last executing test programs:

10m3.930562747s ago: executing program 2 (id=312):
mmap$auto(0x3, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0xa2000, 0x0)
r1 = io_uring_setup$auto(0x7, 0x0)
r2 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0x8c, 0x3, 0x0, 0x1, [@nested={0x85, 0x4, 0x0, 0x1, [@generic="4cf5c2317fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f"]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1\x00', <r5=>0x0})
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000012c0)={0x225c, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0xd9, 0x3, 0x0, 0x1, [@generic="b7bf1507a5524f57f04caa27ec936623552cd1de561ab9ab179f2fe309f55a4a4d6b22b404a61ff1406c1a0b67d5ebe0053952db1661ee5d05e25bc6c68842d6e9b7fc2e5bec4c44556e1d91efb1060b00ad6aa06bb8715eccbe961a12170786e3c6dd", @generic="28c7a35763314555e9840ebe8dee20f6e0986ff2129854617b9b27dee0c1657283f94426b9aca562992813a0dd653bf5f85cf921da16", @nested={0x3b, 0xb4, 0x0, 0x1, [@generic="867ce3152f6374979a4e354ca0ef8b821d4f0c982bca05fe279603aa063e15b83f1cbd680b1d33508ad195cb12ca99862c3f927227021f"]}]}, @MACSEC_ATTR_OFFLOAD={0x1084, 0x9, 0x0, 0x1, [@generic="18407e82a6fece5f5d93086f1d197f7e6643b86d441205471e", @nested={0x8, 0x46, 0x0, 0x1, [@nested={0x4, 0x2d}, @generic]}, @generic="1d35addc0ca25dfc27337e292b20530281ec20fc51893dfb427a8e91259016410a0774c417be21634123ed2a4a233643a34088d855dd17be0a60f3cd4f71703d711c8b0a522b0ac799568bef3487a745b3e1f7c0eba447d9f224f7471c817db1f09dcb27d3722adb73f976c8be4cc0747b59585386ecc30aab771f9b53ba7565f962313de901dd3240b12dfc1ebc9e530801cf735036c14b14db076d539333886773708216e177440febebe7d9017c92b8bc5c9795047ddecdfc48bce1744347fe34220aa91838141743f4e8c54cc90e5f8795c83fe5ade31e8e54d5003d525299479b93a40a8bb27d9f7f0615b88786714b86f268135b94abea30ef1642954bc22e7a141f50ff0e39133b757c4ce1f89be83aac04a2a507026649366948ddbc0d9f1f7086221f080d0c1415bd642289690d267f7c760ead86c0cde307643b76c125e786a7b43babc77a7d0c4dcdd7b4f5df609e0f994ab7f55681a9217fcff781be8514b5062bab9a4a08bdfe3cf1665416b315a9289d9b3c4fa341d7a116764d4cb3f6a200d0baa6b6d488d46436fed5eda30499e366aa4e2f65d7adc3c136e7112d5eb283d695eb6babdfc318f16930391a11ce9b3ab60fc00a08c444877ba0bed826a79b09d50c28e3e825df98bb9835e5d20cc5f8fbe50e7f55c052cc8807e920cf5b2e0c3ca73773ca779af4beb71ab0126a7d61053f99baea6895583d5c2619adfc4caa2f15c474410017eae0eabd19055e1372626ab2e675a73649eef33c484098824fb0629440cddc177f8c2e8da34c96fdabc52b1afff186f43d35da716ace96763c933f3e5093943df7067c3dabe850694d5e5bb9d979e1ad3df5eaa3bc6d406d9671ea737fadc9748151e4a1bbd79df2026e2629db2e4d157efc6dc9dbcbd4ca8bdebe2a79ed650ee4b9b6d52509d4babfda1a998423f945a2a81a60f7f530a3aa0000d91e995f55097517ded11802f95cc8b9e2b2c86140cae107fb60ed84f876adaf8589c85485b802d4f8125f136ba5b54d2bc436a29b45911dc973cfd3eaf838ac120a9e115ea5d48ad75c70051c7a2018afa4c75eab235b31289dc6f3e1c270f12a8194ebe52711fab8bdafb17a2a782c5e8056b5445ee9150dc8c31e962789a55f9bacc17044a8768904872545666d3fb76a410b2e6919d3ca21475622af2964aa2014a90d7aae806164d2e2f20be87e6f2d67d62a89b934f652cb3950778772972f55c5c3a5d8dd244fc00fe67598d833aae9f6a7308ff0041241fabdfb107a3a3e9892709fe70993485741e377129f8c0d8151a185a6df9d5cccbe0f65865498a6d1f1d0fa98877bfe078f7a5a9f5681833f192f4c8a339df2871f2ea5f713c2a0b10452a61ef7ba110a152193b3fd53c7606a6bfb064f88efb45fe3254c6b22b3989ad9991a7ec1ce0cb23a94466712eab861d3958ce5b7350ff3dcb1658cc38e67e04f1553954b396b612d97d131fc3246d97260c7d0d2df654aba4f37a10f46a5354dfff71efadfd48916910c9825b45bfe8df84c9196585fb632810da4b381e1dbffed213484dc8bc5b727eec21f9588a9024bd6d59a0e601f8c2221acf2b02e7ec10a74774dfbb0deacb3e13a580cd68c0fb199142664e7425e96d82c1801860076335f1d9350a93fa582262a7a2cc48cd0a67a597361dfce7e77b651f020a2bf49a701e48a86ac350b6ec1402e12887f2fc6e43b43e83f7525ec4512d62f4cb39b80302bef749079219dcb21eff0eec7834f13e7d286e6d4a1ff52de77402c6e4e25b2db7491c36e1ebe40e5f045adde3c81b37b76b7feaf5c3a952085ac490d6b48ad6bb7d0380950a46b483e8cefa7ab301c4ff638bd64d8db4756bac487cb917535c0e231f2d0ef709d626546e9417ade1dc092cab3bf814e3e1fa3c4c6baa4628323ee065e7b30539abc497ae08dfe5a1e49d14acf6c8728191944b3816ed113458f9349bfda4a054f802d486672ddaa1f813f11194606355941d505ce47d1b8272218ad8a2da8ccd68f965a0cb5698f06293edba6cbeecee7d14b8fd5d2077f27dbbd4643d1da67f5267e57f6cc4803dbf73656c0fdac93e0586f84d84b2507a4098b03f725ebbdc479bdbf25f4e32a71343e316e4d753117065f88835f666a59a7302ac8c94bb39fdfebf892cdf3f5044f374050d2d4a512d98cc2377ed8d5092f797e46790afc9117a3c4c57859f57c4a5e3eef67ae47b82de8f091424eca28d760004edef88cd89a1e1b2ef3c797c5bdaf9791d6f63cdbbf16fee1c2da955dde8f9e7ced53c8b651095b25994f31473b59fdfa3a2d95df5e4ab05b2fa252f06a823cacfd045859154c8a8df3ce98e3176ef8937a2a81a65fc7d27eb372d4c91a60149a2fd813ce7ef531035c401d4abe7b7863bdaeb671891178350ba28bc38b06c9a05ef2dd910666d439d71dde54c1ea1d65d0f4fb14e8d7add6b8d7bc7b29f2e6356cb08ece39654610e7fdbe1cca6d734656bcc3eadd7a43c09b2743480485e77014d09b5c913224145305e0c3cd090ff8474002058fff8eb8db75f4d98fd6e4755b4196e541eb14416644bc104c17b9f36b66500f6746f07861f98a216bbfeeb811047a68a71ed6b7149162b2fb5d46d4efde4a6a50db4b8a7d187973394f7205b0943721cc05c3dc1e448e10d4958e4ed928e9e83bfd536891e1fc9cff0b92064adf99de1eea3a570660bea1e6a340a085d84baf14dad4561e690358c64961c883eac7e30ba5b013f9928f955be513d31c7e17337142bceba8bec34138c5d9f493104972ba04f1053466c1d495d5d53627860cf7d5bae7420aeb626de70ba9f8b0d5437c41303d20b363f73ebb3b0c2d3ba209cfa33e348de1a025e03577f8a0ef239253813786f8292a2e6c86e02cb25ee2b76ca72108f71cd22cbc81134de0d2ae352984e7f55b01df50ec0fe596e122ef21ef54c5c360666ee8c59c500fdede292bc9cc276be45c8c6abf5f9c2e3c2d431c80c82fa1351e7eeb09e225251020a37e2956496d197d721dc8ab7a9f44da55a710ae8e3c41b5f34dbd8a52dc0759d5b9008c00c3ccc2865d47fb3dfbf9b59197c7c60e7b7ca6d0899502e6f21f9812b1e5ce2f09c71db62ec1075dda37bebfc687f9098673ee8ef06e24fa610127e534683dcc68553ad906ff9b36bf142229efa7bd6b5f21a886562b57d182d33a80e021446047db11a2cf7adcdf9e2423317ca24314aff192882c129fcfd63b054f7088c5d44290ceffeae35baddbb54fa5951c65fa6d919bb5eeb97250808aa43c73bed37b5ae014fb26eda69e791dd4cec21d0031bdae32bd5a7adef51a0292b0bd5b549bd5ab5d248ab3330f97669ba214084310e7060c9fd46f45460c420cc99faeb3ec44f43afe42b813f11e6d5123a80d28e401498e724bac9f8ff0fb86703ae8fcc2cfa38571049ad54345476da9e421467d7924c54ca7c906eaf60cfe2ffa3fe59dc68f0e088284f349bbe1fde37c02c119b986e0962a68117a638bcbf5e1938cbde6a5b87c9fc404b2483b2910ce70669034f9373776050a2d3c09f4bb070e91f7c3658166273ccf977208ab8530f4fb18b7664415fb96c33ea7220feb148747f328a984221d87f7b3a3f2ba1c82e1cb81c0ea4f914123a835a16fc598174f205700a1f85c89838f4886a810b1334979babe64cb77690ef8509729f3184a044e3e5170112afc15b5ea2256a49c7f61998829b74b8205bf2b2cb086892ef59640ca0911303b0c5a4f71f86b24c33547cfbbe461c767bac3cc60d2f11b864c2cf41e3f0228df5f5b92357112eba7608fadbf2336116e37a0ebe42224719872b148b162d5b12f0c06653526244f1bb0c26e87d2e40ef91164aa1859dc857b0dd34b2e3237f9fd5fd5e2b1bf3ee072068f21c9fe9b98053a2916e0baa110e2105a71295cf780957e71430626f29b8c83cd1d0c7469350afc2a23c1b60b1a5d6bfe2404e0d41d73d603f39e7566e1d6720e91ce6716377491428158b4cbd8ef85c0ae34d6fac35590dc59674ac398b53fd4bb7f78a8284e88e054121bc029f0d277aac196cf079bf145ed9774ba5b70ba8e18fe2fe4f93d3c9be48b2628a615244435dc19f7b73665616d06e1ff2b1e4a5b90ae5ca4c61ef47faad0fb9da8988209c2299bf85cee556162467da7c0dea44d5eb2cc72c0825a3d51ad3804c2a803b42a836b805b9c216bb0824abdc685a1b6c12fb76e75859f514d727732edefc963afb37b0de350b22456c885aaff2e8936b74d78c1aa45aaff65d2ad45ae1b5b0252f16c840d9ca00f6c5c28274af50357d8ea4e2244285e855b3a13252196cb686be39c8371b88fef73dfa3b4ef975f2c18de8bc16b47dbe87d572a415cc369fecc77731f93d63996f5ca93dddba65feb51e32e0e32395b9b0996713e7f9fc4d0cc7ee4fa0f508b5878c71ac7465ae5ce906127dbe40331b58495b984a570f8028241a7b40716c5334e887ee14529f7f0c5f5c66989f85a0e970f75a798436e6bb2915054004fa284c831790c4edbe2fbc3818d6770c5fc4eb1f97071bf0ae2f38bb023de9cbc970f287404dda0420a9d3d543ab703605c4d976008d4ecbc1be281ca41e8a982dfefc245dd9cf62336981f941443759e147e8428b9a1314c5b7e54f750a0a009a03d34d7e598ed0faa08c276277ef3443d8bf48e8099c0bda74c083ac0ff52502fc3ba825e6240d15939f03dc8aa7d831d3908ccbb2830fc6aab5b4a1685becb1dbe9a3d950bb462538bc8ca120c25cd005076af6ba4c0ec01d115aedaaea3b0ab9fa130880dca026de1dd40e71a050b7aaf192fd33425b2580ad37035454ebb062554fafb9b5b177e89d1e957df299959478c025357d0cae9a5249cf08abe19d4b376e1d30d5dd71829ea2a3978a28930f796e4f1a3fd21538cbc5a509503620ae9e526b3cbe17999fbf2bb941c1bd8587c9b4f9caaf2c4863f79574bf2ee69c2c953796034f33617ab90dd6e07079e018ac0bee38534782cf9c2bb8c7031caff76c502d07980d69ab930216a1023fa47f2eb6cdba741f0c3d58c2ef6821b15b0ed0d3e4c471e6274687cc0a83685f1a27c3531b54b520a3509ed6c4babfb2fa873028e77bb57ba3222f8d30cc1ca69ca8390478244260f65a67c354f1fa9c5dd6cac9ed7b69ac443d9bb64d01ed7013507d9b555aaa3966bd8c479c359d294faed8ebde3c2cb85df70e85f31a18c2aa3847d7e3b585fc4164b014509ebb6622f4e1120e02ffd30b53a8853aa23c41ab5de4ae72052ad21a8e4a8cf2449c82ee1a9beb0ac38fde2f0e3ede435349835178f7e9faa593bda7c1b3c9a6f9c33e10ca6041a30e1d3e9b54c353fc0d4ea487759d9c920f87861a1c93de0326f57a923cabb39ca32611674f07a5022fd352d18b07035748f8462ca266953ff07cdba0a7066ef4a7be94b8d0129c6e5fae37762474e161338033944f533bda852b864e064c213cdab6e88a2549d01afc0490fae2d9cbc2fa908b238871a4974acca6ba6ff5a75e06f53d118271ca3b34264e650d1fb2c37987441104c137c64226f06c4f08a3717967cfcd05b168d2341dcf0ce02ba4ae614bf36313bbbfee4f06daae83ec11289f0bbb250de1613512eb9b6b2a6fe7dc4a11bfe01cae863024dd36fb9570ed3f4eb551b02852590ea2a5442ddfbd892e5d1eb56ecc354232984ef9f5a6c897a3b0570ba634d04947998358c2898a9587101abbd8edae926c97feebffced3bacd77dcf908b8cf47659d4f988a0b9aeadddc753b5a3304acae5265f4017fe", @generic='V', @generic="bde2fe701be02537a6c0029a3c40708b065975b8d363a541b5c1ae4b066e1ae5d5d3a1c4b0f1baefa123a59902249a81650f2971e08b498573306c36af7fa26b69a9845997a7125d916c351d225f17a7a4551326cf5814d45e10477356fa"]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}, @MACSEC_ATTR_OFFLOAD={0x10de, 0x9, 0x0, 0x1, [@nested={0x1054, 0x6d, 0x0, 0x1, [@generic="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", @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x153}, @generic="d4656a53e516ef02be3b5eb3", @generic="9a8e889accdf856a97ea12907f828f1a070a3908cca3f5bb5b817d342dbe9263b37134d6be45655b184df25bd1a6752a8f0d5d9778b1446a"]}, @generic="8e1ab541b90d80f2ea52b46bc73405d258e2f59bbc492cd246f5147a7b33f15dccbf55e7f32d124d8ec9ae8820f1496c03e8788bb2", @typed={0x8, 0x84, 0x0, 0x0, @u32=0x1307}, @generic="ddfc7dd36f7817518f4b707fd7e8103ac81f2d32a47f83250b3cabfeb2b53af2943bc456c2a496af5568d8f2ce3391f122b86fa4488ec2196e9ad05c2e5606ff12b49fc33957332ad9"]}]}, 0x225c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
socketpair$auto(0x3, 0xd, 0x8dc2, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0182, 0x0)
ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r7)
ioctl$auto_KVM_CREATE_VM(r6, 0xc048aeca, 0x0)
ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5411, 0x0)
socket(0x1, 0x6b3ecc8736f1d9e, 0x10b7f21c)

10m2.484397123s ago: executing program 2 (id=319):
close_range$auto(0x2, 0xffffffffffffffff, 0x2)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x5, 0x0)
socket(0xa, 0x801, 0x84)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c)
socket(0x10, 0x3, 0x6)
r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0)
read$auto_ptdump_curusr_fops_(r1, &(0x7f00000001c0), 0x0)
clock_gettime$auto(0x2, &(0x7f0000000000)={0x7, 0x7})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x84)
r2 = epoll_create$auto(0x8ca0d1a)
epoll_pwait2$auto(r2, 0x0, 0x9, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140), 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x20000884}, 0x40000)
write$auto(r0, &(0x7f00000001c0)='/sys/kernel/debug/page_tables/current_user\x00', 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)

10m2.317139941s ago: executing program 2 (id=320):
mmap$auto(0xffffffffffffffff, 0x80000001, 0xdf, 0x10, 0x401, 0xb) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x3) (async)
r0 = socket(0x2, 0x5, 0x200006)
lsm_list_modules$auto(0x0, 0x0, 0x0) (async, rerun: 32)
close_range$auto(0x2, r0, 0x0) (rerun: 32)
socket(0x1d, 0x1, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x2, 0x5, 0x0)
setsockopt$auto(r1, 0x20020, 0x640d, 0xfffffffffffffffe, 0x4) (async)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001240)=""/4121, 0x1019)
open_tree$auto(r2, &(0x7f0000000040)='./file0\x00', 0x5) (async)
mmap$auto(0x0, 0x2020007, 0x3, 0xf8, 0xfffffffffffffffa, 0x7ffc) (async, rerun: 64)
pipe2$auto(0x0, 0x7) (rerun: 64)
r3 = socket(0x2c, 0x80003, 0x0)
setsockopt$auto(r3, 0x11b, 0x9, 0xffffffffffffffff, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
read$auto(r4, 0x0, 0x80000000) (async)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x5) (async)
unshare$auto(0xfffffffffffffff9) (async)
symlink$auto(0x0, 0x0) (async)
ioctl$auto(r2, 0x1, r3)
fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) (async)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000016e00)='/dev/ram6\x00', 0x2400, 0x0)
ioctl$auto_BLKBSZSET(r6, 0x40081271, &(0x7f0000016e40)=0xcbb)
write$auto_proc_loginuid_operations_base(r2, &(0x7f0000001100)="5ecc6f1dad1f1766622deea226d886ae76d77d3a8b0452ee0853643e8e8ea84e723b9601a7133873700795a05a52019e2428a4e0c02edac66980c5298243444cd1d26c6bd76adcb0379cd548e00dcebb1005ce43902adcc4569be9a0954a163edcce4eb3b69604b26f028eea9c2d71b5e1b66b9d1bc7d5ec24fce68d79e001bc168fe87cafa3b35e70eea5f0b1c029c4cb2d6e5a55134bf5694620ea2de4f9af4a4ec603c5d968107ee881d21e492f240640426e8e2fc7051d0e97751973ff1832bcb0add1a71d85b646611bfa7febcf9a7c38938c9619977d06a952134f01ebf0c3d30145d55fe6e68547d0040fa8916149623821cb14097f885420", 0xfc) (async)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)

