last executing test programs:

4m18.157259289s ago: executing program 2 (id=466):
r0 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x9)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0)
openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) (async)
r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x1000, 0x1c9}, 0x2, 0x7) (async)
poll$auto(&(0x7f0000000040)={r1, 0x1000, 0x1c9}, 0x2, 0x7)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0)
mmap$auto(0xfffffffffffffffc, 0x400006, 0x5, 0x100000009b72, r2, 0x8002)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x3, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54)
madvise$auto(0x110c230000, 0x8031ca, 0x10)
madvise$auto(0x110d230000, 0x1, 0x9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
sigaltstack$auto(&(0x7f00000000c0)={0x0, 0x0, 0x7fffffff}, 0x0) (async)
sigaltstack$auto(&(0x7f00000000c0)={0x0, 0x0, 0x7fffffff}, 0x0)
sigaltstack$auto(0x0, &(0x7f0000000240)={0x0, 0x1, 0x1})
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0)
sendfile$auto(r3, r4, 0x0, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0x2, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x309600, 0x0) (async)
r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x309600, 0x0)
sendfile$auto(r5, r5, 0x0, 0x10000800000003) (async)
sendfile$auto(r5, r5, 0x0, 0x10000800000003)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) (async)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0) (async)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/003/001\x00', 0xab01, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x8000004, 0x81, &(0x7f0000000040)="a006", 0x100400, 0x2d, 0x6, @number_of_packets=0xfffffff3, 0x45a, 0x0, 0x0})
timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xff)

4m17.895141335s ago: executing program 2 (id=468):
openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4093, 0xffd)

4m17.554393401s ago: executing program 2 (id=470):
write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10)
mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0)
mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000)
setresuid$auto(0x60, 0x1000, 0x8000)
timer_create$auto(0x8, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009)
fsopen$auto(0x0, 0x1)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}})
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4)
bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x100, 0x3eb, 0x5, 0x2, 0x3000, 0x2, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80000000, 0x4, 0xfffffffffffffffc, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbfffc, 0x0, 0x0, 0x0, 0x40000000000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x7fff]}, 0x7, 0xd)
rt_sigqueueinfo$auto(0x0, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}})
r1 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000200), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x20000080)
syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket(0x2, 0x3, 0x6)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x202000, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0)
madvise$auto(0x110c230000, 0x1, 0x9)

4m17.330845364s ago: executing program 2 (id=471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0)
sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="fbffffff", @ANYRES16=r1, @ANYBLOB="010026bd700006000000020000000500070007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
ioctl$auto(r2, 0x5646, r2)
read$auto_v4l2_fops_v4l2_dev(r2, 0x0, 0x0)
ioctl$auto(r2, 0x2400000, 0xffffffffffffffff)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x208e80, 0x0)
r3 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0xfb}, 0x9, 0x0)
landlock_restrict_self$auto(r3, 0xb)
sendmmsg$auto(0x3, 0x0, 0x3, 0x9)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0xa, 0x2, 0x73)
sendto$auto(r4, 0x0, 0x402, 0x436, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x16, 0x0, 0x1)
r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, r5, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x3, 0x3a)
r6 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000029c0), 0x82080, 0x0)
lseek$auto(r6, 0x9, 0x2)
bind$auto(0x3, 0x0, 0x6a)
r7 = getpid()
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x8000, 0x6672, 0x7, 0x10010, r0, 0x6)
prctl$auto(0x6d, 0x3, r7, 0x5, 0x7)

4m16.628431582s ago: executing program 2 (id=473):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd10\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4)
r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4)
fallocate$auto(r2, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0)
write$auto(r3, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) (async)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004)
mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/can/stats\x00', 0x2, 0x0)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) (async)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
rt_sigsuspend$auto(0x0, 0x8) (async)
rt_sigsuspend$auto(0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x8000000000000001, 0x7, 0x4, 0x9b72, 0xffffffffffffffff, 0xf34)
mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000)

4m15.989888971s ago: executing program 2 (id=475):
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setreuid$auto(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000bdfb90ff07d85b190a9e20dda7104d968ce8f7cc4325d00d8c1aff70a14c4ead5cc86423d9c68d3469716858c60c2d5c3e3f3d253b0502d10d19b3743f5451fb01572bd532f3d665a032e93ab2b84b5d1444378e53e6ee05eb43da4d066f934eceb52744b594d726d8bdc8", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000040003800c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x24048084)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x600000, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}})
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
close_range$auto(r0, 0x8, 0x0)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x408)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x1, 0x0)
dup$auto(r5)
socket(0x2, 0x1, 0x106)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r7 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95)
sendfile$auto(r7, r7, 0x0, 0x1)
select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0xffffffffb00caa82, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x8000000000000001, 0x80000020, 0x6, 0xb, 0x7, 0x0, 0xd8]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)

4m0.855698061s ago: executing program 32 (id=475):
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setreuid$auto(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000bdfb90ff07d85b190a9e20dda7104d968ce8f7cc4325d00d8c1aff70a14c4ead5cc86423d9c68d3469716858c60c2d5c3e3f3d253b0502d10d19b3743f5451fb01572bd532f3d665a032e93ab2b84b5d1444378e53e6ee05eb43da4d066f934eceb52744b594d726d8bdc8", @ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000040003800c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x24048084)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x600000, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}})
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4)
close_range$auto(r0, 0x8, 0x0)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181d40, 0x408)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x1, 0x0)
dup$auto(r5)
socket(0x2, 0x1, 0x106)
r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r7 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95)
sendfile$auto(r7, r7, 0x0, 0x1)
select$auto(0x1, 0x0, 0x0, &(0x7f00000002c0)={[0xffffffffb00caa82, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x8000000000000001, 0x80000020, 0x6, 0xb, 0x7, 0x0, 0xd8]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)

7.660797053s ago: executing program 1 (id=1312):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x6, 0xffe, 0x8000000008011, 0x3, 0x0)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fd038004001298"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7022fbdbdf650a23952d7a12b566cb52a4d5d144d84a5d68fd75efe799ce6ddb3a162f2b3d135245edc8f4a398de7241a968abb841814b36692e8e408c8cce21050063a0bf0886d8777586187a0d19c4d84de0cc93db329ccc8b8f264d936a430c77eb89b38d4f3a316fa783a99b3aac8b392afe7e1d5c014cca9c7cc4a19889c037c0916bcafd869e1ad4b66e847ebafa00908119dc8e815dec3d21d4518d3aa8183050ed04dbd2aa6d59ff47c99092cf3c8d5d38a748aef438bdf60138ca27e846e9b1724a867b2a1b3c6c2f70492c"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(r0, 0x0, 0x10007c)

7.294185311s ago: executing program 1 (id=1315):
mmap$auto(0x80000000000000, 0x40000c, 0xe1, 0x9b72, 0xffffffffffffffff, 0x200000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x42, 0x0)
fcntl$auto_F_GET_SEALS(r0, 0x40a, 0x1)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/queue/read_ahead_kb\x00', 0x22b42, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/radio29\x00', 0x28002, 0x0)
poll$auto(&(0x7f00000001c0)={<r3=>r2, 0xffff, 0x29}, 0x6, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x14)
socket(0x11, 0x80003, 0x3ff)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
r4 = socket(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000007c0)=ANY=[@ANYRES16, @ANYBLOB="01009c27bd7000ffdbdf2523984e11e3c5740ef6fb93df80b7724efab5702c6fa04f02ea883ccdfb284a7a9fc2ff92e0f74ea7ac29da48dcf1b4891888fe3b45bc49ae1c131ea7227e615165ff115a35ad98e722197e4cf497513273f8196cd948ba37a763b3e4688614f47bfcab9d089ca6e098091558eb19404b84a5e304819ad1de39213429016b9e4671045971b0ffbd2c3cf36d0ee27766e23ee6be76241a75557cd3c39291e6310bf8e6d2243059c567dd151fb885462d3c200814d56bc2468414d8a78366", @ANYRES32=r4, @ANYBLOB="89cd460de8f2f54e850000000025fe6c44d4f3a65fc00494db6d8ac25dc66c2c0d6a4e2eb93e4f3b13e5b3306f6b67495ff5e65468e1003806aedca26518818562aa7ab0b54f1e786e1c5e5cb2aa3004b1d20fd44ab602b52b2b7ba48b734bcaa6f03bc766e4d467c2cfa4bec5f8205cf51e61"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r5 = setfsgid$auto(0x0)
ioctl$auto_XFS_IOC_ALLOCSP64(r1, 0x40305824, &(0x7f00000004c0)={0x400, 0x1, 0x8000, 0xffffffff, 0x8, <r6=>0xffffffffffffffff})
shmctl$auto_IPC_RMID(0x1a, 0x0, &(0x7f0000000400)={{0x4, 0x0, r5, 0x6, 0xddd}, 0x80, 0x7f, 0xffffffffffffffff, 0x5, @inferred=r6, @raw=0x5, 0x2ef9, 0x0, &(0x7f0000000500)="e1cf857ecaabd602f783153c17536e49dcde0c8961a18547b81885514f193d15db15f4c49bafb26c4ee902c5eb69c262394521b92b769a6338e9d1fedb65491741bcd721b4b9656ef0f7281424c7343a7c8beb9fd5831c830763b2d22d7dfc621f21fdcfd093b32671455207162667eef897935a042558d4260674ece0d8618566b1695baed7f01c45d4df8337288532a541c233af3a4084cb0e7d6025b7bbcd4309d2fd9a43e69d1f4e7e074786a10c72aa1d89010f2a29e659a8a1155980e2dbdb1b5c552bef50e440e0d68e4178aefa64e44bf90ca83a553d71900d574cec07b2f22ae6edd900819e7fd1f03411aaee22a42da93c2a589630901453", &(0x7f0000000600)="2994fce53ce5242e62b9f3f9f746f6bc7b1222d599dc3acb27cc15da37662c83286f3d9f3d2ae1eadaf6874b9677fa1ab3b476cdb76e92b613b6a251d2290bba27d586fcb480e3c4c781f079eec849d7b5b50f4c69be890ff8c132571b913229153c6d78367d149ecd40c957815b708070bf16ee2b70728ae40a7387eb7bbaf3ed17fc535bec96b0a1db9692d63f475e3d"})
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='r'], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0xc1)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x3, 0x9}, 0x2}, 0x2, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x2a1, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0xfffffffd, 0x1, 0x40, 0x76c5, 0x100008, 0x100000000}})
ioctl$auto_EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000100)={0xffffffff, 0x0, "f9f62da2db7faff11eebdb0f76aa9b2f9ddaafb36b03b06d2066d1f95303dfdaddf65c3b36eb5565bb24a0da3d29ef667f9c88bed392690ac95ff12670a411d6dc05fd1aedd8dd75052005196c1b8d1c510088113c45cb8e9415a2ef61c9e13d1f46af4ac44aff82d55a2570b9c61e441aaef371dd7110ea3c12790104b9e41cd430cde315df3401f150b2d1f92c18c1a23bf33763fd4732b65dacc08dfbcf976b12d7282c30754b005442a8b4bc50353e54c8240a9115f2f6f50d58286f97c6f286db732a8246701566eb69b5fbe02da9ad98008877760ea7a8150acf39cb4cce9c2436d3307fd5ed58617c3c14116eee33a2"})

7.086972558s ago: executing program 1 (id=1317):
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0xf3, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, <r0=>0x4, 0x207, 0x6, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10)
writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x20000, 0x2, 0x12}, 0x18)
r2 = socket(0xa, 0x5, 0x84)
sendto$auto(r2, 0x0, 0xb0, 0x9, &(0x7f0000000080)=@generic={0x2b, "e2e18340cba8fe80000700"}, 0x11)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000001c0)="0a1b9a5c2b00006e163bb154d7886d8edeea371cadb848770dc8f7ffd1c76eedba12b9f694dabdbcf3401910000000000060000023b5d40a", 0x38)
dup2$auto(r3, r0)

6.138731418s ago: executing program 1 (id=1319):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x2, 0x0)
getsockopt$auto(0x100000006, 0x0, 0x16, 0xfffffffffffffffe, 0x0)
mmap$auto(0x0, 0x446be6e8, 0x16, 0xeb3, 0xffffffffffffffff, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = eventfd$auto(0x4)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), r0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2)
r3 = prctl$auto(0x5, 0x2, 0x7fffffffefff, 0x0, 0x0)
ioctl$auto(r2, 0x4004af07, r1)
ioctl$auto_BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000002c0)="c9afeb24bfea7f787b7aa474937ba1e0ab0eb5d02d7f51b2bbedf5f2843d641ea4fc972ab7829b094e65331df0")
r4 = syz_genetlink_get_family_id$auto_tipcv2(0x0, r0)
r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snd/pcmC1D1p\x00', 0x200, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000840)={0x7, 0x1000, 0x8, 0x1, 0x4, 0x3, 0x1, 0x10001, 0x5, 0xffff473f, 0x80000000, 0x4, 0xb, 0x854, 0x64, 0x3ff, 0x0, 0x4, "547d8f774e7ab98e3ccdbad1e13745f260aa6a6264428625532ee28234827d36031da9ab"})
sendmsg$auto_TIPC_NL_MEDIA_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1109cfcde5bc6fb1285f021a806cd4e48b35", @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf250b000000d400000091401036f36babfc88de1de42f41820e754f8b87872ad9c4eaba75f0d8a727244e9d145804fb029a173193608f34e8810d1beb6125da489f6dad14b0af7e72a1a6cf09ff6accb30af6951fc43b06cbf4b467e0a4c48236b6b6b97bbfdba12135794077e22c7abbe60411c9ee42f7ed6dfd33cf5b69e3a2c0332c04aacf6397106b02134555c73bb1d6ae0f02e895a76f89343565b48fa641884859ce2798b0aa3737c12373f5cf9dbb605bd0b3f476ba9df763ed7deb5179aea36bd072b1102679fffb2a4fe9abcb51d56c7f57808436"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x48040)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x90141, 0x0)
unshare$auto(0x40000080)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video54\x00', 0x42942, 0x0)
read$auto_proc_loginuid_operations_base(r0, &(0x7f0000000140)=""/72, 0x48)
sendmsg$auto_TIPC_NL_NET_GET(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYRES64], 0x568}}, 0x40840)
r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r7, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000040), 0x7111}, 0x8)
write$auto_proc_page_owner_threshold_(r6, &(0x7f0000000140), 0x0)

5.267069134s ago: executing program 0 (id=1323):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/nullb/features\x00', 0x181041, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r2)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x600, 0x0)
mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x20000)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0)
unshare$auto(0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000080)=0xffff)
ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000080))
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')
fchdir$auto(r4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyd9\x00', 0x10300, 0x0)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7000fbdbdf2503000000d30602800800e500", @ANYBLOB="80236c05e2eb698e3a72417b03c57750", @ANYBLOB="0800ed00", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="a182a8998acd61e50fdcab95af034e907a1a70dc31b28db724b386658553b57001cd60e7a8c910775135f42dc80d3215380a5f2fd32477abdd993feafda2f6887b6ce42aaa1e323d693ccc06e1aac544cf65f381823209a94a79888050de20cc612ca77034d1fb15b6a0fce79d1ecb533329ebf2488e6fe82a9add", @ANYBLOB="08000000ac1414bb0c004b00dc0000000000000082013e800800ba00", @ANYRES8=r2, @ANYBLOB="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"/1077], 0x760}, 0x1, 0x0, 0x0, 0x24040071}, 0x8800)

5.018215968s ago: executing program 1 (id=1326):
r0 = socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0x58, 0x401, 0x8000)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
socket(0x2c, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'})
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x1d30)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
ioctl$auto(r0, 0x8914, 0x24)

4.750783092s ago: executing program 1 (id=1327):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40103, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x40000) (async)
recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async)
write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b)
write$auto(0xffffffffffffffff, 0x0, 0x80000000) (async)
r4 = socket(0x10, 0x2, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) (async)
socket(0x15, 0x5, 0x0) (async)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
ioctl$auto_KVM_GET_API_VERSION(r5, 0xae00, 0x0) (async)
getsockopt$auto(r5, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async)
ioctl$auto_SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000001940)) (async)
write$auto(r0, 0x0, 0x40100000a3d5)
mmap$auto(0x0, 0x1009, 0xffb, 0x8000000008011, 0x3, 0x0)

3.594577209s ago: executing program 3 (id=1329):
r0 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
setsockopt$auto_SO_ATTACH_FILTER(r0, 0x2, 0x1a, &(0x7f0000000040)='%@^*\x00', 0x3)
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000080)={<r1=>r0, 0x0, 0x7, 0xfffffffffffffc01, 0x2, 0x1})
poll$auto(&(0x7f00000000c0)={<r2=>r1, 0x4, 0xfff}, 0x8d, 0x2)
io_uring_register$auto_IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000100)="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", 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'virt_wifi0\x00'})
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/fail-nth\x00', 0x204000, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm0p/sub5/hw_params\x00', 0x4000, 0x0)
pread64$auto(r1, &(0x7f00000002c0)='/proc/asound/card1/pcm0p/sub5/hw_params\x00', 0xa8, 0x200)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/uevent\x00', 0x2, 0x0)
pread64$auto(r4, &(0x7f0000000380)='%\x00', 0x2, 0xffffffffffffffff)
r5 = getsockopt$auto(0xffffffffffffffff, 0x8, 0x1dc, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/uevent\x00', &(0x7f0000000440)=0xc87d)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000004c0), r5)
sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x7fff}, @NL802154_ATTR_WPAN_PHY_CAPS={0x37, 0x18, 0x0, 0x1, [@generic="7c4a976d45a886ae97d263c57a49bdf17a7676f1b098d65db2eabae6ac54bedc0f655072f368217fedd04576631e8d774701fa"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000884}, 0x20004000)
getsockopt$auto_SO_RCVLOWAT(r3, 0x4, 0x12, &(0x7f0000000600)='$%\\\x00', &(0x7f0000000640)=0x2)
r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer\x00', 0x4800, 0x0)
ioctl$auto_SNDCTL_TMR_CONTINUE(r7, 0x5404, &(0x7f00000006c0)="ac8fdf6d0a923c7ee260e650588904aa651af466e010402841794e4411de7a4db16a88c47655f440dbe975b5d96721d91d2e0bc524fa74c230a5af8604fa292807bdbe6fd538967bd764ab9b5934e27521551e0b2542ab5b7dcc872a5602730b1b7d7e")
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000740), r2)
openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mixer2\x00', 0x400, 0x0)
io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f00000007c0)="44b9403547db11000006365e49679b3c4ed5219a36c7f86a95c07ea3867b7af261308f710a78297047ed8ddf1d681df7277a2c6cbbbb0b2a971a7a588089377e1523bddc18a4bcf48133e5702486f7fe71516311861f28cfc7cf633094c96c6775617461a05c8e4d28bb83da80e38cf0dd633ae63c6b46a68ee2ab947820", 0x3)
pidfd_getfd$auto(r0, r2, 0x8)
r8 = openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/netdevsim/netdevsim2/bpf_bind_verifier_accept\x00', 0x400800, 0x0)
pidfd_send_signal$auto(r8, 0x2636, &(0x7f0000000880)={@_si_pad}, 0xfffffffe)
r9 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptys6\x00', 0x400000, 0x0)
ioctl$auto_HPET_IE_ON(r1, 0x6801, 0x0)
ioctl$auto_FITHAW(r9, 0xc0045878, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000940)='/sys/devices/virtual/net/bpq2/phys_port_name\x00', 0xe00, 0x0)
fcntl$auto_F_OFD_SETLKW(r1, 0x26, 0x6)
ioctl$auto_SNDCTL_SEQ_CTRLRATE(r7, 0xc0045103, &(0x7f0000000980)="4cf6a521b144c6f44feb451f5c09126874c71af1f45f67a46cdd5204f8a69e065914e1a3f2ef8645bfc74348248d5ceb532ebf305af677042800b3b145b14cbb4504803b079e33520a5554cbdfe5cf2a0a334cbd")
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/devices/virtual/net/rose3/type\x00', 0x64082, 0x0)

