last executing test programs:

5m40.537518694s ago: executing program 1 (id=655):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x0, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async)
io_uring_setup$auto(0x87, 0x0) (async)
r0 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r0, 0x0, 0x487, 0x0, 0x0) (async)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0)
ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) (async)
statmount$auto(0x0, 0x0, 0x1fe, 0xb) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket(0x10, 0x2, 0x0) (async)
execveat$auto(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=&(0x7f00000000c0)='{\x00', &(0x7f00000003c0)=&(0x7f0000000380)='/proc/self/smaps_rollup\x00', 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x8, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x1]}, 0x1fe, 0x83) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x400002, 0x9400}, 0x80000800}, 0x7, 0x4008)
r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) (async)
read$auto_proc_pid_maps_operations_internal(r4, &(0x7f0000000900)=""/4096, 0x1000) (async)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, 0x0, 0x20103, 0x0)

5m36.885523261s ago: executing program 1 (id=664):
r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x600100, 0x0)
write$auto(r0, &(0x7f00000000c0)='-)\x00', 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
write$auto(0x3, 0x0, 0x7fffffff)
ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0)
mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)

5m36.798123779s ago: executing program 1 (id=666):
r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder1\x00', 0x240, 0x0)
ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39ce")
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socketcall$auto(0x8000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
socket(0x1d, 0x2, 0x7)
getpeername$auto(0x3, 0x0, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b0026bd7000fccbdf250300000004000800100003800c0011800800f2800400030012000100898771f1c19f1779048590828847000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4044}, 0xc800)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000040), r1)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0x4138ae84, &(0x7f0000000080)={0xfc})
close_range$auto(0x2, 0x8, 0x0)

5m36.593751143s ago: executing program 1 (id=670):
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000)
waitid$auto_P_PID(0x1, 0x0, 0xfffffffffffffffc, 0x1, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40)
pread64$auto(0xffffffffffffffff, 0x0, 0x1fffe001, 0xb)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x881, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0)
sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, 0x0)
r2 = socket(0x10, 0x2, 0x4)
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000)
r3 = io_uring_setup$auto(0xa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x80002, 0x0)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002a80)=ANY=[@ANYBLOB="c0130000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf250400000008000500010018b99022f12ee9fb1c7c0100a1130380483c77dc86ee2cd44480d5bb9f5591ff1f21c1e26481a9c29a3da9f571e3c8026e0bd5c7b9878180aa9569d85cca5a7a22771ed6c78d4dafb87e640b693834f88ca2d25951d7a151daba19c2b0fc30054ec51d77424f0cb8610c000f80080030003b29e7ef969cd4e2e14493632d5ab715a45fadecf7cffa06468b6803123301593c9616c506d448e2e516004139c9b6bd22b478b88f2c361276568961d2f87d21fcc296800257c43c3be8f5ca244e347a5765234efc4ce2734df9db5a6f72d4a39b62a24b90b1c22b068ccf66d46313001550296f086e0e90f877678ec8b1ee0dbae375667e54a84d7413dcfc4111ea8473706bbadae62d6c", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="bd303ecfe459de11da30be6e59ee4d3f7490c4c76988999d052bd3b230d560dea924ab4874fd7d45a76a0911d7e8b149cc677b07fb9a4e6ec8c16f5e89b7f9299bb9d8c2af6d56c340a79eea1f21366d0454075245c94388279501a76ba0ccd399fb9912b5a1f077e7c74cd74147e607846f46599e51cc9cdaee83014776b76a29a2b0ca615eaed1103ebb78ce15082234ae659aabe2b6759a053f581f2156efeb569af5eebdf0071132fc6f61f7dde12379ccb464cab6ef8017eca35953244e0d5b8fc3507035213159397f5514ebf47d4e90d9dd2675bfb7b6a40f501722007fdd495b0c000d000900000000000000040001805c8fc1679eef0779d64ccbebd2ffa74688d2ff084bf6fa1456a377686f1e91c515e79dc9bfb314d505b965f11164e291ffbc91eb821b4ce8e10829cc3783253899255906707f5b7ca06dd8ef65017f61b25c8c3ad54971669305fde66cff4b1fe78dbe5fd26e2bf4aeacd601e709c6b63eba5a04b292e08f1be58eec339927e870f46c739d56a797a95e3ed1662f78afe281fc199cfa13a4cd44bd5848b6f5c4a99cd8104c9b0daf6da55c6bdef9fa5c7be79618a73867b7173328f14ef10853f80c52e7e6df444b782ebdd80db24da09e599302a64ec98d4aca7f3df328339df24b639642efe309c599a6b07e48ec55d6732548841834fdb60e16ac803a92279d4c22b2ea6c983dc204004b80000000cc9aaee7819d7862eb1241c67cec717e5e01d7e6f3dfaddbe1c26fd4d11d60fb6d2e127a19b832e802fb45d78dab313516b95532699feddf5f5a8dc7352a7e29c8c2e53c91f02c7194b35b4b96517357d5b93ec0b0ab5428e76b0b311f825f07d748e77008004f0001000080000000"], 0x13c0}, 0x1, 0x0, 0x0, 0x440c0}, 0x80081)
socket(0x2, 0x2, 0x88)
r4 = socket(0x10, 0x2, 0xc)
r5 = socket(0x10, 0x6, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
set_mempolicy$auto(0x1, 0x0, 0x21)
unshare$auto(0x40000080)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)
execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0)

5m36.005603794s ago: executing program 1 (id=672):
readv$auto(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000680), 0x7}, 0x5)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0)
write$auto_tty_fops_tty_io(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x20000001, 0x2, 0x3, 0x0)
r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
r3 = epoll_create$auto(0x4)
r4 = socket(0x2, 0x5, 0x0)
epoll_ctl$auto(r3, 0x1, r4, 0x0)
r5 = epoll_create$auto(0x3e)
epoll_ctl$auto(r5, 0x1, r3, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x60302, 0x0)
futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto_XFS_IOC_FREESP64(r3, 0x40305825, &(0x7f0000000140)={0x3ff, 0xfffd, 0x8, 0x9, 0x1, <r7=>0x0})
getpgrp(r7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x10, 0x0)
r8 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r8, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x1, 0x0)
read$auto(r6, 0x0, 0x800)
ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0)
r9 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf250200000008000200060000800800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

5m35.757000648s ago: executing program 1 (id=673):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x2284, r0)
ioctl$auto_SNDCTL_TMR_METRONOME(r0, 0x40045407, &(0x7f00000001c0)="e8be6f1345b9ab114a526345b0414d086ad9df1f1d93a98aca5127cddfc6f9cd096bf9d661ae57cffb2a40be1bcd88cee176d5f2b01cf70b48c4674615b8570dc5e325024ab4f2eaeb1d16d371e880660352743f385c3bba8644a1ec650d13a6168cf0b1304760bb1f32a74a9e79a5")
socket(0x10, 0xa, 0x4)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x1000020003b49, 0x1, 0x0, 0x0, 0x2)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_udc.1/udc/dummy_udc.1/uevent\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/195, 0xc3)
openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim3/bpf_bind_accept\x00', 0x1a3041, 0x0)
write$auto(0x3, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0x400009, 0x4000000000000df, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
ioctl$auto(r4, 0x400c4d01, r4)
ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, 0x0)
r5 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r5, 0x114, 0xa, 0x0, 0x4)
socket(0x11, 0x3, 0xfffff958)