10m2.099101312s ago: executing program 2 (id=322):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
unshare$auto(0x40000080)
r0 = socket(0x10, 0x2, 0x9)
sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000008f89f3b90a0000"], 0x5f}, 0x1, 0x0, 0x0, 0x20008804}, 0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x10, 0x2, 0x14) (async, rerun: 64)
socket(0x11, 0x80003, 0x300) (async, rerun: 64)
socket(0x2, 0x3, 0x100) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x80003, 0x0) (async)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x48001, 0x0) (async)
socket(0x10, 0x2, 0x0) (async, rerun: 32)
socket(0xa, 0x2, 0x73) (async, rerun: 32)
io_uring_setup$auto(0xa, 0x0) (async)
socket(0x1e, 0x1, 0x0)
pipe$auto(0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x500, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) (async, rerun: 64)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82000, 0x0) (rerun: 64)
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
socket(0xa, 0x5, 0x0)
socket(0x10, 0x2, 0x14)

10m1.411007513s ago: executing program 2 (id=325):
r0 = socket(0x2, 0x80802, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f0000000080)={0x13e0, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x8}}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x13b9, 0x2d, 0x0, 0x1, [@nested={0x233, 0x52, 0x0, 0x1, [@nested={0x4, 0xdf}, @generic="ec3e4e435c681988d52338f91f0d96fff44cc508059354225fd239de1698d048fd68dff946c4c3684d194c23ffc7f987790685ecc006a73e6aa83abb836a441fa7f3e5462b658a115131bdce189857eccc6fd689a73a8edf63e4cc57be364f7fb00801ec36f8f6e28a500fa31c762d39e00e706203d80220d28518443756f0954401bcabda469f29222b296066981b933112afff231be9beb0d8167c2d5c0dd0bea8c5e3272b64f22990876d72d8594e20d4149b1387227ffbffeffa9355d857911fa4f6fbab2fdae0567407ed2efc32", @generic="f70f9a394ecb4dd8113e3d661ea4ce0f797a6d1a6c768fbf447dd8efcf3495a6e4775f92ecb8339bb3c98f7eed87cff3b33721733750d1b467a958902c847ecda6e970c3d6bddb4198fb1bab02103b0aa6385b4050516b5834bee1c380cbd1454f29b95339d7cb95a298958158d1583ce7142de3f7fc66d08cdfd5541450c0ce4c71ec2d3fb9b43daa9e7102101885", @generic="2317f51e49ff0e2bfc39d192e5f8781bbc396c2245cc5dc528bb4026f9b771362fd601bc0dcb622b7975399434fd2df45cad577a8a4d6a1d445a1bc01f3dd1bec3ca5390849702f95ec75259fadde80e11ddc7e00829000955e670f7eb0d155b32c5594020ec7fc2ba52d4065ba55b3b7f6ff29151704bf74363e3059ac06eb9b3aa27c7eb5f4fdb03f72fb15d602bda85476600ce82729cc9cb3a3180c6a70986ed6613497f2456fe6ca90a263ade57bc1c9c695040bc0abceef7e26d99f3b4dce2d8ff79d51be5c87371ef"]}, @generic="a74ecdd7911fbe079806579c81f274bf68746fe6935677d44859f648a6ccc9f402c9769a8e4b83a640539e042ab58a750262f1ae5cb83471f65cde8d48b3214576c7572815a7fc44363a71df3f3cdf2486856f69cb25beb03446abe67878dd6d40a9f6c94fcd70981d2c", @nested={0x1018, 0xc, 0x0, 0x1, [@nested={0x4, 0x9e}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @typed={0x1004, 0xe6, 0x0, 0x0, @binary="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"}, @nested={0x4, 0xa6}]}, @typed={0x4, 0x138}, @generic="9bf911955c05b59222a537fe8b0459e214a174e5976cafe186bc1c1025dbcfe75d45fe6a6df18c3fe2d05cdeef3018312aa8d6ae834abb4c6b654e5ff6602e8c9d16fc80bfd6f499de910fb1148483fcc22c6e93fad3830a600349bbb6331d247dfe02e6e15fcc892d81937f4d937a7f6939e8d3594df4a34d7bef4957469a16a11fbd0ddd94d3b28174ca8abe61f9875e1a553e0468a85d313e415395a2ec4963dca9579d733860ba8040d2ae5bc389ad86fe4eab7ff684ab52fba5a7608925cb28894c1bf11dc26a7fa4be2bc754922055af570c0dcc0eb8210646ea501223fcdcd6de348385c4b5b7dd9a95c534342db64e", @typed={0x8, 0x17, 0x0, 0x0, @pid=r2}]}]}, 0x13e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0)
r3 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
madvise$auto(0x0, 0xff7fffffffff0001, 0x15)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x80, 0x0)
readv$auto(0x3, 0x0, 0x7)
mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff)
mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0)
connect$auto(0x3, 0x0, 0x55)

10m0.506900913s ago: executing program 2 (id=329):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000008c0)=""/61, 0x3d)
r2 = getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c)
flock$auto(0xffffffffffffffff, 0x2f0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r2)
ioctl$auto(0x3, 0xc08c5332, 0x38)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x7, 0x3)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101)
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004)
setresuid$auto(0x0, 0x7, 0x8080)
unshare$auto(0x8000400)
sendto$auto(0x3, 0x0, 0xfdef, 0x7, 0x0, 0x20)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0x129800, 0x0)

9m45.379188757s ago: executing program 32 (id=329):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000008c0)=""/61, 0x3d)
r2 = getsockopt$auto(r0, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x9000c)
flock$auto(0xffffffffffffffff, 0x2f0)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r2)
ioctl$auto(0x3, 0xc08c5332, 0x38)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x7, 0x3)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101)
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x5, 0x0, 0x8004)
setresuid$auto(0x0, 0x7, 0x8080)
unshare$auto(0x8000400)
sendto$auto(0x3, 0x0, 0xfdef, 0x7, 0x0, 0x20)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0x129800, 0x0)

9m5.67056092s ago: executing program 3 (id=563):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
ioctl$auto(r0, 0x9004b70b, r0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank2\x00', 0x68542, 0x0)
pread64$auto(r1, 0x0, 0xffffffffffff8000, 0x3)
mmap$auto(0x0, 0x2020005, 0x1, 0x200000000eb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'erspan0\x00'})
sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8}, @NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x24}}, 0x20000000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/a_hnp_support\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000240)=""/140, 0x8c)
write$auto(0x3, 0x0, 0xfffffdf2)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x5, 0x0)
pipe$auto(0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55)
io_uring_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x141200, 0x0)
ioctl$auto_SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x23, 0x5, 0x0)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)="000004")

9m5.356501074s ago: executing program 3 (id=565):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x5, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) (async)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x101, 0x0, &(0x7f0000000040)})
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000)
r1 = socket(0x26, 0x5, 0x0)
close_range$auto(r1, r1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/video64/dev_debug\x00', 0x490702, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
getcwd$auto(0x0, 0x7)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) (async)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x2, 0x3, 0xa) (async)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x40103, 0x0) (async)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x40103, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x4040, 0x0) (async)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x4040, 0x0)
pread64$auto(r2, 0x0, 0x8100000041, 0x413e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0)
r3 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0)
write$auto(r3, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91<x\xe6\xc3q{KWa\xc6\x7f\xc7j\xa7\xaan8\xc3\xb5%\x8d(\x85\xcc&GH\xf4\x06\xda\xc4\xcc\xb5U?\xf3a(yG\xe2\xd7<W\xa1\xa5\xf2\x12\xdb\xca\xca\xf3\xd9\x95\x1d\xe5\x11\xcb\xdf\x85\xa3vU]?M\xd4\x9d\x10\xcb\x15\x92gp%\xae\x14`da\xe0\x90\xe3\x04q\xfaUtK,`V\x02H\xb4T|S\x12\xbap\xc0u\xa0\b_\x8f\xa3\xfcGM\xc7_\xaff\xd5C\x17\xea\xf1S\x19\xde\x03\nr\xab5G\xf3\x1a@+l\xfcH]o\xd3\xf8\xa9\v\x85\xa3\x8b\xd7\xa70I\xc0<b\xda\xce\x03\xac*]\x10\br\b1\x19\xf9\xd2b\x12\xb6\x81_h\f5\xac\xe8\x99\x85\xe9\xdb\xc6\x1e%\xba\xfc\xaa\xc2\xa0\xf9\xa4<\xc2\x11\x96\xdcB\x00\xa4\xc3\x17g&1/b\xca\x95\xcd\xcc\x8e\xaa^3H\xad\xbc\xc4Nv\x15\xa0d\xdd\xa1\xc8\xbe?\x98x2HT\x1b\a\xe2\xbf\x134\x13\xfc\x12\x05\xc4\xdd\xdfr\xe5]\xe5\xe8Z\xae_\x96=\x1e\xdf\x00\x14B\xbd\xab\vT\x16\x03C \f\x9e\x9a\x8f\x94\x97(?f\x00\xfb\xfd\xc4\xfd_\xee\f(LBj\x1d\xbc;\n\x9f!\xc4\x8b\xbd\xf9\xa2\xa2\xac(Te\xa2\xae\\\xd6\x9c^\\\x891\x9bI\xdc\x7f\xb5\x87\x0e\xc3\x811]\xa5\xa0\xd8c\xb7B\xb0\x19\xb6\xd2\xcaw\xe7A\xd5\xf8\x90t\xb6+\xd4G\x06/\x10\x98z\t\x8f{~\xa7\x1fC8B(\xeaq\xb0\xb2\x83\x88\xed\t\x86\x94\xedB\xaf!\x04\xb3S\x1a\xe7\xb4\x89\x85\x05\x95`\x9a\xa6\x99\xd76\x16\x93\xf4\r\x82:_\x86\x12!\xae\xea>n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002)

9m4.287016245s ago: executing program 3 (id=566):
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x8340, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x101080, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
ioctl$auto(0x3, 0x400454ca, 0xffffffffffffffff)
select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, 0x0)
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x18280, 0x0)
ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x40, 0x5, 0xe4, 0xe8, 0x0, 0x2, 0x0, 0x6})

9m4.156111785s ago: executing program 3 (id=568):
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
pwrite64$auto(r0, &(0x7f0000000040)='+\x00', 0xfdef, 0x1ff)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x402, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, 0x0, 0x58)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vidtv.0/i2c-0/dvb/dvb0.dvr0/uevent\x00', 0x183800, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x4, 0x200000ffff, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2)
io_uring_setup$auto(0x59, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
read$auto(0x3, 0x0, 0x8080)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
fsconfig$auto(r3, 0x800, 0x0, 0x0, 0x0)

9m1.773226874s ago: executing program 3 (id=577):
mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0)
syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800)
unshare$auto(0x40000080)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0xd0, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x3c, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afff"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x4a, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e3", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0xd0}, 0x1, 0x0, 0x0, 0x91}, 0x10)
fcntl$auto_F_WRLCK(r2, 0x7, 0x1) (async)
r5 = fcntl$auto_F_WRLCK(r2, 0x7, 0x1)
splice$auto(r5, &(0x7f00000003c0)=0x3, r3, &(0x7f0000000440)=0x3e, 0x80000000, 0x5)
ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0)
ioctl$auto_SNAPSHOT_S2RAM(r5, 0x330b, 0x0)
shmctl$auto_IPC_SET(0x8, 0x1, 0x0)
getpriority$auto_PRIO_USER(0x2, 0x0) (async)
getpriority$auto_PRIO_USER(0x2, 0x0)
mlockall$auto(0x7) (async)
mlockall$auto(0x7)
mprotect$auto(0x0, 0x806121, 0x6) (async)
mprotect$auto(0x0, 0x806121, 0x6)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)
ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193)

9m1.286785535s ago: executing program 3 (id=580):
unshare$auto(0x40000080)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40, @remote}, 0x7fff)
r0 = socket(0xa, 0x2, 0x0)
mmap$auto(0xc8, 0xe2, 0xfffffffffffffffd, 0xeb1, r0, 0x8003)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0xc2800, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000100)="fb", 0x1) (async)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000100)="fb", 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x7fffffff, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async)
mmap$auto(0x0, 0x7fffffff, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sysfs$auto(0x2, 0x100000000000030, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
gettid() (async)
gettid()
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
getpid()
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0)
read$auto(r3, 0x0, 0x20)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (async)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x8000000, 0x0, 0xffffffffffffffff, 0x4]}, 0x1fe, 0xd) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x8000000, 0x0, 0xffffffffffffffff, 0x4]}, 0x1fe, 0xd)

8m46.122095202s ago: executing program 33 (id=580):
unshare$auto(0x40000080)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40, @remote}, 0x7fff)
r0 = socket(0xa, 0x2, 0x0)
mmap$auto(0xc8, 0xe2, 0xfffffffffffffffd, 0xeb1, r0, 0x8003)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0xc2800, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000100)="fb", 0x1) (async)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000100)="fb", 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x7fffffff, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async)
mmap$auto(0x0, 0x7fffffff, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x0)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
sysfs$auto(0x2, 0x100000000000030, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
gettid() (async)
gettid()
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
getpid()
ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0)
read$auto(r3, 0x0, 0x20)
sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x9}, 0x1, 0x8008)
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (async)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x8000000, 0x0, 0xffffffffffffffff, 0x4]}, 0x1fe, 0xd) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x8000000, 0x0, 0xffffffffffffffff, 0x4]}, 0x1fe, 0xd)

5.917745468s ago: executing program 1 (id=3100):
set_mempolicy$auto(0x2, &(0x7f0000000040)=0x73b5, 0x4)
ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
set_mempolicy$auto(0x2, &(0x7f0000000000)=0x4000, 0x1)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x10f080, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f00000000c0)="9ffb635b1996c8f42e048f70f55cc08b8c6e56fdf7117160574a5e172da6690973ed5f356569d25a7a1fbd55464b4dd60d67f5979482604ff48afcf905a46e8a13c0a142ad6596128d2eae18d1c23e77eee3a1c2c733ab023dd3096de1ad2cf8e6e8fdb958df29ce914d6af44ed41b", 0x6f)
mlock$auto(0x2, 0x1)

4.552737874s ago: executing program 1 (id=3107):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x7ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB])
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(0xffffffffffffffff, 0x0)
mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0)
rmdir$auto(&(0x7f0000000080)='./cgroup\x00')
prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0)
mseal$auto(0x0, 0x7dda, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0xffffffffffffffff, r1, 0xffffffff)

4.097623656s ago: executing program 5 (id=3110):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x80802, 0x0)
r0 = socket(0xa, 0x801, 0x84)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
r2 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8000, 0x0)
r4 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', <r6=>0x0})
bpf$auto(0x8000004, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1, r4, @relative_fd=r0, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc)
read$auto_i2cdev_fops_i2c_dev(r2, &(0x7f00000002c0)=""/242, 0xf2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000080)={0x24, r8, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='@):^\\/\\\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24040804)
bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf)

3.849276621s ago: executing program 1 (id=3114):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirty_bytes\x00', 0x8a042, 0x0)
sendfile$auto(r0, r0, 0x0, 0x48)
mremap$auto(0x5, 0x8, 0x4, 0x200, 0x8e)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) (async)
r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0)
shmat$auto(0x0, &(0x7f0000000580)='\x00\x00', 0xfffffffa) (async)
shmat$auto(0x0, &(0x7f0000000580)='\x00\x00', 0xfffffffa)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x1f, 0xfffffffffffffffd, 0x1ffde, 0x3, 0x6, 0x8000001, 0x9, 0x5, 0x0, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x1, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x8, 0x20000001, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYRES64=r1, @ANYRES16=r0, @ANYRES16=r4, @ANYBLOB="64473d01c96a7dbfe95fa552c337d95f50603bb05243172662ba7031f01ea2d916288d3d2840a91e91153f08fa1c57f931ad77684320821c9c5ce63a89124921fe3fa5da14f62ffc3c9096a9d39bd70a230ef7c405e69ba1e6bb850f84b98391031b3b69e8d068635fb2917fe754e5ab70faafbd246c11411d06", @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="9270e7bbde4173d9f58a413d5b869d1602279708e891e479c57c0fff0d4ff8daf73e8d95178157a73d80b731e6be404273ee7432a8c3ce0c026b65547e76d7c3c5f57495b12e01890b3600fe85a231feb84f362beffa67998a23c6017d7126faa02052896e64e4f20edc2553df0df317d4c7497f07780b966d38400824120503a407399f64b922621e9bb6e7df0fe000465cab57e6bde6f2dbd3e2ecea11b1ce338291b671eda272f1e0c57626bba78b091a09a6ca3f92945c4f9beca5ebf69a13", @ANYRESOCT=r2], 0x1ac}}, 0x40000)
recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x4, 0x6, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)
mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000)
clock_adjtime$auto(0x0, 0x0)
write$auto_rfkill_fops_core(r2, &(0x7f0000000040)="a5cac73806f9a7", 0x7)
read$auto_show_traces_fops_trace(r1, &(0x7f0000000640)=""/188, 0xbc)
r5 = socket(0x2, 0x1, 0x106)
connect$auto(r5, &(0x7f00000001c0)=@in={0x2, 0x3}, 0x55)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/bridge_slave_0\x00', 0x80801, 0x0) (async)
r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/bridge_slave_0\x00', 0x80801, 0x0)
write$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000200)="6d7696b0016831fe7120800f128147df1f2db780ce7a6be8026e6b77f93983bc8db283985ea7fcea6c9d87c25bd0398d6d1a6ae3859d76fba1ccb2c416986c0a35a21ef4e6a46467b50f5816ae3afc69b8dbacd208d96d233d5d111ea33ef9e4f34594801f8b6aca70a230a58a32e13df72c49112f9b35b78737b3a88972d1ed5980a2a3ca071be9f365ce1ac519dd0e262de944e641ad3ef30863ec287555568f00d2a29e4eeb2b5ba7889bcf40cb2df65e640496b262c7e7eb24417a9f8d7cf153", 0xc2)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x400, 0x0) (async)
r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x400, 0x0)
ioctl$auto_BINDER_THREAD_EXIT(r7, 0x40046208, &(0x7f0000000380)="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") (async)
ioctl$auto_BINDER_THREAD_EXIT(r7, 0x40046208, &(0x7f0000000380)="bca6afbf8b968f360a1f5db9dd27f7d7d0ba7862a2af71dd940d0a3bf5786c1544948ca2e9d8a7d23107f677abbf8e829a1c2017a11a9139237f091b16107220239b143078d5bc5bb5fd90609388f26754a32e5688d61409b77a2c2755899136a166ecad1cf64b97f668468030372ec8b314070000fa8d0b2e1d22aa05cc7650835e93f50fe90765fed89e7265da353090179be5f01764a3273f398a83a109954943374dd995acb499f09ee0dd9eae8a8c821d8ca0dd7e6ce53f456f985f12a1d82b4b542da2c10993d591ca1dfdd1990b2dab213346034c5412afc01c82162f08912ec7340f491627c8044e12219303ca3ba4ed11f784d3dbb0a68258c91cddf261f10d4c8a4cca16d91f11cf77b28b286e7d7693fde96ae7b95478e616a563405d9a2ba1fc060423860d928b73a63c97cd99a8d1c8208580ceef98dacea1bd740cf9d2f2d2ff5bdd0a36a2203744be27183049270116ef994c95dced290398408f9198df15969faeeb65ccc6ce231ca3c0ee16f92c920a2644d39c642c2ab3a7af71cd76ffc40ec7e394cc39c1109503c9a7e23b96d56f6a02b0f0c374a7fcb53d914a5e0388290101684c6ef4887debe28ea0137026ac492d43dc83011e69191bcbb71307e4659e51a0965a88a402f8ecee3d04614e4ebc946442b7")
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @empty}, 0x800069) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @empty}, 0x800069)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) (async)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)

3.812081659s ago: executing program 5 (id=3115):
mmap$auto(0x0, 0x4, 0x7, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0)
ioctl$auto(r1, 0x5606, r1)

