last executing test programs:

3m44.528793664s ago: executing program 2 (id=953):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000007c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r5=>0x0})
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r5, r4, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
r6 = fcntl$auto_F_GETOWN(r2, 0x9, 0x101)
capset$auto(&(0x7f0000000800)={0x4, <r7=>0x0}, &(0x7f0000000840)={0x5, 0x2, 0x7})
shmctl$auto_IPC_INFO(0xffffff7f, 0x3, &(0x7f0000000a80)={{0x7, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0x937d, 0x4, 0x0, 0x3}, 0x2, 0x800, 0x6, 0x7fffffffffffffff, @inferred, @raw=0x26, 0x9, 0x0, &(0x7f0000000880)="f4b53af199faecfca82da76112dd73fc54a71ae9d9c9079676bca9a65be9d46f2653bc85a1045106ea4e2113c0434f47fb86bd216a4a18be282f2077bef70b02951170afb555eb9f428779e31d1a6fef0fc4b88354c43c23142386094f5839ae27bade2170994404ffd2f99db8c239e2909aea53b8ed6a5ccdd49fb019c70719c7cbefeb41fb92a326e3c532da53561d86fc6cfcce29ae1e7e8929bacb52ed79e516a864e1a3234670c1425e45df56ef3f1edc4609d646344b09e8da3775aaf09932f218b3cbcf05e6d5f53073af19b0a0d5d225f63f136a53af4f1e3a7b48b69e14e7c9e4260b7265", &(0x7f0000000980)="321b260aee620eae91a1312550f57ed766ca7d1f3d792edcf1d25b7f985987bbb9cfd99e55071826f56ef3985f2821624fb6bfbd9abc0df94597de4ffe6a3bcc08d8fb1fa34f41a4b8ed0ba8a0358816e08fa9f6203cbf9dfadb7789dacf3221a3c3354777a6d863979b1dd3ab106c280c5d5b37b3d2e7c7222b648e2ac8615854cf321ee87a4bc180ddbc69ed1b7c9b94921570c2771c84184d40d90716b75da4faa23fc02dba1bec75e9f78ee14720d6de09e92b87370a0b54e159e658eb608bbc93b355c47f65f12b8e2ed6352a538df787dd5d2745f0332827624442422c301d"})
r9 = fcntl$auto_F_GETOWN(r2, 0x9, 0x5)
sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000003580)={0x4be4, r3, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_LINKS={0x4bb8, 0x138, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_ATTR_BSSID={0x8f, 0xf5, "9ce8f4f21b0ed0e5cc7ba16b7423ea186e54d22bdd831a1d518c7dd0d22f7e957491e31cbeebf6ddd71a33a6227d0dac380ec8bbc36001a18b7e813e553f8c06b875acc0678f2afe12df2941dc6d64738866d65297d6649b0658c38a80fb33e77c35e6d498819b26b818bd9efdce725c5e86b0228d6a53d40d0de4b6cc2c259336e1ceb943fa1be7c00d66"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_MBSSID_CONFIG={0xc, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x14, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x8}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x61}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x48}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x3}]}]}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}]}, {0x134c, 0x0, 0x0, 0x1, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_FILS_DISCOVERY={0xcc, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0xc7, 0x3, "abe1f5f670486a5d32d5feae3e7a88132427effb8874191a437a8d067d9d10b2108b3fc3e5a610f7b8454f0b3d4a66e780fc6e5d5c7fe54283e42fba8834a045cc7cb79247b498303819e5c6ce9c504f836b7f08a4bbd42f88aa468605641b2b6039fa762442ce1cd560d07c58ae525cb01d65cd02b92046bcc1a732814128c3a34bce3c734baf212baecbaa5d48ca19a1049af22444676adb355dc4f7ea498f1e71b9101d2a74f3b678bcaca53e37a7e640a3e43c92736c6fd0954a2ddb02250a7db9"}]}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1a0000}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x124b, 0x124, 0x0, 0x1, [@generic="173fc76fd8ec974c9de64a6063c53e7ea439ebc46ec54b1b", @typed={0x86, 0x3c, 0x0, 0x0, @binary="9211cd347402571b1d01aac59abae7aff8f71935781a4316e64b11b69a45d85d8c49e31fcf5eaefa67668480b5106803f36ee92bebe7f1b94b9e56201be945b8087b3a45e64bd543ea4dca7f5e7665e390bae15f5139c67d1b62f210cbf3d8a3d92e47b0d4a733dfc5e5828b69949d798ba9ff5024ccd32b601b2ecb6c055892b9bb"}, @nested={0x31, 0xb7, 0x0, 0x1, [@generic="6755d0906504e7d6669ac13911efb119f3b12ddd4706c0d7e9d60ad0c5be79578cd6f60c2a49f74142aec5b199"]}, @nested={0x115c, 0x158, 0x0, 0x1, [@generic="f0221464cf829ff391a3c27088c26b99fd33ab4505a49d1547f8e8eba516962d677c360e5fd389b4377dc4bb177c0c0f99f3bcc5febf69373a33d64b65edac346c4406c31bcbdc61b5748931586514f83b6e5c8285cfe3a71584e095f93064833332cd94044ec4c8f0d79e717efe4815dabe639a2718ba93a96d852d2b458083418086fca80f8025e0433ac8c9d398b98f691fd9da4deba50a5d7a85e50d1c1d6734c44ee559436a05a968317a8c55bfdab43d9a8ab35428ce798b4b", @nested={0x4, 0xa8}, @generic="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", @generic="af0f8e6d788e083fb3f015e7595982d9ac9f545a861d6d1a16b28bbbf84ea3155a8aade22960c40b70d8d7d275e16175481d59ca81e0b6f537f6e629748fe18ba976a105ac78b3f114d84c24751107deaf1bf0f08aff6757c495e7a548381cb64490720c7821956ba3d448b273c230954b3d1f88d6659e83d48312e1652114d617277c272b3eb022ba950278", @nested={0x4, 0x45}, @typed={0x8, 0x10e, 0x0, 0x0, @u32=0x3ff}]}, @generic="9c0da311a169be572fca9865f2bb05132b7e2d04ca1731"]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x7}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x36c8, 0x0, 0x0, 0x1, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_HE_OBSS_PD={0x130, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xfc, 0x4, "01e0814fd4a9a2d19840884fa35cb797fc648fdbfc05b1cfb28cff8b94c5b38bbfd5ffc5983faf7f2d3f426132858398003dd1a2596f70334526241b6a9dd2e40ca0dee10b0659a6ae8d203a363f5ca6a4b775af5dabd560db2a558df4f95718c7c905b4dfc3406f4e00c8576f8311736dad3ef13fe3c59e1d04c0b99a9be00dffaa3a9176cdbbbb21b4bf2e25cd1b5d7847f84446dbfef384f7791f3e0c23511e611be9c370ed8893fb36d8150bccf8f1998adf9ad600f01ad2cd1f0b3c1bae06dde8136f503a3b2394404288f6384781439e41cf9ec48d5250e9e35b4f35fa8bc7921568b69ffeb5dd0ab498e1254427ac8a656b90fbbd"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xd}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xfc}]}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_STA_FLAGS={0x3573, 0x11, 0x0, 0x1, [@nested={0x11b2, 0xf8, 0x0, 0x1, [@generic="dcf183177e42aecaf751b3413acdf659ca32afb5396bb8e88207729891130d12d188062dbecdb776574191208c84da23cca8a955af2a80c8ece802f2dc30bca88684758ced0c30d44f9e845b844e824129461c607e22e8da33ddb61f62026e7f8e20a8dd43816663d459237a", @generic="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", @generic="bcfb6567a3c3277b9430469e6b864f09cf91030fbc545af4416122e215b2c14589bd08c46ff0db9ae321922a0a03e7535f8d987a498d4d184ab41513349d2aa17093e67eeae6847d31e62264a7e8b08fa15fca8cd1565c5f632147cdd07007b75155c81eb8b5e6476c368cc10e3c54a692b612d7b5cfd3b839c82c399a5651403415be68c06b7031eb463893c1a90c833e26221dd983535f0f82", @nested={0x4, 0x2b}, @nested={0x4, 0x7a}, @nested={0x4, 0x88}, @generic="f0ff50b8f4b13f6c19f079aea78f3dc8dde9981e72e0db94e6a2da39c9a06cd0e6997e2bc530e3a517edb0335a0f30eb41fba3b573ec107f542a5e04d048a1435ffbde7f563f3d70f8c864b0d917e296f3f5e51e3f38e1a7a3d6ec69ac802723cf11ca72984ec6721e3b942e0181eef39c3025964d19415ad87a1ac153b9ad0c06ce42ba748422b4e6f209750a771a14238b22a4dcce601cbc415daa"]}, @nested={0x60, 0x93, 0x0, 0x1, [@generic="1480215e141ad6c9a30a95684a812a6ace78e55eb30e342b812bc008a990103537e9f3f8567baca256147ba8b1749092faf4b5d3b4c7c0987bfe6a6b84aa5f9f31217f623e6e92bb1bcc94e692afcaaf3991854acca8eba061485414"]}, @typed={0xc, 0x158, 0x0, 0x0, @u64=0x5}, @nested={0x1dc, 0x53, 0x0, 0x1, [@generic="3b05a3678547e2b0fd52579dc4596a239349cb467d6bbd63b302bff3e3bf79c14a49bafa105b79f0030b3d84b4eabafe89d1ae9759a03d0e46f5f7b3ab300d6ae60f0b21bbd8551af59a6de19af0fca5542c7716cb12470e74ec1e87f6a6ed6f80f5275bf8c81e3613f2a5b41acda5631975fe885a3214b28d27aee086870b7f9188975071a44996ad48d300942a6e3637704bf8be36633711d55f5f86acce0459261b0d8c61a3ef619b6194b919a50a96f6a95bea4cfc2896801c1d353c92668e35f1c1791c595c", @typed={0x8, 0xbc, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x122}, @generic="87204f7d57741f09e42677a0a19393b24de696893e41d791b9f67ec45e1f9b35ca0f81fdd3b4b8664b8e64b3e94fce2fc557146ba48644b2371727d5c54f83a0da0c286a9ba43f8c326897ac1f0e3d028df40a8e3ca99cfa6aa2c12746002f7bd623df8fd21e10e9ffccb1e65a8578c2ebdc34eb0c5f20e04b6c192849262178fab6e8c23c6a92feefd5208560c910c07a72ed", @generic="0ce2d4123e62383449f648801d94fec6c0ed27345e84b91e2470ba7d599d722c7834a855acdf27c0b8512bae0585f6d3c5105e31a035cedf1a51fc6769a44f2e9ec8be7ce9b2d0f5c4173cb90c3fc2110af2824b774f6ca4435126ec687ebf7129a1927a3d1d44e3d80369a810c9eea54c"]}, @nested={0x24, 0xfa, 0x0, 0x1, [@typed={0xc, 0x14, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x87}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r7}]}, @nested={0x28, 0x79, 0x0, 0x1, [@nested={0x4, 0x5}, @typed={0x8, 0x11a, 0x0, 0x0, @uid=r8}, @nested={0x4, 0xbc}, @typed={0x14, 0x34, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="bd28e862828ff28d28919c2bdbea57ebc71c23794998d3933e64138be9741622b3bbbdc831062444a58a2eb8ec25f4fa654132311dcce726cefaeec4702337af0a8b3a378fcdda7be2ad81d28e65951e91656fe75a0a8f1a95c740559d93eeda06e511dbe5750950a861cd9dbd5f1e3b2de1c9fc9188197bd9b8cd3be9d0578c5becd1a1ec33fb04e77207b33da4a2453b36d163842ec3533b3c905bd8e25c6c49353eef6365fe0237362f1b9c05a5d5d19d69d04261893a155b2a3df04df8f8ef3fbb5ed091046d09def5afe4f641da0fa2a0d58a6f922da82fc7", @typed={0x14, 0xde, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x74}, @nested={0x202c, 0xf1, 0x0, 0x1, [@generic="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", @typed={0xc, 0x74, 0x0, 0x0, @u64=0x5c}, @nested={0x4, 0xce}, @generic="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", @typed={0x4, 0x52}, @nested={0x4, 0x115}, @nested={0x4, 0x5c}, @typed={0x8, 0x159, 0x0, 0x0, @pid=r9}, @typed={0x4, 0x3}]}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x80}]}]}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x4a3e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}]}, 0x4be4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000740), r0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd29, 0x255fdbf9, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80)
r12 = waitid$auto_P_ALL(0x0, 0x7, &(0x7f0000000540)={@siginfo_0_0={0x400, 0x401, 0x8, @_sigfault={&(0x7f0000000180)="337b1b51d23903d93ab78d7e120b7f76353082aab9c1f0c6480e1373726eaa72caf56a3aab093b72546e80f851", @_addr_bnd={"09adea82807afdcc", &(0x7f0000000300)="49ab4252e46faa05a46ba1dbe604b168ba8dea89d7745c0f63a58c36118a65324ee8f343de08da6015a805b586d1ef39906c3228de80925f864e896e98febc9e82a881f96c0c58ee413663c3cccc47384de1e8b203e4edaa3282a0293f8c6bb2a428eb39608cee3c7331ef9cd32af05c041a0fb0c3ceac2e712c2a853eeafb40ab22031305", &(0x7f00000003c0)="e032f4e4679080929e46d77f37888f325427ca3669d867fd3e1ab0f4b3a56cd3b77c5d327935147e8ec39f92db64a719765dd2593da15f5e1e3703b3ed124a1202be6d3185a72470b9a3c36f63c6ecd3e96d68a98a1b5f3ea0dafead6e98494e21f09af2b5601b96de4c410d32af0d30675beed24ea78b38854c07c59df665c6f9ffd0607fb9f3a400f2290afe400a20a46b87c3ad3c659cfbc466554670e8c9692927a70bc4186910ab72dfc188669884745a023d759bc599ccd0c5082af838fb8c323a427b357ab4bf4fa70ed739b0d3eb2ad1"}}}}, 0x2, &(0x7f00000005c0)={{0x0, 0x2df90a3a}, {0x7, 0x6}, 0x80000000, 0xda5, 0x7, 0x7, 0x8, 0x7, 0x7, 0x4b, 0x8, 0x61d, 0x10000, 0x3, 0xe, 0x4})
sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0xa4, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_ADDRS={0x7b, 0xa6, 0x0, 0x1, [@generic="4521c6912f7efd78c2f521e19d74311ff0758694eee4a942167c4f36bce7e5efca254da3f49258830f59045a90891471fe761500799d8f4bf2c5cee07ede7ac432bdbda1af16113d533dc7fbb7c4f8cc2c360562b10a4d5e66f56aab8561ff443d4adcd8c41469885e796f533a23ed", @typed={0x8, 0x103, 0x0, 0x0, @pid=r12}]}, @NL80211_ATTR_HE_CAPABILITY={0x11, 0x10d, "6ce756dcb1d302d41c1cbfe619"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
r13 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/device\x00', 0x20040, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r13, &(0x7f0000003480)=""/247, 0xf7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3m43.972193487s ago: executing program 2 (id=954):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
socket(0x6, 0x3, 0x37)
mmap$auto(0x0, 0x7d7f, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x26, 0x5, 0x8c68)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x301641, 0x0)
ioperm$auto(0x4, 0x100000001, 0x4000005)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyea\x00', 0x74c40, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1)
read$auto(r1, 0x0, 0xef)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setxattrat$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, &(0x7f00000000c0)='ns/mnt\x00', 0x0, 0xa4)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x7, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0)
read$auto(r4, 0x0, 0xb4d3)
unshare$auto(0x40000080)
setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569)

3m43.0191105s ago: executing program 2 (id=959):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r1 = socket(0x2c, 0x3, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2)
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="d4c66192ebd62b1c0f8e69a0158fa44406000000263ab57898627249e7409e0b37e9b596c5", @ANYRES16=r3, @ANYBLOB="251729bd7000fedbdf25010000000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'})
fcntl$auto_F_GETOWN(r1, 0x9, 0x3)
waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0x6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
madvise$auto(0x0, 0x20499d, 0x9)
listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/system/cpu/kernel_max\x00', 0x101000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/42, 0x2a)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0xffe, 0xb, 0x29, 0x2, 0x8]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc1, 0x800, 0x8, 0x8, 0x10001, 0x400000000003, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getpid()

3m41.27046622s ago: executing program 2 (id=965):
r0 = socket(0x2, 0x1, 0x0)
mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_l2tp(0x0, r0) (async)
syz_genetlink_get_family_id$auto_l2tp(0x0, r0)
madvise$auto(0x0, 0x0, 0xa)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff)
socket(0x29, 0x2, 0x0) (async)
socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x100, 0x0, 0x13, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
connect$auto(0x3, 0x0, 0x54)
ioprio_set$auto(0x3, 0x0, 0x4b34)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
fcntl$getown(r2, 0x9) (async)
r3 = fcntl$getown(r2, 0x9)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x184, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x168, 0x2b, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x6e, 0x0, 0x0, @uid}, @nested={0xd8, 0x109, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x4c}, @nested={0x4, 0x104}, @nested={0x4, 0x41}, @nested={0x4, 0xf7}, @generic="342e76e2f14cf1d93e2395f66d479b783875e0ec48609760c5a031c038433e4093b238c6163d80bd86b8b1bf7f95cccae18504e4dba9e9c2abb3a4a5ccde7d2b15b3f58af38589379f254e725f7fa103ac05250b76894169f98015b9cc26b55de6cf60697356f3578c388b1a8c903906b070c5be3edd39792cba6bbbb4a87e0ca8b3060d8cbafb18b8889e16a617f2cc0c1a3e05b4ec09d932a3aac46f8ed7d4498a3d83e8d32f443168766ded8e26459b382cca5d6861e3f80c472f"]}, @typed={0x7b, 0x149, 0x0, 0x0, @binary="a4fd063ff9d39982daf17c5ea05f68d0abdaa97359ea12129fffa753bda48e8c80b42648723604c9a1e686d7dac56e64c70a4e1721ced34bd9c3bad3bd33656431f3c721e8acb7204d83febce25302daccb9705debbeba6503e94d9279731bd3fc92a0d4a2655f13d9dac99e0f625df9f34fd726724991"}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x1000000, 0xffffffffffff0006, 0x17)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x8000000000002000, 0x100000004, 0x8000100000000, 0x0, 0xffd, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)

3m38.421002565s ago: executing program 2 (id=971):
mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000)
ustat$auto(0x801, 0x0)
close_range$auto(0x2, 0x8, 0x0)
process_mrelease$auto(0xffffffffffffffff, 0xc3)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/local_cpulist\x00', 0x100, 0x0)
read$auto(r0, 0x0, 0x20)
open(0x0, 0x22240, 0x155)
socket(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/netfilter/nf_log\x00', 0xc0000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8)
fchmod$auto(r2, 0x9)
setreuid$auto(0x4, 0x8)
mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd)
r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x400400, 0x0)
openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
getsockopt$auto(r3, 0x9, 0xf, &(0x7f0000000180)='*%.\\[-:@\x1d\xba\x1b*\x9a\xb0\xd6\xae\x1f\xa9\xf0\x90\xba[\xdd\xd8$\x990{\x00', &(0x7f0000000100)=0x2000)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
socket(0x2, 0x1, 0x106)
madvise$auto(0xfee, 0x8, 0x8)
r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r4, &(0x7f0000000040)="2f9143327f204f9127bd0c494bb2f75e31ed950d27740ce92a30e0e11bc8194405a0e11688c0cd430e1910af85020ee71b5282c57712be0f3c9df550b5f3058d9610d37abc796d83a3255541a3f76be41280499360c4a71d3fb896da6ff74a5251ab0ba3ab2c", 0x66)
listen$auto(0x3, 0x81)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x3, 0xb}, 0x800009}, 0x5, 0x2000d87f)

3m37.646650137s ago: executing program 2 (id=976):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
statx$auto(0xffffff9c, 0x0, 0x1000, 0xbb, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00')
r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48014}, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x40600, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x717180, 0x0)

3m32.152277577s ago: executing program 0 (id=991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRESOCT=r1, @ANYBLOB="01002bbd7000fbdbdf250100000031208be8a5b4f52d83483e5c2d79da46e337d98473588f99774c7eb4868b973c1cef8187525db7b5b4e78678eb59512dbc7b11f4e29c29e3273c870a9555cf469e67e8886341e84d38edd658cf267f92e1e785a50fe500fbc125a65f8a4e5aa458a90f3d87fc71eca6309fc0ee1724cea121a7c96dbba43270448ec20cd22915c1cfa658b316e773d1eff747e371aace10d66450a3666b7be9754bde44d1"], 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000007eb7c203b350eecaaf7ef7f6421394955b4e51a404972779187e6bd9833591d6e51978c4eccc6bb97f6d83a3f9ffa33fcb11e448d073929e6cbf6d89f508a2a0557ae59e7e0c118e376d97a99bc922677856671c524ff73c001e28d36d2b1a9d196e693e34ef37f1b34dbed3cd3b87b3caed61798f66a903294d8b6be650538183ebe7a8af78221e745b059b8c0f64d58561feafad59c5a42831839eacb3608e7f324528b101439b06804b7ba1c8fce285e1498c61a65cede2750ff9c29668d497bb93e54b03974fe4a82f99c86924536bcbd103a7be159ac34f594a369755555d3280240876bebb5810187ec3b7c580910e40c04d8a40b6a8e2e81b6eeb0ad163d8f49997b5a14620f0fa633dd58f4c6f8443b9b9c09471b077b3fec0a9206941c7a2984f9fc8967455fd59fc282adde3d0edc8b9afdc9bb33fb0ab46ebcf40bcc3e92c25e1342375f71060e42a018a5788d0f95fe68f456a12d88e1b8cc4d195e4fd6a0d699fc78153be35d1085987bf1ac15ebc51a1d2a2bf254d35d8b244d6588230802353704729b46bab220379cf31e9befe188ee0fe12b8bf6abf370b1546be347e180bd6656cfde34aea15180523ae3a4361442c2c5c1de4f51d7174d0f91e4e5a343e563cc57aae27885825a9c6ea39ecea4e01619a6308f5350bfab54bce2b81c2a6d824547e41b0c65cbb7628847b1a1781d96518380adb26356383691e170e4c789bdde524bf6c8e7a51677ba909169f61966657a59e17985f32720c04fc35cae786c71534fc376859bf73224626652d38dd0660e010310cee5d86721c7057", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf25040000000500070003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4)