5m20.549464845s ago: executing program 32 (id=673):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x2284, r0)
ioctl$auto_SNDCTL_TMR_METRONOME(r0, 0x40045407, &(0x7f00000001c0)="e8be6f1345b9ab114a526345b0414d086ad9df1f1d93a98aca5127cddfc6f9cd096bf9d661ae57cffb2a40be1bcd88cee176d5f2b01cf70b48c4674615b8570dc5e325024ab4f2eaeb1d16d371e880660352743f385c3bba8644a1ec650d13a6168cf0b1304760bb1f32a74a9e79a5")
socket(0x10, 0xa, 0x4)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x1000020003b49, 0x1, 0x0, 0x0, 0x2)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_udc.1/udc/dummy_udc.1/uevent\x00', 0x40000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/195, 0xc3)
openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim3/bpf_bind_accept\x00', 0x1a3041, 0x0)
write$auto(0x3, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0x400009, 0x4000000000000df, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
ioctl$auto(r4, 0x400c4d01, r4)
ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, 0x0)
r5 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r5, 0x114, 0xa, 0x0, 0x4)
socket(0x11, 0x3, 0xfffff958)

3m47.876212504s ago: executing program 4 (id=1095):
set_mempolicy$auto(0x6, 0x0, 0x3)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x668342, 0x100)
ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000040)={"8d6a6db7f707a2a4440130a84c3b55bc1c845590eb6def5a875a023737ba1c81", 0x7f, 0x254a, 0x6, 0xfffffffffff00000, 0x4, <r1=>0x0})
fcntl$auto(r0, 0x401, r1)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0)
ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x12bc00, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
semctl$auto(0x8, 0x806, 0x8, 0x46)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/halt_poll_fail_hist\x00', 0xa2500, 0x0)
read$auto_stat_fops_per_vm_kvm_main(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)

3m44.183553283s ago: executing program 4 (id=1108):
write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)

3m43.870736883s ago: executing program 4 (id=1111):
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
r1 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto_SO_SNDLOWAT(r1, 0x0, 0x13, 0x0, 0x0)
read$auto(r0, 0x0, 0x404)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x400000003)
r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0)
ioctl$auto(r3, 0x400454ca, 0x38)
mmap$auto(0x3ff, 0x4020009, 0x10000df, 0xebf, r2, 0x8000)
r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/sg0\x00', 0x101000, 0x0)
process_madvise$auto_MADV_NORMAL(r1, &(0x7f00000001c0)={&(0x7f0000000240)="531bedf42bf4963ec068477080ff926376b948073c3744a1b3526146b0d01a85e700b7a079704aa5f2010bb43013a84682c2bfa9af640441ba2ba18ab28584fb17f0202b2312c8f547af80622a8915ebd0fbd599ba39009043b3cba56cbd5e9e1c606058e59d26330edb1e9ab49e6836d3ec0fa3d6153c817fc53c9dac72da47f9819a3bc70f88f3f63d6a7750a6a23e1b28fe", 0x7}, 0x5, 0x0, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$auto_BLKSECTGET2(r5, 0x1267, 0x200000000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x73)
r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0)
write$auto(0x3, 0x0, 0x100082)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0)
write$auto(0x3, 0x0, 0xfffffffffffffff9)
close_range$auto(0x2, 0x8, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r8, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

3m40.46997526s ago: executing program 4 (id=1124):
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/tdls_wider_bw\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto(0x3, 0x0, 0x7)
r0 = epoll_create1$auto(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFC_CMD_GET_TARGET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40080)
sendmsg$auto_NFC_CMD_DEV_DOWN(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0xf0bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc054}, 0x11)

3m39.44295478s ago: executing program 4 (id=1127):
r0 = openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000003380)={0xfffffffb, 0xb, 0x1, 0x7ff, 0x1, "eb6183a2c44a716ca16333e5d5d5351305a348104d4c2603478adc3fe84e9d879df7cbd09efda00b5ac99df1e1bbb3b8b5c55fcd284101dfb7554a5fbd869d2e", "0aa103434fc7dee45be80fe485a0977a1026393bf2eec447c39915b2aa33b88417240f775d9caf5bc2ce8df08cfcde40c156df5242859e388d35b287edc71aa0318a1964d2bc3e90fbb1535ca82b3e2d", "d34a080600e6ff1a59435c07000000b2ef3309cfb7fb0100000000000500", 0x0, 0x81})
mmap$auto(0x8, 0x1, 0xdf, 0xeb1, r0, 0x200)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async, rerun: 64)
r2 = socket(0x10, 0x2, 0x6) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25110000002c12d64e4dedc62b0642e2f23c57c1a7001e8028005e80080046800400f7801c0010801800278014003f00000000000000000000000000000000015f2e21d0fe982e0fa554206335cbc8f1e09b422e500735c11e0849bc5d920ae3d697ad59a42da655c85c4d80347635e881a9c4aebb1f9cc173d7d51d85aa00"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) (async)
open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async)
mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0xb, 0x0) (async, rerun: 64)
r4 = socket(0x11, 0x80003, 0x300) (rerun: 64)
setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/bus/usb/drivers/ni6501/unbind\x00', 0x121401, 0x0)
write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) (async, rerun: 64)
r6 = socket(0x11, 0x80003, 0x300) (rerun: 64)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
mmap$auto(0x3, 0x8001, 0x62, 0x10, r4, 0x7) (async, rerun: 64)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 32)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) (async, rerun: 32)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb2, 0x40000000000a1, 0x8000) (rerun: 32)
setsockopt$auto(r6, 0x107, 0x12, 0x0, 0x4)

3m36.003551901s ago: executing program 4 (id=1139):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x5, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x5, 0x240007, 0x4)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, 0x0, 0x1)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
r2 = eventfd$auto(0x80)
readv$auto(r2, &(0x7f0000000380)={0x0, 0x8}, 0x8)
read$auto(r2, 0x0, 0xcc9c)
write$auto(r2, &(0x7f0000000400)='\'\x00', 0x8)
getcwd$auto(0x0, 0x3)
openat2$auto(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd)

3m20.862242561s ago: executing program 33 (id=1139):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2b, 0x1, 0x0)
listen$auto(0x3, 0x81)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x5, 0x1, 0x6, 0x3, 0x3ff)
madvise$auto(0x5, 0x240007, 0x4)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, 0x0, 0x1)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
r2 = eventfd$auto(0x80)
readv$auto(r2, &(0x7f0000000380)={0x0, 0x8}, 0x8)
read$auto(r2, 0x0, 0xcc9c)
write$auto(r2, &(0x7f0000000400)='\'\x00', 0x8)
getcwd$auto(0x0, 0x3)
openat2$auto(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd)