3.62956784s ago: executing program 0 (id=3116):
setresuid$auto(0x8000000000000001, 0x1, 0x200)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x800, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(r0, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c8101, 0x0)
bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@map_id=0x3ff, 0x2, 0x10000}, 0xac)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000040)=0xfffffff9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x98, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_GOV={0x3c, 0xc, 0x0, 0x1, [@typed={0x15, 0x102, 0x0, 0x0, @str='/$[/,**)}\xca-!#-*,\x00'}, @typed={0x4, 0x38}, @typed={0x8, 0x114, 0x0, 0x0, @str='\\+:\x00'}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0xc9}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x14000000}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x3}, @THERMAL_GENL_ATTR_TZ_NAME={0xd, 0xa, '/dev/kvm\x00'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_ID={0x8, 0x15, 0x6}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x1}, @THERMAL_GENL_ATTR_TZ_NAME={0xd, 0xa, '/dev/kvm\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4010)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
pipe$auto(0x0)
socket(0xa, 0x3, 0xff)
bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xd)
bpf$auto(0x1, 0x0, 0x5)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x4f1, 0x1)
fanotify_mark$auto(0x0, 0x80, 0x4, 0x3, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$auto(r4, 0x11, 0x64, 0x0, 0x7)
ioctl$auto(r4, 0x9, 0xffffffffffffffff)
r5 = io_uring_setup$auto(0x6, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x18fc02, 0x0)
ioctl$auto(0x3, 0xc0481273, 0x38)
ioctl$auto(0x3, 0x1274, r5)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000084, 0x402}]})

3.548338688s ago: executing program 0 (id=3118):
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x6f2a, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0)
r3 = epoll_create$auto(0x2)
epoll_pwait2$auto(r3, 0x0, 0x8, 0x0, 0x0, 0x8)
ioctl$auto_NS_GET_NSTYPE(r3, 0xb703, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0)
ioctl$auto_RTC_UIE_ON(r4, 0x7003, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(r1, 0x89f1, r1)

3.321432445s ago: executing program 4 (id=3119):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000100)='./cgroup\x00', 0x26e000, 0x64)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0xa, 0x73)
pipe2$auto(0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xea241, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyu3\x00', 0x62902, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0)

3.125366229s ago: executing program 4 (id=3120):
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
close_range$auto(0x2, r0, 0xfffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
madvise$auto(0x0, 0xff7fffffffff0001, 0x15)
socket(0x2, 0x1, 0x106)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x80, 0x0)
readv$auto(0x3, 0x0, 0x7)
mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff)
mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0)
connect$auto(0x3, 0x0, 0x55)
fanotify_init$auto(0x65, 0x2)
setsockopt$auto(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x8)

2.910828813s ago: executing program 4 (id=3121):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x1, 0x0, 0x3, 0xd4})
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
r2 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r2, 0x29, 0x40, 0x0, 0x110)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20000000)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf25300e00001800018014000200776c616e31"], 0x2c}, 0x1, 0x1000000}, 0x8094)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x7, 0x4, @raw=0x2, @integer64={0x9, 0xec, 0x340}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00', <r6=>0x0})
sendmsg$auto_ETHTOOL_MSG_MM_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="10002bbd7000fedbdf252b00000008000900a9f000000500030000000000080005000000000060000180080003000500000014000200626f6e645f736c6176655f3100000000080003000100008014000200776c616e300000000000000000000000080003005400000008000100", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000000000000000e506e31d0d29d5a3a7ec9e9eb5c81865720e13d8c4ce49699f875479598918ba92eb6e939d2d6bd32f89fa43db2aaad2ad65b110ef05a524fba29bd134"], 0x8c}, 0x1, 0x0, 0x0, 0x20004084}, 0x20000001)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0005, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000)
madvise$auto(0x8000000000000000, 0x1, 0xd)
ioctl$auto(r1, 0x5403, r1)

2.862989035s ago: executing program 1 (id=3122):
setresuid$auto(0x8, 0x8, 0x0)
r0 = setfsuid$auto(0xee00)
setreuid$auto(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r2, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r3}, @NET_SHAPER_A_HANDLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0xc050)
msgsnd$auto(0x2, &(0x7f0000000300)={0x4, 0x9}, 0x65, 0xfffffffd)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x4000000000000, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x1d, 0x2, 0x6)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x100, 0x0)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/tcp_dctcp/parameters/dctcp_shift_g\x00', 0x101202, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
socketpair$auto(0x10000b, 0x80000000, 0xfff7ffff, 0x0)
r6 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r6, 0x1, r4, 0x0)
fsconfig$auto(r1, 0x2, &(0x7f0000000180)='\x00', &(0x7f0000000580)="10ab6b39a25e5d9c4947936e05c1ebf9895356b0a5fc915241b26bebe1bf3648ecb6260c4d40bcaaf9620450e0f236d9cf2e9bfa15663032904f14a0bfebeb6f41d8f77bd0bca982dfe6b49e308e606721133b53711ed21bb9e1e32f4be7a7c60b1e11a84523b8f0f030b169292f0b65a26107a850d0b970a474f1e71b47e5ca3b8343ea7d7b90f3557fd5f312dc80589a", 0x0)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1)

2.819895405s ago: executing program 5 (id=3123):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x7ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB])
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/net/afs/sysname\x00', 0x81, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(0xffffffffffffffff, 0x0)
mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0)
rmdir$auto(&(0x7f0000000080)='./cgroup\x00')
prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0)
mseal$auto(0x0, 0x7dda, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0xffffffffffffffff, r1, 0xffffffff)

2.393428595s ago: executing program 0 (id=3124):
mmap$auto(0x0, 0x4, 0x7, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0)
ioctl$auto(r1, 0x5606, r1)

1.879384865s ago: executing program 5 (id=3125):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000028, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0) (fail_nth: 1)

1.810387484s ago: executing program 1 (id=3126):
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0)
unshare$auto(0x8000000)
semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0)
unshare$auto(0x8000400)
r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2080, 0x0)
bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f00000000c0)=@raw_tracepoint={0x7, r0, 0x0, 0xffffffffffffffff}, 0x0)
mmap$auto(0x5, 0x400008, 0xe1, 0x5e, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10442, 0x0)
mmap$auto(0x4, 0x2, 0x10, 0x10, 0xffffffffffffffff, 0x80)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0)
sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x810}, 0x0)
mmap$auto(0x0, 0x101, 0xdf, 0x9bf2, 0x2, 0x4)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
ioctl$auto(0x3, 0x402c542b, 0x38)
getrlimit$auto(0x3, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r4 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000080)="83f72950c4a15930c2601a4a9bc630bc64855986ae86b0e5edcb4ff873f9ac90f6362e3c28d6bded6152cae220b4b23cff0bd19118c132f0908bba3bb4fa2cc8a9da3c288fa1061077e1548f206de75fb69de8718758268f4a59cb52f79b1dd32c31fedbb3b9899a46c0721ac716a3ac49bc")
r5 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x24280, 0x0)
mmap$auto(0x80, 0x5, 0x2, 0x7fffffffffffffff, r5, 0x1)
r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r3, @ANYRESHEX, @ANYRESOCT=r4, @ANYRES16=0x0], 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000040)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d80040", @ANYRES16=r6, @ANYRESDEC=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000)
mmap$auto(0xa, 0x8, 0x9d, 0x18, r5, 0x4)
r7 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES16=r7, @ANYRES64=0x0], 0x100}, 0x1, 0x0, 0x0, 0x844}, 0x4010)
sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x14)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0)

1.643036799s ago: executing program 5 (id=3127):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x3)
r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r1 = socket(0x2b, 0x1, 0x0)
openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0)
r2 = fsopen$auto(0x0, 0x1)
ioctl$auto_XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f00000003c0)={0x4, 0x7})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/13/effective_affinity_list\x00', 0x2000, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, r0, 0x340000000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
bpf$auto(0x18, &(0x7f0000000040)=@batch={0xc707, 0x7, 0x8, 0x2577179f, 0x1, r1, 0x2, 0x5}, 0x92)
socket(0x10, 0x2, 0x0)

1.468733707s ago: executing program 1 (id=3128):
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b63", 0xfdef)

1.380424432s ago: executing program 5 (id=3129):
select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x7d, 0xff]}, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0)
syz_clone(0x4000, &(0x7f00000002c0)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21", 0x16, 0x0, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x2a02c0, 0x0)
sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {0xb, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x4)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r4}, 0x6f4)
read$auto(r3, 0x0, 0x20)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48043, 0x0)
write$auto(r7, 0x0, 0x6)
unshare$auto(0x40000080)
landlock_add_rule$auto_LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000300)="d2dbb0c31ef10f6b9b72761bf20adbcc8a8c7d00a1d4fd6ddf60e9f46afcf2b0fa912e843083fa4cd35857c13114e1f105594994d891557258770c791f17e989580c981c4d76cfeea4518ee2", 0x3c)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000000)="b2", 0x1)
r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)
sendfile$auto(r1, r9, 0x0, 0x1)

1.275788099s ago: executing program 0 (id=3130):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000100)='./cgroup\x00', 0x26e000, 0x64)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0xa, 0x73)
pipe2$auto(0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xea241, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyu3\x00', 0x62902, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) (fail_nth: 1)

898.950016ms ago: executing program 0 (id=3131):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/034/001\x00', 0x802, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000)
open(&(0x7f0000000100)='./cgroup\x00', 0x26e000, 0x64)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0xa, 0x73)
pipe2$auto(0x0, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00')
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu1\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xea241, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyu3\x00', 0x62902, 0x0)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0)

387.024699ms ago: executing program 4 (id=3132):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)=0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
mmap$auto(0x9, 0x1ff, 0x4, 0x4000000000014, r0, 0xceb)
socket(0xa, 0x3, 0x40000073)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x668401, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0)
cachestat$auto(r1, &(0x7f0000000640)={0x8, 0x4000000000008}, 0x0, 0x0)

167.863201ms ago: executing program 4 (id=3133):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x100000000000028, 0x0)
fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)

115.527849ms ago: executing program 0 (id=3134):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1)
ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x7ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB])
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/net/afs/sysname\x00', 0x81, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(0xffffffffffffffff, 0x0)
mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0)
rmdir$auto(&(0x7f0000000080)='./cgroup\x00')
prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0)
mseal$auto(0x0, 0x7dda, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
close_range$auto(0xffffffffffffffff, r1, 0xffffffff)

0s ago: executing program 4 (id=3135):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0)
r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0)
readv$auto(r0, &(0x7f0000000100)={0x0, 0x3}, 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(r1, 0x0)
write$auto(0x3, 0x0, 0xfdef)

kernel console output (not intermixed with test programs):