3m31.904929837s ago: executing program 0 (id=994):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x840, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$auto_TIOCCBRK2(r0, 0x5428, &(0x7f00000001c0)="4ace9e608b6eaad16633798c390fd3af5f5281a563dd063b7f189615f76441aebf971ca0f18aee4348e7492056a5bbc64864bc13f9250f5979d67c77ba10afb258badd8093558f69758d")
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
unshare$auto(0x40000080)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x8)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(r1, r1, 0x0, 0x6)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x5, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x0, 0x7, 0xfff, 0x948b, 0x0, 0x15f4da0a, 0x3, 0x402, 0x62, 0x80000000, 0x4, 0x6d41, 0x4, 0xa, 0xfffffffffffffdfa]}, 0x0)
write$auto(r2, &(0x7f0000000400), 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="01f16cbd7000fbdbcc2508000000080017000800000004004cc2dad24f83e59c45c30f31bb56a135de2e7a45d256bf9ee44a6c779204d762999274560ee5861d0e2d58a8a5cf3bf5903cb40d68e99c2e9490a988825f2aaa27791579f3dbaa428556bda50964cd4ee65860e6fd2814f42d95e94c99ba35781d6d92ec57e4f7a07085950b0076de581ab6f95b60ee25c2d6b1ba106119b2c284fd3f4a8ea710257cb2"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
setpriority$auto(0x2, 0x0, 0x80000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xec8, 0xdf, 0x100000000009b72, 0xffffffffffffffff, 0x28000)
madvise$auto(0x0, 0xffffffffffff0003, 0x15)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/syz_tun\x00', 0x1cb422, 0x0)
pread64$auto(r3, 0x0, 0x800003, 0x270)
madvise$auto_MADV_SEQUENTIAL(0x8, 0x2, 0x2)
io_uring_setup$auto(0x6, 0x0)

3m29.831133424s ago: executing program 0 (id=1000):
ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0xe2, 0x1, 0x1, 0x400, 0x1, 0x6, &(0x7f0000000040)="b927b049be3a7597f3c0719c29d583802540b5bbb723cc24467766dfd8a78b7b5aa4ded59ae8dfd7ca90c3a3f5cd67560139eeb51c0286e61dc66f2472101585e659f896db2bdfd9a557ed6c1adc34203beffdc9fa57d451e5ec5a821327d6dc34f7535df8a49fea6c89e53cc543c1d816da9c49a2890d5d34731f2296e1b3842ef0917982824f9cd21ac3e4c31a3b3e9ec69ff020d0499e4cda0f4d938a3fcd511d3932698309fdd9c4ffab660176d954b85d149b823bab189f00b4e201a242189d452f99509d9c4f0ed605b743087fa582a73e7a18e3300d"})

3m29.7023447s ago: executing program 0 (id=1001):
r0 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x23, 0x2, 0x0)
ioctl$auto(0x3, 0x89ee, r1)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sysfs$auto(0x2, 0x44, 0x0)
sendto$auto(r0, &(0x7f0000000580)="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", 0x3, 0x8, &(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x2}, 0xfffffffd)
r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', <r4=>0x0})
sendmsg$auto_OVS_VPORT_CMD_SET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x83420020}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r3}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0x1, 0x7d8, 0x6, 0x8, 0xec45, 0x42fb0563, 0x9}}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0xf5}, @OVS_VPORT_ATTR_UPCALL_PID={0x37, 0x5, "61bc76f38aafcb62815b89885cb7342119a139df75fbb8a68bb4462b4da18d8d2f19f60e540b59fd14ce9d1d3df73d06a7436e"}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x1ff}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4080}, 0x4008010)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)
r5 = socket(0x2c, 0x3, 0x0)
poll$auto(&(0x7f0000000d40)={r5, 0x1, 0xa}, 0x5, 0x3)
bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f00000001c0)=@bpf_attr_1={r0, 0xddd1, @next_key=0x3, 0x7}, 0x88a7)

3m29.511914619s ago: executing program 0 (id=1002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lstat$auto(0x0, &(0x7f0000000180)={0x0, 0x1c, 0x9, 0x40006, 0x0, 0x0, 0x0, 0x1003, 0x8, 0x80000008000000a, 0x8, 0x6, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6, 0x1})
r1 = socket(0xa, 0x3, 0x3c)
connect$auto(0x3, 0x0, 0x55)
write$auto(r1, &(0x7f0000000080)='<&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0)
ioctl$auto_MON_IOCX_GET(r2, 0x40189206, 0x0)
ioctl$auto_MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x40, 0x0, 0x100000ffb, 0x8000000008011, r0, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyea\x00', 0x0, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r3, 0x8000)
mmap$auto(0xffffffffffffff82, 0x20000a00004, 0x400002, 0x15, 0x602, 0x5)
r4 = io_uring_setup$auto(0x9, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x200401, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/usb33-port2/power/runtime_active_time\x00', 0x80180, 0x0)
socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r4)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/122, 0x7a)

3m28.410172191s ago: executing program 0 (id=1006):
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ptype\x00', 0x0, 0x0)
mmap$auto(0xffffffffffffff20, 0x1000000000004, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0)
ioctl$auto(r1, 0x40246f4c, 0x38)
mmap$auto(0x0, 0x5, 0x2, 0x16, 0x401, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop15/queue/atomic_write_unit_max_bytes\x00', 0x14b942, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0)
exit$auto(0xffffff9f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_taskstats(0x0, r3)
getpgrp(0x0)
sendmsg$auto_TASKSTATS_CMD_GET(r3, 0x0, 0x20000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1e/adr\x00', 0x404202, 0x0)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x0)
fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000)
writev$auto(0x3, 0x0, 0x1b)
r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/block/nbd7/zone_wplugs\x00', 0x101281, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000080)=""/253, 0xfd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c0302, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
ioctl$auto_SG_SET_TIMEOUT2(0xffffffffffffffff, 0x2201, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5)
write$auto(0x3, 0x0, 0x100082)
unshare$auto(0x40000080)

3m22.537390156s ago: executing program 32 (id=976):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
statx$auto(0xffffff9c, 0x0, 0x1000, 0xbb, 0x0)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00')
r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48014}, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x40600, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/ports/1/ethtool/pause/report_stats_tx\x00', 0x0, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x717180, 0x0)

3m13.340736517s ago: executing program 33 (id=1006):
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ptype\x00', 0x0, 0x0)
mmap$auto(0xffffffffffffff20, 0x1000000000004, 0x4000000000df, 0x40eb1, r0, 0x300000000000)
pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0)
ioctl$auto(r1, 0x40246f4c, 0x38)
mmap$auto(0x0, 0x5, 0x2, 0x16, 0x401, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/loop15/queue/atomic_write_unit_max_bytes\x00', 0x14b942, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0)
exit$auto(0xffffff9f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_taskstats(0x0, r3)
getpgrp(0x0)
sendmsg$auto_TASKSTATS_CMD_GET(r3, 0x0, 0x20000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1e/adr\x00', 0x404202, 0x0)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x0)
fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000)
writev$auto(0x3, 0x0, 0x1b)
r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/block/nbd7/zone_wplugs\x00', 0x101281, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000080)=""/253, 0xfd)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c0302, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
ioctl$auto_SG_SET_TIMEOUT2(0xffffffffffffffff, 0x2201, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5)
write$auto(0x3, 0x0, 0x100082)
unshare$auto(0x40000080)

2m29.331842072s ago: executing program 4 (id=1132):
r0 = prctl$auto_SIGCONT(0xf1, 0x12, 0xffffffffffffffff, 0x7, 0xffffffffffffffc0)
mmap$auto(0x5, 0x1, 0x2, 0xeb1, r0, 0x7ffd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x2, 0x2, 0x1)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0xffee, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e21, @broadcast}, 0x19)
r1 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@bpf_attr_4={0x7, 0xffffffffffffffff, 0x80000000}, 0x2)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={@raw=0x8, 0x101, 0x4, 0x8, "352ebef02abcbc011d16cb58cd36da795b5575ebf6bb479f4da91d2d1672da47b156122bdd55fff85d7fc1ea"})
r3 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x5, 0x70bd2c, 0x25dfdbfd, {}, [@VDPA_ATTR_DEV_QUEUE_INDEX={0x8, 0x11, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x40)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/can/rcvlist_sff\x00', 0x309200, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x1)
r4 = io_uring_setup$auto(0x59, 0x0)
mmap$auto(0x0, 0x810004, 0x3, 0x8000000008011, r4, 0x8000)
socket(0x29, 0x2, 0x0)
sendto$auto(0x3, 0x0, 0xfdef, 0x7, 0x0, 0x20)

2m28.907546507s ago: executing program 4 (id=1134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0x68)
r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1)
write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'geneve1\x00', <r5=>0x0})
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x1c, r4, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x9800)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x2b, 0x1, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r7 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r6})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
r9 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0)
pread64$auto(r9, 0x0, 0x100000001, 0x100)
read$auto(r8, 0x0, 0x1ff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4)

2m28.267977522s ago: executing program 4 (id=1137):
r0 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) (rerun: 64)
sendmsg$auto_IEEE802154_SCAN_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x1c}}, 0x800) (async)
sysfs$auto(0x2, 0x44, 0x0)
setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9)

2m27.776953956s ago: executing program 4 (id=1139):
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = socket(0x23, 0x5, 0x0)
bind$auto(r1, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x3, 0xa3}, 0x80)
bind$auto(0xffffffffffffffff, 0x0, 0x80) (async)
bind$auto(0xffffffffffffffff, 0x0, 0x80)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smbd_genl(0x0, r1)
process_vm_readv$auto(0x0, 0x0, 0x40, 0x0, 0x6, 0x9)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x9, 0x0, 0x9c)
connect$auto(0x3, 0x0, 0x54)
read$auto(r0, 0x0, 0x20) (async)
read$auto(r0, 0x0, 0x20)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f00000001c0)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
write$auto(0x3, 0x0, 0xfdf3)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)

2m26.758288902s ago: executing program 4 (id=1144):
r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/dri/vkms/name\x00', 0x80ab01, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/mmio_stale_data\x00', 0x80000, 0x0)
read$auto(r1, &(0x7f0000000040)='^\x00', 0x75e)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x8040, 0xc9, 0xa}, 0x18)
lseek$auto(r0, 0x20004, 0xb)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/dri/vkms/name\x00', 0x80ab01, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
getcwd$auto(0x0, 0xffffffffffffffff) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/mmio_stale_data\x00', 0x80000, 0x0) (async)
read$auto(r1, &(0x7f0000000040)='^\x00', 0x75e) (async)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x8040, 0xc9, 0xa}, 0x18) (async)
lseek$auto(r0, 0x20004, 0xb) (async)

2m26.376982847s ago: executing program 4 (id=1146):
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0x68)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'geneve1\x00', <r4=>0x0})
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x1c, r3, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x9800)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x2b, 0x1, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88841, 0x0)
timer_settime$auto(0x0, 0x8, 0x0, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}})
writev$auto(r6, &(0x7f0000000100)={&(0x7f0000000340), 0x3}, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r7 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)
r8 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r5})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
r10 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0)
setsockopt$auto_SO_TIMESTAMPNS_NEW(r8, 0x1, 0x40, &(0x7f0000000140)='geneve1\x00', 0x1000)
pread64$auto(r10, 0x0, 0x100000001, 0x100)
read$auto(r9, 0x0, 0x1ff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4)

2m11.16248018s ago: executing program 34 (id=1146):
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0x68)
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1)
write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'geneve1\x00', <r4=>0x0})
sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x1c, r3, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x9800)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x2b, 0x1, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88841, 0x0)
timer_settime$auto(0x0, 0x8, 0x0, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}})
writev$auto(r6, &(0x7f0000000100)={&(0x7f0000000340), 0x3}, 0x8)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r7 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)
r8 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r5})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
r10 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/psched\x00', 0x40102, 0x0)
setsockopt$auto_SO_TIMESTAMPNS_NEW(r8, 0x1, 0x40, &(0x7f0000000140)='geneve1\x00', 0x1000)
pread64$auto(r10, 0x0, 0x100000001, 0x100)
read$auto(r9, 0x0, 0x1ff)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4)

9.714626698s ago: executing program 1 (id=1566):
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0)
close_range$auto(r0, 0x8, 0x40009)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0)
ioctl$auto_FIONBIO(r0, 0x5421, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000)
openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0)
r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b)
read$auto(r1, 0x0, 0x1)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) (async)
close_range$auto(r0, 0x8, 0x40009) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) (async)
ioctl$auto_FIONBIO(r0, 0x5421, 0x5) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000000008000) (async)
openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) (async)
open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) (async)
read$auto(r1, 0x0, 0x1) (async)
write$auto(0x3, 0x0, 0xffd8) (async)

8.092855683s ago: executing program 1 (id=1574):
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
openat$auto_gpiolib_fops_(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
socket(0x18, 0x6, 0x9)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80001, 0x0)
write$auto(r0, 0x0, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cpu.max.burst\x00', 0x22001, 0x0)
write$auto(r1, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92<e\x8b?#a\xa3 \xaa\x19\xde}\x10\xa4\x95\x02\x12\xbb\x13\xeb<\xc8x\x86\xc6\x12w2u\xe5\xb0\x8f\xda\x88R\xf4 @\xdc\x8e\xaa\xf0{\xa8,\xa3\xc7\x01\\\x03(\xc0\xb3\xf3\xf80eqo\x1a\xe0\xc6\xd9\xcf\xab\xf4_\xf2\xedY\xff\xe0\xbe\x82cX_&o\xc4S\x87\x9a\'w\x18\x91]\xcf\x179?Ag%\v\x12\x86\xf0\xe2d\xdc\xaa\x0f\xa8v\xc3\x83\x89\xbe\x1c^\r\xfb\xdb\x14\x8cC\xe9>\xfc\xf3\x1a/\x99dcA\xf4B\xf3\xba\x17\xea', 0xe)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0xea880, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001000), 0x4000, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x44)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0)
ftruncate$auto(r2, 0x10000000004)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00'})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004)

7.881427805s ago: executing program 1 (id=1575):
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) (async)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x300)
socket(0x25, 0x1, 0x5) (async)
socket(0x25, 0x1, 0x5)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'xfrm0\x00', <r5=>0x0})
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r4, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x64810)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x2004c891)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r7, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80)

7.589036138s ago: executing program 1 (id=1577):
syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff)
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0x4004)
msgsnd$auto(0x2, 0x0, 0x65, 0xfffffffd)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0xfffffffffffffffc)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0)
futex$auto(&(0x7f0000000080)=0x2, 0xa, 0xf3b, 0x0, 0x0, 0x440a48ce)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), 0xffffffffffffffff)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)

6.389638484s ago: executing program 6 (id=1582):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
move_pages$auto(0x0, 0x6, &(0x7f0000000200)=0x0, &(0x7f0000000480)=0x804, 0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x1)
mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(0x3, 0x0, 0x58)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0xbc6, 0x4, 0xd3)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r2 = socket(0x2a, 0x6, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0xc, 0x0, 0x4)
listen$auto(0x3, 0x81)
setgroups$auto(0xe32, 0x0)
r3 = socket(0x2b, 0x1, 0x0)
sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r3)
sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00022abd7000fcfadf250400298f838df3d9f3b1f3915bc9030dc35e1bea7fff8ee54d74ae73eb7e999e7c0834ec433c7905de20e07c5f5abdc1bdae6b0012f6baabed3f9962534ac5236fc058cb1eae4d0643bc064e48d37487a28354de336437821daf71bfed6fbbcbd2b9671200bbcef5371eb08ee85db0243586604db70c9b5e8120f913216dbd82529a9aacc04fadc08a4ba80cd0993f797073a7808b4f4700e656c689d3b2cd6fa0d0547cacdd11549448c4a7c82a60ff6acd09e4"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20040004)
waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0x8, 0x35764a2e, @_sigpoll={0x5}}}, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000805)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r2, 0x0, 0x1)
getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv6/neigh/netdevsim3/retrans_time\x00', 0x2100, 0x0)
r4 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x88000, 0x0)
sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x7fffe000)
mprotect$auto(0x110c230000, 0x41, 0x10)
unshare$auto(0x40000080)

6.388959798s ago: executing program 3 (id=1583):
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
openat$auto_gpiolib_fops_(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
socket(0x18, 0x6, 0x9)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80001, 0x0)
write$auto(r0, 0x0, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cpu.max.burst\x00', 0x22001, 0x0)
write$auto(r1, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92<e\x8b?#a\xa3 \xaa\x19\xde}\x10\xa4\x95\x02\x12\xbb\x13\xeb<\xc8x\x86\xc6\x12w2u\xe5\xb0\x8f\xda\x88R\xf4 @\xdc\x8e\xaa\xf0{\xa8,\xa3\xc7\x01\\\x03(\xc0\xb3\xf3\xf80eqo\x1a\xe0\xc6\xd9\xcf\xab\xf4_\xf2\xedY\xff\xe0\xbe\x82cX_&o\xc4S\x87\x9a\'w\x18\x91]\xcf\x179?Ag%\v\x12\x86\xf0\xe2d\xdc\xaa\x0f\xa8v\xc3\x83\x89\xbe\x1c^\r\xfb\xdb\x14\x8cC\xe9>\xfc\xf3\x1a/\x99dcA\xf4B\xf3\xba\x17\xea', 0xe)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0xea880, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001000), 0x4000, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x44)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0)
ftruncate$auto(r2, 0x10000000004)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00'})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004)

5.465361013s ago: executing program 6 (id=1584):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r1, 0x8008551c, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x48000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
statmount$auto(0x0, &(0x7f0000000040)={0x0, 0xfffffffc, 0x38, 0xffffff01, 0x7b, 0x9, 0x80000009, 0x7, 0x10000000008, 0x5, 0xd, 0x7e, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x40000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000]}, 0x800, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
r2 = socket(0xa, 0x5, 0x0)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250300000004000800040003374b0008"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose11/carrier_up_count\x00', 0x80a80, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
socket(0xa, 0x801, 0x106)
socketpair$auto(0x1f, 0x40000009, 0xe, 0x0)
setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb)
read$auto(r3, 0x0, 0x20)
setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x8, 0xa, &(0x7f0000000000)='%&/\x00', 0x10000)
write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b)
mprotect$auto(0x110c230000, 0xa588, 0x6)
openat$auto_autofs_root_operations_autofs_i(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy11/netdev:wlan1/stations\x00', 0x2000, 0x0)
fcntl$auto_F_DUPFD(r2, 0x0, r3)

5.276000328s ago: executing program 3 (id=1585):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
r0 = socket(0x2, 0x801, 0x6)
setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x85, 0x0)
socket(0xa, 0x1, 0x84) (async)
r1 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r1, 0x0, 0x483, 0x0, 0x0)

5.192369682s ago: executing program 6 (id=1586):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x9)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rxrpc/stats\x00', 0x401, 0x0)
write$auto(r1, &(0x7f0000000000)='j', 0x100)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x3, 0x1ff, 0x9, 0x200eb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x10000000000ebf, r0, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
prctl$auto(0x2000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="03000400294ddc1f95efb912eae02eb6523abe2fcb1c81bb2e8c4e530dc0b4e8445d8be6b7b45738d3009c4d4de9c5a556ceb3400a6e1f486af5573a6bf10e2a3d7691a1bfdffeeb7267eded5b3369a4eb770f9ac6fb60f8c30cf432c78028ce2d1427038b743536c4b63d6eac50004231ee9249f0dfc7760f01fe1edf40170947d062e66be121c0db0ae6cae3", @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x7dd140, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x01\x00'/21, 0x100000002, 0x100000001)
mmap$auto(0x0, 0x40009, 0xdf, 0xbb72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0)
prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1)

5.005007512s ago: executing program 3 (id=1588):
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044011}, 0x80)
r0 = socket(0x28, 0x5, 0x0)
r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x40, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_smc_pnetid(0x0, r2)
sendmsg$auto_SMC_PNETID_DEL(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd10\x00', 0x14f602, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff)
getrandom$auto(0x0, 0x6000000, 0x3)
mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r5, 0x8000)
setresgid$auto(0x0, 0x0, 0x0)
ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, 0x0)
shmctl$auto_SHM_STAT(0x1, 0xd, 0x0)
ioctl$auto_BLKRRPART(r5, 0x125f, 0x0)
lseek$auto(r4, 0x7fff, 0x40001000)
madvise$auto(0x0, 0x400053, 0x9)
connect$auto(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56)
read$auto(r0, &(0x7f0000000100)='(\x00', 0x1)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

4.438247335s ago: executing program 1 (id=1590):
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x3, 0x6)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x60801, 0x0)
clone$auto(0x8001, 0x9, &(0x7f0000000040)=0x8001, &(0x7f00000000c0)=0x1, 0x4)
syz_clone(0xe000, &(0x7f0000000100)="f3ad1dac04958c1e", 0x8, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="b891fc5b7b64c26dc50f7d96fe33425b714a7162b347e1d1d9da2827da74882d24d31ff2253d4e7628daa57671c1ebdb2e05a99f926afb4113d4ac7d2fec5e1fc4aede41150617f2b98b1b17144efcd72f3515887ab688c22ae11b285ee1bb7b77412503f1bb767b7bf1d221cc547fec4c4a971c3a0e61ed3fb41655d1017ef50ac040d2d0f5ab3260de16707eb6f8cd7f2180ee5fe43d476876eb")
r1 = gettid()
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000280)={@inferred=r1, 0x7, 0xdd8c, 0x2, "0f93d4ef095cddf453a4a34d53c6bbc0114a27bc97cd2eb9e314cdc36258980a89adc947f872d88f2562909a", @raw=0x800})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
setsockopt$auto(r0, 0x7e, 0x1, 0x0, 0x220e)
socketpair$auto(0xb, 0x9, 0x800, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0xe06, 0x3)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x70ed581b)
close_range$auto(0x2, 0x8, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0)
lseek$auto(0x3, 0x2, 0x4)

3.978996736s ago: executing program 3 (id=1591):
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
socket(0x11, 0xa, 0x9)
unshare$auto(0x40000080)
openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x7f835763b555bbe0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010b0bbd7000fcdbff7f05"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040084)
unshare$auto(0x40000080)
read$auto(0x3, 0x0, 0x13)

3.865650033s ago: executing program 6 (id=1592):
mmap$auto(0x0, 0x3, 0xdf, 0x14, 0xffffffffffffffff, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000)
r0 = socket(0x2, 0x3, 0xa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = inotify_init1$auto(0x3000000000000)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r4, @ANYBLOB="12000100898771f1c19f17790481008286dd000004"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00F\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000080001008000000008000200", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X', @ANYBLOB="3100040000ff0000"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
inotify_add_watch$auto(r1, 0x0, 0x20000e6e)
inotify_add_watch$auto(0x4, 0x0, 0x4000e6e)
ioprio_set$auto(0x2, 0x800000000, 0x8)
clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_FIOASYNC(r0, 0x5452, 0x1)
r5 = socketpair$auto(0x1e, 0x1, 0xffffffff, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyyf\x00', 0x80b40, 0x0)
ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clock_nanosleep$auto(0xfffffff9, 0x200000, &(0x7f0000000040)={0x100000000, 0x9}, &(0x7f0000000000)={0xffffffffffffffff, 0xc})
ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f00000000c0)="c0")