2m13.300783996s ago: executing program 2 (id=1435):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto_fragmentation_threshold_ops_(0xffffffffffffffff, 0x0, 0x0)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x20800, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = dup$auto(r1)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto(0x3, 0xae41, 0x38)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'xfrm0\x00'})
ioctl$auto_SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="80918dcac1dd304bfc04bf76372044be65eb6768971d6f2c5bf6f924bb6db769213bcfa5ae04dd082da1ea0d88b8e9b6971bc69b4c04bd9b3c84f59b3a6ab905a7cfdc3919d342d2a0cfe26afff7a3a9f486d1b06733e71a4faf7b744f6ca570961f3299dfd7f539735a06c4b854ef3d0b5dab9c04ce9662e1c17b096478833dc92cadb73195", @ANYRESHEX, @ANYRES32, @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x4888}, 0x20000440)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r4 = syz_clone(0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r4, 0x4, 0x7ff)
ptrace$auto_PTRACE_DETACH(0x11, r4, 0x200000000000004, 0x2000000a)
socket(0xa, 0x1, 0x84)
socket(0x2, 0x1, 0x104)

2m10.951674696s ago: executing program 2 (id=1446):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x11, 0x3, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), r0)
sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)

2m10.682709971s ago: executing program 2 (id=1450):
r0 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x430000, 0x0)
ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000100)={0x0, r0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x853, 0x2000000000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff)
recvmmsg$auto(0x3, 0x0, 0x7, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)

2m10.275633717s ago: executing program 2 (id=1452):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x101000, 0x0)
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$auto_IMDELTIMER(r0, 0x80044941, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x1, 0x106)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sysfs$auto(0x8, 0x1, 0x4)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1)
sendmsg$auto_NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="bda19208cc3bc318ffc21cd8a402b811bd9fc7dbdca198d13e9820f5ae97eb82c4a9f440da7f1e27e99351886eeb65a050b8cac5e6a21d1715b5766fdc008a471cf8e2e77c03000000825371767bdedf541282d0cb7b09bebe6d6c53808b4a03b99e2cc8435ca35e595cfbf458fed042e2f59bddc2be0861888ec1a329c2bf0217b5552c7a4b292b67f092df71fab8980d91c3e6ca6a24e53fa0fff85d31a01d7518dee92965bab47a390ec8868f27a40dcfe807b0ba0bcffdaccdb4fefdf180f90732a3a532d3a4c1ddb12d6cc77974eca94a0549988dcf0d3073d45acee6c1a846cc9f5e0a", @ANYRES16=r4, @ANYBLOB="08002bbd7000fcdbdf253500000008000900c2000000080009000900000014000400766972745f776966693000000000000006009800f9ff000004001e01"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8)
fchmod$auto(r2, 0x8)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd11/queue/rotational\x00', 0xc2902, 0x0)
read$auto(r6, 0x0, 0x20)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
setreuid$auto(0x4, 0x8)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
write$auto(r3, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)

2m8.36163139s ago: executing program 2 (id=1458):
close_range$auto(0xffffffffffffffff, 0x8, 0x3ff)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8400)
timer_create$auto(0x3, 0x0, 0x0)
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0)
mmap$auto(0x0, 0x5, 0xfffffffffffffff7, 0x44eb2, 0x10006, 0x1000)
socket(0xa, 0x1, 0x84)
r0 = ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, &(0x7f0000000240)=0x5)
mmap$auto(0xfd, 0x200, 0x200, 0xfffffffffffffff9, r0, 0xc1f4)
r1 = socket(0x2a, 0x2, 0x8001)
close_range$auto(0xffffffffffffffff, r1, 0xf)
socket(0x15, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/247, 0xf7)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x993, 0xffffffffffffffff, 0x1, 0x948b, 0x4002a1, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0x1]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1, 0x7, 0x1, 0x7ff, 0x3, 0x15f4da0a, 0x1, 0x3, 0x6, 0x80000023, 0x0, 0x0, 0xc, 0x2495dae0, 0x6]}, 0x0)
write$auto_console_fops_tty_io(r4, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000200)=@in={0x2, 0x3, @multicast2}, 0x58)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x101501, 0x0)
socket(0x5, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x80002, 0x73)

2m7.352263121s ago: executing program 2 (id=1463):
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x108000, 0x800032, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r1, 0x0, 0x20)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dri/renderD128\x00', 0x40, 0x0) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dri/renderD128\x00', 0x40, 0x0)
socket(0xb, 0x80000, 0x0) (async)
socket(0xb, 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf)
mmap$auto(0x1, 0x20109, 0x80000003, 0xeb1, r2, 0x40000200)
openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x8000, 0x7fffffff, 0x4000000000df, 0x40eb5, 0xffffffffffffffff, 0x2000300000000000)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0)
select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0)
connect$auto(0x3, 0x0, 0x58) (async)
connect$auto(0x3, 0x0, 0x58)
prctl$auto(0x7, 0x8, 0x0, 0x3ffffffffffd, 0x7fd)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0xa, 0x0)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f)
socket(0x1e, 0x800, 0xfffffffc) (async)
socket(0x1e, 0x800, 0xfffffffc)

1m52.1944679s ago: executing program 34 (id=1463):
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x108000, 0x800032, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r1, 0x0, 0x20)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dri/renderD128\x00', 0x40, 0x0) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dri/renderD128\x00', 0x40, 0x0)
socket(0xb, 0x80000, 0x0) (async)
socket(0xb, 0x80000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf)
mmap$auto(0x1, 0x20109, 0x80000003, 0xeb1, r2, 0x40000200)
openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x8000, 0x7fffffff, 0x4000000000df, 0x40eb5, 0xffffffffffffffff, 0x2000300000000000)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0)
select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0)
connect$auto(0x3, 0x0, 0x58) (async)
connect$auto(0x3, 0x0, 0x58)
prctl$auto(0x7, 0x8, 0x0, 0x3ffffffffffd, 0x7fd)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0xa, 0x0)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r4, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f)
socket(0x1e, 0x800, 0xfffffffc) (async)
socket(0x1e, 0x800, 0xfffffffc)

9.250550134s ago: executing program 3 (id=1858):
msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) (async)
r1 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800})
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100)
close_range$auto(r0, 0x8, 0x0) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
listmount$auto(0x0, 0x0, 0xf4240, 0x0) (async)
unshare$auto(0x40000080) (async)
r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x2003, 0x0)
ioctl$auto(r2, 0x6f2d, r2) (async)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d63882a712, 0x0) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/snd\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x7)