809][T16892] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2502'.
[  631.917388][T16888] Invalid ELF header magic: != ELF
[  631.962540][T16894] ptp ptp0: only physical clock in use now
[  632.325058][ T7480] Bluetooth: hci0: Malformed HCI Event
[  632.812556][T16928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2511'.
[  632.835997][T16928] vlan1: entered promiscuous mode
[  632.912110][T16928] vlan1: entered allmulticast mode
[  632.973880][T16928] veth0_vlan: entered allmulticast mode
[  633.270893][T16931] zswap: compressor  not available
[  634.000466][ T7480] Bluetooth: hci1: Malformed HCI Event
[  634.183087][T16964] netlink: 'syz.0.2521': attribute type 21 has an invalid length.
[  634.213696][T16964] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2521'.
[  634.257735][T16964] IPv6: NLM_F_CREATE should be specified when creating new route
[  634.676608][T16972] zswap: compressor  not available
[  634.687285][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2523'.
[  634.728041][T16974] vlan1: entered promiscuous mode
[  634.756221][T16974] vlan1: entered allmulticast mode
[  634.767246][T16978] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  634.805831][T16974] veth0_vlan: entered allmulticast mode
[  635.325180][T16988] cifs: Unknown parameter 'T.�����żc[���$⁍��)��U�ÑnE�-ʙ�l���-��	�-�_������5Z�o��m��fwY�h�*/�xD
lݩ���g�kǐA����7���9���X�a/f�_�AR������xM	�v��p��$^;��q�3���n���-
6��+e�k�����<�k�c�)n.�eM��Na��t��SM��1,'
[  635.361933][T16983] zswap: compressor  not available
[  636.326777][T17007] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  636.445451][T17007] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  636.499279][T17007] memcg:ffff88805e642501
[  636.534758][T17007] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  636.602729][T17007] page_type: f5(slab)
[  636.621975][T17007] raw: 00fff00000000040 ffff88813fe53280 dead000000000100 dead000000000122
[  636.699413][T17007] raw: 0000000000000000 0000000800100010 00000000f5000000 ffff88805e642501
[  636.742910][T17007] head: 00fff00000000040 ffff88813fe53280 dead000000000100 dead000000000122
[  636.790108][T17007] head: 0000000000000000 0000000800100010 00000000f5000000 ffff88805e642501
[  636.828702][T17007] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  636.865319][T17007] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  636.934031][T17007] page dumped because: unmovable page
[  636.956051][T17007] page_owner tracks the page as allocated
[  636.992744][T17007] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (udevd), ts 37345784199, free_ts 37343816901
[  637.079676][T17007]  post_alloc_hook+0x153/0x170
[  637.101872][T17007]  get_page_from_freelist+0x111d/0x3140
[  637.142066][T17007]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  637.175854][T17007]  new_slab+0xa6/0x6d0
[  637.194095][T17007]  refill_objects+0x26b/0x400
[  637.220772][T17007]  __pcs_replace_empty_main+0x19f/0x600
[  637.258052][T17007]  __kmalloc_noprof+0x688/0x850
[  637.292965][T17007]  alloc_pipe_info+0x1ec/0x590
[  637.322406][T17007]  create_pipe_files+0x8c/0x970
[  637.330457][T17034] zswap: compressor  not available
[  637.341720][T17007]  do_pipe2+0xbd/0x1e0
[  637.359683][T17007]  __x64_sys_pipe2+0x54/0x80
[  637.386303][T17007]  do_syscall_64+0x106/0xf80
[  637.410193][T17007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.436034][T17007] page last free pid 5198 tgid 5198 stack trace:
[  637.471276][T17007]  __free_frozen_pages+0x7e1/0x10d0
[  637.490162][T17007]  qlist_free_all+0x47/0xe0
[  637.510309][T17007]  kasan_quarantine_reduce+0x1a0/0x1f0
[  637.536130][T17007]  __kasan_slab_alloc+0x69/0x90
[  637.552197][T17007]  __kmalloc_cache_noprof+0x243/0x6f0
[  637.579668][T17007]  kernfs_fop_open+0x23d/0xd50
[  637.599842][T17007]  do_dentry_open+0x6d8/0x1660
[  637.620255][T17007]  vfs_open+0x82/0x3f0
[  637.632923][T17007]  path_openat+0x208c/0x31a0
[  637.657981][T17007]  do_file_open+0x20e/0x430
[  637.668652][T17007]  do_sys_openat2+0x10d/0x1e0
[  637.698781][T17007]  __x64_sys_openat+0x12d/0x210
[  637.704245][T17007]  do_syscall_64+0x106/0xf80
[  637.719293][T17007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.841781][T17042] FAULT_INJECTION: forcing a failure.
[  637.841781][T17042] name failslab, interval 1, probability 0, space 0, times 0
[  637.902084][T17042] CPU: 0 UID: 0 PID: 17042 Comm: syz.4.2538 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  637.902122][T17042] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  637.902130][T17042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  637.902140][T17042] Call Trace:
[  637.902145][T17042]  <TASK>
[  637.902151][T17042]  dump_stack_lvl+0x100/0x190
[  637.902179][T17042]  should_fail_ex.cold+0x5/0xa
[  637.902198][T17042]  should_failslab+0xc2/0x120
[  637.902219][T17042]  __kmalloc_cache_noprof+0x7a/0x6f0
[  637.902238][T17042]  ? smaps_rollup_open+0x4c/0x170
[  637.902253][T17042]  ? path_get+0x61/0x80
[  637.902271][T17042]  smaps_rollup_open+0x4c/0x170
[  637.902289][T17042]  do_dentry_open+0x6d8/0x1660
[  637.902312][T17042]  ? __pfx_smaps_rollup_open+0x10/0x10
[  637.902332][T17042]  vfs_open+0x82/0x3f0
[  637.902351][T17042]  path_openat+0x208c/0x31a0
[  637.902371][T17042]  ? __pfx_path_openat+0x10/0x10
[  637.902392][T17042]  do_file_open+0x20e/0x430
[  637.902407][T17042]  ? __pfx_do_file_open+0x10/0x10
[  637.902427][T17042]  ? __pfx_kfree_link+0x10/0x10
[  637.902450][T17042]  ? alloc_fd+0x476/0x790
[  637.902474][T17042]  ? do_getname+0x191/0x390
[  637.902492][T17042]  do_sys_openat2+0x10d/0x1e0
[  637.902509][T17042]  ? __pfx_do_sys_openat2+0x10/0x10
[  637.902527][T17042]  ? __fget_files+0x21f/0x3d0
[  637.902552][T17042]  __x64_sys_openat+0x12d/0x210
[  637.902570][T17042]  ? __pfx___x64_sys_openat+0x10/0x10
[  637.902594][T17042]  do_syscall_64+0x106/0xf80
[  637.902610][T17042]  ? clear_bhb_loop+0x40/0x90
[  637.902628][T17042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.902642][T17042] RIP: 0033:0x7f84ecb9c629
[  637.902655][T17042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.902670][T17042] RSP: 002b:00007f84ed998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  637.902684][T17042] RAX: ffffffffffffffda RBX: 00007f84ece15fa0 RCX: 00007f84ecb9c629
[  637.902694][T17042] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  637.902703][T17042] RBP: 00007f84ecc32b39 R08: 0000000000000000 R09: 0000000000000000
[  637.902712][T17042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  637.902720][T17042] R13: 00007f84ece16038 R14: 00007f84ece15fa0 R15: 00007ffe99f60be8
[  637.902738][T17042]  </TASK>
[  638.634589][T17041] Process accounting resumed
[  639.072614][T17060] zswap: compressor  not available
[  639.789402][T17079] netlink: 'syz.0.2547': attribute type 10 has an invalid length.
[  639.887999][T17079] netlink: 230 bytes leftover after parsing attributes in process `syz.0.2547'.
[  640.044838][T17081] zswap: compressor  not available
[  641.357274][T17115] zswap: compressor  not available
[  642.066070][T17129] zswap: compressor  not available
[  642.421732][T17139] zswap: compressor  not available
[  642.688188][T17150] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  642.843828][T17157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2564'.
[  644.263378][T17188] zswap: compressor  not available
[  644.468113][T17207] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.2576'.
[  644.618807][T17193] zswap: compressor  not available
[  644.828746][T17216] ICMPv6: process `syz.0.2578' is using deprecated sysctl (syscall) net.ipv6.neigh.team_slave_0.base_reachable_time - use net.ipv6.neigh.team_slave_0.base_reachable_time_ms instead
[  645.056326][ T7480] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9
[  645.601126][T17232] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  645.670789][T17232] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  645.774683][T17232] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  645.880055][T17232] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  646.572866][T17256] zswap: compressor  not available
[  647.298644][T17280] nfs: Bad value for 'source'
[  647.645310][ T7480] Bluetooth: hci4: command 0x0c1a tx timeout
[  647.725027][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  647.805851][ T7480] Bluetooth: hci1: command 0x0c1a tx timeout
[  647.887232][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  648.290390][T17294] zswap: compressor  not available
[  648.567698][T17308] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  648.716665][T17308] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  648.823464][T17308] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  648.910766][T17308] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  649.333324][ T7480] Bluetooth: hci4: Malformed HCI Event
[  649.456945][T17325] synth uevent: /devices/platform/vim2m.0/video4linux/video3: unknown uevent action string
[  649.521457][T17325] video4linux video3: uevent: failed to send synthetic uevent: -22
[  649.546300][T17325] synth uevent: /devices/platform/vim2m.0/video4linux/video3: unknown uevent action string
[  649.625442][T17325] video4linux video3: uevent: failed to send synthetic uevent: -22
[  650.606173][ T7480] Bluetooth: hci4: command 0x0c1a tx timeout
[  650.768556][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  650.847267][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  650.926449][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  651.320424][T17362] HfR: entered promiscuous mode
[  651.418023][T17366] zswap: compressor  not available
[  651.644374][ T7480] Bluetooth: hci1: Malformed HCI Event
[  652.527653][T17397] netlink: zone id is out of range
[  652.558239][T17397] netlink: zone id is out of range
[  652.607239][T17397] netlink: zone id is out of range
[  652.612364][T17397] netlink: zone id is out of range
[  652.698841][T17402] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  652.735184][T17397] netlink: zone id is out of range
[  652.794579][T17397] netlink: zone id is out of range
[  652.807304][T17397] netlink: zone id is out of range
[  652.858298][T17397] netlink: zone id is out of range
[  652.885759][T17397] netlink: zone id is out of range
[  652.937561][T17397] netlink: zone id is out of range
[  653.457077][T17415] queue_state_write: operation too long
[  653.497655][T17415] queue_state_write: use 'run', 'start' or 'kick'
[  654.012244][T17426] HfR: entered promiscuous mode
[  654.402957][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'.
[  654.688703][T15091] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.787057][ T7480] Bluetooth: hci1: Malformed HCI Event
[  654.905395][T17441] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  655.951702][T17475] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2635'.
[  656.102731][T17475] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2635'.
[  656.660266][T17495] nfs: Bad value for 'source'
[  656.926598][ T7480] Bluetooth: hci0: Malformed HCI Event
[  657.121511][ T7480] Bluetooth: hci1: Malformed HCI Event
[  657.208956][T17502] bridge0: port 3(team0) entered blocking state
[  657.316407][T17502] bridge0: port 3(team0) entered disabled state
[  657.398276][T17502] team0: entered allmulticast mode
[  657.466271][T17502] team_slave_1: entered allmulticast mode
[  657.531556][T17502] team0: entered promiscuous mode
[  657.599780][T17502] team_slave_1: entered promiscuous mode
[  657.605925][T17502] bridge0: port 3(team0) entered blocking state
[  657.612269][T17502] bridge0: port 3(team0) entered forwarding state
[  657.690576][T17516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2645'.
[  657.829961][   T29] audit: type=1800 audit(1771956746.335:39): pid=17498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2640" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  657.925670][T17516] team0: Port device team_slave_0 removed
[  658.329623][T17523] net_ratelimit: 120 callbacks suppressed
[  658.329640][T17523] openvswitch: netlink: IP tunnel dst address not specified
[  659.495708][T17536] FAULT_INJECTION: forcing a failure.
[  659.495708][T17536] name failslab, interval 1, probability 0, space 0, times 0
[  659.589314][T17536] CPU: 0 UID: 0 PID: 17536 Comm: syz.5.2649 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  659.589352][T17536] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  659.589360][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  659.589369][T17536] Call Trace:
[  659.589374][T17536]  <TASK>
[  659.589380][T17536]  dump_stack_lvl+0x100/0x190
[  659.589408][T17536]  should_fail_ex.cold+0x5/0xa
[  659.589426][T17536]  ? __register_sysctl_table+0xac/0x1650
[  659.589448][T17536]  should_failslab+0xc2/0x120
[  659.589463][T17536]  __kmalloc_noprof+0xe0/0x850
[  659.589488][T17536]  __register_sysctl_table+0xac/0x1650
[  659.589509][T17536]  ? is_module_address+0x5f/0xf0
[  659.589531][T17536]  ? __pfx___register_sysctl_table+0x10/0x10
[  659.589552][T17536]  ? is_module_address+0x69/0xf0
[  659.589568][T17536]  ? register_net_sysctl_sz+0x222/0x430
[  659.589588][T17536]  ? __asan_memcpy+0x3c/0x60
[  659.589609][T17536]  smc_sysctl_net_init+0xbb/0x450
[  659.589628][T17536]  ? __pfx_smc_net_init+0x10/0x10
[  659.589648][T17536]  smc_net_init+0x16/0x50
[  659.589667][T17536]  ops_init+0x1e2/0x5f0
[  659.589686][T17536]  setup_net+0x118/0x3a0
[  659.589703][T17536]  ? __pfx_setup_net+0x10/0x10
[  659.589717][T17536]  ? lockdep_init_map_type+0x5c/0x250
[  659.589737][T17536]  ? mutex_init_lockep+0x110/0x150
[  659.589760][T17536]  copy_net_ns+0x46f/0x7c0
[  659.589780][T17536]  create_new_namespaces+0x3ea/0xac0
[  659.589800][T17536]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  659.589817][T17536]  ksys_unshare+0x455/0xab0
[  659.589843][T17536]  ? __pfx_ksys_unshare+0x10/0x10
[  659.589874][T17536]  __x64_sys_unshare+0x31/0x40
[  659.589892][T17536]  do_syscall_64+0x106/0xf80
[  659.589908][T17536]  ? clear_bhb_loop+0x40/0x90
[  659.589926][T17536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.589940][T17536] RIP: 0033:0x7f2a4b99c629
[  659.589954][T17536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.589968][T17536] RSP: 002b:00007f2a4c775028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  659.589982][T17536] RAX: ffffffffffffffda RBX: 00007f2a4bc15fa0 RCX: 00007f2a4b99c629
[  659.589992][T17536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  659.590001][T17536] RBP: 00007f2a4ba32b39 R08: 0000000000000000 R09: 0000000000000000
[  659.590010][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.590019][T17536] R13: 00007f2a4bc16038 R14: 00007f2a4bc15fa0 R15: 00007ffea47559f8
[  659.590039][T17536]  </TASK>
[  660.112019][ T7480] Bluetooth: hci0: Malformed HCI Event
[  661.352583][T17577] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  661.388426][T17577] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  661.415460][T17579] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2658'.
[  661.663205][T17579] netlink: 146 bytes leftover after parsing attributes in process `syz.0.2658'.
[  661.859591][T17592] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2660'.
[  661.896760][T17592] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.904298][T17592] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.577903][ T7480] Bluetooth: hci2: Malformed HCI Event
[  663.397116][T17629] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2672'.
[  663.566048][T17629] netlink: 146 bytes leftover after parsing attributes in process `syz.1.2672'.
[  663.946096][ T7480] Bluetooth: hci2: Malformed HCI Event
[  664.296813][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2679'.
[  664.364908][T17660] vhci_hcd vhci_hcd.2: invalid port number 16
[  664.391364][T17660] vhci_hcd vhci_hcd.2: invalid port number 16
[  664.805128][T17674] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  664.880405][T17674] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  664.991116][T17674] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  665.126136][T17674] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  665.337569][ T7480] Bluetooth: hci4: Malformed HCI Event
[  665.480218][T17688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2689'.
[  665.609320][T17688] team0: Port device team_slave_0 removed
[  665.658899][T17691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  665.709720][T17691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.854540][ T7480] Bluetooth: hci4: command 0x0c1a tx timeout
[  666.937647][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  667.024406][ T7480] Bluetooth: hci1: command 0x0c1a tx timeout
[  667.177439][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  667.270186][T17720] zswap: compressor  not available
[  667.445148][T17730] nfs: Bad value for 'source'
[  668.027530][    T9] usb usb40-port2: attempt power cycle
[  668.608161][    T9] usb usb40-port2: unable to enumerate USB device
[  668.718169][T17745] Process accounting paused
[  668.841257][ T7480] Bluetooth: hci1: Malformed HCI Event
[  669.015608][T17766] FAULT_INJECTION: forcing a failure.
[  669.015608][T17766] name failslab, interval 1, probability 0, space 0, times 0
[  669.078480][T17766] CPU: 0 UID: 0 PID: 17766 Comm: syz.0.2701 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  669.078515][T17766] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  669.078523][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  669.078531][T17766] Call Trace:
[  669.078537][T17766]  <TASK>
[  669.078542][T17766]  dump_stack_lvl+0x100/0x190
[  669.078568][T17766]  should_fail_ex.cold+0x5/0xa
[  669.078586][T17766]  ? tomoyo_realpath_from_path+0xb6/0x690
[  669.078602][T17766]  should_failslab+0xc2/0x120
[  669.078617][T17766]  __kmalloc_noprof+0xe0/0x850
[  669.078641][T17766]  tomoyo_realpath_from_path+0xb6/0x690
[  669.078660][T17766]  tomoyo_path_number_perm+0x23c/0x580
[  669.078681][T17766]  ? tomoyo_path_number_perm+0x22e/0x580
[  669.078703][T17766]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  669.078743][T17766]  ? find_held_lock+0x2b/0x80
[  669.078757][T17766]  ? __fget_files+0x215/0x3d0
[  669.078777][T17766]  ? hook_file_ioctl_common+0x146/0x410
[  669.078802][T17766]  ? __fget_files+0x21f/0x3d0
[  669.078827][T17766]  security_file_ioctl+0xd3/0x230
[  669.078849][T17766]  __x64_sys_ioctl+0xb7/0x210
[  669.078871][T17766]  do_syscall_64+0x106/0xf80
[  669.078887][T17766]  ? clear_bhb_loop+0x40/0x90
[  669.078905][T17766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.078919][T17766] RIP: 0033:0x7ff93579c629
[  669.078932][T17766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  669.078946][T17766] RSP: 002b:00007ff936716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  669.078961][T17766] RAX: ffffffffffffffda RBX: 00007ff935a15fa0 RCX: 00007ff93579c629
[  669.078971][T17766] RDX: 0000200000001a80 RSI: 0000000080084504 RDI: 0000000000000003
[  669.078979][T17766] RBP: 00007ff936716090 R08: 0000000000000000 R09: 0000000000000000
[  669.078988][T17766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  669.078996][T17766] R13: 00007ff935a16038 R14: 00007ff935a15fa0 R15: 00007ffd8fd3dd58
[  669.079016][T17766]  </TASK>
[  669.079022][T17766] ERROR: Out of memory at tomoyo_realpath_from_path.
[  669.300577][T17767] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  669.372305][T17767] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  669.441030][T17767] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  669.488801][T17767] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  670.405307][T17779] zswap: compressor  not available
[  670.471850][T17790] netlink: 'syz.5.2709': attribute type 1 has an invalid length.
[  670.747091][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2713'.
[  670.772712][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'.
[  670.815141][T17800] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2713'.
[  670.889067][T17802] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  670.969158][T17802] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  671.054444][T17802] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  671.070173][T17814] FAULT_INJECTION: forcing a failure.
[  671.070173][T17814] name failslab, interval 1, probability 0, space 0, times 0
[  671.131930][T17814] CPU: 0 UID: 0 PID: 17814 Comm: syz.4.2716 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  671.131965][T17814] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  671.131973][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  671.131989][T17814] Call Trace:
[  671.131994][T17814]  <TASK>
[  671.132000][T17814]  dump_stack_lvl+0x100/0x190
[  671.132026][T17814]  should_fail_ex.cold+0x5/0xa
[  671.132044][T17814]  ? tomoyo_encode2+0xfb/0x3c0
[  671.132057][T17814]  should_failslab+0xc2/0x120
[  671.132072][T17814]  __kmalloc_noprof+0xe0/0x850
[  671.132092][T17814]  ? d_absolute_path+0x136/0x1b0
[  671.132113][T17814]  tomoyo_encode2+0xfb/0x3c0
[  671.132131][T17814]  tomoyo_encode+0x29/0x50
[  671.132144][T17814]  tomoyo_realpath_from_path+0x18c/0x690
[  671.132163][T17814]  tomoyo_path_number_perm+0x23c/0x580
[  671.132184][T17814]  ? tomoyo_path_number_perm+0x22e/0x580
[  671.132206][T17814]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  671.132246][T17814]  ? find_held_lock+0x2b/0x80
[  671.132259][T17814]  ? __fget_files+0x215/0x3d0
[  671.132279][T17814]  ? hook_file_ioctl_common+0x146/0x410
[  671.132305][T17814]  ? __fget_files+0x21f/0x3d0
[  671.132330][T17814]  security_file_ioctl+0xd3/0x230
[  671.132353][T17814]  __x64_sys_ioctl+0xb7/0x210
[  671.132374][T17814]  do_syscall_64+0x106/0xf80
[  671.132390][T17814]  ? clear_bhb_loop+0x40/0x90
[  671.132407][T17814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.132423][T17814] RIP: 0033:0x7f84ecb9c629
[  671.132436][T17814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.132450][T17814] RSP: 002b:00007f84ed998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  671.132465][T17814] RAX: ffffffffffffffda RBX: 00007f84ece15fa0 RCX: 00007f84ecb9c629
[  671.132475][T17814] RDX: 0000200000001a80 RSI: 0000000080084504 RDI: 0000000000000003
[  671.132484][T17814] RBP: 00007f84ed998090 R08: 0000000000000000 R09: 0000000000000000
[  671.132492][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  671.132501][T17814] R13: 00007f84ece16038 R14: 00007f84ece15fa0 R15: 00007ffe99f60be8
[  671.132520][T17814]  </TASK>
[  671.132535][T17814] ERROR: Out of memory at tomoyo_realpath_from_path.
[  671.376814][T17802] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  671.990131][T17837] FAULT_INJECTION: forcing a failure.
[  671.990131][T17837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  672.082667][T17837] CPU: 0 UID: 0 PID: 17837 Comm: syz.1.2726 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  672.082702][T17837] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  672.082710][T17837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  672.082725][T17837] Call Trace:
[  672.082730][T17837]  <TASK>
[  672.082736][T17837]  dump_stack_lvl+0x100/0x190
[  672.082763][T17837]  should_fail_ex.cold+0x5/0xa
[  672.082781][T17837]  _copy_from_user+0x2e/0xd0
[  672.082805][T17837]  evdev_handle_get_keycode+0xb7/0x180
[  672.082824][T17837]  ? __pfx_evdev_handle_get_keycode+0x10/0x10
[  672.082846][T17837]  ? trace_contention_end+0x140/0x180
[  672.082866][T17837]  ? __mutex_lock+0x26a/0x1b90