2.903231251s ago: executing program 6 (id=1596):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/admmidi2\x00', 0x30880, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x0)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0)
r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}})
io_uring_enter$auto(r1, 0x9, 0x820e, 0x8b, 0x0, 0x18)
r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x48000)
recvmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x1000, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b)
mprotect$auto(0x110c230000, 0xa588, 0x6)

2.317403363s ago: executing program 5 (id=1598):
syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff)
sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0x4004)
msgsnd$auto(0x2, 0x0, 0x65, 0xfffffffd)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8)
ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0xfffffffffffffffc)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0)
futex$auto(&(0x7f0000000080)=0x2, 0xa, 0xf3b, 0x0, 0x0, 0x440a48ce)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), 0xffffffffffffffff)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)

2.109029384s ago: executing program 6 (id=1599):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
ioctl$auto_RTC_UIE_ON(r1, 0x7003, 0x4)
setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808)
prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
r3 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
sysfs$auto(0x2, 0x9, 0x0)
r4 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_NEVER(r4, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0)
lseek$auto(r3, 0x8a05, 0x1)
write$auto(r2, &(0x7f0000000040)='//\xf2?', 0x80000000)
mmap$auto(0x0, 0x400008, 0x4, 0x9b72, r0, 0x9)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
shmdt$auto(0x0)
socket(0x7, 0x3, 0x2)
read$auto(0xffffffffffffffff, 0x0, 0x20)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
chdir$auto(&(0x7f0000000340)='./file1\x00')
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff)
waitid$auto_P_PID(0x1, 0x0, 0x0, 0xf, &(0x7f0000000440)={{0x7, 0x24}, {0x929a, 0x1ff}, 0x9, 0x3, 0x4032, 0xfffffffffffffff4, 0x4df, 0x0, 0x8, 0x8fb000, 0x0, 0x100, 0x4, 0x3, 0xd, 0x1})
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x5)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

1.591700728s ago: executing program 5 (id=1600):
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r0 = socket(0x2, 0x1, 0x0)
ioctl$auto_VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000240)={0x200000, <r1=>r0})
setsockopt$auto(r1, 0x401, 0x1f, 0x0, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyb9/power/runtime_status\x00', 0x40000, 0x0)
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
r2 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x2000, 0x0)
read$auto_tracing_stats_fops_trace(r2, 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x1a3b02, 0x0)
write$auto(r3, &(0x7f00000000c0)=',.\\\x00', 0xd)
r4 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r4, 0x1, 0xd, 0x0, 0x0)
socket(0x23, 0x80805, 0x0)
openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/12s\x00', 0x8217b0bf6e521f86, 0x0)
ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000040)={<r5=>r4, 0x0, 0x2, 0x0, 0x1, 0x651, [0x8, 0x2, 0x0, 0x800, 0x9, 0x8]})
r6 = clone$auto(0xd97768f, 0x6, &(0x7f0000000100)=0xfffffffd, &(0x7f0000000140)=0x101, 0x4)
ioctl$auto_XFS_IOC_ALLOCSP64(r5, 0x40305824, &(0x7f0000000180)={0x8, 0x8, 0x8, 0x5, 0x10, r6})
poll$auto(&(0x7f0000000000)={<r7=>r3, 0x4, 0x8}, 0x5, 0x400)
setsockopt$auto(r7, 0x7, 0x2234, 0x0, 0x1)
clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5)

1.360228912s ago: executing program 3 (id=1601):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = pidfd_open$auto(0x1, 0x0)
setns(r1, 0x60020000)
read$auto_debugfs_devm_entry_ops_file(r1, &(0x7f0000000040), 0x0)
ioctl$auto(r0, 0x4b2f, 0x1)

1.252167743s ago: executing program 5 (id=1602):
r0 = socket(0x10, 0x2, 0xfffffffe)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x16d40, 0x0)
write$auto(r0, &(0x7f0000000000)='\xf3-.:\x00', 0xb7)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x4d, 0x0)
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), r0)
ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000040)="36382843cbf647a308387752cf206143902799f714d3da792af73a2f51252c2924ba2758ab0a48d458fbe6a143f7d73b7035e954be54776dfb99d2e4055cbc993ef0467a8d1339bfea", 0xfd, 0x0, 0x0, 0x0, 0x0})
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xbc})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x2b, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0)
socket(0xa, 0x3, 0x3b)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x11, 0x3, 0x9)
close_range$auto(0x2, r3, 0x0)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4)
sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100)

1.132972245s ago: executing program 3 (id=1603):
timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x2, 0x8000000000000000}, {0x2, 0x80}}, 0x0) (async)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async, rerun: 32)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (rerun: 32)
getpid()
ioctl$auto(r0, 0x400454ca, 0x38) (async, rerun: 32)
mmap$auto(0x3ff, 0x4020009, 0xdf, 0xeb1, r0, 0xfff) (async, rerun: 32)
mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (rerun: 32)
socket(0x10, 0x2, 0x0) (async)
r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32)
r2 = socket(0x2b, 0x1, 0x0) (rerun: 32)
setsockopt$auto(r2, 0x6, 0x13, 0x0, 0x40)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x54)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config/target/version\x00', 0x5110c2, 0x0) (async, rerun: 64)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64)
mmap$auto(0x0, 0xe983, 0xdf, 0x15, r3, 0x8000) (async, rerun: 32)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64)
read$auto_aoe_fops_aoechr(r1, &(0x7f00000000c0)=""/26, 0x1a) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r4 = socket(0xa, 0x3, 0x3a) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getsockopt$auto(r4, 0x29, 0x36, 0x0, 0x0)

864.29466ms ago: executing program 1 (id=1604):
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
r0 = epoll_create1$auto(0x2)
readlinkat$auto(r0, &(0x7f0000000080)='}[,&*}\x00', &(0x7f0000000140)='nfsdK\x9d\x18n\xf0\x00', 0xffff9fbc)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f00000000c0)='nfsdK\x9d\x18n\xf0\x00', 0x3, 0x0)
open(&(0x7f0000000000)='}[,&*}/../file0\x00', 0x22040, 0x150)

790.618359ms ago: executing program 5 (id=1605):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0)
write$auto(r0, &(0x7f0000000500)='%[\x05\x00`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa31T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x7)
open(0x0, 0x22240, 0x154)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x5, 0x73)
recvfrom$auto(0xffffffffffffffff, 0x0, 0x8, 0xdcf5, 0x0, 0x0)

230.859887ms ago: executing program 5 (id=1606):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x5c9440, 0x0)
r0 = socket(0x1e, 0x6, 0x47d)
sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x1f00, 0x0)

0s ago: executing program 5 (id=1607):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0)
read$auto(r0, 0x0, 0xb4d3)
ioctl$auto(0x3, 0x5420, 0x38)
ioctl$auto(0x3, 0x402c542c, 0x38)
ioctl$auto(0x3, 0x402c542b, 0x38)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy9/fragmentation_threshold\x00', 0x4000, 0x0)
getsockopt$auto_SO_SNDTIMEO_NEW(r1, 0x7, 0x43, &(0x7f0000000040)='-\x00', &(0x7f0000000100)=0x8)
r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x8000, 0x0)
ioctl$auto_EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000240)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2000000000000021, 0x2, 0x10000000000002)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
socket(0x2, 0x801, 0x106)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
clone$auto(0x0, 0x0, 0x0, 0x0, 0x2)
ioctl$auto(r3, 0x541c, r4)
socket(0x2a, 0x2, 0x0)
r5 = socket(0x2a, 0x2, 0x1)
r6 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x140, 0x0)
read$auto_trace_time_stamp_mode_fops_trace(r6, &(0x7f0000000180)=""/128, 0x80)
connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55)
bind$auto(r1, &(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x7a)

kernel console output (not intermixed with test programs):


