\xe9f\x93~\xce\x0e\x8c\xfa\xe3\x89\xca\xf5\xa2\xd2t\x84\xf8`e\x16\xf49\x9aVBa~i\xb9s\x00\x00\x00\x00\x00\x00\x00\x00\n\x04>=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5)
fsopen$auto(0x0, 0x1)

2.778912491s ago: executing program 5 (id=2953):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)="158f4a2b")
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x2b, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$auto(0x0, 0x0)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

2.160537378s ago: executing program 4 (id=2954):
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x1)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)
mlock$auto(0xfff, 0xde7f)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x4100000a3d9)
pselect6$auto(0x401, 0x0, 0x0, 0x0, 0x0, &(0x7f00000067c0)="36369dc69f2e")
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev4\x00', 0x200, 0x0)
ioctl$auto_IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000040))
ioctl$auto(r1, 0x5646, 0xffffffffffffffff)
setpriority$auto(0x2, 0x0, 0x80000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f0000003640)={<r3=>r2, 0x7, 0x6}, 0x6, 0x100000)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01038b9724c429a72b3d8a03d184"], 0x14}, 0x1, 0x0, 0x0, 0x2004c005}, 0x20000000)
getpid()
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
syz_clone3(&(0x7f0000000180)={0x150109480, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x58)
truncate$auto(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs/file0\x00', 0x6)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd43a6ac90df250300000004000800140001800800028004001d80080003"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)

1.905372008s ago: executing program 0 (id=2955):
r0 = epoll_create$auto(0x3e)
r1 = socket(0x1e, 0x4, 0x0)
epoll_ctl$auto(r0, 0x1, r1, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000240)="7122a0", 0x40000000001243}, 0x1, 0x0)
ioctl$auto_XFS_IOC_FREESP(r0, 0x4030580b, &(0x7f0000000040)={0xb00b, 0x1, 0x8, 0x1000, 0x800, r2})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r3 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, 0x4}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0xc0000, 0x0)
r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
socket(0x11, 0x3, 0x9)
ioctl$auto(0xffffffffffffffff, 0x6f41, 0x38)
mmap$auto(0x0, 0x5, 0x3, 0xffffffffffff6f3e, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x80801, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r5 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@CIFS_GENL_ATTR_SWN_SHARE_NAME={0x5, 0x3, '*'}, @CIFS_GENL_ATTR_SWN_REGISTRATION_ID={0x8, 0x1, 0xe7cf}, @CIFS_GENL_ATTR_SWN_KRB_AUTH={0x4}, @CIFS_GENL_ATTR_SWN_REGISTRATION_ID={0x8, 0x1, 0xc}, @CIFS_GENL_ATTR_SWN_RESOURCE_NAME={0x5, 0xe, '-'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
ioctl$auto_FICLONE(r3, 0x40049409, r4)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r6, 0x541c, 0xffffffffffffffff)

1.575045646s ago: executing program 5 (id=2956):
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x286881, 0x0)
r0 = socket(0x2, 0x5, 0x0) (async)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r2, r2, 0x0) (async)
r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) (async)
bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x6a)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0)
mmap$auto(0x187, 0x8, 0x3, 0x9b72, r1, 0x28000) (async)
bpf$auto(0xffffffff, &(0x7f00000001c0)=@link_update={r0, @new_map_fd=0x5, 0x4007, @old_prog_fd=r4}, 0xa3)
prctl$auto(0x45, 0x1, 0x0, 0x2, 0x4)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x3, 0xffa, 0xfffffffffffffffd, r5, 0x8000) (async)
madvise$auto(0x0, 0x400053, 0x9) (async)
socket(0xa, 0x800, 0x3a)
futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) (async)
r6 = epoll_create$auto(0x1)
epoll_ctl$auto(r5, 0x5, r6, 0x0) (async)
write$auto(0x1, 0x0, 0x80000000) (async)
mprotect$auto(0xc, 0x5, 0x4) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) (async)
bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) (async)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)

1.477931468s ago: executing program 2 (id=2957):
setreuid$auto(0x4, 0x8)
tkill$auto(0x80000000000001, 0x7)
openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x5, 0x2, 0x2000040eb2, 0xffffffffffffffff, 0x300000000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_create$auto(0x3ff)
socket(0x28, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/ifb1/queues/tx-0/byte_queue_limits/stall_max\x00', 0x1a1802, 0x0)
r1 = socket(0x6, 0x2, 0x71e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x800, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
fadvise64$auto(r2, 0x7fffffffffffffff, 0x5, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x21, 0x3, 0x6)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3)
sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8000002", @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf254300000069004e01326148bcf0f7bb140fcffb7574872fc9493a6e64dc5615296d77bf9311856be3d42e67de9fa1a82520616d3569fe0dda55b17e243db205cdde797e9064ffa2e5a27fc60a19af66640b13874dd94b6f73830fd1eae566a7621cb68f3c85e52d16c3f2df5a3100000006009600ff0f00006500a6808694963dd2784ca09cbdce5a428f53be72d9ed9f0d2a5adefc9ac6f53610cdba04bdf6d9880a2f4c04c14ae06d358a4a155c0c12b76db6c57d8394ddd10f4b0054bed580e43cd78c5186f1f4061b51e9d242fbdfd2142cf4bd7374674dbcb054cd00000008004a000c0c0000"], 0xf8}, 0x1, 0x0, 0x0, 0x2000080}, 0x41)
socket(0x2, 0x1, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x0, 0x0, 0x1f, 0x101}, 0x8}, 0x3, 0x20020000)
fcntl$auto(0x3, 0x4, 0xa553)
write$auto(0x3, 0x0, 0xffd8)

1.240698359s ago: executing program 2 (id=2958):
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0xffffffffffffffff, 0x0, 0x6a)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, 0x0, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sg0\x00', 0x120141, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0)
sendfile$auto(r0, r0, 0x0, 0x6)
mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6)
mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
mprotect$auto(0x110c230000, 0xa588, 0x6)
mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0)
socket(0x23, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6)
sysfs$auto(0x2, 0x44, 0x0)
add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0x400053, 0x9)
read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000001280)={0x1, "e7f8efe3f85b91cbb529b37376d90b43a71a6e1682ca7911f7f5aa070949c463"})
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5')

561.523328ms ago: executing program 5 (id=2959):
unshare$auto(0x6)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_FIONCLEX(0xffffffffffffffff, 0x5450, 0xb)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
r1 = socket(0x10, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000017c0), 0xffffffffffffffff)
io_uring_register$auto_IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000280)="7b892b2e37df546e014589b000faeb4560e079c3dc3e7f78a9665d593ee7544f74470935", 0xdf7)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)=ANY=[@ANYBLOB="b2b9f904", @ANYRES16=r2, @ANYBLOB="010326bd7000ffdbdf2504000000"], 0x14}}, 0x4008010)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
mmap$auto(0x0, 0x7ffe, 0xe3, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000}, 0x895}, 0x3, 0x0)
r5 = getpid()
process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
sysfs$auto(0x2, 0x1d, 0x0)
bpf$auto(0x2, &(0x7f0000000000)=@task_fd_query={r5, r3, 0xd9, 0xb, 0x8, 0x9, r3, 0x7f0000, 0x8000000000000001}, 0x7)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0x4018aee1, &(0x7f00000000c0)={0x2})
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
socket$nl_generic(0x10, 0x3, 0x10)

396.197215ms ago: executing program 4 (id=2960):
mmap$auto(0x2000, 0x400004, 0xdf, 0x17, 0x2, 0x8000)
bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)=@bpf_attr_11={0x1a4e, 0x4, 0x6, 0x7670000, 0x9, 0x7fffffff, 0x1000}, 0xf) (async)
bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)=@bpf_attr_11={0x1a4e, 0x4, 0x6, 0x7670000, 0x9, 0x7fffffff, 0x1000}, 0xf)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)

0s ago: executing program 4 (id=2961):
mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd)
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={<r1=>0x19, <r2=>0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
pread64$auto(r4, 0x0, 0x2, 0x3)
prctl$auto(0x3e, 0x4a, r1, 0x6, 0x80000001)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r8, @ANYBLOB="0300000001000000080062000300000021a973ca98bfd2236b45027c46b3cd731653d051499fb51eeaf42dfa47178c9c017033efea258b794299840ab7fac60cc9083b1c18f5b7aa0f29261f2a68b41b21e2f498961d657d6d5cafc0826c952d96d613a1bbd64823ffe4aa4f844568702eafbc19d74c798cea18a9ec6ee1f200d9d4d8fafe29c288b54bb8057f858b5e609f74dde5202628c3ea7f868ebf00944c7373bf9fcdba27ca0979a906307ea74b063a7a6b0860d0f30d6119bf525b32032b545b4f6b6a29d836c2d73c04f72ae7aecb302b"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2080", @ANYRES16=r6, @ANYBLOB="28102bbd7000fddbdf251f0000000800a4000400000004004100"], 0x20}, 0x1, 0x0, 0x0, 0x8855}, 0x10)
write$auto(r3, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4t\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
ioctl$auto_FICLONERANGE(r5, 0x4020940d, 0x1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0)
fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0)
open(0x0, 0x0, 0x408)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

kernel console output (not intermixed with test programs):

_empty_file+0x79/0x1c0
[  842.110813][T16743]  alloc_file_pseudo+0x13a/0x230
[  842.110852][T16743]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  842.110892][T16743]  ? __raw_spin_lock_init+0x3a/0x110
[  842.110929][T16743]  create_pipe_files+0x360/0x970
[  842.110965][T16743]  do_pipe2+0xbd/0x1e0
[  842.110997][T16743]  ? __pfx_do_pipe2+0x10/0x10
[  842.111029][T16743]  ? set_cred_ucounts+0x10f/0x200
[  842.111063][T16743]  __x64_sys_pipe2+0x54/0x80
[  842.111096][T16743]  do_syscall_64+0x115/0x840
[  842.111132][T16743]  ? clear_bhb_loop+0x40/0x90
[  842.111162][T16743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.111187][T16743] RIP: 0033:0x7f6f47f9ce59
[  842.111206][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.111230][T16743] RSP: 002b:00007f6f48e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  842.111253][T16743] RAX: ffffffffffffffda RBX: 00007f6f48215fa0 RCX: 00007f6f47f9ce59
[  842.111270][T16743] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000
[  842.111284][T16743] RBP: 00007f6f48032d6f R08: 0000000000000000 R09: 0000000000000000
[  842.111299][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  842.111320][T16743] R13: 00007f6f48216038 R14: 00007f6f48215fa0 R15: 00007ffc8b059f98
[  842.111352][T16743]  </TASK>
[  843.046179][T16744] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  843.451007][ T6317] Bluetooth: hci2: command 0x0c1a tx timeout
[  843.652321][T16774] input: f¬
 as /devices/virtual/input/input41
[  843.901104][T16778] FAULT_INJECTION: forcing a failure.
[  843.901104][T16778] name failslab, interval 1, probability 0, space 0, times 0
[  843.990283][T16778] CPU: 0 UID: 0 PID: 16778 Comm: syz.5.2033 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  843.990320][T16778] Tainted: [L]=SOFTLOCKUP
[  843.990329][T16778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  843.990342][T16778] Call Trace:
[  843.990350][T16778]  <TASK>
[  843.990358][T16778]  dump_stack_lvl+0x100/0x190
[  843.990404][T16778]  should_fail_ex.cold+0x5/0xa
[  843.990433][T16778]  ? tomoyo_realpath_from_path+0xb6/0x690
[  843.990468][T16778]  should_failslab+0xc2/0x120
[  843.990497][T16778]  __kmalloc_noprof+0xe0/0x850
[  843.990533][T16778]  ? kfree+0x1dd/0x6c0
[  843.990570][T16778]  tomoyo_realpath_from_path+0xb6/0x690
[  843.990611][T16778]  tomoyo_check_open_permission+0x2af/0x3c0
[  843.990642][T16778]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  843.990682][T16778]  ? hook_file_open+0x24e/0x7a0
[  843.990732][T16778]  ? path_get+0x61/0x80
[  843.990768][T16778]  tomoyo_file_open+0x6b/0x90
[  843.990791][T16778]  security_file_open+0xb5/0x1e0
[  843.990824][T16778]  do_dentry_open+0x588/0x14d0
[  843.990863][T16778]  vfs_open+0x82/0x3f0
[  843.990902][T16778]  path_openat+0x208c/0x31a0
[  843.990941][T16778]  ? __pfx_path_openat+0x10/0x10
[  843.990988][T16778]  do_file_open+0x20e/0x430
[  843.991020][T16778]  ? __pfx_do_file_open+0x10/0x10
[  843.991071][T16778]  ? alloc_fd+0x476/0x790
[  843.991103][T16778]  ? do_getname+0x191/0x390
[  843.991141][T16778]  do_sys_openat2+0x10d/0x1e0
[  843.991177][T16778]  ? __pfx_do_sys_openat2+0x10/0x10
[  843.991225][T16778]  __x64_sys_openat+0x12d/0x210
[  843.991262][T16778]  ? __pfx___x64_sys_openat+0x10/0x10
[  843.991298][T16778]  ? ksys_write+0x1ac/0x250
[  843.991329][T16778]  ? rcu_is_watching+0x12/0xc0
[  843.991360][T16778]  do_syscall_64+0x115/0x840
[  843.991394][T16778]  ? clear_bhb_loop+0x40/0x90
[  843.991423][T16778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.991446][T16778] RIP: 0033:0x7f43af99ce59
[  843.991465][T16778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.991488][T16778] RSP: 002b:00007f43b07a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  843.991510][T16778] RAX: ffffffffffffffda RBX: 00007f43afc15fa0 RCX: 00007f43af99ce59
[  843.991526][T16778] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  843.991541][T16778] RBP: 00007f43afa32d6f R08: 0000000000000000 R09: 0000000000000000
[  843.991555][T16778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  843.991568][T16778] R13: 00007f43afc16038 R14: 00007f43afc15fa0 R15: 00007ffe77ce4768
[  843.991599][T16778]  </TASK>
[  843.997919][T16778] ERROR: Out of memory at tomoyo_realpath_from_path.
[  844.499142][T16750] Process accounting paused
[  844.802696][T16796] FAULT_INJECTION: forcing a failure.
[  844.802696][T16796] name failslab, interval 1, probability 0, space 0, times 0
[  844.989840][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.4.2036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  844.989890][T16796] Tainted: [L]=SOFTLOCKUP
[  844.989901][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  844.989917][T16796] Call Trace:
[  844.989926][T16796]  <TASK>
[  844.989936][T16796]  dump_stack_lvl+0x100/0x190
[  844.989994][T16796]  should_fail_ex.cold+0x5/0xa
[  844.990028][T16796]  should_failslab+0xc2/0x120
[  844.990059][T16796]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  844.990101][T16796]  ? seq_open+0x55/0x170
[  844.990141][T16796]  ? trace_kmem_cache_alloc+0xd5/0x100
[  844.990177][T16796]  seq_open+0x55/0x170
[  844.990218][T16796]  proc_seq_open+0x9f/0x100
[  844.990250][T16796]  ? __pfx_proc_seq_open+0x10/0x10
[  844.990284][T16796]  proc_reg_open+0x2ab/0x5f0
[  844.990318][T16796]  do_dentry_open+0x6ab/0x14d0
[  844.990349][T16796]  ? __pfx_proc_reg_open+0x10/0x10
[  844.990392][T16796]  vfs_open+0x82/0x3f0
[  844.990434][T16796]  path_openat+0x208c/0x31a0
[  844.990477][T16796]  ? __pfx_path_openat+0x10/0x10
[  844.990521][T16796]  do_file_open+0x20e/0x430
[  844.990555][T16796]  ? __pfx_do_file_open+0x10/0x10
[  844.990608][T16796]  ? alloc_fd+0x476/0x790
[  844.990642][T16796]  ? do_getname+0x191/0x390
[  844.990683][T16796]  do_sys_openat2+0x10d/0x1e0
[  844.990723][T16796]  ? __pfx_do_sys_openat2+0x10/0x10
[  844.990766][T16796]  ? __fget_files+0x21f/0x3d0
[  844.990801][T16796]  __x64_sys_openat+0x12d/0x210
[  844.990843][T16796]  ? __pfx___x64_sys_openat+0x10/0x10
[  844.990891][T16796]  ? rcu_is_watching+0x12/0xc0
[  844.990925][T16796]  do_syscall_64+0x115/0x840
[  844.990969][T16796]  ? clear_bhb_loop+0x40/0x90
[  844.991001][T16796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.991027][T16796] RIP: 0033:0x7fd619d9ce59
[  844.991048][T16796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  844.991073][T16796] RSP: 002b:00007fd61ac08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  844.991097][T16796] RAX: ffffffffffffffda RBX: 00007fd61a015fa0 RCX: 00007fd619d9ce59
[  844.991114][T16796] RDX: 000000000018b080 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  844.991131][T16796] RBP: 00007fd619e32d6f R08: 0000000000000000 R09: 0000000000000000
[  844.991148][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  844.991163][T16796] R13: 00007fd61a016038 R14: 00007fd61a015fa0 R15: 00007fffdfe7f288
[  844.991195][T16796]  </TASK>
[  845.573387][ T6317] Bluetooth: hci2: command 0x0c1a tx timeout
[  846.658596][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2040'.
[  847.193811][T16844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2043'.
[  847.530592][T16844] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  847.600484][T11181] Bluetooth: hci2: command 0x0c1a tx timeout
[  847.627179][T16844] batman_adv: batadv0: Removing interface: batadv_slave_0
[  848.278032][T16830] Process accounting paused
[  848.331333][T16862] input: f¬
 as /devices/virtual/input/input42
[  848.553909][T16873] futex_wake_op: syz.0.2046 tries to shift op by -2048; fix this program
[  848.661176][T16870] program syz.2.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  848.683967][T16873] 0x000000000001-0x000000020000 : ""
[  848.849364][T16873] ftl_cs: FTL header corrupt!