[  672.082883][T17837]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  672.082907][T17837]  evdev_do_ioctl+0x27e/0x1b60
[  672.082927][T17837]  ? __pfx_evdev_do_ioctl+0x10/0x10
[  672.082945][T17837]  ? __pfx___mutex_lock+0x10/0x10
[  672.082975][T17837]  evdev_ioctl+0x16f/0x1a0
[  672.082992][T17837]  ? __pfx_evdev_ioctl+0x10/0x10
[  672.083011][T17837]  __x64_sys_ioctl+0x18e/0x210
[  672.083033][T17837]  do_syscall_64+0x106/0xf80
[  672.083048][T17837]  ? clear_bhb_loop+0x40/0x90
[  672.083065][T17837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.083080][T17837] RIP: 0033:0x7f436df9c629
[  672.083094][T17837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  672.083108][T17837] RSP: 002b:00007f436ee07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  672.083123][T17837] RAX: ffffffffffffffda RBX: 00007f436e215fa0 RCX: 00007f436df9c629
[  672.083133][T17837] RDX: 0000200000001a80 RSI: 0000000080084504 RDI: 0000000000000003
[  672.083142][T17837] RBP: 00007f436ee07090 R08: 0000000000000000 R09: 0000000000000000
[  672.083151][T17837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.083160][T17837] R13: 00007f436e216038 R14: 00007f436e215fa0 R15: 00007ffdb43e81e8
[  672.083180][T17837]  </TASK>
[  672.450489][T17846] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  672.936899][ T7480] Bluetooth: hci4: command 0x0c1a tx timeout
[  673.018425][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  673.098180][ T7480] Bluetooth: hci1: command 0x0c1a tx timeout
[  673.456384][T17857] zswap: compressor  not available
[  673.502625][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  673.870329][T17871] zswap: compressor  not available
[  673.875741][T17873] overlayfs: "check_copy_up" module option is obsolete
[  674.227960][ T7480] Bluetooth: hci0: Malformed HCI Event
[  674.915339][T17899] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  674.915369][T17899] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  674.917822][T17899] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  674.917847][T17899] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  675.067821][T17906] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  675.067849][T17906] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  675.068094][T17906] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  675.068114][T17906] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  675.173636][T17912] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  675.173664][T17912] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  675.173903][T17912] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  675.173923][T17912] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  675.343569][T17919] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  675.343724][T17919] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  675.343853][T17919] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  675.343979][T17919] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  677.080473][T17957] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  677.416904][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  677.416946][ T7480] Bluetooth: hci1: command 0x0c1a tx timeout
[  677.416969][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  677.416988][ T7480] Bluetooth: hci4: command 0x0c1a tx timeout
[  677.435672][T17968] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  677.435819][T17968] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  677.435950][T17968] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  677.436112][T17968] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  677.944450][T17967] zswap: compressor ��w�E not available
[  678.326157][T17982] FAULT_INJECTION: forcing a failure.
[  678.326157][T17982] name failslab, interval 1, probability 0, space 0, times 0
[  678.365934][T17986] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  678.393852][T17982] CPU: 0 UID: 0 PID: 17982 Comm: syz.0.2755 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  678.393891][T17982] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  678.393900][T17982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  678.393909][T17982] Call Trace:
[  678.393915][T17982]  <TASK>
[  678.393921][T17982]  dump_stack_lvl+0x100/0x190
[  678.393949][T17982]  should_fail_ex.cold+0x5/0xa
[  678.393968][T17982]  should_failslab+0xc2/0x120
[  678.393983][T17982]  __kmalloc_cache_noprof+0x7a/0x6f0
[  678.394001][T17982]  ? snd_timer_instance_new+0x47/0x2e0
[  678.394027][T17982]  snd_timer_instance_new+0x47/0x2e0
[  678.394049][T17982]  snd_seq_timer_open+0x1d4/0x600
[  678.394068][T17982]  ? __pfx_snd_seq_timer_open+0x10/0x10
[  678.394090][T17982]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  678.394106][T17982]  ? lockdep_hardirqs_on+0x78/0x100
[  678.394121][T17982]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  678.394138][T17982]  queue_use+0xdc/0x1f0
[  678.394161][T17982]  snd_seq_queue_alloc+0x2e5/0x590
[  678.394187][T17982]  snd_seq_ioctl_create_queue+0xa9/0x370
[  678.394215][T17982]  call_seq_client_ctl+0xa3/0x130
[  678.394236][T17982]  snd_seq_kernel_client_ctl+0x77/0xd0
[  678.394257][T17982]  alloc_seq_queue+0xdb/0x180
[  678.394277][T17982]  ? __pfx_alloc_seq_queue+0x10/0x10
[  678.394307][T17982]  ? mark_held_locks+0x40/0x70
[  678.394325][T17982]  ? _raw_spin_unlock_irq+0x23/0x50
[  678.394339][T17982]  ? lockdep_hardirqs_on+0x78/0x100
[  678.394356][T17982]  snd_seq_oss_open+0x2b2/0xa10
[  678.394379][T17982]  odev_open+0x79/0xc0
[  678.394396][T17982]  ? __pfx_odev_open+0x10/0x10
[  678.394414][T17982]  soundcore_open+0x2e3/0x5a0
[  678.394435][T17982]  ? __pfx_soundcore_open+0x10/0x10
[  678.394453][T17982]  chrdev_open+0x234/0x6a0
[  678.394467][T17982]  ? __pfx_apparmor_file_open+0x10/0x10
[  678.394487][T17982]  ? __pfx_chrdev_open+0x10/0x10
[  678.394502][T17982]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  678.394530][T17982]  do_dentry_open+0x6d8/0x1660
[  678.394553][T17982]  ? __pfx_chrdev_open+0x10/0x10
[  678.394571][T17982]  vfs_open+0x82/0x3f0
[  678.394590][T17982]  path_openat+0x208c/0x31a0
[  678.394611][T17982]  ? __pfx_path_openat+0x10/0x10
[  678.394632][T17982]  do_file_open+0x20e/0x430
[  678.394647][T17982]  ? __pfx_do_file_open+0x10/0x10
[  678.394675][T17982]  ? alloc_fd+0x476/0x790
[  678.394699][T17982]  ? do_getname+0x191/0x390
[  678.394717][T17982]  do_sys_openat2+0x10d/0x1e0
[  678.394734][T17982]  ? __pfx_do_sys_openat2+0x10/0x10
[  678.394753][T17982]  ? __fget_files+0x21f/0x3d0
[  678.394778][T17982]  __x64_sys_openat+0x12d/0x210
[  678.394796][T17982]  ? __pfx___x64_sys_openat+0x10/0x10
[  678.394821][T17982]  do_syscall_64+0x106/0xf80
[  678.394836][T17982]  ? clear_bhb_loop+0x40/0x90
[  678.394854][T17982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.394869][T17982] RIP: 0033:0x7ff93579c629
[  678.394883][T17982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  678.394898][T17982] RSP: 002b:00007ff936716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  678.394912][T17982] RAX: ffffffffffffffda RBX: 00007ff935a15fa0 RCX: 00007ff93579c629
[  678.394922][T17982] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  678.394931][T17982] RBP: 00007ff935832b39 R08: 0000000000000000 R09: 0000000000000000
[  678.394941][T17982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  678.394950][T17982] R13: 00007ff935a16038 R14: 00007ff935a15fa0 R15: 00007ffd8fd3dd58
[  678.394970][T17982]  </TASK>
[  679.503282][ T7423] Bluetooth: hci0: command 0x0c1a tx timeout
[  679.509363][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  679.515414][ T7423] Bluetooth: hci2: command 0x0c1a tx timeout
[  679.526455][ T7423] Bluetooth: hci4: command 0x0c1a tx timeout
[  680.025861][T17980] kexec: Could not allocate control_code_buffer
[  680.711778][T18023] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2764'.
[  681.109674][T18030] zswap: compressor  not available
[  682.899051][T18058] FAULT_INJECTION: forcing a failure.
[  682.899051][T18058] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  682.935411][T18059] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  682.974686][T18058] CPU: 0 UID: 0 PID: 18058 Comm: syz.4.2773 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  682.974723][T18058] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  682.974732][T18058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  682.974742][T18058] Call Trace:
[  682.974748][T18058]  <TASK>
[  682.974755][T18058]  dump_stack_lvl+0x100/0x190
[  682.974783][T18058]  should_fail_ex.cold+0x5/0xa
[  682.974799][T18058]  ? prepare_alloc_pages+0x16d/0x5f0
[  682.974817][T18058]  should_fail_alloc_page+0xeb/0x140
[  682.974833][T18058]  prepare_alloc_pages+0x1f0/0x5f0
[  682.974852][T18058]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  682.974885][T18058]  ? rcu_is_watching+0x12/0xc0
[  682.974907][T18058]  ? trace_mm_page_alloc+0x17a/0x1d0
[  682.974924][T18058]  ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0
[  682.974949][T18058]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  682.974970][T18058]  ? stack_trace_save+0x8e/0xc0
[  682.974986][T18058]  ? stack_depot_save_flags+0x27/0x9d0
[  682.975008][T18058]  ? is_bpf_text_address+0x8a/0x1a0
[  682.975030][T18058]  ? is_bpf_text_address+0x8a/0x1a0
[  682.975052][T18058]  ? kasan_save_stack+0x3f/0x50
[  682.975073][T18058]  ? kasan_save_track+0x14/0x30
[  682.975094][T18058]  ? kmem_cache_alloc_node_noprof+0x25a/0x6f0
[  682.975114][T18058]  ? alloc_vmap_area+0x640/0x2bd0
[  682.975136][T18058]  ? __get_vm_area_node+0x1ca/0x330
[  682.975150][T18058]  ? __vmalloc_node_range_noprof+0x213/0x1530
[  682.975166][T18058]  ? __kvmalloc_node_noprof+0x3de/0xa00
[  682.975186][T18058]  ? __do_sys_listmount+0x289/0xee0
[  682.975206][T18058]  ? do_syscall_64+0x106/0xf80
[  682.975222][T18058]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.975243][T18058]  alloc_pages_bulk_noprof+0x782/0x1490
[  682.975271][T18058]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  682.975299][T18058]  ? alloc_pages_noprof+0x233/0x390
[  682.975315][T18058]  __kasan_populate_vmalloc+0xf0/0x210
[  682.975340][T18058]  alloc_vmap_area+0x95d/0x2bd0
[  682.975370][T18058]  ? __pfx_alloc_vmap_area+0x10/0x10
[  682.975398][T18058]  __get_vm_area_node+0x1ca/0x330
[  682.975417][T18058]  __vmalloc_node_range_noprof+0x213/0x1530
[  682.975435][T18058]  ? __do_sys_listmount+0x289/0xee0
[  682.975459][T18058]  ? __do_sys_listmount+0x289/0xee0
[  682.975485][T18058]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  682.975506][T18058]  ? rcu_is_watching+0x12/0xc0
[  682.975531][T18058]  __kvmalloc_node_noprof+0x3de/0xa00
[  682.975552][T18058]  ? __do_sys_listmount+0x289/0xee0
[  682.975572][T18058]  ? __do_sys_listmount+0x289/0xee0
[  682.975591][T18058]  ? _copy_from_user+0x59/0xd0
[  682.975613][T18058]  ? copy_mnt_id_req+0x1b1/0x350
[  682.975632][T18058]  __do_sys_listmount+0x289/0xee0
[  682.975652][T18058]  ? __pfx_do_futex+0x10/0x10
[  682.975672][T18058]  ? __fget_files+0x21f/0x3d0
[  682.975694][T18058]  ? __pfx___do_sys_listmount+0x10/0x10
[  682.975727][T18058]  do_syscall_64+0x106/0xf80
[  682.975743][T18058]  ? clear_bhb_loop+0x40/0x90
[  682.975761][T18058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.975776][T18058] RIP: 0033:0x7f84ecb9c629
[  682.975790][T18058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.975805][T18058] RSP: 002b:00007f84ed998028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  682.975821][T18058] RAX: ffffffffffffffda RBX: 00007f84ece15fa0 RCX: 00007f84ecb9c629
[  682.975831][T18058] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  682.975842][T18058] RBP: 00007f84ecc32b39 R08: 0000000000000000 R09: 0000000000000000
[  682.975851][T18058] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  682.975886][T18058] R13: 00007f84ece16038 R14: 00007f84ece15fa0 R15: 00007ffe99f60be8
[  682.975908][T18058]  </TASK>
[  683.408761][T18059] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  683.414825][T18059] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  683.421022][T18059] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  683.846510][T18082] zswap: compressor  not available
[  684.149461][T18058] syz.4.2773: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  684.370822][T18058] CPU: 0 UID: 0 PID: 18058 Comm: syz.4.2773 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  684.370859][T18058] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  684.370869][T18058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  684.370878][T18058] Call Trace:
[  684.370884][T18058]  <TASK>
[  684.370890][T18058]  dump_stack_lvl+0x100/0x190
[  684.370917][T18058]  warn_alloc.cold+0x95/0x1c1
[  684.370944][T18058]  ? __pfx_warn_alloc+0x10/0x10
[  684.370963][T18058]  ? lockdep_hardirqs_on+0x78/0x100
[  684.370981][T18058]  ? __get_vm_area_node+0x2c5/0x330
[  684.371002][T18058]  ? __get_vm_area_node+0x208/0x330
[  684.371028][T18058]  __vmalloc_node_range_noprof+0xbf4/0x1530
[  684.371052][T18058]  ? __do_sys_listmount+0x289/0xee0
[  684.371080][T18058]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  684.371102][T18058]  ? rcu_is_watching+0x12/0xc0
[  684.371128][T18058]  __kvmalloc_node_noprof+0x3de/0xa00
[  684.371150][T18058]  ? __do_sys_listmount+0x289/0xee0
[  684.371169][T18058]  ? __do_sys_listmount+0x289/0xee0
[  684.371189][T18058]  ? _copy_from_user+0x59/0xd0
[  684.371212][T18058]  ? copy_mnt_id_req+0x1b1/0x350
[  684.371231][T18058]  __do_sys_listmount+0x289/0xee0
[  684.371252][T18058]  ? __pfx_do_futex+0x10/0x10
[  684.371272][T18058]  ? __fget_files+0x21f/0x3d0
[  684.371294][T18058]  ? __pfx___do_sys_listmount+0x10/0x10
[  684.371327][T18058]  do_syscall_64+0x106/0xf80
[  684.371343][T18058]  ? clear_bhb_loop+0x40/0x90
[  684.371361][T18058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.371377][T18058] RIP: 0033:0x7f84ecb9c629
[  684.371391][T18058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  684.371406][T18058] RSP: 002b:00007f84ed998028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  684.371421][T18058] RAX: ffffffffffffffda RBX: 00007f84ece15fa0 RCX: 00007f84ecb9c629
[  684.371431][T18058] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  684.371440][T18058] RBP: 00007f84ecc32b39 R08: 0000000000000000 R09: 0000000000000000
[  684.371449][T18058] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  684.371458][T18058] R13: 00007f84ece16038 R14: 00007f84ece15fa0 R15: 00007ffe99f60be8
[  684.371478][T18058]  </TASK>
[  684.371484][T18058] Mem-Info:
[  684.944749][ T7480] Bluetooth: hci4: command 0x0c1a tx timeout
[  685.102462][T18058] active_anon:8278 inactive_anon:24643 isolated_anon:0
[  685.102462][T18058]  active_file:31037 inactive_file:39185 isolated_file:0
[  685.102462][T18058]  unevictable:1996 dirty:650 writeback:0
[  685.102462][T18058]  slab_reclaimable:12424 slab_unreclaimable:97415
[  685.102462][T18058]  mapped:27978 shmem:7426 pagetables:1417
[  685.102462][T18058]  sec_pagetables:0 bounce:0
[  685.102462][T18058]  kernel_misc_reclaimable:0
[  685.102462][T18058]  free:1250618 free_pcp:36942 free_cma:0
[  685.205946][T18058] Node 0 active_anon:36872kB inactive_anon:98552kB active_file:124116kB inactive_file:156616kB unevictable:6480kB isolated(anon):0kB isolated(file):0kB mapped:115712kB dirty:2616kB writeback:0kB shmem:31976kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:83968kB kernel_stack:13088kB pagetables:5496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  685.277605][T18058] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  685.342051][T18058] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  685.410235][T18058] lowmem_reserve[]: 0 2477 2479 2479 2479
[  685.425769][T18058] Node 0 DMA32 free:1027924kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45496kB inactive_anon:98544kB active_file:124116kB inactive_file:156616kB unevictable:6480kB writepending:2616kB zspages:4kB present:3129332kB managed:2537464kB mlocked:4944kB bounce:0kB free_pcp:151212kB local_pcp:151212kB free_cma:0kB
[  685.508623][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  685.514739][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  685.520851][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  685.642105][T18058] lowmem_reserve[]: 0 0 1 1 1
[  685.667130][T18058] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1064kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB
[  685.711333][T18104] HfR: entered promiscuous mode
[  685.813210][T18058] lowmem_reserve[]: 0 0 0 0 0
[  685.813248][T18058] Node 1 Normal free:3942928kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  685.813295][T18058] lowmem_reserve[]: 0 0 0 0 0
[  685.813324][T18058] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  685.813416][T18058] Node 0 DMA32: 4929*4kB (UME) 64*8kB (UE) 40*16kB (UME) 1456*32kB (UME) 941*64kB (UME) 721*128kB (UME) 430*256kB (UME) 198*512kB (UME) 168*1024kB (UM) 8*2048kB (UM) 98*4096kB (UM) = 1021252kB
[  685.813544][T18058] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  685.813626][T18058] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 12*16kB (UME) 11*32kB (UME) 9*64kB (UME) 3*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 4*2048kB (UME) 959*4096kB (M) = 3942928kB
[  685.813764][T18058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  685.813778][T18058] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=0 hugepages_size=2048kB
[  685.813790][T18058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  685.813803][T18058] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  685.813815][T18058] 82851 total pagecache pages
[  685.813822][T18058] 54 pages in swap cache
[  685.813828][T18058] Free swap  = 117528kB
[  685.813834][T18058] Total swap = 124996kB
[  685.813840][T18058] 2097051 pages RAM
[  685.813846][T18058] 0 pages HighMem/MovableOnly
[  685.813852][T18058] 430804 pages reserved
[  685.813858][T18058] 0 pages cma reserved
[  686.064736][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  686.064809][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  686.120319][T18114] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  686.120440][T18114] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  686.120533][T18114] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  686.120624][T18114] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  687.006210][ T7480] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  687.008698][ T7480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  687.009293][ T7480] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  687.009933][ T7480] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  687.010324][ T7480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  687.633508][T15092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.696767][T18118] chnl_net:caif_netlink_parms(): no params data found
[  687.799953][T15092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.952363][T15092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.129477][T15092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.140196][ T7423] Bluetooth: hci0: command 0x0c1a tx timeout
[  688.146175][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  688.153142][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  688.196290][T18118] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.231712][T18118] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.258840][T18118] bridge_slave_0: entered allmulticast mode
[  688.283345][T18118] bridge_slave_0: entered promiscuous mode
[  688.308327][T18118] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.329953][T18118] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.353566][T18118] bridge_slave_1: entered allmulticast mode
[  688.376432][T18118] bridge_slave_1: entered promiscuous mode
[  688.490300][T18118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  688.561027][T18118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  688.675235][T18118] team0: Port device team_slave_0 added
[  688.714045][T18118] team0: Port device team_slave_1 added
[  688.838502][T18133] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  688.880069][T18118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.910790][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.950436][T18133] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  688.986763][T18133] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  689.026885][ T7480] Bluetooth: hci3: command tx timeout
[  689.060652][T18118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.102601][T15092] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.114664][T18133] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  689.193669][T18118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  689.193686][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  689.193706][T18118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  689.231433][T18137] zswap: compressor  not available
[  689.278159][T18145] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  689.278189][T18145] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  689.278478][T18145] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  689.278499][T18145] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  689.437660][T18118] hsr_slave_0: entered promiscuous mode
[  689.438263][T18118] hsr_slave_1: entered promiscuous mode
[  689.445440][T18118] debugfs: 'hsr0' already exists in 'hsr'
[  689.445463][T18118] Cannot create hsr debugfs directory
[  689.463328][T15092] bridge_slave_0: left allmulticast mode
[  689.463386][T15092] bridge_slave_0: left promiscuous mode
[  689.463541][T15092] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.793228][T15092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  689.794743][T15092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  689.795649][T15092] bond0 (unregistering): Released all slaves
[  689.852493][T15092] HfR: left promiscuous mode
[  689.963683][T18153] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  689.963711][T18153] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  689.971454][T18153] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  689.971481][T18153] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  690.072463][T18154] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  690.072490][T18154] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  690.072896][T18154] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  690.072918][T18154] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  690.372322][T18156] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  690.372351][T18156] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  690.407662][T18156] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  690.407690][T18156] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  690.442138][T18158] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2803'.
[  690.824873][T18163] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  690.825023][T18163] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  690.825158][T18163] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  690.825301][T18163] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  690.825363][T18163] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  690.878381][T18163] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  691.027485][T15092] hsr_slave_0: left promiscuous mode
[  691.028115][T15092] hsr_slave_1: left promiscuous mode