3.586007739s ago: executing program 4 (id=1330):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x83, 0x0, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nr0\x00', <r2=>0x0})
sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000000080)={0x1498, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@MACSEC_ATTR_OFFLOAD={0x217, 0x9, 0x0, 0x1, [@nested={0x61, 0x113, 0x0, 0x1, [@nested={0x4, 0x66}, @generic="18234d4b16e089cf1144acef466634fe813aaa75a65bd28e21814aeef422043b4472c2b860e531adb01cbc53b26db0abeba4a1072a71336d751ff1c1bb41160395a82bb604588137f31357bb599772daaa30187958", @nested={0x4, 0x36}]}, @generic="14bc869fc83fa68885157fc49528c5a4552ffd13393d79ff6e60620d8c9b52ed20bd25e93ed036f1878f6b40fed4fac827302497da594054a7ff6bd6cf442e85cd0d3f3700e3822287b1422982129c1895b9de2df5a5e8823e96077520f5adaa27b5afac6c3fca63af4067009e82759154288fb8be9de80145bad25f0257855932b6d7cf7145bf135a195a8bd427f26f4377a13a0fbffc22e1c6b4a85989bd0054d07b830b80043c729403124ef2e8e5f10aa586666199a41b9b6e2dfd252538e4460166f257b1b411f8b04cd320c763cee736bee71236138293fe2ec7", @generic="718962b1fe52214ab9e945b1f09a9962cf4331b8f7f47a37d4d6ad77a91f5f45b3b813ff19b993a2a3fe2f28a9a4d769e803abf7f35ae85043d5367529fc9b98050214ba69a5251c910ba1bac0856a16b9a0b6385942bbb5b5fb5f4d9dd7984e3e801abf6853dd09e957247604cee3c9c73c087115bc56d52817497024d83cef3009131fd281dedd1b0cb3d7adffb8e585667b1ef037ca3cbab7d3884946aa5666ce2a8a9811e8e083caa601efca9be1cbb8f1ad1e4c682682b0a806a80fe6ce9017bbb99c77b9fe71513beae2b1c97c32f6"]}, @MACSEC_ATTR_SA_CONFIG={0x104, 0x3, 0x0, 0x1, [@nested={0x2c, 0x10b, 0x0, 0x1, [@typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2f}}, @nested={0x4, 0x78}, @nested={0x4, 0x23}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x7}]}, @nested={0xd1, 0x28, 0x0, 0x1, [@nested={0x4, 0xcf}, @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x9b}, @generic="9560e613d8a64b5e9b4c2d3330efd805b90620fe3899bdabf8864edcd0b1bc44dceaa7dcdf98ea7d911e2e1d4d5d4b814c3e7d1a4072ffedd9a3aa50baef272952cc25f8d15c430ed2868a6604e3d96590e0eea076451e5069ef0aeff190a06ff0d7c4d92a1945287c886f45b15f84faf89578c75cdf905bf032e1a2c52344158267e537d628046657b3162ea05a1bf3d2305b74a6b4f02c3be55aedc6ae59654d2481f9059e2ce4f31ec4ec24b840b4c951adec97"]}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r2}, @MACSEC_ATTR_OFFLOAD={0x115f, 0x9, 0x0, 0x1, [@typed={0x4, 0x1c}, @generic="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", @typed={0x13, 0xe, 0x0, 0x0, @binary="7c549dde213353907c92b0c80dfcfc"}, @nested={0x51, 0xbc, 0x0, 0x1, [@generic="719befd4007de56cc50a74f9cfa6d1230bb4064bf5982eadbfbaf5622ee51cc662de573b99db781b5198d5a833444d631785524ff7ee869502981065b92cd43721cd27c0c5", @typed={0x8, 0xde, 0x0, 0x0, @uid=0xee01}]}, @nested={0xb9, 0xd4, 0x0, 0x1, [@generic="12c1ed7663d562777acddb7b7722f3ce74ae1779f209f209d5ddf816bf64c915e07ec79f7f24f1644dbe9f79e81bd2d27c9f65386689891723008a879dd39eb93e5d515a00296c1cf632403ca93f8d277a8e03252533f84ec5496ff6d0e377f4b9c104cf73b89f3e80731b1bf62bc8bbab29b539cc6ac64efd7be290235013a31bbd951374ee3e63fbb87cae2b28887045a18590af2857a591c3e663e2a54afd8252b5cbb340182d5709e5e1aa28ae79667a3c06c8"]}, @generic="fbb7d234d0422b565ee0f2f05719664c3dbbf201353351cdb7ecb1cdf69a03db2ba717f29956b1528662346ebcf9280abb24d3"]}]}, 0x1498}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
getpeername$auto(0x3, 0x0, 0x0)

3.371880745s ago: executing program 0 (id=1331):
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0x311)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="86da654a0044cfaa3eb5a5c0b5ac49d86484b7588d6dd966cd15e6010000100000000002bfdb473ca4", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf051f00000004009d00060048003d0000003700f600000000000500e4000c000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040440}, 0x44)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x91, r0, 0x8004)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0xfffffffffffffffe)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket(0x1d, 0x3, 0x1)
ioctl$auto_PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0)
mmap$auto(0x80000000000, 0x2020009, 0x3, 0xeb1, r1, 0x8000)
socket(0x11, 0x3, 0x9)
futex$auto(0x0, 0xc, 0x1, 0x0, 0x0, 0xfffffffa)
set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7f, 0x9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3.365045408s ago: executing program 3 (id=1332):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0)
fcntl$auto_F_GETLEASE(r0, 0x401, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r1, 0x5408, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0)
ioctl$auto(r3, 0xfffffff9, 0xffffffffffffffff)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
r4 = io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
unshare$auto(0x40000080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend\x00', 0x8102, 0x0)
getpid()
write$auto(0x1, 0x0, 0x80000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r5)
timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6)
timer_settime$auto(0x0, 0x801, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x83}}, 0x0)
sendmsg$auto_IPVS_CMD_GET_DEST(r5, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="e4189e53", @ANYRES16=r6, @ANYBLOB="ffa727bd7000fedbdf250800000005000280f1000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010)
r7 = socket(0x8, 0xa, 0x1)
r8 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r7)
sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x10)
sendmsg$auto_KSMBD_EVENT_HEARTBEAT_REQUEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800)
getsockopt$auto_SO_MEMINFO(r0, 0x9, 0x37, &(0x7f0000000180)='/sys/power/sync_on_suspend\x00', &(0x7f0000000240)=0x7)

3.106972427s ago: executing program 4 (id=1333):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r1, 0x5408, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
io_uring_setup$auto(0x1, 0x0)

2.967805011s ago: executing program 0 (id=1334):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x1e9a02, 0x0)
write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
r2 = io_uring_setup$auto(0x59, 0x0)
getpid()
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
listen$auto(r1, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x808e3, 0x0)
write$auto(r3, &(0x7f0000000200)='\x00'/14, 0x2)
unshare$auto(0x4)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES64=r5, @ANYBLOB="00000a00004e8f0bc0c6e581f300"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000)
r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
madvise$auto(0x1000, 0x200007, 0x19)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
madvise$auto(0x9, 0x3, 0xa)

2.697089292s ago: executing program 3 (id=1335):
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
socket(0x10, 0x2, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
connect$auto(0x3, &(0x7f00000000c0), 0x55)
write$auto(0x3, 0x0, 0x800)
mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
r2 = prctl$auto(0xbe, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(r2, 0x0, 0x11000, 0x20111, 0x0)
r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4)
fallocate$auto(r3, 0x0, 0x10, 0xccbd5d)
fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10)
ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000100)=0xf)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000002b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f4130000", @ANYRES16=0x0, @ANYBLOB="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"/5102], 0x13f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
sysfs$auto(0x2, 0x3c, 0x4)

2.642945048s ago: executing program 4 (id=1336):
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
socket(0x200000000000011, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
io_uring_setup$auto(0x2, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r1, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
r2 = io_uring_setup$auto(0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC, @ANYRES16=r0, @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x85)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r2)
clone3$auto(&(0x7f00000000c0)={0x3, 0xdb, 0x7, 0x5, 0xac9f, 0x42f4, 0x1, 0x8, 0x3, 0x9, 0x7ff}, 0x4)
msgctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0xee00, 0x1, 0xa2, 0x2, 0x3}, 0x0, &(0x7f0000000180)=0x4, 0x1c8, 0xdb0, 0x4, 0x6, 0x80, 0xff56, 0x1000, 0x9, @raw=0x3, @raw=0x1})
mprotect$auto(0x110c230000, 0xa588, 0x6)
mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto(r5, 0x10e, 0x20005, 0xfffffffffffffffe, 0x0)
mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0)
timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0)
getpgid(0xffffffffffffffff)
getpid()

2.427689287s ago: executing program 4 (id=1337):
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf034991380008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', <r6=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=r6, @ANYBLOB="e5ff0200", @ANYRES32, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4)
write$auto_ucma_fops_ucma(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0)
close_range$auto(0x2, r7, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0)
r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0)
write$auto(0x3, 0x0, 0xfdef)
ioctl$auto(0x3, 0x540a, r8)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4020, 0x1, 0x8e051, r3, 0x0)

2.308939627s ago: executing program 0 (id=1338):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
mount$auto(0x0, &(0x7f0000000180)='}[,&*}\x00', 0x0, 0x1, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) (rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x5, 0x3)
socket(0xa, 0x0, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.3/power/runtime_active_time\x00', 0xc1, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/button/parameters/lid_init_state\x00', 0x16b000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x4081, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyea\x00', 0x22180, 0x0) (async)
socket(0x15, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2$auto(0x0, 0x0)
io_uring_setup$auto(0x7, 0x0) (async)
socketpair$auto(0x1, 0x5, 0x89d, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyq2\x00', 0x480, 0x0) (async)
read$auto_null_fops_mem(r0, &(0x7f0000000200)=""/194, 0xc2) (async)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x84502, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)

1.543915658s ago: executing program 3 (id=1339):
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0)
ioctl$auto_OTPSELECT(r0, 0x80044d0d, &(0x7f00000002c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_tcpport\x00', 0xc2481, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)="2d37e7", 0x3)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x12, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r4, 0x84, 0x12, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram2/queue/io_poll\x00', 0x20a42, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000)

1.541070292s ago: executing program 4 (id=1340):
unshare$auto(0x40000080)
r0 = clone$auto(0x7, 0x7, 0x0, 0x0, 0xfffffffc) (async)
r1 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0)
read$auto_state_fops_(r1, &(0x7f0000000180)=""/61, 0xfffffeeb) (async)
timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000100)={@sival_int=0x7cb4, @raw=0x7f172694, 0x4, @_tid=r0}, 0x0)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000040)=""/36, 0x24)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x40009, 0x694, 0x200000000009b72, r2, 0x28000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async, rerun: 32)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x4001, 0x0) (async, rerun: 32)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, 0x0, 0x100000a3d9)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x88ca02, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sysfs$auto(0x2, 0xe, 0x0) (async, rerun: 64)
sysfs$auto(0x1, 0x3, 0x5) (async, rerun: 32)
r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) (rerun: 32)
ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0)
ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0)
ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) (async)
ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010)
write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mkdir$auto(0x0, 0x0) (async, rerun: 64)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0xffff, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x1, 0x62, 0x8, 0x8, 0x6d3f, 0x5, 0xa, 0xfffffffffffffffe]}, 0x0)

1.19540996s ago: executing program 0 (id=1341):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000)
mprotect$auto(0x1000, 0x401000, 0x4)
mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000)
openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) (async)
r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0)
io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) (async)
io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}})
unshare$auto(0x40000080)
getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) (async)
getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9)
mmap$auto(0xf5f, 0x2020001, 0x2, 0x4fa, 0xfffffffffffffffa, 0x7ffb)
socket(0x15, 0x5, 0x0) (async)
socket(0x15, 0x5, 0x0)
rt_sigsuspend$auto(0x0, 0x8)
r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r3)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x1000000008000)
close_range$auto(0x2, 0x8, 0x0)
rt_sigpending$auto(0x0, 0x7ffffffff000) (async)
rt_sigpending$auto(0x0, 0x7ffffffff000)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) (async)
openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0)
socket(0x25, 0x2, 0x0) (async)
r4 = socket(0x25, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x6c)
connect$auto(0x3, 0x0, 0x54)
capset$auto(&(0x7f0000000380)={0x6, <r5=>0xffffffffffffffff}, &(0x7f00000003c0)={0x8, 0x5, 0x9})
msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x4, 0x0, 0xffffffffffffffff, 0x0, 0x5c, 0x0, 0x3ff}, &(0x7f0000000240)=0x13, &(0x7f0000000400)=0x76, 0x1, 0x0, 0x3, 0x10001, 0x7, 0x5, 0x3, 0xb, @inferred=r5, @inferred=r5}) (async)
msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x4, <r6=>0x0, <r7=>0xffffffffffffffff, 0x0, 0x5c, 0x0, 0x3ff}, &(0x7f0000000240)=0x13, &(0x7f0000000400)=0x76, 0x1, 0x0, 0x3, 0x10001, 0x7, 0x5, 0x3, 0xb, @inferred=r5, @inferred=r5})
keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x20003, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x165000, 0x0)
close_range$auto(0x2, r4, 0x7)

950.576379ms ago: executing program 3 (id=1342):
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x3, 0x6)
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={<r1=>r0, 0x0, 0x3, 0x100, 0x6, 0x735})
getsockopt$auto(r1, 0x2000025, 0x3, 0xfffffffffffffffe, 0x0)
getresuid$auto(0x0, 0x0, 0x0)

812.722504ms ago: executing program 3 (id=1343):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
socket(0x2, 0x801, 0x106)
r0 = socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0016800800018088472c8012000100898771f1c19f17790485908288480000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x2140, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", <r3=>0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x2, 0x0, 0x1, 0x4}}, 0x92)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0)
openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
unshare$auto(0x40000080)
setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd)
setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8)
getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe)

27.017885ms ago: executing program 4 (id=1344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setreuid$auto(0x0, 0x20000000004)
r1 = socket(0xa, 0x1, 0x84)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x800, 0x0)
setsockopt$auto(r1, 0x0, 0x60, 0x0, 0x4f)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0x1f40)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
r4 = semctl$auto_GETPID(0x0, 0x2e3, 0xb, 0x10)
prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0)
prctl$auto(0x35, 0x0, 0x10, 0x0, 0x0)
syz_open_procfs$namespace(r4, &(0x7f0000000480)='ns/pid\x00')
r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000240), r0)
sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000813941f3fabd8052ee9f1b13913ed42c8c265596c87647f91e8dde3aa7ff42b1a406988dd731d4a688103f102a6977d7b89963988eddcbf35117ec0f4b6ba18b46177ce2f4b8703a40cd9a5f47917dd3ccb4ad6b5ac5f925aec82176465d85153088741f45fb2ebc3663be0ec70bb44268ee01f9a7ba38be0a61f6ba0fbcefb586831cf4b3dc123cd0949ae230ae7c", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf25040000000c0001800800010007000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x2406a90b, 0x83, 0x3}, 0x20, 0x0, 0x8000006)
r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0xc0, 0x0)
preadv2$auto(r6, &(0x7f00000002c0)={&(0x7f00000001c0)="f94f996576723988c152228e17bdedf0b8a9b57186c022e5321239a419e447d70ef45099c3ffa4cf6534a8985ab1264ea47e31b07d237f21d55c163fc4924d0d6d4cc7c9d93ea8a95d657c46502ebe0843a81ea61270a62a6b2f51eef7"}, 0xf, 0x8000, 0x278, 0x81)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/wlan0/max_desync_factor\x00', 0x42402, 0x0)
read$auto(r7, 0x0, 0x1ff)
r8 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x80201, 0x0)
writev$auto(r8, &(0x7f0000005f00)={0x0, 0x4}, 0x6)

0s ago: executing program 0 (id=1345):
openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
socket(0x2, 0x2, 0x1)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0)
io_uring_setup$auto(0xc, 0x0)
openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0)
socket(0xa, 0x1, 0x84)
socket(0x1d, 0x2, 0x7)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0)
ioctl$auto(0x3, 0x40106f52, r0)

kernel console output (not intermixed with test programs):

71] openvswitch: netlink: IP tunnel dst address not specified
[  132.591916][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  132.605077][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  132.757836][ T6694] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in;
[  132.757836][ T6694]    program syz.2.154 not setting count and/or reply_len properly
[  135.904556][ T6741] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  138.108423][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.164'.
[  138.225648][ T6768] netlink: 342 bytes leftover after parsing attributes in process `syz.3.164'.
[  140.142462][ T6794] ubi0: attaching mtd0
[  140.461865][ T6794] ubi0: scanning is finished
[  140.545535][ T6794] ubi0: empty MTD device detected
[  141.709356][ T6794] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  141.941701][ T6794] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  142.037616][ T6794] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  142.099271][ T6794] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  142.181242][ T6794] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  142.232332][ T6794] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  142.295418][ T6794] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4122170646
[  142.387530][ T6794] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  142.497230][ T6827] ubi0: background thread "ubi_bgt0d" started, PID 6827
[  142.517447][ T6790] ubi0: detaching mtd0
[  142.607898][ T6790] ubi0: mtd0 is detached
[  143.430251][ T6839] random: crng reseeded on system resumption
[  144.901072][ T6727] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  145.470445][ T6849] random: crng reseeded on system resumption
[  146.909968][ T6852] Bluetooth: hci2: command 0x0c1a tx timeout
[  148.982025][ T6852] Bluetooth: hci2: command 0x0c1a tx timeout
[  149.096697][ T6921] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  149.128081][ T6921] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  149.157921][ T6921] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  149.183150][ T6921] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  150.588156][ T6947] random: crng reseeded on system resumption
[  150.677385][   T30] audit: type=1800 audit(1780525377.318:3): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.194" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  150.730865][ T6727] Bluetooth: hci3: command 0x0c1a tx timeout
[  151.127919][ T6727] Bluetooth: hci1: command 0x0c1a tx timeout
[  151.207028][ T6727] Bluetooth: hci0: command 0x0c1a tx timeout
[  151.213070][ T6727] Bluetooth: hci2: command 0x0c1a tx timeout
[  151.286784][ T6953] mmap: syz.3.195 (6953) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  152.957875][    C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20450 ms
[  152.966832][    C0] sl0: transmit timed out, driver error?
[  153.232165][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'.
[  153.470984][   T30] audit: type=1800 audit(1780525380.112:4): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.204" name="lu_gp_id" dev="configfs" ino=14813 res=0 errno=0
[  154.714847][ T7015] binder: 7012:7015 ioctl 40046210 0 returned -14
[  155.793490][ T7028] netlink: 202 bytes leftover after parsing attributes in process `syz.1.211'.
[  157.852576][ T7059] bond0: invalid ARP target specified
[  158.035725][ T7052] binder: 7048:7052 ioctl 400c620e 0 returned -14
[  158.703842][ T7080] FAULT_INJECTION: forcing a failure.
[  158.703842][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  158.751551][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.1.220 Not tainted syzkaller #0 PREEMPT(full) 
[  158.751572][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  158.751582][ T7080] Call Trace:
[  158.751587][ T7080]  <TASK>
[  158.751592][ T7080]  dump_stack_lvl+0x100/0x190
[  158.751612][ T7080]  should_fail_ex.cold+0x5/0xa
[  158.751631][ T7080]  _copy_to_user+0x32/0xd0
[  158.751654][ T7080]  simple_read_from_buffer+0xcb/0x170
[  158.751673][ T7080]  proc_fail_nth_read+0x1af/0x230
[  158.751697][ T7080]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.751720][ T7080]  ? rw_verify_area+0xce/0x6d0
[  158.751735][ T7080]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  158.751757][ T7080]  vfs_read+0x1e4/0xb30
[  158.751776][ T7080]  ? __pfx_vfs_read+0x10/0x10
[  158.751791][ T7080]  ? __fget_files+0x215/0x3d0
[  158.751813][ T7080]  ? __fget_files+0x21f/0x3d0
[  158.751835][ T7080]  ksys_read+0x12a/0x250
[  158.751851][ T7080]  ? __pfx_ksys_read+0x10/0x10
[  158.751868][ T7080]  ? rcu_is_watching+0x12/0xc0
[  158.751887][ T7080]  do_syscall_64+0x115/0x840
[  158.751907][ T7080]  ? clear_bhb_loop+0x40/0x90
[  158.751927][ T7080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.751942][ T7080] RIP: 0033:0x7f310f55d68e
[  158.751954][ T7080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  158.751968][ T7080] RSP: 002b:00007f31103d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  158.751982][ T7080] RAX: ffffffffffffffda RBX: 00007f31103d96c0 RCX: 00007f310f55d68e
[  158.751991][ T7080] RDX: 000000000000000f RSI: 00007f31103d90a0 RDI: 0000000000000004
[  158.752000][ T7080] RBP: 00007f31103d9090 R08: 0000000000000000 R09: 0000000000000000
[  158.752008][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.752016][ T7080] R13: 00007f310f816038 R14: 00007f310f815fa0 R15: 00007fffa7ae9648
[  158.752035][ T7080]  </TASK>
[  159.328014][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'.
[  159.439548][ T7097] openvswitch: netlink: IP tunnel dst address not specified
[  159.996605][ T6727] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  160.056498][ T7110] random: crng reseeded on system resumption
[  161.435336][ T7131] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �11!phy1!netdev:wlan1!rc_rateid
[  161.651063][ T7140] dlm: non-version read from control device 9
[  162.138039][ T7148] syz.2.236 uses obsolete (PF_INET,SOCK_PACKET)