[  850.068838][T16900] [U] 0�="­/�
[  850.106598][T16900] [U] 
[  850.135609][T16900] [U] EÇeÅQ‰Í@’
[  850.175755][T16899] [U] 
[  853.385383][T16953] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  857.003707][T17026] bond0: invalid ARP target specified
[  857.497154][T17041] futex_wake_op: syz.5.2081 tries to shift op by -2048; fix this program
[  857.587386][T17041] 0x000000000001-0x000000020000 : ""
[  857.674688][T17041] ftl_cs: FTL header corrupt!
[  858.382909][T17051] Process accounting resumed
[  861.788987][T17122] bridge0: port 3(veth1_macvtap) entered blocking state
[  861.833149][T17122] bridge0: port 3(veth1_macvtap) entered disabled state
[  861.914093][T17122] veth1_macvtap: entered allmulticast mode
[  862.054261][T17122] veth1_macvtap: left allmulticast mode
[  865.453237][T17179] netlink: 21 bytes leftover after parsing attributes in process `syz.5.2106'.
[  869.365463][T17235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2115'.
[  869.493994][T17237] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2115'.
[  870.322924][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  870.329781][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  870.342501][   T29] audit: type=1800 audit(2147483726.020:65): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2117" name="file0" dev="tmpfs" ino=2911 res=0 errno=0
[  870.774751][T17258] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  871.351151][T17271] FAULT_INJECTION: forcing a failure.
[  871.351151][T17271] name failslab, interval 1, probability 0, space 0, times 0
[  871.427678][T17271] CPU: 0 UID: 0 PID: 17271 Comm: syz.4.2123 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  871.427718][T17271] Tainted: [L]=SOFTLOCKUP
[  871.427726][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  871.427741][T17271] Call Trace:
[  871.427750][T17271]  <TASK>
[  871.427759][T17271]  dump_stack_lvl+0x100/0x190
[  871.427805][T17271]  should_fail_ex.cold+0x5/0xa
[  871.427836][T17271]  ? sk_prot_alloc+0x10b/0x2a0
[  871.427867][T17271]  should_failslab+0xc2/0x120
[  871.427896][T17271]  __kmalloc_noprof+0xe0/0x850
[  871.427941][T17271]  sk_prot_alloc+0x10b/0x2a0
[  871.427973][T17271]  sk_alloc+0x36/0xe80
[  871.427996][T17271]  packet_create+0x127/0x8e0
[  871.428140][T17271]  __sock_create+0x339/0x860
[  871.428178][T17271]  __sys_socket+0x14d/0x260
[  871.428212][T17271]  ? __pfx___sys_socket+0x10/0x10
[  871.428251][T17271]  ? ksys_write+0x1ac/0x250
[  871.428286][T17271]  __x64_sys_socket+0x72/0xb0
[  871.428319][T17271]  ? lockdep_hardirqs_on+0x78/0x100
[  871.428355][T17271]  do_syscall_64+0x115/0x840
[  871.428388][T17271]  ? clear_bhb_loop+0x40/0x90
[  871.428418][T17271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  871.428443][T17271] RIP: 0033:0x7fd619d9ce59
[  871.428463][T17271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  871.428488][T17271] RSP: 002b:00007fd61ac08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  871.428511][T17271] RAX: ffffffffffffffda RBX: 00007fd61a015fa0 RCX: 00007fd619d9ce59
[  871.428527][T17271] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0200000000000011
[  871.428542][T17271] RBP: 00007fd619e32d6f R08: 0000000000000000 R09: 0000000000000000
[  871.428558][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  871.428573][T17271] R13: 00007fd61a016038 R14: 00007fd61a015fa0 R15: 00007fffdfe7f288
[  871.428604][T17271]  </TASK>
[  873.394555][T17292] Process accounting resumed
[  876.925275][T17321] kexec: Could not allocate control_code_buffer
[  876.954097][T17346] FAULT_INJECTION: forcing a failure.
[  876.954097][T17346] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  877.083480][T17346] CPU: 0 UID: 0 PID: 17346 Comm: syz.5.2138 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  877.083519][T17346] Tainted: [L]=SOFTLOCKUP
[  877.083528][T17346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  877.083544][T17346] Call Trace:
[  877.083554][T17346]  <TASK>
[  877.083563][T17346]  dump_stack_lvl+0x100/0x190
[  877.083613][T17346]  should_fail_ex.cold+0x5/0xa
[  877.083645][T17346]  _copy_from_user+0x2e/0xd0
[  877.083747][T17346]  copy_msghdr_from_user+0x9f/0x4f0
[  877.083788][T17346]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  877.083830][T17346]  ? rcu_is_watching+0x12/0xc0
[  877.083859][T17346]  ? ___sys_recvmsg+0x177/0x1a0
[  877.083893][T17346]  ? kfree+0x1dd/0x6c0
[  877.083933][T17346]  ___sys_recvmsg+0xdd/0x1a0
[  877.083970][T17346]  ? __pfx____sys_recvmsg+0x10/0x10
[  877.084022][T17346]  ? __pfx___might_resched+0x10/0x10
[  877.084055][T17346]  do_recvmmsg+0x301/0x760
[  877.084094][T17346]  ? __pfx_do_recvmmsg+0x10/0x10
[  877.084129][T17346]  ? ksys_write+0x190/0x250
[  877.084164][T17346]  ? do_futex+0x192/0x350
[  877.084201][T17346]  ? __x64_sys_futex+0x34f/0x4d0
[  877.084230][T17346]  __x64_sys_recvmmsg+0x22a/0x280
[  877.084260][T17346]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  877.084292][T17346]  ? rcu_is_watching+0x12/0xc0
[  877.084324][T17346]  do_syscall_64+0x115/0x840
[  877.084360][T17346]  ? clear_bhb_loop+0x40/0x90
[  877.084391][T17346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  877.084418][T17346] RIP: 0033:0x7f43af99ce59
[  877.084439][T17346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  877.084464][T17346] RSP: 002b:00007f43b07a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  877.084489][T17346] RAX: ffffffffffffffda RBX: 00007f43afc15fa0 RCX: 00007f43af99ce59
[  877.084507][T17346] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003
[  877.084523][T17346] RBP: 00007f43afa32d6f R08: 0000000000000000 R09: 0000000000000000
[  877.084539][T17346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  877.084554][T17346] R13: 00007f43afc16038 R14: 00007f43afc15fa0 R15: 00007ffe77ce4768
[  877.084587][T17346]  </TASK>
[  877.646139][T17343] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2137'.
[  878.577275][T17359] hub 1-0:1.0: USB hub found
[  878.623780][T17359] hub 1-0:1.0: 1 port detected
[  879.866574][T17363] Process accounting resumed
[  881.745898][   T29] audit: type=1800 audit(2147483737.450:66): pid=17417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2149" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  883.767934][T17445] kafs: addr_prefs: Invalid Command
[  887.470756][T17472] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  890.365618][T17484] Process accounting paused
[  891.642173][T17517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2171'.
[  891.809550][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2171'.
[  891.835688][T17527] FAULT_INJECTION: forcing a failure.
[  891.835688][T17527] name failslab, interval 1, probability 0, space 0, times 0
[  892.013162][T17527] CPU: 0 UID: 0 PID: 17527 Comm: syz.0.2172 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  892.013211][T17527] Tainted: [L]=SOFTLOCKUP
[  892.013221][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  892.013237][T17527] Call Trace:
[  892.013246][T17527]  <TASK>
[  892.013255][T17527]  dump_stack_lvl+0x100/0x190
[  892.013308][T17527]  should_fail_ex.cold+0x5/0xa
[  892.013341][T17527]  should_failslab+0xc2/0x120
[  892.013374][T17527]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  892.013417][T17527]  ? __d_alloc+0x34/0xa40
[  892.013458][T17527]  __d_alloc+0x34/0xa40
[  892.013495][T17527]  d_alloc+0x4a/0x1e0
[  892.013534][T17527]  lookup_one_qstr_excl+0x171/0x250
[  892.013577][T17527]  start_dirop+0x59/0xb0
[  892.013607][T17527]  simple_start_creating+0xf9/0x110
[  892.013639][T17527]  ? __pfx_simple_start_creating+0x10/0x10
[  892.013671][T17527]  ? mntput+0x70/0xa0
[  892.013698][T17527]  ? simple_pin_fs+0xa3/0x190
[  892.013726][T17527]  debugfs_start_creating.part.0+0x82/0x170
[  892.013757][T17527]  __debugfs_create_file+0xb3/0x4f0
[  892.013787][T17527]  debugfs_create_file_full+0x41/0x60
[  892.013817][T17527]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  892.013844][T17527]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  892.013868][T17527]  ? ida_alloc_range+0x70d/0x830
[  892.013934][T17527]  ? lockdep_init_map_type+0x5c/0x250
[  892.013982][T17527]  preinit_net.part.0+0x252/0x920
[  892.014015][T17527]  copy_net_ns+0x339/0x7c0
[  892.014049][T17527]  create_new_namespaces+0x3ea/0xac0
[  892.014088][T17527]  unshare_nsproxy_namespaces+0xf2/0x220
[  892.014125][T17527]  ksys_unshare+0x438/0xab0
[  892.014164][T17527]  ? __pfx_ksys_unshare+0x10/0x10
[  892.014205][T17527]  ? xfd_validate_state+0x129/0x190
[  892.014231][T17527]  ? ksys_write+0x1ac/0x250
[  892.014269][T17527]  __x64_sys_unshare+0x31/0x40
[  892.014306][T17527]  do_syscall_64+0x115/0x840
[  892.014343][T17527]  ? clear_bhb_loop+0x40/0x90
[  892.014375][T17527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.014401][T17527] RIP: 0033:0x7f6f47f9ce59
[  892.014422][T17527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  892.014448][T17527] RSP: 002b:00007f6f48e0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  892.014473][T17527] RAX: ffffffffffffffda RBX: 00007f6f48216180 RCX: 00007f6f47f9ce59
[  892.014490][T17527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  892.014506][T17527] RBP: 00007f6f48032d6f R08: 0000000000000000 R09: 0000000000000000
[  892.014522][T17527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  892.014537][T17527] R13: 00007f6f48216218 R14: 00007f6f48216180 R15: 00007ffc8b059f98
[  892.014574][T17527]  </TASK>
[  895.769340][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2173'.
[  896.781015][T17587] hub 3-0:1.0: USB hub found
[  896.837729][T17587] hub 3-0:1.0: 1 port detected
[  897.358932][T17587] usb usb3: authorized to connect
[  897.849283][T17585] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰�ÜZL‘`š~^g¨�'
[  900.558965][T17625] FAULT_INJECTION: forcing a failure.
[  900.558965][T17625] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  900.697898][T17625] CPU: 0 UID: 0 PID: 17625 Comm: syz.0.2190 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  900.697941][T17625] Tainted: [L]=SOFTLOCKUP
[  900.697951][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  900.697967][T17625] Call Trace:
[  900.697975][T17625]  <TASK>
[  900.697985][T17625]  dump_stack_lvl+0x100/0x190
[  900.698036][T17625]  should_fail_ex.cold+0x5/0xa
[  900.698063][T17625]  ? prepare_alloc_pages+0x16d/0x5f0
[  900.698099][T17625]  should_fail_alloc_page+0xeb/0x140
[  900.698131][T17625]  prepare_alloc_pages+0x1f0/0x5f0
[  900.698169][T17625]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  900.698230][T17625]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  900.698287][T17625]  ? rcu_is_watching+0x12/0xc0
[  900.698316][T17625]  ? trace_kmalloc+0xe3/0x110
[  900.698345][T17625]  ? __kasan_kmalloc+0xaa/0xb0
[  900.698372][T17625]  ? __kmalloc_node_track_caller_noprof+0x321/0x850
[  900.698399][T17625]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  900.698438][T17625]  ? policy_nodemask+0xed/0x4f0
[  900.698471][T17625]  alloc_pages_mpol+0x1fb/0x540
[  900.698502][T17625]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  900.698531][T17625]  ? __alloc_skb+0x5b7/0x710
[  900.698555][T17625]  ? __pfx___alloc_skb+0x10/0x10
[  900.698579][T17625]  ? rcu_is_watching+0x12/0xc0
[  900.698611][T17625]  alloc_pages_noprof+0x1a/0x160
[  900.698647][T17625]  alloc_skb_with_frags+0x4e7/0x760
[  900.698691][T17625]  sock_alloc_send_pskb+0x801/0x980
[  900.698743][T17625]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  900.698798][T17625]  tun_get_user+0x904/0x3c20
[  900.698905][T17625]  ? __pfx_tun_get_user+0x10/0x10
[  900.698934][T17625]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  900.698970][T17625]  ? find_held_lock+0x2b/0x80
[  900.699001][T17625]  ? tun_get+0x191/0x370
[  900.699023][T17625]  ? tun_get+0x191/0x370
[  900.699058][T17625]  tun_chr_write_iter+0xdc/0x200
[  900.699095][T17625]  vfs_write+0x6ac/0x1070
[  900.699126][T17625]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  900.699157][T17625]  ? __pfx_vfs_write+0x10/0x10
[  900.699184][T17625]  ? find_held_lock+0x2b/0x80
[  900.699234][T17625]  __x64_sys_pwrite64+0x1eb/0x250
[  900.699267][T17625]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  900.699302][T17625]  ? rcu_is_watching+0x12/0xc0
[  900.699335][T17625]  do_syscall_64+0x115/0x840
[  900.699371][T17625]  ? clear_bhb_loop+0x40/0x90
[  900.699402][T17625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.699429][T17625] RIP: 0033:0x7f6f47f9ce59
[  900.699450][T17625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  900.699475][T17625] RSP: 002b:00007f6f48e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  900.699500][T17625] RAX: ffffffffffffffda RBX: 00007f6f48216090 RCX: 00007f6f47f9ce59
[  900.699518][T17625] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8
[  900.699534][T17625] RBP: 00007f6f48032d6f R08: 0000000000000000 R09: 0000000000000000
[  900.699550][T17625] R10: 000000000000019f R11: 0000000000000246 R12: 0000000000000000
[  900.699566][T17625] R13: 00007f6f48216128 R14: 00007f6f48216090 R15: 00007ffc8b059f98
[  900.699599][T17625]  </TASK>
[  902.087708][T11181] Bluetooth: hci4: Malformed HCI Event
[  902.736084][    T9] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243)
[  902.796061][T17643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2194'.
[  902.839866][T17643] veth1: left allmulticast mode
[  902.862698][T17643] veth1: left promiscuous mode
[  902.883875][T17643] bridge0: port 3(veth1) entered disabled state
[  902.911175][T17643] bridge_slave_1: left allmulticast mode
[  902.923550][T17629] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  902.940084][T17643] bridge_slave_1: left promiscuous mode
[  902.953803][T17643] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.990736][T17643] bridge_slave_0: left allmulticast mode
[  902.996803][T17643] bridge_slave_0: left promiscuous mode
[  903.012825][T17643] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.985200][T17659] Process accounting paused
[  906.880763][T17686] FAULT_INJECTION: forcing a failure.
[  906.880763][T17686] name failslab, interval 1, probability 0, space 0, times 0
[  907.173214][T17686] CPU: 0 UID: 0 PID: 17686 Comm: syz.0.2204 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  907.173256][T17686] Tainted: [L]=SOFTLOCKUP
[  907.173265][T17686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  907.173281][T17686] Call Trace:
[  907.173290][T17686]  <TASK>
[  907.173300][T17686]  dump_stack_lvl+0x100/0x190
[  907.173350][T17686]  should_fail_ex.cold+0x5/0xa
[  907.173381][T17686]  ? security_inode_init_security+0x113/0x370
[  907.173490][T17686]  should_failslab+0xc2/0x120
[  907.173522][T17686]  __kmalloc_noprof+0xe0/0x850
[  907.173570][T17686]  security_inode_init_security+0x113/0x370
[  907.173612][T17686]  ? __pfx_shmem_initxattrs+0x10/0x10
[  907.173647][T17686]  ? __pfx_security_inode_init_security+0x10/0x10
[  907.173695][T17686]  ? make_vfsgid+0xf1/0x140
[  907.173723][T17686]  shmem_mknod+0x2ce/0x480
[  907.173761][T17686]  ? __pfx_shmem_mknod+0x10/0x10
[  907.173804][T17686]  vfs_create+0x301/0x6c0
[  907.173831][T17686]  filename_mknodat+0x2de/0x7f0
[  907.173869][T17686]  ? __pfx_filename_mknodat+0x10/0x10
[  907.173903][T17686]  ? strncpy_from_user+0x19d/0x2d0
[  907.173952][T17686]  ? do_getname+0x191/0x390
[  907.173994][T17686]  __x64_sys_mknod+0x8f/0xc0
[  907.174029][T17686]  do_syscall_64+0x115/0x840
[  907.174066][T17686]  ? clear_bhb_loop+0x40/0x90
[  907.174098][T17686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.174125][T17686] RIP: 0033:0x7f6f47f9ce59
[  907.174146][T17686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  907.174171][T17686] RSP: 002b:00007f6f48e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  907.174196][T17686] RAX: ffffffffffffffda RBX: 00007f6f48216090 RCX: 00007f6f47f9ce59
[  907.174213][T17686] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000
[  907.174229][T17686] RBP: 00007f6f48032d6f R08: 0000000000000000 R09: 0000000000000000
[  907.174245][T17686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  907.174260][T17686] R13: 00007f6f48216128 R14: 00007f6f48216090 R15: 00007ffc8b059f98
[  907.174292][T17686]  </TASK>
[  908.197248][T17703] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  908.211252][T17703] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  908.221732][T17703] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  908.238125][T17703] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  910.239683][T11181] Bluetooth: hci1: command 0x0c1a tx timeout
[  910.245805][ T6317] Bluetooth: hci4: command 0x0c1a tx timeout
[  910.252441][ T6317] Bluetooth: hci2: command 0x0c1a tx timeout
[  910.258632][ T6317] Bluetooth: hci0: command 0x0c1a tx timeout
[  910.275831][T17732] Process accounting paused
[  910.826719][   T29] audit: type=1800 audit(2147483766.530:67): pid=17763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2219" name="dbroot" dev="configfs" ino=78175 res=0 errno=0
[  911.568399][T17749] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  912.206476][T17777] futex_wake_op: syz.4.2222 tries to shift op by -2048; fix this program
[  912.257398][T17777] futex_wake_op: syz.4.2222 tries to shift op by -2048; fix this program
[  912.435881][T17777] futex_wake_op: syz.4.2222 tries to shift op by -2048; fix this program
[  921.540000][T17894] Process accounting resumed
[  921.744050][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'.