6.165194117s ago: executing program 5 (id=1867):
waitid$auto_P_ALL(0x0, 0xb90a, &(0x7f0000000000)={@_si_pad}, 0x6, &(0x7f0000000100)={{0xfffffffffffffffa, 0xffff}, {0x1, 0x1}, 0x4, 0xab, 0x6, 0x1, 0x10, 0x4, 0x9, 0xfffffffffffffff7, 0x5, 0x4, 0xac3, 0x2, 0xfffffffffffffffc, 0x1})
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/fs/orangefs/ccache/reclaim_percentage\x00', 0x8a401, 0x0)
write$auto(r0, &(0x7f0000000080)='+\x00\\\xa0\xe2\xff\xaa8nr\xec\x13Dy\xe9\xd2-\xec\xb7F\x92\x05\x1e\xfa\x1c\x80\xc2);\x11\xfemdV\x9cc\x8e\x88A\xb7(\xcc\x04\xff;k\xa5\x1b=yYp4-\x89\x189\xba<\x83\xee\xc4&-\x81\xa8\x98\xaf\xaac\x06g\x84\x9e\x9f\x00\x00\x00\x00\xfed\xfdvT,', 0x82)
socket(0x11, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/security/tomoyo/stat\x00', 0x74000, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000380)="f0e4b2c8e6bfdd0b34d50f0e94b76316f6ca81f607b580a2f8db11b2af01c15828f826be94e7033f38e99aa577a11302b324232b951ff7116cfe1f1d267092d718000d2a2e70033c1a2410e8439f1b8933552bcbf7e6f9cb21635389ec1623317801b94b7aa1ece11f504e1a4d373c1370002a6b5d12e6dca728b260d45d3fd7d0e88fc8bd36a1126d677c3c6b7079125bb600c5b068a991b009eddf0d04bea93588dacbd7142a6fd461a2f9f937ae927b7caf7bce29c8ecb7f01c57b0028cf601292fc543376d255a9724b56b89311e47f2233bfafe", 0xd6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x2c, r5, 0x6c5679fc7dece1a9, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x4000}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x20008010)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r2, 0x1, 0x70bd2d, 0x25dfdbfa, {}, [@HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044820)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0xfffffdef)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8)
ioctl$auto(0x3, 0x402c542b, 0x38)
openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x106)

5.150885476s ago: executing program 6 (id=1872):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0x0, 0x75c0237c}, 0x0, 0x200)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a)
socket$nl_generic(0x10, 0x3, 0x10)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

4.982401251s ago: executing program 5 (id=1873):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$auto(0x0, 0x0)
io_uring_setup$auto(0x7e1b, 0x0)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
read$auto(0x3, 0x0, 0x7fffffff)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/blkio.bfq.io_wait_time\x00', 0x40000, 0x0)
socket(0x2c, 0x800, 0x2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/195, 0xc3)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)

4.948734439s ago: executing program 6 (id=1874):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
setns(r0, 0x24020000)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
newfstatat$auto(r1, 0x0, 0x0, 0x1000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0)
read$auto(r2, 0x0, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x401, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x7fff, 0x6, 0xa3, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x4, 0x7, 0x0, 0x0, 0x52d2, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc)
r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, &(0x7f00000001c0))
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
madvise$auto(0x0, 0x200204, 0x15)
mincore$auto(0x0, 0x10007f, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
wait4$auto(0x0, 0x0, 0xc, &(0x7f00000004c0)={{0x8000000000000000, 0x6}, {0x208, 0x5}, 0xffffffffffff0001, 0x8d4, 0x1, 0x6, 0x3, 0xfffffffffffffffb, 0x4, 0x8, 0x8, 0x9f0, 0x8, 0xfffffffffffffffe, 0x9, 0x2})
shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f0000000680)={{0xc, 0xee00, 0x0, 0x5, 0x0, 0x10000, 0x90}, 0x9, 0x631, 0x8, 0x7, @inferred, @inferred, 0x3, 0x0, &(0x7f0000000400)="b69eaf360b9d493bd8a82a", 0x0})
waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000700)={@_si_pad}, 0x1, &(0x7f0000000780)={{0x3c8}, {0x8, 0x5d}, 0x3, 0x3, 0x0, 0x1, 0x0, 0x40, 0x2, 0x4, 0x2, 0x0, 0x2, 0x61130532, 0x9, 0xba})
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

4.780063244s ago: executing program 3 (id=1875):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4004054)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = socket(0x2a, 0x2, 0x1)
connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) (async)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket(0xa, 0x801, 0x84) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) (rerun: 64)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 64)
ioctl$auto(0x3, 0x4048aec9, r3) (async, rerun: 64)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000)

4.340782315s ago: executing program 3 (id=1877):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1ff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x538f8bff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '}m\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0x844)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

4.19912209s ago: executing program 3 (id=1878):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x0, 0xdf, 0x9a72, 0x2, 0x8000)
read$auto_fragmentation_threshold_ops_(0xffffffffffffffff, 0x0, 0x0)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x20800, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = dup$auto(r0)
ioctl$auto(0x3, 0xae41, 0x38)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'xfrm0\x00'})
ioctl$auto_SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="80918dcac1dd304bfc04bf76372044be65eb6768971d6f2c5bf6f924bb6db769213bcfa5ae04dd082da1ea0d88b8e9b6971bc69b4c04bd9b3c84f59b3a6ab905a7cfdc3919d342d2a0cfe26afff7a3a9f486d1b06733e71a4faf7b744f6ca570961f3299dfd7f539735a06c4b854ef3d0b5dab9c04ce9662e1c17b096478833dc92cadb731955e", @ANYRESHEX, @ANYRES32=r3, @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4888}, 0x20000440)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'})
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf2503000000900005806941014a3895c4322cd3ed695412bfd874660cc7b9ff2bab035c0ec408c7e1ee78eeb3d1a4f1609c3a84bfdcebeac1ee9aef5f11a8186a5c2d49dae25cba7d282fe734d61813942a9235bc10d61c961b262d6a17110cae46715261b9c267663d2eec6eea7a253e6615c4e4f5180fe3e05bc54568388485e2c426097016c45a6e426dcf150800b680040038806c00058008003e00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00c30002000000000000000000a8000000f7bed07d6a9f4228abf42202ed8b0ccb9405e6e492ca9a5210e341b565b764c7c885d25a5dd1ec819dc4bca83015079a1252f54b457a68052ab32fec01cf8e891a2eb0f21cbb2f9b5910bd1fd4e9c376ff9e60bb7a23d4fb586f7324445eaec1021d08d93f71a6626185b206eb429b833eacdff787c17fe815559eb0133960523e56630cce25304c1ba9bc64891318ea8af6384a9c2930fd92c7518ac4ab44cfe6084add"], 0x1b8}, 0x1, 0x0, 0x0, 0x40810}, 0x10)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x8, 0x1)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c9bba26aaf61baca6a5fffffffffffffff762aaefae4529097c8b8ea9ffbf7d73a210dabd4a84f89f52ba4fa8e6fe", @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)

4.156785171s ago: executing program 6 (id=1879):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0x0, 0x75c0237c}, 0x0, 0x200)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)

4.023584326s ago: executing program 6 (id=1880):
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0xa243, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0xa243, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) (async)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf)
ppoll$auto(&(0x7f0000000180)={r2, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) (async)
ppoll$auto(&(0x7f0000000180)={r2, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8)
open(&(0x7f0000000100)='./file0\x00', 0x4801, 0x17f) (async)
open(&(0x7f0000000100)='./file0\x00', 0x4801, 0x17f)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4)
read$auto(r4, &(0x7f0000000000)='\x00', 0x91e2)
write$auto(0xffffffffffffffff, 0x0, 0xfffe)
pivot_root$auto(0x0, 0x0)
unshare$auto(0x40000080)
mprotect$auto(0x110c230000, 0x1, 0x2)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x60c62, 0x0)
pread64$auto(r5, 0x0, 0x1ff, 0x8800000000)
mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0)
read$auto_rng_chrdev_ops_core(0xffffffffffffffff, 0x0, 0x0)
timer_create$auto(0x3, 0x0, 0x0)