syzkaller
syzkaller login: [  162.713719][ T7165] FAULT_INJECTION: forcing a failure.
[  162.713719][ T7165] name failslab, interval 1, probability 0, space 0, times 0
[  162.792028][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.3.239 Not tainted syzkaller #0 PREEMPT(full) 
[  162.792050][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  162.792059][ T7165] Call Trace:
[  162.792064][ T7165]  <TASK>
[  162.792070][ T7165]  dump_stack_lvl+0x100/0x190
[  162.792090][ T7165]  should_fail_ex.cold+0x5/0xa
[  162.792109][ T7165]  ? tomoyo_realpath_from_path+0xb6/0x690
[  162.792130][ T7165]  should_failslab+0xc2/0x120
[  162.792148][ T7165]  __kmalloc_noprof+0xe0/0x850
[  162.792160][ T7165]  ? kfree+0x1dd/0x6c0
[  162.792183][ T7165]  tomoyo_realpath_from_path+0xb6/0x690
[  162.792209][ T7165]  tomoyo_path_number_perm+0x23c/0x580
[  162.792226][ T7165]  ? tomoyo_path_number_perm+0x22e/0x580
[  162.792245][ T7165]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  162.792281][ T7165]  ? find_held_lock+0x2b/0x80
[  162.792299][ T7165]  ? __fget_files+0x215/0x3d0
[  162.792315][ T7165]  ? hook_file_ioctl_common+0x149/0x410
[  162.792333][ T7165]  ? __fget_files+0x215/0x3d0
[  162.792352][ T7165]  ? __fget_files+0x21f/0x3d0
[  162.792372][ T7165]  security_file_ioctl+0xd3/0x230
[  162.792390][ T7165]  __x64_sys_ioctl+0xb7/0x210
[  162.792407][ T7165]  do_syscall_64+0x115/0x840
[  162.792427][ T7165]  ? clear_bhb_loop+0x40/0x90
[  162.792445][ T7165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.792460][ T7165] RIP: 0033:0x7f3f02f9ce59
[  162.792472][ T7165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.792485][ T7165] RSP: 002b:00007f3f03e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  162.792499][ T7165] RAX: ffffffffffffffda RBX: 00007f3f03215fa0 RCX: 00007f3f02f9ce59
[  162.792509][ T7165] RDX: 00002000000000c0 RSI: 00000000c0045401 RDI: 0000000000000003
[  162.792517][ T7165] RBP: 00007f3f03e60090 R08: 0000000000000000 R09: 0000000000000000
[  162.792526][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.792534][ T7165] R13: 00007f3f03216038 R14: 00007f3f03215fa0 R15: 00007ffcd05a95c8
[  162.792552][ T7165]  </TASK>
[  162.792559][ T7165] ERROR: Out of memory at tomoyo_realpath_from_path.
[  162.941570][ T7175] random: crng reseeded on system resumption
[  167.769237][ T7273] random: crng reseeded on system resumption
[  168.054452][ T7283] netlink: 'syz.3.262': attribute type 8 has an invalid length.
[  171.565286][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'.
[  171.661578][ T7361] openvswitch: netlink: IP tunnel dst address not specified
[  172.643600][ T7381] i2c i2c-0: new_device: Invalid device name
[  172.873387][ T7382] netlink: 338 bytes leftover after parsing attributes in process `syz.0.284'.
[  173.761853][ T7404] netlink: 36 bytes leftover after parsing attributes in process `syz.0.288'.
[  174.443798][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'.
[  174.541761][ T7419] openvswitch: netlink: IP tunnel dst address not specified
[  176.878931][ T7448] netlink: 'syz.1.298': attribute type 22 has an invalid length.
[  176.920730][ T7448] netlink: 330 bytes leftover after parsing attributes in process `syz.1.298'.
[  177.159764][ T7464] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  177.320630][ T7460] FAULT_INJECTION: forcing a failure.
[  177.320630][ T7460] name failslab, interval 1, probability 0, space 0, times 0
[  177.448283][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.0.301 Not tainted syzkaller #0 PREEMPT(full) 
[  177.448304][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  177.448313][ T7460] Call Trace:
[  177.448318][ T7460]  <TASK>
[  177.448324][ T7460]  dump_stack_lvl+0x100/0x190
[  177.448344][ T7460]  should_fail_ex.cold+0x5/0xa
[  177.448363][ T7460]  ? tomoyo_realpath_from_path+0xb6/0x690
[  177.448384][ T7460]  should_failslab+0xc2/0x120
[  177.448402][ T7460]  __kmalloc_noprof+0xe0/0x850
[  177.448415][ T7460]  ? kfree+0x1dd/0x6c0
[  177.448437][ T7460]  tomoyo_realpath_from_path+0xb6/0x690
[  177.448463][ T7460]  tomoyo_path_number_perm+0x23c/0x580
[  177.448480][ T7460]  ? tomoyo_path_number_perm+0x22e/0x580
[  177.448499][ T7460]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  177.448535][ T7460]  ? find_held_lock+0x2b/0x80
[  177.448552][ T7460]  ? __fget_files+0x215/0x3d0
[  177.448569][ T7460]  ? hook_file_ioctl_common+0x149/0x410
[  177.448586][ T7460]  ? __fget_files+0x215/0x3d0
[  177.448606][ T7460]  ? __fget_files+0x21f/0x3d0
[  177.448625][ T7460]  security_file_ioctl+0xd3/0x230
[  177.448644][ T7460]  __x64_sys_ioctl+0xb7/0x210
[  177.448660][ T7460]  do_syscall_64+0x115/0x840
[  177.448680][ T7460]  ? clear_bhb_loop+0x40/0x90
[  177.448704][ T7460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.448718][ T7460] RIP: 0033:0x7fb07b99ce59
[  177.448731][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.448745][ T7460] RSP: 002b:00007fb079bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.448759][ T7460] RAX: ffffffffffffffda RBX: 00007fb07bc16090 RCX: 00007fb07b99ce59
[  177.448768][ T7460] RDX: 0000200000000000 RSI: 0000000080104592 RDI: 0000000000000007
[  177.448777][ T7460] RBP: 00007fb079bf6090 R08: 0000000000000000 R09: 0000000000000000
[  177.448785][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.448793][ T7460] R13: 00007fb07bc16128 R14: 00007fb07bc16090 R15: 00007ffda77705b8
[  177.448812][ T7460]  </TASK>
[  177.448818][ T7460] ERROR: Out of memory at tomoyo_realpath_from_path.
[  177.676626][ T7476] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  177.676709][ T7476] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  185.867947][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'.
[  192.163150][ T7672] random: crng reseeded on system resumption
[  192.645771][ T7705] random: crng reseeded on system resumption
[  192.875800][ T7708] nvme_fabrics: missing parameter 'transport=%s'
[  192.951250][ T7708] nvme_fabrics: missing parameter 'nqn=%s'
[  193.450926][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'.
[  193.712062][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  193.720855][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  196.405543][ T7795] random: crng reseeded on system resumption
[  197.846974][ T7813] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input6
[  198.209426][ T7084] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.459570][ T7838] random: crng reseeded on system resumption
[  199.911895][ T7882] FAULT_INJECTION: forcing a failure.
[  199.911895][ T7882] name failslab, interval 1, probability 0, space 0, times 0
[  200.005370][ T7882] CPU: 0 UID: 0 PID: 7882 Comm: syz.0.378 Not tainted syzkaller #0 PREEMPT(full) 
[  200.005394][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  200.005406][ T7882] Call Trace:
[  200.005411][ T7882]  <TASK>
[  200.005417][ T7882]  dump_stack_lvl+0x100/0x190
[  200.005454][ T7882]  should_fail_ex.cold+0x5/0xa
[  200.005474][ T7882]  should_failslab+0xc2/0x120
[  200.005491][ T7882]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  200.005514][ T7882]  ? __d_alloc+0x34/0xa40
[  200.005537][ T7882]  __d_alloc+0x34/0xa40
[  200.005559][ T7882]  d_alloc_pseudo+0x1c/0xc0
[  200.005573][ T7882]  alloc_file_pseudo+0xcf/0x230
[  200.005595][ T7882]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  200.005622][ T7882]  __shmem_file_setup+0x205/0x460
[  200.005644][ T7882]  ? __pfx___shmem_file_setup+0x10/0x10
[  200.005665][ T7882]  ? vm_area_alloc+0x1f/0x160
[  200.005690][ T7882]  shmem_zero_setup+0x96/0x1b0
[  200.005706][ T7882]  __mmap_region+0x2509/0x2dd0
[  200.005732][ T7882]  ? __pfx___mmap_region+0x10/0x10
[  200.005754][ T7882]  ? __lock_acquire+0x4a5/0x2630
[  200.005777][ T7882]  ? find_held_lock+0x2b/0x80
[  200.005794][ T7882]  ? process_measurement+0x4c8/0x2350
[  200.005809][ T7882]  ? process_measurement+0x4c8/0x2350
[  200.005831][ T7882]  ? __lock_acquire+0x4a5/0x2630
[  200.005859][ T7882]  ? do_raw_spin_unlock+0x145/0x1e0
[  200.005876][ T7882]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  200.005903][ T7882]  ? find_held_lock+0x2b/0x80
[  200.005922][ T7882]  ? rcu_is_watching+0x12/0xc0
[  200.005947][ T7882]  ? rcu_is_watching+0x12/0xc0
[  200.005963][ T7882]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  200.005983][ T7882]  ? lockdep_hardirqs_on+0x78/0x100
[  200.006031][ T7882]  mmap_region+0x35d/0x620
[  200.006045][ T7882]  ? rcu_is_watching+0x12/0xc0
[  200.006061][ T7882]  ? __pfx_mmap_region+0x10/0x10
[  200.006077][ T7882]  ? cap_mmap_addr+0x4b/0x120
[  200.006090][ T7882]  ? bpf_lsm_mmap_addr+0x9/0x30
[  200.006103][ T7882]  ? security_mmap_addr+0x71/0x1e0
[  200.006122][ T7882]  ? __get_unmapped_area+0x255/0x3e0
[  200.006142][ T7882]  do_mmap+0xc63/0x12f0
[  200.006163][ T7882]  ? __pfx_do_mmap+0x10/0x10
[  200.006181][ T7882]  ? __pfx_down_write_killable+0x10/0x10
[  200.006207][ T7882]  vm_mmap_pgoff+0x29e/0x470
[  200.006229][ T7882]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  200.006248][ T7882]  ? do_futex+0x192/0x350
[  200.006263][ T7882]  ? __pfx_do_futex+0x10/0x10
[  200.006282][ T7882]  ksys_mmap_pgoff+0xe4/0x610
[  200.006300][ T7882]  ? __x64_sys_futex+0x358/0x4d0
[  200.006315][ T7882]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  200.006331][ T7882]  ? xfd_validate_state+0x129/0x190
[  200.006345][ T7882]  ? ksys_write+0x1ac/0x250
[  200.006365][ T7882]  __x64_sys_mmap+0x125/0x190
[  200.006382][ T7882]  do_syscall_64+0x115/0x840
[  200.006401][ T7882]  ? clear_bhb_loop+0x40/0x90
[  200.006420][ T7882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.006435][ T7882] RIP: 0033:0x7fb07b99ce59
[  200.006453][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.006467][ T7882] RSP: 002b:00007fb07c788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  200.006485][ T7882] RAX: ffffffffffffffda RBX: 00007fb07bc15fa0 RCX: 00007fb07b99ce59
[  200.006495][ T7882] RDX: 00004000000000db RSI: 0000000000020009 RDI: 0000000000000000
[  200.006505][ T7882] RBP: 00007fb07ba32d6f R08: 0000000000000401 R09: 0000000000008000
[  200.006514][ T7882] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  200.006523][ T7882] R13: 00007fb07bc16038 R14: 00007fb07bc15fa0 R15: 00007ffda77705b8
[  200.006541][ T7882]  </TASK>
[  202.162725][ T7914] netlink: 25 bytes leftover after parsing attributes in process `syz.3.385'.
[  202.768035][ T7953] netlink: NAT attribute has 5 unknown bytes
[  204.910929][ T7957] kexec: Could not allocate control_code_buffer
[  207.088865][ T8046] netlink: 'syz.0.407': attribute type 4 has an invalid length.
[  207.123627][ T8046] netlink: 314 bytes leftover after parsing attributes in process `syz.0.407'.
[  208.375438][ T8041] kexec: Could not allocate control_code_buffer
[  209.066296][ T6727] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  211.135686][ T6727] Bluetooth: hci2: command 0x0c1a tx timeout
[  212.037704][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'.
[  212.137439][ T8131] openvswitch: netlink: IP tunnel dst address not specified
[  212.956037][ T8147] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  213.206192][ T6852] Bluetooth: hci2: command 0x0c1a tx timeout
[  214.114908][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'.
[  214.203674][ T8169] openvswitch: netlink: IP tunnel dst address not specified
[  214.716721][    C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21100 ms
[  214.724774][    C0] sl0: transmit timed out, driver error?
[  215.625692][ T8191] random: crng reseeded on system resumption
[  216.672091][ T8210] FAULT_INJECTION: forcing a failure.
[  216.672091][ T8210] name failslab, interval 1, probability 0, space 0, times 0
[  216.755886][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(full) 
[  216.755907][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  216.755916][ T8210] Call Trace:
[  216.755921][ T8210]  <TASK>
[  216.755926][ T8210]  dump_stack_lvl+0x100/0x190
[  216.755946][ T8210]  should_fail_ex.cold+0x5/0xa
[  216.755965][ T8210]  should_failslab+0xc2/0x120
[  216.755983][ T8210]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  216.756006][ T8210]  ? security_inode_alloc+0x3b/0x2c0
[  216.756022][ T8210]  ? lockdep_init_map_type+0x5c/0x250
[  216.756049][ T8210]  security_inode_alloc+0x3b/0x2c0
[  216.756065][ T8210]  inode_init_always_gfp+0xc77/0xfb0
[  216.756089][ T8210]  alloc_inode+0x8e/0x250
[  216.756116][ T8210]  alloc_anon_inode+0x2a/0x3e0
[  216.756137][ T8210]  anon_inode_make_secure_inode+0x2f/0x140
[  216.756162][ T8210]  __do_sys_memfd_secret+0xd7/0x3d0
[  216.756180][ T8210]  do_syscall_64+0x115/0x840
[  216.756200][ T8210]  ? clear_bhb_loop+0x40/0x90
[  216.756218][ T8210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.756232][ T8210] RIP: 0033:0x7f3f02f9ce59
[  216.756245][ T8210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.756258][ T8210] RSP: 002b:00007f3f03e3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  216.756272][ T8210] RAX: ffffffffffffffda RBX: 00007f3f03216090 RCX: 00007f3f02f9ce59
[  216.756281][ T8210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  216.756289][ T8210] RBP: 00007f3f03032d6f R08: 0000000000000000 R09: 0000000000000000
[  216.756298][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.756306][ T8210] R13: 00007f3f03216128 R14: 00007f3f03216090 R15: 00007ffcd05a95c8
[  216.756324][ T8210]  </TASK>
[  218.579252][ T8239] FAULT_INJECTION: forcing a failure.
[  218.579252][ T8239] name failslab, interval 1, probability 0, space 0, times 0
[  218.700485][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.2.445 Not tainted syzkaller #0 PREEMPT(full) 
[  218.700508][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  218.700517][ T8239] Call Trace:
[  218.700522][ T8239]  <TASK>
[  218.700528][ T8239]  dump_stack_lvl+0x100/0x190
[  218.700549][ T8239]  should_fail_ex.cold+0x5/0xa
[  218.700568][ T8239]  should_failslab+0xc2/0x120
[  218.700587][ T8239]  __kmalloc_cache_noprof+0x7a/0x6f0
[  218.700608][ T8239]  ? snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  218.700629][ T8239]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  218.700652][ T8239]  snd_pcm_oss_change_params_locked+0x81c/0x39f0
[  218.700681][ T8239]  ? trace_contention_end+0x122/0x170
[  218.700696][ T8239]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  218.700716][ T8239]  ? __pfx___mutex_lock+0x10/0x10
[  218.700738][ T8239]  ? __mutex_lock+0x26d/0x1b10
[  218.700758][ T8239]  ? find_held_lock+0x2b/0x80
[  218.700775][ T8239]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  218.700794][ T8239]  ? snd_pcm_oss_poll+0x3ba/0xb00
[  218.700824][ T8239]  snd_pcm_oss_make_ready+0xeb/0x1b0
[  218.700847][ T8239]  snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0
[  218.700874][ T8239]  snd_pcm_oss_poll+0x417/0xb00
[  218.700893][ T8239]  ? __pfx___pollwait+0x10/0x10
[  218.700917][ T8239]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  218.700936][ T8239]  ? __fget_files+0x21f/0x3d0
[  218.700957][ T8239]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  218.700978][ T8239]  do_select+0xd54/0x1850
[  218.700994][ T8239]  ? do_raw_spin_lock+0x128/0x260
[  218.701025][ T8239]  ? __pfx_do_select+0x10/0x10
[  218.701041][ T8239]  ? find_held_lock+0x2b/0x80
[  218.701059][ T8239]  ? __pfx___pollwait+0x10/0x10
[  218.701077][ T8239]  ? __pfx_pollwake+0x10/0x10
[  218.701094][ T8239]  ? __pfx_pollwake+0x10/0x10
[  218.701135][ T8239]  ? find_held_lock+0x2b/0x80
[  218.701151][ T8239]  ? __might_fault+0xc5/0x140
[  218.701172][ T8239]  ? __might_fault+0xc5/0x140
[  218.701200][ T8239]  ? core_sys_select+0x55b/0xbb0
[  218.701215][ T8239]  core_sys_select+0x55b/0xbb0
[  218.701236][ T8239]  ? __pfx_core_sys_select+0x10/0x10
[  218.701257][ T8239]  ? futex_hash_put+0x43/0x50
[  218.701293][ T8239]  ? do_futex+0x192/0x350
[  218.701308][ T8239]  ? __pfx_do_futex+0x10/0x10
[  218.701325][ T8239]  kern_select+0x1d0/0x280
[  218.701343][ T8239]  ? __pfx_kern_select+0x10/0x10
[  218.701360][ T8239]  ? xfd_validate_state+0x129/0x190
[  218.701381][ T8239]  __x64_sys_select+0xbd/0x160
[  218.701396][ T8239]  ? do_syscall_64+0x90/0x840
[  218.701415][ T8239]  ? lockdep_hardirqs_on+0x78/0x100
[  218.701435][ T8239]  do_syscall_64+0x115/0x840
[  218.701454][ T8239]  ? clear_bhb_loop+0x40/0x90
[  218.701473][ T8239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.701487][ T8239] RIP: 0033:0x7efe8439ce59
[  218.701501][ T8239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.701515][ T8239] RSP: 002b:00007efe851b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  218.701529][ T8239] RAX: ffffffffffffffda RBX: 00007efe84615fa0 RCX: 00007efe8439ce59
[  218.701539][ T8239] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007
[  218.701547][ T8239] RBP: 00007efe84432d6f R08: 0000000000000000 R09: 0000000000000000
[  218.701556][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.701564][ T8239] R13: 00007efe84616038 R14: 00007efe84615fa0 R15: 00007fff9c5d3838
[  218.701583][ T8239]  </TASK>
[  220.230478][ T8255] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  220.236694][ T8255] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  220.243128][ T8255] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  220.254149][ T8255] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  220.631722][ T8268] FAULT_INJECTION: forcing a failure.
[  220.631722][ T8268] name failslab, interval 1, probability 0, space 0, times 0
[  220.745428][ T8268] CPU: 0 UID: 0 PID: 8268 Comm: syz.1.449 Not tainted syzkaller #0 PREEMPT(full) 
[  220.745450][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  220.745459][ T8268] Call Trace:
[  220.745465][ T8268]  <TASK>
[  220.745471][ T8268]  dump_stack_lvl+0x100/0x190
[  220.745491][ T8268]  should_fail_ex.cold+0x5/0xa
[  220.745511][ T8268]  should_failslab+0xc2/0x120
[  220.745529][ T8268]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  220.745545][ T8268]  ? register_pidns_sysctls+0x48/0x1c0
[  220.745568][ T8268]  ? rcu_is_watching+0x12/0xc0
[  220.745588][ T8268]  kmemdup_noprof+0x29/0x60
[  220.745603][ T8268]  register_pidns_sysctls+0x48/0x1c0
[  220.745625][ T8268]  ? __ns_common_init+0x299/0x4b0
[  220.745645][ T8268]  copy_pid_ns+0x680/0x10a0
[  220.745668][ T8268]  ? __pfx_copy_pid_ns+0x10/0x10
[  220.745691][ T8268]  ? __pfx_copy_mnt_ns+0x10/0x10
[  220.745713][ T8268]  ? create_new_namespaces+0x30/0xac0
[  220.745734][ T8268]  create_new_namespaces+0x2aa/0xac0
[  220.745755][ T8268]  unshare_nsproxy_namespaces+0xf2/0x220
[  220.745775][ T8268]  ksys_unshare+0x438/0xab0
[  220.745796][ T8268]  ? __pfx_ksys_unshare+0x10/0x10
[  220.745815][ T8268]  ? xfd_validate_state+0x129/0x190
[  220.745829][ T8268]  ? ksys_write+0x1ac/0x250
[  220.745860][ T8268]  __x64_sys_unshare+0x31/0x40
[  220.745880][ T8268]  do_syscall_64+0x115/0x840
[  220.745901][ T8268]  ? clear_bhb_loop+0x40/0x90
[  220.745919][ T8268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.745933][ T8268] RIP: 0033:0x7f310f59ce59
[  220.745947][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.745960][ T8268] RSP: 002b:00007f31103d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  220.745974][ T8268] RAX: ffffffffffffffda RBX: 00007f310f815fa0 RCX: 00007f310f59ce59
[  220.745984][ T8268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
[  220.745992][ T8268] RBP: 00007f310f632d6f R08: 0000000000000000 R09: 0000000000000000
[  220.746000][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.746009][ T8268] R13: 00007f310f816038 R14: 00007f310f815fa0 R15: 00007fffa7ae9648
[  220.746028][ T8268]  </TASK>
[  221.783955][ T8275] futex_wake_op: syz.3.450 tries to shift op by -2048; fix this program
[  221.821861][ T8275] futex_wake_op: syz.3.450 tries to shift op by -2048; fix this program
[  221.880279][ T8275] 0x000000000001-0x000000020000 : ""
[  222.108728][ T8283] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0
[  222.215647][ T8275] ftl_cs: FTL header corrupt!
[  222.278363][ T6852] Bluetooth: hci0: command 0x0c1a tx timeout
[  222.284432][ T6727] Bluetooth: hci2: command 0x0c1a tx timeout
[  222.290660][ T6727] Bluetooth: hci1: command 0x0c1a tx timeout
[  222.297185][ T6727] Bluetooth: hci3: command 0x0c1a tx timeout
[  225.192667][ T8355] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  225.747856][ T8294] Bluetooth: hci2: unexpected event for opcode 0x7c89
[  225.977415][ T8375] vivid-007: =================  START STATUS  =================
[  226.002885][ T8375] vivid-007: Generate PTS: true
[  226.021857][ T8375] vivid-007: Generate SCR: true
[  226.038463][ T8375] tpg source WxH: 320x240 (Y'CbCr)
[  226.056717][ T8375] tpg field: 1
[  226.073330][ T8375] tpg crop: (0,0)/320x240
[  226.089835][ T8375] tpg compose: (0,0)/320x240