[  352.394178][ T9545]  do_file_open+0x20e/0x430
[  352.394197][ T9545]  ? __pfx_do_file_open+0x10/0x10
[  352.394231][ T9545]  ? alloc_fd+0x476/0x790
[  352.394262][ T9545]  ? do_getname+0x191/0x390
[  352.394286][ T9545]  do_sys_openat2+0x10d/0x1e0
[  352.394309][ T9545]  ? __pfx_do_sys_openat2+0x10/0x10
[  352.394334][ T9545]  ? __fget_files+0x21f/0x3d0
[  352.394367][ T9545]  __x64_sys_openat+0x12d/0x210
[  352.394391][ T9545]  ? __pfx___x64_sys_openat+0x10/0x10
[  352.394423][ T9545]  do_syscall_64+0x106/0xf80
[  352.394445][ T9545]  ? clear_bhb_loop+0x40/0x90
[  352.394468][ T9545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.394487][ T9545] RIP: 0033:0x7f7b3099c629
[  352.394508][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.394532][ T9545] RSP: 002b:00007f7b31777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  352.394551][ T9545] RAX: ffffffffffffffda RBX: 00007f7b30c15fa0 RCX: 00007f7b3099c629
[  352.394563][ T9545] RDX: 00000000000861c2 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  352.394574][ T9545] RBP: 00007f7b30a32b39 R08: 0000000000000000 R09: 0000000000000000
[  352.394585][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  352.394595][ T9545] R13: 00007f7b30c16038 R14: 00007f7b30c15fa0 R15: 00007ffe49e5e5f8
[  352.394619][ T9545]  </TASK>
[  353.948690][ T9582] zswap: compressor � not available
[  357.198963][ T9634] blktrace: Concurrent blktraces are not allowed on loop2
[  357.257721][ T9636] blktrace: Concurrent blktraces are not allowed on loop2
[  359.242820][ T9673] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input37
[  359.552950][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'.
[  359.748177][ T9687] FAULT_INJECTION: forcing a failure.
[  359.748177][ T9687] name fail_futex, interval 1, probability 0, space 0, times 0
[  359.819107][ T9687] CPU: 0 UID: 0 PID: 9687 Comm: syz.2.752 Not tainted syzkaller #0 PREEMPT(full) 
[  359.819135][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  359.819147][ T9687] Call Trace:
[  359.819154][ T9687]  <TASK>
[  359.819161][ T9687]  dump_stack_lvl+0x100/0x190
[  359.819194][ T9687]  should_fail_ex.cold+0x5/0xa
[  359.819216][ T9687]  get_futex_key+0x1d2/0x1620
[  359.819242][ T9687]  ? __pfx_get_futex_key+0x10/0x10
[  359.819263][ T9687]  ? find_held_lock+0x2b/0x80
[  359.819280][ T9687]  ? futex_wake+0x456/0x530
[  359.819311][ T9687]  futex_wake+0xea/0x530
[  359.819341][ T9687]  ? __pfx_futex_wake+0x10/0x10
[  359.819371][ T9687]  ? putname+0xb1/0x110
[  359.819387][ T9687]  ? kmem_cache_free+0x124/0x6a0
[  359.819415][ T9687]  do_futex+0x32b/0x350
[  359.819439][ T9687]  ? __pfx_do_futex+0x10/0x10
[  359.819461][ T9687]  ? __pfx_do_sys_openat2+0x10/0x10
[  359.819493][ T9687]  ? __pfx_idempotent_init_module+0x10/0x10
[  359.819519][ T9687]  __x64_sys_futex+0x34f/0x4d0
[  359.819544][ T9687]  ? __x64_sys_openat+0x12d/0x210
[  359.819568][ T9687]  ? __pfx___x64_sys_futex+0x10/0x10
[  359.819600][ T9687]  do_syscall_64+0x106/0xf80
[  359.819621][ T9687]  ? clear_bhb_loop+0x40/0x90
[  359.819643][ T9687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.819662][ T9687] RIP: 0033:0x7fc4fad9c629
[  359.819677][ T9687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.819694][ T9687] RSP: 002b:00007fc4fbb910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  359.819713][ T9687] RAX: ffffffffffffffda RBX: 00007fc4fb016098 RCX: 00007fc4fad9c629
[  359.819724][ T9687] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc4fb01609c
[  359.819735][ T9687] RBP: 00007fc4fb016090 R08: 0000000000000000 R09: 0000000000000000
[  359.819745][ T9687] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  359.819756][ T9687] R13: 00007fc4fb016128 R14: 00007ffe4cc20bd0 R15: 00007ffe4cc20cb8
[  359.819778][ T9687]  </TASK>
[  360.566705][ T9685] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  360.575416][ T9685] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  360.583192][ T9685] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  360.613009][ T9685] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  360.872454][ T9697] netlink: 'syz.2.755': attribute type 11 has an invalid length.
[  361.377084][ T9708] random: crng reseeded on system resumption
[  361.761029][ T9693] kexec: Could not allocate control_code_buffer
[  362.089272][ T9729] FAULT_INJECTION: forcing a failure.
[  362.089272][ T9729] name fail_futex, interval 1, probability 0, space 0, times 0
[  362.158375][ T9729] CPU: 0 UID: 0 PID: 9729 Comm: syz.3.763 Not tainted syzkaller #0 PREEMPT(full) 
[  362.158402][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  362.158413][ T9729] Call Trace:
[  362.158420][ T9729]  <TASK>
[  362.158427][ T9729]  dump_stack_lvl+0x100/0x190
[  362.158460][ T9729]  should_fail_ex.cold+0x5/0xa
[  362.158490][ T9729]  get_futex_key+0x1d2/0x1620
[  362.158516][ T9729]  ? __pfx_get_futex_key+0x10/0x10
[  362.158546][ T9729]  futex_wake+0xea/0x530
[  362.158576][ T9729]  ? __pfx_futex_wake+0x10/0x10
[  362.158606][ T9729]  ? putname+0xb1/0x110
[  362.158623][ T9729]  ? kmem_cache_free+0x124/0x6a0
[  362.158653][ T9729]  do_futex+0x32b/0x350
[  362.158677][ T9729]  ? __pfx_do_futex+0x10/0x10
[  362.158698][ T9729]  ? __pfx_do_sys_openat2+0x10/0x10
[  362.158722][ T9729]  ? __pfx_idempotent_init_module+0x10/0x10
[  362.158749][ T9729]  __x64_sys_futex+0x34f/0x4d0
[  362.158773][ T9729]  ? __x64_sys_openat+0x12d/0x210
[  362.158795][ T9729]  ? __pfx___x64_sys_futex+0x10/0x10
[  362.158828][ T9729]  do_syscall_64+0x106/0xf80
[  362.158847][ T9729]  ? clear_bhb_loop+0x40/0x90
[  362.158869][ T9729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.158888][ T9729] RIP: 0033:0x7f7b3099c629
[  362.158903][ T9729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.158920][ T9729] RSP: 002b:00007f7b2ebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  362.158938][ T9729] RAX: ffffffffffffffda RBX: 00007f7b30c16098 RCX: 00007f7b3099c629
[  362.158949][ T9729] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b30c1609c
[  362.158960][ T9729] RBP: 00007f7b30c16090 R08: 0000000000000000 R09: 0000000000000000
[  362.158971][ T9729] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  362.158983][ T9729] R13: 00007f7b30c16128 R14: 00007ffe49e5e510 R15: 00007ffe49e5e5f8
[  362.159006][ T9729]  </TASK>
[  362.629261][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  362.635619][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout
[  362.703731][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[  362.763525][ T9735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  362.833323][ T9728] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  362.841372][ T9728] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  362.857633][ T9728] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  362.872218][ T9728] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  363.231966][ T9750] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input38
[  364.047177][ T9757] Bluetooth: hci0: command 0x0c1a tx timeout
[  364.849979][ T9757] Bluetooth: hci2: command 0x0c1a tx timeout
[  364.930223][ T9757] Bluetooth: hci3: command 0x0c1a tx timeout
[  364.936401][ T9757] Bluetooth: hci1: command 0x0c1a tx timeout
[  365.607008][ T9797] FAULT_INJECTION: forcing a failure.
[  365.607008][ T9797] name fail_futex, interval 1, probability 0, space 0, times 0
[  365.659653][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.3.774 Not tainted syzkaller #0 PREEMPT(full) 
[  365.659680][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  365.659691][ T9797] Call Trace:
[  365.659697][ T9797]  <TASK>
[  365.659704][ T9797]  dump_stack_lvl+0x100/0x190
[  365.659736][ T9797]  should_fail_ex.cold+0x5/0xa
[  365.659759][ T9797]  get_futex_key+0x1d2/0x1620
[  365.659784][ T9797]  ? __pfx_get_futex_key+0x10/0x10
[  365.659826][ T9797]  futex_wake+0xea/0x530
[  365.659856][ T9797]  ? __pfx_futex_wake+0x10/0x10
[  365.659886][ T9797]  ? putname+0xb1/0x110
[  365.659903][ T9797]  ? kmem_cache_free+0x124/0x6a0
[  365.659932][ T9797]  do_futex+0x32b/0x350
[  365.659955][ T9797]  ? __pfx_do_futex+0x10/0x10
[  365.659977][ T9797]  ? __pfx_do_sys_openat2+0x10/0x10
[  365.660001][ T9797]  ? __pfx_idempotent_init_module+0x10/0x10
[  365.660026][ T9797]  __x64_sys_futex+0x34f/0x4d0
[  365.660051][ T9797]  ? __x64_sys_openat+0x12d/0x210
[  365.660073][ T9797]  ? __pfx___x64_sys_futex+0x10/0x10
[  365.660105][ T9797]  do_syscall_64+0x106/0xf80
[  365.660125][ T9797]  ? clear_bhb_loop+0x40/0x90
[  365.660147][ T9797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.660166][ T9797] RIP: 0033:0x7f7b3099c629
[  365.660181][ T9797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.660198][ T9797] RSP: 002b:00007f7b2ebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  365.660217][ T9797] RAX: ffffffffffffffda RBX: 00007f7b30c16098 RCX: 00007f7b3099c629
[  365.660228][ T9797] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b30c1609c
[  365.660239][ T9797] RBP: 00007f7b30c16090 R08: 0000000000000000 R09: 0000000000000000
[  365.660249][ T9797] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  365.660260][ T9797] R13: 00007f7b30c16128 R14: 00007ffe49e5e510 R15: 00007ffe49e5e5f8
[  365.660282][ T9797]  </TASK>
[  365.880741][ T9781] kexec: Could not allocate control_code_buffer
[  366.326462][ T9809] netlink: 'syz.0.778': attribute type 27 has an invalid length.
[  366.346991][ T9809] netlink: 334 bytes leftover after parsing attributes in process `syz.0.778'.
[  366.358297][ T9796] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  366.379757][ T9796] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  366.386239][ T9796] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  366.416835][ T9796] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  366.975741][ T9824] misc userio: Invalid payload size
[  367.726643][ T9738] Bluetooth: hci0: command 0x0c1a tx timeout
[  368.190932][ T9833] block nbd8: shutting down sockets
[  368.342813][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'.
[  368.451313][ T9738] Bluetooth: hci3: command 0x0c1a tx timeout
[  368.458197][ T9787] Bluetooth: hci1: command 0x0c1a tx timeout
[  368.465035][ T9787] Bluetooth: hci2: command 0x0c1a tx timeout
[  368.975599][ T9853] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12)
[  370.426799][   T30] audit: type=1400 audit(1771872159.714:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9883 comm="syz.0.796"
[  370.991579][ T9888] zswap: compressor  not available
[  371.925937][ T9913] FAULT_INJECTION: forcing a failure.
[  371.925937][ T9913] name fail_futex, interval 1, probability 0, space 0, times 0
[  371.969605][ T9913] CPU: 0 UID: 0 PID: 9913 Comm: syz.1.803 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.969637][ T9913] Tainted: [L]=SOFTLOCKUP
[  371.969643][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  371.969654][ T9913] Call Trace:
[  371.969661][ T9913]  <TASK>
[  371.969668][ T9913]  dump_stack_lvl+0x100/0x190
[  371.969699][ T9913]  should_fail_ex.cold+0x5/0xa
[  371.969721][ T9913]  get_futex_key+0x1d2/0x1620
[  371.969749][ T9913]  ? __pfx_get_futex_key+0x10/0x10
[  371.969778][ T9913]  futex_wake+0xea/0x530
[  371.969811][ T9913]  ? __pfx_futex_wake+0x10/0x10
[  371.969841][ T9913]  ? putname+0xb1/0x110
[  371.969858][ T9913]  ? kmem_cache_free+0x124/0x6a0
[  371.969887][ T9913]  do_futex+0x32b/0x350
[  371.969911][ T9913]  ? __pfx_do_futex+0x10/0x10
[  371.969932][ T9913]  ? __pfx_do_sys_openat2+0x10/0x10
[  371.969956][ T9913]  ? __pfx_idempotent_init_module+0x10/0x10
[  371.969982][ T9913]  __x64_sys_futex+0x34f/0x4d0
[  371.970006][ T9913]  ? __x64_sys_openat+0x12d/0x210
[  371.970029][ T9913]  ? __pfx___x64_sys_futex+0x10/0x10
[  371.970061][ T9913]  do_syscall_64+0x106/0xf80
[  371.970081][ T9913]  ? clear_bhb_loop+0x40/0x90
[  371.970103][ T9913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.970121][ T9913] RIP: 0033:0x7f81cab9c629
[  371.970138][ T9913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.970155][ T9913] RSP: 002b:00007f81cb9b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  371.970174][ T9913] RAX: ffffffffffffffda RBX: 00007f81cae16098 RCX: 00007f81cab9c629
[  371.970185][ T9913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f81cae1609c
[  371.970196][ T9913] RBP: 00007f81cae16090 R08: 0000000000000000 R09: 0000000000000000
[  371.970206][ T9913] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  371.970217][ T9913] R13: 00007f81cae16128 R14: 00007ffd430f4a50 R15: 00007ffd430f4b38
[  371.970240][ T9913]  </TASK>
[  372.679848][ T9911] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  372.687930][ T9911] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  372.693952][ T9911] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  372.725620][ T9911] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  373.221254][ T9939] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input39
[  373.701142][ T9955] FAULT_INJECTION: forcing a failure.
[  373.701142][ T9955] name failslab, interval 1, probability 0, space 0, times 0
[  373.760312][ T9955] CPU: 0 UID: 0 PID: 9955 Comm: syz.3.811 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  373.760345][ T9955] Tainted: [L]=SOFTLOCKUP
[  373.760352][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  373.760363][ T9955] Call Trace:
[  373.760369][ T9955]  <TASK>
[  373.760376][ T9955]  dump_stack_lvl+0x100/0x190
[  373.760408][ T9955]  should_fail_ex.cold+0x5/0xa
[  373.760453][ T9955]  should_failslab+0xc2/0x120
[  373.760471][ T9955]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  373.760498][ T9955]  ? __d_alloc+0x34/0xa80
[  373.760521][ T9955]  __d_alloc+0x34/0xa80
[  373.760538][ T9955]  ? lockdep_hardirqs_on+0x78/0x100
[  373.760560][ T9955]  d_alloc_pseudo+0x1c/0xc0
[  373.760584][ T9955]  alloc_file_pseudo+0xcf/0x230
[  373.760606][ T9955]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  373.760626][ T9955]  ? alloc_fd+0x476/0x790
[  373.760655][ T9955]  ? do_raw_spin_unlock+0x145/0x1e0
[  373.760686][ T9955]  __anon_inode_getfile+0xe8/0x280
[  373.760716][ T9955]  anon_inode_getfile_fmode+0x37/0xa0
[  373.760739][ T9955]  __do_sys_timerfd_create+0x2d6/0x3f0
[  373.760761][ T9955]  ? do_syscall_64+0x95/0xf80
[  373.760782][ T9955]  do_syscall_64+0x106/0xf80
[  373.760802][ T9955]  ? clear_bhb_loop+0x40/0x90
[  373.760825][ T9955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.760844][ T9955] RIP: 0033:0x7f7b3099c629
[  373.760860][ T9955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.760877][ T9955] RSP: 002b:00007f7b31777028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  373.760895][ T9955] RAX: ffffffffffffffda RBX: 00007f7b30c15fa0 RCX: 00007f7b3099c629
[  373.760907][ T9955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  373.760917][ T9955] RBP: 00007f7b30a32b39 R08: 0000000000000000 R09: 0000000000000000
[  373.760928][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.760938][ T9955] R13: 00007f7b30c16038 R14: 00007f7b30c15fa0 R15: 00007ffe49e5e5f8
[  373.760961][ T9955]  </TASK>
[  374.421934][ T9960] sctp: [Deprecated]: syz.2.808 (pid 9960) Use of int in max_burst socket option deprecated.
[  374.421934][ T9960] Use struct sctp_assoc_value instead
[  374.452529][ T9757] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9
[  374.475833][ T9961] netlink: set zone limit has 8 unknown bytes
[  374.503748][ T9944] zswap: compressor  not available
[  374.575343][ T9842] Bluetooth: hci0: command 0x0c1a tx timeout
[  374.598011][ T9963] netlink: zone id is out of range
[  374.647214][ T9963] netlink: del zone limit has 4 unknown bytes
[  374.776681][ T9842] Bluetooth: hci3: command 0x0c1a tx timeout
[  374.782753][ T9757] Bluetooth: hci1: command 0x0c1a tx timeout
[  374.788892][ T9787] Bluetooth: hci2: command 0x0c1a tx timeout
[  375.198154][ T9953] kexec: Could not allocate control_code_buffer
[  375.460700][ T9985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'.
[  375.807547][ T9990] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  375.849278][ T9990] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  376.348935][ T9999] futex_wake_op: syz.0.821 tries to shift op by -2048; fix this program
[  376.383412][ T9999] futex_wake_op: syz.0.821 tries to shift op by -2048; fix this program
[  376.413546][ T9999] 0x000000000001-0x000000020000 : ""
[  376.442391][ T9999] ftl_cs: FTL header corrupt!
[  377.651551][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  377.658069][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.189042][T10034] block2mtd: error: cannot open device �inX�����±��jFB�B>U�;߸�Ilk�
[  379.088904][T10050] Invalid ELF header magic: != ELF
[  379.659282][T10072] FAULT_INJECTION: forcing a failure.
[  379.659282][T10072] name fail_futex, interval 1, probability 0, space 0, times 0
[  379.706355][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.1.834 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  379.706387][T10072] Tainted: [L]=SOFTLOCKUP
[  379.706393][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  379.706404][T10072] Call Trace:
[  379.706410][T10072]  <TASK>
[  379.706417][T10072]  dump_stack_lvl+0x100/0x190
[  379.706449][T10072]  should_fail_ex.cold+0x5/0xa
[  379.706470][T10072]  get_futex_key+0x1d2/0x1620
[  379.706495][T10072]  ? __pfx_get_futex_key+0x10/0x10
[  379.706526][T10072]  futex_wake+0xea/0x530
[  379.706555][T10072]  ? __pfx_futex_wake+0x10/0x10
[  379.706584][T10072]  ? putname+0xb1/0x110
[  379.706600][T10072]  ? kmem_cache_free+0x124/0x6a0
[  379.706628][T10072]  do_futex+0x32b/0x350
[  379.706651][T10072]  ? __pfx_do_futex+0x10/0x10
[  379.706672][T10072]  ? __pfx_do_sys_openat2+0x10/0x10
[  379.706707][T10072]  ? __pfx_idempotent_init_module+0x10/0x10
[  379.706733][T10072]  __x64_sys_futex+0x34f/0x4d0
[  379.706758][T10072]  ? __x64_sys_openat+0x12d/0x210
[  379.706781][T10072]  ? __pfx___x64_sys_futex+0x10/0x10
[  379.706815][T10072]  do_syscall_64+0x106/0xf80
[  379.706834][T10072]  ? clear_bhb_loop+0x40/0x90
[  379.706857][T10072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.706876][T10072] RIP: 0033:0x7f81cab9c629
[  379.706891][T10072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.706908][T10072] RSP: 002b:00007f81cb9b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  379.706926][T10072] RAX: ffffffffffffffda RBX: 00007f81cae16098 RCX: 00007f81cab9c629
[  379.706938][T10072] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f81cae1609c
[  379.706949][T10072] RBP: 00007f81cae16090 R08: 0000000000000000 R09: 0000000000000000
[  379.706959][T10072] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  379.706970][T10072] R13: 00007f81cae16128 R14: 00007ffd430f4a50 R15: 00007ffd430f4b38
[  379.706993][T10072]  </TASK>
[  380.402664][T10070] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  380.409868][T10070] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  380.461746][T10070] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  380.495933][T10070] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  381.648881][ T9842] Bluetooth: hci0: command 0x0c1a tx timeout
[  382.451011][ T9757] Bluetooth: hci2: command 0x0c1a tx timeout
[  382.457559][ T9842] Bluetooth: hci1: command 0x0c1a tx timeout
[  382.530384][ T9842] Bluetooth: hci3: command 0x0c1a tx timeout
[  382.558323][T10127] zswap: compressor  not available
[  383.620223][T10156] netlink: 'syz.3.850': attribute type 1 has an invalid length.
[  383.721623][T10154] FAULT_INJECTION: forcing a failure.
[  383.721623][T10154] name failslab, interval 1, probability 0, space 0, times 0
[  383.861397][T10154] CPU: 0 UID: 0 PID: 10154 Comm: syz.0.848 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.861429][T10154] Tainted: [L]=SOFTLOCKUP
[  383.861435][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  383.861447][T10154] Call Trace:
[  383.861461][T10154]  <TASK>
[  383.861468][T10154]  dump_stack_lvl+0x100/0x190
[  383.861500][T10154]  should_fail_ex.cold+0x5/0xa
[  383.861523][T10154]  should_failslab+0xc2/0x120
[  383.861540][T10154]  __kmalloc_cache_noprof+0x7a/0x6f0
[  383.861563][T10154]  ? snd_virmidi_input_open+0xc8/0x4d0
[  383.861588][T10154]  ? __kasan_kmalloc+0xaa/0xb0
[  383.861618][T10154]  snd_virmidi_input_open+0xc8/0x4d0
[  383.861648][T10154]  open_substream+0x480/0x9e0
[  383.861679][T10154]  rawmidi_open_priv+0x524/0x6f0
[  383.861700][T10154]  snd_rawmidi_open+0x4c9/0xba0
[  383.861723][T10154]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  383.861743][T10154]  ? __pfx_default_wake_function+0x10/0x10
[  383.861763][T10154]  ? soundcore_open+0x231/0x5a0
[  383.861786][T10154]  ? soundcore_open+0x231/0x5a0
[  383.861812][T10154]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  383.861831][T10154]  soundcore_open+0x2e3/0x5a0
[  383.861857][T10154]  ? __pfx_soundcore_open+0x10/0x10
[  383.861880][T10154]  chrdev_open+0x234/0x6a0
[  383.861897][T10154]  ? __pfx_apparmor_file_open+0x10/0x10
[  383.861922][T10154]  ? __pfx_chrdev_open+0x10/0x10
[  383.861940][T10154]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  383.861976][T10154]  do_dentry_open+0x6d8/0x1660
[  383.862003][T10154]  ? __pfx_chrdev_open+0x10/0x10
[  383.862026][T10154]  vfs_open+0x82/0x3f0
[  383.862049][T10154]  path_openat+0x208c/0x31a0
[  383.862075][T10154]  ? __pfx_path_openat+0x10/0x10
[  383.862101][T10154]  do_file_open+0x20e/0x430
[  383.862120][T10154]  ? __pfx_do_file_open+0x10/0x10
[  383.862154][T10154]  ? alloc_fd+0x476/0x790
[  383.862184][T10154]  ? do_getname+0x191/0x390
[  383.862207][T10154]  do_sys_openat2+0x10d/0x1e0
[  383.862229][T10154]  ? __pfx_do_sys_openat2+0x10/0x10
[  383.862254][T10154]  ? __fget_files+0x21f/0x3d0
[  383.862290][T10154]  __x64_sys_openat+0x12d/0x210
[  383.862313][T10154]  ? __pfx___x64_sys_openat+0x10/0x10
[  383.862345][T10154]  do_syscall_64+0x106/0xf80
[  383.862365][T10154]  ? clear_bhb_loop+0x40/0x90
[  383.862387][T10154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.862406][T10154] RIP: 0033:0x7f3dea79c629
[  383.862422][T10154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.862439][T10154] RSP: 002b:00007f3deb5b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  383.862463][T10154] RAX: ffffffffffffffda RBX: 00007f3deaa16090 RCX: 00007f3dea79c629
[  383.862475][T10154] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  383.862486][T10154] RBP: 00007f3dea832b39 R08: 0000000000000000 R09: 0000000000000000
[  383.862497][T10154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.862507][T10154] R13: 00007f3deaa16128 R14: 00007f3deaa16090 R15: 00007ffd4361dc68
[  383.862530][T10154]  </TASK>
[  385.177083][T10186] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  385.274784][T10186] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  386.484692][T10193] netlink: zone id is out of range
[  386.484708][T10193] netlink: zone id is out of range
[  386.484717][T10193] netlink: zone id is out of range
[  386.484724][T10193] netlink: zone id is out of range
[  386.484731][T10193] netlink: zone id is out of range
[  386.484738][T10193] netlink: zone id is out of range
[  386.484745][T10193] netlink: zone id is out of range
[  386.484753][T10193] netlink: zone id is out of range
[  386.484760][T10193] netlink: zone id is out of range
[  386.484766][T10193] netlink: zone id is out of range
[  386.791004][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.791412][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.186758][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'.
[  387.994114][T10213] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  388.046208][T10213] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  388.146636][T10213] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  388.246852][T10213] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  390.053696][ T9842] Bluetooth: hci2: command 0x0c1a tx timeout
[  390.059869][ T9757] Bluetooth: hci0: command 0x0c1a tx timeout
[  390.215101][ T9842] Bluetooth: hci1: command 0x0c1a tx timeout
[  390.253176][T10248] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41
[  390.294028][ T9842] Bluetooth: hci3: command 0x0c1a tx timeout
[  390.430317][T10249] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input42
[  390.678884][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'.
[  390.698977][T10230] kexec: Could not allocate control_code_buffer
[  391.308028][T10266] netlink: 'syz.3.873': attribute type 11 has an invalid length.
[  391.353727][T10266] netlink: 'syz.3.873': attribute type 11 has an invalid length.
[  391.385021][T10266] netlink: 'syz.3.873': attribute type 11 has an invalid length.
[  391.421857][T10266] netlink: 'syz.3.873': attribute type 11 has an invalid length.
[  391.971007][T10287] pim6reg: entered allmulticast mode
[  392.575305][T10263] kexec: Could not allocate control_code_buffer
[  393.541786][T10314] syz.3.884 (10314) used greatest stack depth: 19672 bytes left
[  393.703389][T10310] kexec: Could not allocate control_code_buffer
[  393.951410][T10321] random: crng reseeded on system resumption
[  394.019663][T10330] FAULT_INJECTION: forcing a failure.
[  394.019663][T10330] name fail_futex, interval 1, probability 0, space 0, times 0
[  394.043558][ T9842] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  394.190942][T10330] CPU: 0 UID: 0 PID: 10330 Comm: syz.0.887 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  394.190975][T10330] Tainted: [L]=SOFTLOCKUP
[  394.190982][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  394.190993][T10330] Call Trace:
[  394.190999][T10330]  <TASK>
[  394.191006][T10330]  dump_stack_lvl+0x100/0x190
[  394.191038][T10330]  should_fail_ex.cold+0x5/0xa
[  394.191059][T10330]  get_futex_key+0x1d2/0x1620
[  394.191085][T10330]  ? __pfx_get_futex_key+0x10/0x10
[  394.191109][T10330]  ? lock_acquire+0x1cf/0x380
[  394.191136][T10330]  futex_wake+0xea/0x530
[  394.191165][T10330]  ? __pfx_futex_wake+0x10/0x10
[  394.191192][T10330]  ? fdget_pos+0x2aa/0x380
[  394.191210][T10330]  ? ksys_write+0x190/0x250
[  394.191236][T10330]  ? ksys_write+0x190/0x250
[  394.191267][T10330]  do_futex+0x32b/0x350