[  923.243981][T17937] NFSD: Failed to start, no listeners configured.
[  924.718257][T17965] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2253'.
[  926.818063][T18000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2258'.
[  927.498766][T17754] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  927.598876][T17997] vivid-008: =================  START STATUS  =================
[  927.750943][T17997] vivid-008: ==================  END STATUS  ==================
[  929.348981][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'.
[  929.519560][ T6409] Bluetooth: hci0: command 0x0c1a tx timeout
[  931.601612][ T6409] Bluetooth: hci0: command 0x0c1a tx timeout
[  931.767432][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  931.784058][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  931.855886][T18064] net_ratelimit: 106 callbacks suppressed
[  931.855926][T18064] openvswitch: netlink: Missing valid actions attribute.
[  932.042438][T18066] FAULT_INJECTION: forcing a failure.
[  932.042438][T18066] name fail_futex, interval 1, probability 0, space 0, times 0
[  932.207372][T18066] CPU: 0 UID: 0 PID: 18066 Comm: syz.4.2269 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  932.207414][T18066] Tainted: [L]=SOFTLOCKUP
[  932.207423][T18066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  932.207439][T18066] Call Trace:
[  932.207448][T18066]  <TASK>
[  932.207458][T18066]  dump_stack_lvl+0x100/0x190
[  932.207507][T18066]  should_fail_ex.cold+0x5/0xa
[  932.207539][T18066]  get_futex_key+0x1d2/0x1510
[  932.207584][T18066]  ? __pfx_get_futex_key+0x10/0x10
[  932.207628][T18066]  ? trace_pid_list_is_set+0x11a/0x390
[  932.207661][T18066]  ? trace_pid_list_is_set+0x22c/0x390
[  932.207700][T18066]  futex_wait_setup+0x83/0x510
[  932.207740][T18066]  __futex_wait+0x19f/0x300
[  932.207775][T18066]  ? __pfx___futex_wait+0x10/0x10
[  932.207828][T18066]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  932.207875][T18066]  ? __pfx_futex_wake_mark+0x10/0x10
[  932.207912][T18066]  ? find_held_lock+0x2b/0x80
[  932.207944][T18066]  ? futex_wake+0x456/0x530
[  932.207982][T18066]  futex_wait+0xe6/0x370
[  932.208015][T18066]  ? __pfx_futex_wait+0x10/0x10
[  932.208054][T18066]  ? putname+0xb1/0x110
[  932.208089][T18066]  ? kmem_cache_free+0x127/0x6c0
[  932.208133][T18066]  ? do_sys_openat2+0x1b4/0x1e0
[  932.208177][T18066]  do_futex+0x1ef/0x350
[  932.208204][T18066]  ? __pfx_do_futex+0x10/0x10
[  932.208227][T18066]  ? __pfx_do_sys_openat2+0x10/0x10
[  932.208270][T18066]  ? __pfx_sched_core_share_pid+0x10/0x10
[  932.208335][T18066]  __x64_sys_futex+0x34f/0x4d0
[  932.208363][T18066]  ? __x64_sys_openat+0x12d/0x210
[  932.208405][T18066]  ? __pfx___x64_sys_futex+0x10/0x10
[  932.208437][T18066]  ? rcu_is_watching+0x12/0xc0
[  932.208470][T18066]  do_syscall_64+0x115/0x840
[  932.208506][T18066]  ? clear_bhb_loop+0x40/0x90
[  932.208537][T18066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  932.208563][T18066] RIP: 0033:0x7fd619d9ce59
[  932.208584][T18066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  932.208609][T18066] RSP: 002b:00007fd61abe70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  932.208633][T18066] RAX: ffffffffffffffda RBX: 00007fd61a016098 RCX: 00007fd619d9ce59
[  932.208651][T18066] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd61a016098
[  932.208667][T18066] RBP: 00007fd61a016090 R08: 0000000000000000 R09: 0000000000000000
[  932.208683][T18066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  932.208699][T18066] R13: 00007fd61a016128 R14: 00007fffdfe7f1a0 R15: 00007fffdfe7f288
[  932.208731][T18066]  </TASK>
[  935.155840][T17754] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260
[  935.155875][T17754] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260
[  935.171942][T17754] Bluetooth: hci1: Dropping invalid advertising data
[  935.180808][T17754] Bluetooth: hci1: unknown advertising packet type: 0xe9
[  935.180840][T17754] Bluetooth: hci1: Dropping invalid advertising data
[  935.195802][T17754] Bluetooth: hci1: Malformed LE Event: 0x02
[  935.668185][T18077] Process accounting resumed
[  937.089205][T18096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.958509][T18144] kafs: addr_prefs: Invalid Command
[  939.568438][T18155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2292'.
[  940.428929][T18153] Process accounting resumed
[  941.134738][T18179] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰�ÜZL‘`š~^g¨�'
[  942.234097][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  942.242095][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  942.783537][T18206] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2302'.
[  944.054147][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2306'.
[  945.759530][T18217] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  945.765706][T17754] Bluetooth: hci0: command 0x0c1a tx timeout
[  945.946101][T18217] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  945.997819][T18217] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  946.062320][T18217] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  946.977325][T18268] can0: slcan on ptm0.
[  947.557232][T18267] Process accounting resumed
[  947.666918][T18268] can0 (unregistered): slcan off ptm0.
[  947.839636][T17754] Bluetooth: hci2: command 0x0c1a tx timeout
[  948.007753][T17754] Bluetooth: hci4: command 0x0c1a tx timeout
[  948.080312][T17754] Bluetooth: hci1: command 0x0c1a tx timeout
[  948.714257][T18299] FAULT_INJECTION: forcing a failure.
[  948.714257][T18299] name failslab, interval 1, probability 0, space 0, times 0
[  948.763315][T18301] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139
[  948.909140][T18299] CPU: 0 UID: 0 PID: 18299 Comm: syz.0.2314 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  948.909180][T18299] Tainted: [L]=SOFTLOCKUP
[  948.909191][T18299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  948.909207][T18299] Call Trace:
[  948.909215][T18299]  <TASK>
[  948.909225][T18299]  dump_stack_lvl+0x100/0x190
[  948.909274][T18299]  should_fail_ex.cold+0x5/0xa
[  948.909315][T18299]  should_failslab+0xc2/0x120
[  948.909346][T18299]  __kmalloc_cache_noprof+0x7a/0x6f0
[  948.909384][T18299]  ? ocfs2_control_open+0x45/0x1d0
[  948.909528][T18299]  ocfs2_control_open+0x45/0x1d0
[  948.909569][T18299]  ? __pfx_ocfs2_control_open+0x10/0x10
[  948.909611][T18299]  misc_open+0x26d/0x450
[  948.909639][T18299]  ? __pfx_misc_open+0x10/0x10
[  948.909664][T18299]  chrdev_open+0x234/0x6a0
[  948.909697][T18299]  ? __pfx_apparmor_file_open+0x10/0x10
[  948.909726][T18299]  ? __pfx_chrdev_open+0x10/0x10
[  948.909761][T18299]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  948.909802][T18299]  do_dentry_open+0x6ab/0x14d0
[  948.909833][T18299]  ? __pfx_chrdev_open+0x10/0x10
[  948.909873][T18299]  vfs_open+0x82/0x3f0
[  948.909915][T18299]  path_openat+0x208c/0x31a0
[  948.909958][T18299]  ? __pfx_path_openat+0x10/0x10
[  948.910001][T18299]  do_file_open+0x20e/0x430
[  948.910036][T18299]  ? __pfx_do_file_open+0x10/0x10
[  948.910090][T18299]  ? alloc_fd+0x476/0x790
[  948.910124][T18299]  ? do_getname+0x191/0x390
[  948.910165][T18299]  do_sys_openat2+0x10d/0x1e0
[  948.910206][T18299]  ? __pfx_do_sys_openat2+0x10/0x10
[  948.910248][T18299]  ? do_raw_spin_lock+0x128/0x260
[  948.910289][T18299]  __x64_sys_openat+0x12d/0x210
[  948.910331][T18299]  ? __pfx___x64_sys_openat+0x10/0x10
[  948.910377][T18299]  ? rcu_is_watching+0x12/0xc0
[  948.910411][T18299]  do_syscall_64+0x115/0x840
[  948.910448][T18299]  ? clear_bhb_loop+0x40/0x90
[  948.910479][T18299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.910506][T18299] RIP: 0033:0x7f6f47f9ce59
[  948.910527][T18299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  948.910553][T18299] RSP: 002b:00007f6f48e2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  948.910578][T18299] RAX: ffffffffffffffda RBX: 00007f6f48216090 RCX: 00007f6f47f9ce59
[  948.910595][T18299] RDX: 000000000004c280 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  948.910612][T18299] RBP: 00007f6f48032d6f R08: 0000000000000000 R09: 0000000000000000
[  948.910628][T18299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  948.910643][T18299] R13: 00007f6f48216128 R14: 00007f6f48216090 R15: 00007ffc8b059f98
[  948.910675][T18299]  </TASK>
[  950.375521][ T6409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  950.404542][ T6409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  950.419877][ T6409] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  950.434107][ T6409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  950.444549][ T6409] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  952.480199][ T6409] Bluetooth: hci2: command tx timeout
[  953.105477][T18320] Process accounting paused
[  954.562859][ T6409] Bluetooth: hci2: command tx timeout
[  954.772847][T18314] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.817100][T18314] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.843613][T18314] bridge_slave_0: entered allmulticast mode
[  954.890204][T18314] bridge_slave_0: entered promiscuous mode
[  955.006450][T18314] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.035572][T18314] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.069165][T18314] bridge_slave_1: entered allmulticast mode
[  955.103247][T18314] bridge_slave_1: entered promiscuous mode
[  955.243183][T18314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  955.288784][T18314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  955.717488][T18314] team0: Port device team_slave_0 added
[  955.767850][T18314] team0: Port device team_slave_1 added
[  955.966358][T18314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  956.018967][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  956.162656][T18314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  956.217684][T18314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  956.251218][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  956.347579][T18314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  956.603375][T18314] hsr_slave_0: entered promiscuous mode
[  956.634521][T18314] hsr_slave_1: entered promiscuous mode
[  956.643787][ T6409] Bluetooth: hci2: command tx timeout
[  956.674691][T18314] debugfs: 'hsr0' already exists in 'hsr'
[  956.697791][T18314] Cannot create hsr debugfs directory
[  957.564564][T18398] futex_wake_op: syz.4.2328 tries to shift op by -2048; fix this program
[  958.231858][T18314] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  958.293242][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  958.338960][T18314] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  958.398518][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  958.460949][T18314] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  958.546949][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  958.580612][T18314] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  958.612701][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  958.720017][ T6409] Bluetooth: hci2: command tx timeout
[  958.994506][T18314] 8021q: adding VLAN 0 to HW filter on device bond0
[  959.095392][T18314] 8021q: adding VLAN 0 to HW filter on device team0
[  959.158025][T15353] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.165255][T15353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  959.275565][T15353] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.283107][T15353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  960.236884][T18445] netlink: 'syz.4.2337': attribute type 27 has an invalid length.
[  960.288764][T18445] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2337'.
[  961.884095][T18314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  962.125985][T18314] veth0_vlan: entered promiscuous mode
[  962.193842][T18314] veth1_vlan: entered promiscuous mode
[  962.352306][T18314] veth0_macvtap: entered promiscuous mode
[  962.398970][T18314] veth1_macvtap: entered promiscuous mode
[  962.498143][T18314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  962.855896][T18314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  962.963956][T15355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.002920][T15355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.186310][T15355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.276139][T15355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  964.108381][T15353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.146421][T15353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  964.513736][T15356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  964.571489][T15356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  965.875950][T18504] Process accounting paused
[  966.686081][T18545] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2356'.
[  969.080555][T18575] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  969.821690][   T29] audit: type=1800 audit(2147483825.520:68): pid=18590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2364" name="members" dev="configfs" ino=82689 res=0 errno=0
[  970.408665][T18598] netlink: 'syz.5.2366': attribute type 1 has an invalid length.
[  972.798382][   T29] audit: type=1326 audit(2147483828.490:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18641 comm="syz.4.2375" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd619d9ce59 code=0x0
[  974.054753][T18672] zswap: compressor  not available
[  974.728452][T18690] FAULT_INJECTION: forcing a failure.
[  974.728452][T18690] name failslab, interval 1, probability 0, space 0, times 0
[  974.802697][T18690] CPU: 0 UID: 0 PID: 18690 Comm: syz.0.2383 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  974.802734][T18690] Tainted: [L]=SOFTLOCKUP
[  974.802743][T18690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  974.802758][T18690] Call Trace:
[  974.802767][T18690]  <TASK>
[  974.802776][T18690]  dump_stack_lvl+0x100/0x190
[  974.802823][T18690]  should_fail_ex.cold+0x5/0xa
[  974.802854][T18690]  should_failslab+0xc2/0x120
[  974.802884][T18690]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  974.802923][T18690]  ? sk_prot_alloc+0x60/0x2a0
[  974.802959][T18690]  sk_prot_alloc+0x60/0x2a0
[  974.802991][T18690]  sk_alloc+0x36/0xe80
[  974.803015][T18690]  inet_create+0x3a0/0x1060
[  974.803054][T18690]  ? inet_create+0x94/0x1060
[  974.803095][T18690]  __sock_create+0x339/0x860
[  974.803133][T18690]  __sys_socket+0x14d/0x260
[  974.803167][T18690]  ? __pfx___sys_socket+0x10/0x10
[  974.803208][T18690]  __x64_sys_socket+0x72/0xb0
[  974.803241][T18690]  ? lockdep_hardirqs_on+0x78/0x100
[  974.803276][T18690]  do_syscall_64+0x115/0x840
[  974.803309][T18690]  ? clear_bhb_loop+0x40/0x90
[  974.803338][T18690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  974.803363][T18690] RIP: 0033:0x7f6f47f9ce59
[  974.803382][T18690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  974.803405][T18690] RSP: 002b:00007f6f48e4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  974.803427][T18690] RAX: ffffffffffffffda RBX: 00007f6f48215fa0 RCX: 00007f6f47f9ce59
[  974.803443][T18690] RDX: 0000000000000006 RSI: 0000000000000801 RDI: 0000000000000002
[  974.803458][T18690] RBP: 00007f6f48032d6f R08: 0000000000000000 R09: 0000000000000000
[  974.803473][T18690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  974.803489][T18690] R13: 00007f6f48216038 R14: 00007f6f48215fa0 R15: 00007ffc8b059f98
[  974.803520][T18690]  </TASK>
[  975.660528][T18703] netlink: 'syz.5.2385': attribute type 2 has an invalid length.
[  976.136757][T18701] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰�ÜZL‘`š~^g¨�'
[  977.625659][T18729] FAULT_INJECTION: forcing a failure.