[  226.104474][ T8375] tpg colorspace: 8
[  226.120220][ T8375] tpg transfer function: 0/0
[  226.136246][ T8375] tpg Y'CbCr encoding: 0/0
[  226.150523][ T8375] tpg quantization: 0/0
[  226.164852][ T8375] tpg RGB range: 0/2
[  226.196095][ T8375] vivid-007: ==================  END STATUS  ==================
[  227.340787][ T8398] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input7
[  231.899671][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'.
[  234.129080][ T8478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.520193][ T8468] Process accounting resumed
[  234.551710][ T8484] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  236.073773][ T8503] kernel profiling enabled (shift: 7)
[  237.829134][ T8531] program syz.0.501 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  238.181515][ T8539] random: crng reseeded on system resumption
[  239.001571][ T8548] FAULT_INJECTION: forcing a failure.
[  239.001571][ T8548] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  239.067228][ T8294] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260
[  239.067253][ T8294] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260
[  239.083378][ T8294] Bluetooth: hci3: Dropping invalid advertising data
[  239.091756][ T8294] Bluetooth: hci3: unknown advertising packet type: 0xe9
[  239.091793][ T8294] Bluetooth: hci3: Dropping invalid advertising data
[  239.106547][ T8294] Bluetooth: hci3: Dropping invalid advertising data
[  239.113758][ T8294] Bluetooth: hci3: Malformed LE Event: 0x02
[  239.138221][ T8548] CPU: 0 UID: 0 PID: 8548 Comm: syz.3.503 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.138246][ T8548] Tainted: [L]=SOFTLOCKUP
[  239.138252][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  239.138261][ T8548] Call Trace:
[  239.138266][ T8548]  <TASK>
[  239.138272][ T8548]  dump_stack_lvl+0x100/0x190
[  239.138294][ T8548]  should_fail_ex.cold+0x5/0xa
[  239.138310][ T8548]  ? prepare_alloc_pages+0x16d/0x5f0
[  239.138331][ T8548]  should_fail_alloc_page+0xeb/0x140
[  239.138355][ T8548]  prepare_alloc_pages+0x1f0/0x5f0
[  239.138377][ T8548]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  239.138402][ T8548]  ? do_raw_spin_lock+0x128/0x260
[  239.138421][ T8548]  ? kasan_save_stack+0x3f/0x50
[  239.138435][ T8548]  ? kasan_save_stack+0x30/0x50
[  239.138449][ T8548]  ? kasan_save_track+0x14/0x30
[  239.138462][ T8548]  ? __kasan_slab_alloc+0x89/0x90
[  239.138477][ T8548]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  239.138499][ T8548]  ? ptlock_alloc+0x1f/0x70
[  239.138518][ T8548]  ? pte_alloc_one+0x82/0x3d0
[  239.138536][ T8548]  ? __pte_alloc+0x6d/0x380
[  239.138550][ T8548]  ? copy_page_range+0x3dd8/0x5b20
[  239.138570][ T8548]  ? copy_process+0x6c78/0x7ed0
[  239.138590][ T8548]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  239.138618][ T8548]  ? __lock_acquire+0x4a5/0x2630
[  239.138643][ T8548]  ? __lock_acquire+0x4a5/0x2630
[  239.138666][ T8548]  ? __lock_acquire+0x4a5/0x2630
[  239.138687][ T8548]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  239.138708][ T8548]  ? policy_nodemask+0xed/0x4f0
[  239.138727][ T8548]  alloc_pages_mpol+0x1fb/0x540
[  239.138745][ T8548]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  239.138768][ T8548]  alloc_pages_noprof+0x1a/0x160
[  239.138787][ T8548]  pte_alloc_one+0x1c/0x3d0
[  239.138807][ T8548]  __pte_alloc+0x6d/0x380
[  239.138822][ T8548]  ? __pfx___pte_alloc+0x10/0x10
[  239.138838][ T8548]  ? __pfx___might_resched+0x10/0x10
[  239.138859][ T8548]  ? copy_page_range+0x1c4a/0x5b20
[  239.138884][ T8548]  copy_page_range+0x3dd8/0x5b20
[  239.138927][ T8548]  ? mas_wr_store_entry+0xa1/0x1e80
[  239.138951][ T8548]  ? __pfx_copy_page_range+0x10/0x10
[  239.138978][ T8548]  ? __pfx___might_resched+0x10/0x10
[  239.139001][ T8548]  ? up_write+0x28c/0x4f0
[  239.139018][ T8548]  dup_mmap+0xd44/0x21b0
[  239.139045][ T8548]  ? __pfx_dup_mmap+0x10/0x10
[  239.139063][ T8548]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  239.139085][ T8548]  ? __lock_acquire+0x4a5/0x2630
[  239.139107][ T8548]  ? find_held_lock+0x2b/0x80
[  239.139124][ T8548]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  239.139160][ T8548]  copy_process+0x6c78/0x7ed0
[  239.139190][ T8548]  ? __pfx_copy_process+0x10/0x10
[  239.139209][ T8548]  ? find_held_lock+0x2b/0x80
[  239.139230][ T8548]  ? futex_private_hash_put+0x107/0x1c0
[  239.139257][ T8548]  kernel_clone+0x176/0x9e0
[  239.139277][ T8548]  ? __pfx_kernel_clone+0x10/0x10
[  239.139306][ T8548]  __do_sys_clone+0xd9/0x120
[  239.139326][ T8548]  ? __pfx___do_sys_clone+0x10/0x10
[  239.139357][ T8548]  ? rcu_is_watching+0x12/0xc0
[  239.139377][ T8548]  do_syscall_64+0x115/0x840
[  239.139396][ T8548]  ? clear_bhb_loop+0x40/0x90
[  239.139414][ T8548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.139429][ T8548] RIP: 0033:0x7f3f02f9ce59
[  239.139443][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.139457][ T8548] RSP: 002b:00007f3f03e1dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  239.139472][ T8548] RAX: ffffffffffffffda RBX: 00007f3f03216180 RCX: 00007f3f02f9ce59
[  239.139481][ T8548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  239.139490][ T8548] RBP: 00007f3f03032d6f R08: 0000000000000000 R09: 0000000000000000
[  239.139498][ T8548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  239.139507][ T8548] R13: 00007f3f03216218 R14: 00007f3f03216180 R15: 00007ffcd05a95c8
[  239.139527][ T8548]  </TASK>
[  242.501649][ T8586] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  242.643925][ T8586] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  242.745032][ T8586] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  243.442434][ T6703] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  243.456940][ T6703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  243.465224][ T6703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  243.474719][ T6703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  243.483426][ T6703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.976573][ T6722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.459838][ T6722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.517642][ T6703] Bluetooth: hci4: command tx timeout
[  245.606662][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  245.739507][ T8641] openvswitch: netlink: IP tunnel dst address not specified
[  245.797469][ T6722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.018966][ T6722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.417627][ T8655] netlink: 334 bytes leftover after parsing attributes in process `syz.1.522'.
[  246.453783][ T6722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.566848][ T8655] __vm_enough_memory: pid: 8655, comm: syz.1.522, bytes: 4398046457856 not enough memory for the allocation
[  246.958982][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.981393][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.007573][ T8609] bridge_slave_0: entered allmulticast mode
[  247.034122][ T8609] bridge_slave_0: entered promiscuous mode
[  247.123024][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.144604][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.168691][ T8609] bridge_slave_1: entered allmulticast mode
[  247.192170][ T8609] bridge_slave_1: entered promiscuous mode
[  247.501320][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.585951][ T6703] Bluetooth: hci4: command tx timeout
[  247.814104][ T6722] bridge_slave_1: left allmulticast mode
[  247.839381][ T6722] bridge_slave_1: left promiscuous mode
[  247.866170][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.036592][ T6722] bridge_slave_0: left allmulticast mode
[  248.065303][ T6722] bridge_slave_0: left promiscuous mode
[  248.087925][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.919088][ T6722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.947698][ T6722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.978174][ T6722] bond0 (unregistering): Released all slaves
[  249.004409][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.128255][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1
[  249.250787][ T8609] team0: Port device team_slave_0 added
[  249.509736][ T8609] team0: Port device team_slave_1 added
[  249.601909][ T8694] netlink: 74 bytes leftover after parsing attributes in process `syz.0.527'.
[  249.655480][ T6703] Bluetooth: hci4: command tx timeout
[  249.702834][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.756990][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  249.892310][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.967224][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.003046][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.148769][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.832538][ T8609] hsr_slave_0: entered promiscuous mode
[  250.858079][ T8609] hsr_slave_1: entered promiscuous mode
[  250.892929][ T8609] debugfs: 'hsr0' already exists in 'hsr'
[  250.926282][ T8609] Cannot create hsr debugfs directory
[  251.001606][ T6722] hsr_slave_0: left promiscuous mode
[  251.029089][ T6722] hsr_slave_1: left promiscuous mode
[  251.050232][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.084309][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.120961][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.144970][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.212079][ T8714] FAULT_INJECTION: forcing a failure.
[  251.212079][ T8714] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  251.241204][ T6722] veth1_macvtap: left promiscuous mode
[  251.263103][ T6722] veth0_macvtap: left promiscuous mode
[  251.281510][ T6722] veth1_vlan: left promiscuous mode
[  251.297875][ T6722] veth0_vlan: left promiscuous mode
[  251.307155][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.3.528 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  251.307183][ T8714] Tainted: [L]=SOFTLOCKUP
[  251.307188][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  251.307197][ T8714] Call Trace:
[  251.307203][ T8714]  <TASK>
[  251.307209][ T8714]  dump_stack_lvl+0x100/0x190
[  251.307230][ T8714]  should_fail_ex.cold+0x5/0xa
[  251.307246][ T8714]  ? prepare_alloc_pages+0x16d/0x5f0
[  251.307267][ T8714]  should_fail_alloc_page+0xeb/0x140
[  251.307287][ T8714]  prepare_alloc_pages+0x1f0/0x5f0
[  251.307308][ T8714]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  251.307337][ T8714]  ? vma_wants_writenotify+0xdc/0x2e0
[  251.307351][ T8714]  ? __pfx_vma_wants_writenotify+0x10/0x10
[  251.307369][ T8714]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  251.307396][ T8714]  ? __mmap_region+0xc85/0x2dd0
[  251.307421][ T8714]  ? __pfx___mmap_region+0x10/0x10
[  251.307444][ T8714]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  251.307465][ T8714]  ? policy_nodemask+0xed/0x4f0
[  251.307484][ T8714]  alloc_pages_mpol+0x1fb/0x540
[  251.307502][ T8714]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  251.307521][ T8714]  ? __lock_acquire+0x4a5/0x2630
[  251.307544][ T8714]  folio_alloc_mpol_noprof+0x36/0x260
[  251.307570][ T8714]  vma_alloc_folio_noprof+0xed/0x1d0
[  251.307591][ T8714]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  251.307617][ T8714]  do_anonymous_page+0xb46/0x2050
[  251.307640][ T8714]  ? rcu_read_unlock+0x2d/0xb0
[  251.307667][ T8714]  __handle_mm_fault+0x1d2c/0x2a00
[  251.307691][ T8714]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  251.307709][ T8714]  ? __pfx___handle_mm_fault+0x10/0x10
[  251.307732][ T8714]  ? pte_offset_map_lock+0x174/0x320
[  251.307748][ T8714]  ? find_held_lock+0x2b/0x80
[  251.307771][ T8714]  ? follow_page_pte+0x4d0/0x13f0
[  251.307792][ T8714]  handle_mm_fault+0x37b/0xa30
[  251.307816][ T8714]  __get_user_pages+0x1178/0x32a0
[  251.307841][ T8714]  ? __pfx___get_user_pages+0x10/0x10
[  251.307864][ T8714]  populate_vma_page_range+0x267/0x3f0
[  251.307885][ T8714]  ? __pfx_populate_vma_page_range+0x10/0x10
[  251.307903][ T8714]  ? __pfx_find_vma_intersection+0x10/0x10
[  251.307921][ T8714]  ? do_mmap+0x93f/0x12f0
[  251.307940][ T8714]  __mm_populate+0x107/0x3a0
[  251.307959][ T8714]  ? __pfx___mm_populate+0x10/0x10
[  251.307979][ T8714]  ? up_write+0x28c/0x4f0
[  251.307996][ T8714]  vm_mmap_pgoff+0x37f/0x470
[  251.308016][ T8714]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  251.308035][ T8714]  ? do_futex+0x192/0x350
[  251.308051][ T8714]  ? __pfx_do_futex+0x10/0x10
[  251.308069][ T8714]  ksys_mmap_pgoff+0xe4/0x610
[  251.308086][ T8714]  ? __x64_sys_futex+0x358/0x4d0
[  251.308102][ T8714]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  251.308119][ T8714]  ? xfd_validate_state+0x129/0x190
[  251.308133][ T8714]  ? ksys_write+0x1ac/0x250
[  251.308160][ T8714]  __x64_sys_mmap+0x125/0x190
[  251.308179][ T8714]  do_syscall_64+0x115/0x840
[  251.308200][ T8714]  ? clear_bhb_loop+0x40/0x90
[  251.308219][ T8714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.308235][ T8714] RIP: 0033:0x7f3f02f9ce59
[  251.308249][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.308263][ T8714] RSP: 002b:00007f3f03ddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  251.308279][ T8714] RAX: ffffffffffffffda RBX: 00007f3f03216360 RCX: 00007f3f02f9ce59
[  251.308289][ T8714] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[  251.308297][ T8714] RBP: 00007f3f03032d6f R08: 0000000000000007 R09: 0000000000028000
[  251.308306][ T8714] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  251.308315][ T8714] R13: 00007f3f032163f8 R14: 00007f3f03216360 R15: 00007ffcd05a95c8
[  251.308335][ T8714]  </TASK>
[  252.062158][ T6703] Bluetooth: hci4: command tx timeout
[  252.308581][ T6722] team0 (unregistering): Port device team_slave_1 removed
[  252.327155][ T6722] team0 (unregistering): Port device team_slave_0 removed
[  252.474675][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2
[  253.585085][ T8750] futex_wake_op: syz.3.534 tries to shift op by -2048; fix this program
[  253.860992][ T8609] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  253.965710][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  254.000414][ T8609] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  254.013199][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'.
[  254.053540][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  254.143187][ T8766] macvlan0: entered promiscuous mode
[  254.184025][ T8766] macvlan0: entered allmulticast mode
[  254.240810][ T8766] veth1_vlan: entered allmulticast mode
[  254.282886][ T8609] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  254.365243][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  254.459764][ T8609] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  254.516343][ T8609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  254.604079][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3
[  254.830920][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  254.844618][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  255.096442][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.177193][ T8800] random: crng reseeded on system resumption
[  255.299676][ T8609] 8021q: adding VLAN 0 to HW filter on device team0
[  255.373936][ T7265] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.381087][ T7265] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.530816][ T7265] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.537981][ T7265] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.546453][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4
[  257.756801][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.870029][ T8609] veth0_vlan: entered promiscuous mode
[  258.898776][ T8609] veth1_vlan: entered promiscuous mode
[  259.324172][ T8609] veth0_macvtap: entered promiscuous mode
[  259.538059][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'.
[  259.587333][ T8609] veth1_macvtap: entered promiscuous mode
[  259.626231][ T8896] vlan1: entered allmulticast mode
[  259.667002][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  259.716647][ T8896] veth0_vlan: entered allmulticast mode
[  259.756543][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  259.835738][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  259.889869][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  259.935912][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  259.976363][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  260.016866][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.027992][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  260.068617][ T8909] netlink: 'syz.1.551': attribute type 11 has an invalid length.
[  260.302825][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.492048][ T7155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.592789][ T7082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.641228][ T7082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.709167][ T7082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.739431][ T6703] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  261.256870][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.326598][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.502881][ T6705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.544344][ T6705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.512290][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  264.226242][ T9010] Line length is too long: Should be less than 4094
[  264.803799][ T9014] Process accounting paused
[  265.596876][ T9030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'.
[  268.322755][ T9068] zswap: compressor  not available
[  275.202679][    C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20450 ms
[  275.210724][    C0] sl0: transmit timed out, driver error?
[  276.346826][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'.
[  277.576064][ T9278] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[9278]
[  277.669043][ T9276] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  278.593410][   T30] audit: type=1800 audit(9032.007:5): pid=9288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.607" name="version" dev="configfs" ino=27823 res=0 errno=0
[  278.647150][ T9289] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  280.059967][ T9315] random: crng reseeded on system resumption
[  280.394705][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  280.453527][ T9320] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  280.652388][   T30] audit: type=1804 audit(9034.078:6): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.612" name="/newroot/170/file0" dev="tmpfs" ino=900 res=1 errno=0
[  280.732719][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  280.780439][   T30] audit: type=1804 audit(9034.158:7): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.612" name="/newroot/170/file0" dev="tmpfs" ino=900 res=1 errno=0
[  280.891108][   T30] audit: type=1800 audit(9034.178:8): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.612" name="file0" dev="tmpfs" ino=900 res=0 errno=0
[  282.351962][ T9352] futex_wake_op: syz.4.621 tries to shift op by -2048; fix this program
[  283.031372][ T9375] futex_wake_op: syz.4.624 tries to shift op by -2048; fix this program
[  283.113910][ T9377] futex_wake_op: syz.4.624 tries to shift op by -2048; fix this program
[  283.308655][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'.
[  285.790006][ T9428] random: crng reseeded on system resumption
[  286.786527][ T9440] ubi0: attaching mtd0
[  286.800121][ T9440] ubi0: scanning is finished
[  286.800189][ T9440] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  287.041296][ T9459] random: crng reseeded on system resumption
[  287.216142][ T9440] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  288.077204][ T9475] FAULT_INJECTION: forcing a failure.
[  288.077204][ T9475] name failslab, interval 1, probability 0, space 0, times 0
[  288.168364][ T9475] CPU: 0 UID: 0 PID: 9475 Comm: syz.0.640 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.168389][ T9475] Tainted: [L]=SOFTLOCKUP
[  288.168393][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  288.168402][ T9475] Call Trace:
[  288.168407][ T9475]  <TASK>
[  288.168413][ T9475]  dump_stack_lvl+0x100/0x190
[  288.168433][ T9475]  should_fail_ex.cold+0x5/0xa
[  288.168452][ T9475]  ? tomoyo_realpath_from_path+0xb6/0x690
[  288.168473][ T9475]  should_failslab+0xc2/0x120
[  288.168491][ T9475]  __kmalloc_noprof+0xe0/0x850
[  288.168504][ T9475]  ? kfree+0x1dd/0x6c0
[  288.168526][ T9475]  tomoyo_realpath_from_path+0xb6/0x690
[  288.168552][ T9475]  tomoyo_path_number_perm+0x23c/0x580
[  288.168569][ T9475]  ? tomoyo_path_number_perm+0x22e/0x580