[  394.191290][T10330]  ? __pfx_do_futex+0x10/0x10
[  394.191320][T10330]  __x64_sys_futex+0x34f/0x4d0
[  394.191344][T10330]  ? fput+0x79/0x100
[  394.191362][T10330]  ? __pfx___x64_sys_futex+0x10/0x10
[  394.191384][T10330]  ? ksys_write+0x1ac/0x250
[  394.191411][T10330]  ? __pfx_ksys_write+0x10/0x10
[  394.191444][T10330]  do_syscall_64+0x106/0xf80
[  394.191464][T10330]  ? clear_bhb_loop+0x40/0x90
[  394.191486][T10330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.191504][T10330] RIP: 0033:0x7f3dea79c629
[  394.191520][T10330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.191537][T10330] RSP: 002b:00007f3deb5d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  394.191556][T10330] RAX: ffffffffffffffda RBX: 00007f3deaa15fa8 RCX: 00007f3dea79c629
[  394.191567][T10330] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3deaa15fac
[  394.191578][T10330] RBP: 00007f3deaa15fa0 R08: 0000000000000000 R09: 0000000000000000
[  394.191589][T10330] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  394.191599][T10330] R13: 00007f3deaa16038 R14: 00007ffd4361db80 R15: 00007ffd4361dc68
[  394.191622][T10330]  </TASK>
[  402.913540][T10478] FAULT_INJECTION: forcing a failure.
[  402.913540][T10478] name fail_futex, interval 1, probability 0, space 0, times 0
[  402.989456][T10478] CPU: 0 UID: 0 PID: 10478 Comm: syz.2.916 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.989489][T10478] Tainted: [L]=SOFTLOCKUP
[  402.989495][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  402.989506][T10478] Call Trace:
[  402.989512][T10478]  <TASK>
[  402.989519][T10478]  dump_stack_lvl+0x100/0x190
[  402.989552][T10478]  should_fail_ex.cold+0x5/0xa
[  402.989573][T10478]  get_futex_key+0x295/0x1620
[  402.989600][T10478]  ? __pfx_get_futex_key+0x10/0x10
[  402.989620][T10478]  ? lock_acquire+0x1cf/0x380
[  402.989650][T10478]  futex_wake+0xea/0x530
[  402.989680][T10478]  ? __pfx_futex_wake+0x10/0x10
[  402.989707][T10478]  ? exit_mm_release+0x19/0x30
[  402.989735][T10478]  do_futex+0x32b/0x350
[  402.989759][T10478]  ? __pfx_do_futex+0x10/0x10
[  402.989781][T10478]  ? __might_fault+0xc5/0x140
[  402.989812][T10478]  mm_release+0x24a/0x2f0
[  402.989830][T10478]  do_exit+0x675/0x2aa0
[  402.989857][T10478]  ? __pfx_do_exit+0x10/0x10
[  402.989880][T10478]  ? do_raw_spin_lock+0x128/0x260
[  402.989906][T10478]  ? find_held_lock+0x2b/0x80
[  402.989922][T10478]  ? get_signal+0x7e0/0x21e0
[  402.989943][T10478]  do_group_exit+0xd5/0x2a0
[  402.989968][T10478]  get_signal+0x1ec7/0x21e0
[  402.989995][T10478]  ? __pfx_get_signal+0x10/0x10
[  402.990015][T10478]  ? do_futex+0x192/0x350
[  402.990041][T10478]  arch_do_signal_or_restart+0x91/0x770
[  402.990065][T10478]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  402.990093][T10478]  ? __pfx___x64_sys_futex+0x10/0x10
[  402.990117][T10478]  ? ksys_write+0x1ac/0x250
[  402.990154][T10478]  exit_to_user_mode_loop+0x86/0x4a0
[  402.990180][T10478]  do_syscall_64+0x668/0xf80
[  402.990200][T10478]  ? clear_bhb_loop+0x40/0x90
[  402.990222][T10478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.990241][T10478] RIP: 0033:0x7fc4fad9c629
[  402.990256][T10478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.990273][T10478] RSP: 002b:00007fc4fbb910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  402.990292][T10478] RAX: fffffffffffffe00 RBX: 00007fc4fb016098 RCX: 00007fc4fad9c629
[  402.990304][T10478] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc4fb016098
[  402.990315][T10478] RBP: 00007fc4fb016090 R08: 0000000000000000 R09: 0000000000000000
[  402.990325][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.990336][T10478] R13: 00007fc4fb016128 R14: 00007ffe4cc20bd0 R15: 00007ffe4cc20cb8
[  402.990359][T10478]  </TASK>
[  403.252071][T10467] kexec: Could not allocate control_code_buffer
[  404.833560][T10500] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44
[  405.474818][T10521] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  405.598025][T10509] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45
[  405.611458][T10521] ptp ptp0: new virtual clock ptp1
[  405.660910][T10521] ptp ptp0: new virtual clock ptp2
[  405.712168][T10521] ptp ptp0: new virtual clock ptp3
[  405.726406][T10521] ptp ptp0: guarantee physical clock free running
[  406.203114][T10535] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input46
[  407.565361][T10541] kexec: Could not allocate control_code_buffer
[  407.917313][T10559] zswap: compressor  not available
[  408.864279][T10572] zswap: compressor � not available
[  411.026606][T10614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.940'.
[  411.716784][T10625] kexec: Could not allocate control_code_buffer
[  412.274817][T10662] vmstat_refresh: nr_hugetlb -2560
[  412.281162][T10643] bridge0: port 3(gretap0) entered blocking state
[  412.407335][T10643] bridge0: port 3(gretap0) entered disabled state
[  412.542303][T10643] gretap0: entered allmulticast mode
[  412.635099][T10643] FAULT_INJECTION: forcing a failure.
[  412.635099][T10643] name failslab, interval 1, probability 0, space 0, times 0
[  412.829755][T10643] CPU: 0 UID: 0 PID: 10643 Comm: syz.0.944 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  412.829788][T10643] Tainted: [L]=SOFTLOCKUP
[  412.829796][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  412.829806][T10643] Call Trace:
[  412.829813][T10643]  <TASK>
[  412.829820][T10643]  dump_stack_lvl+0x100/0x190
[  412.829853][T10643]  should_fail_ex.cold+0x5/0xa
[  412.829875][T10643]  should_failslab+0xc2/0x120
[  412.829893][T10643]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  412.829920][T10643]  ? __kernfs_new_node+0xd2/0x960
[  412.829949][T10643]  __kernfs_new_node+0xd2/0x960
[  412.829975][T10643]  ? __pfx___kernfs_new_node+0x10/0x10
[  412.830006][T10643]  ? find_held_lock+0x2b/0x80
[  412.830022][T10643]  ? kernfs_root+0xee/0x2a0
[  412.830044][T10643]  ? kernfs_root+0xee/0x2a0
[  412.830072][T10643]  kernfs_new_node+0x11b/0x1a0
[  412.830103][T10643]  __kernfs_create_file+0x53/0x350
[  412.830124][T10643]  sysfs_add_file_mode_ns+0x207/0x3c0
[  412.830153][T10643]  sysfs_create_file_ns+0x145/0x1e0
[  412.830177][T10643]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  412.830199][T10643]  ? kernfs_create_link+0x1bd/0x240
[  412.830219][T10643]  ? kernfs_put+0x3f/0x60
[  412.830248][T10643]  ? sysfs_do_create_link_sd+0xbb/0x140
[  412.830276][T10643]  br_sysfs_addif+0xe4/0x210
[  412.830299][T10643]  br_add_if+0x701/0x1b40
[  412.830318][T10643]  ? security_capable+0x80/0x260
[  412.830344][T10643]  add_del_if+0x114/0x160
[  412.830364][T10643]  br_dev_siocdevprivate+0x8ac/0x1650
[  412.830394][T10643]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  412.830423][T10643]  ? lock_acquire+0x1cf/0x380
[  412.830454][T10643]  ? netdev_name_node_lookup+0x107/0x150
[  412.830483][T10643]  ? __mutex_lock+0x26a/0x1b90
[  412.830507][T10643]  dev_ifsioc+0xc1e/0x1e90
[  412.830529][T10643]  ? __pfx_dev_ifsioc+0x10/0x10
[  412.830545][T10643]  ? __pfx___mutex_lock+0x10/0x10
[  412.830573][T10643]  ? dev_load+0x8e/0x240
[  412.830588][T10643]  ? dev_load+0x8e/0x240
[  412.830609][T10643]  dev_ioctl+0x70e/0x1070
[  412.830630][T10643]  sock_ioctl+0x494/0x6b0
[  412.830657][T10643]  ? __pfx_sock_ioctl+0x10/0x10
[  412.830681][T10643]  ? hook_file_ioctl_common+0x146/0x410
[  412.830714][T10643]  ? __fget_files+0x21f/0x3d0
[  412.830744][T10643]  ? __pfx_sock_ioctl+0x10/0x10
[  412.830771][T10643]  __x64_sys_ioctl+0x18e/0x210
[  412.830798][T10643]  do_syscall_64+0x106/0xf80
[  412.830817][T10643]  ? clear_bhb_loop+0x40/0x90
[  412.830839][T10643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.830858][T10643] RIP: 0033:0x7f3dea79c629
[  412.830874][T10643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.830891][T10643] RSP: 002b:00007f3deb5d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  412.830909][T10643] RAX: ffffffffffffffda RBX: 00007f3deaa15fa0 RCX: 00007f3dea79c629
[  412.830921][T10643] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000009
[  412.830931][T10643] RBP: 00007f3dea832b39 R08: 0000000000000000 R09: 0000000000000000
[  412.830942][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.830952][T10643] R13: 00007f3deaa16038 R14: 00007f3deaa15fa0 R15: 00007ffd4361dc68
[  412.830975][T10643]  </TASK>
[  412.833060][T10643] gretap0: left allmulticast mode
[  414.236873][T10696] FAULT_INJECTION: forcing a failure.
[  414.236873][T10696] name fail_futex, interval 1, probability 0, space 0, times 0
[  414.328291][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'.
[  414.363802][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.0.952 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.363835][T10696] Tainted: [L]=SOFTLOCKUP
[  414.363841][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  414.363853][T10696] Call Trace:
[  414.363859][T10696]  <TASK>
[  414.363866][T10696]  dump_stack_lvl+0x100/0x190
[  414.363897][T10696]  should_fail_ex.cold+0x5/0xa
[  414.363918][T10696]  get_futex_key+0x1d2/0x1620
[  414.363944][T10696]  ? __pfx_get_futex_key+0x10/0x10
[  414.363974][T10696]  futex_wake+0xea/0x530
[  414.364003][T10696]  ? __pfx_futex_wake+0x10/0x10
[  414.364033][T10696]  ? putname+0xb1/0x110
[  414.364048][T10696]  ? kmem_cache_free+0x124/0x6a0
[  414.364076][T10696]  do_futex+0x32b/0x350
[  414.364100][T10696]  ? __pfx_do_futex+0x10/0x10
[  414.364121][T10696]  ? __pfx_do_sys_openat2+0x10/0x10
[  414.364145][T10696]  ? __pfx_idempotent_init_module+0x10/0x10
[  414.364171][T10696]  __x64_sys_futex+0x34f/0x4d0
[  414.364195][T10696]  ? __x64_sys_openat+0x12d/0x210
[  414.364217][T10696]  ? __pfx___x64_sys_futex+0x10/0x10
[  414.364250][T10696]  do_syscall_64+0x106/0xf80
[  414.364269][T10696]  ? clear_bhb_loop+0x40/0x90
[  414.364290][T10696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.364309][T10696] RIP: 0033:0x7f3dea79c629
[  414.364325][T10696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.364342][T10696] RSP: 002b:00007f3deb5b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  414.364360][T10696] RAX: ffffffffffffffda RBX: 00007f3deaa16098 RCX: 00007f3dea79c629
[  414.364371][T10696] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3deaa1609c
[  414.364382][T10696] RBP: 00007f3deaa16090 R08: 0000000000000000 R09: 0000000000000000
[  414.364392][T10696] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  414.364402][T10696] R13: 00007f3deaa16128 R14: 00007ffd4361db80 R15: 00007ffd4361dc68
[  414.364425][T10696]  </TASK>
[  415.042335][T10693] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  415.091165][T10693] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  415.212695][T10693] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  415.237691][T10693] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  415.820289][T10720] kexec: Could not allocate control_code_buffer
[  416.616407][ T9842] Bluetooth: hci0: command 0x0c1a tx timeout
[  416.909159][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.962'.
[  417.097653][ T9842] Bluetooth: hci2: command 0x0c1a tx timeout
[  417.265694][ T9842] Bluetooth: hci3: command 0x0c1a tx timeout
[  417.271848][ T9757] Bluetooth: hci1: command 0x0c1a tx timeout
[  417.374225][T10761] Invalid ELF header magic: != ELF
[  420.505499][T10843] netlink: 342 bytes leftover after parsing attributes in process `syz.3.972'.
[  420.787823][   T30] audit: type=1800 audit(1771873233.072:22): pid=10848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.973" name="dummy_udc" dev="gadgetfs" ino=6556 res=0 errno=0
[  422.098772][T10871] usb usb36: usbfs: process 10871 (syz.1.977) did not claim interface 0 before use
[  425.176510][ T9757] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  426.939265][T10941] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  429.621768][T10966] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  429.658599][T10966] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  429.686581][T10966] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  429.699096][T10966] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  429.963358][T10980] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1003'.
[  430.523624][T10999] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  430.685403][T11000] FAULT_INJECTION: forcing a failure.
[  430.685403][T11000] name failslab, interval 1, probability 0, space 0, times 0
[  430.798718][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.0.1006 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  430.798751][T11000] Tainted: [L]=SOFTLOCKUP
[  430.798758][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  430.798769][T11000] Call Trace:
[  430.798775][T11000]  <TASK>
[  430.798783][T11000]  dump_stack_lvl+0x100/0x190
[  430.798813][T11000]  should_fail_ex.cold+0x5/0xa
[  430.798835][T11000]  should_failslab+0xc2/0x120
[  430.798854][T11000]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  430.798880][T11000]  ? __d_alloc+0x34/0xa80
[  430.798904][T11000]  __d_alloc+0x34/0xa80
[  430.798925][T11000]  d_alloc+0x4a/0x1e0
[  430.798944][T11000]  lookup_one_qstr_excl+0x175/0x250
[  430.798968][T11000]  start_dirop+0x59/0xb0
[  430.798996][T11000]  simple_start_creating+0xf9/0x110
[  430.799024][T11000]  ? __pfx_simple_start_creating+0x10/0x10
[  430.799052][T11000]  ? mntput+0x70/0xa0
[  430.799077][T11000]  ? simple_pin_fs+0xa3/0x190
[  430.799102][T11000]  debugfs_start_creating.part.0+0x82/0x170
[  430.799131][T11000]  __debugfs_create_file+0xb3/0x4f0
[  430.799160][T11000]  debugfs_create_file_full+0x41/0x60
[  430.799190][T11000]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  430.799209][T11000]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  430.799232][T11000]  ? find_held_lock+0x2b/0x80
[  430.799269][T11000]  ? lockdep_init_map_type+0x5c/0x250
[  430.799297][T11000]  preinit_net.part.0+0x437/0x8f0
[  430.799321][T11000]  copy_net_ns+0x339/0x7c0
[  430.799346][T11000]  create_new_namespaces+0x3ea/0xac0
[  430.799371][T11000]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  430.799392][T11000]  ksys_unshare+0x455/0xab0
[  430.799417][T11000]  ? __pfx_ksys_unshare+0x10/0x10
[  430.799448][T11000]  __x64_sys_unshare+0x31/0x40
[  430.799471][T11000]  do_syscall_64+0x106/0xf80
[  430.799490][T11000]  ? clear_bhb_loop+0x40/0x90
[  430.799513][T11000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.799531][T11000] RIP: 0033:0x7f3dea79c629
[  430.799546][T11000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.799564][T11000] RSP: 002b:00007f3deb58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  430.799588][T11000] RAX: ffffffffffffffda RBX: 00007f3deaa16180 RCX: 00007f3dea79c629
[  430.799602][T11000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  430.799613][T11000] RBP: 00007f3dea832b39 R08: 0000000000000000 R09: 0000000000000000
[  430.799623][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.799634][T11000] R13: 00007f3deaa16218 R14: 00007f3deaa16180 R15: 00007ffd4361dc68
[  430.799657][T11000]  </TASK>
[  431.483536][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'.
[  431.494524][ T9757] Bluetooth: hci0: command 0x0c1a tx timeout
[  431.667128][T11014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'.
[  431.741162][T11006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.768178][ T9842] Bluetooth: hci3: command 0x0c1a tx timeout
[  431.774269][ T9842] Bluetooth: hci1: command 0x0c1a tx timeout
[  431.782438][ T9842] Bluetooth: hci2: command 0x0c1a tx timeout
[  432.057212][T11006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  432.130637][T11006] bond0 (unregistering): Released all slaves
[  433.816572][ T9757] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  436.707537][ T9787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  436.717627][ T9787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  436.725774][ T9787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  436.734744][ T9787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  436.749011][ T9787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  438.408489][T11047] chnl_net:caif_netlink_parms(): no params data found
[  438.753100][T11047] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.780313][ T9757] Bluetooth: hci4: command tx timeout
[  438.797131][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'.
[  438.816592][T11047] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.823772][T11047] bridge_slave_0: entered allmulticast mode
[  438.871533][T11047] bridge_slave_0: entered promiscuous mode
[  438.908472][T11047] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.948610][T11047] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.955881][T11047] bridge_slave_1: entered allmulticast mode
[  438.997753][T11047] bridge_slave_1: entered promiscuous mode
[  439.164556][T11047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.214953][T11047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.333160][T11047] team0: Port device team_slave_0 added
[  439.373089][T11047] team0: Port device team_slave_1 added
[  439.420866][T11073] netlink: 'syz.3.1019': attribute type 23 has an invalid length.
[  439.478817][T11047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.485808][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.626481][T11047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.686546][T11047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.716427][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  439.834388][T11047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.381174][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  440.388331][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.862805][ T9757] Bluetooth: hci4: command tx timeout
[  442.944684][ T9757] Bluetooth: hci4: command tx timeout
[  444.907711][T11047] hsr_slave_0: entered promiscuous mode
[  444.937741][T11047] hsr_slave_1: entered promiscuous mode
[  444.968690][T11047] debugfs: 'hsr0' already exists in 'hsr'
[  444.974514][T11047] Cannot create hsr debugfs directory
[  445.021904][ T9757] Bluetooth: hci4: command tx timeout
[  445.847833][ T9787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  445.859747][ T9787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  445.874158][ T9787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  445.882211][ T9787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  445.891875][ T9787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  446.243392][T11047] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  446.348889][T11047] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  446.384461][T11047] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  446.569250][T11047] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  446.911584][T11101] misc userio: Invalid payload size
[  447.143830][T11047] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.222883][T11093] chnl_net:caif_netlink_parms(): no params data found
[  447.319574][T11047] 8021q: adding VLAN 0 to HW filter on device team0
[  447.468011][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.475172][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.551135][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.558312][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.766432][T11047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  447.977070][ T9787] Bluetooth: hci0: command tx timeout
[  448.044369][T11093] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.128041][T11093] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.168138][T11093] bridge_slave_0: entered allmulticast mode
[  448.247315][T11093] bridge_slave_0: entered promiscuous mode
[  448.298076][T11093] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.357396][T11093] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.364871][T11093] bridge_slave_1: entered allmulticast mode
[  448.467557][T11093] bridge_slave_1: entered promiscuous mode
[  448.668368][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.749963][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.056475][ T9787] Bluetooth: hci0: command tx timeout
[  450.163199][T11146] zswap: compressor � not available
[  450.206480][T11150] block2mtd: illegal erase size
[  450.383112][T11141] kexec: Could not allocate control_code_buffer
[  451.041466][T11047] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.144326][T11093] team0: Port device team_slave_0 added
[  451.191610][T11093] team0: Port device team_slave_1 added
[  451.330008][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.378524][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.495905][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.548090][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.579536][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.680601][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.983788][T11093] hsr_slave_0: entered promiscuous mode
[  452.027180][T11093] hsr_slave_1: entered promiscuous mode
[  452.033486][T11093] debugfs: 'hsr0' already exists in 'hsr'
[  452.068496][T11093] Cannot create hsr debugfs directory
[  452.137159][ T9787] Bluetooth: hci0: command tx timeout
[  454.218886][ T9787] Bluetooth: hci0: command tx timeout
[  456.033121][T11177] netlink: 'syz.1.1034': attribute type 38 has an invalid length.
[  456.106732][T11178] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[11178]
[  456.226051][T11047] veth0_vlan: entered promiscuous mode
[  456.323836][T11047] veth1_vlan: entered promiscuous mode
[  456.516498][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'.
[  456.639584][T11180] FAULT_INJECTION: forcing a failure.
[  456.639584][T11180] name failslab, interval 1, probability 0, space 0, times 0
[  456.774318][T11047] veth0_macvtap: entered promiscuous mode
[  456.781871][T11180] CPU: 0 UID: 0 PID: 11180 Comm: syz.3.1035 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  456.781903][T11180] Tainted: [L]=SOFTLOCKUP
[  456.781910][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  456.781921][T11180] Call Trace:
[  456.781928][T11180]  <TASK>
[  456.781935][T11180]  dump_stack_lvl+0x100/0x190
[  456.781967][T11180]  should_fail_ex.cold+0x5/0xa
[  456.781988][T11180]  ? security_inode_init_security+0x113/0x370
[  456.782010][T11180]  should_failslab+0xc2/0x120
[  456.782028][T11180]  __kmalloc_noprof+0xe0/0x850
[  456.782066][T11180]  security_inode_init_security+0x113/0x370
[  456.782090][T11180]  ? __pfx_shmem_initxattrs+0x10/0x10
[  456.782110][T11180]  ? __pfx_security_inode_init_security+0x10/0x10
[  456.782133][T11180]  ? __pfx_make_vfsuid+0x10/0x10
[  456.782159][T11180]  shmem_symlink+0x15f/0xa00
[  456.782187][T11180]  ? generic_permission+0xae/0x800
[  456.782210][T11180]  ? __pfx_shmem_symlink+0x10/0x10
[  456.782235][T11180]  ? security_inode_permission+0xbf/0x250
[  456.782263][T11180]  ? inode_permission+0x374/0x620
[  456.782284][T11180]  ? tomoyo_path_symlink+0x97/0xe0
[  456.782311][T11180]  vfs_symlink+0x178/0x4d0
[  456.782347][T11180]  filename_symlinkat+0x2a6/0x560
[  456.782370][T11180]  ? __pfx_filename_symlinkat+0x10/0x10
[  456.782391][T11180]  ? strncpy_from_user+0x19d/0x2d0
[  456.782421][T11180]  ? do_getname+0x191/0x390
[  456.782445][T11180]  __x64_sys_symlink+0x79/0xb0
[  456.782465][T11180]  do_syscall_64+0x106/0xf80
[  456.782484][T11180]  ? clear_bhb_loop+0x40/0x90
[  456.782506][T11180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.782525][T11180] RIP: 0033:0x7f7b3099c629
[  456.782540][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.782558][T11180] RSP: 002b:00007f7b31777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  456.782576][T11180] RAX: ffffffffffffffda RBX: 00007f7b30c15fa0 RCX: 00007f7b3099c629
[  456.782588][T11180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  456.782598][T11180] RBP: 00007f7b30a32b39 R08: 0000000000000000 R09: 0000000000000000
[  456.782609][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.782619][T11180] R13: 00007f7b30c16038 R14: 00007f7b30c15fa0 R15: 00007ffe49e5e5f8
[  456.782644][T11180]  </TASK>
[  457.340816][T11047] veth1_macvtap: entered promiscuous mode
[  457.484276][T11047] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.509355][T11047] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.532664][T11093] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  457.752595][ T9764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.775083][ T9764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.847087][T11093] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  457.894212][ T9764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.963416][ T9764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.003235][T11093] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  458.082964][T11093] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  458.150726][   T30] audit: type=1800 audit(1771873270.432:23): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1036" name="lu_gp_id" dev="configfs" ino=46218 res=0 errno=0
[  458.179468][T11193] Invalid ELF header magic: != ELF
[  458.252004][ T9739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.301334][ T9739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.407184][ T9739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.450691][ T9739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.885445][T11093] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.007451][T11093] 8021q: adding VLAN 0 to HW filter on device team0
[  459.082295][ T9737] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.089573][ T9737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.191100][ T9737] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.198286][ T9737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.257457][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  461.859591][T11093] veth0_vlan: entered promiscuous mode
[  461.954630][T11093] veth1_vlan: entered promiscuous mode
[  462.309331][T11235] kexec: Could not allocate control_code_buffer
[  462.643027][T11093] veth0_macvtap: entered promiscuous mode