[  977.625659][T18729] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  977.723873][T18729] CPU: 0 UID: 0 PID: 18729 Comm: syz.4.2389 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  977.723914][T18729] Tainted: [L]=SOFTLOCKUP
[  977.723923][T18729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  977.723939][T18729] Call Trace:
[  977.723948][T18729]  <TASK>
[  977.723958][T18729]  dump_stack_lvl+0x100/0x190
[  977.724007][T18729]  should_fail_ex.cold+0x5/0xa
[  977.724034][T18729]  ? prepare_alloc_pages+0x16d/0x5f0
[  977.724070][T18729]  should_fail_alloc_page+0xeb/0x140
[  977.724103][T18729]  prepare_alloc_pages+0x1f0/0x5f0
[  977.724141][T18729]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  977.724192][T18729]  ? rcu_is_watching+0x12/0xc0
[  977.724222][T18729]  ? folios_put_refs+0x716/0xa90
[  977.724251][T18729]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  977.724300][T18729]  ? __lock_acquire+0x4a5/0x2630
[  977.724340][T18729]  ? __lock_acquire+0x4a5/0x2630
[  977.724379][T18729]  ? __css_rstat_updated+0x1ce/0x5a0
[  977.724428][T18729]  ? lock_acquire+0x1b1/0x370
[  977.724467][T18729]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  977.724505][T18729]  ? policy_nodemask+0xed/0x4f0
[  977.724538][T18729]  alloc_pages_mpol+0x1fb/0x540
[  977.724570][T18729]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  977.724604][T18729]  ? __lock_acquire+0x4a5/0x2630
[  977.724647][T18729]  folio_alloc_mpol_noprof+0x36/0x260
[  977.724691][T18729]  vma_alloc_folio_noprof+0xed/0x1d0
[  977.724728][T18729]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  977.724773][T18729]  do_anonymous_page+0xb46/0x2050
[  977.724814][T18729]  ? rcu_read_unlock+0x2d/0xb0
[  977.724863][T18729]  __handle_mm_fault+0x1d2c/0x2a00
[  977.724906][T18729]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  977.724938][T18729]  ? __pfx___handle_mm_fault+0x10/0x10
[  977.724979][T18729]  ? pte_offset_map_lock+0x174/0x320
[  977.725009][T18729]  ? find_held_lock+0x2b/0x80
[  977.725049][T18729]  ? follow_page_pte+0x4d0/0x13f0
[  977.725086][T18729]  handle_mm_fault+0x37b/0xa30
[  977.725131][T18729]  __get_user_pages+0x1178/0x32a0
[  977.725174][T18729]  ? __pfx___get_user_pages+0x10/0x10
[  977.725218][T18729]  populate_vma_page_range+0x267/0x3f0
[  977.725254][T18729]  ? __pfx_populate_vma_page_range+0x10/0x10
[  977.725288][T18729]  ? __pfx_find_vma_intersection+0x10/0x10
[  977.725321][T18729]  ? do_mmap+0x93f/0x12f0
[  977.725355][T18729]  __mm_populate+0x107/0x3a0
[  977.725391][T18729]  ? __pfx___mm_populate+0x10/0x10
[  977.725427][T18729]  ? up_write+0x28c/0x4f0
[  977.725456][T18729]  vm_mmap_pgoff+0x37f/0x470
[  977.725493][T18729]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  977.725528][T18729]  ? do_futex+0x192/0x350
[  977.725554][T18729]  ? __pfx_do_futex+0x10/0x10
[  977.725580][T18729]  ? fput+0x79/0x100
[  977.725618][T18729]  ksys_mmap_pgoff+0xe4/0x610
[  977.725650][T18729]  ? __x64_sys_futex+0x358/0x4d0
[  977.725676][T18729]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  977.725713][T18729]  ? xfd_validate_state+0x129/0x190
[  977.725745][T18729]  __x64_sys_mmap+0x125/0x190
[  977.725775][T18729]  do_syscall_64+0x115/0x840
[  977.725812][T18729]  ? clear_bhb_loop+0x40/0x90
[  977.725843][T18729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.725870][T18729] RIP: 0033:0x7fd619d9ce59
[  977.725890][T18729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.725915][T18729] RSP: 002b:00007fd61abe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  977.725940][T18729] RAX: ffffffffffffffda RBX: 00007fd61a016090 RCX: 00007fd619d9ce59
[  977.725957][T18729] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  977.725973][T18729] RBP: 00007fd619e32d6f R08: 0000000000000002 R09: 0000000000008000
[  977.725990][T18729] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  977.726006][T18729] R13: 00007fd61a016128 R14: 00007fd61a016090 R15: 00007fffdfe7f288
[  977.726037][T18729]  </TASK>
[  979.268048][T18723] Process accounting paused
[  980.719161][T18781] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  980.825478][T18781] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  980.907014][T18783] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  980.984785][T18783] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  981.718692][T18792] FAULT_INJECTION: forcing a failure.
[  981.718692][T18792] name failslab, interval 1, probability 0, space 0, times 0
[  981.776275][T18792] CPU: 0 UID: 0 PID: 18792 Comm: syz.5.2405 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  981.776316][T18792] Tainted: [L]=SOFTLOCKUP
[  981.776325][T18792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  981.776341][T18792] Call Trace:
[  981.776349][T18792]  <TASK>
[  981.776359][T18792]  dump_stack_lvl+0x100/0x190
[  981.776409][T18792]  should_fail_ex.cold+0x5/0xa
[  981.776441][T18792]  ? __register_sysctl_table+0xbe4/0x1650
[  981.776475][T18792]  should_failslab+0xc2/0x120
[  981.776506][T18792]  __kmalloc_noprof+0xe0/0x850
[  981.776554][T18792]  __register_sysctl_table+0xbe4/0x1650
[  981.776594][T18792]  ? __pfx___register_sysctl_table+0x10/0x10
[  981.776628][T18792]  ? is_module_address+0x69/0xf0
[  981.776652][T18792]  ? register_net_sysctl_sz+0x222/0x430
[  981.776781][T18792]  ? __asan_memcpy+0x3c/0x60
[  981.776824][T18792]  smc_sysctl_net_init+0xbb/0x450
[  981.776904][T18792]  ? __pfx_smc_net_init+0x10/0x10
[  981.776962][T18792]  smc_net_init+0x16/0x50
[  981.776988][T18792]  ops_init+0x1e2/0x5f0
[  981.777019][T18792]  setup_net+0x118/0x3a0
[  981.777049][T18792]  ? __pfx_setup_net+0x10/0x10
[  981.777077][T18792]  ? mutex_init_lockdep+0xf1/0x120
[  981.777107][T18792]  copy_net_ns+0x46f/0x7c0
[  981.777141][T18792]  create_new_namespaces+0x3ea/0xac0
[  981.777180][T18792]  unshare_nsproxy_namespaces+0xf2/0x220
[  981.777216][T18792]  ksys_unshare+0x438/0xab0
[  981.777260][T18792]  ? __pfx_ksys_unshare+0x10/0x10
[  981.777299][T18792]  ? xfd_validate_state+0x129/0x190
[  981.777334][T18792]  __x64_sys_unshare+0x31/0x40
[  981.777371][T18792]  do_syscall_64+0x115/0x840
[  981.777419][T18792]  ? clear_bhb_loop+0x40/0x90
[  981.777451][T18792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  981.777477][T18792] RIP: 0033:0x7f43af99ce59
[  981.777498][T18792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  981.777524][T18792] RSP: 002b:00007f43b07a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  981.777549][T18792] RAX: ffffffffffffffda RBX: 00007f43afc15fa0 RCX: 00007f43af99ce59
[  981.777567][T18792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  981.777582][T18792] RBP: 00007f43afa32d6f R08: 0000000000000000 R09: 0000000000000000
[  981.777599][T18792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  981.777615][T18792] R13: 00007f43afc16038 R14: 00007f43afc15fa0 R15: 00007ffe77ce4768
[  981.777648][T18792]  </TASK>
[  982.035591][T18792] sysctl could not get directory: /net/smc -12
[  984.187184][T18825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2411'.
[  984.314093][T18825] bond0: entered promiscuous mode
[  984.330113][T18825] bond_slave_0: entered promiscuous mode
[  984.368991][T18825] bond_slave_1: entered promiscuous mode
[  984.757376][T18813] Process accounting resumed
[  986.124905][T18868] futex_wake_op: syz.2.2420 tries to shift op by -2048; fix this program
[  986.931406][T18882] sd 0:0:1:0: PR command failed: 1026
[  986.964032][T18882] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  987.009132][T18882] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  987.538456][T18887] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  987.545081][T18887] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  988.705953][T18898] FAULT_INJECTION: forcing a failure.
[  988.705953][T18898] name failslab, interval 1, probability 0, space 0, times 0
[  988.777328][T18898] CPU: 0 UID: 0 PID: 18898 Comm: syz.4.2424 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  988.777369][T18898] Tainted: [L]=SOFTLOCKUP
[  988.777378][T18898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  988.777394][T18898] Call Trace:
[  988.777403][T18898]  <TASK>
[  988.777413][T18898]  dump_stack_lvl+0x100/0x190
[  988.777462][T18898]  should_fail_ex.cold+0x5/0xa
[  988.777495][T18898]  should_failslab+0xc2/0x120
[  988.777526][T18898]  __kmalloc_cache_noprof+0x7a/0x6f0
[  988.777564][T18898]  ? tomoyo_init_log+0x1a0/0x20c0
[  988.777670][T18898]  tomoyo_init_log+0x1a0/0x20c0
[  988.777707][T18898]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  988.777746][T18898]  ? vsnprintf+0x4ee/0x1240
[  988.777787][T18898]  ? __pfx_tomoyo_init_log+0x10/0x10
[  988.777824][T18898]  ? tomoyo_profile+0x47/0x60
[  988.777865][T18898]  ? tomoyo_domain_quota_is_ok+0x367/0x580
[  988.777900][T18898]  tomoyo_supervisor+0x506/0x1340
[  988.777947][T18898]  ? __pfx_tomoyo_supervisor+0x10/0x10
[  988.778004][T18898]  ? kasan_quarantine_put+0x104/0x240
[  988.778032][T18898]  ? tomoyo_realpath_from_path+0x180/0x690
[  988.778076][T18898]  ? tomoyo_check_path_acl+0x141/0x210
[  988.778108][T18898]  ? tomoyo_check_acl+0x1f7/0x410
[  988.778140][T18898]  tomoyo_path_permission+0x270/0x3b0
[  988.778174][T18898]  tomoyo_path_perm+0x364/0x460
[  988.778207][T18898]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  988.778268][T18898]  ? __pfx_ima_file_check+0x10/0x10
[  988.778315][T18898]  ? hook_file_truncate+0xc3/0x240
[  988.778357][T18898]  security_file_truncate+0xb5/0x1e0
[  988.778403][T18898]  path_openat+0x1c6e/0x31a0
[  988.778447][T18898]  ? __pfx_path_openat+0x10/0x10
[  988.778491][T18898]  do_file_open+0x20e/0x430
[  988.778526][T18898]  ? __pfx_do_file_open+0x10/0x10
[  988.778580][T18898]  ? alloc_fd+0x476/0x790
[  988.778614][T18898]  ? do_getname+0x191/0x390
[  988.778655][T18898]  do_sys_openat2+0x10d/0x1e0
[  988.778696][T18898]  ? __pfx_do_sys_openat2+0x10/0x10
[  988.778738][T18898]  ? __fget_files+0x21f/0x3d0
[  988.778775][T18898]  __x64_sys_openat+0x12d/0x210
[  988.778816][T18898]  ? __pfx___x64_sys_openat+0x10/0x10
[  988.778862][T18898]  ? rcu_is_watching+0x12/0xc0
[  988.778896][T18898]  do_syscall_64+0x115/0x840
[  988.778932][T18898]  ? clear_bhb_loop+0x40/0x90
[  988.778963][T18898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.778989][T18898] RIP: 0033:0x7fd619d9ce59
[  988.779010][T18898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  988.779035][T18898] RSP: 002b:00007fd61ac08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  988.779066][T18898] RAX: ffffffffffffffda RBX: 00007fd61a015fa0 RCX: 00007fd619d9ce59
[  988.779084][T18898] RDX: 0000000000182b02 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  988.779101][T18898] RBP: 00007fd619e32d6f R08: 0000000000000000 R09: 0000000000000000
[  988.779117][T18898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  988.779133][T18898] R13: 00007fd61a016038 R14: 00007fd61a015fa0 R15: 00007fffdfe7f288
[  988.779165][T18898]  </TASK>
[  990.718902][T18910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2426'.
[  990.950391][T18910] veth1_macvtap: left allmulticast mode
[  990.979234][T18910] veth1_macvtap: left promiscuous mode
[  992.244321][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2432'.
[  993.096852][T18950] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  993.096852][T18950] The task syz.5.2434 (18950) triggered the difference, watch for misbehavior.
[  993.213995][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  993.223045][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  996.174184][T18968] Process accounting resumed
[  996.908772][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'.
[  997.654178][T19005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  998.004911][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'.
[  998.062396][T19027] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2451'.
[  999.157633][T17754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  999.175106][T17754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  999.183293][T17754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  999.202373][T17754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  999.217242][T17754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1000.793088][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'.
[ 1001.281433][T17754] Bluetooth: hci3: command tx timeout
[ 1001.697442][T19064] ima: policy update failed
[ 1001.721488][   T29] audit: type=1802 audit(2147483857.410:70): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2457" res=0 errno=0
[ 1001.819803][T15358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.328440][T15358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1002.499857][T15358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.359651][T17754] Bluetooth: hci3: command tx timeout
[ 1003.636797][T19089] ubi0: attaching mtd0
[ 1003.673974][T19089] ubi0: scanning is finished
[ 1003.674023][T19089] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1003.887693][T19085] bridge0: port 4(veth1) entered blocking state
[ 1003.887777][T19085] bridge0: port 4(veth1) entered disabled state
[ 1003.887908][T19085] veth1: entered allmulticast mode
[ 1003.903868][T19085] veth1: entered promiscuous mode
[ 1003.904352][T19085] bridge0: port 4(veth1) entered blocking state
[ 1003.904452][T19085] bridge0: port 4(veth1) entered forwarding state
[ 1003.941805][T19089] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1004.505818][T15358] dummy0: left allmulticast mode
[ 1004.524707][T15358] dummy0: left promiscuous mode
[ 1004.524969][T15358] bridge0: port 3(dummy0) entered disabled state
[ 1004.528198][T15358] bridge_slave_1: left allmulticast mode
[ 1004.528247][T15358] bridge_slave_1: left promiscuous mode
[ 1004.528457][T15358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.284008][T15358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1005.313248][T15358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1005.336178][T15358] bond0 (unregistering): Released all slaves
[ 1005.449008][T17754] Bluetooth: hci3: command tx timeout
[ 1005.507397][T15358] ovs_: left promiscuous mode
[ 1005.537683][ T5297] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1005.784890][T19041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1005.832400][ T5749] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243)
[ 1005.843958][T19041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.873970][T19041] bridge_slave_0: entered allmulticast mode
[ 1005.904004][T19041] bridge_slave_0: entered promiscuous mode
[ 1005.962398][T19041] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.012716][T19041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.055269][T19041] bridge_slave_1: entered allmulticast mode
[ 1006.097542][T19041] bridge_slave_1: entered promiscuous mode
[ 1006.380106][T19041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1006.469625][T19041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1006.793489][T19041] team0: Port device team_slave_0 added
[ 1007.054097][T19041] team0: Port device team_slave_1 added
[ 1007.165361][T19135] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1007.208485][T19135] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1007.278630][T19135] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1007.324575][T19135] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1007.478451][T19135] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1007.514188][T17754] Bluetooth: hci3: command tx timeout
[ 1007.544735][T19041] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1007.565881][T19135] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1007.579063][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1007.616960][T19135] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1007.642770][T19135] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1007.683692][T19041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1007.815312][T19041] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1007.848051][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1007.939702][T19041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1007.978718][T19147] netlink: 'syz.2.2469': attribute type 9 has an invalid length.
[ 1008.003955][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2469'.
[ 1008.162549][ T5297] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1008.422310][T19041] hsr_slave_0: entered promiscuous mode
[ 1008.434025][T19041] hsr_slave_1: entered promiscuous mode
[ 1008.441379][T19041] debugfs: 'hsr0' already exists in 'hsr'
[ 1008.457401][T19041] Cannot create hsr debugfs directory
[ 1008.482146][T15358] hsr_slave_1: left promiscuous mode
[ 1008.497592][T15358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1008.528339][T15358] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1008.559156][T15358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1008.571625][T15358] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1008.599534][T15358] veth1_vlan: left promiscuous mode
[ 1008.604885][T15358] veth0_vlan: left promiscuous mode
[ 1008.924266][T15358] team0 (unregistering): Port device team_slave_1 removed
[ 1008.967691][T15358] team0 (unregistering): Port device team_slave_0 removed
[ 1009.164618][T15358] smc: removing net device dummy0 with user defined pnetid DUMMY0
[ 1009.182946][T17754] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1009.262584][ T6409] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1009.268693][T17754] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1009.580715][T17754] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1010.599165][T19159] Process accounting resumed
[ 1011.333674][T17754] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1011.650301][T17754] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1013.401458][T17754] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1013.718709][T17754] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1014.478136][T19041] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1014.574620][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1014.619353][T19041] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1014.722192][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1014.849046][T19041] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1014.927056][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1015.122763][T19041] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1015.190423][T19041] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1016.130805][T19041] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1016.858791][T19041] 8021q: adding VLAN 0 to HW filter on device team0
[ 1017.661359][T15358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1017.668604][T15358] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1017.924393][T15358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1017.931684][T15358] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1018.717642][T19300] FAULT_INJECTION: forcing a failure.
[ 1018.717642][T19300] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1018.808137][T19300] CPU: 0 UID: 0 PID: 19300 Comm: syz.4.2487 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1018.808178][T19300] Tainted: [L]=SOFTLOCKUP
[ 1018.808188][T19300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1018.808205][T19300] Call Trace:
[ 1018.808213][T19300]  <TASK>
[ 1018.808223][T19300]  dump_stack_lvl+0x100/0x190
[ 1018.808275][T19300]  should_fail_ex.cold+0x5/0xa
[ 1018.808309][T19300]  get_futex_key+0x1d2/0x1510
[ 1018.808355][T19300]  ? __pfx_get_futex_key+0x10/0x10
[ 1018.808407][T19300]  futex_wait_setup+0x83/0x510
[ 1018.808447][T19300]  __futex_wait+0x19f/0x300
[ 1018.808481][T19300]  ? __pfx___futex_wait+0x10/0x10
[ 1018.808518][T19300]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1018.808555][T19300]  ? futex_hash+0x2ad/0x370
[ 1018.808597][T19300]  ? futex_hash+0x141/0x370
[ 1018.808641][T19300]  futex_wait+0xe6/0x370
[ 1018.808673][T19300]  ? __pfx_futex_wait+0x10/0x10
[ 1018.808715][T19300]  ? __local_bh_enable_ip+0x9e/0x120
[ 1018.808749][T19300]  ? tipc_setsockopt+0x412/0xe30
[ 1018.808853][T19300]  do_futex+0x1ef/0x350
[ 1018.808879][T19300]  ? __pfx_do_futex+0x10/0x10
[ 1018.808905][T19300]  ? rcu_is_watching+0x12/0xc0
[ 1018.808937][T19300]  ? do_sock_setsockopt+0x101/0x1d0
[ 1018.808969][T19300]  ? kfree+0x1dd/0x6c0
[ 1018.809009][T19300]  __x64_sys_futex+0x34f/0x4d0
[ 1018.809040][T19300]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1018.809074][T19300]  ? __sys_setsockopt+0x139/0x190
[ 1018.809102][T19300]  ? rcu_is_watching+0x12/0xc0
[ 1018.809134][T19300]  do_syscall_64+0x115/0x840
[ 1018.809171][T19300]  ? clear_bhb_loop+0x40/0x90
[ 1018.809203][T19300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1018.809229][T19300] RIP: 0033:0x7fd619d9ce59
[ 1018.809250][T19300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1018.809276][T19300] RSP: 002b:00007fd61ac080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1018.809302][T19300] RAX: ffffffffffffffda RBX: 00007fd61a015fa8 RCX: 00007fd619d9ce59
[ 1018.809320][T19300] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd61a015fa8
[ 1018.809336][T19300] RBP: 00007fd61a015fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1018.809352][T19300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1018.809368][T19300] R13: 00007fd61a016038 R14: 00007fffdfe7f1a0 R15: 00007fffdfe7f288
[ 1018.809399][T19300]  </TASK>
[ 1019.108422][T19310] ubi9: attaching mtd2
[ 1019.112586][T19310] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74)
[ 1021.236953][T19344] FAULT_INJECTION: forcing a failure.