[  288.168588][ T9475]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  288.168624][ T9475]  ? find_held_lock+0x2b/0x80
[  288.168642][ T9475]  ? __fget_files+0x215/0x3d0
[  288.168658][ T9475]  ? hook_file_ioctl_common+0x149/0x410
[  288.168675][ T9475]  ? __fget_files+0x215/0x3d0
[  288.168695][ T9475]  ? __fget_files+0x21f/0x3d0
[  288.168715][ T9475]  security_file_ioctl+0xd3/0x230
[  288.168734][ T9475]  __x64_sys_ioctl+0xb7/0x210
[  288.168750][ T9475]  do_syscall_64+0x115/0x840
[  288.168770][ T9475]  ? clear_bhb_loop+0x40/0x90
[  288.168788][ T9475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.168803][ T9475] RIP: 0033:0x7fb07b99ce59
[  288.168815][ T9475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.168828][ T9475] RSP: 002b:00007fb079bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  288.168843][ T9475] RAX: ffffffffffffffda RBX: 00007fb07bc16090 RCX: 00007fb07b99ce59
[  288.168853][ T9475] RDX: 00002000000002c0 RSI: 00000000400454a4 RDI: 0000000000000003
[  288.168861][ T9475] RBP: 00007fb079bf6090 R08: 0000000000000000 R09: 0000000000000000
[  288.168870][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.168878][ T9475] R13: 00007fb07bc16128 R14: 00007fb07bc16090 R15: 00007ffda77705b8
[  288.168896][ T9475]  </TASK>
[  288.168903][ T9475] ERROR: Out of memory at tomoyo_realpath_from_path.
[  289.479967][ T9497] FAULT_INJECTION: forcing a failure.
[  289.479967][ T9497] name failslab, interval 1, probability 0, space 0, times 0
[  289.545732][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.0.645 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  289.545757][ T9497] Tainted: [L]=SOFTLOCKUP
[  289.545761][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  289.545770][ T9497] Call Trace:
[  289.545775][ T9497]  <TASK>
[  289.545781][ T9497]  dump_stack_lvl+0x100/0x190
[  289.545801][ T9497]  should_fail_ex.cold+0x5/0xa
[  289.545821][ T9497]  ? tomoyo_encode2+0xfb/0x3c0
[  289.545840][ T9497]  should_failslab+0xc2/0x120
[  289.545858][ T9497]  __kmalloc_noprof+0xe0/0x850
[  289.545871][ T9497]  ? d_absolute_path+0x136/0x1b0
[  289.545888][ T9497]  tomoyo_encode2+0xfb/0x3c0
[  289.545911][ T9497]  tomoyo_encode+0x29/0x50
[  289.545930][ T9497]  tomoyo_realpath_from_path+0x18c/0x690
[  289.545955][ T9497]  tomoyo_check_open_permission+0x2af/0x3c0
[  289.545974][ T9497]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  289.545999][ T9497]  ? hook_file_open+0x24e/0x7a0
[  289.546030][ T9497]  ? path_get+0x61/0x80
[  289.546052][ T9497]  tomoyo_file_open+0x6b/0x90
[  289.546066][ T9497]  security_file_open+0xb5/0x1e0
[  289.546085][ T9497]  do_dentry_open+0x588/0x14d0
[  289.546108][ T9497]  vfs_open+0x82/0x3f0
[  289.546131][ T9497]  path_openat+0x208c/0x31a0
[  289.546156][ T9497]  ? __pfx_path_openat+0x10/0x10
[  289.546183][ T9497]  do_file_open+0x20e/0x430
[  289.546203][ T9497]  ? __pfx_do_file_open+0x10/0x10
[  289.546234][ T9497]  ? alloc_fd+0x476/0x790
[  289.546254][ T9497]  ? do_getname+0x191/0x390
[  289.546276][ T9497]  do_sys_openat2+0x10d/0x1e0
[  289.546298][ T9497]  ? __pfx_do_sys_openat2+0x10/0x10
[  289.546322][ T9497]  ? __pfx_sched_core_share_pid+0x10/0x10
[  289.546346][ T9497]  __x64_sys_openat+0x12d/0x210
[  289.546369][ T9497]  ? __pfx___x64_sys_openat+0x10/0x10
[  289.546394][ T9497]  ? rcu_is_watching+0x12/0xc0
[  289.546414][ T9497]  do_syscall_64+0x115/0x840
[  289.546434][ T9497]  ? clear_bhb_loop+0x40/0x90
[  289.546452][ T9497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.546466][ T9497] RIP: 0033:0x7fb07b99ce59
[  289.546479][ T9497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.546492][ T9497] RSP: 002b:00007fb079bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  289.546506][ T9497] RAX: ffffffffffffffda RBX: 00007fb07bc16090 RCX: 00007fb07b99ce59
[  289.546515][ T9497] RDX: 000000000018b940 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  289.546524][ T9497] RBP: 00007fb07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  289.546532][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.546540][ T9497] R13: 00007fb07bc16128 R14: 00007fb07bc16090 R15: 00007ffda77705b8
[  289.546559][ T9497]  </TASK>
[  289.812673][ T9497] ERROR: Out of memory at tomoyo_realpath_from_path.
[  291.037856][ T9519] netlink: 252 bytes leftover after parsing attributes in process `syz.3.648'.
[  291.196066][ T9523] netlink: 252 bytes leftover after parsing attributes in process `syz.3.648'.
[  294.688828][ T9568] Process accounting resumed
[  296.139168][ T9598] netlink: 17 bytes leftover after parsing attributes in process `syz.0.664'.
[  296.824290][ T9605] ubi0: attaching mtd0
[  297.010203][ T9605] ubi0: scanning is finished
[  297.070748][ T9605] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  297.564898][ T9605] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  297.691973][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  297.767136][ T9628] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  300.745364][ T9700] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  300.797196][ T9698] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  302.046534][ T9724] netlink: 178 bytes leftover after parsing attributes in process `syz.4.683'.
[  302.743952][ T9742] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input8
[  304.767766][ T5293] 8021q: adding VLAN 0 to HW filter on device eth5
[  308.390248][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  308.446660][ T9861] openvswitch: netlink: IP tunnel dst address not specified
[  310.037619][   T30] audit: type=1804 audit(4294967334.146:9): pid=9895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.710" name="/newroot/173/file0" dev="tmpfs" ino=924 res=1 errno=0
[  310.128205][   T30] audit: type=1804 audit(4294967334.146:10): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.710" name="/newroot/173/file0" dev="tmpfs" ino=924 res=1 errno=0
[  312.376149][ T9952] zswap: compressor Z�u��~���^��8��a��cu0���|��,a����Rr�qP������'��)��ޱ`�*�]���T]�X��؃(ۂ�TN�>�_��r$�������z��&�[+x[DPx�e?��m��3Q�z not available
[  312.461845][ T9954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.721'.
[  312.471573][ T9943] netlink: 25 bytes leftover after parsing attributes in process `syz.1.719'.
[  312.630043][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.718'.
[  313.512348][ T9986] random: crng reseeded on system resumption
[  313.804062][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'.
[  313.817805][ T9993] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2
[  315.352849][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'.
[  315.960857][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  315.972591][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  318.246525][T10085] random: crng reseeded on system resumption
[  319.651009][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'.
[  319.706228][T10118] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2
[  319.962438][ T6706] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.004904][T10121] binder: 10120:10121 ioctl 40045532 38 returned -22
[  320.551600][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  320.829387][T10136] __vm_enough_memory: pid: 10136, comm: syz.4.757, bytes: 4398046457856 not enough memory for the allocation
[  321.107404][T10137] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  321.254548][T10137] pci 0000:00:01.3: PCI INT A: no GSI
[  321.397584][T10160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'.
[  321.654151][T10160] veth1_vlan (unregistering): left allmulticast mode
[  322.037219][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  322.115921][T10173] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2
[  322.910274][T10175] sd 0:0:1:0: PR command failed: 1026
[  322.943370][T10175] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  322.989859][T10175] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  324.980652][T10201] Process accounting paused
[  325.054230][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'.
[  325.191428][T10226] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2
[  325.423424][T10231] netlink: 326 bytes leftover after parsing attributes in process `syz.3.777'.
[  325.631980][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'.
[  326.628876][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.782'.
[  326.929908][T10255] veth0_macvtap: left promiscuous mode
[  330.159950][T10328] FAULT_INJECTION: forcing a failure.
[  330.159950][T10328] name failslab, interval 1, probability 0, space 0, times 0
[  330.160043][T10328] CPU: 0 UID: 0 PID: 10328 Comm: syz.3.789 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  330.160064][T10328] Tainted: [L]=SOFTLOCKUP
[  330.160069][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  330.160080][T10328] Call Trace:
[  330.160085][T10328]  <TASK>
[  330.160090][T10328]  dump_stack_lvl+0x100/0x190
[  330.160109][T10328]  should_fail_ex.cold+0x5/0xa
[  330.160129][T10328]  should_failslab+0xc2/0x120
[  330.160147][T10328]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  330.160170][T10328]  ? security_inode_alloc+0x3b/0x2c0
[  330.160187][T10328]  ? lockdep_init_map_type+0x5c/0x250
[  330.160213][T10328]  security_inode_alloc+0x3b/0x2c0
[  330.160230][T10328]  inode_init_always_gfp+0xc77/0xfb0
[  330.160251][T10328]  alloc_inode+0x8e/0x250
[  330.160278][T10328]  new_inode+0x22/0x1c0
[  330.160301][T10328]  shmem_get_inode+0x1e3/0xfb0
[  330.160323][T10328]  ? __pfx_shmem_get_inode+0x10/0x10
[  330.160350][T10328]  __shmem_file_setup+0x382/0x460
[  330.160372][T10328]  ? __pfx___shmem_file_setup+0x10/0x10
[  330.160399][T10328]  ? vm_area_alloc+0x1f/0x160
[  330.160422][T10328]  shmem_zero_setup+0x96/0x1b0
[  330.160438][T10328]  __mmap_region+0x2509/0x2dd0
[  330.160464][T10328]  ? __pfx___mmap_region+0x10/0x10
[  330.160490][T10328]  ? rcu_is_watching+0x12/0xc0
[  330.160507][T10328]  ? trace_pelt_se_tp+0x13b/0x190
[  330.160534][T10328]  ? do_raw_spin_lock+0x128/0x260
[  330.160552][T10328]  ? __lock_acquire+0x4a5/0x2630
[  330.160575][T10328]  ? do_raw_spin_unlock+0x145/0x1e0
[  330.160599][T10328]  ? find_held_lock+0x2b/0x80
[  330.160618][T10328]  ? rcu_is_watching+0x12/0xc0
[  330.160642][T10328]  ? mark_held_locks+0x40/0x70
[  330.160663][T10328]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  330.160707][T10328]  ? rcu_is_watching+0x12/0xc0
[  330.160727][T10328]  mmap_region+0x35d/0x620
[  330.160741][T10328]  ? rcu_is_watching+0x12/0xc0
[  330.160757][T10328]  ? __pfx_mmap_region+0x10/0x10
[  330.160773][T10328]  ? cap_mmap_addr+0x4b/0x120
[  330.160786][T10328]  ? bpf_lsm_mmap_addr+0x9/0x30
[  330.160799][T10328]  ? security_mmap_addr+0x71/0x1e0
[  330.160818][T10328]  ? __get_unmapped_area+0x255/0x3e0
[  330.160839][T10328]  do_mmap+0xc63/0x12f0
[  330.160859][T10328]  ? __pfx_do_mmap+0x10/0x10
[  330.160877][T10328]  ? __pfx_down_write_killable+0x10/0x10
[  330.160904][T10328]  vm_mmap_pgoff+0x29e/0x470
[  330.160926][T10328]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  330.160946][T10328]  ? do_futex+0x192/0x350
[  330.160961][T10328]  ? __pfx_do_futex+0x10/0x10
[  330.160979][T10328]  ksys_mmap_pgoff+0xe4/0x610
[  330.160997][T10328]  ? __x64_sys_futex+0x358/0x4d0
[  330.161012][T10328]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  330.161029][T10328]  ? xfd_validate_state+0x129/0x190
[  330.161047][T10328]  __x64_sys_mmap+0x125/0x190
[  330.161064][T10328]  do_syscall_64+0x115/0x840
[  330.161084][T10328]  ? clear_bhb_loop+0x40/0x90
[  330.161102][T10328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.161117][T10328] RIP: 0033:0x7f3f02f9ce59
[  330.161130][T10328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.161143][T10328] RSP: 002b:00007f3f03ddc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  330.161160][T10328] RAX: ffffffffffffffda RBX: 00007f3f03216360 RCX: 00007f3f02f9ce59
[  330.161170][T10328] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[  330.161178][T10328] RBP: 00007f3f03032d6f R08: fffffffffffffffa R09: 0000000000008000
[  330.161187][T10328] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  330.161195][T10328] R13: 00007f3f032163f8 R14: 00007f3f03216360 R15: 00007ffcd05a95c8
[  330.161214][T10328]  </TASK>
[  330.201347][T10332] netlink: 342 bytes leftover after parsing attributes in process `syz.4.790'.
[  330.206994][T10324] warning: `syz.3.789' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  332.200398][T10381] Setting dangerous option i915.mitigations - tainting kernel
[  332.209178][T10381] FAULT_INJECTION: forcing a failure.
[  332.209178][T10381] name failslab, interval 1, probability 0, space 0, times 0
[  332.209251][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.3.798 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  332.209274][T10381] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  332.209280][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  332.209288][T10381] Call Trace:
[  332.209293][T10381]  <TASK>
[  332.209299][T10381]  dump_stack_lvl+0x100/0x190
[  332.209319][T10381]  should_fail_ex.cold+0x5/0xa
[  332.209338][T10381]  should_failslab+0xc2/0x120
[  332.209358][T10381]  __kmalloc_node_track_caller_noprof+0xe3/0x850
[  332.209373][T10381]  ? fib_rules_register+0x30/0x500
[  332.209395][T10381]  kmemdup_noprof+0x29/0x60
[  332.209411][T10381]  fib_rules_register+0x30/0x500
[  332.209431][T10381]  fib4_rules_init+0x1f/0x1c0
[  332.209447][T10381]  fib_net_init+0x1dc/0x3f0
[  332.209464][T10381]  ? is_module_address+0x69/0xf0
[  332.209478][T10381]  ? __pfx_fib_net_init+0x10/0x10
[  332.209496][T10381]  ? timer_init_key+0x155/0x330
[  332.209519][T10381]  ? devinet_init_net+0x56c/0x8d0
[  332.209541][T10381]  ? __pfx_fib_net_init+0x10/0x10
[  332.209559][T10381]  ops_init+0x1e2/0x5f0
[  332.209576][T10381]  setup_net+0x118/0x3a0
[  332.209591][T10381]  ? __pfx_setup_net+0x10/0x10
[  332.209607][T10381]  ? mutex_init_lockdep+0xf1/0x120
[  332.209625][T10381]  copy_net_ns+0x46f/0x7c0
[  332.209644][T10381]  create_new_namespaces+0x3ea/0xac0
[  332.209667][T10381]  unshare_nsproxy_namespaces+0xf2/0x220
[  332.209686][T10381]  ksys_unshare+0x438/0xab0
[  332.209711][T10381]  ? __pfx_ksys_unshare+0x10/0x10
[  332.209730][T10381]  ? xfd_validate_state+0x129/0x190
[  332.209751][T10381]  __x64_sys_unshare+0x31/0x40
[  332.209771][T10381]  do_syscall_64+0x115/0x840
[  332.209790][T10381]  ? clear_bhb_loop+0x40/0x90
[  332.209808][T10381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.209823][T10381] RIP: 0033:0x7f3f02f9ce59
[  332.209836][T10381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.209850][T10381] RSP: 002b:00007f3f03e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  332.209864][T10381] RAX: ffffffffffffffda RBX: 00007f3f03215fa0 RCX: 00007f3f02f9ce59
[  332.209874][T10381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  332.209882][T10381] RBP: 00007f3f03032d6f R08: 0000000000000000 R09: 0000000000000000
[  332.209891][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.209899][T10381] R13: 00007f3f03216038 R14: 00007f3f03215fa0 R15: 00007ffcd05a95c8
[  332.209917][T10381]  </TASK>
[  332.248049][T10381] ima: policy update failed
[  332.251373][   T30] audit: type=1802 audit(4294967356.472:11): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.798" res=0 errno=0
[  334.427163][T10424] ubi0: attaching mtd0
[  334.428299][T10424] ubi0: scanning is finished
[  334.428331][T10424] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  334.620834][ T6703] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5
[  334.661433][T10424] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  334.714391][T10424] random: crng reseeded on system resumption
[  335.543287][T10447] device-mapper: ioctl: Invalid ioctl structure: name ��������d, dev 3000000000
[  336.961105][    C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 21080 ms
[  336.969159][    C0] sl0: transmit timed out, driver error?
[  339.038112][ T6703] Bluetooth: hci0: ACL packet too small
[  341.870905][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'.
[  342.973290][T10600] random: crng reseeded on system resumption
[  344.574525][T10639] netlink: zone id is out of range
[  344.606610][T10639] netlink: zone id is out of range
[  344.644995][T10639] netlink: zone id is out of range
[  344.703319][T10639] netlink: zone id is out of range
[  344.751806][T10639] netlink: zone id is out of range
[  344.797902][T10639] netlink: zone id is out of range
[  344.848007][T10639] netlink: zone id is out of range
[  344.903240][T10639] netlink: zone id is out of range
[  344.961916][T10639] netlink: zone id is out of range
[  344.984619][T10639] netlink: zone id is out of range
[  345.393120][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'.
[  345.816286][T10664] batadv_slave_1: entered promiscuous mode
[  345.864474][T10662] batadv_slave_1: left promiscuous mode
[  345.896141][T10668] netlink: 62 bytes leftover after parsing attributes in process `syz.4.846'.
[  346.665494][T10694] random: crng reseeded on system resumption
[  347.299023][T10670] Process accounting resumed
[  347.496921][T10670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  348.184147][T10724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.857'.
[  348.655642][T10732] syz.4.858 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  348.798780][T10732] capability: warning: `syz.4.858' uses deprecated v2 capabilities in a way that may be insecure
[  349.028966][T10732] netlink: 'syz.4.858': attribute type 1 has an invalid length.
[  350.116413][T10759] QAT: Device 250 not found
[  351.489823][ T6703] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  351.498994][ T6703] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff
[  352.078792][ T1224] Process accounting resumed
[  352.446362][T10787] Process accounting resumed
[  360.611240][T10991] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input9
[  362.715302][T11019] FAULT_INJECTION: forcing a failure.
[  362.715302][T11019] name failslab, interval 1, probability 0, space 0, times 0
[  362.715397][T11019] CPU: 0 UID: 0 PID: 11019 Comm: syz.3.908 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  362.715421][T11019] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  362.715427][T11019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  362.715436][T11019] Call Trace:
[  362.715513][T11019]  <TASK>
[  362.715519][T11019]  dump_stack_lvl+0x100/0x190
[  362.715584][T11019]  should_fail_ex.cold+0x5/0xa
[  362.715622][T11019]  ? apply_wqattrs_prepare+0xfe/0xbb0
[  362.715654][T11019]  should_failslab+0xc2/0x120
[  362.715686][T11019]  __kmalloc_noprof+0xe0/0x850
[  362.715707][T11019]  apply_wqattrs_prepare+0xfe/0xbb0
[  362.715724][T11019]  ? __alloc_workqueue+0x8fd/0x1980
[  362.715750][T11019]  apply_workqueue_attrs_locked+0x64/0xe0
[  362.715769][T11019]  __alloc_workqueue+0xe04/0x1980
[  362.715793][T11019]  ? __debug_object_init+0x2de/0x3d0
[  362.715948][T11019]  alloc_workqueue_noprof+0xc7/0x130
[  362.715969][T11019]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  362.715993][T11019]  ? lockdep_init_map_type+0x5c/0x250
[  362.716028][T11019]  ? lockdep_init_map_type+0x5c/0x250
[  362.716053][T11019]  __rds_conn_create+0x1234/0x25a0
[  362.716155][T11019]  ? __pfx___rds_conn_create+0x10/0x10
[  362.716177][T11019]  ? rcu_is_watching+0x12/0xc0
[  362.716194][T11019]  ? trace_kmalloc+0xe3/0x110
[  362.716211][T11019]  ? lockdep_init_map_type+0x5c/0x250
[  362.716237][T11019]  rds_conn_create_outgoing+0x44/0x60
[  362.716263][T11019]  rds_sendmsg+0x10da/0x3480
[  362.716291][T11019]  ? __pfx_rds_sendmsg+0x10/0x10
[  362.716311][T11019]  ? __pfx_aa_sk_perm+0x10/0x10
[  362.716373][T11019]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  362.716413][T11019]  ? ____sys_sendmsg+0x9e1/0xb70
[  362.716475][T11019]  ____sys_sendmsg+0x9e1/0xb70
[  362.716493][T11019]  ? __pfx_rds_sendmsg+0x10/0x10
[  362.716511][T11019]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.716535][T11019]  ? __pfx_futex_wake_mark+0x10/0x10
[  362.716566][T11019]  ___sys_sendmsg+0x190/0x1e0
[  362.716594][T11019]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.716638][T11019]  __sys_sendmsg+0x170/0x220
[  362.716654][T11019]  ? __pfx___sys_sendmsg+0x10/0x10
[  362.716669][T11019]  ? __x64_sys_futex+0x34f/0x4d0
[  362.716692][T11019]  ? rcu_is_watching+0x12/0xc0
[  362.716711][T11019]  do_syscall_64+0x115/0x840
[  362.716767][T11019]  ? clear_bhb_loop+0x40/0x90
[  362.716793][T11019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.716809][T11019] RIP: 0033:0x7f3f02f9ce59
[  362.716822][T11019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.716836][T11019] RSP: 002b:00007f3f03e60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.716852][T11019] RAX: ffffffffffffffda RBX: 00007f3f03215fa0 RCX: 00007f3f02f9ce59