[  462.683212][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1046'.
[  462.725169][T11093] veth1_macvtap: entered promiscuous mode
[  462.918360][T11093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.991981][T11093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.129039][ T9764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.172911][ T9764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.227209][ T9764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.274855][ T9764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.586729][ T9764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.646358][ T9764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.787118][ T9737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.841410][ T9737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.602068][T11300] bond0: no command found in slaves file - use +ifname or -ifname
[  465.956450][T11287] can: request_module (can-proto-3) failed.
[  466.006202][T11328] FAULT_INJECTION: forcing a failure.
[  466.006202][T11328] name fail_futex, interval 1, probability 0, space 0, times 0
[  466.098573][T11328] CPU: 0 UID: 0 PID: 11328 Comm: syz.1.1060 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.098606][T11328] Tainted: [L]=SOFTLOCKUP
[  466.098612][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  466.098622][T11328] Call Trace:
[  466.098629][T11328]  <TASK>
[  466.098636][T11328]  dump_stack_lvl+0x100/0x190
[  466.098668][T11328]  should_fail_ex.cold+0x5/0xa
[  466.098689][T11328]  get_futex_key+0x1d2/0x1620
[  466.098715][T11328]  ? __pfx_get_futex_key+0x10/0x10
[  466.098745][T11328]  futex_wake+0xea/0x530
[  466.098774][T11328]  ? __pfx_futex_wake+0x10/0x10
[  466.098804][T11328]  ? putname+0xb1/0x110
[  466.098821][T11328]  ? kmem_cache_free+0x124/0x6a0
[  466.098849][T11328]  do_futex+0x32b/0x350
[  466.098872][T11328]  ? __pfx_do_futex+0x10/0x10
[  466.098895][T11328]  ? __pfx_do_sys_openat2+0x10/0x10
[  466.098918][T11328]  ? __pfx_idempotent_init_module+0x10/0x10
[  466.098944][T11328]  __x64_sys_futex+0x34f/0x4d0
[  466.098969][T11328]  ? __x64_sys_openat+0x12d/0x210
[  466.098991][T11328]  ? __pfx___x64_sys_futex+0x10/0x10
[  466.099024][T11328]  do_syscall_64+0x106/0xf80
[  466.099043][T11328]  ? clear_bhb_loop+0x40/0x90
[  466.099065][T11328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.099083][T11328] RIP: 0033:0x7f81cab9c629
[  466.099098][T11328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.099115][T11328] RSP: 002b:00007f81cb9b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  466.099134][T11328] RAX: ffffffffffffffda RBX: 00007f81cae16098 RCX: 00007f81cab9c629
[  466.099145][T11328] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f81cae1609c
[  466.099156][T11328] RBP: 00007f81cae16090 R08: 0000000000000000 R09: 0000000000000000
[  466.099166][T11328] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  466.099176][T11328] R13: 00007f81cae16128 R14: 00007ffd430f4a50 R15: 00007ffd430f4b38
[  466.099199][T11328]  </TASK>
[  467.066476][T11332] zswap: compressor  not available
[  467.171098][T11324] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  467.179481][T11324] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  467.185620][T11324] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  467.196716][T11324] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  467.217198][T11324] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  468.108719][T11324] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  468.130091][T11324] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  468.152981][T11324] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  468.195380][T11324] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  469.028023][T11350] zswap: compressor  not available
[  469.258539][ T9787] Bluetooth: hci3: command 0x0c1a tx timeout
[  469.264874][ T9842] Bluetooth: hci1: command 0x0c1a tx timeout
[  469.271489][ T9842] Bluetooth: hci2: command 0x0c1a tx timeout
[  469.277708][ T9757] Bluetooth: hci4: command 0x0c1a tx timeout
[  469.630512][T11387] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  470.216783][T11373] Bluetooth: hci0: command 0x0c1a tx timeout
[  471.336905][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  472.309836][T11373] Bluetooth: hci0: command 0x0c1a tx timeout
[  472.933451][T11409] Setting dangerous option i915.mitigations - tainting kernel
[  472.990541][T11409] Bad "i915.mitigations=���CmâUQ�F\��	", '���CmâUQ�F\��' is unknown
[  473.242819][T11413] netlink: 'syz.5.1078': attribute type 4 has an invalid length.
[  473.259708][T11404] KVM: debugfs: duplicate directory 11404-3
[  473.343003][T11404] KVM: debugfs: duplicate directory 11404-5
[  473.379003][T11404] KVM: debugfs: duplicate directory 11404-6
[  473.417312][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  473.448077][T11404] KVM: debugfs: duplicate directory 11404-7
[  473.508212][T11404] KVM: debugfs: duplicate directory 11404-8
[  473.546174][T11404] KVM: debugfs: duplicate directory 11404-9
[  473.581968][T11404] KVM: debugfs: duplicate directory 11404-10
[  473.637683][T11404] KVM: debugfs: duplicate directory 11404-11
[  473.644681][T11404] KVM: debugfs: duplicate directory 11404-12
[  473.740446][T11404] KVM: debugfs: duplicate directory 11404-13
[  473.845921][T11425] FAULT_INJECTION: forcing a failure.
[  473.845921][T11425] name failslab, interval 1, probability 0, space 0, times 0
[  474.024407][T11425] CPU: 0 UID: 0 PID: 11425 Comm: syz.5.1080 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  474.024442][T11425] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  474.024449][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  474.024461][T11425] Call Trace:
[  474.024467][T11425]  <TASK>
[  474.024475][T11425]  dump_stack_lvl+0x100/0x190
[  474.024512][T11425]  should_fail_ex.cold+0x5/0xa
[  474.024534][T11425]  should_failslab+0xc2/0x120
[  474.024552][T11425]  __kmalloc_cache_noprof+0x7a/0x6f0
[  474.024575][T11425]  ? vidtv_psi_pat_program_init+0x4d/0x1f0
[  474.024605][T11425]  ? kstrdup+0xb3/0xe0
[  474.024634][T11425]  vidtv_psi_pat_program_init+0x4d/0x1f0
[  474.024667][T11425]  vidtv_channel_s302m_init+0x28c/0x9b0
[  474.024689][T11425]  ? trace_kmalloc+0x101/0x130
[  474.024706][T11425]  ? __pfx_vidtv_channel_s302m_init+0x10/0x10
[  474.024733][T11425]  ? __asan_memcpy+0x3c/0x60
[  474.024758][T11425]  vidtv_channels_init+0x4c/0xb0
[  474.024778][T11425]  vidtv_mux_init+0x9df/0xbf0
[  474.024802][T11425]  vidtv_start_feed+0x33e/0x4c0
[  474.024829][T11425]  ? __pfx_vidtv_start_feed+0x10/0x10
[  474.024856][T11425]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  474.024888][T11425]  ? mark_held_locks+0x40/0x70
[  474.024915][T11425]  ? __pfx_vidtv_start_feed+0x10/0x10
[  474.024941][T11425]  dmx_ts_feed_start_filtering+0xf6/0x220
[  474.024973][T11425]  dvb_dmxdev_start_feed+0x273/0x3f0
[  474.025001][T11425]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  474.025030][T11425]  ? dvb_dmxdev_add_pid+0x2a1/0x380
[  474.025058][T11425]  dvb_demux_do_ioctl+0xe64/0x1200
[  474.025091][T11425]  dvb_usercopy+0x167/0x340
[  474.025114][T11425]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  474.025141][T11425]  ? __pfx_dvb_usercopy+0x10/0x10
[  474.025173][T11425]  ? __fget_files+0x21f/0x3d0
[  474.025205][T11425]  dvb_demux_ioctl+0x29/0x40
[  474.025227][T11425]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  474.025258][T11425]  __x64_sys_ioctl+0x18e/0x210
[  474.025284][T11425]  do_syscall_64+0x106/0xf80
[  474.025304][T11425]  ? clear_bhb_loop+0x40/0x90
[  474.025327][T11425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.025347][T11425] RIP: 0033:0x7f3b7eb9c629
[  474.025363][T11425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.025381][T11425] RSP: 002b:00007f3b7f9fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  474.025399][T11425] RAX: ffffffffffffffda RBX: 00007f3b7ee16090 RCX: 00007f3b7eb9c629
[  474.025415][T11425] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000008
[  474.025426][T11425] RBP: 00007f3b7ec32b39 R08: 0000000000000000 R09: 0000000000000000
[  474.025436][T11425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.025447][T11425] R13: 00007f3b7ee16128 R14: 00007f3b7ee16090 R15: 00007fff7c8ee148
[  474.025472][T11425]  </TASK>
[  474.680084][T11373] Bluetooth: hci0: command 0x0c1a tx timeout
[  476.652946][T11442] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint).
[  477.927426][T11458] random: crng reseeded on system resumption
[  478.150689][T11465] usbip-vudc usbip-vudc.0: gadget not bound
[  478.477183][T11471] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  479.353713][T11487] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  479.378686][T11486] FAULT_INJECTION: forcing a failure.
[  479.378686][T11486] name fail_futex, interval 1, probability 0, space 0, times 0
[  479.489406][T11486] CPU: 0 UID: 0 PID: 11486 Comm: syz.5.1092 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  479.489441][T11486] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  479.489447][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  479.489458][T11486] Call Trace:
[  479.489464][T11486]  <TASK>
[  479.489471][T11486]  dump_stack_lvl+0x100/0x190
[  479.489503][T11486]  should_fail_ex.cold+0x5/0xa
[  479.489524][T11486]  get_futex_key+0x1d2/0x1620
[  479.489549][T11486]  ? __pfx_get_futex_key+0x10/0x10
[  479.489578][T11486]  futex_wake+0xea/0x530
[  479.489607][T11486]  ? __pfx_futex_wake+0x10/0x10
[  479.489636][T11486]  ? putname+0xb1/0x110
[  479.489653][T11486]  ? kmem_cache_free+0x124/0x6a0
[  479.489682][T11486]  do_futex+0x32b/0x350
[  479.489705][T11486]  ? __pfx_do_futex+0x10/0x10
[  479.489727][T11486]  ? __pfx_do_sys_openat2+0x10/0x10
[  479.489750][T11486]  ? __x64_sys_close_range+0x2d9/0x5d0
[  479.489771][T11486]  __x64_sys_futex+0x34f/0x4d0
[  479.489795][T11486]  ? __x64_sys_openat+0x12d/0x210
[  479.489817][T11486]  ? __pfx___x64_sys_futex+0x10/0x10
[  479.489849][T11486]  do_syscall_64+0x106/0xf80
[  479.489869][T11486]  ? clear_bhb_loop+0x40/0x90
[  479.489891][T11486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.489910][T11486] RIP: 0033:0x7f3b7eb9c629
[  479.489925][T11486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.489942][T11486] RSP: 002b:00007f3b7f9fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  479.489960][T11486] RAX: ffffffffffffffda RBX: 00007f3b7ee16098 RCX: 00007f3b7eb9c629
[  479.489971][T11486] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b7ee1609c
[  479.489982][T11486] RBP: 00007f3b7ee16090 R08: 0000000000000000 R09: 0000000000000000
[  479.489993][T11486] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  479.490003][T11486] R13: 00007f3b7ee16128 R14: 00007fff7c8ee060 R15: 00007fff7c8ee148
[  479.490026][T11486]  </TASK>
[  480.076973][T11485] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  480.120940][T11485] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  480.162988][T11485] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  480.196534][T11485] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  480.208755][T11485] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  480.261651][T11496] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input48
[  480.286059][T11498] netlink: 472 bytes leftover after parsing attributes in process `syz.1.1094'.
[  481.014147][T11511] bcache: register_bcache() error : failed to open device
[  481.260979][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1097'.
[  481.346759][T11518] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  481.495591][T11516] bridge_slave_1: left allmulticast mode
[  481.501819][ T9738] Bluetooth: hci2: command 0x0c1a tx timeout
[  481.530196][T11516] bridge_slave_1: left promiscuous mode
[  481.589018][T11516] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.625494][ T9738] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  481.664815][T11524] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  481.682992][T11516] bridge_slave_0: left allmulticast mode
[  481.706424][T11516] bridge_slave_0: left promiscuous mode
[  481.715637][T11524] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  481.744121][T11516] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.032471][T11530] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  482.136484][ T9738] Bluetooth: hci1: command 0x0c1a tx timeout
[  482.173737][T11530] FAULT_INJECTION: forcing a failure.
[  482.173737][T11530] name fail_futex, interval 1, probability 0, space 0, times 0
[  482.224940][ T9738] Bluetooth: hci4: command 0x0c1a tx timeout
[  482.231374][T11373] Bluetooth: hci3: command 0x0c1a tx timeout
[  482.253000][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.4.1100 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  482.253033][T11530] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  482.253040][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  482.253050][T11530] Call Trace:
[  482.253057][T11530]  <TASK>
[  482.253065][T11530]  dump_stack_lvl+0x100/0x190
[  482.253097][T11530]  should_fail_ex.cold+0x5/0xa
[  482.253116][T11530]  ? rcu_is_watching+0x12/0xc0
[  482.253147][T11530]  get_futex_key+0x295/0x1620
[  482.253171][T11530]  ? __pfx_get_futex_key+0x10/0x10
[  482.253199][T11530]  ? lock_acquire+0x1cf/0x380
[  482.253230][T11530]  futex_wake+0xea/0x530
[  482.253259][T11530]  ? __pfx_futex_wake+0x10/0x10
[  482.253287][T11530]  ? exit_mm_release+0x19/0x30
[  482.253315][T11530]  do_futex+0x32b/0x350
[  482.253339][T11530]  ? __pfx_do_futex+0x10/0x10
[  482.253360][T11530]  ? __might_fault+0xc5/0x140
[  482.253391][T11530]  mm_release+0x24a/0x2f0
[  482.253409][T11530]  do_exit+0x675/0x2aa0
[  482.253436][T11530]  ? __pfx_do_exit+0x10/0x10
[  482.253460][T11530]  ? do_raw_spin_lock+0x128/0x260
[  482.253486][T11530]  ? find_held_lock+0x2b/0x80
[  482.253501][T11530]  ? get_signal+0x7e0/0x21e0
[  482.253523][T11530]  do_group_exit+0xd5/0x2a0
[  482.253549][T11530]  get_signal+0x1ec7/0x21e0
[  482.253571][T11530]  ? security_file_permission+0x76/0x210
[  482.253605][T11530]  ? __pfx_get_signal+0x10/0x10
[  482.253625][T11530]  ? do_futex+0x192/0x350
[  482.253651][T11530]  arch_do_signal_or_restart+0x91/0x770
[  482.253675][T11530]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  482.253703][T11530]  ? __pfx___x64_sys_futex+0x10/0x10
[  482.253733][T11530]  exit_to_user_mode_loop+0x86/0x4a0
[  482.253759][T11530]  do_syscall_64+0x668/0xf80
[  482.253779][T11530]  ? clear_bhb_loop+0x40/0x90
[  482.253801][T11530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.253820][T11530] RIP: 0033:0x7f4e1b19c629
[  482.253836][T11530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.253854][T11530] RSP: 002b:00007f4e1bfb60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  482.253877][T11530] RAX: fffffffffffffe00 RBX: 00007f4e1b415fa8 RCX: 00007f4e1b19c629
[  482.253888][T11530] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e1b415fa8
[  482.253899][T11530] RBP: 00007f4e1b415fa0 R08: 0000000000000000 R09: 0000000000000000
[  482.253909][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.253920][T11530] R13: 00007f4e1b416038 R14: 00007ffe92e3b230 R15: 00007ffe92e3b318
[  482.253944][T11530]  </TASK>
[  483.804654][T11538] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  483.819009][T11538] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  483.867170][T11538] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  483.890308][T11538] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  483.918010][T11538] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  484.907797][T11547] kexec: Could not allocate control_code_buffer
[  485.419343][T11373] Bluetooth: hci2: command 0x0c1a tx timeout
[  485.896806][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  485.902891][ T9738] Bluetooth: hci3: command 0x0c1a tx timeout
[  485.908934][ T9757] Bluetooth: hci1: command 0x0c1a tx timeout
[  485.976577][T11373] Bluetooth: hci0: command 0x0c1a tx timeout
[  486.705092][T11609] random: crng reseeded on system resumption
[  487.188233][T11620] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input49
[  488.235060][T11638] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1124'.
[  488.300703][T11638] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1124'.
[  488.669054][   T30] audit: type=1107 audit(1771873300.952:24): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='@'
[  488.774066][   T30] audit: type=1107 audit(1771873300.962:25): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='@'
[  489.943136][T11671] bond0: invalid ARP target specified
[  490.014687][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1134'.
[  490.072894][T11671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.116430][T11671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.173589][T11671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.212960][T11671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.378267][T11701] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1142'.
[  491.442149][T11702] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1140'.
[  491.458356][T11700] delete_channel: no stack
[  492.149135][ T9739] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.441056][ T9739] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.649799][T11730] bond0: invalid ARP target specified
[  492.702009][ T9739] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.755120][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1146'.
[  492.837057][ T9739] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.592639][T11753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  493.835706][T11756] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1153'.
[  496.392090][T11791] kexec: Could not allocate control_code_buffer
[  498.608606][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1164'.
[  501.089413][T11845] kexec: Could not allocate control_code_buffer
[  501.823996][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  501.830668][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  502.360764][T11873] sp0: Synchronizing with TNC
[  502.687122][T11876] Invalid ELF header magic: != ELF
[  502.908824][T11871] FAULT_INJECTION: forcing a failure.
[  502.908824][T11871] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  503.078585][T11871] CPU: 0 UID: 0 PID: 11871 Comm: syz.5.1178 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  503.078620][T11871] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  503.078627][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  503.078637][T11871] Call Trace:
[  503.078644][T11871]  <TASK>
[  503.078651][T11871]  dump_stack_lvl+0x100/0x190
[  503.078684][T11871]  should_fail_ex.cold+0x5/0xa
[  503.078705][T11871]  _copy_from_user+0x2e/0xd0
[  503.078735][T11871]  ____sys_sendmsg+0x1d1/0xc30
[  503.078764][T11871]  ? __pfx_____sys_sendmsg+0x10/0x10
[  503.078795][T11871]  ? __pfx_futex_wake_mark+0x10/0x10
[  503.078827][T11871]  ___sys_sendmsg+0x190/0x1e0
[  503.078856][T11871]  ? __pfx____sys_sendmsg+0x10/0x10
[  503.078909][T11871]  __sys_sendmsg+0x170/0x220
[  503.078930][T11871]  ? __pfx___sys_sendmsg+0x10/0x10
[  503.078950][T11871]  ? __x64_sys_futex+0x34f/0x4d0
[  503.078986][T11871]  do_syscall_64+0x106/0xf80
[  503.079005][T11871]  ? clear_bhb_loop+0x40/0x90
[  503.079028][T11871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.079047][T11871] RIP: 0033:0x7f3b7eb9c629
[  503.079062][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.079080][T11871] RSP: 002b:00007f3b7f9fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  503.079098][T11871] RAX: ffffffffffffffda RBX: 00007f3b7ee16090 RCX: 00007f3b7eb9c629
[  503.079110][T11871] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  503.079120][T11871] RBP: 00007f3b7ec32b39 R08: 0000000000000000 R09: 0000000000000000
[  503.079131][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  503.079141][T11871] R13: 00007f3b7ee16128 R14: 00007f3b7ee16090 R15: 00007fff7c8ee148
[  503.079164][T11871]  </TASK>
[  504.158368][T11880] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51
[  505.094675][T11902] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  505.293036][T11904] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  505.313481][T11904] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  505.338897][T11904] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  505.353691][T11896] Invalid ELF header magic: != ELF
[  505.369101][T11904] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  505.394033][T11904] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  505.950041][T11918] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  506.493471][T11925] Invalid ELF header magic: != ELF
[  507.336502][T11373] Bluetooth: hci1: command 0x0c1a tx timeout
[  507.343277][ T9738] Bluetooth: hci2: command 0x0c1a tx timeout
[  507.422581][T11373] Bluetooth: hci0: command 0x0c1a tx timeout
[  507.428810][ T9738] Bluetooth: hci4: command 0x0c1a tx timeout
[  507.434846][ T9738] Bluetooth: hci3: command 0x0c1a tx timeout
[  508.164273][T11373] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  508.176481][T11373] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  508.185220][T11373] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  508.193202][T11373] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  508.202466][T11373] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  508.364065][T11949] zswap: compressor  not available
[  509.315438][T11954] chnl_net:caif_netlink_parms(): no params data found
[  509.798405][T11986] ima: policy update failed
[  509.819489][T11954] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.842853][T11954] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.854840][   T30] audit: type=1802 audit(1771873322.132:26): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1201" res=0 errno=0
[  509.889099][T11954] bridge_slave_0: entered allmulticast mode
[  509.919157][T11954] bridge_slave_0: entered promiscuous mode
[  509.964917][T11954] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.004642][T11954] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.040751][T11954] bridge_slave_1: entered allmulticast mode
[  510.072349][T11954] bridge_slave_1: entered promiscuous mode
[  510.300917][T11373] Bluetooth: hci5: command tx timeout
[  510.391167][T11954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.497962][T11954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.914431][T11954] team0: Port device team_slave_0 added
[  510.989181][T11954] team0: Port device team_slave_1 added
[  511.209896][T11954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.269656][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.433625][T11954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  511.532339][T11954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  511.567956][T11954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.711405][T11954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.094481][T11954] hsr_slave_0: entered promiscuous mode
[  512.129834][T11954] hsr_slave_1: entered promiscuous mode
[  512.165381][T11954] debugfs: 'hsr0' already exists in 'hsr'
[  512.202610][T11954] Cannot create hsr debugfs directory
[  512.380643][T11373] Bluetooth: hci5: command tx timeout
[  512.749721][   T30] audit: type=1800 audit(1771873325.032:27): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1211" name="dbroot" dev="configfs" ino=54232 res=0 errno=0
[  513.233773][T11954] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  513.360773][T11954] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  513.460851][T11954] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  513.598071][T11954] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  514.456679][T11373] Bluetooth: hci5: command tx timeout
[  514.517236][T11954] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.643595][T11954] 8021q: adding VLAN 0 to HW filter on device team0
[  514.724181][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.731388][ T9740] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.898695][ T9764] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.905900][ T9764] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.169175][T11954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  515.209290][T12087] syz.5.1218 (12087): attempted to duplicate a private mapping with mremap.  This is not supported.
[  515.293881][T12089] bridge0: port 3(team0) entered blocking state
[  515.330879][T12089] bridge0: port 3(team0) entered disabled state
[  515.575412][T12089] team0: entered allmulticast mode
[  515.599698][T12089] team_slave_0: entered allmulticast mode
[  515.687048][T12089] team_slave_1: entered allmulticast mode
[  515.792481][T12089] team0: entered promiscuous mode
[  515.866452][T12089] team_slave_0: entered promiscuous mode
[  515.877098][T12089] team_slave_1: entered promiscuous mode
[  515.907143][T12089] bridge0: port 3(team0) entered blocking state
[  515.913512][T12089] bridge0: port 3(team0) entered forwarding state
[  516.453188][T11954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.537833][T11373] Bluetooth: hci5: command tx timeout
[  516.863360][T12126] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  517.721003][T11954] veth0_vlan: entered promiscuous mode
[  517.788864][T11954] veth1_vlan: entered promiscuous mode
[  518.464826][T11954] veth0_macvtap: entered promiscuous mode
[  518.518945][T11954] veth1_macvtap: entered promiscuous mode
[  518.761218][T11954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.832410][T11954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.994585][ T9740] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.048292][ T9740] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.206511][ T9740] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.245908][ T9740] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.447761][T12176] Invalid ELF header magic: != ELF