[ 1021.236953][T19344] name failslab, interval 1, probability 0, space 0, times 0
[ 1021.337111][T19344] CPU: 0 UID: 0 PID: 19344 Comm: syz.2.2493 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1021.337152][T19344] Tainted: [L]=SOFTLOCKUP
[ 1021.337162][T19344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1021.337179][T19344] Call Trace:
[ 1021.337188][T19344]  <TASK>
[ 1021.337198][T19344]  dump_stack_lvl+0x100/0x190
[ 1021.337250][T19344]  should_fail_ex.cold+0x5/0xa
[ 1021.337284][T19344]  should_failslab+0xc2/0x120
[ 1021.337316][T19344]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1021.337356][T19344]  ? vidtv_channel_si_init+0xa43/0x18f0
[ 1021.337403][T19344]  vidtv_channel_si_init+0xa43/0x18f0
[ 1021.337451][T19344]  vidtv_mux_init+0x526/0xbf0
[ 1021.337493][T19344]  vidtv_start_feed+0x34e/0x500
[ 1021.337522][T19344]  ? __pfx_vidtv_start_feed+0x10/0x10
[ 1021.337553][T19344]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[ 1021.337598][T19344]  dmx_section_feed_start_filtering+0x3a8/0x660
[ 1021.337643][T19344]  dvb_dmxdev_filter_start+0x767/0xdd0
[ 1021.337680][T19344]  dvb_demux_do_ioctl+0xe64/0x1200
[ 1021.337717][T19344]  dvb_usercopy+0x167/0x340
[ 1021.337757][T19344]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1021.337787][T19344]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1021.337935][T19344]  ? __fget_files+0x21f/0x3d0
[ 1021.337984][T19344]  dvb_demux_ioctl+0x29/0x40
[ 1021.338009][T19344]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1021.338039][T19344]  __x64_sys_ioctl+0x18e/0x210
[ 1021.338068][T19344]  do_syscall_64+0x115/0x840
[ 1021.338104][T19344]  ? clear_bhb_loop+0x40/0x90
[ 1021.338136][T19344]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1021.338162][T19344] RIP: 0033:0x7fbf1359ce59
[ 1021.338183][T19344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1021.338209][T19344] RSP: 002b:00007fbf14378028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1021.338233][T19344] RAX: ffffffffffffffda RBX: 00007fbf13816090 RCX: 00007fbf1359ce59
[ 1021.338251][T19344] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007
[ 1021.338270][T19344] RBP: 00007fbf13632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1021.338288][T19344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1021.338304][T19344] R13: 00007fbf13816128 R14: 00007fbf13816090 R15: 00007ffeac32c348
[ 1021.338337][T19344]  </TASK>
[ 1022.866606][T19041] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1023.186257][T19365] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[18314] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[19365]
[ 1023.475219][T19041] veth0_vlan: entered promiscuous mode
[ 1023.570677][T19041] veth1_vlan: entered promiscuous mode
[ 1023.903102][T19041] veth0_macvtap: entered promiscuous mode
[ 1023.981129][T19041] veth1_macvtap: entered promiscuous mode
[ 1024.206520][T19041] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1024.277488][T19041] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1024.491969][T15353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.523858][T15353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.686574][T19379] block2mtd: too many arguments
[ 1024.783535][T15353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1024.888698][T15353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.384456][T15353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1025.413381][T15353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1025.464855][T17754] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[ 1025.774327][T15355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1025.792533][T19390] FAULT_INJECTION: forcing a failure.
[ 1025.792533][T19390] name failslab, interval 1, probability 0, space 0, times 0
[ 1025.834840][T15355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1025.888857][T19390] CPU: 0 UID: 0 PID: 19390 Comm: syz.4.2502 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1025.888899][T19390] Tainted: [L]=SOFTLOCKUP
[ 1025.888909][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1025.888925][T19390] Call Trace:
[ 1025.888934][T19390]  <TASK>
[ 1025.888944][T19390]  dump_stack_lvl+0x100/0x190
[ 1025.888994][T19390]  should_fail_ex.cold+0x5/0xa
[ 1025.889026][T19390]  should_failslab+0xc2/0x120
[ 1025.889057][T19390]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[ 1025.889085][T19390]  ? ip6_route_net_init+0x30f/0x8d0
[ 1025.889179][T19390]  kmemdup_noprof+0x29/0x60
[ 1025.889261][T19390]  ip6_route_net_init+0x30f/0x8d0
[ 1025.889294][T19390]  ? __pfx_ip6_route_net_init+0x10/0x10
[ 1025.889326][T19390]  ops_init+0x1e2/0x5f0
[ 1025.889358][T19390]  setup_net+0x118/0x3a0
[ 1025.889386][T19390]  ? __pfx_setup_net+0x10/0x10
[ 1025.889415][T19390]  ? mutex_init_lockdep+0xf1/0x120
[ 1025.889445][T19390]  copy_net_ns+0x46f/0x7c0
[ 1025.889479][T19390]  create_new_namespaces+0x3ea/0xac0
[ 1025.889517][T19390]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1025.889553][T19390]  ksys_unshare+0x438/0xab0
[ 1025.889592][T19390]  ? __pfx_ksys_unshare+0x10/0x10
[ 1025.889628][T19390]  ? xfd_validate_state+0x129/0x190
[ 1025.889653][T19390]  ? ksys_write+0x1ac/0x250
[ 1025.889691][T19390]  __x64_sys_unshare+0x31/0x40
[ 1025.889731][T19390]  do_syscall_64+0x115/0x840
[ 1025.889767][T19390]  ? clear_bhb_loop+0x40/0x90
[ 1025.889798][T19390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.889824][T19390] RIP: 0033:0x7fd619d9ce59
[ 1025.889845][T19390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1025.889884][T19390] RSP: 002b:00007fd61ac08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1025.889909][T19390] RAX: ffffffffffffffda RBX: 00007fd61a015fa0 RCX: 00007fd619d9ce59
[ 1025.889926][T19390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1025.889942][T19390] RBP: 00007fd619e32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1025.889958][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1025.889974][T19390] R13: 00007fd61a016038 R14: 00007fd61a015fa0 R15: 00007fffdfe7f288
[ 1025.890006][T19390]  </TASK>
[ 1026.531390][T19390] Process accounting paused
[ 1027.489126][ T6409] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1028.363251][T19434] FAULT_INJECTION: forcing a failure.
[ 1028.363251][T19434] name failslab, interval 1, probability 0, space 0, times 0
[ 1028.451055][T19434] CPU: 0 UID: 0 PID: 19434 Comm: syz.4.2510 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1028.451095][T19434] Tainted: [L]=SOFTLOCKUP
[ 1028.451105][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1028.451120][T19434] Call Trace:
[ 1028.451129][T19434]  <TASK>
[ 1028.451142][T19434]  dump_stack_lvl+0x100/0x190
[ 1028.451191][T19434]  should_fail_ex.cold+0x5/0xa
[ 1028.451221][T19434]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1028.451296][T19434]  should_failslab+0xc2/0x120
[ 1028.451328][T19434]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1028.451371][T19434]  ? alloc_inode+0x183/0x250
[ 1028.451416][T19434]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1028.451457][T19434]  alloc_inode+0x183/0x250
[ 1028.451497][T19434]  new_inode+0x22/0x1c0
[ 1028.451538][T19434]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1028.451580][T19434]  nfsd_fill_super+0x145/0x560
[ 1028.451623][T19434]  ? __pfx_nfsd_fill_super+0x10/0x10
[ 1028.451664][T19434]  get_tree_keyed+0x10e/0x1d0
[ 1028.451694][T19434]  vfs_get_tree+0x92/0x320
[ 1028.451719][T19434]  path_mount+0x7d0/0x23d0
[ 1028.451761][T19434]  ? __pfx_path_mount+0x10/0x10
[ 1028.451795][T19434]  ? lockdep_hardirqs_on+0x78/0x100
[ 1028.451836][T19434]  ? putname+0xb1/0x110
[ 1028.451869][T19434]  ? kmem_cache_free+0x127/0x6c0
[ 1028.451918][T19434]  ? __x64_sys_mount+0x293/0x310
[ 1028.451959][T19434]  __x64_sys_mount+0x293/0x310
[ 1028.451997][T19434]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1028.452037][T19434]  ? rcu_is_watching+0x12/0xc0
[ 1028.452071][T19434]  do_syscall_64+0x115/0x840
[ 1028.452107][T19434]  ? clear_bhb_loop+0x40/0x90
[ 1028.452138][T19434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.452165][T19434] RIP: 0033:0x7fd619d9ce59
[ 1028.452185][T19434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1028.452211][T19434] RSP: 002b:00007fd61ac08028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1028.452235][T19434] RAX: ffffffffffffffda RBX: 00007fd61a015fa0 RCX: 00007fd619d9ce59
[ 1028.452253][T19434] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1028.452269][T19434] RBP: 00007fd619e32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1028.452285][T19434] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000000
[ 1028.452300][T19434] R13: 00007fd61a016038 R14: 00007fd61a015fa0 R15: 00007fffdfe7f288
[ 1028.452333][T19434]  </TASK>
[ 1029.576864][ T6409] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1030.012846][T19387] Process accounting resumed
[ 1031.152131][T19482] futex_wake_op: syz.4.2521 tries to shift op by -2048; fix this program
[ 1031.250079][T19482] FAULT_INJECTION: forcing a failure.
[ 1031.250079][T19482] name failslab, interval 1, probability 0, space 0, times 0
[ 1031.424509][T19482] CPU: 0 UID: 0 PID: 19482 Comm: syz.4.2521 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1031.424549][T19482] Tainted: [L]=SOFTLOCKUP
[ 1031.424558][T19482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1031.424574][T19482] Call Trace:
[ 1031.424583][T19482]  <TASK>
[ 1031.424592][T19482]  dump_stack_lvl+0x100/0x190
[ 1031.424641][T19482]  should_fail_ex.cold+0x5/0xa
[ 1031.424681][T19482]  should_failslab+0xc2/0x120
[ 1031.424712][T19482]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1031.424754][T19482]  ? alloc_empty_file+0x5b/0x1c0
[ 1031.424793][T19482]  ? __pfx_stack_trace_save+0x10/0x10
[ 1031.424832][T19482]  alloc_empty_file+0x5b/0x1c0
[ 1031.424872][T19482]  path_openat+0xe8/0x31a0
[ 1031.424904][T19482]  ? kasan_save_stack+0x3f/0x50
[ 1031.424928][T19482]  ? kasan_save_stack+0x30/0x50
[ 1031.424952][T19482]  ? kasan_save_track+0x14/0x30
[ 1031.424977][T19482]  ? __kasan_slab_alloc+0x89/0x90
[ 1031.425003][T19482]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 1031.425045][T19482]  ? do_getname+0x35/0x390
[ 1031.425081][T19482]  ? do_sys_openat2+0xc5/0x1e0
[ 1031.425124][T19482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.425157][T19482]  ? __pfx_path_openat+0x10/0x10
[ 1031.425200][T19482]  do_file_open+0x20e/0x430
[ 1031.425235][T19482]  ? __pfx_do_file_open+0x10/0x10
[ 1031.425289][T19482]  ? alloc_fd+0x476/0x790
[ 1031.425324][T19482]  ? do_getname+0x191/0x390
[ 1031.425365][T19482]  do_sys_openat2+0x10d/0x1e0
[ 1031.425405][T19482]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1031.425448][T19482]  ? __sys_sendmsg+0x18f/0x220
[ 1031.425481][T19482]  __x64_sys_openat+0x12d/0x210
[ 1031.425522][T19482]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1031.425571][T19482]  ? rcu_is_watching+0x12/0xc0
[ 1031.425604][T19482]  do_syscall_64+0x115/0x840
[ 1031.425640][T19482]  ? clear_bhb_loop+0x40/0x90
[ 1031.425678][T19482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.425705][T19482] RIP: 0033:0x7fd619d9ce59
[ 1031.425725][T19482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.425750][T19482] RSP: 002b:00007fd61ac08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1031.425774][T19482] RAX: ffffffffffffffda RBX: 00007fd61a015fa0 RCX: 00007fd619d9ce59
[ 1031.425791][T19482] RDX: 0000000000060042 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1031.425808][T19482] RBP: 00007fd619e32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1031.425824][T19482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1031.425840][T19482] R13: 00007fd61a016038 R14: 00007fd61a015fa0 R15: 00007fffdfe7f288
[ 1031.425871][T19482]  </TASK>
[ 1034.948200][T19541] zswap: compressor 000 not available
[ 1036.221794][T19585] FAULT_INJECTION: forcing a failure.
[ 1036.221794][T19585] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1036.307191][T19585] CPU: 0 UID: 0 PID: 19585 Comm: syz.0.2539 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1036.307232][T19585] Tainted: [L]=SOFTLOCKUP
[ 1036.307241][T19585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1036.307258][T19585] Call Trace:
[ 1036.307268][T19585]  <TASK>
[ 1036.307284][T19585]  dump_stack_lvl+0x100/0x190
[ 1036.307333][T19585]  should_fail_ex.cold+0x5/0xa
[ 1036.307365][T19585]  get_futex_key+0x1d2/0x1510
[ 1036.307411][T19585]  ? __pfx_get_futex_key+0x10/0x10
[ 1036.307462][T19585]  futex_wake+0xea/0x530
[ 1036.307494][T19585]  ? rcu_is_watching+0x12/0xc0
[ 1036.307524][T19585]  ? __pfx_futex_wake+0x10/0x10
[ 1036.307560][T19585]  ? putname+0xb1/0x110
[ 1036.307592][T19585]  ? kmem_cache_free+0x127/0x6c0
[ 1036.307637][T19585]  do_futex+0x32b/0x350
[ 1036.307663][T19585]  ? __pfx_do_futex+0x10/0x10
[ 1036.307687][T19585]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1036.307729][T19585]  ? __fget_files+0x21f/0x3d0
[ 1036.307763][T19585]  __x64_sys_futex+0x34f/0x4d0
[ 1036.307793][T19585]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1036.307825][T19585]  ? rcu_is_watching+0x12/0xc0
[ 1036.307857][T19585]  do_syscall_64+0x115/0x840
[ 1036.307893][T19585]  ? clear_bhb_loop+0x40/0x90
[ 1036.307925][T19585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.307951][T19585] RIP: 0033:0x7f4d90b9ce59
[ 1036.307971][T19585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1036.307996][T19585] RSP: 002b:00007f4d919bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1036.308021][T19585] RAX: ffffffffffffffda RBX: 00007f4d90e16098 RCX: 00007f4d90b9ce59
[ 1036.308038][T19585] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4d90e1609c
[ 1036.308054][T19585] RBP: 00007f4d90e16090 R08: 0000000000000001 R09: 0000000000000000
[ 1036.308070][T19585] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[ 1036.308086][T19585] R13: 00007f4d90e16128 R14: 00007fffb1695ca0 R15: 00007fffb1695d88
[ 1036.308118][T19585]  </TASK>
[ 1036.516826][T19586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2539'.
[ 1036.769965][T19586] veth1_macvtap: left promiscuous mode
[ 1036.791895][T19586] macsec0: entered promiscuous mode
[ 1036.813337][T19586] macsec0: entered allmulticast mode
[ 1038.550096][T19611] openvswitch: netlink: Key type 68 is out of range max 32
[ 1040.438615][T19612] Process accounting resumed
[ 1041.091124][T19636] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2549'.
[ 1041.728617][T19636] bond0: invalid ARP target specified
[ 1041.855957][T19629] kexec: Could not allocate control_code_buffer
[ 1043.506382][ T6409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1043.526505][ T6409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1043.535043][ T6409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1043.555184][ T6409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1043.574567][ T6409] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1045.632658][ T6409] Bluetooth: hci5: command tx timeout
[ 1046.007756][T19689] netlink: 'syz.0.2557': attribute type 11 has an invalid length.
[ 1046.137149][T15348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.482300][T15348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.865312][T15348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.347969][T15348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.702252][ T6409] Bluetooth: hci5: command tx timeout
[ 1049.325232][T15348] veth1: left allmulticast mode
[ 1049.343825][T15348] veth1: left promiscuous mode
[ 1049.372894][T15348] bridge0: port 4(veth1) entered disabled state
[ 1049.425600][T15348] team0: left allmulticast mode
[ 1049.452262][T15348] team_slave_0: left allmulticast mode
[ 1049.459403][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'.
[ 1049.487287][T15348] team_slave_1: left allmulticast mode
[ 1049.510727][T19742] openvswitch: netlink: IPv4 tunnel dst address is zero
[ 1049.561209][T15348] team0: left promiscuous mode
[ 1049.597733][T15348] team_slave_0: left promiscuous mode
[ 1049.638277][T15348] team_slave_1: left promiscuous mode
[ 1049.675897][T15348] bridge0: port 3(team0) entered disabled state
[ 1049.729326][T15348] bridge_slave_1: left allmulticast mode
[ 1049.750189][T19736] futex_wake_op: syz.2.2564 tries to shift op by -2048; fix this program
[ 1049.772685][ T6409] Bluetooth: hci5: command tx timeout
[ 1049.782524][T15348] bridge_slave_1: left promiscuous mode
[ 1049.810359][T15348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.821300][T19736] futex_wake_op: syz.2.2564 tries to shift op by -2048; fix this program
[ 1049.874627][T19740] 0x000000000001-0x000000020000 : ""
[ 1049.885601][T15348] bridge_slave_0: left allmulticast mode
[ 1049.920994][T15348] bridge_slave_0: left promiscuous mode
[ 1049.962296][T15348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.981173][T19740] ftl_cs: FTL header corrupt!