[  362.716862][T11019] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[  362.716871][T11019] RBP: 00007f3f03032d6f R08: 0000000000000000 R09: 0000000000000000
[  362.716880][T11019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.716889][T11019] R13: 00007f3f03216038 R14: 00007f3f03215fa0 R15: 00007ffcd05a95c8
[  362.716909][T11019]  </TASK>
[  362.785771][T11019] netlink: 330 bytes leftover after parsing attributes in process `syz.3.908'.
[  364.648504][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'.
[  368.926625][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  368.962784][ T6703] Bluetooth: hci4: command 0x0406 tx timeout
[  369.146248][T11150] netlink: 384 bytes leftover after parsing attributes in process `syz.0.928'.
[  369.345774][T11142] net_ratelimit: 48 callbacks suppressed
[  369.345790][T11142] openvswitch: netlink: IP tunnel dst address not specified
[  369.978850][T11164] FAULT_INJECTION: forcing a failure.
[  369.978850][T11164] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  370.074861][T11164] CPU: 0 UID: 0 PID: 11164 Comm: syz.0.930 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  370.074889][T11164] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  370.074895][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  370.074904][T11164] Call Trace:
[  370.074909][T11164]  <TASK>
[  370.074915][T11164]  dump_stack_lvl+0x100/0x190
[  370.074937][T11164]  should_fail_ex.cold+0x5/0xa
[  370.074954][T11164]  ? fs_reclaim_acquire+0x70/0x100
[  370.074975][T11164]  should_fail_alloc_page+0xeb/0x140
[  370.074994][T11164]  prepare_alloc_pages+0x1f0/0x5f0
[  370.075016][T11164]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  370.075041][T11164]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  370.075064][T11164]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  370.075087][T11164]  ? stack_trace_save+0x8e/0xc0
[  370.075135][T11164]  ? __pfx_stack_trace_save+0x10/0x10
[  370.075154][T11164]  ? stack_depot_save_flags+0x27/0x9d0
[  370.075240][T11164]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  370.075263][T11164]  ? __lock_acquire+0x4a5/0x2630
[  370.075286][T11164]  ? blk_trace_setup_prepare+0x35c/0x6c0
[  370.075317][T11164]  ? blk_trace_ioctl+0x245/0x320
[  370.075334][T11164]  ? blkdev_ioctl+0x17c/0x6f0
[  370.075405][T11164]  ? __x64_sys_ioctl+0x18e/0x210
[  370.075430][T11164]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  370.075458][T11164]  ? find_held_lock+0x2b/0x80
[  370.075475][T11164]  ? rcu_read_unlock+0x17/0x60
[  370.075494][T11164]  ? rcu_read_unlock+0x17/0x60
[  370.075512][T11164]  ? rcu_read_unlock+0x17/0x60
[  370.075530][T11164]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  370.075551][T11164]  ? policy_nodemask+0xed/0x4f0
[  370.075569][T11164]  alloc_pages_mpol+0x1fb/0x540
[  370.075587][T11164]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  370.075605][T11164]  ? __kvmalloc_node_noprof+0x6af/0xa00
[  370.075619][T11164]  ? relay_open_buf.part.0+0x199/0xb70
[  370.075639][T11164]  alloc_pages_noprof+0x1a/0x160
[  370.075662][T11164]  relay_open_buf.part.0+0x261/0xb70
[  370.075693][T11164]  relay_open+0x7b9/0xa00
[  370.075713][T11164]  blk_trace_setup_prepare+0x35c/0x6c0
[  370.075733][T11164]  blk_trace_setup+0x217/0x440
[  370.075753][T11164]  ? __pfx_blk_trace_setup+0x10/0x10
[  370.075769][T11164]  ? lockdep_hardirqs_on+0x36/0x100
[  370.075827][T11164]  ? __pfx_vsnprintf+0x10/0x10
[  370.075881][T11164]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  370.075903][T11164]  ? do_vfs_ioctl+0x226/0x13e0
[  370.075920][T11164]  blk_trace_ioctl+0x245/0x320
[  370.075939][T11164]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  370.075959][T11164]  ? find_held_lock+0x2b/0x80
[  370.075976][T11164]  ? __fget_files+0x215/0x3d0
[  370.075992][T11164]  ? hook_file_ioctl_common+0x149/0x410
[  370.076035][T11164]  blkdev_ioctl+0x17c/0x6f0
[  370.076059][T11164]  ? __pfx_blkdev_ioctl+0x10/0x10
[  370.076084][T11164]  ? __pfx_blkdev_ioctl+0x10/0x10
[  370.076106][T11164]  __x64_sys_ioctl+0x18e/0x210
[  370.076122][T11164]  do_syscall_64+0x115/0x840
[  370.076141][T11164]  ? clear_bhb_loop+0x40/0x90
[  370.076158][T11164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.076173][T11164] RIP: 0033:0x7fb07b99ce59
[  370.076186][T11164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.076200][T11164] RSP: 002b:00007fb079bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  370.076215][T11164] RAX: ffffffffffffffda RBX: 00007fb07bc16090 RCX: 00007fb07b99ce59
[  370.076225][T11164] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006
[  370.076234][T11164] RBP: 00007fb07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  370.076243][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  370.076252][T11164] R13: 00007fb07bc16128 R14: 00007fb07bc16090 R15: 00007ffda77705b8
[  370.076271][T11164]  </TASK>
[  371.405502][T11175] : Can't lookup blockdev
[  373.620258][T11231] tc_dump_action: action bad kind
[  373.815863][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'.
[  377.076640][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  377.083154][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  377.583326][T11317] Process accounting paused
[  379.155821][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'.
[  380.143124][T11384] bridge0: port 3(veth1_macvtap) entered blocking state
[  380.150962][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'.
[  380.215230][T11394] openvswitch: netlink: Key 32 has unexpected len 8 expected 2
[  380.244904][T11384] bridge0: port 3(veth1_macvtap) entered disabled state
[  380.299837][T11384] veth1_macvtap: entered allmulticast mode
[  380.354561][T11384] veth1_macvtap: left allmulticast mode
[  381.385741][T11420] FAULT_INJECTION: forcing a failure.
[  381.385741][T11420] name failslab, interval 1, probability 0, space 0, times 0
[  381.445690][T11420] CPU: 0 UID: 0 PID: 11420 Comm: syz.0.965 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  381.445718][T11420] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  381.445724][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  381.445734][T11420] Call Trace:
[  381.445739][T11420]  <TASK>
[  381.445745][T11420]  dump_stack_lvl+0x100/0x190
[  381.445768][T11420]  should_fail_ex.cold+0x5/0xa
[  381.445794][T11420]  should_failslab+0xc2/0x120
[  381.445813][T11420]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  381.445836][T11420]  ? copy_process+0x2ad6/0x7ed0
[  381.445876][T11420]  ? _raw_spin_unlock+0x28/0x50
[  381.445972][T11420]  copy_process+0x2ad6/0x7ed0
[  381.445991][T11420]  ? preempt_schedule_common+0x42/0xc0
[  381.446020][T11420]  ? __pfx_copy_process+0x10/0x10
[  381.446040][T11420]  ? find_held_lock+0x2b/0x80
[  381.446061][T11420]  ? futex_private_hash_put+0x107/0x1c0
[  381.446087][T11420]  kernel_clone+0x176/0x9e0
[  381.446107][T11420]  ? __pfx_kernel_clone+0x10/0x10
[  381.446143][T11420]  __do_sys_clone+0xd9/0x120
[  381.446163][T11420]  ? __pfx___do_sys_clone+0x10/0x10
[  381.446190][T11420]  ? ksys_read+0x1ac/0x250
[  381.446216][T11420]  ? rcu_is_watching+0x12/0xc0
[  381.446235][T11420]  do_syscall_64+0x115/0x840
[  381.446255][T11420]  ? clear_bhb_loop+0x40/0x90
[  381.446272][T11420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.446287][T11420] RIP: 0033:0x7fb07b99ce59
[  381.446301][T11420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.446315][T11420] RSP: 002b:00007fb07c787fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  381.446329][T11420] RAX: ffffffffffffffda RBX: 00007fb07bc15fa0 RCX: 00007fb07b99ce59
[  381.446339][T11420] RDX: 0000200000001600 RSI: 00002000000015f0 RDI: 0000000000000400
[  381.446348][T11420] RBP: 00007fb07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  381.446357][T11420] R10: 0000200000001640 R11: 0000000000000206 R12: 0000000000000000
[  381.446366][T11420] R13: 00007fb07bc16038 R14: 00007fb07bc15fa0 R15: 00007ffda77705b8
[  381.446385][T11420]  </TASK>
[  382.699291][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'.
[  382.763191][T11437] openvswitch: netlink: Tunnel attr 279 out of range max 16
[  382.831334][T11423] Process accounting paused
[  383.557938][T11450] NFSD: Failed to start, no listeners configured.
[  384.928806][T11495] netlink: 378 bytes leftover after parsing attributes in process `syz.3.982'.
[  385.706200][T11512] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input10
[  386.424250][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.991'.
[  386.755617][T11524] bond0: (slave bond_slave_0): Releasing backup interface
[  387.037927][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'.
[  387.148521][T11541] openvswitch: netlink: IP tunnel dst address not specified
[  388.963583][T11564] random: crng reseeded on system resumption
[  390.760986][T11593] ubi0: attaching mtd0
[  390.803000][T11593] ubi0: scanning is finished
[  390.831672][T11593] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  391.290222][T11593] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  391.981608][T11617] futex_wake_op: syz.1.1009 tries to shift op by -2048; fix this program
[  392.111054][T11617] futex_wake_op: syz.1.1009 tries to shift op by -2048; fix this program
[  396.998742][T11706] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  397.447077][    C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20470 ms
[  397.455188][    C0] sl0: transmit timed out, driver error?
[  397.787040][T11720] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  400.657703][T11799] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1036'.
[  400.714319][T11799] FAULT_INJECTION: forcing a failure.
[  400.714319][T11799] name failslab, interval 1, probability 0, space 0, times 0
[  400.814509][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'.
[  400.875673][T11799] CPU: 0 UID: 0 PID: 11799 Comm: syz.4.1036 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  400.875700][T11799] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  400.875706][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  400.875715][T11799] Call Trace:
[  400.875720][T11799]  <TASK>
[  400.875726][T11799]  dump_stack_lvl+0x100/0x190
[  400.875747][T11799]  should_fail_ex.cold+0x5/0xa
[  400.875766][T11799]  ? apply_wqattrs_prepare+0xfe/0xbb0
[  400.875783][T11799]  should_failslab+0xc2/0x120
[  400.875804][T11799]  __kmalloc_noprof+0xe0/0x850
[  400.875823][T11799]  apply_wqattrs_prepare+0xfe/0xbb0
[  400.875839][T11799]  ? __alloc_workqueue+0x8fd/0x1980
[  400.875865][T11799]  apply_workqueue_attrs_locked+0x64/0xe0
[  400.875883][T11799]  __alloc_workqueue+0xe04/0x1980
[  400.875909][T11799]  alloc_workqueue_noprof+0xc7/0x130
[  400.875930][T11799]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  400.875952][T11799]  ? trace_kmalloc+0xe3/0x110
[  400.875968][T11799]  ? __kasan_kmalloc+0xaa/0xb0
[  400.875988][T11799]  ieee80211_register_hw+0x2148/0x4570
[  400.876098][T11799]  ? mark_held_locks+0x1/0x70
[  400.876132][T11799]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  400.876154][T11799]  ? __pfx___debug_object_init+0x10/0x10
[  400.876177][T11799]  ? find_held_lock+0x2b/0x80
[  400.876196][T11799]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  400.876218][T11799]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  400.876295][T11799]  ? __hrtimer_setup+0x208/0x330
[  400.876313][T11799]  mac80211_hwsim_new_radio+0x2a01/0x5aa0
[  400.876366][T11799]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  400.876391][T11799]  hwsim_new_radio_nl+0xc5f/0x1370
[  400.876410][T11799]  ? rcu_is_watching+0x12/0xc0
[  400.876429][T11799]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  400.876452][T11799]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  400.876508][T11799]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  400.876536][T11799]  genl_family_rcv_msg_doit+0x214/0x300
[  400.876560][T11799]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  400.876582][T11799]  ? genl_get_cmd+0x3e7/0x760
[  400.876607][T11799]  ? bpf_lsm_capable+0x9/0x10
[  400.876630][T11799]  ? security_capable+0x80/0x260
[  400.876674][T11799]  ? ns_capable+0xd2/0xf0
[  400.876693][T11799]  genl_rcv_msg+0x560/0x800
[  400.876717][T11799]  ? __pfx_genl_rcv_msg+0x10/0x10
[  400.876739][T11799]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  400.876764][T11799]  netlink_rcv_skb+0x159/0x420
[  400.876783][T11799]  ? __pfx_genl_rcv_msg+0x10/0x10
[  400.876805][T11799]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  400.876831][T11799]  ? netlink_deliver_tap+0x1ae/0xcc0
[  400.876852][T11799]  genl_rcv+0x28/0x40
[  400.876870][T11799]  netlink_unicast+0x585/0x850
[  400.876892][T11799]  ? __pfx_netlink_unicast+0x10/0x10
[  400.876916][T11799]  netlink_sendmsg+0x8b0/0xda0
[  400.876938][T11799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  400.876956][T11799]  ? __import_iovec+0x1d2/0x640
[  400.877024][T11799]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  400.877044][T11799]  ____sys_sendmsg+0x9e1/0xb70
[  400.877064][T11799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  400.877085][T11799]  ? __pfx_____sys_sendmsg+0x10/0x10
[  400.877102][T11799]  ? preempt_schedule_thunk+0x16/0x30
[  400.877135][T11799]  ? try_to_wake_up+0x5f6/0x1900
[  400.877157][T11799]  ___sys_sendmsg+0x190/0x1e0
[  400.877179][T11799]  ? __pfx____sys_sendmsg+0x10/0x10
[  400.877199][T11799]  ? futex_private_hash_put+0x107/0x1c0
[  400.877244][T11799]  __sys_sendmsg+0x170/0x220
[  400.877259][T11799]  ? __pfx___sys_sendmsg+0x10/0x10
[  400.877274][T11799]  ? __x64_sys_futex+0x34f/0x4d0
[  400.877296][T11799]  ? rcu_is_watching+0x12/0xc0
[  400.877315][T11799]  do_syscall_64+0x115/0x840
[  400.877335][T11799]  ? clear_bhb_loop+0x40/0x90
[  400.877353][T11799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.877368][T11799] RIP: 0033:0x7fe65f59ce59
[  400.877382][T11799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.877396][T11799] RSP: 002b:00007fe660447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  400.877410][T11799] RAX: ffffffffffffffda RBX: 00007fe65f816090 RCX: 00007fe65f59ce59
[  400.877420][T11799] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000009
[  400.877429][T11799] RBP: 00007fe65f632d6f R08: 0000000000000000 R09: 0000000000000000
[  400.877438][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  400.877446][T11799] R13: 00007fe65f816128 R14: 00007fe65f816090 R15: 00007fff940063c8
[  400.877466][T11799]  </TASK>
[  401.363119][T11796] openvswitch: netlink: IP tunnel dst address not specified
[  405.535540][T11851] zswap: compressor  not available
[  405.659093][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'.
[  406.617004][T11859] openvswitch: netlink: IP tunnel dst address not specified
[  408.088953][T11881] Process accounting resumed
[  408.247246][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'.
[  408.958910][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'.
[  409.297886][T11936] netlink: 'syz.3.1065': attribute type 1 has an invalid length.
[  409.343263][T11936] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1065'.
[  409.478966][T11936] ima: policy update failed
[  409.500131][   T30] audit: type=1802 audit(2147483696.797:12): pid=11936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1065" res=0 errno=0
[  411.551073][T11972] random: crng reseeded on system resumption
[  412.540387][T11992] futex_wake_op: syz.4.1075 tries to shift op by -2048; fix this program
[  412.655998][T11992] 0x000000000001-0x000000020000 : ""
[  412.761509][T11992] ftl_cs: FTL header corrupt!
[  413.411690][T11997] Process accounting resumed
[  413.854289][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'.
[  414.584552][T12021] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2
[  414.737805][T12045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1083'.
[  415.075214][T12058] FAULT_INJECTION: forcing a failure.
[  415.075214][T12058] name failslab, interval 1, probability 0, space 0, times 0
[  415.157386][T12058] CPU: 0 UID: 0 PID: 12058 Comm: syz.4.1084 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  415.157415][T12058] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  415.157421][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  415.157430][T12058] Call Trace:
[  415.157435][T12058]  <TASK>
[  415.157441][T12058]  dump_stack_lvl+0x100/0x190
[  415.157462][T12058]  should_fail_ex.cold+0x5/0xa
[  415.157481][T12058]  ? tomoyo_realpath_from_path+0xb6/0x690
[  415.157575][T12058]  should_failslab+0xc2/0x120
[  415.157595][T12058]  __kmalloc_noprof+0xe0/0x850
[  415.157608][T12058]  ? kfree+0x1dd/0x6c0
[  415.157639][T12058]  tomoyo_realpath_from_path+0xb6/0x690
[  415.157665][T12058]  tomoyo_check_open_permission+0x2af/0x3c0
[  415.157685][T12058]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  415.157711][T12058]  ? hook_file_open+0x24e/0x7a0
[  415.157744][T12058]  ? path_get+0x61/0x80
[  415.157765][T12058]  tomoyo_file_open+0x6b/0x90
[  415.157809][T12058]  security_file_open+0xb5/0x1e0
[  415.157829][T12058]  do_dentry_open+0x588/0x14d0
[  415.157854][T12058]  vfs_open+0x82/0x3f0
[  415.157877][T12058]  path_openat+0x208c/0x31a0
[  415.157902][T12058]  ? __pfx_path_openat+0x10/0x10
[  415.157927][T12058]  do_file_open+0x20e/0x430
[  415.157947][T12058]  ? __pfx_do_file_open+0x10/0x10
[  415.157978][T12058]  ? alloc_fd+0x476/0x790
[  415.157998][T12058]  ? do_getname+0x191/0x390
[  415.158020][T12058]  do_sys_openat2+0x10d/0x1e0
[  415.158042][T12058]  ? __pfx_do_sys_openat2+0x10/0x10
[  415.158071][T12058]  __x64_sys_openat+0x12d/0x210
[  415.158093][T12058]  ? __pfx___x64_sys_openat+0x10/0x10
[  415.158114][T12058]  ? ksys_write+0x1ac/0x250
[  415.158130][T12058]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  415.158152][T12058]  ? syscall_user_dispatch+0x76/0x130
[  415.158171][T12058]  do_syscall_64+0x115/0x840
[  415.158192][T12058]  ? clear_bhb_loop+0x40/0x90
[  415.158210][T12058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.158225][T12058] RIP: 0033:0x7fe65f59ce59
[  415.158240][T12058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.158254][T12058] RSP: 002b:00007fe660468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  415.158269][T12058] RAX: ffffffffffffffda RBX: 00007fe65f815fa0 RCX: 00007fe65f59ce59
[  415.158279][T12058] RDX: 0000000000008300 RSI: 0000200000003b80 RDI: ffffffffffffff9c
[  415.158289][T12058] RBP: 00007fe65f632d6f R08: 0000000000000000 R09: 0000000000000000
[  415.158298][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  415.158307][T12058] R13: 00007fe65f816038 R14: 00007fe65f815fa0 R15: 00007fff940063c8
[  415.158327][T12058]  </TASK>
[  415.158346][T12058] ERROR: Out of memory at tomoyo_realpath_from_path.
[  417.917325][T12099] FAULT_INJECTION: forcing a failure.
[  417.917325][T12099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.997155][T12099] CPU: 0 UID: 0 PID: 12099 Comm: syz.4.1093 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  417.997183][T12099] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  417.997188][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  417.997203][T12099] Call Trace:
[  417.997212][T12099]  <TASK>
[  417.997217][T12099]  dump_stack_lvl+0x100/0x190
[  417.997238][T12099]  should_fail_ex.cold+0x5/0xa
[  417.997257][T12099]  _copy_from_user+0x2e/0xd0
[  417.997285][T12099]  __sys_bpf+0x243/0x4b90
[  417.997326][T12099]  ? __pfx___sys_bpf+0x10/0x10
[  417.997339][T12099]  ? proc_fail_nth_write+0x9f/0x220
[  417.997369][T12099]  ? find_held_lock+0x2b/0x80
[  417.997390][T12099]  ? find_held_lock+0x2b/0x80
[  417.997408][T12099]  ? ksys_write+0x190/0x250
[  417.997424][T12099]  ? ksys_write+0x190/0x250
[  417.997443][T12099]  ? __mutex_unlock_slowpath+0x15d/0x8a0
[  417.997466][T12099]  ? kernel_write+0x643/0x6c0
[  417.997482][T12099]  ? __fget_files+0x215/0x3d0
[  417.997508][T12099]  ? fput+0x79/0x100
[  417.997527][T12099]  ? ksys_write+0x1ac/0x250
[  417.997543][T12099]  ? __pfx_ksys_write+0x10/0x10
[  417.997563][T12099]  __x64_sys_bpf+0x7b/0xc0
[  417.997577][T12099]  ? lockdep_hardirqs_on+0x78/0x100
[  417.997597][T12099]  do_syscall_64+0x115/0x840
[  417.997616][T12099]  ? clear_bhb_loop+0x40/0x90
[  417.997634][T12099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.997650][T12099] RIP: 0033:0x7fe65f59ce59
[  417.997663][T12099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.997677][T12099] RSP: 002b:00007fe660468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  417.997691][T12099] RAX: ffffffffffffffda RBX: 00007fe65f815fa0 RCX: 00007fe65f59ce59
[  417.997701][T12099] RDX: 0000000000000198 RSI: 0000200000000100 RDI: 0000000000000000
[  417.997710][T12099] RBP: 00007fe660468090 R08: 0000000000000000 R09: 0000000000000000