3.894723634s ago: executing program 5 (id=1881):
times$auto(&(0x7f0000000000)={0x1000, 0x81, 0xb, 0x2})
times$auto(&(0x7f0000000040)={0x6, 0x1, 0x81, 0x400})
r0 = fcntl$auto_F_WRLCK(0xffffffffffffffff, 0x0, 0x1)
ioctl$auto_USBDEVFS_DISCARDURB(r0, 0x550b, 0x0)
r1 = socket(0x2a, 0x4, 0x1)
times$auto(&(0x7f0000000080)={0x8, 0x1, 0x4, 0x6})
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0)
msgctl$auto_IPC_RMID(0x8, 0x0, &(0x7f00000003c0)={{0x0, <r3=>0xee01, <r4=>0xffffffffffffffff, 0x2, 0x2, 0x7fffffff, 0x4}, &(0x7f0000000340)=0x9, 0x0, 0x6, 0x101, 0x7fffffff, 0xf, 0x6, 0x3, 0x0, 0x9, @inferred=<r5=>0xffffffffffffffff, @raw=0x1})
sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000440)={0x117c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_MASK={0xc3, 0x7, 0x0, 0x1, [@generic="8d02766eedfceb4634e18f16dcca260c840e39cd79eaf5db1d746cc5f67dccf16db2724a0123d63636a1a14f597d28d886950506b557d65b6f9b4852e8e66d7942271d889049ad47d0a07cc074540c706541ac4a55fe75b79d6e1ec2ec743d9015bfa0c7cd5b57e1e8acb66b73982469abe16c048cefc17595c70dd44c12b0813b28b5a9ea357ac8099520d1145ee6e01b02a4cb206ec21b63151c27fa70b982252d1bd059b715eabd67af9baf6a8aa937b0a49d79c47224a9a844", @typed={0x4, 0x5a, 0x0, 0x0, @binary}]}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x3}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x4, 0x92}, @nested={0x14, 0x71, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x75}]}]}, @OVS_FLOW_ATTR_MASK={0x1078, 0x7, 0x0, 0x1, [@nested={0x1057, 0x9d, 0x0, 0x1, [@generic="e3b2c6fff0ff7128c5d1ecf1d647842b27296717956c765684bc20ab81892904aba37fc61dbcd9da92aa317143d563d5a9cc39a586b999c0f86c3207e1812aef9eefdeca552b79d6079097d86f55ff6a45a2220cf1b529787af277c500d8f03016c6c9338db10c60ac3e2d75daed5baf53747e830f49f5b42d00f1447743acae3f6d120f22971062d26bf04bbb4e123868925d0fb5fe020a8aa14f6d0ef63accbbc1def08a2aa6b93e01004e5751c5ab58e3877acd589b528b23ae568e26e01e5cabfac8a2175815f7170c9bc325624127a1d9a29ad0c08d0aad81250f04037ea9dd8d38b08c39553adfa0fa42693e1c937da54e6e8caeebac64", @generic="566aa36c89f689bf2fb57c9ee769a91e9e426e4d62cf440a61c58480a87ec1e8463577e8ace1453e48de67f817be2112eccdca7dffc1d590a727f9dad878df0fb5fcb134e0e3cd9da57f6a3b40c8f6760cca40262e01d4d4bb0910196873a5eec7b78f951790366cbbd1f8c3d99f9585ac7338fe", @typed={0xdf4, 0x42, 0x0, 0x0, @binary="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"}, @typed={0x4, 0xe0}, @generic="8aedb2bd4ba4fb373f20e0b32b06ae23dfbc5bd32704d924b52819c6733f1beaac3eb4b9ff6d54eca4d134ca695ff7ba675ed680bfb7d24c6f0c821793421b06f63100157c75faa2cb283ec15890641a407de307ded383b3c8b5daffb9a7406670b55849e615cdab73f3fe15479c8d7b4adc63eaff1665be3dbc203fa2cc8d2eb2663a07cb73d487d30c9ead3c4a7babcb1a641997210135df8dcb4d2535709fa9d0a24bf0b60c39908c603fb2162bb1d7f796d8462d9f4fb9e7080bf45b17998a8a93c9c6443fa592220f54575252c6050e41d1793a74a2c8c9b749b4e74e34fd61c74f6b148509a69cb359ea"]}, @typed={0x8, 0x11a, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0xc2, 0x0, 0x0, @uid}, @nested={0xc, 0x132, 0x0, 0x1, [@nested={0x4, 0x134}, @nested={0x4, 0xd9}]}]}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x117c}, 0x1, 0x0, 0x0, 0x48010}, 0x20000040)
futimesat$auto(r0, 0x0, &(0x7f0000001dc0)={0x218, 0x5})
fcntl$auto_F_SETPIPE_SZ(r0, 0x407, 0x8)
times$auto(0x0)
openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000001e40), 0x48000, 0x0)
ioctl$auto_SG_SET_COMMAND_Q2(r0, 0x2271, &(0x7f0000001e80)="3f03477edc0daf6f11c6295740")
r6 = socket(0x8, 0x5, 0x7)
r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001ec0)='/proc/irq/12/smp_affinity\x00', 0x80101, 0x0)
ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000001f40)={0x9, &(0x7f0000001f00)={0x27, 0x5, 0x9, @inferred=<r8=>r7}})
r9 = ioctl$auto_TUNGETVNETLE2(r8, 0x800454dd, &(0x7f0000001f80)=0x28f)
ioctl$auto_SOUND_MIXER_READ_RECSRC(r9, 0x80044dff, &(0x7f0000001fc0)="c71240bbb34ea178230e49b016e3b5842c9a40b777baa6857c2562cce1e3901f2c73a4566531b08ef34e29e05d3f48dd86726e186100e844bbb1d10f1b6b3c9b65ae34fbd422fef00744e4c6af77")
times$auto(&(0x7f0000002040)={0x477e, 0x5, 0xa0, 0xd1fe})
ioctl$auto_BLKTRACESETUP2(r9, 0xc0481273, &(0x7f0000002080)={"3608951520a8a84894a627aeb9d575fb4df40df6733eb673c25608b2a58cabf1", 0x0, 0x1c, 0x2, 0xb, 0xf5, <r10=>r5})
capset$auto(&(0x7f0000002100)={0x7, r10}, &(0x7f0000002140)={0x8000, 0x3, 0xfff})
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000021c0), r6)
r11 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002200)='/dev/cec1\x00', 0x80000, 0x0)
msgctl$auto_IPC_SET(0x33, 0x1, &(0x7f00000037c0)={{0x8, r3, r4, 0xd7, 0x2, 0x9}, &(0x7f0000003740)=0xd0, &(0x7f0000003780)=0x6, 0x1, 0x9, 0xfffffffffffffff9, 0x9, 0x4, 0x1, 0x7, 0x2, @raw, @inferred=r10})
set_tid_address$auto(&(0x7f0000003840)=0x7)
sendmsg$auto_SMC_PNETID_FLUSH(r11, &(0x7f0000003bc0)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b00)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, ']\'(-\x00'}, @SMC_PNETID_ETHNAME={0x9, 0x2, ']\'(-\x00'}, @SMC_PNETID_NAME={0x8, 0x1, '(&\xb5\x00'}, @SMC_PNETID_NAME={0x5, 0x1, '\x00'}, @SMC_PNETID_NAME={0xd, 0x1, 'ovs_flow\x00'}, @SMC_PNETID_IBNAME={0x8, 0x3, '-[\\\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000045)