[ 1050.830964][   T29] audit: type=1800 audit(2147485954.771:71): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2567" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[ 1050.901797][T15348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1050.947026][T15348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1050.979823][T15348] bond0 (unregistering): Released all slaves
[ 1051.186757][T19660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.199630][T19660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1051.212042][T19660] bridge_slave_0: entered allmulticast mode
[ 1051.220313][T19660] bridge_slave_0: entered promiscuous mode
[ 1051.235939][T15348] .^: left promiscuous mode
[ 1051.276169][T19660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1051.316765][T19660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1051.333645][T19660] bridge_slave_1: entered allmulticast mode
[ 1051.357310][T19660] bridge_slave_1: entered promiscuous mode
[ 1051.673762][T19660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1051.725094][T19660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1051.844992][ T6409] Bluetooth: hci5: command tx timeout
[ 1052.026107][T19660] team0: Port device team_slave_0 added
[ 1052.090571][T19660] team0: Port device team_slave_1 added
[ 1052.472657][T19660] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1052.520231][T19660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1052.693602][T19660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1052.773952][T19660] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1052.815327][T19660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1052.972150][T19660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1053.553860][T19660] hsr_slave_0: entered promiscuous mode
[ 1053.602104][T19660] hsr_slave_1: entered promiscuous mode
[ 1053.682904][T15348] hsr_slave_0: left promiscuous mode
[ 1053.718962][T15348] hsr_slave_1: left promiscuous mode
[ 1053.811430][T15348] veth0_macvtap: left promiscuous mode
[ 1053.854745][T15348] veth1_vlan: left promiscuous mode
[ 1053.887399][T15348] veth0_vlan: left promiscuous mode
[ 1054.393932][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.403521][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.248908][T15348] team0 (unregistering): Port device team_slave_1 removed
[ 1055.392274][T15348] team0 (unregistering): Port device team_slave_0 removed
[ 1056.274564][ T5297] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1059.125051][ T5297] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1059.146751][T19817] Process accounting resumed
[ 1061.079241][T19887] zram: Cannot change disksize for initialized device
[ 1061.803823][T19660] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1061.869153][T19660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1061.925705][T19660] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1061.985851][T19660] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1062.152009][T19660] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1062.218853][T19660] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1062.293350][T19660] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1062.357026][T19660] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1062.810486][T19660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1062.937645][T19660] 8021q: adding VLAN 0 to HW filter on device team0
[ 1062.998965][T14882] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.006343][T14882] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1063.129244][T14882] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.136467][T14882] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1063.751799][T19660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1066.130521][T19660] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1068.687415][T19660] veth0_vlan: entered promiscuous mode
[ 1068.784094][T19660] veth1_vlan: entered promiscuous mode
[ 1068.937884][T19660] veth0_macvtap: entered promiscuous mode
[ 1068.998156][T19660] veth1_macvtap: entered promiscuous mode
[ 1069.112938][T19660] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1069.176952][T19660] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1069.251208][T15355] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.318119][T15355] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.366776][T15355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.440720][T15355] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.891640][T15355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1069.942990][T15355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1070.441862][T15348] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.680427][T15355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1070.725221][T15355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1071.449721][T19848] Process accounting paused
[ 1071.543703][T20024] Unable to find swap-space signature
[ 1072.513489][T20036] [U] 0
[ 1072.535076][T20035] [U] ‘QU�IÚ
[ 1072.916990][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2604'.
[ 1073.486355][T20048] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1073.649150][T20037] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2600'.
[ 1078.911537][T20132] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1078.918323][T20132] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1079.165130][T20127] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1079.209918][T20127] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1079.256941][T20127] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1079.305076][T20127] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1079.352484][T20127] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1079.419169][T20127] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1079.430360][T20123] kexec: Could not allocate control_code_buffer
[ 1080.650642][ T6409] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1081.207725][ T6409] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1081.289518][ T6409] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1081.367567][ T6409] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1083.437858][ T6409] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1085.387376][T20230] random: crng reseeded on system resumption
[ 1085.505206][ T6409] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1086.226023][T20240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'.
[ 1087.400474][T20263] usb usb3: usbfs: process 20263 (syz.5.2641) did not claim interface 0 before use
[ 1087.722454][T20261] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1089.254148][T20280] Process accounting paused
[ 1092.606072][T20341] FAULT_INJECTION: forcing a failure.
[ 1092.606072][T20341] name failslab, interval 1, probability 0, space 0, times 0
[ 1092.765712][T20341] CPU: 0 UID: 0 PID: 20341 Comm: syz.2.2657 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1092.765752][T20341] Tainted: [L]=SOFTLOCKUP
[ 1092.765762][T20341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1092.765783][T20341] Call Trace:
[ 1092.765792][T20341]  <TASK>
[ 1092.765802][T20341]  dump_stack_lvl+0x100/0x190
[ 1092.765852][T20341]  should_fail_ex.cold+0x5/0xa
[ 1092.765886][T20341]  should_failslab+0xc2/0x120
[ 1092.765918][T20341]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1092.765962][T20341]  ? xas_split_alloc+0x11c/0x4a0
[ 1092.766010][T20341]  xas_split_alloc+0x11c/0x4a0
[ 1092.766056][T20341]  __folio_split+0x5e5/0x1690
[ 1092.766101][T20341]  ? find_held_lock+0x2b/0x80
[ 1092.766133][T20341]  ? __pfx___folio_split+0x10/0x10
[ 1092.766170][T20341]  ? folio_alloc_swap+0xbd4/0x1eb0
[ 1092.766210][T20341]  ? folio_alloc_swap+0x4c6/0x1eb0
[ 1092.766242][T20341]  shmem_writeout+0x79f/0x1a90
[ 1092.766290][T20341]  ? __pfx_shmem_writeout+0x10/0x10
[ 1092.766330][T20341]  ? __pfx_try_to_unmap+0x10/0x10
[ 1092.766369][T20341]  ? find_held_lock+0x2b/0x80
[ 1092.766402][T20341]  ? inode_to_bdi+0x9e/0x160
[ 1092.766431][T20341]  ? folio_clear_dirty_for_io+0x178/0x810
[ 1092.766466][T20341]  shrink_folio_list+0x3bbd/0x60c0
[ 1092.766517][T20341]  ? __pfx_shrink_folio_list+0x10/0x10
[ 1092.766611][T20341]  reclaim_folio_list+0xdc/0x5e0
[ 1092.766651][T20341]  ? __lock_acquire+0x4a5/0x2630
[ 1092.766692][T20341]  ? __pfx_reclaim_folio_list+0x10/0x10
[ 1092.766751][T20341]  ? rcu_is_watching+0x12/0xc0
[ 1092.766791][T20341]  reclaim_pages+0x428/0x5e0
[ 1092.766834][T20341]  ? __pfx_reclaim_pages+0x10/0x10
[ 1092.766872][T20341]  ? madvise_cold_or_pageout_pte_range+0x2177/0x2620
[ 1092.766912][T20341]  ? folio_isolate_lru+0xd6/0xe90
[ 1092.766956][T20341]  madvise_cold_or_pageout_pte_range+0x14c9/0x2620
[ 1092.767005][T20341]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[ 1092.767042][T20341]  ? tomoyo_check_open_permission+0x1a2/0x3c0
[ 1092.767084][T20341]  ? register_lock_class+0x40/0x560
[ 1092.767127][T20341]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[ 1092.767166][T20341]  walk_pgd_range+0xc1a/0x1dd0
[ 1092.767198][T20341]  ? __css_rstat_updated+0x1ce/0x5a0
[ 1092.767249][T20341]  ? __pfx_walk_pgd_range+0x10/0x10
[ 1092.767274][T20341]  ? rcu_is_watching+0x12/0xc0
[ 1092.767306][T20341]  ? folios_put_refs+0x716/0xa90
[ 1092.767333][T20341]  __walk_page_range+0x171/0x850
[ 1092.767361][T20341]  ? find_held_lock+0x2b/0x80
[ 1092.767403][T20341]  walk_page_range_vma_unsafe+0x209/0x8f0
[ 1092.767435][T20341]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[ 1092.767469][T20341]  ? find_held_lock+0x2b/0x80
[ 1092.767540][T20341]  ? mlock_drain_local+0x254/0x4e0
[ 1092.767564][T20341]  ? mlock_drain_local+0x254/0x4e0
[ 1092.767592][T20341]  walk_page_range_vma+0x63/0x90
[ 1092.767621][T20341]  madvise_pageout+0x259/0x540
[ 1092.767655][T20341]  ? __pfx_madvise_pageout+0x10/0x10
[ 1092.767688][T20341]  ? rcu_is_watching+0x12/0xc0
[ 1092.767730][T20341]  ? mtree_range_walk+0x72b/0xb70
[ 1092.767768][T20341]  madvise_vma_behavior+0x452/0x2240
[ 1092.767814][T20341]  ? __pfx_madvise_vma_behavior+0x10/0x10
[ 1092.767858][T20341]  ? find_vma_prev+0xd8/0x150
[ 1092.767889][T20341]  ? futex_unqueue+0x133/0x2c0
[ 1092.767916][T20341]  ? __pfx_find_vma_prev+0x10/0x10
[ 1092.767956][T20341]  ? __futex_wait+0x256/0x300
[ 1092.767994][T20341]  madvise_walk_vmas+0x2fe/0xa90
[ 1092.768033][T20341]  ? __pfx_madvise_walk_vmas+0x10/0x10
[ 1092.768076][T20341]  madvise_do_behavior+0x1ea/0x510
[ 1092.768114][T20341]  ? __pfx_madvise_do_behavior+0x10/0x10
[ 1092.768150][T20341]  ? down_read+0x13b/0x450
[ 1092.768186][T20341]  do_madvise+0x195/0x240
[ 1092.768219][T20341]  ? __pfx_do_madvise+0x10/0x10
[ 1092.768254][T20341]  ? do_futex+0x192/0x350
[ 1092.768296][T20341]  ? ksys_write+0x1ac/0x250
[ 1092.768333][T20341]  __x64_sys_madvise+0xa9/0x110
[ 1092.768368][T20341]  ? lockdep_hardirqs_on+0x78/0x100
[ 1092.768404][T20341]  do_syscall_64+0x115/0x840
[ 1092.768439][T20341]  ? clear_bhb_loop+0x40/0x90
[ 1092.768471][T20341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1092.768498][T20341] RIP: 0033:0x7fbf1359ce59
[ 1092.768519][T20341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1092.768545][T20341] RSP: 002b:00007fbf117f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 1092.768570][T20341] RAX: ffffffffffffffda RBX: 00007fbf13816180 RCX: 00007fbf1359ce59
[ 1092.768587][T20341] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000
[ 1092.768603][T20341] RBP: 00007fbf13632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1092.768619][T20341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1092.768635][T20341] R13: 00007fbf13816218 R14: 00007fbf13816180 R15: 00007ffeac32c348
[ 1092.768667][T20341]  </TASK>
[ 1093.355177][T20335] openvswitch: netlink: IPv4 tunnel dst address is zero
[ 1095.165933][ T6409] Bluetooth: hci3: unexpected event for opcode 0x7c89
[ 1095.795296][T20340] [U] ^R
[ 1096.250996][T20384] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string
[ 1096.307809][T20384]  ep_00: uevent: failed to send synthetic uevent: -22
[ 1096.729565][T20396] Format for adding new device is "id port_count num_queues" (uint uint uint).
[ 1096.980672][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2668'.
[ 1098.910855][T20381] Process accounting resumed
[ 1100.442601][ T6409] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260
[ 1100.442634][ T6409] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260
[ 1100.458070][ T6409] Bluetooth: hci5: Unknown advertising packet type: 0x7f
[ 1100.458153][ T6409] Bluetooth: hci5: Malformed LE Event: 0x0d
[ 1103.397290][T20408] Process accounting resumed
[ 1103.769542][T20472] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2682'.
[ 1104.249033][T20486] futex_wake_op: syz.5.2686 tries to shift op by -2048; fix this program
[ 1107.068579][T20509] netlink: 'syz.5.2690': attribute type 11 has an invalid length.
[ 1108.259618][T20529] FAULT_INJECTION: forcing a failure.
[ 1108.259618][T20529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1108.347913][T20529] CPU: 0 UID: 0 PID: 20529 Comm: syz.5.2695 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1108.347958][T20529] Tainted: [L]=SOFTLOCKUP
[ 1108.347966][T20529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1108.347980][T20529] Call Trace:
[ 1108.347988][T20529]  <TASK>
[ 1108.347997][T20529]  dump_stack_lvl+0x100/0x190
[ 1108.348050][T20529]  should_fail_ex.cold+0x5/0xa
[ 1108.348080][T20529]  _copy_from_user+0x2e/0xd0
[ 1108.348117][T20529]  get_timespec64+0x8b/0x1b0
[ 1108.348152][T20529]  ? __pfx_get_timespec64+0x10/0x10
[ 1108.348190][T20529]  ? common_nsleep+0xa1/0xd0
[ 1108.348214][T20529]  __x64_sys_clock_nanosleep+0x1ce/0x480
[ 1108.348250][T20529]  ? __pfx___x64_sys_clock_nanosleep+0x10/0x10
[ 1108.348286][T20529]  ? rcu_is_watching+0x12/0xc0
[ 1108.348317][T20529]  do_syscall_64+0x115/0x840
[ 1108.348352][T20529]  ? clear_bhb_loop+0x40/0x90
[ 1108.348381][T20529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1108.348406][T20529] RIP: 0033:0x7f43af95d68e
[ 1108.348425][T20529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1108.348448][T20529] RSP: 002b:00007ffe77ce4848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1108.348472][T20529] RAX: ffffffffffffffda RBX: 00005555724f9500 RCX: 00007f43af95d68e
[ 1108.348488][T20529] RDX: 00007ffe77ce48a0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1108.348503][T20529] RBP: 00007f43afc17da0 R08: 0000000000000000 R09: 0000000000000000
[ 1108.348518][T20529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000010edcf
[ 1108.348533][T20529] R13: 00007f43afc1627c R14: 000000000010eb30 R15: 00007f43afc16270
[ 1108.348563][T20529]  </TASK>
[ 1108.933702][T20550] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2696'.
[ 1108.959827][ T6409] Bluetooth: hci5: unexpected event for opcode 0x7c89
[ 1109.575016][T20562] netlink: 'syz.5.2700': attribute type 10 has an invalid length.
[ 1109.608947][T20562] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2700'.
[ 1109.649897][T20562] CIFS mount error: No usable UNC path provided in device string!
[ 1109.649897][T20562] 
[ 1109.733406][T20562] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1115.513507][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.523318][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.172122][T20666] FAULT_INJECTION: forcing a failure.
[ 1116.172122][T20666] name failslab, interval 1, probability 0, space 0, times 0
[ 1116.595422][T20666] CPU: 0 UID: 0 PID: 20666 Comm: syz.5.2723 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1116.595464][T20666] Tainted: [L]=SOFTLOCKUP
[ 1116.595473][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1116.595492][T20666] Call Trace:
[ 1116.595501][T20666]  <TASK>
[ 1116.595511][T20666]  dump_stack_lvl+0x100/0x190
[ 1116.595561][T20666]  should_fail_ex.cold+0x5/0xa
[ 1116.595594][T20666]  should_failslab+0xc2/0x120
[ 1116.595625][T20666]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1116.595668][T20666]  ? __d_alloc+0x34/0xa40
[ 1116.595703][T20666]  ? security_inode_alloc+0xcf/0x2c0
[ 1116.595736][T20666]  __d_alloc+0x34/0xa40
[ 1116.595774][T20666]  path_from_stashed+0x427/0x750
[ 1116.595822][T20666]  pidfs_alloc_file+0xf8/0x290
[ 1116.595855][T20666]  ? __pfx_pidfs_alloc_file+0x10/0x10
[ 1116.595895][T20666]  pidfd_prepare+0x10c/0x1b0
[ 1116.595932][T20666]  __x64_sys_pidfd_open+0x105/0x1a0
[ 1116.595974][T20666]  ? __pfx___x64_sys_pidfd_open+0x10/0x10
[ 1116.596018][T20666]  ? rcu_is_watching+0x12/0xc0
[ 1116.596051][T20666]  do_syscall_64+0x115/0x840
[ 1116.596088][T20666]  ? clear_bhb_loop+0x40/0x90
[ 1116.596119][T20666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.596145][T20666] RIP: 0033:0x7f43af99ce59
[ 1116.596166][T20666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1116.596191][T20666] RSP: 002b:00007f43b0786028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2
[ 1116.596215][T20666] RAX: ffffffffffffffda RBX: 00007f43afc16090 RCX: 00007f43af99ce59
[ 1116.596233][T20666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 1116.596249][T20666] RBP: 00007f43afa32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1116.596264][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1116.596280][T20666] R13: 00007f43afc16128 R14: 00007f43afc16090 R15: 00007ffe77ce4768
[ 1116.596311][T20666]  </TASK>
[ 1117.310043][T20665] FAULT_INJECTION: forcing a failure.