[  519.778411][ T9740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.827200][ T9740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.983152][ T9763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.026451][ T9763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.109281][T12180] FAULT_INJECTION: forcing a failure.
[  520.109281][T12180] name failslab, interval 1, probability 0, space 0, times 0
[  520.151154][T12181] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  520.193212][T12183] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  520.211853][T12180] CPU: 0 UID: 0 PID: 12180 Comm: syz.3.1233 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  520.211884][T12180] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  520.211891][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  520.211902][T12180] Call Trace:
[  520.211908][T12180]  <TASK>
[  520.211914][T12180]  dump_stack_lvl+0x100/0x190
[  520.211946][T12180]  should_fail_ex.cold+0x5/0xa
[  520.211967][T12180]  ? lsm_blob_alloc+0x68/0x90
[  520.211987][T12180]  should_failslab+0xc2/0x120
[  520.212004][T12180]  __kmalloc_noprof+0xe0/0x850
[  520.212030][T12180]  ? trace_kmalloc+0x101/0x130
[  520.212050][T12180]  lsm_blob_alloc+0x68/0x90
[  520.212071][T12180]  security_sk_alloc+0x2d/0x290
[  520.212097][T12180]  sk_prot_alloc+0x12a/0x2a0
[  520.212124][T12180]  sk_alloc+0x36/0xe80
[  520.212142][T12180]  __netlink_create+0x5e/0x2c0
[  520.212159][T12180]  ? __wake_up+0x3f/0x60
[  520.212187][T12180]  netlink_create+0x293/0x610
[  520.212206][T12180]  ? __pfx_genl_bind+0x10/0x10
[  520.212228][T12180]  ? __pfx_genl_unbind+0x10/0x10
[  520.212250][T12180]  ? __pfx_genl_release+0x10/0x10
[  520.212277][T12180]  __sock_create+0x339/0x860
[  520.212307][T12180]  __sys_socket+0x14d/0x260
[  520.212334][T12180]  ? exc_page_fault+0x6f/0xd0
[  520.212353][T12180]  ? __pfx___sys_socket+0x10/0x10
[  520.212383][T12180]  ? do_user_addr_fault+0x8d6/0x12f0
[  520.212416][T12180]  __x64_sys_socket+0x72/0xb0
[  520.212442][T12180]  ? lockdep_hardirqs_on+0x78/0x100
[  520.212461][T12180]  do_syscall_64+0x106/0xf80
[  520.212481][T12180]  ? clear_bhb_loop+0x40/0x90
[  520.212503][T12180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.212522][T12180] RIP: 0033:0x7f7b3099dec7
[  520.212538][T12180] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.212556][T12180] RSP: 002b:00007f7b2ebf4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  520.212574][T12180] RAX: ffffffffffffffda RBX: 00007f7b30c16090 RCX: 00007f7b3099dec7
[  520.212585][T12180] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  520.212596][T12180] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  520.212606][T12180] R10: 0000200000000640 R11: 0000000000000286 R12: 0000000000000000
[  520.212617][T12180] R13: 00007f7b30c16128 R14: 00007f7b30c16090 R15: 00007ffe49e5e5f8
[  520.212640][T12180]  </TASK>
[  520.719566][T12181] __vm_enough_memory: pid: 12181, comm: syz.5.1234, bytes: 4398046511104 not enough memory for the allocation
[  520.756855][T12182] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  521.602519][T12191] Invalid ELF header magic: != ELF
[  522.062820][T12196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  522.268331][T12188] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52
[  523.373019][T12223] netlink: 186 bytes leftover after parsing attributes in process `syz.6.1242'.
[  523.900850][T12236] netlink: 'syz.6.1246': attribute type 1 has an invalid length.
[  524.924740][T12242] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  524.957265][T12242] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  525.001189][T12242] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  525.030060][T12242] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  525.055828][T12242] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  525.088199][T12242] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  525.094258][T12242] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  525.178207][T12242] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  525.487630][T12252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1250'.
[  525.774386][T12258] ubi0: attaching mtd0
[  525.845909][T12258] ubi0: scanning is finished
[  525.974570][T12258] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  526.376409][ T9738] Bluetooth: hci2: command 0x0c1a tx timeout
[  526.517458][T12258] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  527.016956][ T9738] Bluetooth: hci3: command 0x0c1a tx timeout
[  527.023172][ T9738] Bluetooth: hci1: command 0x0c1a tx timeout
[  527.101289][ T9738] Bluetooth: hci0: command 0x0c1a tx timeout
[  527.110926][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  527.176899][ T9738] Bluetooth: hci5: command 0x0c1a tx timeout
[  527.248302][T12268] zswap: compressor  not available
[  527.655097][T12283] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  528.557333][T12315] netlink: 'syz.3.1263': attribute type 4 has an invalid length.
[  528.636525][T12316] netlink: 'syz.3.1263': attribute type 4 has an invalid length.
[  529.256941][ T9738] Bluetooth: hci5: command 0x0c1a tx timeout
[  530.493354][T12338] qrtr: Invalid version 0
[  531.340193][ T9738] Bluetooth: hci5: command 0x0c1a tx timeout
[  532.865910][T12380] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  533.324165][T12389] ima: policy update failed
[  533.370286][   T30] audit: type=1802 audit(1771891689.646:28): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1277" res=0 errno=0
[  533.583089][T12375] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  533.597842][T12375] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  533.633120][T12375] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  533.669949][T12375] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  533.706998][T12375] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  533.746179][T12375] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  535.097023][ T9738] Bluetooth: hci2: command 0x0c1a tx timeout
[  535.597611][T12421] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  535.656604][ T9738] Bluetooth: hci3: command 0x0c1a tx timeout
[  535.662903][T11373] Bluetooth: hci1: command 0x0c1a tx timeout
[  535.736898][ T9738] Bluetooth: hci0: command 0x0c1a tx timeout
[  535.736945][ T9738] Bluetooth: hci4: command 0x0c1a tx timeout
[  535.822161][T11373] Bluetooth: hci5: command 0x0c1a tx timeout
[  536.495497][T12426] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  536.576917][T12426] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  536.660705][T12426] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  536.706559][T12426] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  536.790121][T12426] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  536.817082][T12426] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  536.905427][T12409] kexec: Could not allocate control_code_buffer
[  537.816579][T11373] Bluetooth: hci2: command 0x0c1a tx timeout
[  538.619665][T11373] Bluetooth: hci1: command 0x0c1a tx timeout
[  538.696413][T11373] Bluetooth: hci3: command 0x0c1a tx timeout
[  538.776728][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  538.785781][T12458] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1292'.
[  538.856475][T11373] Bluetooth: hci5: command 0x0c1a tx timeout
[  538.862553][T11373] Bluetooth: hci0: command 0x0c1a tx timeout
[  539.090637][T12449] kexec: Could not allocate control_code_buffer
[  540.922806][T12480] __vm_enough_memory: pid: 12480, comm: syz.6.1296, bytes: 4398046511104 not enough memory for the allocation
[  541.741560][   T30] audit: type=1800 audit(1771891698.006:29): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1297" name="dbroot" dev="configfs" ino=56824 res=0 errno=0
[  542.949788][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'.
[  543.857637][T12508] vhci_hcd: not connected 4
[  545.512239][T12515] kexec: Could not allocate control_code_buffer
[  547.178115][T12558] FAULT_INJECTION: forcing a failure.
[  547.178115][T12558] name failslab, interval 1, probability 0, space 0, times 0
[  547.277256][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.3.1312 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  547.277291][T12558] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  547.277298][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  547.277308][T12558] Call Trace:
[  547.277315][T12558]  <TASK>
[  547.277322][T12558]  dump_stack_lvl+0x100/0x190
[  547.277355][T12558]  should_fail_ex.cold+0x5/0xa
[  547.277376][T12558]  ? __netlink_kernel_create+0x181/0x750
[  547.277399][T12558]  should_failslab+0xc2/0x120
[  547.277416][T12558]  __kmalloc_noprof+0xe0/0x850
[  547.277447][T12558]  __netlink_kernel_create+0x181/0x750
[  547.277472][T12558]  ? __pfx___netlink_kernel_create+0x10/0x10
[  547.277493][T12558]  ? find_held_lock+0x2b/0x80
[  547.277509][T12558]  ? audit_net_init+0x190/0x440
[  547.277533][T12558]  ? audit_net_init+0x190/0x440
[  547.277559][T12558]  audit_net_init+0x1ae/0x440
[  547.277583][T12558]  ? __pfx_audit_net_init+0x10/0x10
[  547.277606][T12558]  ? rcu_is_watching+0x12/0xc0
[  547.277632][T12558]  ? __pfx_audit_receive+0x10/0x10
[  547.277659][T12558]  ? __pfx_audit_multicast_bind+0x10/0x10
[  547.277685][T12558]  ? __pfx_audit_multicast_unbind+0x10/0x10
[  547.277713][T12558]  ? __kmalloc_noprof+0x320/0x850
[  547.277742][T12558]  ? __pfx_audit_net_init+0x10/0x10
[  547.277765][T12558]  ops_init+0x1e2/0x5f0
[  547.277788][T12558]  setup_net+0x118/0x3a0
[  547.277809][T12558]  ? __pfx_setup_net+0x10/0x10
[  547.277829][T12558]  ? lockdep_init_map_type+0x5c/0x250
[  547.277852][T12558]  ? mutex_init_lockep+0x110/0x150
[  547.277880][T12558]  copy_net_ns+0x46f/0x7c0
[  547.277905][T12558]  create_new_namespaces+0x3ea/0xac0
[  547.277930][T12558]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  547.277951][T12558]  ksys_unshare+0x455/0xab0
[  547.277975][T12558]  ? __pfx_ksys_unshare+0x10/0x10
[  547.278006][T12558]  __x64_sys_unshare+0x31/0x40
[  547.278028][T12558]  do_syscall_64+0x106/0xf80
[  547.278048][T12558]  ? clear_bhb_loop+0x40/0x90
[  547.278070][T12558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.278098][T12558] RIP: 0033:0x7f7b3099c629
[  547.278114][T12558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.278131][T12558] RSP: 002b:00007f7b31777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  547.278150][T12558] RAX: ffffffffffffffda RBX: 00007f7b30c15fa0 RCX: 00007f7b3099c629
[  547.278161][T12558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  547.278172][T12558] RBP: 00007f7b30a32b39 R08: 0000000000000000 R09: 0000000000000000
[  547.278183][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  547.278194][T12558] R13: 00007f7b30c16038 R14: 00007f7b30c15fa0 R15: 00007ffe49e5e5f8
[  547.278218][T12558]  </TASK>
[  547.557269][T12558] audit: cannot initialize netlink socket in namespace
[  549.348223][T12578] ubi0: attaching mtd1
[  549.386370][T12578] ubi0 error: ubi_attach_mtd_dev: bad VID header (16777279) or data offsets (16777343)
[  550.589298][T12600] net_ratelimit: 46 callbacks suppressed
[  550.589315][T12600] netlink: get zone limit has 8 unknown bytes
[  550.608690][T12599] FAULT_INJECTION: forcing a failure.
[  550.608690][T12599] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  550.690440][T12600] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  550.707513][T12599] CPU: 0 UID: 0 PID: 12599 Comm: syz.5.1320 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  550.707547][T12599] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  550.707554][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  550.707564][T12599] Call Trace:
[  550.707571][T12599]  <TASK>
[  550.707578][T12599]  dump_stack_lvl+0x100/0x190
[  550.707611][T12599]  should_fail_ex.cold+0x5/0xa
[  550.707629][T12599]  ? prepare_alloc_pages+0x16d/0x5f0
[  550.707652][T12599]  should_fail_alloc_page+0xeb/0x140
[  550.707672][T12599]  prepare_alloc_pages+0x1f0/0x5f0
[  550.707696][T12599]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  550.707733][T12599]  ? find_held_lock+0x2b/0x80
[  550.707749][T12599]  ? is_bpf_text_address+0x8a/0x1a0
[  550.707777][T12599]  ? is_bpf_text_address+0x8a/0x1a0
[  550.707805][T12599]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  550.707831][T12599]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  550.707851][T12599]  ? is_bpf_text_address+0x94/0x1a0
[  550.707878][T12599]  ? kernel_text_address+0x8d/0x100
[  550.707904][T12599]  ? __kernel_text_address+0xd/0x30
[  550.707930][T12599]  ? unwind_get_return_address+0x59/0xa0
[  550.707957][T12599]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  550.707988][T12599]  ? policy_nodemask+0xed/0x4f0
[  550.708008][T12599]  alloc_pages_mpol+0x1fb/0x550
[  550.708026][T12599]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  550.708053][T12599]  ? kasan_save_stack+0x30/0x50
[  550.708078][T12599]  ? kasan_save_track+0x14/0x30
[  550.708104][T12599]  ? __kasan_kmalloc+0xaa/0xb0
[  550.708128][T12599]  ? __get_vm_area_node+0x101/0x330
[  550.708146][T12599]  ? __vmalloc_node_range_noprof+0x213/0x1530
[  550.708171][T12599]  alloc_pages_noprof+0x131/0x390
[  550.708191][T12599]  get_free_pages_noprof+0x10/0xb0
[  550.708220][T12599]  __kasan_populate_vmalloc+0xa0/0x210
[  550.708252][T12599]  alloc_vmap_area+0x95d/0x2bd0
[  550.708293][T12599]  ? __pfx_alloc_vmap_area+0x10/0x10
[  550.708330][T12599]  __get_vm_area_node+0x1ca/0x330
[  550.708353][T12599]  __vmalloc_node_range_noprof+0x213/0x1530
[  550.708375][T12599]  ? n_tty_open+0x1a/0x170
[  550.708401][T12599]  ? look_up_lock_class+0x64/0x120
[  550.708426][T12599]  ? n_tty_open+0x1a/0x170
[  550.708456][T12599]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  550.708479][T12599]  ? __ldsem_down_write_nested+0xfd/0x830
[  550.708504][T12599]  ? __ldsem_down_write_nested+0x10e/0x830
[  550.708535][T12599]  ? __pfx_class_find_device+0x10/0x10
[  550.708567][T12599]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  550.708596][T12599]  ? n_tty_open+0x1a/0x170
[  550.708618][T12599]  __vmalloc_node_noprof+0xad/0xf0
[  550.708639][T12599]  ? n_tty_open+0x1a/0x170
[  550.708664][T12599]  ? __pfx_n_tty_open+0x10/0x10
[  550.708688][T12599]  n_tty_open+0x1a/0x170
[  550.708713][T12599]  tty_ldisc_open+0xa2/0x120
[  550.708732][T12599]  tty_ldisc_setup+0x40/0xf0
[  550.708751][T12599]  tty_init_dev.part.0+0x1b5/0x470
[  550.708778][T12599]  tty_open+0xa63/0xfa0
[  550.708803][T12599]  ? __pfx_tty_open+0x10/0x10
[  550.708824][T12599]  ? chrdev_open+0x10b/0x6a0
[  550.708840][T12599]  ? chrdev_open+0x10b/0x6a0
[  550.708860][T12599]  ? __pfx_tty_open+0x10/0x10
[  550.708882][T12599]  chrdev_open+0x234/0x6a0
[  550.708898][T12599]  ? __pfx_apparmor_file_open+0x10/0x10
[  550.708923][T12599]  ? __pfx_chrdev_open+0x10/0x10
[  550.708941][T12599]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  550.708976][T12599]  do_dentry_open+0x6d8/0x1660
[  550.709004][T12599]  ? __pfx_chrdev_open+0x10/0x10
[  550.709027][T12599]  vfs_open+0x82/0x3f0
[  550.709060][T12599]  path_openat+0x208c/0x31a0
[  550.709086][T12599]  ? __pfx_path_openat+0x10/0x10
[  550.709112][T12599]  do_file_open+0x20e/0x430
[  550.709132][T12599]  ? __pfx_do_file_open+0x10/0x10
[  550.709168][T12599]  ? alloc_fd+0x476/0x790
[  550.709199][T12599]  ? do_getname+0x191/0x390
[  550.709222][T12599]  do_sys_openat2+0x10d/0x1e0
[  550.709245][T12599]  ? __pfx_do_sys_openat2+0x10/0x10
[  550.709269][T12599]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[  550.709298][T12599]  __x64_sys_openat+0x12d/0x210
[  550.709321][T12599]  ? __pfx___x64_sys_openat+0x10/0x10
[  550.709354][T12599]  do_syscall_64+0x106/0xf80
[  550.709373][T12599]  ? clear_bhb_loop+0x40/0x90
[  550.709396][T12599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.709415][T12599] RIP: 0033:0x7f3b7eb9c629
[  550.709431][T12599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  550.709448][T12599] RSP: 002b:00007f3b7fa1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  550.709466][T12599] RAX: ffffffffffffffda RBX: 00007f3b7ee15fa0 RCX: 00007f3b7eb9c629
[  550.709478][T12599] RDX: 0000000000101e81 RSI: 0000200000000400 RDI: ffffffffffffff9c
[  550.709489][T12599] RBP: 00007f3b7ec32b39 R08: 0000000000000000 R09: 0000000000000000
[  550.709499][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  550.709510][T12599] R13: 00007f3b7ee16038 R14: 00007f3b7ee15fa0 R15: 00007fff7c8ee148
[  550.709535][T12599]  </TASK>
[  551.213967][T12588] kexec: Could not allocate control_code_buffer
[  551.244850][T12599] syz.5.1320: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  551.260723][T12599] CPU: 0 UID: 0 PID: 12599 Comm: syz.5.1320 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  551.260756][T12599] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  551.260763][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  551.260774][T12599] Call Trace:
[  551.260780][T12599]  <TASK>
[  551.260788][T12599]  dump_stack_lvl+0x100/0x190
[  551.260820][T12599]  warn_alloc.cold+0x95/0x1c1
[  551.260851][T12599]  ? __pfx_warn_alloc+0x10/0x10
[  551.260875][T12599]  ? lockdep_hardirqs_on+0x78/0x100
[  551.260898][T12599]  ? __get_vm_area_node+0x2c5/0x330
[  551.260922][T12599]  ? __get_vm_area_node+0x208/0x330
[  551.260946][T12599]  __vmalloc_node_range_noprof+0xbf4/0x1530
[  551.260970][T12599]  ? look_up_lock_class+0x64/0x120
[  551.260993][T12599]  ? n_tty_open+0x1a/0x170
[  551.261024][T12599]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  551.261046][T12599]  ? __ldsem_down_write_nested+0xfd/0x830
[  551.261071][T12599]  ? __ldsem_down_write_nested+0x10e/0x830
[  551.261096][T12599]  ? __pfx_class_find_device+0x10/0x10
[  551.261137][T12599]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  551.261165][T12599]  ? n_tty_open+0x1a/0x170
[  551.261188][T12599]  __vmalloc_node_noprof+0xad/0xf0
[  551.261209][T12599]  ? n_tty_open+0x1a/0x170
[  551.261233][T12599]  ? __pfx_n_tty_open+0x10/0x10
[  551.261258][T12599]  n_tty_open+0x1a/0x170
[  551.261283][T12599]  tty_ldisc_open+0xa2/0x120
[  551.261302][T12599]  tty_ldisc_setup+0x40/0xf0
[  551.261322][T12599]  tty_init_dev.part.0+0x1b5/0x470
[  551.261348][T12599]  tty_open+0xa63/0xfa0
[  551.261374][T12599]  ? __pfx_tty_open+0x10/0x10
[  551.261395][T12599]  ? chrdev_open+0x10b/0x6a0
[  551.261413][T12599]  ? chrdev_open+0x10b/0x6a0
[  551.261432][T12599]  ? __pfx_tty_open+0x10/0x10
[  551.261454][T12599]  chrdev_open+0x234/0x6a0
[  551.261469][T12599]  ? __pfx_apparmor_file_open+0x10/0x10
[  551.261495][T12599]  ? __pfx_chrdev_open+0x10/0x10
[  551.261513][T12599]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  551.261548][T12599]  do_dentry_open+0x6d8/0x1660
[  551.261575][T12599]  ? __pfx_chrdev_open+0x10/0x10
[  551.261598][T12599]  vfs_open+0x82/0x3f0
[  551.261622][T12599]  path_openat+0x208c/0x31a0
[  551.261647][T12599]  ? __pfx_path_openat+0x10/0x10
[  551.261672][T12599]  do_file_open+0x20e/0x430
[  551.261692][T12599]  ? __pfx_do_file_open+0x10/0x10
[  551.261725][T12599]  ? alloc_fd+0x476/0x790
[  551.261761][T12599]  ? do_getname+0x191/0x390
[  551.261784][T12599]  do_sys_openat2+0x10d/0x1e0
[  551.261806][T12599]  ? __pfx_do_sys_openat2+0x10/0x10
[  551.261830][T12599]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[  551.261858][T12599]  __x64_sys_openat+0x12d/0x210
[  551.261881][T12599]  ? __pfx___x64_sys_openat+0x10/0x10
[  551.261914][T12599]  do_syscall_64+0x106/0xf80
[  551.261932][T12599]  ? clear_bhb_loop+0x40/0x90
[  551.261954][T12599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.261973][T12599] RIP: 0033:0x7f3b7eb9c629
[  551.261989][T12599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.262006][T12599] RSP: 002b:00007f3b7fa1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  551.262024][T12599] RAX: ffffffffffffffda RBX: 00007f3b7ee15fa0 RCX: 00007f3b7eb9c629
[  551.262036][T12599] RDX: 0000000000101e81 RSI: 0000200000000400 RDI: ffffffffffffff9c
[  551.262047][T12599] RBP: 00007f3b7ec32b39 R08: 0000000000000000 R09: 0000000000000000
[  551.262057][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  551.262067][T12599] R13: 00007f3b7ee16038 R14: 00007f3b7ee15fa0 R15: 00007fff7c8ee148
[  551.262091][T12599]  </TASK>
[  551.262225][T12599] Mem-Info:
[  551.631814][T12599] active_anon:8857 inactive_anon:0 isolated_anon:0
[  551.631814][T12599]  active_file:16030 inactive_file:43134 isolated_file:0
[  551.631814][T12599]  unevictable:768 dirty:721 writeback:0
[  551.631814][T12599]  slab_reclaimable:12460 slab_unreclaimable:110790
[  551.631814][T12599]  mapped:36988 shmem:1376 pagetables:1223
[  551.631814][T12599]  sec_pagetables:0 bounce:0
[  551.631814][T12599]  kernel_misc_reclaimable:0
[  551.631814][T12599]  free:1269487 free_pcp:16248 free_cma:0
[  551.679270][T12599] Node 0 active_anon:35428kB inactive_anon:0kB active_file:64120kB inactive_file:172404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147952kB dirty:2884kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB kernel_stack:12960kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  551.748738][T12599] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  551.826361][T12599] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  551.955630][T12599] lowmem_reserve[]: 0 2477 2479 2479 2479
[  551.996604][T12599] Node 0 DMA32 free:1136276kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33364kB inactive_anon:0kB active_file:64120kB inactive_file:172404kB unevictable:1536kB writepending:2924kB zspages:0kB present:3129332kB managed:2537464kB mlocked:0kB bounce:0kB free_pcp:54656kB local_pcp:54656kB free_cma:0kB
[  552.176368][T12599] lowmem_reserve[]: 0 0 1 1 1
[  552.192383][T12599] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1064kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  552.401180][T12599] lowmem_reserve[]: 0 0 0 0 0
[  552.416350][T12599] Node 1 Normal free:3933480kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5064kB local_pcp:5064kB free_cma:0kB
[  552.586453][T12599] lowmem_reserve[]: 0 0 0 0 0
[  552.606335][T12599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  552.676402][T12599] Node 0 DMA32: 2552*4kB (UME) 4216*8kB (UME) 2812*16kB (UME) 1090*32kB (UME) 955*64kB (UME) 491*128kB (UM) 235*256kB (UME) 195*512kB (UM) 99*1024kB (UM) 6*2048kB (UM) 148*4096kB (UM) = 1127648kB
[  552.746402][T12599] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  552.797547][T12599] Node 1 Normal: 4*4kB (ME) 5*8kB (UM) 7*16kB (ME) 8*32kB (UME) 10*64kB (UME) 8*128kB (UME) 3*256kB (ME) 1*512kB (E) 2*1024kB (UM) 2*2048kB (UE) 958*4096kB (UM) = 3933480kB
[  552.871562][T12599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  552.929586][T12599] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB
[  552.970689][T12599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  553.046443][T12599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  553.055790][T12599] 62291 total pagecache pages
[  553.118094][T12599] 0 pages in swap cache
[  553.146566][T12599] Free swap  = 124996kB
[  553.176472][T12599] Total swap = 124996kB
[  553.204059][T12599] 2097051 pages RAM
[  553.218958][T12599] 0 pages HighMem/MovableOnly
[  553.223747][T12599] 430804 pages reserved
[  553.281273][T12599] 0 pages cma reserved
[  553.285607][T12599] ttyS ttyS2: ldisc open failed (-12), clearing slot 2
[  554.762413][T12655] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  556.135269][T12659] kexec: Could not allocate control_code_buffer
[  557.698268][T12712] __vm_enough_memory: pid: 12712, comm: syz.6.1347, bytes: 4398046511104 not enough memory for the allocation
[  557.951500][    C0] vcan0: j1939_tp_rxtimer: 0xffff88808864d000: rx timeout, send abort
[  557.961619][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88808864d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  558.333171][T12722] Invalid ELF header magic: != ELF
[  559.266446][T11373] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13
[  559.300409][T12729] kexec: Could not allocate control_code_buffer
[  560.816596][T12762] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  560.976142][T12778] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  560.997447][T12762] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  561.003476][T12762] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  561.157188][T12762] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  561.163327][T12762] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  561.377138][T12762] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  561.861398][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1363'.
[  562.621144][T11373] Bluetooth: hci2: command 0x0c1a tx timeout
[  563.026595][T11373] Bluetooth: hci3: command 0x0c1a tx timeout
[  563.032729][T11373] Bluetooth: hci1: command 0x0c1a tx timeout
[  563.177830][T11373] Bluetooth: hci0: command 0x0c1a tx timeout
[  563.183877][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  563.267919][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  563.287951][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  563.416626][T11373] Bluetooth: hci5: command 0x0c1a tx timeout
[  564.202492][T12828] sd 0:0:1:0: PR command failed: 1026
[  564.277105][T12828] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  564.283851][T12828] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  564.737106][T12829] can0: slcan on ttyS2.
[  565.242252][T12825] can0 (unregistered): slcan off ttyS2.
[  565.702961][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1376'.
[  574.249711][T12957] kexec: Could not allocate control_code_buffer
[  574.784296][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'.
[  575.870440][T13001] usbip-vudc usbip-vudc.0: gadget not bound
[  577.464873][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'.
[  580.197738][T13056] usbip-vudc usbip-vudc.0: gadget not bound
[  581.311883][T13070] FAULT_INJECTION: forcing a failure.
[  581.311883][T13070] name fail_futex, interval 1, probability 0, space 0, times 0