3.686787424s ago: executing program 5 (id=1883):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0x0, 0x75c0237c}, 0x0, 0x200)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2.3027829s ago: executing program 0 (id=1884):
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
io_uring_setup$auto(0x4, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fstat$auto(r1, 0x0)
setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
r2 = socket(0x28, 0x5, 0x0)
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r2)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x3a, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x7, 0x80000006, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, [0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xc2c, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1]}, 0x1fe, 0xe)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1.855644156s ago: executing program 0 (id=1885):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r0 = socket(0x10, 0x2, 0x0)
r1 = semctl$auto_GETPID(0x9, 0x400, 0xb, 0x1)
capset$auto(&(0x7f0000000000)={0x4, r1}, &(0x7f0000000040)={0x238, 0x8})
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4008)

1.646622299s ago: executing program 6 (id=1886):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getcwd$auto(0x0, 0x7) (async)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) (async)
connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x54) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mbind$auto(0xf000, 0xfffffffffffffffa, 0x100002002, 0x0, 0x3cc033db, 0x2)
r0 = socket(0x1e, 0x1, 0xfffffeff) (async)
socket(0xa, 0x801, 0x106)
mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
write$auto(0x1, 0x0, 0x80000000)
r1 = semctl$auto(0x800, 0xa26, 0x9, 0x1)
r2 = fcntl$auto(0x0, 0x407, r1)
mmap$auto(0x0, 0xe983, 0x3, 0xcb1, r2, 0x8000) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
mmap$auto(0x10002, 0x302000a, 0x6, 0x16, r0, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0)
read$auto(r3, 0x0, 0x6) (async)
ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) (async)
sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x1000c0d5) (async)
io_uring_setup$auto(0x6, 0x0) (async)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) (async)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x84080, 0x0)

1.520518641s ago: executing program 0 (id=1887):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800)
r0 = socket(0x10, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1ff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x538f8bff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '}m\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0x844)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1.43951764s ago: executing program 5 (id=1888):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0x0, 0x75c0237c}, 0x0, 0x200)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)

1.224784087s ago: executing program 5 (id=1889):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto_fragmentation_threshold_ops_(0xffffffffffffffff, 0x0, 0x0)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:7/wb_stats\x00', 0x20800, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = dup$auto(r1)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto(0x3, 0xae41, 0x38)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'xfrm0\x00'})
ioctl$auto_SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="80918dcac1dd304bfc04bf76372044be65eb6768971d6f2c5bf6f924bb6db769213bcfa5ae04dd082da1ea0d88b8e9b6971bc69b4c04bd9b3c84f59b3a6ab905a7cfdc3919d342d2a0cfe26afff7a3a9f486d1b06733e71a4faf7b744f6ca570961f3299dfd7f539735a06c4b854ef3d0b5dab9c04ce9662e1c17b096478833dc92cadb731955e", @ANYRESHEX, @ANYRES32=r4, @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0x4888}, 0x20000440)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'})
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
r5 = syz_clone(0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r5, 0x4, 0x7ff)
ptrace$auto_PTRACE_DETACH(0x11, r5, 0x200000000000004, 0x2000000a)
socket(0xa, 0x1, 0x84)
socket(0x2, 0x1, 0x104)

1.127077708s ago: executing program 0 (id=1890):
socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/dev_snmp6/bridge_slave_0\x00', 0x402, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000040)=""/27, 0x1b)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
unshare$auto(0x400)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0xfffffffffffff761, 0x103, 0xa, 0x4, 0x7fff, 0x5, 0x4006]}, 0x0, 0x0) (async)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0xfffffffffffff761, 0x103, 0xa, 0x4, 0x7fff, 0x5, 0x4006]}, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0xffffffff) (async)
socket(0xa, 0x2, 0xffffffff)
pipe$auto(0x0)
fcntl$auto(0x8000000000000001, 0x26, 0x2) (async)
r1 = fcntl$auto(0x8000000000000001, 0x26, 0x2)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r2 = socket(0x29, 0x2, 0x14)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
setsockopt$auto(r1, 0x1004, 0xc8, 0x0, 0x567)
sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc091) (async)
sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0xc091)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
close_range$auto(0x2, 0xa, 0x0) (async)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55) (async)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff5f5ffffff00"}, 0x55)
getsockopt$auto_SO_INCOMING_NAPI_ID(0xffffffffffffffff, 0x101, 0x38, &(0x7f0000000000)='nl80211\x00', &(0x7f0000000080)=0x401)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0) (async)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0)
sendfile$auto(0x1, r3, 0x0, 0x1f)
setsockopt$auto_SO_MARK(0xffffffffffffffff, 0xdd, 0x24, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0xc01) (async)
setsockopt$auto_SO_MARK(0xffffffffffffffff, 0xdd, 0x24, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0xc01)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(r2, 0x0, 0x3d55, 0x0)

662.786522ms ago: executing program 0 (id=1891):
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0)
r0 = getegid()
r1 = landlock_create_ruleset$auto(0x0, 0x0, 0x2)
write$auto_console_fops_tty_io(r1, &(0x7f0000000280)="40ecea0b5003551f9c8291baaba72e3a9e16", 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
msgctl$auto(0x8, 0x8, &(0x7f0000000180)={{0x8, <r2=>0xffffffffffffffff, r0, 0x7ff, 0x2, 0x4c4, 0x2}, 0x0, &(0x7f0000000140)=0x2, 0x8, 0x8000, 0x96e, 0x5, 0x8, 0x7, 0x6c, 0x3, @raw=0x9, @raw=0x7})
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, 0x0)
shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000380)={{0x0, r2, r0, 0x8, 0xc0000000, 0x81, 0xc}, 0x80000000, 0x4, 0x3, 0x7, @inferred, @raw=0x4, 0xfd8c, 0x0, &(0x7f00000002c0), 0x0})
mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
write$auto(0x3, 0x0, 0xfdef)
bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xfffffff8, 0x8, 0xae85, 0xffffffffffffffff, 0x4, 0x7ff}, 0x6f4)

577.925702ms ago: executing program 3 (id=1892):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ram1\x00', 0x0, 0x0)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x1c1041, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
setfsuid$auto(0xee00)
setfsuid$auto(0xee01)
sendfile$auto(r0, 0x3, 0x0, 0x7ffff000)