[ 1117.310043][T20665] name failslab, interval 1, probability 0, space 0, times 0
[ 1117.371063][T20665] CPU: 0 UID: 0 PID: 20665 Comm: syz.0.2722 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1117.371104][T20665] Tainted: [L]=SOFTLOCKUP
[ 1117.371114][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1117.371131][T20665] Call Trace:
[ 1117.371139][T20665]  <TASK>
[ 1117.371149][T20665]  dump_stack_lvl+0x100/0x190
[ 1117.371198][T20665]  should_fail_ex.cold+0x5/0xa
[ 1117.371231][T20665]  should_failslab+0xc2/0x120
[ 1117.371262][T20665]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1117.371300][T20665]  ? snd_seq_timer_new+0x42/0x190
[ 1117.371404][T20665]  snd_seq_timer_new+0x42/0x190
[ 1117.371431][T20665]  snd_seq_queue_alloc+0x177/0x540
[ 1117.371501][T20665]  snd_seq_ioctl_create_queue+0xa9/0x370
[ 1117.371533][T20665]  call_seq_client_ctl+0xa3/0x130
[ 1117.371566][T20665]  snd_seq_kernel_client_ctl+0x77/0xd0
[ 1117.371600][T20665]  alloc_seq_queue+0xdb/0x180
[ 1117.371649][T20665]  ? __pfx_alloc_seq_queue+0x10/0x10
[ 1117.371696][T20665]  ? find_held_lock+0x2b/0x80
[ 1117.371731][T20665]  ? mark_held_locks+0x40/0x70
[ 1117.371776][T20665]  snd_seq_oss_open+0x2b2/0xa10
[ 1117.371815][T20665]  odev_open+0x6f/0x90
[ 1117.371844][T20665]  ? __pfx_odev_open+0x10/0x10
[ 1117.371880][T20665]  soundcore_open+0x2e3/0x5a0
[ 1117.371916][T20665]  ? __pfx_soundcore_open+0x10/0x10
[ 1117.371949][T20665]  chrdev_open+0x234/0x6a0
[ 1117.371981][T20665]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1117.372011][T20665]  ? __pfx_chrdev_open+0x10/0x10
[ 1117.372045][T20665]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1117.372087][T20665]  do_dentry_open+0x6ab/0x14d0
[ 1117.372119][T20665]  ? __pfx_chrdev_open+0x10/0x10
[ 1117.372158][T20665]  vfs_open+0x82/0x3f0
[ 1117.372200][T20665]  path_openat+0x208c/0x31a0
[ 1117.372242][T20665]  ? __pfx_path_openat+0x10/0x10
[ 1117.372286][T20665]  do_file_open+0x20e/0x430
[ 1117.372321][T20665]  ? __pfx_do_file_open+0x10/0x10
[ 1117.372375][T20665]  ? alloc_fd+0x476/0x790
[ 1117.372409][T20665]  ? do_getname+0x191/0x390
[ 1117.372450][T20665]  do_sys_openat2+0x10d/0x1e0
[ 1117.372490][T20665]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1117.372541][T20665]  __x64_sys_openat+0x12d/0x210
[ 1117.372582][T20665]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1117.372629][T20665]  ? rcu_is_watching+0x12/0xc0
[ 1117.372662][T20665]  do_syscall_64+0x115/0x840
[ 1117.372698][T20665]  ? clear_bhb_loop+0x40/0x90
[ 1117.372735][T20665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1117.372762][T20665] RIP: 0033:0x7f4d90b9ce59
[ 1117.372782][T20665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1117.372808][T20665] RSP: 002b:00007f4d919bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1117.372833][T20665] RAX: ffffffffffffffda RBX: 00007f4d90e16090 RCX: 00007f4d90b9ce59
[ 1117.372851][T20665] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1117.372872][T20665] RBP: 00007f4d90c32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1117.372888][T20665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1117.372904][T20665] R13: 00007f4d90e16128 R14: 00007f4d90e16090 R15: 00007fffb1695d88
[ 1117.372937][T20665]  </TASK>
[ 1118.924827][ T6409] Bluetooth: hci2: unexpected event for opcode 0x7c89
[ 1119.094944][T20706] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2730'.
[ 1120.297953][T20718] Process accounting resumed
[ 1120.482282][T20727] ubi0: attaching mtd0
[ 1120.538408][T20728] netlink: ct_mark mask cannot be 0
[ 1120.685452][T20727] ubi0: scanning is finished
[ 1120.685509][T20727] ubi0 error: ubi_read_volume_table: the layout volume was not found
[ 1120.958867][T20727] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1123.109637][T20758] FAULT_INJECTION: forcing a failure.
[ 1123.109637][T20758] name failslab, interval 1, probability 0, space 0, times 0
[ 1123.154367][T20758] CPU: 0 UID: 0 PID: 20758 Comm: syz.2.2741 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1123.154409][T20758] Tainted: [L]=SOFTLOCKUP
[ 1123.154418][T20758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1123.154434][T20758] Call Trace:
[ 1123.154445][T20758]  <TASK>
[ 1123.154456][T20758]  dump_stack_lvl+0x100/0x190
[ 1123.154505][T20758]  should_fail_ex.cold+0x5/0xa
[ 1123.154538][T20758]  should_failslab+0xc2/0x120
[ 1123.154569][T20758]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1123.154613][T20758]  ? __d_alloc+0x34/0xa40
[ 1123.154653][T20758]  __d_alloc+0x34/0xa40
[ 1123.154692][T20758]  d_alloc_pseudo+0x1c/0xc0
[ 1123.154716][T20758]  alloc_file_pseudo+0xcf/0x230
[ 1123.154758][T20758]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1123.154806][T20758]  __shmem_file_setup+0x205/0x460
[ 1123.154845][T20758]  ? __pfx___shmem_file_setup+0x10/0x10
[ 1123.154880][T20758]  ? do_raw_spin_lock+0x128/0x260
[ 1123.154908][T20758]  ? find_held_lock+0x2b/0x80
[ 1123.154939][T20758]  ? alloc_fd+0x476/0x790
[ 1123.154969][T20758]  ? alloc_fd+0x476/0x790
[ 1123.155002][T20758]  memfd_alloc_file+0x247/0x610
[ 1123.155043][T20758]  ? _raw_spin_unlock+0x28/0x50
[ 1123.155077][T20758]  ? __pfx_memfd_alloc_file+0x10/0x10
[ 1123.155126][T20758]  __do_sys_memfd_create+0x236/0x3d0
[ 1123.155184][T20758]  do_syscall_64+0x115/0x840
[ 1123.155227][T20758]  ? clear_bhb_loop+0x40/0x90
[ 1123.155258][T20758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1123.155286][T20758] RIP: 0033:0x7fbf1359ce59
[ 1123.155307][T20758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1123.155332][T20758] RSP: 002b:00007fbf14399028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[ 1123.155356][T20758] RAX: ffffffffffffffda RBX: 00007fbf13815fa0 RCX: 00007fbf1359ce59
[ 1123.155373][T20758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[ 1123.155389][T20758] RBP: 00007fbf13632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1123.155405][T20758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1123.155421][T20758] R13: 00007fbf13816038 R14: 00007fbf13815fa0 R15: 00007ffeac32c348
[ 1123.155453][T20758]  </TASK>
[ 1123.713684][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'.
[ 1126.158095][ T5733] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243)
[ 1127.762922][T20826] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2755'.
[ 1127.841391][T20828] netlink: 354 bytes leftover after parsing attributes in process `syz.4.2755'.
[ 1130.117326][ T6409] Bluetooth: hci3: unexpected event for opcode 0x7c89
[ 1134.568752][ T6409] Bluetooth: hci5: unexpected event for opcode 0x7c89
[ 1135.085151][T20922] Process accounting paused
[ 1135.607914][   T29] audit: type=1800 audit(2147488087.989:72): pid=20964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2783" name="dbroot" dev="configfs" ino=96697 res=0 errno=0
[ 1136.094849][T20963] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[ 1140.748885][   T29] audit: type=1800 audit(2147488093.156:73): pid=21044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2799" name="dbroot" dev="configfs" ino=96995 res=0 errno=0
[ 1141.104508][T21060] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[ 1142.501798][ T6409] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260
[ 1142.501831][ T6409] Bluetooth: hci5: unexpected subevent 0x0e length: 725 > 15
[ 1142.517611][ T6409] Bluetooth: hci5: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[ 1143.977289][T21101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2808'.
[ 1144.620562][T21118] program syz.2.2819 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1144.661547][T21092] FAULT_INJECTION: forcing a failure.
[ 1144.661547][T21092] name failslab, interval 1, probability 0, space 0, times 0
[ 1144.782445][T21092] CPU: 0 UID: 0 PID: 21092 Comm: syz.5.2805 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1144.782507][T21092] Tainted: [L]=SOFTLOCKUP
[ 1144.782517][T21092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1144.782534][T21092] Call Trace:
[ 1144.782543][T21092]  <TASK>
[ 1144.782553][T21092]  dump_stack_lvl+0x100/0x190
[ 1144.782605][T21092]  should_fail_ex.cold+0x5/0xa
[ 1144.782640][T21092]  should_failslab+0xc2/0x120
[ 1144.782672][T21092]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1144.782710][T21092]  ? snd_seq_timer_new+0x42/0x190
[ 1144.782745][T21092]  snd_seq_timer_new+0x42/0x190
[ 1144.782780][T21092]  snd_seq_queue_alloc+0x177/0x540
[ 1144.782825][T21092]  snd_seq_ioctl_create_queue+0xa9/0x370
[ 1144.782857][T21092]  call_seq_client_ctl+0xa3/0x130
[ 1144.782890][T21092]  snd_seq_kernel_client_ctl+0x77/0xd0
[ 1144.782923][T21092]  alloc_seq_queue+0xdb/0x180
[ 1144.782956][T21092]  ? __pfx_alloc_seq_queue+0x10/0x10
[ 1144.783005][T21092]  ? find_held_lock+0x2b/0x80
[ 1144.783045][T21092]  ? mark_held_locks+0x40/0x70
[ 1144.783089][T21092]  snd_seq_oss_open+0x2b2/0xa10
[ 1144.783128][T21092]  odev_open+0x6f/0x90
[ 1144.783156][T21092]  ? __pfx_odev_open+0x10/0x10
[ 1144.783186][T21092]  soundcore_open+0x2e3/0x5a0
[ 1144.783222][T21092]  ? __pfx_soundcore_open+0x10/0x10
[ 1144.783254][T21092]  chrdev_open+0x234/0x6a0
[ 1144.783287][T21092]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1144.783317][T21092]  ? __pfx_chrdev_open+0x10/0x10
[ 1144.783352][T21092]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1144.783394][T21092]  do_dentry_open+0x6ab/0x14d0
[ 1144.783425][T21092]  ? __pfx_chrdev_open+0x10/0x10
[ 1144.783464][T21092]  vfs_open+0x82/0x3f0
[ 1144.783514][T21092]  path_openat+0x208c/0x31a0
[ 1144.783557][T21092]  ? __pfx_path_openat+0x10/0x10
[ 1144.783601][T21092]  do_file_open+0x20e/0x430
[ 1144.783637][T21092]  ? __pfx_do_file_open+0x10/0x10
[ 1144.783691][T21092]  ? alloc_fd+0x476/0x790
[ 1144.783726][T21092]  ? do_getname+0x191/0x390
[ 1144.783768][T21092]  do_sys_openat2+0x10d/0x1e0
[ 1144.783808][T21092]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1144.783860][T21092]  __x64_sys_openat+0x12d/0x210
[ 1144.783901][T21092]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1144.783947][T21092]  ? rcu_is_watching+0x12/0xc0
[ 1144.783981][T21092]  do_syscall_64+0x115/0x840
[ 1144.784019][T21092]  ? clear_bhb_loop+0x40/0x90
[ 1144.784051][T21092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.784077][T21092] RIP: 0033:0x7f43af99ce59
[ 1144.784098][T21092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1144.784124][T21092] RSP: 002b:00007f43b0786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1144.784149][T21092] RAX: ffffffffffffffda RBX: 00007f43afc16090 RCX: 00007f43af99ce59
[ 1144.784167][T21092] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1144.784183][T21092] RBP: 00007f43afa32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1144.784199][T21092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1144.784215][T21092] R13: 00007f43afc16128 R14: 00007f43afc16090 R15: 00007ffe77ce4768
[ 1144.784248][T21092]  </TASK>
[ 1145.158880][T21124] bridge0: port 3(dummy0) entered blocking state
[ 1145.165484][T21124] bridge0: port 3(dummy0) entered disabled state
[ 1147.098270][T21158] can: request_module (can-proto-5) failed.
[ 1147.290112][T21158] block nbd0: shutting down sockets
[ 1148.152237][T21203] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2825'.
[ 1151.371563][T21210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1153.050925][T21248] Process accounting paused
[ 1154.345173][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2846'.
[ 1154.519195][T21303] kexec: Could not allocate control_code_buffer
[ 1155.258285][T21344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2850'.
[ 1156.512851][ T6409] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 1157.241568][T21359] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[ 1157.295811][T21359] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[ 1157.360666][T21359] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[ 1157.412860][T21359] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1157.506151][T21359] page dumped because: unmovable page
[ 1157.558764][T21359] page_owner info is not present (never set?)
[ 1159.291374][T21410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2864'.
[ 1160.280071][ T6409] Bluetooth: hci1: unexpected event for opcode 0x7c89
[ 1165.375479][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2882'.
[ 1165.531160][T21495] Process accounting resumed
[ 1165.792218][ T6409] Bluetooth: hci3: unexpected event for opcode 0x7c89
[ 1166.253501][T21508] kexec: Could not allocate control_code_buffer
[ 1167.265333][T21525] can: request_module (can-proto-0) failed.
[ 1167.584808][T21533] FAULT_INJECTION: forcing a failure.
[ 1167.584808][T21533] name failslab, interval 1, probability 0, space 0, times 0
[ 1167.666507][T21533] CPU: 0 UID: 0 PID: 21533 Comm: syz.5.2893 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1167.666549][T21533] Tainted: [L]=SOFTLOCKUP
[ 1167.666559][T21533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1167.666575][T21533] Call Trace:
[ 1167.666584][T21533]  <TASK>
[ 1167.666594][T21533]  dump_stack_lvl+0x100/0x190
[ 1167.666643][T21533]  should_fail_ex.cold+0x5/0xa
[ 1167.666676][T21533]  should_failslab+0xc2/0x120
[ 1167.666708][T21533]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1167.666750][T21533]  ? vm_area_dup+0x27/0x8e0
[ 1167.666789][T21533]  ? mas_prev+0x9b/0xf0
[ 1167.666833][T21533]  vm_area_dup+0x27/0x8e0
[ 1167.666873][T21533]  copy_vma+0x643/0xac0
[ 1167.666918][T21533]  ? __pfx_copy_vma+0x10/0x10
[ 1167.666969][T21533]  ? __lock_acquire+0x4a5/0x2630
[ 1167.667039][T21533]  copy_vma_and_data+0x1cf/0x7c0
[ 1167.667084][T21533]  ? __pfx_copy_vma_and_data+0x10/0x10
[ 1167.667140][T21533]  ? __vma_start_write+0x17f/0x280
[ 1167.667177][T21533]  ? __pfx___vma_start_write+0x10/0x10
[ 1167.667223][T21533]  move_vma+0x574/0x1920
[ 1167.667269][T21533]  ? __pfx_move_vma+0x10/0x10
[ 1167.667314][T21533]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[ 1167.667349][T21533]  ? cap_mmap_addr+0x4b/0x120
[ 1167.667374][T21533]  ? bpf_lsm_mmap_addr+0x9/0x30
[ 1167.667398][T21533]  ? security_mmap_addr+0x71/0x1e0
[ 1167.667434][T21533]  ? __get_unmapped_area+0x255/0x3e0
[ 1167.667470][T21533]  ? vrm_set_new_addr+0x204/0x290
[ 1167.667514][T21533]  mremap_to+0x234/0x4c0
[ 1167.667554][T21533]  ? mas_walk+0x6ef/0x9b0
[ 1167.667587][T21533]  ? __pfx_mremap_to+0x10/0x10
[ 1167.667626][T21533]  ? check_prep_vma+0x912/0xe60
[ 1167.667673][T21533]  __do_sys_mremap+0x88c/0x1850
[ 1167.667724][T21533]  ? __pfx___do_sys_mremap+0x10/0x10
[ 1167.667771][T21533]  ? do_futex+0x192/0x350
[ 1167.667798][T21533]  ? __pfx_do_futex+0x10/0x10
[ 1167.667832][T21533]  ? __x64_sys_futex+0x34f/0x4d0
[ 1167.667870][T21533]  ? rcu_is_watching+0x12/0xc0
[ 1167.667903][T21533]  do_syscall_64+0x115/0x840
[ 1167.667939][T21533]  ? clear_bhb_loop+0x40/0x90
[ 1167.667970][T21533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1167.668018][T21533] RIP: 0033:0x7f43af99ce59
[ 1167.668039][T21533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1167.668065][T21533] RSP: 002b:00007f43b07a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 1167.668090][T21533] RAX: ffffffffffffffda RBX: 00007f43afc15fa0 RCX: 00007f43af99ce59
[ 1167.668108][T21533] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200001000000
[ 1167.668124][T21533] RBP: 00007f43afa32d6f R08: 0000000100000000 R09: 0000000000000000
[ 1167.668141][T21533] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[ 1167.668156][T21533] R13: 00007f43afc16038 R14: 00007f43afc15fa0 R15: 00007ffe77ce4768
[ 1167.668189][T21533]  </TASK>
[ 1168.396384][ T6409] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5
[ 1170.536417][T17754] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18
[ 1171.537326][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2902'.
[ 1172.458719][T21633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2904'.
[ 1172.576096][ T6409] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1172.995327][T21644] FAULT_INJECTION: forcing a failure.