[  581.420312][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz.6.1424 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  581.420348][T13070] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  581.420355][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  581.420365][T13070] Call Trace:
[  581.420372][T13070]  <TASK>
[  581.420379][T13070]  dump_stack_lvl+0x100/0x190
[  581.420411][T13070]  should_fail_ex.cold+0x5/0xa
[  581.420433][T13070]  get_futex_key+0x1d2/0x1620
[  581.420459][T13070]  ? __pfx_get_futex_key+0x10/0x10
[  581.420488][T13070]  futex_wake+0xea/0x530
[  581.420517][T13070]  ? __pfx_futex_wake+0x10/0x10
[  581.420548][T13070]  ? putname+0xb1/0x110
[  581.420564][T13070]  ? kmem_cache_free+0x124/0x6a0
[  581.420593][T13070]  do_futex+0x32b/0x350
[  581.420617][T13070]  ? __pfx_do_futex+0x10/0x10
[  581.420638][T13070]  ? __pfx_do_sys_openat2+0x10/0x10
[  581.420662][T13070]  ? __pfx_idempotent_init_module+0x10/0x10
[  581.420689][T13070]  __x64_sys_futex+0x34f/0x4d0
[  581.420715][T13070]  ? __x64_sys_openat+0x12d/0x210
[  581.420738][T13070]  ? __pfx___x64_sys_futex+0x10/0x10
[  581.420771][T13070]  do_syscall_64+0x106/0xf80
[  581.420791][T13070]  ? clear_bhb_loop+0x40/0x90
[  581.420814][T13070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.420834][T13070] RIP: 0033:0x7faf3059c629
[  581.420851][T13070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.420870][T13070] RSP: 002b:00007faf315040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  581.420889][T13070] RAX: ffffffffffffffda RBX: 00007faf30816098 RCX: 00007faf3059c629
[  581.420901][T13070] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf3081609c
[  581.420912][T13070] RBP: 00007faf30816090 R08: 0000000000000000 R09: 0000000000000000
[  581.420923][T13070] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  581.420933][T13070] R13: 00007faf30816128 R14: 00007ffc6d28d940 R15: 00007ffc6d28da28
[  581.420956][T13070]  </TASK>
[  582.037647][T13065] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  582.071082][T13065] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  582.118153][T13065] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  582.124457][T13065] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  582.196269][T13065] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  582.202356][T13065] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  583.027738][T13094] misc userio: Invalid payload size
[  583.224810][T13098] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1429'.
[  583.497191][T11373] Bluetooth: hci2: command 0x0c1a tx timeout
[  583.821059][T13075] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  584.213779][T13141] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  584.223089][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  584.229294][ T9738] Bluetooth: hci3: command 0x0c1a tx timeout
[  584.235321][ T9738] Bluetooth: hci1: command 0x0c1a tx timeout
[  584.299631][T11373] Bluetooth: hci5: command 0x0c1a tx timeout
[  584.305756][ T9738] Bluetooth: hci0: command 0x0c1a tx timeout
[  584.758439][T11373] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  585.631420][T13169] kAFS: Invalid Command on /proc/fs/afs/cells file
[  586.988903][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'.
[  588.027020][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1450'.
[  591.783977][T13288] ptrace attach of "./syz-executor exec"[13291] was attempted by "./syz-executor exec"[13288]
[  593.239180][T13310] futex_wake_op: syz.1.1467 tries to shift op by -2048; fix this program
[  593.463046][T13310] futex_wake_op: syz.1.1467 tries to shift op by -2048; fix this program
[  594.627624][ T9738] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  600.867942][T13370] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  602.160252][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'.
[  602.257252][T13382] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1483'.
[  602.807826][T13391] vhci_hcd vhci_hcd.3: default hub control req: ff03 v0202 i0002 l9
[  602.845445][T13390] vhci_hcd vhci_hcd.3: default hub control req: ff03 v0202 i0002 l9
[  603.272814][T13392] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  604.542724][T11373] Bluetooth: hci0: Malformed Event: 0x02
[  605.996639][T13450] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input53
[  606.606998][T13457] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1500'.
[  606.805423][T13464] FAULT_INJECTION: forcing a failure.
[  606.805423][T13464] name fail_futex, interval 1, probability 0, space 0, times 0
[  606.893764][T13464] CPU: 0 UID: 0 PID: 13464 Comm: syz.3.1502 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  606.893800][T13464] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  606.893807][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  606.893818][T13464] Call Trace:
[  606.893824][T13464]  <TASK>
[  606.893832][T13464]  dump_stack_lvl+0x100/0x190
[  606.893864][T13464]  should_fail_ex.cold+0x5/0xa
[  606.893885][T13464]  get_futex_key+0x1d2/0x1620
[  606.893910][T13464]  ? __pfx_get_futex_key+0x10/0x10
[  606.893932][T13464]  ? find_held_lock+0x2b/0x80
[  606.893948][T13464]  ? futex_wake+0x456/0x530
[  606.893980][T13464]  futex_wake+0xea/0x530
[  606.894008][T13464]  ? __pfx_futex_wake+0x10/0x10
[  606.894038][T13464]  ? putname+0xb1/0x110
[  606.894054][T13464]  ? kmem_cache_free+0x124/0x6a0
[  606.894094][T13464]  do_futex+0x32b/0x350
[  606.894118][T13464]  ? __pfx_do_futex+0x10/0x10
[  606.894140][T13464]  ? __pfx_do_sys_openat2+0x10/0x10
[  606.894165][T13464]  ? __pfx_idempotent_init_module+0x10/0x10
[  606.894198][T13464]  __x64_sys_futex+0x34f/0x4d0
[  606.894222][T13464]  ? __x64_sys_openat+0x12d/0x210
[  606.894245][T13464]  ? __pfx___x64_sys_futex+0x10/0x10
[  606.894277][T13464]  do_syscall_64+0x106/0xf80
[  606.894297][T13464]  ? clear_bhb_loop+0x40/0x90
[  606.894320][T13464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.894338][T13464] RIP: 0033:0x7f7b3099c629
[  606.894354][T13464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  606.894371][T13464] RSP: 002b:00007f7b2ebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  606.894390][T13464] RAX: ffffffffffffffda RBX: 00007f7b30c16098 RCX: 00007f7b3099c629
[  606.894402][T13464] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7b30c1609c
[  606.894414][T13464] RBP: 00007f7b30c16090 R08: 0000000000000000 R09: 0000000000000000
[  606.894424][T13464] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  606.894435][T13464] R13: 00007f7b30c16128 R14: 00007ffe49e5e510 R15: 00007ffe49e5e5f8
[  606.894459][T13464]  </TASK>
[  607.531632][T13462] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  607.560459][T13462] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  607.587507][T13462] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  607.600681][T13462] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  607.687228][T13462] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  607.694502][T13462] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  607.786875][T13462] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  608.856577][T11373] Bluetooth: hci2: command 0x0c1a tx timeout
[  609.656395][T11373] Bluetooth: hci3: command 0x0c1a tx timeout
[  609.662453][ T9738] Bluetooth: hci1: command 0x0c1a tx timeout
[  609.737019][ T9738] Bluetooth: hci0: command 0x0c1a tx timeout
[  609.743618][T11373] Bluetooth: hci4: command 0x0c1a tx timeout
[  609.896536][T11373] Bluetooth: hci5: command 0x0c1a tx timeout
[  611.738868][T11373] Bluetooth: hci3: command 0x0c1a tx timeout
[  612.470477][T13555] sd 0:0:1:0: PR command failed: 1026
[  612.579612][T13555] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  612.721195][T13555] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  614.440122][T13574] NFSD: Failed to start, no listeners configured.
[  619.681117][T13643] FAULT_INJECTION: forcing a failure.
[  619.681117][T13643] name failslab, interval 1, probability 0, space 0, times 0
[  619.933488][T13643] CPU: 0 UID: 0 PID: 13643 Comm: syz.6.1529 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  619.933521][T13643] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  619.933528][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  619.933540][T13643] Call Trace:
[  619.933546][T13643]  <TASK>
[  619.933553][T13643]  dump_stack_lvl+0x100/0x190
[  619.933585][T13643]  should_fail_ex.cold+0x5/0xa
[  619.933606][T13643]  should_failslab+0xc2/0x120
[  619.933625][T13643]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  619.933650][T13643]  ? prepare_creds+0x2c/0x950
[  619.933682][T13643]  prepare_creds+0x2c/0x950
[  619.933710][T13643]  ovl_fill_super+0x7fa/0x5db0
[  619.933745][T13643]  ? __mutex_unlock_slowpath+0x15c/0x790
[  619.933770][T13643]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  619.933795][T13643]  ? lockdep_init_map_type+0x5c/0x250
[  619.933820][T13643]  ? __pfx_ovl_fill_super+0x10/0x10
[  619.933849][T13643]  ? __init_swait_queue_head+0xca/0x150
[  619.933879][T13643]  ? shrinker_register+0x1db/0x240
[  619.933908][T13643]  ? sget_fc+0x801/0xc70
[  619.933933][T13643]  ? __pfx_set_anon_super_fc+0x10/0x10
[  619.933960][T13643]  ? __pfx_ovl_fill_super+0x10/0x10
[  619.933987][T13643]  get_tree_nodev+0xdd/0x190
[  619.934015][T13643]  vfs_get_tree+0x92/0x320
[  619.934038][T13643]  vfs_cmd_create+0xd7/0x2a0
[  619.934062][T13643]  __do_sys_fsconfig+0x55a/0xcb0
[  619.934085][T13643]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  619.934118][T13643]  do_syscall_64+0x106/0xf80
[  619.934137][T13643]  ? clear_bhb_loop+0x40/0x90
[  619.934160][T13643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.934179][T13643] RIP: 0033:0x7faf3059c629
[  619.934194][T13643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.934211][T13643] RSP: 002b:00007faf31504028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  619.934237][T13643] RAX: ffffffffffffffda RBX: 00007faf30816090 RCX: 00007faf3059c629
[  619.934248][T13643] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000a
[  619.934258][T13643] RBP: 00007faf30632b39 R08: 0000000000000000 R09: 0000000000000000
[  619.934269][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  619.934279][T13643] R13: 00007faf30816128 R14: 00007faf30816090 R15: 00007ffc6d28da28
[  619.934302][T13643]  </TASK>
[  623.689654][T13723] zswap: compressor  not available
[  624.383623][T13715] kexec: Could not allocate control_code_buffer
[  624.709634][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  624.716039][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  625.872081][T13772] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input54
[  627.438594][T13781] kexec: Could not allocate control_code_buffer
[  628.456441][T11373] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  629.116888][T13831] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1567'.
[  629.210891][T13838] netlink: 350 bytes leftover after parsing attributes in process `syz.5.1567'.
[  630.658489][T13856] kexec: Could not allocate control_code_buffer
[  631.422049][T11373] Bluetooth: hci5: unexpected event 0x1c length: 725 > 5
[  632.449645][T13916] FAULT_INJECTION: forcing a failure.
[  632.449645][T13916] name fail_futex, interval 1, probability 0, space 0, times 0
[  632.526966][T13916] CPU: 0 UID: 0 PID: 13916 Comm: syz.6.1582 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  632.527001][T13916] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  632.527008][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  632.527019][T13916] Call Trace:
[  632.527026][T13916]  <TASK>
[  632.527033][T13916]  dump_stack_lvl+0x100/0x190
[  632.527064][T13916]  should_fail_ex.cold+0x5/0xa
[  632.527086][T13916]  get_futex_key+0x1d2/0x1620
[  632.527111][T13916]  ? __pfx_get_futex_key+0x10/0x10
[  632.527135][T13916]  ? __fput+0x68a/0xb40
[  632.527157][T13916]  futex_wait_setup+0x81/0x500
[  632.527190][T13916]  __futex_wait+0x19f/0x300
[  632.527220][T13916]  ? __pfx___futex_wait+0x10/0x10
[  632.527250][T13916]  ? __pfx_futex_wake_mark+0x10/0x10
[  632.527280][T13916]  ? futex_hash+0x2c5/0x380
[  632.527307][T13916]  futex_wait+0xed/0x380
[  632.527335][T13916]  ? __pfx_futex_wait+0x10/0x10
[  632.527374][T13916]  do_futex+0x1ef/0x350
[  632.527398][T13916]  ? __pfx_do_futex+0x10/0x10
[  632.527422][T13916]  ? __pfx___might_resched+0x10/0x10
[  632.527448][T13916]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[  632.527473][T13916]  __x64_sys_futex+0x34f/0x4d0
[  632.527498][T13916]  ? __pfx_task_work_run+0x10/0x10
[  632.527523][T13916]  ? __pfx___x64_sys_futex+0x10/0x10
[  632.527547][T13916]  ? exit_to_user_mode_loop+0xdd/0x4a0
[  632.527577][T13916]  do_syscall_64+0x106/0xf80
[  632.527596][T13916]  ? clear_bhb_loop+0x40/0x90
[  632.527619][T13916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.527637][T13916] RIP: 0033:0x7faf3059c629
[  632.527652][T13916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  632.527669][T13916] RSP: 002b:00007faf315250e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  632.527688][T13916] RAX: ffffffffffffffda RBX: 00007faf30815fa8 RCX: 00007faf3059c629
[  632.527699][T13916] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faf30815fa8
[  632.527710][T13916] RBP: 00007faf30815fa0 R08: 0000000000000000 R09: 0000000000000000
[  632.527720][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  632.527730][T13916] R13: 00007faf30816038 R14: 00007ffc6d28d940 R15: 00007ffc6d28da28
[  632.527753][T13916]  </TASK>
[  633.238377][T13913] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  633.262149][T13913] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  633.287050][T13913] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  633.307769][T13913] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  633.314369][T13913] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  633.328323][T13921] netlink: 266 bytes leftover after parsing attributes in process `syz.6.1584'.
[  633.346143][T13921] IPv6: NLM_F_CREATE should be specified when creating new route
[  633.356434][T13913] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  634.536345][T11373] Bluetooth: hci2: command 0x0c1a tx timeout
[  635.336668][T11373] Bluetooth: hci3: command 0x0c1a tx timeout
[  635.344797][ T9738] Bluetooth: hci1: command 0x0c1a tx timeout
[  635.422506][T11373] Bluetooth: hci5: command 0x0c1a tx timeout
[  635.429159][ T9738] Bluetooth: hci0: command 0x0c1a tx timeout
[  635.435346][ T9757] Bluetooth: hci4: command 0x0c1a tx timeout
[  636.105585][T13984] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1597'.
[  638.776578][   T31] INFO: task kworker/u10:1:9739 blocked for more than 143 seconds.
[  638.799078][   T31]       Tainted: G     U       L      syzkaller #0
[  638.805706][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  638.903633][   T31] task:kworker/u10:1   state:D stack:23280 pid:9739  tgid:9739  ppid:2      task_flags:0x4208060 flags:0x00080000
[  639.002973][   T31] Workqueue: netns cleanup_net
[  639.056309][   T31] Call Trace:
[  639.106309][   T31]  <TASK>
[  639.148185][   T31]  __schedule+0xfee/0x60e0
[  639.152662][   T31]  ? __lock_acquire+0x4a5/0x2630
[  639.236414][   T31]  ? __pfx___schedule+0x10/0x10
[  639.242177][   T31]  ? find_held_lock+0x2b/0x80
[  639.299290][   T31]  ? schedule+0x2bf/0x390
[  639.303734][   T31]  schedule+0xdd/0x390
[  639.366324][   T31]  schedule_timeout+0x1b2/0x280
[  639.371641][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  639.435451][   T31]  ? mark_held_locks+0x40/0x70
[  639.441394][   T31]  __wait_for_common+0x2e7/0x4c0
[  639.476315][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  639.481806][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  639.546871][   T31]  remove_one+0x312/0x420
[  639.558502][   T31]  ? find_next_child+0x18f/0x280
[  639.563606][   T31]  __simple_recursive_removal+0x148/0x5c0
[  639.640194][   T31]  ? __pfx_remove_one+0x10/0x10
[  639.645151][   T31]  debugfs_remove+0x5d/0x80
[  639.676150][   T31]  nsim_dev_health_exit+0x3b/0xe0
[  639.707482][   T31]  nsim_dev_reload_destroy+0x144/0x4a0
[  639.713041][   T31]  nsim_dev_reload_down+0x66/0xd0
[  639.746345][   T31]  devlink_reload+0x173/0x790
[  639.751287][   T31]  ? __pfx_devlink_reload+0x10/0x10
[  639.798566][   T31]  devlink_pernet_pre_exit+0x222/0x330
[  639.804348][   T31]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  639.856789][   T31]  ? kobject_put+0xb9/0x640
[  639.861382][   T31]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  639.906291][   T31]  ops_undo_list+0x187/0xab0
[  639.911054][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  639.948634][   T31]  ? cleanup_net+0x332/0x920
[  639.953334][   T31]  ? cleanup_net+0x332/0x920
[  639.996316][   T31]  ? idr_destroy+0x62/0x2e0
[  640.001395][   T31]  cleanup_net+0x499/0x920
[  640.005942][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  640.046901][   T31]  ? rcu_is_watching+0x12/0xc0
[  640.096286][   T31]  process_one_work+0x9d7/0x1920
[  640.126324][   T31]  ? __pfx_process_one_work+0x10/0x10
[  640.131806][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  640.189952][   T31]  worker_thread+0x5da/0xe40
[  640.194748][   T31]  ? kthread+0x13a/0x450
[  640.246415][   T31]  ? __pfx_worker_thread+0x10/0x10
[  640.251713][   T31]  kthread+0x370/0x450
[  640.292201][   T31]  ? __pfx_kthread+0x10/0x10
[  640.317139][   T31]  ret_from_fork+0x754/0xd80
[  640.321774][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  640.366311][   T31]  ? __switch_to+0x7b4/0x1120
[  640.416261][   T31]  ? __pfx_kthread+0x10/0x10
[  640.420915][   T31]  ret_from_fork_asm+0x1a/0x30
[  640.425730][   T31]  </TASK>
[  640.471227][   T31] INFO: task syz.4.1146:11730 blocked for more than 145 seconds.
[  640.557453][   T31]       Tainted: G     U       L      syzkaller #0
[  640.586280][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  640.595105][   T31] task:syz.4.1146      state:D stack:28240 pid:11730 tgid:11729 ppid:11047  task_flags:0x400040 flags:0x00080002
[  640.706254][   T31] Call Trace:
[  640.709664][   T31]  <TASK>
[  640.712618][   T31]  __schedule+0xfee/0x60e0
[  640.776373][   T31]  ? __lock_acquire+0x4a5/0x2630
[  640.804301][   T31]  ? __pfx___schedule+0x10/0x10
[  640.828393][   T31]  ? find_held_lock+0x2b/0x80
[  640.833134][   T31]  ? schedule+0x2bf/0x390
[  640.877455][   T31]  schedule+0xdd/0x390
[  640.916466][   T31]  schedule_preempt_disabled+0x13/0x30
[  640.921979][   T31]  __mutex_lock+0xc9a/0x1b90
[  640.971757][   T31]  ? netlink_has_listeners+0x20f/0x430
[  640.986835][   T31]  ? devlink_health_report+0x681/0xb50
[  640.992369][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  641.056003][   T31]  ? devlink_recover_notify.constprop.0+0x200/0x670
[  641.097035][   T31]  ? __lock_acquire+0x3c1/0x2630
[  641.117559][   T31]  ? devlink_health_report+0x681/0xb50
[  641.123256][   T31]  devlink_health_report+0x681/0xb50
[  641.166475][   T31]  ? __pfx_devlink_health_report+0x10/0x10
[  641.206945][   T31]  ? _copy_from_user+0x59/0xd0
[  641.212003][   T31]  nsim_dev_health_break_write+0x166/0x210
[  641.256709][   T31]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  641.263173][   T31]  full_proxy_write+0x135/0x1a0
[  641.279175][   T31]  vfs_write+0x2aa/0x1070
[  641.283775][   T31]  ? __pfx_full_proxy_write+0x10/0x10
[  641.317333][   T31]  ? __pfx_vfs_write+0x10/0x10
[  641.322162][   T31]  ? __fget_files+0x215/0x3d0
[  641.346540][   T31]  ? __fget_files+0x21f/0x3d0
[  641.351360][   T31]  ksys_write+0x12a/0x250
[  641.355899][   T31]  ? __pfx_ksys_write+0x10/0x10
[  641.396523][   T31]  do_syscall_64+0x106/0xf80
[  641.401169][   T31]  ? clear_bhb_loop+0x40/0x90
[  641.405860][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.456322][   T31] RIP: 0033:0x7f4e1b19c629
[  641.460805][   T31] RSP: 002b:00007f4e1bfb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  641.495130][   T31] RAX: ffffffffffffffda RBX: 00007f4e1b415fa0 RCX: 00007f4e1b19c629
[  641.521097][   T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000004
[  641.557725][   T31] RBP: 00007f4e1b232b39 R08: 0000000000000000 R09: 0000000000000000
[  641.565804][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  641.599480][   T31] R13: 00007f4e1b416038 R14: 00007f4e1b415fa0 R15: 00007ffe92e3b318
[  641.623539][   T31]  </TASK>
[  641.646622][   T31] 
[  641.646622][   T31] Showing all locks held in the system:
[  641.654467][   T31] 1 lock held by khungtaskd/31:
[  641.826282][   T31]  #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  641.877884][   T31] 2 locks held by getty/5582:
[  641.882869][   T31]  #0: ffff8880379f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  641.956272][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  642.008113][   T31] 1 lock held by syz-executor/5825:
[  642.013382][   T31]  #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  642.092363][   T31] 2 locks held by kworker/0:3/5859:
[  642.106339][   T31]  #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[  642.156421][   T31]  #1: ffffc90003de7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[  642.200935][   T31] 6 locks held by kworker/u10:1/9739:
[  642.236254][   T31]  #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[  642.276817][   T31]  #1: ffffc90006887d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[  642.337594][   T31]  #2: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[  642.366266][   T31]  #3: ffff88807bf030e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330
[  642.405633][   T31]  #4: ffff88807bf02250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x18f/0x330
[  642.442729][   T31]  #5: ffff88806bf03398 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[  642.486310][   T31] 1 lock held by syz.0.1006/10995:
[  642.491630][   T31] 3 locks held by kworker/u10:6/11132:
[  642.516339][   T31]  #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[  642.545041][   T31]  #1: ffffc900051e7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[  642.567643][   T31]  #2: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  642.586555][   T31] 3 locks held by syz.4.1146/11730:
[  642.591799][   T31]  #0: ffff88801c715cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  642.617638][   T31]  #1: ffff88802069a420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  642.638129][   T31]  #2: ffff88807bf02250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50
[  642.666311][   T31] 1 lock held by syz.5.1158/11775:
[  642.671589][   T31]  #0: ffff88805bf9fac8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260
[  642.696810][   T31] 2 locks held by syz.1.1590/13958:
[  642.702261][   T31]  #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  642.736297][   T31]  #1: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  642.757918][   T31] 1 lock held by syz.6.1599/14000:
[  642.763199][   T31]  #0: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[  642.788783][   T31] 1 lock held by syz.5.1607/14033:
[  642.794075][   T31]  #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  642.908931][   T31] 
[  642.911418][   T31] =============================================
[  642.911418][   T31] 
[  642.966373][   T31] NMI backtrace for cpu 0
[  642.966396][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  642.966425][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  642.966431][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  642.966441][   T31] Call Trace:
[  642.966447][   T31]  <TASK>
[  642.966455][   T31]  dump_stack_lvl+0x100/0x190
[  642.966497][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  642.966527][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  642.966554][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  642.966585][   T31]  sys_info+0x141/0x190
[  642.966607][   T31]  watchdog+0xd25/0x1050
[  642.966630][   T31]  ? __pfx_watchdog+0x10/0x10
[  642.966648][   T31]  ? __kthread_parkme+0x18c/0x230
[  642.966670][   T31]  ? kthread+0x13a/0x450
[  642.966692][   T31]  ? __pfx_watchdog+0x10/0x10
[  642.966707][   T31]  kthread+0x370/0x450
[  642.966729][   T31]  ? __pfx_kthread+0x10/0x10
[  642.966754][   T31]  ret_from_fork+0x754/0xd80
[  642.966782][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  642.966810][   T31]  ? __switch_to+0x7b4/0x1120
[  642.966835][   T31]  ? __pfx_kthread+0x10/0x10
[  642.966860][   T31]  ret_from_fork_asm+0x1a/0x30
[  642.966888][   T31]  </TASK>
[  643.595558][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  643.602548][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  643.613344][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  643.618532][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  643.628675][   T31] Call Trace:
[  643.631962][   T31]  <TASK>
[  643.634890][   T31]  dump_stack_lvl+0x100/0x190
[  643.639579][   T31]  vpanic+0x552/0x970
[  643.643562][   T31]  ? __pfx_vpanic+0x10/0x10
[  643.648079][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  643.654245][   T31]  panic+0xd1/0xe0
[  643.657962][   T31]  ? __pfx_panic+0x10/0x10
[  643.662464][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  643.668624][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  643.675092][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  643.681511][   T31]  ? watchdog.cold+0x198/0x1ca
[  643.686302][   T31]  ? watchdog+0xd35/0x1050
[  643.690728][   T31]  watchdog.cold+0x1a9/0x1ca
[  643.695331][   T31]  ? __pfx_watchdog+0x10/0x10
[  643.700213][   T31]  ? __kthread_parkme+0x18c/0x230
[  643.705241][   T31]  ? kthread+0x13a/0x450
[  643.709573][   T31]  ? __pfx_watchdog+0x10/0x10
[  643.714248][   T31]  kthread+0x370/0x450
[  643.718320][   T31]  ? __pfx_kthread+0x10/0x10
[  643.722927][   T31]  ret_from_fork+0x754/0xd80
[  643.727526][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  643.732646][   T31]  ? __switch_to+0x7b4/0x1120
[  643.737425][   T31]  ? __pfx_kthread+0x10/0x10
[  643.742114][   T31]  ret_from_fork_asm+0x1a/0x30
[  643.746974][   T31]  </TASK>
[  643.750068][   T31] Kernel Offset: disabled
[  643.754418][   T31] Rebooting in 86400 seconds..