[  417.997719][T12099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.997727][T12099] R13: 00007fe65f816038 R14: 00007fe65f815fa0 R15: 00007fff940063c8
[  417.997745][T12099]  </TASK>
[  418.790005][T12112] random: crng reseeded on system resumption
[  419.378634][T12112] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1096'.
[  420.052256][ T8294] Bluetooth: hci4: Unexpected cc 0x7c89 with no status
[  420.059949][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'.
[  420.226371][T12147] openvswitch: netlink: IP tunnel dst address not specified
[  420.269859][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'.
[  421.661465][ T8294] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  423.821077][T12177] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  424.979411][T12231] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  425.616012][T12249] random: crng reseeded on system resumption
[  426.659145][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1123'.
[  427.172317][T12284] [U] 
[  427.175303][T12284] [U] 
[  427.177978][T12284] [U] 
[  427.180643][T12284] [U] 
[  427.263158][T12284] [U] 
[  427.265865][T12284] [U] 
[  427.268542][T12284] [U] 
[  427.271209][T12284] [U] 
[  427.393881][T12284] [U] 
[  427.396585][T12284] [U] 
[  427.399255][T12284] [U] 
[  427.401920][T12284] [U] 
[  427.407874][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1127'.
[  427.463277][T12284] [U] 
[  427.465982][T12284] [U] 
[  427.468651][T12284] [U] 
[  427.471322][T12284] [U] 
[  427.538285][T12284] [U] 
[  427.540987][T12284] [U] 
[  427.543656][T12284] [U] 
[  427.546323][T12284] [U] 
[  427.618209][T12284] [U] 
[  427.620928][T12284] [U] 
[  427.623600][T12284] [U] 
[  427.626265][T12284] [U] 
[  427.697337][T12284] [U] 
[  427.700048][T12284] [U] 
[  427.702717][T12284] [U] 
[  427.705383][T12284] [U] 
[  427.777091][T12284] [U] 
[  427.779797][T12284] [U] 
[  427.782465][T12284] [U] 
[  427.785133][T12284] [U] 
[  427.850593][T12284] [U] 
[  427.853304][T12284] [U] 
[  427.855979][T12284] [U] 
[  427.858650][T12284] [U] 
[  427.927992][T12284] [U] 
[  427.930707][T12284] [U] 
[  427.933383][T12284] [U] 
[  427.936403][T12284] [U] 
[  428.070522][T12284] [U] 
[  428.562535][T12311] zswap: compressor  not available
[  429.767338][T12344] Invalid ELF header magic: != ELF
[  430.188708][T12344] netlink: 'syz.0.1134': attribute type 21 has an invalid length.
[  433.465783][T12408] blktrace: Concurrent blktraces are not allowed on nbd5
[  434.780794][T12436] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1153'.
[  434.940981][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'.
[  435.035936][T12445] openvswitch: netlink: IP tunnel dst address not specified
[  436.614492][T12479] FAULT_INJECTION: forcing a failure.
[  436.614492][T12479] name failslab, interval 1, probability 0, space 0, times 0
[  436.690395][T12479] CPU: 0 UID: 0 PID: 12479 Comm: syz.0.1162 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  436.690423][T12479] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  436.690429][T12479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  436.690438][T12479] Call Trace:
[  436.690443][T12479]  <TASK>
[  436.690450][T12479]  dump_stack_lvl+0x100/0x190
[  436.690470][T12479]  should_fail_ex.cold+0x5/0xa
[  436.690490][T12479]  should_failslab+0xc2/0x120
[  436.690509][T12479]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  436.690532][T12479]  ? vm_area_dup+0x27/0x8e0
[  436.690557][T12479]  vm_area_dup+0x27/0x8e0
[  436.690579][T12479]  __split_vma+0x18c/0xda0
[  436.690603][T12479]  ? __pfx___split_vma+0x10/0x10
[  436.690629][T12479]  ? __pfx___up_read+0x10/0x10
[  436.690644][T12479]  ? vms_complete_munmap_vmas+0xaac/0xdd0
[  436.690665][T12479]  ? vms_complete_munmap_vmas+0xaac/0xdd0
[  436.690689][T12479]  vms_gather_munmap_vmas+0x1d2/0x1720
[  436.690712][T12479]  ? vms_complete_munmap_vmas+0x1e1/0xdd0
[  436.690736][T12479]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  436.690764][T12479]  ? __pfx_vms_complete_munmap_vmas+0x10/0x10
[  436.690797][T12479]  do_vmi_align_munmap+0x287/0x5f0
[  436.690822][T12479]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  436.690844][T12479]  ? cap_mmap_addr+0x4b/0x120
[  436.690962][T12479]  do_vmi_munmap+0x1f8/0x3e0
[  436.690988][T12479]  __vm_munmap+0x196/0x390
[  436.691004][T12479]  ? __pfx___vm_munmap+0x10/0x10
[  436.691031][T12479]  __x64_sys_munmap+0x59/0x80
[  436.691051][T12479]  do_syscall_64+0x115/0x840
[  436.691071][T12479]  ? clear_bhb_loop+0x40/0x90
[  436.691090][T12479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.691105][T12479] RIP: 0033:0x7fb07b99cc87
[  436.691118][T12479] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  436.691132][T12479] RSP: 002b:00007fb07c786d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[  436.691147][T12479] RAX: ffffffffffffffda RBX: 00007fb074000000 RCX: 00007fb07b99cc87
[  436.691157][T12479] RDX: 0000000000000000 RSI: 0000000001a00000 RDI: 00007fb078000000
[  436.691167][T12479] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  436.691176][T12479] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[  436.691185][T12479] R13: 0000000000001000 R14: 00007fb078000000 R15: 0000000002600000
[  436.691205][T12479]  </TASK>
[  438.199046][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  438.209453][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  438.823652][T12489] Process accounting paused
[  439.217860][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1168'.
[  439.290064][T12509] batadv0: entered promiscuous mode
[  440.534583][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  441.861252][T12577] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input11
[  442.193095][T12576] bond0: option slaves: interface -��]���=,D�o does not exist!
[  443.815958][T12591] Process accounting paused
[  445.350283][   T30] audit: type=1800 audit(2147483732.844:13): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1185" name="members" dev="configfs" ino=44952 res=0 errno=0
[  445.926964][T12665] syz.1.1188(12665): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  445.951951][T12662] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1186'.
[  446.687623][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'.
[  446.774858][T12678] openvswitch: netlink: IP tunnel dst address not specified
[  447.755629][T12681] FAULT_INJECTION: forcing a failure.
[  447.755629][T12681] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.919663][T12681] CPU: 0 UID: 0 PID: 12681 Comm: syz.4.1191 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  447.919692][T12681] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  447.919698][T12681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  447.919708][T12681] Call Trace:
[  447.919713][T12681]  <TASK>
[  447.919720][T12681]  dump_stack_lvl+0x100/0x190
[  447.919741][T12681]  should_fail_ex.cold+0x5/0xa
[  447.919761][T12681]  _copy_from_user+0x2e/0xd0
[  447.919783][T12681]  get_user_ifreq+0x77/0x1c0
[  447.919802][T12681]  sock_do_ioctl+0x16e/0x280
[  447.919819][T12681]  ? __pfx_sock_do_ioctl+0x10/0x10
[  447.919841][T12681]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  447.919860][T12681]  sock_ioctl+0x599/0x6b0
[  447.919881][T12681]  ? __pfx_sock_ioctl+0x10/0x10
[  447.919899][T12681]  ? hook_file_ioctl_common+0x149/0x410
[  447.919923][T12681]  ? xfd_validate_state+0x129/0x190
[  447.919940][T12681]  ? __pfx_sock_ioctl+0x10/0x10
[  447.919960][T12681]  __x64_sys_ioctl+0x18e/0x210
[  447.919976][T12681]  do_syscall_64+0x115/0x840
[  447.919996][T12681]  ? clear_bhb_loop+0x40/0x90
[  447.920014][T12681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.920029][T12681] RIP: 0033:0x7fe65f59ce59
[  447.920043][T12681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.920057][T12681] RSP: 002b:00007fe660468028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  447.920072][T12681] RAX: ffffffffffffffda RBX: 00007fe65f815fa0 RCX: 00007fe65f59ce59
[  447.920082][T12681] RDX: 0000200000000080 RSI: 0000000000008933 RDI: 0000000000000002
[  447.920090][T12681] RBP: 00007fe65f632d6f R08: 0000000000000000 R09: 0000000000000000
[  447.920099][T12681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  447.920108][T12681] R13: 00007fe65f816038 R14: 00007fe65f815fa0 R15: 00007fff940063c8
[  447.920127][T12681]  </TASK>
[  449.400761][T12732] openvswitch: netlink: Key 4 has unexpected len 0 expected 12
[  449.867943][ T8294] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  449.876251][ T8294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  449.886001][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: kworker/u11:3 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  449.886030][ T8294] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  449.886037][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  449.886049][ T8294] Workqueue: hci1 hci_rx_work
[  449.886146][ T8294] Call Trace:
[  449.886151][ T8294]  <TASK>
[  449.886157][ T8294]  dump_stack_lvl+0x100/0x190
[  449.886177][ T8294]  sysfs_warn_dup.cold+0x1c/0x28
[  449.886206][ T8294]  sysfs_create_dir_ns+0x24b/0x2b0
[  449.886224][ T8294]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  449.886239][ T8294]  ? find_held_lock+0x2b/0x80
[  449.886257][ T8294]  ? kobject_add_internal+0x25f/0x930
[  449.886308][ T8294]  ? kobject_add_internal+0x25f/0x930
[  449.886326][ T8294]  ? do_raw_spin_unlock+0x145/0x1e0
[  449.886344][ T8294]  kobject_add_internal+0x2c8/0x930
[  449.886362][ T8294]  kobject_add+0x16a/0x1e0
[  449.886377][ T8294]  ? __pfx_kobject_add+0x10/0x10
[  449.886391][ T8294]  ? class_to_subsys+0x10f/0x150
[  449.886451][ T8294]  ? kobject_put+0xb9/0x640
[  449.886493][ T8294]  ? _raw_spin_unlock+0x28/0x50
[  449.886518][ T8294]  device_add+0x294/0x1950
[  449.886563][ T8294]  ? __pfx_dev_set_name+0x10/0x10
[  449.886606][ T8294]  ? __pfx_device_add+0x10/0x10
[  449.886623][ T8294]  ? mgmt_send_event_skb+0x2fb/0x460
[  449.886675][ T8294]  hci_conn_add_sysfs+0x1a3/0x260
[  449.886737][ T8294]  le_conn_complete_evt+0x11eb/0x1f60
[  449.886798][ T8294]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  449.886816][ T8294]  ? __pfx_bt_warn+0x10/0x10
[  449.886849][ T8294]  hci_le_conn_complete_evt+0x23c/0x3a0
[  449.886869][ T8294]  ? skb_pull_data+0x15f/0x1e0
[  449.886921][ T8294]  hci_le_meta_evt+0x34a/0x5f0
[  449.886962][ T8294]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  449.886985][ T8294]  hci_event_packet+0x51c/0xcd0
[  449.887004][ T8294]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  449.887025][ T8294]  ? __pfx_hci_event_packet+0x10/0x10
[  449.887046][ T8294]  ? kcov_remote_start+0x374/0x660
[  449.887065][ T8294]  ? lockdep_hardirqs_on+0x78/0x100
[  449.887092][ T8294]  hci_rx_work+0x451/0xfc0
[  449.887114][ T8294]  process_one_work+0xa0e/0x1980
[  449.887138][ T8294]  ? __pfx_process_one_work+0x10/0x10
[  449.887158][ T8294]  ? __pfx_hci_rx_work+0x10/0x10
[  449.887177][ T8294]  worker_thread+0x5ef/0xe50
[  449.887197][ T8294]  ? __pfx_worker_thread+0x10/0x10
[  449.887213][ T8294]  ? kthread+0x13a/0x450
[  449.887233][ T8294]  ? __pfx_worker_thread+0x10/0x10
[  449.887246][ T8294]  kthread+0x370/0x450
[  449.887266][ T8294]  ? __pfx_kthread+0x10/0x10
[  449.887288][ T8294]  ret_from_fork+0x72b/0xd50
[  449.887305][ T8294]  ? __pfx_ret_from_fork+0x10/0x10
[  449.887320][ T8294]  ? rcu_is_watching+0x12/0xc0
[  449.887337][ T8294]  ? __switch_to+0x800/0x1100
[  449.887362][ T8294]  ? __switch_to_asm+0x39/0x70
[  449.887379][ T8294]  ? __pfx_kthread+0x10/0x10
[  449.887402][ T8294]  ret_from_fork_asm+0x1a/0x30
[  449.887431][ T8294]  </TASK>
[  449.888765][ T8294] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  450.210211][ T8294] Bluetooth: hci1: failed to register connection device
[  450.235318][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'.
[  450.645756][T12756] FAULT_INJECTION: forcing a failure.
[  450.645756][T12756] name failslab, interval 1, probability 0, space 0, times 0
[  450.727140][T12756] CPU: 0 UID: 0 PID: 12756 Comm: syz.0.1207 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  450.727168][T12756] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  450.727174][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  450.727183][T12756] Call Trace:
[  450.727189][T12756]  <TASK>
[  450.727195][T12756]  dump_stack_lvl+0x100/0x190
[  450.727217][T12756]  should_fail_ex.cold+0x5/0xa
[  450.727237][T12756]  should_failslab+0xc2/0x120
[  450.727256][T12756]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  450.727279][T12756]  ? anon_vma_fork+0x8d/0x6b0
[  450.727304][T12756]  anon_vma_fork+0x8d/0x6b0
[  450.727324][T12756]  ? vm_area_dup+0x59d/0x8e0
[  450.727346][T12756]  dup_mmap+0x143e/0x21b0
[  450.727373][T12756]  ? __pfx_dup_mmap+0x10/0x10
[  450.727391][T12756]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  450.727415][T12756]  ? __lock_acquire+0x4a5/0x2630
[  450.727437][T12756]  ? find_held_lock+0x2b/0x80
[  450.727454][T12756]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  450.727568][T12756]  copy_process+0x6c78/0x7ed0
[  450.727600][T12756]  ? __pfx_copy_process+0x10/0x10
[  450.727619][T12756]  ? find_held_lock+0x2b/0x80
[  450.727640][T12756]  ? futex_private_hash_put+0x107/0x1c0
[  450.727666][T12756]  kernel_clone+0x176/0x9e0
[  450.727687][T12756]  ? __pfx_kernel_clone+0x10/0x10
[  450.727717][T12756]  __do_sys_clone+0xd9/0x120
[  450.727736][T12756]  ? __pfx___do_sys_clone+0x10/0x10
[  450.727763][T12756]  ? ksys_read+0x1ac/0x250
[  450.727783][T12756]  ? rcu_is_watching+0x12/0xc0
[  450.727802][T12756]  do_syscall_64+0x115/0x840
[  450.727821][T12756]  ? clear_bhb_loop+0x40/0x90
[  450.727839][T12756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.727854][T12756] RIP: 0033:0x7fb07b99ce59
[  450.727868][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.727883][T12756] RSP: 002b:00007fb07c787fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  450.727898][T12756] RAX: ffffffffffffffda RBX: 00007fb07bc15fa0 RCX: 00007fb07b99ce59
[  450.727908][T12756] RDX: 0000200000001600 RSI: 00002000000015f0 RDI: 0000000000000400
[  450.727917][T12756] RBP: 00007fb07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  450.727926][T12756] R10: 0000200000001640 R11: 0000000000000206 R12: 0000000000000000
[  450.727936][T12756] R13: 00007fb07bc16038 R14: 00007fb07bc15fa0 R15: 00007ffda77705b8
[  450.727956][T12756]  </TASK>
[  451.289466][T12770] FAULT_INJECTION: forcing a failure.
[  451.289466][T12770] name fail_futex, interval 1, probability 0, space 0, times 1
[  451.377960][T12770] CPU: 0 UID: 0 PID: 12770 Comm: syz.4.1210 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  451.377990][T12770] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  451.377996][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  451.378005][T12770] Call Trace:
[  451.378010][T12770]  <TASK>
[  451.378017][T12770]  dump_stack_lvl+0x100/0x190
[  451.378037][T12770]  should_fail_ex.cold+0x5/0xa
[  451.378058][T12770]  get_futex_key+0x1d2/0x1510
[  451.378084][T12770]  ? __pfx_get_futex_key+0x10/0x10
[  451.378113][T12770]  futex_wait_setup+0x83/0x510
[  451.378136][T12770]  __futex_wait+0x19f/0x300
[  451.378159][T12770]  ? __pfx___futex_wait+0x10/0x10
[  451.378176][T12770]  ? get_pid_task+0xfc/0x250
[  451.378195][T12770]  ? get_pid_task+0xfc/0x250
[  451.378217][T12770]  ? __pfx_futex_wake_mark+0x10/0x10
[  451.378237][T12770]  ? futex_hash+0x2ad/0x370
[  451.378260][T12770]  ? futex_hash+0x141/0x370
[  451.378284][T12770]  futex_wait+0xe6/0x370
[  451.378302][T12770]  ? __pfx_futex_wait+0x10/0x10
[  451.378323][T12770]  ? do_writev+0x214/0x340
[  451.378344][T12770]  do_futex+0x1ef/0x350
[  451.378360][T12770]  ? __pfx_do_futex+0x10/0x10
[  451.378376][T12770]  ? __fget_files+0x21f/0x3d0
[  451.378395][T12770]  __x64_sys_futex+0x34f/0x4d0
[  451.378413][T12770]  ? __pfx___x64_sys_futex+0x10/0x10
[  451.378428][T12770]  ? __pfx_do_writev+0x10/0x10
[  451.378445][T12770]  ? rcu_is_watching+0x12/0xc0
[  451.378464][T12770]  do_syscall_64+0x115/0x840
[  451.378484][T12770]  ? clear_bhb_loop+0x40/0x90
[  451.378502][T12770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.378517][T12770] RIP: 0033:0x7fe65f59ce59
[  451.378530][T12770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.378545][T12770] RSP: 002b:00007fe6604470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  451.378559][T12770] RAX: ffffffffffffffda RBX: 00007fe65f816098 RCX: 00007fe65f59ce59
[  451.378569][T12770] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe65f816098
[  451.378578][T12770] RBP: 00007fe65f816090 R08: 0000000000000000 R09: 0000000000000000
[  451.378587][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.378595][T12770] R13: 00007fe65f816128 R14: 00007fff940062e0 R15: 00007fff940063c8
[  451.378614][T12770]  </TASK>
[  452.289572][ T6703] Bluetooth: hci1: command 0x0c1a tx timeout
[  453.222396][T12811] FAULT_INJECTION: forcing a failure.
[  453.222396][T12811] name failslab, interval 1, probability 0, space 0, times 0
[  453.276835][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.3.1220 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  453.276881][T12811] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  453.276888][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  453.276897][T12811] Call Trace:
[  453.276902][T12811]  <TASK>
[  453.276908][T12811]  dump_stack_lvl+0x100/0x190
[  453.276929][T12811]  should_fail_ex.cold+0x5/0xa
[  453.276949][T12811]  ? iter_file_splice_write+0x1d8/0x10a0
[  453.276969][T12811]  should_failslab+0xc2/0x120
[  453.276987][T12811]  __kmalloc_noprof+0xe0/0x850
[  453.277001][T12811]  ? __pfx___might_resched+0x10/0x10
[  453.277021][T12811]  iter_file_splice_write+0x1d8/0x10a0
[  453.277049][T12811]  ? __pfx_iter_file_splice_write+0x10/0x10
[  453.277068][T12811]  ? __lock_acquire+0x4a5/0x2630
[  453.277090][T12811]  ? shmem_file_splice_read+0x724/0xd80
[  453.277146][T12811]  ? __pfx_iter_file_splice_write+0x10/0x10
[  453.277167][T12811]  direct_splice_actor+0x192/0x6c0
[  453.277188][T12811]  splice_direct_to_actor+0x345/0xa30
[  453.277209][T12811]  ? __pfx_direct_splice_actor+0x10/0x10
[  453.277231][T12811]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  453.277257][T12811]  do_splice_direct+0x174/0x240
[  453.277277][T12811]  ? __pfx_do_splice_direct+0x10/0x10
[  453.277296][T12811]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  453.277317][T12811]  ? rw_verify_area+0xce/0x6d0
[  453.277334][T12811]  do_sendfile+0xadc/0xe20
[  453.277353][T12811]  ? __pfx_do_sendfile+0x10/0x10
[  453.277376][T12811]  __x64_sys_sendfile64+0x154/0x220
[  453.277396][T12811]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  453.277418][T12811]  ? rcu_is_watching+0x12/0xc0
[  453.277437][T12811]  do_syscall_64+0x115/0x840
[  453.277457][T12811]  ? clear_bhb_loop+0x40/0x90
[  453.277475][T12811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.277491][T12811] RIP: 0033:0x7f3f02f9ce59
[  453.277505][T12811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.277519][T12811] RSP: 002b:00007f3f03e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  453.277535][T12811] RAX: ffffffffffffffda RBX: 00007f3f03215fa0 RCX: 00007f3f02f9ce59
[  453.277545][T12811] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000006
[  453.277553][T12811] RBP: 00007f3f03032d6f R08: 0000000000000000 R09: 0000000000000000
[  453.277562][T12811] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000
[  453.277570][T12811] R13: 00007f3f03216038 R14: 00007f3f03215fa0 R15: 00007ffcd05a95c8
[  453.277590][T12811]  </TASK>
[  453.628616][T12814] sg_write: data in/out 262108/20 bytes for SCSI command 0x61-- guessing data in;
[  453.628616][T12814]    program syz.0.1222 not setting count and/or reply_len properly
[  453.754129][T12817] NFSD: Failed to start, no listeners configured.
[  454.350796][ T8294] Bluetooth: hci1: command 0x0c1a tx timeout
[  454.439553][T12827] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1224'.
[  454.732832][T12825] FAULT_INJECTION: forcing a failure.
[  454.732832][T12825] name fail_futex, interval 1, probability 0, space 0, times 0
[  454.747160][T12825] CPU: 0 UID: 0 PID: 12825 Comm: syz.4.1221 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  454.747187][T12825] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  454.747192][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  454.747201][T12825] Call Trace:
[  454.747206][T12825]  <TASK>
[  454.747211][T12825]  dump_stack_lvl+0x100/0x190
[  454.747232][T12825]  should_fail_ex.cold+0x5/0xa
[  454.747251][T12825]  get_futex_key+0x1d2/0x1510
[  454.747277][T12825]  ? __pfx_get_futex_key+0x10/0x10