[ 1172.995327][T21644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1173.193277][T21644] CPU: 0 UID: 0 PID: 21644 Comm: syz.2.2905 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1173.193315][T21644] Tainted: [L]=SOFTLOCKUP
[ 1173.193324][T21644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1173.193339][T21644] Call Trace:
[ 1173.193348][T21644]  <TASK>
[ 1173.193357][T21644]  dump_stack_lvl+0x100/0x190
[ 1173.193404][T21644]  should_fail_ex.cold+0x5/0xa
[ 1173.193434][T21644]  strncpy_from_user+0x3b/0x2d0
[ 1173.193479][T21644]  do_getname+0x78/0x390
[ 1173.193518][T21644]  __x64_sys_mknod+0x78/0xc0
[ 1173.193552][T21644]  do_syscall_64+0x115/0x840
[ 1173.193587][T21644]  ? clear_bhb_loop+0x40/0x90
[ 1173.193617][T21644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1173.193642][T21644] RIP: 0033:0x7fbf1359ce59
[ 1173.193661][T21644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1173.193684][T21644] RSP: 002b:00007fbf117d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[ 1173.193706][T21644] RAX: ffffffffffffffda RBX: 00007fbf13816270 RCX: 00007fbf1359ce59
[ 1173.193722][T21644] RDX: 00000000fffffffa RSI: 00000000000000cb RDI: 0000200000000180
[ 1173.193737][T21644] RBP: 00007fbf117d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1173.193752][T21644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1173.193767][T21644] R13: 00007fbf13816308 R14: 00007fbf13816270 R15: 00007ffeac32c348
[ 1173.193798][T21644]  </TASK>
[ 1174.642792][T17754] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1176.634113][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.642672][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.029178][ T6409] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1177.462345][T21733] kafs: addr_prefs: Invalid Command
[ 1177.629053][T21735] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1183.019678][T21812] Process accounting resumed
[ 1183.062204][T21818] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[19041] was attempted by ""[21818]
[ 1184.319114][T21836] kafs: addr_prefs: Invalid Command
[ 1184.612377][T21844] netlink: ct family unspecified
[ 1184.664622][T21846] ubi0: attaching mtd6
[ 1184.706528][T21846] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65)
[ 1186.329462][T21883] raw_sendmsg: syz.2.2943 forgot to set AF_INET. Fix it!
[ 1189.279671][T21924] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2952'.
[ 1189.397328][T21924] FAULT_INJECTION: forcing a failure.
[ 1189.397328][T21924] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1189.487990][T21924] CPU: 0 UID: 0 PID: 21924 Comm: syz.2.2952 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1189.488031][T21924] Tainted: [L]=SOFTLOCKUP
[ 1189.488041][T21924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1189.488057][T21924] Call Trace:
[ 1189.488066][T21924]  <TASK>
[ 1189.488076][T21924]  dump_stack_lvl+0x100/0x190
[ 1189.488125][T21924]  should_fail_ex.cold+0x5/0xa
[ 1189.488158][T21924]  core_sys_select+0x9b9/0xbb0
[ 1189.488195][T21924]  ? __pfx_core_sys_select+0x10/0x10
[ 1189.488254][T21924]  ? ktime_get_ts64+0x306/0x420
[ 1189.488295][T21924]  ? ktime_get_ts64+0x318/0x420
[ 1189.488332][T21924]  ? ktime_get_ts64+0x257/0x420
[ 1189.488374][T21924]  kern_select+0x1d0/0x280
[ 1189.488406][T21924]  ? __pfx_kern_select+0x10/0x10
[ 1189.488437][T21924]  ? xfd_validate_state+0x129/0x190
[ 1189.488470][T21924]  __x64_sys_select+0xbd/0x160
[ 1189.488498][T21924]  ? do_syscall_64+0x90/0x840
[ 1189.488535][T21924]  ? lockdep_hardirqs_on+0x78/0x100
[ 1189.488571][T21924]  do_syscall_64+0x115/0x840
[ 1189.488607][T21924]  ? clear_bhb_loop+0x40/0x90
[ 1189.488638][T21924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1189.488664][T21924] RIP: 0033:0x7fbf1359ce59
[ 1189.488684][T21924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1189.488716][T21924] RSP: 002b:00007fbf14399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[ 1189.488745][T21924] RAX: ffffffffffffffda RBX: 00007fbf13815fa0 RCX: 00007fbf1359ce59
[ 1189.488763][T21924] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001
[ 1189.488779][T21924] RBP: 00007fbf13632d6f R08: 00002000000001c0 R09: 0000000000000000
[ 1189.488796][T21924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1189.488812][T21924] R13: 00007fbf13816038 R14: 00007fbf13815fa0 R15: 00007ffeac32c348
[ 1189.488844][T21924]  </TASK>
[ 1190.086038][T21924] FAULT_INJECTION: forcing a failure.
[ 1190.086038][T21924] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1190.157831][T21924] CPU: 0 UID: 0 PID: 21924 Comm: syz.2.2952 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1190.157871][T21924] Tainted: [L]=SOFTLOCKUP
[ 1190.157881][T21924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1190.157898][T21924] Call Trace:
[ 1190.157907][T21924]  <TASK>
[ 1190.157917][T21924]  dump_stack_lvl+0x100/0x190
[ 1190.157966][T21924]  should_fail_ex.cold+0x5/0xa
[ 1190.157998][T21924]  get_futex_key+0x1d2/0x1510
[ 1190.158043][T21924]  ? __pfx_get_futex_key+0x10/0x10
[ 1190.158085][T21924]  ? __lock_acquire+0x4a5/0x2630
[ 1190.158127][T21924]  ? __x64_sys_fsopen+0xd5/0x220
[ 1190.158178][T21924]  ? kasan_save_stack+0x3f/0x50
[ 1190.158202][T21924]  ? kasan_save_stack+0x30/0x50
[ 1190.158231][T21924]  futex_wake+0xea/0x530
[ 1190.158266][T21924]  ? __pfx_futex_wake+0x10/0x10
[ 1190.158310][T21924]  do_futex+0x32b/0x350
[ 1190.158336][T21924]  ? __pfx_do_futex+0x10/0x10
[ 1190.158371][T21924]  __x64_sys_futex+0x34f/0x4d0
[ 1190.158402][T21924]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1190.158434][T21924]  ? rcu_is_watching+0x12/0xc0
[ 1190.158470][T21924]  do_syscall_64+0x115/0x840
[ 1190.158512][T21924]  ? clear_bhb_loop+0x40/0x90
[ 1190.158544][T21924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1190.158570][T21924] RIP: 0033:0x7fbf1359ce59
[ 1190.158591][T21924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1190.158616][T21924] RSP: 002b:00007fbf143990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1190.158641][T21924] RAX: ffffffffffffffda RBX: 00007fbf13815fa8 RCX: 00007fbf1359ce59
[ 1190.158659][T21924] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf13815fac
[ 1190.158675][T21924] RBP: 00007fbf13815fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1190.158692][T21924] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1190.158708][T21924] R13: 00007fbf13816038 R14: 00007ffeac32c260 R15: 00007ffeac32c348
[ 1190.158740][T21924]  </TASK>
[ 1192.364344][T21968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2961'.
[ 1192.503123][ T5733] ------------[ cut here ]------------
[ 1192.509599][ T5733] ODEBUG: free active (active state 0) object: ffff88802ad09438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0
[ 1192.523554][ T5733] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: kworker/0:4/5733
[ 1192.534852][ T5733] Modules linked in:
[ 1192.539444][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: kworker/0:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1192.551230][ T5733] Tainted: [L]=SOFTLOCKUP
[ 1192.558013][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1192.568231][ T5733] Workqueue: events devcd_del
[ 1192.573013][ T5733] RIP: 0010:debug_print_object+0x19b/0x2a0
[ 1192.579334][ T5733] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 01 e2 0b 41 56 48 8b 14 dd 40 58 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 7c d7 0b 01 48 83 c4 18 5b 5d 41 5c 41
[ 1192.599674][ T5733] RSP: 0018:ffffc900046c7848 EFLAGS: 00010246
[ 1192.605765][ T5733] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[ 1192.614385][ T5733] RDX: ffffffff8c1c5780 RSI: ffffffff8c1c53a0 RDI: ffffffff90e20080
[ 1192.623455][ T5733] RBP: 0000000000000001 R08: ffff88802ad09438 R09: ffffffff8bb2c6a0
[ 1192.632178][ T5733] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c53a0
[ 1192.640219][ T5733] R13: ffffffff8bb2c6e0 R14: ffffffff8a9174a0 R15: ffffc900046c7948
[ 1192.648256][ T5733] FS:  0000000000000000(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000
[ 1192.657202][ T5733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1192.663858][ T5733] CR2: 000056534e735558 CR3: 0000000035b32000 CR4: 00000000003526f0
[ 1192.671981][ T5733] Call Trace:
[ 1192.675277][ T5733]  <TASK>
[ 1192.678270][ T5733]  ? __pfx_hci_devcd_timeout+0x10/0x10
[ 1192.683936][ T5733]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1192.689835][ T5733]  debug_check_no_obj_freed+0x4da/0x630
[ 1192.695632][ T5733]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 1192.702005][ T5733]  ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90
[ 1192.709178][ T5733]  ? rcu_is_watching+0x12/0xc0
[ 1192.714518][ T5733]  ? __rcu_read_unlock+0x27f/0x5e0
[ 1192.721235][ T5733]  __free_frozen_pages+0x3fc/0x10a0
[ 1192.726530][ T5733]  hci_release_dev+0x4ef/0x630
[ 1192.732097][ T5733]  ? __pfx_hci_release_dev+0x10/0x10
[ 1192.737462][ T5733]  ? device_release+0x97/0x270
[ 1192.742264][ T5733]  ? rcu_is_watching+0x12/0xc0
[ 1192.747655][ T5733]  ? device_release+0x97/0x270
[ 1192.752455][ T5733]  bt_host_release+0x6b/0xb0
[ 1192.757228][ T5733]  ? __pfx_bt_host_release+0x10/0x10
[ 1192.762572][ T5733]  device_release+0xd2/0x270
[ 1192.767219][ T5733]  kobject_put+0x1f7/0x640
[ 1192.771674][ T5733]  put_device+0x1f/0x30
[ 1192.775879][ T5733]  devcd_dev_release+0x122/0x170
[ 1192.780915][ T5733]  ? __pfx_devcd_dev_release+0x10/0x10
[ 1192.786397][ T5733]  device_release+0xd2/0x270
[ 1192.791082][ T5733]  kobject_put+0x1f7/0x640
[ 1192.795772][ T5733]  put_device+0x1f/0x30
[ 1192.800148][ T5733]  devcd_del+0xaf/0xd0
[ 1192.804242][ T5733]  process_one_work+0xa0e/0x1980
[ 1192.809276][ T5733]  ? __pfx_process_one_work+0x10/0x10
[ 1192.815037][ T5733]  ? __pfx_devcd_del+0x10/0x10
[ 1192.820072][ T5733]  worker_thread+0x5ef/0xe50
[ 1192.825535][ T5733]  ? __pfx_worker_thread+0x10/0x10
[ 1192.831518][ T5733]  ? kthread+0x13a/0x450
[ 1192.835811][ T5733]  ? __pfx_worker_thread+0x10/0x10
[ 1192.841134][ T5733]  kthread+0x370/0x450
[ 1192.845279][ T5733]  ? __pfx_kthread+0x10/0x10
[ 1192.849965][ T5733]  ret_from_fork+0x72b/0xd50
[ 1192.854665][ T5733]  ? __pfx_ret_from_fork+0x10/0x10
[ 1192.859858][ T5733]  ? __switch_to+0x800/0x1100
[ 1192.864562][ T5733]  ? __switch_to_asm+0x39/0x70
[ 1192.869685][ T5733]  ? __pfx_kthread+0x10/0x10
[ 1192.874318][ T5733]  ret_from_fork_asm+0x1a/0x30
[ 1192.879183][ T5733]  </TASK>
[ 1192.882234][ T5733] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1192.889528][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: kworker/0:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1192.900479][ T5733] Tainted: [L]=SOFTLOCKUP
[ 1192.904805][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1192.914869][ T5733] Workqueue: events devcd_del
[ 1192.919565][ T5733] Call Trace:
[ 1192.922853][ T5733]  <TASK>
[ 1192.925794][ T5733]  dump_stack_lvl+0x100/0x190
[ 1192.930504][ T5733]  vpanic+0x552/0x970
[ 1192.934499][ T5733]  ? __pfx_vpanic+0x10/0x10
[ 1192.939024][ T5733]  panic+0xd1/0xe0
[ 1192.942808][ T5733]  ? __pfx_panic+0x10/0x10
[ 1192.947251][ T5733]  ? check_panic_on_warn+0x1f/0x90
[ 1192.952404][ T5733]  check_panic_on_warn.cold+0x19/0x34
[ 1192.957812][ T5733]  ? debug_print_object+0x18e/0x2a0
[ 1192.963084][ T5733]  __warn.cold+0x191/0x328
[ 1192.967529][ T5733]  __report_bug+0x296/0x3d0
[ 1192.972140][ T5733]  ? debug_print_object+0x18e/0x2a0
[ 1192.977387][ T5733]  ? __pfx___report_bug+0x10/0x10
[ 1192.982635][ T5733]  ? mark_held_locks+0x40/0x70
[ 1192.987457][ T5733]  ? rcu_is_watching+0x12/0xc0
[ 1192.992268][ T5733]  ? trace_sched_exit_tp+0x11c/0x160
[ 1192.997722][ T5733]  report_bug_entry+0xe1/0x290
[ 1193.002849][ T5733]  ? debug_print_object+0x19b/0x2a0
[ 1193.008173][ T5733]  handle_bug+0x1cd/0x2a0
[ 1193.012533][ T5733]  exc_invalid_op+0x17/0x50
[ 1193.017091][ T5733]  asm_exc_invalid_op+0x1a/0x20
[ 1193.021967][ T5733] RIP: 0010:debug_print_object+0x19b/0x2a0
[ 1193.027805][ T5733] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 01 e2 0b 41 56 48 8b 14 dd 40 58 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 7c d7 0b 01 48 83 c4 18 5b 5d 41 5c 41
[ 1193.047452][ T5733] RSP: 0018:ffffc900046c7848 EFLAGS: 00010246
[ 1193.053554][ T5733] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[ 1193.061566][ T5733] RDX: ffffffff8c1c5780 RSI: ffffffff8c1c53a0 RDI: ffffffff90e20080
[ 1193.069732][ T5733] RBP: 0000000000000001 R08: ffff88802ad09438 R09: ffffffff8bb2c6a0
[ 1193.077743][ T5733] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c53a0
[ 1193.086255][ T5733] R13: ffffffff8bb2c6e0 R14: ffffffff8a9174a0 R15: ffffc900046c7948
[ 1193.094242][ T5733]  ? __pfx_hci_devcd_timeout+0x10/0x10
[ 1193.099754][ T5733]  ? __pfx_hci_devcd_timeout+0x10/0x10
[ 1193.105252][ T5733]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1193.111100][ T5733]  debug_check_no_obj_freed+0x4da/0x630
[ 1193.116694][ T5733]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[ 1193.122798][ T5733]  ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90
[ 1193.129603][ T5733]  ? rcu_is_watching+0x12/0xc0
[ 1193.134394][ T5733]  ? __rcu_read_unlock+0x27f/0x5e0
[ 1193.139546][ T5733]  __free_frozen_pages+0x3fc/0x10a0
[ 1193.144786][ T5733]  hci_release_dev+0x4ef/0x630
[ 1193.149586][ T5733]  ? __pfx_hci_release_dev+0x10/0x10
[ 1193.154904][ T5733]  ? device_release+0x97/0x270
[ 1193.159724][ T5733]  ? rcu_is_watching+0x12/0xc0
[ 1193.164516][ T5733]  ? device_release+0x97/0x270
[ 1193.169332][ T5733]  bt_host_release+0x6b/0xb0
[ 1193.173956][ T5733]  ? __pfx_bt_host_release+0x10/0x10
[ 1193.179290][ T5733]  device_release+0xd2/0x270
[ 1193.184041][ T5733]  kobject_put+0x1f7/0x640
[ 1193.188566][ T5733]  put_device+0x1f/0x30
[ 1193.192770][ T5733]  devcd_dev_release+0x122/0x170
[ 1193.197742][ T5733]  ? __pfx_devcd_dev_release+0x10/0x10
[ 1193.203271][ T5733]  device_release+0xd2/0x270
[ 1193.207902][ T5733]  kobject_put+0x1f7/0x640
[ 1193.212398][ T5733]  put_device+0x1f/0x30
[ 1193.216599][ T5733]  devcd_del+0xaf/0xd0
[ 1193.220724][ T5733]  process_one_work+0xa0e/0x1980
[ 1193.225724][ T5733]  ? __pfx_process_one_work+0x10/0x10
[ 1193.231308][ T5733]  ? __pfx_devcd_del+0x10/0x10
[ 1193.236184][ T5733]  worker_thread+0x5ef/0xe50
[ 1193.240800][ T5733]  ? __pfx_worker_thread+0x10/0x10
[ 1193.245948][ T5733]  ? kthread+0x13a/0x450
[ 1193.250758][ T5733]  ? __pfx_worker_thread+0x10/0x10
[ 1193.255882][ T5733]  kthread+0x370/0x450
[ 1193.259983][ T5733]  ? __pfx_kthread+0x10/0x10
[ 1193.264633][ T5733]  ret_from_fork+0x72b/0xd50
[ 1193.269423][ T5733]  ? __pfx_ret_from_fork+0x10/0x10
[ 1193.274560][ T5733]  ? __switch_to+0x800/0x1100
[ 1193.279264][ T5733]  ? __switch_to_asm+0x39/0x70
[ 1193.284068][ T5733]  ? __pfx_kthread+0x10/0x10
[ 1193.288704][ T5733]  ret_from_fork_asm+0x1a/0x30
[ 1193.293504][ T5733]  </TASK>
[ 1193.296872][ T5733] Kernel Offset: disabled
[ 1193.301214][ T5733] Rebooting in 86400 seconds..