[  691.028518][T15092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  691.028532][T15092] batman_adv: batadv0: Removing interface: batadv_slave_0
[  691.032741][T15092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  691.032759][T15092] batman_adv: batadv0: Removing interface: batadv_slave_1
[  691.059582][T15092] veth1_macvtap: left promiscuous mode
[  691.059623][T15092] veth0_macvtap: left allmulticast mode
[  691.059751][T15092] veth0_macvtap: left promiscuous mode
[  691.059806][T15092] veth1_vlan: left promiscuous mode
[  692.039389][T18171] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  692.146403][T15092] team0 (unregistering): Port device team_slave_1 removed
[  692.183952][T15092] team0 (unregistering): Port device team_slave_0 removed
[  692.790401][T18118] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  692.843730][T18118] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  692.859622][ T7480] Bluetooth: hci3: command 0x040f tx timeout
[  692.865652][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  692.872217][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  692.878687][T14145] Bluetooth: hci2: command 0x0c1a tx timeout
[  693.018519][T18118] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  693.235408][T18118] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  693.749724][T18118] 8021q: adding VLAN 0 to HW filter on device bond0
[  693.799169][T18118] 8021q: adding VLAN 0 to HW filter on device team0
[  693.857486][T15093] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.864600][T15093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  693.930107][T15093] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.937240][T15093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  694.050702][T18219] FAULT_INJECTION: forcing a failure.
[  694.050702][T18219] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  694.138210][T18219] CPU: 0 UID: 0 PID: 18219 Comm: syz.5.2807 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  694.138246][T18219] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  694.138255][T18219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  694.138264][T18219] Call Trace:
[  694.138270][T18219]  <TASK>
[  694.138277][T18219]  dump_stack_lvl+0x100/0x190
[  694.138303][T18219]  should_fail_ex.cold+0x5/0xa
[  694.138319][T18219]  ? prepare_alloc_pages+0x16d/0x5f0
[  694.138338][T18219]  should_fail_alloc_page+0xeb/0x140
[  694.138354][T18219]  prepare_alloc_pages+0x1f0/0x5f0
[  694.138373][T18219]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  694.138397][T18219]  ? rcu_is_watching+0x12/0xc0
[  694.138419][T18219]  ? trace_mm_page_alloc+0x17a/0x1d0
[  694.138435][T18219]  ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0
[  694.138458][T18219]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  694.138479][T18219]  ? stack_trace_save+0x8e/0xc0
[  694.138494][T18219]  ? stack_depot_save_flags+0x27/0x9d0
[  694.138518][T18219]  ? is_bpf_text_address+0x8a/0x1a0
[  694.138539][T18219]  ? is_bpf_text_address+0x8a/0x1a0
[  694.138562][T18219]  ? kasan_save_stack+0x3f/0x50
[  694.138582][T18219]  ? kasan_save_track+0x14/0x30
[  694.138603][T18219]  ? kmem_cache_alloc_node_noprof+0x25a/0x6f0
[  694.138624][T18219]  ? alloc_vmap_area+0x640/0x2bd0
[  694.138645][T18219]  ? __get_vm_area_node+0x1ca/0x330
[  694.138659][T18219]  ? __vmalloc_node_range_noprof+0x213/0x1530
[  694.138675][T18219]  ? __kvmalloc_node_noprof+0x3de/0xa00
[  694.138695][T18219]  ? __do_sys_listmount+0x289/0xee0
[  694.138715][T18219]  ? do_syscall_64+0x106/0xf80
[  694.138730][T18219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.138751][T18219]  alloc_pages_bulk_noprof+0x782/0x1490
[  694.138779][T18219]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  694.138808][T18219]  ? alloc_pages_noprof+0x233/0x390
[  694.138825][T18219]  __kasan_populate_vmalloc+0xf0/0x210
[  694.138850][T18219]  alloc_vmap_area+0x95d/0x2bd0
[  694.138880][T18219]  ? __pfx_alloc_vmap_area+0x10/0x10
[  694.138908][T18219]  __get_vm_area_node+0x1ca/0x330
[  694.138927][T18219]  __vmalloc_node_range_noprof+0x213/0x1530
[  694.138944][T18219]  ? __do_sys_listmount+0x289/0xee0
[  694.138969][T18219]  ? __do_sys_listmount+0x289/0xee0
[  694.138994][T18219]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  694.139016][T18219]  ? rcu_is_watching+0x12/0xc0
[  694.139050][T18219]  __kvmalloc_node_noprof+0x3de/0xa00
[  694.139072][T18219]  ? __do_sys_listmount+0x289/0xee0
[  694.139093][T18219]  ? __do_sys_listmount+0x289/0xee0
[  694.139112][T18219]  ? _copy_from_user+0x59/0xd0
[  694.139134][T18219]  ? copy_mnt_id_req+0x1b1/0x350
[  694.139153][T18219]  __do_sys_listmount+0x289/0xee0
[  694.139174][T18219]  ? __pfx_do_futex+0x10/0x10
[  694.139194][T18219]  ? __fget_files+0x21f/0x3d0
[  694.139216][T18219]  ? __pfx___do_sys_listmount+0x10/0x10
[  694.139249][T18219]  do_syscall_64+0x106/0xf80
[  694.139265][T18219]  ? clear_bhb_loop+0x40/0x90
[  694.139282][T18219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.139298][T18219] RIP: 0033:0x7f2a4b99c629
[  694.139312][T18219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.139326][T18219] RSP: 002b:00007f2a4c775028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  694.139341][T18219] RAX: ffffffffffffffda RBX: 00007f2a4bc15fa0 RCX: 00007f2a4b99c629
[  694.139352][T18219] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  694.139361][T18219] RBP: 00007f2a4ba32b39 R08: 0000000000000000 R09: 0000000000000000
[  694.139371][T18219] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  694.139380][T18219] R13: 00007f2a4bc16038 R14: 00007f2a4bc15fa0 R15: 00007ffea47559f8
[  694.139400][T18219]  </TASK>
[  694.989036][ T7480] Bluetooth: hci3: command 0x040f tx timeout
[  695.490666][T18118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  696.662562][T18118] veth0_vlan: entered promiscuous mode
[  696.714310][T18118] veth1_vlan: entered promiscuous mode
[  696.976740][T18118] veth0_macvtap: entered promiscuous mode
[  697.017391][ T7480] Bluetooth: hci3: command 0x040f tx timeout
[  697.052035][T18118] veth1_macvtap: entered promiscuous mode
[  697.203065][T18118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  697.235663][T18118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  697.277220][T15091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.306762][T15091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.319356][T15092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.363991][T15092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.613184][T15092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.654758][T15092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  697.727857][T15090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.767312][T15090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.103481][ T7480] Bluetooth: hci3: command 0x040f tx timeout
[  699.597239][T18280] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  699.658342][T18280] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  699.751546][T18280] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  699.816311][T18280] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  700.089762][T18287] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  700.575487][T18290] zswap: compressor  not available
[  701.736894][ T7480] Bluetooth: hci1: command 0x0c1a tx timeout
[  701.816969][ T7480] Bluetooth: hci3: command 0x040f tx timeout
[  701.823009][ T7423] Bluetooth: hci0: command 0x0c1a tx timeout
[  702.032011][T15093] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.135965][T15093] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.259673][T15093] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.404422][T15093] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.482441][ T7423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  702.494491][ T7423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  702.504036][ T7423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  702.521176][ T7423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  702.529771][ T7423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  702.874046][T18331] EXT4-fs warning: 16 callbacks suppressed
[  702.874061][T18331] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  703.006709][T15093] team0: left allmulticast mode
[  703.006730][T15093] team_slave_1: left allmulticast mode
[  703.006748][T15093] team0: left promiscuous mode
[  703.006758][T15093] team_slave_1: left promiscuous mode
[  703.015738][T15093] bridge0: port 3(team0) entered disabled state
[  703.023378][T18331] EXT4-fs error: 16 callbacks suppressed
[  703.023392][T18331] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  703.023807][T18331] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  703.023829][T18331] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  703.050068][T15093] bridge_slave_1: left allmulticast mode
[  703.050089][T15093] bridge_slave_1: left promiscuous mode
[  703.050217][T15093] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.052539][T15093] bridge_slave_0: left allmulticast mode
[  703.052556][T15093] bridge_slave_0: left promiscuous mode
[  703.052671][T15093] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.158955][T18334] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  703.158983][T18334] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  703.161031][T18334] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  703.161055][T18334] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  703.745576][T15093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  703.766956][T15093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  703.768003][T15093] bond0 (unregistering): Released all slaves
[  703.839666][T15093] HfR: left promiscuous mode
[  704.144136][T18338] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  704.164281][T18328] chnl_net:caif_netlink_parms(): no params data found
[  704.276883][T18338] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  704.381747][T18338] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  704.496112][T18338] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  704.620764][ T7480] Bluetooth: hci2: command tx timeout
[  704.685774][T18343] zswap: compressor  not available
[  704.707924][T18328] bridge0: port 1(bridge_slave_0) entered blocking state
[  704.716959][T18328] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.724167][T18328] bridge_slave_0: entered allmulticast mode
[  704.743618][T18350] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  704.804810][T18328] bridge_slave_0: entered promiscuous mode
[  704.850716][T18350] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  704.892622][T18328] bridge0: port 2(bridge_slave_1) entered blocking state
[  704.927146][T18328] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.947299][T18350] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  704.974201][T18328] bridge_slave_1: entered allmulticast mode
[  705.007386][T18328] bridge_slave_1: entered promiscuous mode
[  705.026980][T18350] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  705.113539][T15093] hsr_slave_1: left promiscuous mode
[  705.141089][T15093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  705.193373][T15093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  705.229429][T15093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  705.254954][T15093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  705.299080][T15093] veth1_macvtap: left promiscuous mode
[  705.330142][T15093] veth0_macvtap: left promiscuous mode
[  705.335674][T15093] veth1_vlan: left promiscuous mode
[  705.351723][T15093] veth0_vlan: left promiscuous mode
[  705.504465][T15093] pim6reg (unregistering): left allmulticast mode
[  705.818097][T15093] team0 (unregistering): Port device team_slave_1 removed
[  706.224652][T18328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  706.290603][T18328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  706.323466][T18368] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  706.431453][T18368] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  706.512182][T18368] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  706.587933][T18368] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  706.682011][T18328] team0: Port device team_slave_0 added
[  706.700099][ T7480] Bluetooth: hci2: command tx timeout
[  706.808614][T18328] team0: Port device team_slave_1 added
[  707.048363][T18328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  707.055346][T18328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.222205][T18328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  707.281574][T18328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  707.299571][T18328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  707.407469][T18328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  707.632990][T18328] hsr_slave_0: entered promiscuous mode
[  707.660546][T18328] hsr_slave_1: entered promiscuous mode
[  707.696185][T18328] debugfs: 'hsr0' already exists in 'hsr'
[  707.713411][ T7423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  707.724247][ T7423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  707.732686][ T7423] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  707.741282][ T7423] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  707.748745][ T7423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  707.780211][T18328] Cannot create hsr debugfs directory
[  707.836266][T15093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.976799][T18389] EXT4-fs warning: 8 callbacks suppressed
[  707.976815][T18389] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  708.034028][T15093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.054714][T18389] EXT4-fs error: 8 callbacks suppressed
[  708.054730][T18389] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  708.139556][T18389] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  708.199666][T15093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.210277][T18389] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  708.342082][T15093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.452309][T18394] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  708.452338][T18394] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  708.477447][T18394] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  708.477475][T18394] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  708.715819][T18396] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  708.715849][T18396] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  708.725420][T18396] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  708.725449][T18396] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  708.780749][ T7423] Bluetooth: hci2: command tx timeout
[  708.901286][T18398] zswap: compressor  not available
[  709.130654][T15093] bridge_slave_1: left allmulticast mode
[  709.171844][T15093] bridge_slave_1: left promiscuous mode
[  709.177566][T15093] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.227097][T18404] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  709.261853][T15093] bridge_slave_0: left allmulticast mode
[  709.271915][T15093] bridge_slave_0: left promiscuous mode
[  709.277621][T15093] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.311414][T18404] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  709.376510][T18404] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  709.452418][T18404] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  709.591925][T18414] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  709.666366][T18414] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  709.709594][T18414] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  709.763813][T18414] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  709.814465][T15093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  709.823462][ T7423] Bluetooth: hci3: command tx timeout
[  709.842408][T15093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  709.867622][T15093] bond0 (unregistering): Released all slaves
[  709.954926][T18387] chnl_net:caif_netlink_parms(): no params data found
[  710.275629][T18415] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  710.324667][T18415] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  710.359138][T18415] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  710.391068][T18415] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  710.444323][T18415] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  710.473750][T15093] hsr_slave_0: left promiscuous mode
[  710.481192][T18415] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  710.502978][T15093] hsr_slave_1: left promiscuous mode
[  710.517197][T18415] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  710.524001][T15093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.532574][T18415] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  710.549784][T15093] batman_adv: batadv0: Removing interface: batadv_slave_0
[  710.583877][T15093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.609594][T15093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  710.712424][T15093] veth1_macvtap: left promiscuous mode
[  710.730206][T15093] veth0_macvtap: left promiscuous mode
[  710.735776][T15093] veth1_vlan: left promiscuous mode
[  710.789615][T15093] veth0_vlan: left promiscuous mode
[  710.894782][T18433] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  710.978652][T18437] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[  711.397895][T15093] team0 (unregistering): Port device team_slave_1 removed
[  711.448865][T15093] team0 (unregistering): Port device team_slave_0 removed
[  711.894641][T18387] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.920882][T18387] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.959429][T18387] bridge_slave_0: entered allmulticast mode
[  712.003294][T18387] bridge_slave_0: entered promiscuous mode
[  712.052225][T18387] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.090576][T18387] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.121784][T18387] bridge_slave_1: entered allmulticast mode
[  712.140325][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  712.153009][T18387] bridge_slave_1: entered promiscuous mode
[  712.253619][T18328] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  712.379257][T18328] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  712.387884][ T7423] Bluetooth: hci2: command 0x0c1a tx timeout
[  712.394006][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  712.454532][T18328] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  712.494808][T18387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.513359][T18453] hub 1-0:1.0: USB hub found
[  712.550409][ T7423] Bluetooth: hci3: command 0x040f tx timeout
[  712.568644][T18387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  712.599210][T18453] hub 1-0:1.0: 1 port detected
[  712.682989][T18328] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  712.829215][T18387] team0: Port device team_slave_0 added
[  712.893897][T18387] team0: Port device team_slave_1 added
[  712.993503][T18470] EXT4-fs warning: 10 callbacks suppressed
[  712.993521][T18470] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  713.077763][T18387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.109322][T18470] EXT4-fs error: 10 callbacks suppressed
[  713.109338][T18470] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  713.132488][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.216586][T18470] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  713.250620][T18387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.280403][T18470] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  713.305991][T18387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  713.354234][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  713.481333][T18387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.554777][T18478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2850'.
[  713.589230][T18479] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  713.589259][T18479] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  713.593229][T18479] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  713.593256][T18479] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  713.632233][T18478] team0 (unregistering): Port device team_slave_1 removed
[  713.672827][T18480] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  713.672856][T18480] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  713.673111][T18480] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  713.673132][T18480] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  713.844667][T18387] hsr_slave_0: entered promiscuous mode
[  713.845263][T18387] hsr_slave_1: entered promiscuous mode
[  713.845683][T18387] debugfs: 'hsr0' already exists in 'hsr'
[  713.845700][T18387] Cannot create hsr debugfs directory
[  714.111110][T18486] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  714.111138][T18486] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  714.111376][T18486] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  714.111396][T18486] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  714.230411][T18489] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  714.230442][T18489] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  714.231590][T18489] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  714.231614][T18489] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  714.274134][T18328] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.314335][T18328] 8021q: adding VLAN 0 to HW filter on device team0
[  714.337734][T15090] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.337805][T15090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  714.448322][T15090] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.448392][T15090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.461105][ T7423] Bluetooth: hci2: command 0x0c1a tx timeout
[  714.623499][ T7423] Bluetooth: hci3: command 0x040f tx timeout
[  715.077363][T18387] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  715.133950][T18387] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  715.136809][T18387] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  715.156317][T18387] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  715.226952][T18328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  715.357798][T18387] 8021q: adding VLAN 0 to HW filter on device bond0
[  715.416116][T18387] 8021q: adding VLAN 0 to HW filter on device team0
[  715.434415][T15100] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.434484][T15100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.435720][T15100] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.435782][T15100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  715.798820][T18328] veth0_vlan: entered promiscuous mode
[  715.819388][T18328] veth1_vlan: entered promiscuous mode
[  715.867748][T18387] 8021q: adding VLAN 0 to HW filter on device batadv0
[  715.881609][T18328] veth0_macvtap: entered promiscuous mode
[  715.894467][T18328] veth1_macvtap: entered promiscuous mode