[  454.747300][T12825]  ? lock_acquire+0x1b1/0x370
[  454.747328][T12825]  futex_wake+0xea/0x530
[  454.747351][T12825]  ? __pfx_futex_wake+0x10/0x10
[  454.747369][T12825]  ? exit_mm_release+0x19/0x30
[  454.747396][T12825]  do_futex+0x32b/0x350
[  454.747411][T12825]  ? __pfx_do_futex+0x10/0x10
[  454.747425][T12825]  ? __might_fault+0xc5/0x140
[  454.747457][T12825]  mm_release+0x24a/0x2f0
[  454.747475][T12825]  do_exit+0x707/0x2af0
[  454.747501][T12825]  ? __pfx_do_exit+0x10/0x10
[  454.747521][T12825]  ? do_raw_spin_lock+0x128/0x260
[  454.747536][T12825]  ? find_held_lock+0x2b/0x80
[  454.747553][T12825]  ? get_signal+0x7e5/0x2210
[  454.747572][T12825]  do_group_exit+0xd5/0x2a0
[  454.747595][T12825]  get_signal+0x20ff/0x2210
[  454.747612][T12825]  ? __mm_populate+0x33a/0x3a0
[  454.747633][T12825]  ? __mm_populate+0x2b0/0x3a0
[  454.747653][T12825]  ? __pfx_get_signal+0x10/0x10
[  454.747678][T12825]  ? do_futex+0x192/0x350
[  454.747694][T12825]  arch_do_signal_or_restart+0x91/0x7a0
[  454.747716][T12825]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  454.747745][T12825]  ? rcu_is_watching+0x12/0xc0
[  454.747764][T12825]  exit_to_user_mode_loop+0x98/0x670
[  454.747787][T12825]  ? rcu_is_watching+0x12/0xc0
[  454.747804][T12825]  do_syscall_64+0x652/0x840
[  454.747825][T12825]  ? clear_bhb_loop+0x40/0x90
[  454.747842][T12825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.747857][T12825] RIP: 0033:0x7fe65f59ce59
[  454.747871][T12825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.747885][T12825] RSP: 002b:00007fe6604470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  454.747900][T12825] RAX: fffffffffffffe00 RBX: 00007fe65f816098 RCX: 00007fe65f59ce59
[  454.747910][T12825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe65f816098
[  454.747918][T12825] RBP: 00007fe65f816090 R08: 0000000000000000 R09: 0000000000000000
[  454.747927][T12825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  454.747936][T12825] R13: 00007fe65f816128 R14: 00007fff940062e0 R15: 00007fff940063c8
[  454.747954][T12825]  </TASK>
[  458.121028][    C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20010 ms
[  458.129065][    C0] sl0: transmit timed out, driver error?
[  459.675505][   T30] audit: type=1804 audit(4294967309.293:14): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1240" name="/newroot/308/file0" dev="tmpfs" ino=1634 res=1 errno=0
[  461.008021][T12952] NFSD: Failed to start, no listeners configured.
[  461.769902][T13004] futex_wake_op: syz.4.1251 tries to shift op by -1; fix this program
[  461.994673][T13024] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  462.387015][T12999] ovs_: entered promiscuous mode
[  463.411489][T13059] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1258'.
[  463.676435][ T6703] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  464.110676][T13074] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1260'.
[  467.138037][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'.
[  467.185705][T13145] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1278'.
[  467.332676][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'.
[  469.320118][T13220] random: crng reseeded on system resumption
[  469.410855][ T6703] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  469.907365][T13202] Process accounting resumed
[  470.035401][   T30] audit: type=1804 audit(4294967319.717:15): pid=13236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1298" name="/newroot/333/file0" dev="tmpfs" ino=1746 res=1 errno=0
[  470.324250][T13235] nbd: socks must be embedded in a SOCK_ITEM attr
[  470.324702][T13235] block nbd0: shutting down sockets
[  470.379632][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'.
[  470.556002][T13235] team0 (unregistering): Port device team_slave_0 removed
[  470.571001][T13235] team0 (unregistering): Port device team_slave_1 removed
[  470.630220][T13237] bond0: invalid ARP target specified
[  471.882946][T13258] FAULT_INJECTION: forcing a failure.
[  471.882946][T13258] name failslab, interval 1, probability 0, space 0, times 0
[  471.971850][T13258] CPU: 0 UID: 0 PID: 13258 Comm: syz.0.1300 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  471.971878][T13258] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  471.971884][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  471.971894][T13258] Call Trace:
[  471.971900][T13258]  <TASK>
[  471.971907][T13258]  dump_stack_lvl+0x100/0x190
[  471.971930][T13258]  should_fail_ex.cold+0x5/0xa
[  471.971952][T13258]  should_failslab+0xc2/0x120
[  471.971972][T13258]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  471.971995][T13258]  ? __proc_create+0x2cb/0x8c0
[  471.972019][T13258]  __proc_create+0x2cb/0x8c0
[  471.972041][T13258]  ? __pfx___proc_create+0x10/0x10
[  471.972063][T13258]  ? __pfx_can_rcvlist_sff_proc_show+0x10/0x10
[  471.972089][T13258]  _proc_mkdir+0xb9/0x210
[  471.972110][T13258]  ? __pfx__proc_mkdir+0x10/0x10
[  471.972131][T13258]  ? can_init_proc+0x3a5/0x4b0
[  471.972151][T13258]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  471.972173][T13258]  canbcm_pernet_init+0x4d/0xa0
[  471.972194][T13258]  ops_init+0x1e2/0x5f0
[  471.972279][T13258]  setup_net+0x118/0x3a0
[  471.972296][T13258]  ? __pfx_setup_net+0x10/0x10
[  471.972313][T13258]  ? mutex_init_lockdep+0xf1/0x120
[  471.972333][T13258]  copy_net_ns+0x46f/0x7c0
[  471.972353][T13258]  create_new_namespaces+0x3ea/0xac0
[  471.972376][T13258]  unshare_nsproxy_namespaces+0xf2/0x220
[  471.972396][T13258]  ksys_unshare+0x438/0xab0
[  471.972418][T13258]  ? __pfx_ksys_unshare+0x10/0x10
[  471.972437][T13258]  ? xfd_validate_state+0x129/0x190
[  471.972460][T13258]  __x64_sys_unshare+0x31/0x40
[  471.972480][T13258]  do_syscall_64+0x115/0x840
[  471.972501][T13258]  ? clear_bhb_loop+0x40/0x90
[  471.972519][T13258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.972534][T13258] RIP: 0033:0x7fb07b99ce59
[  471.972548][T13258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.972562][T13258] RSP: 002b:00007fb079bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  471.972577][T13258] RAX: ffffffffffffffda RBX: 00007fb07bc16180 RCX: 00007fb07b99ce59
[  471.972587][T13258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  471.972597][T13258] RBP: 00007fb07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  471.972607][T13258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.972615][T13258] R13: 00007fb07bc16218 R14: 00007fb07bc16180 R15: 00007ffda77705b8
[  471.972635][T13258]  </TASK>
[  472.396388][T13265] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  472.595029][T13260] ima: policy update failed
[  472.621330][   T30] audit: type=1807 audit(4294967322.099:16): UNKNOWN=nl80211 res=0
[  472.674905][   T30] audit: type=1802 audit(4294967322.109:17): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1302" res=0 errno=0
[  472.749238][   T30] audit: type=1802 audit(4294967322.320:18): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1302" res=0 errno=0
[  473.023821][T13270] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  473.521835][T13281] Setting dangerous option i915.mitigations - tainting kernel
[  473.705864][T13280] FAULT_INJECTION: forcing a failure.
[  473.705864][T13280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.767350][T13280] CPU: 0 UID: 0 PID: 13280 Comm: syz.3.1306 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  473.767377][T13280] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  473.767383][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  473.767392][T13280] Call Trace:
[  473.767397][T13280]  <TASK>
[  473.767403][T13280]  dump_stack_lvl+0x100/0x190
[  473.767423][T13280]  should_fail_ex.cold+0x5/0xa
[  473.767442][T13280]  _copy_from_user+0x2e/0xd0
[  473.767466][T13280]  get_timespec64+0x8b/0x1b0
[  473.767489][T13280]  ? __pfx_get_timespec64+0x10/0x10
[  473.767511][T13280]  ? common_nsleep+0xa1/0xd0
[  473.767526][T13280]  __x64_sys_clock_nanosleep+0x1ce/0x480
[  473.767548][T13280]  ? __pfx___x64_sys_clock_nanosleep+0x10/0x10
[  473.767575][T13280]  ? rcu_is_watching+0x12/0xc0
[  473.767595][T13280]  do_syscall_64+0x115/0x840
[  473.767618][T13280]  ? clear_bhb_loop+0x40/0x90
[  473.767636][T13280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.767651][T13280] RIP: 0033:0x7f3f02f5d68e
[  473.767664][T13280] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  473.767678][T13280] RSP: 002b:00007ffcd05a96a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  473.767693][T13280] RAX: ffffffffffffffda RBX: 00005555881f7500 RCX: 00007f3f02f5d68e
[  473.767703][T13280] RDX: 00007ffcd05a9700 RSI: 0000000000000000 RDI: 0000000000000000
[  473.767712][T13280] RBP: 00007f3f03217da0 R08: 0000000000000000 R09: 0000000000000000
[  473.767721][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000074447
[  473.767729][T13280] R13: 00007f3f03215fac R14: 000000000007418b R15: 00007ffcd05a9830
[  473.767748][T13280]  </TASK>
[  474.613719][T13281] Process accounting resumed
[  475.421952][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'.
[  475.965731][T13314] openvswitch: netlink: Key 4 has unexpected len 0 expected 12
[  478.266199][ T6703] Bluetooth: hci4: unexpected event for opcode 0x7c89
[  478.282611][T13377] blktrace: Concurrent blktraces are not allowed on loop2
[  478.578008][ T6703] Bluetooth: hci4: unexpected event for opcode 0x7c89
[  479.001463][T13411] netlink: 1856 bytes leftover after parsing attributes in process `syz.0.1323'.
[  479.095713][T13411] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  480.857878][T13451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1337'.
[  480.953362][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1337'.
[  483.316250][T13507] ==================================================================
[  483.324350][T13507] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0
[  483.332222][T13507] Read of size 8 at addr ffff88802cf5be18 by task syz.0.1345/13507
[  483.340097][T13507] 
[  483.342422][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.0.1345 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  483.342450][T13507] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  483.342456][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  483.342466][T13507] Call Trace:
[  483.342475][T13507]  <TASK>
[  483.342482][T13507]  dump_stack_lvl+0x100/0x190
[  483.342502][T13507]  print_report+0x13d/0x4b0
[  483.342524][T13507]  ? __virt_addr_valid+0x239/0x430
[  483.342577][T13507]  ? dvb_device_open+0x33f/0x3b0
[  483.342601][T13507]  kasan_report+0xdf/0x1d0
[  483.342617][T13507]  ? dvb_device_open+0x33f/0x3b0
[  483.342644][T13507]  ? __pfx_dvb_device_open+0x10/0x10
[  483.342666][T13507]  dvb_device_open+0x33f/0x3b0
[  483.342687][T13507]  ? __pfx_dvb_device_open+0x10/0x10
[  483.342709][T13507]  chrdev_open+0x234/0x6a0
[  483.342726][T13507]  ? __pfx_apparmor_file_open+0x10/0x10
[  483.342744][T13507]  ? __pfx_chrdev_open+0x10/0x10
[  483.342761][T13507]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  483.342791][T13507]  do_dentry_open+0x6ab/0x14d0
[  483.342808][T13507]  ? __pfx_chrdev_open+0x10/0x10
[  483.342828][T13507]  vfs_open+0x82/0x3f0
[  483.342849][T13507]  path_openat+0x208c/0x31a0
[  483.342870][T13507]  ? __pfx_path_openat+0x10/0x10
[  483.342890][T13507]  do_file_open+0x20e/0x430
[  483.342908][T13507]  ? __pfx_do_file_open+0x10/0x10
[  483.342931][T13507]  ? alloc_fd+0x476/0x790
[  483.342949][T13507]  ? do_getname+0x191/0x390
[  483.342969][T13507]  do_sys_openat2+0x10d/0x1e0
[  483.342990][T13507]  ? __pfx_do_sys_openat2+0x10/0x10
[  483.343014][T13507]  __x64_sys_openat+0x12d/0x210
[  483.343035][T13507]  ? __pfx___x64_sys_openat+0x10/0x10
[  483.343056][T13507]  ? exit_to_user_mode_loop+0xf3/0x670
[  483.343083][T13507]  ? rcu_is_watching+0x12/0xc0
[  483.343100][T13507]  do_syscall_64+0x115/0x840
[  483.343120][T13507]  ? clear_bhb_loop+0x40/0x90
[  483.343136][T13507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.343152][T13507] RIP: 0033:0x7fb07b99ce59
[  483.343166][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.343180][T13507] RSP: 002b:00007fb07c788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  483.343196][T13507] RAX: ffffffffffffffda RBX: 00007fb07bc15fa0 RCX: 00007fb07b99ce59
[  483.343207][T13507] RDX: 00000000000c8e03 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  483.343218][T13507] RBP: 00007fb07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  483.343227][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.343236][T13507] R13: 00007fb07bc16038 R14: 00007fb07bc15fa0 R15: 00007ffda77705b8
[  483.343251][T13507]  </TASK>
[  483.343256][T13507] 
[  483.604071][T13507] Allocated by task 1:
[  483.608131][T13507]  kasan_save_stack+0x30/0x50
[  483.612793][T13507]  kasan_save_track+0x14/0x30
[  483.617445][T13507]  __kasan_kmalloc+0xaa/0xb0
[  483.622012][T13507]  dvb_register_device+0x1d6/0x1e20
[  483.627195][T13507]  dvb_register_frontend+0x552/0x820
[  483.632534][T13507]  vidtv_bridge_probe+0x44b/0xa30
[  483.637598][T13507]  platform_probe+0x106/0x1d0
[  483.642269][T13507]  really_probe+0x241/0xa60
[  483.646756][T13507]  __driver_probe_device+0x22e/0x480
[  483.652026][T13507]  driver_probe_device+0x4c/0x1b0
[  483.657037][T13507]  __driver_attach+0x21f/0x5d0
[  483.661785][T13507]  bus_for_each_dev+0x13e/0x1d0
[  483.666617][T13507]  bus_add_driver+0x305/0x5b0
[  483.671278][T13507]  driver_register+0x1e2/0x360
[  483.676017][T13507]  vidtv_bridge_init+0x38/0x70
[  483.680896][T13507]  do_one_initcall+0x121/0x750
[  483.685643][T13507]  kernel_init_freeable+0x6ea/0x7b0
[  483.690850][T13507]  kernel_init+0x1f/0x1e0
[  483.695156][T13507]  ret_from_fork+0x72b/0xd50
[  483.699723][T13507]  ret_from_fork_asm+0x1a/0x30
[  483.704466][T13507] 
[  483.706765][T13507] Freed by task 13270:
[  483.710807][T13507]  kasan_save_stack+0x30/0x50
[  483.715466][T13507]  kasan_save_track+0x14/0x30
[  483.720119][T13507]  kasan_save_free_info+0x3b/0x70
[  483.725126][T13507]  __kasan_slab_free+0x5f/0x80
[  483.729868][T13507]  kfree+0x223/0x6c0
[  483.733745][T13507]  dvb_device_put.part.0+0x57/0x90
[  483.738844][T13507]  dvb_device_open+0x2ba/0x3b0
[  483.743590][T13507]  chrdev_open+0x234/0x6a0
[  483.747990][T13507]  do_dentry_open+0x6ab/0x14d0
[  483.752732][T13507]  vfs_open+0x82/0x3f0
[  483.756784][T13507]  path_openat+0x208c/0x31a0
[  483.761355][T13507]  do_file_open+0x20e/0x430
[  483.765839][T13507]  do_sys_openat2+0x10d/0x1e0
[  483.770501][T13507]  __x64_sys_openat+0x12d/0x210
[  483.775335][T13507]  do_syscall_64+0x115/0x840
[  483.779913][T13507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.785782][T13507] 
[  483.788084][T13507] The buggy address belongs to the object at ffff88802cf5be00
[  483.788084][T13507]  which belongs to the cache kmalloc-256 of size 256
[  483.802111][T13507] The buggy address is located 24 bytes inside of
[  483.802111][T13507]  freed 256-byte region [ffff88802cf5be00, ffff88802cf5bf00)
[  483.815807][T13507] 
[  483.818111][T13507] The buggy address belongs to the physical page:
[  483.824515][T13507] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cf5a
[  483.833273][T13507] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  483.841749][T13507] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  483.849273][T13507] page_type: f5(slab)
[  483.853234][T13507] raw: 00fff00000000040 ffff88813fe30b40 dead000000000100 dead000000000122
[  483.861816][T13507] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  483.870392][T13507] head: 00fff00000000040 ffff88813fe30b40 dead000000000100 dead000000000122
[  483.879053][T13507] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  483.887701][T13507] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  483.896349][T13507] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  483.904990][T13507] page dumped because: kasan: bad access detected
[  483.911385][T13507] page_owner tracks the page as allocated
[  483.917073][T13507] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14118929140, free_ts 0
[  483.936792][T13507]  post_alloc_hook+0xfd/0x120
[  483.941477][T13507]  get_page_from_freelist+0x11a6/0x3410
[  483.947019][T13507]  __alloc_frozen_pages_noprof+0x27c/0x2bc0
[  483.952906][T13507]  new_slab+0xa6/0x6c0
[  483.956957][T13507]  refill_objects+0x277/0x420
[  483.961619][T13507]  __pcs_replace_empty_main+0x375/0x650
[  483.967151][T13507]  __kmalloc_cache_noprof+0x493/0x6f0
[  483.972505][T13507]  bus_add_driver+0x92/0x5b0
[  483.977076][T13507]  driver_register+0x1e2/0x360
[  483.981820][T13507]  usb_register_driver+0x21c/0x3e0
[  483.986995][T13507]  do_one_initcall+0x121/0x750
[  483.991741][T13507]  kernel_init_freeable+0x6ea/0x7b0
[  483.996931][T13507]  kernel_init+0x1f/0x1e0
[  484.001265][T13507]  ret_from_fork+0x72b/0xd50
[  484.005847][T13507]  ret_from_fork_asm+0x1a/0x30
[  484.010597][T13507] page_owner free stack trace missing
[  484.015939][T13507] 
[  484.018266][T13507] Memory state around the buggy address:
[  484.023871][T13507]  ffff88802cf5bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  484.031910][T13507]  ffff88802cf5bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  484.039945][T13507] >ffff88802cf5be00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  484.047979][T13507]                             ^
[  484.052800][T13507]  ffff88802cf5be80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  484.060840][T13507]  ffff88802cf5bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  484.068889][T13507] ==================================================================
[  484.821948][T13507] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  484.829169][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.0.1345 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  484.840089][T13507] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  484.845255][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  484.855287][T13507] Call Trace:
[  484.858545][T13507]  <TASK>
[  484.861454][T13507]  dump_stack_lvl+0x100/0x190
[  484.866114][T13507]  vpanic+0x552/0x970
[  484.870074][T13507]  ? __pfx_vpanic+0x10/0x10
[  484.874555][T13507]  ? irqentry_exit+0x24d/0x970
[  484.879303][T13507]  ? lockdep_hardirqs_on+0x78/0x100
[  484.884490][T13507]  ? dvb_device_open+0x33f/0x3b0
[  484.889419][T13507]  panic+0xd1/0xe0
[  484.893117][T13507]  ? __pfx_panic+0x10/0x10
[  484.897513][T13507]  check_panic_on_warn.cold+0x19/0x34
[  484.902865][T13507]  end_report.part.0+0x3a/0x90
[  484.907616][T13507]  kasan_report.cold+0xe/0x18
[  484.912277][T13507]  ? dvb_device_open+0x33f/0x3b0
[  484.917199][T13507]  ? __pfx_dvb_device_open+0x10/0x10
[  484.922475][T13507]  dvb_device_open+0x33f/0x3b0
[  484.927225][T13507]  ? __pfx_dvb_device_open+0x10/0x10
[  484.932494][T13507]  chrdev_open+0x234/0x6a0
[  484.936890][T13507]  ? __pfx_apparmor_file_open+0x10/0x10
[  484.942416][T13507]  ? __pfx_chrdev_open+0x10/0x10
[  484.947347][T13507]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  484.953659][T13507]  do_dentry_open+0x6ab/0x14d0
[  484.958417][T13507]  ? __pfx_chrdev_open+0x10/0x10
[  484.963352][T13507]  vfs_open+0x82/0x3f0
[  484.967413][T13507]  path_openat+0x208c/0x31a0
[  484.971997][T13507]  ? __pfx_path_openat+0x10/0x10
[  484.976926][T13507]  do_file_open+0x20e/0x430
[  484.981418][T13507]  ? __pfx_do_file_open+0x10/0x10
[  484.986438][T13507]  ? alloc_fd+0x476/0x790
[  484.990751][T13507]  ? do_getname+0x191/0x390
[  484.995246][T13507]  do_sys_openat2+0x10d/0x1e0
[  484.999909][T13507]  ? __pfx_do_sys_openat2+0x10/0x10
[  485.005093][T13507]  __x64_sys_openat+0x12d/0x210
[  485.009928][T13507]  ? __pfx___x64_sys_openat+0x10/0x10
[  485.015284][T13507]  ? exit_to_user_mode_loop+0xf3/0x670
[  485.020733][T13507]  ? rcu_is_watching+0x12/0xc0
[  485.025487][T13507]  do_syscall_64+0x115/0x840
[  485.030065][T13507]  ? clear_bhb_loop+0x40/0x90
[  485.034724][T13507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.040596][T13507] RIP: 0033:0x7fb07b99ce59
[  485.044989][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.064578][T13507] RSP: 002b:00007fb07c788028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  485.072970][T13507] RAX: ffffffffffffffda RBX: 00007fb07bc15fa0 RCX: 00007fb07b99ce59
[  485.080920][T13507] RDX: 00000000000c8e03 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  485.088881][T13507] RBP: 00007fb07ba32d6f R08: 0000000000000000 R09: 0000000000000000
[  485.096830][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  485.104793][T13507] R13: 00007fb07bc16038 R14: 00007fb07bc15fa0 R15: 00007ffda77705b8
[  485.112753][T13507]  </TASK>
[  485.115828][T13507] Kernel Offset: disabled
[  485.120137][T13507] Rebooting in 86400 seconds..