1.412405ms ago: executing program 0 (id=1893):
mmap$auto(0x0, 0x2, 0xe6, 0xeb5, 0xffffffffffffffff, 0x1)
socket(0x1d, 0x3, 0x1)
mmap$auto(0x1, 0x2000d, 0x4, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x732882, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x3, 0x5, 0x3)
write$auto(0x1, 0x0, 0x80000000)
close_range$auto(r0, 0xa, 0x0)
write$auto(0xca, 0x0, 0x2b)
setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x100006)
r1 = socket(0xa, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2046, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r2, &(0x7f0000000a00)="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", 0x628)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0029, 0x8017)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
readlinkat$auto(0x1, 0x0, 0x0, 0x16a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/test_nop_accept\x00', 0x18504, 0x0)
close_range$auto(0x2, r1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
pipe$auto(&(0x7f0000001480))
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/cifs/cifsFYI\x00', 0x20100, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x8000)

846.425µs ago: executing program 6 (id=1894):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x100010008000)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB, @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
mmap$auto(0x0, 0x400008, 0xdf, 0x209b72, 0x2, 0x6)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x5, 0x4, 0xc)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0)
fstat$auto(r0, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x4610, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0)
sendfile$auto(r3, r3, 0x0, 0x6)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xa, 0xfffffffffffffffe]}, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
getpid()
close_range$auto(0x2, 0x8, 0x0)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='\\#*\x00', 0x10000)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="010027bd671ddcffdf250400fe8367000004001e00000000000000000000000000b406b4d43bac3534438c56a9725f4307218371251f42d85a664b9f546e338fdbdc4c5bd0ae9161", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0x40)
setpriority$auto(0x2, 0x0, 0x80000)
prctl$auto(0x41, 0xfffffffffffffffa, 0x0, 0x0, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)

0s ago: executing program 3 (id=1895):
mmap$auto(0x0, 0x2020006, 0x0, 0xeb1, 0xfffffffffffffffa, 0x1)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
write$auto(r1, 0x0, 0xfffffdef)
r2 = syz_clone(0x2000000, &(0x7f0000000000)="40db62602238b38a5cf8d5809e10303165d761be24007057c138b87d9cda53ed8e09e672e79dccdc65d0389469a8f880e7f502faf98c89ceca6bc247ad31cf975c34f055189d4dd7dcf1723469994a69a73e40362f99465bba8ba7054fe4c2882730", 0x62, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="9e61864b14420ea3f4875a5b1cb8ea542e5fe53a713aa6ff10363dd9dc7fa29b9250ffe646a507f3d8c55b4a4267e759981fdaca162513b7723dffad8460a9c07e7de19857e54acfb7625db19896543123cfc96365ed8f3000071408e40b93cc0484c92ef8c7bfa8a2b2c6afeb6b82ccb59d1d85bc5d6c917d49ff13a58733f8d01f901dbcd839aa9de467cd3304e84a928c283ba4cc30088950604c4d98ffe5b824025eeba6a2bcd245b8aae645778518e4001aa7a3e374a9830ec243aedb3201953660910a6f5d39cb6ecc")
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x1f40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x17, 0xa, '/proc/self/oom_adj\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044890}, 0x90)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={"237659f60f47e3f56f0328146ea639b7348681a5e8f87b123334a3b302d07ee6", 0x8, 0x2, 0x256, 0xffffffffffffffff, 0x6, r2})

kernel console output (not intermixed with test programs):