[  715.921055][T18328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.958308][T18328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.965771][T15090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  715.965813][T15090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  715.965840][T15090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  715.965866][T15090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  716.127426][T15100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.127445][T15100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.198332][T15092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.198352][T15092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.396864][T18387] veth0_vlan: entered promiscuous mode
[  716.409755][T18387] veth1_vlan: entered promiscuous mode
[  716.448887][T18387] veth0_macvtap: entered promiscuous mode
[  716.463288][T18387] veth1_macvtap: entered promiscuous mode
[  716.499291][T18387] batman_adv: batadv0: Interface activated: batadv_slave_0
[  716.515065][T18387] batman_adv: batadv0: Interface activated: batadv_slave_1
[  716.533488][T15100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  716.533534][T15100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  716.533562][T15100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  716.533587][T15100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  716.544083][ T7423] Bluetooth: hci2: command 0x0c1a tx timeout
[  716.704259][ T7423] Bluetooth: hci3: command 0x040f tx timeout
[  716.735182][T15090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.735200][T15090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.787965][T15088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.787984][T15088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.894138][T18533] FAULT_INJECTION: forcing a failure.
[  716.894138][T18533] name fail_futex, interval 1, probability 0, space 0, times 0
[  716.894169][T18533] CPU: 0 UID: 0 PID: 18533 Comm: syz.4.2836 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  716.894204][T18533] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  716.894212][T18533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  716.894222][T18533] Call Trace:
[  716.894227][T18533]  <TASK>
[  716.894234][T18533]  dump_stack_lvl+0x100/0x190
[  716.894261][T18533]  should_fail_ex.cold+0x5/0xa
[  716.894280][T18533]  get_futex_key+0x1d2/0x1620
[  716.894300][T18533]  ? __pfx_get_futex_key+0x10/0x10
[  716.894317][T18533]  ? find_held_lock+0x2b/0x80
[  716.894330][T18533]  ? futex_wake+0x456/0x530
[  716.894355][T18533]  futex_wake+0xea/0x530
[  716.894378][T18533]  ? __pfx_futex_wake+0x10/0x10
[  716.894403][T18533]  ? find_held_lock+0x2b/0x80
[  716.894416][T18533]  ? __fget_files+0x215/0x3d0
[  716.894440][T18533]  do_futex+0x32b/0x350
[  716.894459][T18533]  ? __pfx_do_futex+0x10/0x10
[  716.894482][T18533]  __x64_sys_futex+0x34f/0x4d0
[  716.894501][T18533]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  716.894517][T18533]  ? __pfx___x64_sys_futex+0x10/0x10
[  716.894536][T18533]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  716.894556][T18533]  ? syscall_user_dispatch+0x76/0x130
[  716.894588][T18533]  do_syscall_64+0x106/0xf80
[  716.894605][T18533]  ? clear_bhb_loop+0x40/0x90
[  716.894624][T18533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.894639][T18533] RIP: 0033:0x7f2318b9c629
[  716.894653][T18533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.894669][T18533] RSP: 002b:00007f23199850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  716.894684][T18533] RAX: ffffffffffffffda RBX: 00007f2318e15fa8 RCX: 00007f2318b9c629
[  716.894694][T18533] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2318e15fac
[  716.894703][T18533] RBP: 00007f2318e15fa0 R08: 0000000000000000 R09: 0000000000000000
[  716.894712][T18533] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  716.894721][T18533] R13: 00007f2318e16038 R14: 00007fff1b8ec710 R15: 00007fff1b8ec7f8
[  716.894741][T18533]  </TASK>
[  717.575963][T18538] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  717.576128][T18538] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  717.576262][T18538] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  717.576592][T18538] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  719.125357][T18566] zswap: compressor  not available
[  719.584189][ T7423] Bluetooth: hci3: command 0x040f tx timeout
[  719.590219][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  719.596415][ T7430] Bluetooth: hci0: command 0x0c1a tx timeout
[  719.602396][ T7430] Bluetooth: hci1: command 0x0c1a tx timeout
[  719.800347][T18594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2865'.
[  719.856575][T18574] hub 1-0:1.0: USB hub found
[  719.878293][T18574] hub 1-0:1.0: 1 port detected
[  719.899221][T18594] team0 (unregistering): Port device team_slave_1 removed
[  719.986443][T18594] FAULT_INJECTION: forcing a failure.
[  719.986443][T18594] name failslab, interval 1, probability 0, space 0, times 0
[  720.104365][T18594] CPU: 0 UID: 0 PID: 18594 Comm: syz.1.2865 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  720.104401][T18594] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  720.104410][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  720.104420][T18594] Call Trace:
[  720.104426][T18594]  <TASK>
[  720.104432][T18594]  dump_stack_lvl+0x100/0x190
[  720.104460][T18594]  should_fail_ex.cold+0x5/0xa
[  720.104478][T18594]  should_failslab+0xc2/0x120
[  720.104494][T18594]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  720.104516][T18594]  ? __alloc_skb+0x140/0x710
[  720.104535][T18594]  __alloc_skb+0x140/0x710
[  720.104549][T18594]  ? __alloc_skb+0x5b7/0x710
[  720.104563][T18594]  ? __pfx___alloc_skb+0x10/0x10
[  720.104585][T18594]  ethnl_default_notify+0x4b6/0x9f0
[  720.104604][T18594]  ? __pfx_ethnl_default_notify+0x10/0x10
[  720.104627][T18594]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  720.104651][T18594]  ? dev_map_notification+0x50f/0xac0
[  720.104670][T18594]  ? __pfx_ethnl_default_notify+0x10/0x10
[  720.104686][T18594]  ethnl_notify+0xc2/0x1c0
[  720.104703][T18594]  ethnl_netdev_event+0x146/0x180
[  720.104720][T18594]  notifier_call_chain+0x99/0x420
[  720.104743][T18594]  call_netdevice_notifiers_info+0xbe/0x110
[  720.104765][T18594]  netdev_change_features+0x81/0xb0
[  720.104782][T18594]  ? __pfx_netdev_change_features+0x10/0x10
[  720.104800][T18594]  ? team_uninit+0x14d/0x1d0
[  720.104820][T18594]  ? __pfx_team_uninit+0x10/0x10
[  720.104841][T18594]  ? __pfx_team_uninit+0x10/0x10
[  720.104860][T18594]  unregister_netdevice_many_notify+0x16fd/0x2580
[  720.104886][T18594]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  720.104906][T18594]  ? unregister_netdevice_queue+0x22e/0x3c0
[  720.104924][T18594]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  720.104949][T18594]  rtnl_dellink+0x472/0xb40
[  720.104965][T18594]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  720.104982][T18594]  ? kasan_save_track+0x14/0x30
[  720.105002][T18594]  ? kasan_save_free_info+0x3b/0x70
[  720.105019][T18594]  ? __kasan_slab_free+0x5f/0x80
[  720.105040][T18594]  ? __pfx_rtnl_dellink+0x10/0x10
[  720.105054][T18594]  ? nlmon_xmit+0xa5/0xe0
[  720.105067][T18594]  ? dev_hard_start_xmit+0x121/0x7d0
[  720.105087][T18594]  ? __dev_queue_xmit+0x6dd/0x4750
[  720.105108][T18594]  ? netlink_sendmsg+0x8b0/0xda0
[  720.105124][T18594]  ? ____sys_sendmsg+0xa54/0xc30
[  720.105175][T18594]  ? __lock_acquire+0x4a5/0x2630
[  720.105196][T18594]  ? find_held_lock+0x2b/0x80
[  720.105215][T18594]  ? find_held_lock+0x2b/0x80
[  720.105228][T18594]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  720.105244][T18594]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  720.105262][T18594]  ? __pfx_rtnl_dellink+0x10/0x10
[  720.105278][T18594]  rtnetlink_rcv_msg+0x95e/0xe90
[  720.105297][T18594]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  720.105318][T18594]  ? ref_tracker_free+0x37e/0x6c0
[  720.105344][T18594]  netlink_rcv_skb+0x159/0x420
[  720.105363][T18594]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  720.105382][T18594]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  720.105408][T18594]  ? netlink_deliver_tap+0x1ae/0xcc0
[  720.105429][T18594]  netlink_unicast+0x5aa/0x870
[  720.105449][T18594]  ? __pfx_netlink_unicast+0x10/0x10
[  720.105467][T18594]  ? __pfx___might_resched+0x10/0x10
[  720.105488][T18594]  ? __lock_acquire+0x4a5/0x2630
[  720.105511][T18594]  netlink_sendmsg+0x8b0/0xda0
[  720.105532][T18594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  720.105548][T18594]  ? __import_iovec+0x1d2/0x640
[  720.105573][T18594]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  720.105595][T18594]  ____sys_sendmsg+0xa54/0xc30
[  720.105617][T18594]  ? __pfx_____sys_sendmsg+0x10/0x10
[  720.105639][T18594]  ? rcu_is_watching+0x12/0xc0
[  720.105660][T18594]  ? ___sys_sendmsg+0x19d/0x1e0
[  720.105679][T18594]  ? kfree+0x2ec/0x6b0
[  720.105699][T18594]  ___sys_sendmsg+0x190/0x1e0
[  720.105722][T18594]  ? __pfx____sys_sendmsg+0x10/0x10
[  720.105759][T18594]  ? __pfx___might_resched+0x10/0x10
[  720.105783][T18594]  __sys_sendmmsg+0x205/0x430
[  720.105802][T18594]  ? __pfx___sys_sendmmsg+0x10/0x10
[  720.105824][T18594]  ? __pfx_do_futex+0x10/0x10
[  720.105852][T18594]  ? xfd_validate_state+0x129/0x190
[  720.105877][T18594]  __x64_sys_sendmmsg+0x9c/0x100
[  720.105893][T18594]  ? lockdep_hardirqs_on+0x78/0x100
[  720.105910][T18594]  do_syscall_64+0x106/0xf80
[  720.105925][T18594]  ? clear_bhb_loop+0x40/0x90
[  720.105945][T18594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.105960][T18594] RIP: 0033:0x7f436df9c629
[  720.105975][T18594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  720.105989][T18594] RSP: 002b:00007f436ee07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  720.106005][T18594] RAX: ffffffffffffffda RBX: 00007f436e215fa0 RCX: 00007f436df9c629
[  720.106015][T18594] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004
[  720.106025][T18594] RBP: 00007f436e032b39 R08: 0000000000000000 R09: 0000000000000000
[  720.106035][T18594] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  720.106045][T18594] R13: 00007f436e216038 R14: 00007f436e215fa0 R15: 00007ffdb43e81e8
[  720.106066][T18594]  </TASK>
[  721.712896][ T7430] Bluetooth: hci3: command 0x040f tx timeout
[  722.068126][T18584] kexec: Could not allocate control_code_buffer
[  723.181082][T18635] zswap: compressor  not available
[  723.333649][T18643] EXT4-fs warning: 16 callbacks suppressed
[  723.333665][T18643] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  723.463071][T18643] EXT4-fs error: 16 callbacks suppressed
[  723.463087][T18643] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  723.548837][T18643] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  723.675665][T18643] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  723.906228][T18662] FAULT_INJECTION: forcing a failure.
[  723.906228][T18662] name failslab, interval 1, probability 0, space 0, times 0
[  723.968630][T18663] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  724.081605][T18663] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  724.120574][T18662] CPU: 0 UID: 0 PID: 18662 Comm: syz.1.2880 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  724.120611][T18662] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  724.120620][T18662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  724.120629][T18662] Call Trace:
[  724.120635][T18662]  <TASK>
[  724.120642][T18662]  dump_stack_lvl+0x100/0x190
[  724.120670][T18662]  should_fail_ex.cold+0x5/0xa
[  724.120690][T18662]  should_failslab+0xc2/0x120
[  724.120705][T18662]  __kmalloc_cache_noprof+0x7a/0x6f0
[  724.120724][T18662]  ? tipc_conn_alloc+0x48/0x590
[  724.120747][T18662]  ? net_generic+0xea/0x2a0
[  724.120767][T18662]  ? net_generic+0xea/0x2a0
[  724.120791][T18662]  tipc_conn_alloc+0x48/0x590
[  724.120816][T18662]  tipc_topsrv_kern_subscr+0x11c/0x3c0
[  724.120841][T18662]  ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10
[  724.120859][T18662]  ? net_generic+0xea/0x2a0
[  724.120878][T18662]  tipc_group_create+0x4ab/0x660
[  724.120898][T18662]  tipc_setsockopt+0x611/0xe30
[  724.120919][T18662]  ? __pfx_tipc_setsockopt+0x10/0x10
[  724.120947][T18662]  ? __pfx_tipc_setsockopt+0x10/0x10
[  724.120966][T18662]  do_sock_setsockopt+0xf3/0x1d0
[  724.120989][T18662]  __sys_setsockopt+0x119/0x190
[  724.121008][T18662]  __x64_sys_setsockopt+0xbd/0x160
[  724.121023][T18662]  ? do_syscall_64+0x95/0xf80
[  724.121039][T18662]  ? lockdep_hardirqs_on+0x78/0x100
[  724.121056][T18662]  do_syscall_64+0x106/0xf80
[  724.121071][T18662]  ? clear_bhb_loop+0x40/0x90
[  724.121089][T18662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.121105][T18662] RIP: 0033:0x7f436df9c629
[  724.121119][T18662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  724.121134][T18662] RSP: 002b:00007f436ee07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  724.121149][T18662] RAX: ffffffffffffffda RBX: 00007f436e215fa0 RCX: 00007f436df9c629
[  724.121159][T18662] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003
[  724.121168][T18662] RBP: 00007f436e032b39 R08: 0000000000000014 R09: 0000000000000000
[  724.121177][T18662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  724.121186][T18662] R13: 00007f436e216038 R14: 00007f436e215fa0 R15: 00007ffdb43e81e8
[  724.121206][T18662]  </TASK>
[  724.368513][T18670] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff
[  724.613441][T18663] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  724.656043][T18663] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  724.724068][T18666] hub 1-0:1.0: USB hub found
[  724.792063][T18666] hub 1-0:1.0: 1 port detected
[  724.837708][T18679] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  724.837735][T18679] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  724.837947][T18679] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  724.837967][T18679] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  725.887153][T18694] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  727.547151][T18733] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  727.792923][T18740] FAULT_INJECTION: forcing a failure.
[  727.792923][T18740] name failslab, interval 1, probability 0, space 0, times 0
[  727.874192][T18740] CPU: 0 UID: 0 PID: 18740 Comm: syz.4.2899 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  727.874228][T18740] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  727.874237][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  727.874246][T18740] Call Trace:
[  727.874252][T18740]  <TASK>
[  727.874258][T18740]  dump_stack_lvl+0x100/0x190
[  727.874285][T18740]  should_fail_ex.cold+0x5/0xa
[  727.874304][T18740]  should_failslab+0xc2/0x120
[  727.874319][T18740]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  727.874339][T18740]  ? ioctx_alloc+0x1b9/0x21d0
[  727.874358][T18740]  ioctx_alloc+0x1b9/0x21d0
[  727.874379][T18740]  ? find_held_lock+0x2b/0x80
[  727.874393][T18740]  ? __pfx_ioctx_alloc+0x10/0x10
[  727.874413][T18740]  __x64_sys_io_setup+0xc9/0x220
[  727.874430][T18740]  do_syscall_64+0x106/0xf80
[  727.874446][T18740]  ? clear_bhb_loop+0x40/0x90
[  727.874465][T18740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.874480][T18740] RIP: 0033:0x7f2318b9c629
[  727.874493][T18740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.874507][T18740] RSP: 002b:00007f2319985028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  727.874532][T18740] RAX: ffffffffffffffda RBX: 00007f2318e15fa0 RCX: 00007f2318b9c629
[  727.874542][T18740] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e
[  727.874552][T18740] RBP: 00007f2318c32b39 R08: 0000000000000000 R09: 0000000000000000
[  727.874561][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  727.874570][T18740] R13: 00007f2318e16038 R14: 00007f2318e15fa0 R15: 00007fff1b8ec7f8
[  727.874590][T18740]  </TASK>
[  728.072230][T18725] FAULT_INJECTION: forcing a failure.
[  728.072230][T18725] name failslab, interval 1, probability 0, space 0, times 0
[  728.086274][T18725] CPU: 0 UID: 0 PID: 18725 Comm: syz.0.2903 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  728.086312][T18725] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  728.086321][T18725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  728.086331][T18725] Call Trace:
[  728.086336][T18725]  <TASK>
[  728.086343][T18725]  dump_stack_lvl+0x100/0x190
[  728.086387][T18725]  should_fail_ex.cold+0x5/0xa
[  728.086406][T18725]  should_failslab+0xc2/0x120
[  728.086422][T18725]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  728.086444][T18725]  ? __alloc_skb+0x140/0x710
[  728.086463][T18725]  __alloc_skb+0x140/0x710
[  728.086477][T18725]  ? __alloc_skb+0x5b7/0x710
[  728.086492][T18725]  ? __pfx___alloc_skb+0x10/0x10
[  728.086513][T18725]  ? netlink_has_listeners+0x20f/0x430
[  728.086531][T18725]  ? netlink_has_listeners+0x20f/0x430
[  728.086551][T18725]  alloc_uevent_skb+0x7d/0x210
[  728.086575][T18725]  kobject_uevent_env+0xd2d/0x18b0
[  728.086604][T18725]  kvm_uevent_notify_change.part.0+0x3a6/0x450
[  728.086624][T18725]  ? __pfx_kvm_vm_release+0x10/0x10
[  728.086640][T18725]  kvm_put_kvm+0xe4/0xb10
[  728.086656][T18725]  ? lockdep_hardirqs_on+0x78/0x100
[  728.086672][T18725]  ? _raw_spin_unlock_irq+0x2e/0x50
[  728.086688][T18725]  ? __pfx_kvm_vm_release+0x10/0x10
[  728.086704][T18725]  kvm_vm_release+0x3c/0x50
[  728.086718][T18725]  __fput+0x3ff/0xb40
[  728.086736][T18725]  ? _raw_spin_unlock_irq+0x23/0x50
[  728.086752][T18725]  task_work_run+0x150/0x240
[  728.086773][T18725]  ? __pfx_task_work_run+0x10/0x10
[  728.086799][T18725]  exit_to_user_mode_loop+0x100/0x4a0
[  728.086819][T18725]  do_syscall_64+0x668/0xf80
[  728.086835][T18725]  ? clear_bhb_loop+0x40/0x90
[  728.086853][T18725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.086868][T18725] RIP: 0033:0x7ff93579c629
[  728.086882][T18725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.086897][T18725] RSP: 002b:00007ff936716028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  728.086912][T18725] RAX: 0000000000000000 RBX: 00007ff935a15fa0 RCX: 00007ff93579c629
[  728.086922][T18725] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002
[  728.086931][T18725] RBP: 00007ff935832b39 R08: 0000000000000000 R09: 0000000000000000
[  728.086940][T18725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  728.086948][T18725] R13: 00007ff935a16038 R14: 00007ff935a15fa0 R15: 00007ffd8fd3dd58
[  728.086969][T18725]  </TASK>
[  728.347449][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'.
[  729.034492][ T7480] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7
[  730.255122][T18735] hub 1-0:1.0: USB hub found
[  730.510798][T18735] hub 1-0:1.0: 1 port detected
[  730.568189][T18771] zswap: compressor  not available
[  731.704413][T18805] netlink: 'syz.4.2911': attribute type 21 has an invalid length.
[  731.741710][T18805] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2911'.
[  731.795431][T18801] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  731.805022][T18805] IPv6: NLM_F_CREATE should be specified when creating new route
[  731.892625][T18801] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  731.956660][T18801] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  732.044802][T18801] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  733.775462][T18840] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  733.832144][ T7480] Bluetooth: hci1: command 0x0c1a tx timeout
[  733.885165][T18840] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  733.914706][ T7480] Bluetooth: hci0: command 0x0c1a tx timeout
[  733.990517][ T7480] Bluetooth: hci2: command 0x0c1a tx timeout
[  734.016424][T18840] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  734.016450][T18840] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  734.074712][ T7480] Bluetooth: hci3: command 0x040f tx timeout
[  734.221684][T18853] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  734.221712][T18853] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  734.230710][T18853] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  734.230737][T18853] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  734.328675][T18857] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  734.328704][T18857] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  734.349285][T18857] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  734.349315][T18857] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  734.564021][T18861] can: request_module (can-proto-0) failed.
[  734.642475][T18860] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  734.644696][T18860] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  734.644849][T18860] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  734.644995][T18860] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  736.142739][T18888] zswap: compressor  not available
[  736.710670][ T7480] Bluetooth: hci3: command 0x040f tx timeout
[  736.716955][ T7430] Bluetooth: hci2: command 0x0c1a tx timeout
[  736.723358][ T7423] Bluetooth: hci0: command 0x0c1a tx timeout
[  736.729337][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  736.890061][T18906] FAULT_INJECTION: forcing a failure.
[  736.890061][T18906] name failslab, interval 1, probability 0, space 0, times 0
[  737.045236][T18906] CPU: 0 UID: 0 PID: 18906 Comm: syz.5.2936 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  737.045273][T18906] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  737.045282][T18906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  737.045292][T18906] Call Trace:
[  737.045298][T18906]  <TASK>
[  737.045305][T18906]  dump_stack_lvl+0x100/0x190
[  737.045333][T18906]  should_fail_ex.cold+0x5/0xa
[  737.045352][T18906]  should_failslab+0xc2/0x120
[  737.045367][T18906]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  737.045389][T18906]  ? __alloc_skb+0x140/0x710
[  737.045408][T18906]  __alloc_skb+0x140/0x710
[  737.045421][T18906]  ? __alloc_skb+0x5b7/0x710
[  737.045435][T18906]  ? __pfx___alloc_skb+0x10/0x10
[  737.045450][T18906]  ? netlink_has_listeners+0x20f/0x430
[  737.045467][T18906]  ? netlink_has_listeners+0x20f/0x430
[  737.045487][T18906]  alloc_uevent_skb+0x7d/0x210
[  737.045510][T18906]  kobject_uevent_env+0xd2d/0x18b0
[  737.045537][T18906]  kvm_uevent_notify_change.part.0+0x3a6/0x450
[  737.045558][T18906]  ? __pfx_kvm_vm_release+0x10/0x10
[  737.045575][T18906]  kvm_put_kvm+0xe4/0xb10
[  737.045591][T18906]  ? lockdep_hardirqs_on+0x78/0x100
[  737.045607][T18906]  ? _raw_spin_unlock_irq+0x2e/0x50
[  737.045622][T18906]  ? __pfx_kvm_vm_release+0x10/0x10
[  737.045638][T18906]  kvm_vm_release+0x3c/0x50
[  737.045653][T18906]  __fput+0x3ff/0xb40
[  737.045671][T18906]  ? _raw_spin_unlock_irq+0x23/0x50
[  737.045687][T18906]  task_work_run+0x150/0x240
[  737.045725][T18906]  ? __pfx_task_work_run+0x10/0x10
[  737.045751][T18906]  exit_to_user_mode_loop+0x100/0x4a0
[  737.045774][T18906]  do_syscall_64+0x668/0xf80
[  737.045790][T18906]  ? clear_bhb_loop+0x40/0x90
[  737.045809][T18906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.045830][T18906] RIP: 0033:0x7f708319c629
[  737.045845][T18906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.045860][T18906] RSP: 002b:00007f7083ffe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  737.045877][T18906] RAX: 0000000000000000 RBX: 00007f7083416270 RCX: 00007f708319c629
[  737.045887][T18906] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002
[  737.045896][T18906] RBP: 00007f7083232b39 R08: 0000000000000000 R09: 0000000000000000
[  737.045905][T18906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  737.045914][T18906] R13: 00007f7083416308 R14: 00007f7083416270 R15: 00007fffc48b4eb8
[  737.045935][T18906]  </TASK>
[  738.101503][T18911] can: request_module (can-proto-0) failed.
[  739.189574][T18921] zswap: compressor  not available
[  739.737165][T18941] netlink: 'syz.1.2943': attribute type 21 has an invalid length.
[  739.794559][T18941] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2943'.
[  739.864730][T18941] IPv6: NLM_F_CREATE should be specified when creating new route
[  740.062864][T18942] zswap: compressor  not available
[  741.023898][   T29] audit: type=1107 audit(4294967304.560:40): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  741.094885][   T29] audit: type=1107 audit(4294967304.560:41): pid=18956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  741.669258][T18960] FAULT_INJECTION: forcing a failure.
[  741.669258][T18960] name failslab, interval 1, probability 0, space 0, times 0
[  741.753811][T18960] CPU: 0 UID: 0 PID: 18960 Comm: syz.4.2948 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  741.753848][T18960] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  741.753857][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  741.753867][T18960] Call Trace:
[  741.753873][T18960]  <TASK>
[  741.753879][T18960]  dump_stack_lvl+0x100/0x190
[  741.753907][T18960]  should_fail_ex.cold+0x5/0xa
[  741.753926][T18960]  should_failslab+0xc2/0x120
[  741.753942][T18960]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  741.753964][T18960]  ? __alloc_skb+0x140/0x710
[  741.753983][T18960]  __alloc_skb+0x140/0x710
[  741.753996][T18960]  ? __alloc_skb+0x5b7/0x710
[  741.754011][T18960]  ? __pfx___alloc_skb+0x10/0x10
[  741.754026][T18960]  ? netlink_has_listeners+0x20f/0x430
[  741.754043][T18960]  ? netlink_has_listeners+0x20f/0x430
[  741.754062][T18960]  alloc_uevent_skb+0x7d/0x210
[  741.754086][T18960]  kobject_uevent_env+0xd2d/0x18b0
[  741.754113][T18960]  kvm_uevent_notify_change.part.0+0x3a6/0x450
[  741.754134][T18960]  ? __pfx_kvm_vm_release+0x10/0x10
[  741.754151][T18960]  kvm_put_kvm+0xe4/0xb10
[  741.754167][T18960]  ? lockdep_hardirqs_on+0x78/0x100
[  741.754184][T18960]  ? _raw_spin_unlock_irq+0x2e/0x50
[  741.754199][T18960]  ? __pfx_kvm_vm_release+0x10/0x10
[  741.754215][T18960]  kvm_vm_release+0x3c/0x50
[  741.754230][T18960]  __fput+0x3ff/0xb40
[  741.754247][T18960]  ? _raw_spin_unlock_irq+0x23/0x50
[  741.754263][T18960]  task_work_run+0x150/0x240
[  741.754284][T18960]  ? __pfx_task_work_run+0x10/0x10
[  741.754310][T18960]  exit_to_user_mode_loop+0x100/0x4a0
[  741.754331][T18960]  do_syscall_64+0x668/0xf80
[  741.754346][T18960]  ? clear_bhb_loop+0x40/0x90
[  741.754364][T18960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.754379][T18960] RIP: 0033:0x7f2318b9c629
[  741.754393][T18960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.754407][T18960] RSP: 002b:00007f2319985028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  741.754422][T18960] RAX: 0000000000000000 RBX: 00007f2318e15fa0 RCX: 00007f2318b9c629
[  741.754432][T18960] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002
[  741.754441][T18960] RBP: 00007f2318c32b39 R08: 0000000000000000 R09: 0000000000000000
[  741.754450][T18960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  741.754459][T18960] R13: 00007f2318e16038 R14: 00007f2318e15fa0 R15: 00007fff1b8ec7f8
[  741.754479][T18960]  </TASK>
[  742.623529][T18999] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  742.704824][T18999] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  742.780730][T18999] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  742.828813][T18999] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  742.946798][T19002] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  742.980859][T19002] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  743.014624][T19002] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  743.075540][T19002] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  743.284299][T19010] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  743.412507][T19010] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  743.457545][   T29] audit: type=1107 audit(4294967306.980:42): pid=19005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  743.529818][T19010] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  743.563063][   T29] audit: type=1107 audit(4294967306.990:43): pid=19005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  743.647666][T19010] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  744.726010][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'.
[  744.811764][T19048] zswap: compressor  not available
[  744.833978][T19056] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  744.842422][T19059] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2974'.
[  744.881534][T19051] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes
[  744.916416][T19056] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  744.995962][T19056] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  745.097008][T19056] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  745.252043][T19066] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  745.365339][   T29] audit: type=1107 audit(4294967308.900:44): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  745.380484][T19066] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  745.445553][   T29] audit: type=1107 audit(4294967308.920:45): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  745.469693][T19066] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  745.580497][T19066] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  745.843857][T19075] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  745.843884][T19075] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  745.878068][T19075] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  745.878096][T19075] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  746.394663][T19085] zswap: compressor  not available
[  746.871835][ T7423] Bluetooth: hci1: command 0x0c1a tx timeout
[  746.950925][ T7423] Bluetooth: hci0: command 0x0c1a tx timeout
[  747.030781][ T7423] Bluetooth: hci2: command 0x0c1a tx timeout
[  747.110779][ T7423] Bluetooth: hci3: command 0x040f tx timeout
[  747.217262][T19102] zswap: compressor  not available
[  747.518939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  747.525281][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  747.545254][   T29] audit: type=1107 audit(4294967311.080:46): pid=19111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  747.613053][   T29] audit: type=1107 audit(4294967311.100:47): pid=19111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  749.203808][   T29] audit: type=1107 audit(4294967312.740:48): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  749.267707][   T29] audit: type=1107 audit(4294967312.760:49): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  750.625376][   T29] audit: type=1107 audit(4294967314.160:50): pid=19198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  750.697289][   T29] audit: type=1107 audit(4294967314.180:51): pid=19198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  752.466428][T19240] zswap: compressor  not available
[  752.562983][   T29] audit: type=1107 audit(4294967316.100:52): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  752.604392][   T29] audit: type=1107 audit(4294967316.100:53): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  753.367932][T19259] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input44
[  753.448957][   T29] audit: type=1107 audit(4294967316.980:54): pid=19252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  753.538886][T19262] nbd: couldn't find a device at index 35644
[  753.756122][T19265] Invalid ELF header magic: != ELF
[  753.805700][   T29] audit: type=1800 audit(4294967317.330:55): pid=19268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3033" name="dbroot" dev="configfs" ino=94159 res=0 errno=0
[  755.160013][T19289] zswap: compressor  not available
[  758.814433][T19363] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  764.729110][T19497] zswap: compressor  not available
[  766.141771][T19543] bridge0: port 3(batadv0) entered blocking state
[  766.148255][T19543] bridge0: port 3(batadv0) entered disabled state
[  766.216924][T19543] batadv0: entered allmulticast mode
[  766.256311][T19543] batadv0: entered promiscuous mode
[  766.283567][T19543] bridge0: port 3(batadv0) entered blocking state
[  766.290078][T19543] bridge0: port 3(batadv0) entered forwarding state
[  766.584912][T15092] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  766.595011][T15092] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  767.024674][T19555] zswap: compressor  not available
[  767.380140][T19564] tipc: Enabling of bearer <@):^\/\> rejected, media not registered
[  767.607170][   T29] audit: type=1800 audit(4294967331.140:56): pid=19578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3114" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  768.094188][T19593] EXT4-fs warning: 2 callbacks suppressed
[  768.094203][T19593] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  768.171101][T19593] EXT4-fs error: 2 callbacks suppressed
[  768.171123][T19593] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  768.215092][T19593] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  768.256954][T19593] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  768.353682][T19599] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  768.389323][T19599] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  768.436277][T19599] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  768.534351][T19599] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  768.749308][T19611] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  768.900497][T19611] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  768.971294][T19607] zswap: compressor  not available
[  768.997647][T19611] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  769.096936][T19611] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  769.278017][T19616] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  769.394800][T19616] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  769.483068][T19616] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  769.597384][T19616] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  769.823800][T19628] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  769.954262][T19628] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[  770.038824][T19628] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[  770.140536][T19628] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[  770.229032][T19639] FAULT_INJECTION: forcing a failure.
[  770.229032][T19639] name failslab, interval 1, probability 0, space 0, times 0
[  770.229074][T19639] CPU: 0 UID: 0 PID: 19639 Comm: syz.0.3130 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  770.229104][T19639] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  770.229112][T19639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  770.229121][T19639] Call Trace:
[  770.229126][T19639]  <TASK>
[  770.229133][T19639]  dump_stack_lvl+0x100/0x190
[  770.229159][T19639]  should_fail_ex.cold+0x5/0xa
[  770.229177][T19639]  ? tomoyo_realpath_from_path+0xb6/0x690
[  770.229194][T19639]  should_failslab+0xc2/0x120
[  770.229208][T19639]  __kmalloc_noprof+0xe0/0x850
[  770.229234][T19639]  tomoyo_realpath_from_path+0xb6/0x690
[  770.229253][T19639]  tomoyo_path_number_perm+0x23c/0x580
[  770.229275][T19639]  ? tomoyo_path_number_perm+0x22e/0x580
[  770.229297][T19639]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  770.229338][T19639]  ? find_held_lock+0x2b/0x80
[  770.229351][T19639]  ? __fget_files+0x215/0x3d0
[  770.229373][T19639]  ? hook_file_ioctl_common+0x146/0x410
[  770.229408][T19639]  ? __fget_files+0x21f/0x3d0
[  770.229433][T19639]  security_file_ioctl+0xd3/0x230
[  770.229456][T19639]  __x64_sys_ioctl+0xb7/0x210
[  770.229478][T19639]  do_syscall_64+0x106/0xf80
[  770.229495][T19639]  ? clear_bhb_loop+0x40/0x90
[  770.229513][T19639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  770.229529][T19639] RIP: 0033:0x7ff93579c629
[  770.229542][T19639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  770.229557][T19639] RSP: 002b:00007ff936716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  770.229571][T19639] RAX: ffffffffffffffda RBX: 00007ff935a15fa0 RCX: 00007ff93579c629
[  770.229581][T19639] RDX: 0000000000000000 RSI: 00000000c0185500 RDI: 0000000000000003
[  770.229590][T19639] RBP: 00007ff936716090 R08: 0000000000000000 R09: 0000000000000000
[  770.229599][T19639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  770.229607][T19639] R13: 00007ff935a16038 R14: 00007ff935a15fa0 R15: 00007ffd8fd3dd58
[  770.229627][T19639]  </TASK>
[  770.229633][T19639] ERROR: Out of memory at tomoyo_realpath_from_path.
[  771.322816][T19641] ==================================================================
[  771.322834][T19641] BUG: KASAN: use-after-free in fbcon_prepare_logo+0x94e/0xc60
[  771.322863][T19641] Read of size 256 at addr ffff888061e963c0 by task syz.5.3129/19641
[  771.322877][T19641] 
[  771.322887][T19641] CPU: 0 UID: 0 PID: 19641 Comm: syz.5.3129 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  771.322917][T19641] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  771.322926][T19641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  771.322935][T19641] Call Trace:
[  771.322941][T19641]  <TASK>
[  771.322947][T19641]  dump_stack_lvl+0x100/0x190
[  771.322968][T19641]  print_report+0x156/0x4c9
[  771.322990][T19641]  ? __virt_addr_valid+0x81/0x620
[  771.323008][T19641]  ? __phys_addr+0xe8/0x180
[  771.323025][T19641]  ? fbcon_prepare_logo+0x94e/0xc60
[  771.323045][T19641]  kasan_report+0xdf/0x1e0
[  771.323059][T19641]  ? fbcon_prepare_logo+0x94e/0xc60
[  771.323081][T19641]  kasan_check_range+0x10f/0x1e0
[  771.323097][T19641]  __asan_memcpy+0x23/0x60
[  771.323115][T19641]  fbcon_prepare_logo+0x94e/0xc60
[  771.323138][T19641]  fbcon_init+0x10a0/0x1820
[  771.323176][T19641]  visual_init+0x320/0x620
[  771.323198][T19641]  do_bind_con_driver.isra.0+0x636/0x9c0
[  771.323220][T19641]  store_bind+0x609/0x730
[  771.323237][T19641]  ? __pfx_store_bind+0x10/0x10
[  771.323251][T19641]  dev_attr_store+0x58/0x80
[  771.323278][T19641]  ? __pfx_dev_attr_store+0x10/0x10
[  771.323299][T19641]  sysfs_kf_write+0xf2/0x150
[  771.323317][T19641]  kernfs_fop_write_iter+0x3e0/0x5f0
[  771.323331][T19641]  ? __pfx_sysfs_kf_write+0x10/0x10
[  771.323348][T19641]  iter_file_splice_write+0x830/0x10a0
[  771.323375][T19641]  ? __pfx_iter_file_splice_write+0x10/0x10
[  771.323398][T19641]  ? __pfx_copy_splice_read+0x10/0x10
[  771.323424][T19641]  ? __pfx_iter_file_splice_write+0x10/0x10
[  771.323446][T19641]  direct_splice_actor+0x192/0x6c0
[  771.323468][T19641]  splice_direct_to_actor+0x345/0xa30
[  771.323490][T19641]  ? __pfx_direct_splice_actor+0x10/0x10
[  771.323513][T19641]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  771.323537][T19641]  do_splice_direct+0x174/0x240
[  771.323559][T19641]  ? __pfx_do_splice_direct+0x10/0x10
[  771.323580][T19641]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  771.323602][T19641]  ? rw_verify_area+0xce/0x6d0
[  771.323622][T19641]  do_sendfile+0xadc/0xe20
[  771.323643][T19641]  ? __pfx_do_sendfile+0x10/0x10
[  771.323664][T19641]  ? __x64_sys_futex+0x34f/0x4d0
[  771.323682][T19641]  ? __x64_sys_futex+0x358/0x4d0
[  771.323700][T19641]  __x64_sys_sendfile64+0x1d8/0x220
[  771.323715][T19641]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  771.323733][T19641]  do_syscall_64+0x106/0xf80
[  771.323748][T19641]  ? clear_bhb_loop+0x40/0x90
[  771.323765][T19641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.323780][T19641] RIP: 0033:0x7f708319c629
[  771.323794][T19641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.323808][T19641] RSP: 002b:00007f7084040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  771.323823][T19641] RAX: ffffffffffffffda RBX: 00007f7083416090 RCX: 00007f708319c629
[  771.323834][T19641] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000006
[  771.323843][T19641] RBP: 00007f7083232b39 R08: 0000000000000000 R09: 0000000000000000
[  771.323853][T19641] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  771.323862][T19641] R13: 00007f7083416128 R14: 00007f7083416090 R15: 00007fffc48b4eb8
[  771.323877][T19641]  </TASK>
[  771.323882][T19641] 
[  771.323887][T19641] The buggy address belongs to the physical page:
[  771.323894][T19641] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2cc8 pfn:0x61e96
[  771.323908][T19641] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  771.323928][T19641] raw: 00fff00000000000 ffffea00018d78c8 ffffea0001f6f608 0000000000000000
[  771.323942][T19641] raw: 0000000000002cc8 0000000000000000 00000000ffffffff 0000000000000000
[  771.323952][T19641] page dumped because: kasan: bad access detected
[  771.323961][T19641] page_owner tracks the page as freed
[  771.323966][T19641] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 19641, tgid 19635 (syz.5.3129), ts 771179658899, free_ts 771179685546
[  771.323990][T19641]  post_alloc_hook+0x153/0x170
[  771.324009][T19641]  get_page_from_freelist+0x111d/0x3140
[  771.324028][T19641]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  771.324047][T19641]  alloc_pages_bulk_noprof+0x782/0x1490
[  771.324066][T19641]  __kasan_populate_vmalloc+0xf0/0x210
[  771.324086][T19641]  alloc_vmap_area+0x95d/0x2bd0
[  771.324106][T19641]  __get_vm_area_node+0x1ca/0x330
[  771.324120][T19641]  __vmalloc_node_range_noprof+0x213/0x1530
[  771.324136][T19641]  __vmalloc_node_noprof+0xad/0xf0
[  771.324151][T19641]  vc_do_resize+0x246/0x10f0
[  771.324164][T19641]  fbcon_init+0x10ba/0x1820
[  771.324182][T19641]  visual_init+0x320/0x620
[  771.324202][T19641]  do_bind_con_driver.isra.0+0x636/0x9c0
[  771.324217][T19641]  store_bind+0x609/0x730
[  771.324230][T19641]  dev_attr_store+0x58/0x80
[  771.324249][T19641]  sysfs_kf_write+0xf2/0x150
[  771.324264][T19641] page last free pid 19641 tgid 19635 stack trace:
[  771.324279][T19641]  __free_frozen_pages+0x7e1/0x10d0
[  771.324296][T19641]  __kasan_populate_vmalloc+0x164/0x210
[  771.324315][T19641]  alloc_vmap_area+0x95d/0x2bd0
[  771.324336][T19641]  __get_vm_area_node+0x1ca/0x330
[  771.324351][T19641]  __vmalloc_node_range_noprof+0x213/0x1530
[  771.324367][T19641]  __vmalloc_node_noprof+0xad/0xf0
[  771.324383][T19641]  vc_do_resize+0x246/0x10f0
[  771.324396][T19641]  fbcon_init+0x10ba/0x1820
[  771.324415][T19641]  visual_init+0x320/0x620
[  771.324434][T19641]  do_bind_con_driver.isra.0+0x636/0x9c0
[  771.324448][T19641]  store_bind+0x609/0x730
[  771.324460][T19641]  dev_attr_store+0x58/0x80
[  771.324479][T19641]  sysfs_kf_write+0xf2/0x150
[  771.324494][T19641]  kernfs_fop_write_iter+0x3e0/0x5f0
[  771.324506][T19641]  iter_file_splice_write+0x830/0x10a0
[  771.324527][T19641]  direct_splice_actor+0x192/0x6c0
[  771.324547][T19641] 
[  771.324551][T19641] Memory state around the buggy address:
[  771.324558][T19641]  ffff888061e96280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  771.324569][T19641]  ffff888061e96300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  771.324579][T19641] >ffff888061e96380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  771.324587][T19641]                                            ^
[  771.324596][T19641]  ffff888061e96400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  771.324606][T19641]  ffff888061e96480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  771.324614][T19641] ==================================================================
[  771.353021][T19641] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  771.353039][T19641] CPU: 0 UID: 0 PID: 19641 Comm: syz.5.3129 Tainted: G     U  W    L XTNJ syzkaller #0 PREEMPT(full) 
[  771.353071][T19641] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL
[  771.353080][T19641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  771.353089][T19641] Call Trace:
[  771.353095][T19641]  <TASK>
[  771.353102][T19641]  dump_stack_lvl+0x100/0x190
[  771.353128][T19641]  vpanic+0x552/0x970
[  771.353143][T19641]  ? __pfx_vpanic+0x10/0x10
[  771.353159][T19641]  ? fbcon_prepare_logo+0x94e/0xc60
[  771.353180][T19641]  panic+0xd1/0xe0
[  771.353193][T19641]  ? __pfx_panic+0x10/0x10
[  771.353207][T19641]  ? fbcon_prepare_logo+0x94e/0xc60
[  771.353227][T19641]  ? preempt_schedule_common+0x42/0xc0
[  771.353246][T19641]  check_panic_on_warn.cold+0x19/0x34
[  771.353261][T19641]  end_report.part.0+0x3a/0x90
[  771.353288][T19641]  kasan_report.cold+0xe/0x18
[  771.353310][T19641]  ? fbcon_prepare_logo+0x94e/0xc60
[  771.353334][T19641]  kasan_check_range+0x10f/0x1e0
[  771.353352][T19641]  __asan_memcpy+0x23/0x60
[  771.353371][T19641]  fbcon_prepare_logo+0x94e/0xc60
[  771.353395][T19641]  fbcon_init+0x10a0/0x1820
[  771.353417][T19641]  visual_init+0x320/0x620
[  771.353440][T19641]  do_bind_con_driver.isra.0+0x636/0x9c0
[  771.353459][T19641]  store_bind+0x609/0x730
[  771.353476][T19641]  ? __pfx_store_bind+0x10/0x10
[  771.353494][T19641]  dev_attr_store+0x58/0x80
[  771.353516][T19641]  ? __pfx_dev_attr_store+0x10/0x10
[  771.353537][T19641]  sysfs_kf_write+0xf2/0x150
[  771.353555][T19641]  kernfs_fop_write_iter+0x3e0/0x5f0
[  771.353569][T19641]  ? __pfx_sysfs_kf_write+0x10/0x10
[  771.353586][T19641]  iter_file_splice_write+0x830/0x10a0
[  771.353614][T19641]  ? __pfx_iter_file_splice_write+0x10/0x10
[  771.353639][T19641]  ? __pfx_copy_splice_read+0x10/0x10
[  771.353666][T19641]  ? __pfx_iter_file_splice_write+0x10/0x10
[  771.353689][T19641]  direct_splice_actor+0x192/0x6c0
[  771.353712][T19641]  splice_direct_to_actor+0x345/0xa30
[  771.353735][T19641]  ? __pfx_direct_splice_actor+0x10/0x10
[  771.353759][T19641]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  771.353785][T19641]  do_splice_direct+0x174/0x240
[  771.353807][T19641]  ? __pfx_do_splice_direct+0x10/0x10
[  771.353829][T19641]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  771.353853][T19641]  ? rw_verify_area+0xce/0x6d0
[  771.353873][T19641]  do_sendfile+0xadc/0xe20
[  771.353895][T19641]  ? __pfx_do_sendfile+0x10/0x10
[  771.353916][T19641]  ? __x64_sys_futex+0x34f/0x4d0
[  771.353935][T19641]  ? __x64_sys_futex+0x358/0x4d0
[  771.353954][T19641]  __x64_sys_sendfile64+0x1d8/0x220
[  771.353970][T19641]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  771.353988][T19641]  do_syscall_64+0x106/0xf80
[  771.354004][T19641]  ? clear_bhb_loop+0x40/0x90
[  771.354021][T19641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.354037][T19641] RIP: 0033:0x7f708319c629
[  771.354050][T19641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.354065][T19641] RSP: 002b:00007f7084040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  771.354081][T19641] RAX: ffffffffffffffda RBX: 00007f7083416090 RCX: 00007f708319c629
[  771.354092][T19641] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000006
[  771.354101][T19641] RBP: 00007f7083232b39 R08: 0000000000000000 R09: 0000000000000000
[  771.354111][T19641] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  771.354120][T19641] R13: 00007f7083416128 R14: 00007f7083416090 R15: 00007fffc48b4eb8
[  771.354135][T19641]  </TASK>
[  771.354194][T19641] Kernel Offset: disabled