[  501.220713][T13592]  ops_undo_list+0x2ee/0xab0
[  501.233203][T13592]  cleanup_net+0x41b/0x830
[  501.243586][T13592]  process_one_work+0x9ba/0x1b20
[  501.254349][T13592]  worker_thread+0x6c8/0xf10
[  501.264450][T13592]  kthread+0x3c5/0x780
[  501.274128][T13592]  ret_from_fork+0x983/0xb10
[  501.284598][T13592]  ret_from_fork_asm+0x1a/0x30
[  501.927185][T13613] futex_wake_op: syz.6.1511 tries to shift op by -2048; fix this program
[  502.512692][T13631] netlink: 'syz.5.1543': attribute type 1 has an invalid length.
[  503.037754][T13638] NFSD: Failed to start, no listeners configured.
[  505.085802][T13688] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  505.140570][T13688] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  505.306189][T13688] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  505.485105][T13688] page_type: f5(slab)
[  505.533329][T13688] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  505.712351][T13682] ERROR: Out of memory at tomoyo_memory_ok.
[  505.739703][T13688] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  505.857115][T13688] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  505.986888][T13688] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  506.059055][T13688] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  506.129354][T13688] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  506.187279][T13688] page dumped because: unmovable page
[  506.218515][T13688] page_owner tracks the page as allocated
[  506.251545][T13715] ERROR: Out of memory at tomoyo_memory_ok.
[  506.263289][T13688] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  506.305043][T13715] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/279/:,' not defined.
[  506.376931][T13688]  post_alloc_hook+0x1af/0x220
[  506.397620][T13688]  get_page_from_freelist+0xd0b/0x31a0
[  506.431707][T13688]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  506.483246][T13688]  alloc_pages_mpol+0x1fb/0x550
[  506.512154][T13688]  new_slab+0x2c3/0x430
[  506.541612][T13688]  ___slab_alloc+0xe18/0x1c90
[  506.566303][T13688]  __slab_alloc.constprop.0+0x63/0x110
[  506.604575][T13688]  __kmalloc_noprof+0x4fc/0x910
[  506.630943][T13688]  tomoyo_realpath_from_path+0xc2/0x6e0
[  506.660691][T13688]  tomoyo_path_number_perm+0x245/0x580
[  506.695766][T13688]  tomoyo_path_mknod+0x10c/0x190
[  506.727105][T13688]  security_path_mknod+0x161/0x310
[  506.759007][T13688]  lookup_open.isra.0+0xc10/0x1780
[  506.782944][T13688]  path_openat+0xa95/0x3140
[  506.806891][T13688]  do_filp_open+0x20b/0x470
[  506.824956][T13688]  do_sys_openat2+0x121/0x290
[  506.843572][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  506.850724][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  506.869096][T13688] page last free pid 8428 tgid 8428 stack trace:
[  506.896789][T13688]  __free_frozen_pages+0x7df/0x1170
[  506.922356][T13688]  __put_partials+0x130/0x170
[  506.945747][T13688]  qlist_free_all+0x4c/0xf0
[  506.965688][T13688]  kasan_quarantine_reduce+0x195/0x1e0
[  506.991526][T13688]  __kasan_slab_alloc+0x69/0x90
[  507.015969][T13688]  kmem_cache_alloc_node_noprof+0x298/0x800
[  507.041438][T13688]  __alloc_skb+0x156/0x410
[  507.079894][T13688]  inet_netconf_notify_devconf+0x8b/0x1f0
[  507.109558][T13688]  devinet_exit_net+0x11f/0x2c0
[  507.147109][T13688]  ops_undo_list+0x2ee/0xab0
[  507.164557][T13688]  cleanup_net+0x41b/0x830
[  507.169046][T13688]  process_one_work+0x9ba/0x1b20
[  507.207027][T13688]  worker_thread+0x6c8/0xf10
[  507.229756][T13688]  kthread+0x3c5/0x780
[  507.233887][T13688]  ret_from_fork+0x983/0xb10
[  507.269605][T13688]  ret_from_fork_asm+0x1a/0x30
[  507.548992][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'.
[  507.592640][T13735] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1556'.
[  508.540130][T13759] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1562'.
[  508.609579][T13759] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1562'.
[  508.909867][T13764] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[  509.508601][T13773] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  509.631684][T13773] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  509.787534][T13773] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  509.944427][T13773] page_type: f5(slab)
[  510.030359][T13773] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  510.171200][T13782] nbd: must specify at least one socket
[  510.179653][T13773] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  510.269127][T13782] FAULT_INJECTION: forcing a failure.
[  510.269127][T13782] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  510.331734][T13773] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  510.401210][T13782] CPU: 0 UID: 0 PID: 13782 Comm: syz.5.1567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  510.401236][T13782] Tainted: [L]=SOFTLOCKUP
[  510.401242][T13782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  510.401251][T13782] Call Trace:
[  510.401256][T13782]  <TASK>
[  510.401263][T13782]  dump_stack_lvl+0x16c/0x1f0
[  510.401289][T13782]  should_fail_ex+0x512/0x640
[  510.401308][T13782]  _copy_from_user+0x2e/0xd0
[  510.401323][T13782]  move_addr_to_kernel+0x65/0x170
[  510.401338][T13782]  __sys_sendto+0x1be/0x520
[  510.401357][T13782]  ? __pfx___sys_sendto+0x10/0x10
[  510.401378][T13782]  ? fd_install+0x223/0x570
[  510.401403][T13782]  ? __pfx___sys_socket+0x10/0x10
[  510.401415][T13782]  ? xfd_validate_state+0x61/0x180
[  510.401431][T13782]  __x64_sys_sendto+0xe0/0x1c0
[  510.401445][T13782]  ? do_syscall_64+0x91/0xf80
[  510.401463][T13782]  ? lockdep_hardirqs_on+0x7c/0x110
[  510.401481][T13782]  do_syscall_64+0xcd/0xf80
[  510.401500][T13782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.401514][T13782] RIP: 0033:0x7fe1a019165c
[  510.401526][T13782] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  510.401539][T13782] RSP: 002b:00007fe1a0fb2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  510.401553][T13782] RAX: ffffffffffffffda RBX: 00007fe1a0fb2fc0 RCX: 00007fe1a019165c
[  510.401562][T13782] RDX: 0000000000000020 RSI: 00007fe1a0fb3010 RDI: 0000000000000005
[  510.401570][T13782] RBP: 0000000000000000 R08: 00007fe1a0fb2f14 R09: 000000000000000c
[  510.401578][T13782] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  510.401586][T13782] R13: 00007fe1a0fb2f68 R14: 00007fe1a0fb3010 R15: 0000000000000000
[  510.401604][T13782]  </TASK>
[  511.383799][T13773] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  511.421879][T13773] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  511.461189][T13773] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  511.501730][T13773] page dumped because: unmovable page
[  511.529502][T13773] page_owner tracks the page as allocated
[  511.564467][T13773] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  511.651776][T13773]  post_alloc_hook+0x1af/0x220
[  511.656659][T13773]  get_page_from_freelist+0xd0b/0x31a0
[  511.689365][T13773]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  511.709777][T13773]  alloc_pages_mpol+0x1fb/0x550
[  511.731981][T13773]  new_slab+0x2c3/0x430
[  511.773174][T13773]  ___slab_alloc+0xe18/0x1c90
[  511.809559][T13773]  __slab_alloc.constprop.0+0x63/0x110
[  511.825531][T13773]  __kmalloc_noprof+0x4fc/0x910
[  511.852052][T13773]  tomoyo_realpath_from_path+0xc2/0x6e0
[  511.878030][T13773]  tomoyo_path_number_perm+0x245/0x580
[  511.904304][T13773]  tomoyo_path_mknod+0x10c/0x190
[  511.921968][T13773]  security_path_mknod+0x161/0x310
[  511.949358][T13773]  lookup_open.isra.0+0xc10/0x1780
[  511.971989][T13773]  path_openat+0xa95/0x3140
[  512.005234][T13773]  do_filp_open+0x20b/0x470
[  512.009843][T13773]  do_sys_openat2+0x121/0x290
[  512.045416][T13773] page last free pid 8428 tgid 8428 stack trace:
[  512.069086][T13773]  __free_frozen_pages+0x7df/0x1170
[  512.092053][T13773]  __put_partials+0x130/0x170
[  512.117364][T13773]  qlist_free_all+0x4c/0xf0
[  512.121953][T13773]  kasan_quarantine_reduce+0x195/0x1e0
[  512.160771][T13773]  __kasan_slab_alloc+0x69/0x90
[  512.225350][T13773]  kmem_cache_alloc_node_noprof+0x298/0x800
[  512.231323][T13773]  __alloc_skb+0x156/0x410
[  512.291596][T13773]  inet_netconf_notify_devconf+0x8b/0x1f0
[  512.353334][T13773]  devinet_exit_net+0x11f/0x2c0
[  512.395643][T13773]  ops_undo_list+0x2ee/0xab0
[  512.451509][T13773]  cleanup_net+0x41b/0x830
[  512.480064][T13773]  process_one_work+0x9ba/0x1b20
[  512.525618][T13773]  worker_thread+0x6c8/0xf10
[  512.582008][T13773]  kthread+0x3c5/0x780
[  512.611101][T13773]  ret_from_fork+0x983/0xb10
[  512.643458][T13773]  ret_from_fork_asm+0x1a/0x30
[  513.509115][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'.
[  513.556208][T13804] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1572'.
[  514.144785][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'.
[  514.204619][T13819] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1576'.
[  514.275590][T13821] sp0: Synchronizing with TNC
[  514.340794][T13821] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  516.438268][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1583'.
[  517.017330][T13854] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  517.235699][T13854] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  517.454746][T13854] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  517.716883][T13865] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  517.778692][T13854] page_type: f5(slab)
[  517.837367][T13854] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  518.162490][T13854] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  518.241717][ T5842] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  518.344097][T13854] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  518.385321][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  518.385349][ T5842] Tainted: [L]=SOFTLOCKUP
[  518.385354][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  518.385363][ T5842] Call Trace:
[  518.385368][ T5842]  <TASK>
[  518.385375][ T5842]  dump_stack_lvl+0x16c/0x1f0
[  518.385400][ T5842]  dump_header+0x101/0x960
[  518.385418][ T5842]  oom_kill_process+0x176/0x910
[  518.385435][ T5842]  out_of_memory+0x350/0x1700
[  518.385451][ T5842]  ? __lock_acquire+0x436/0x2890
[  518.385467][ T5842]  ? __pfx_out_of_memory+0x10/0x10
[  518.385487][ T5842]  mem_cgroup_out_of_memory+0x118/0x130
[  518.385504][ T5842]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  518.385525][ T5842]  ? do_raw_spin_unlock+0x172/0x230
[  518.385544][ T5842]  try_charge_memcg+0x695/0xd30
[  518.385569][ T5842]  ? __pfx_try_charge_memcg+0x10/0x10
[  518.385594][ T5842]  ? find_held_lock+0x2b/0x80
[  518.385621][ T5842]  charge_memcg+0x8a/0x230
[  518.385642][ T5842]  mem_cgroup_swapin_charge_folio+0xeb/0x470
[  518.385659][ T5842]  __read_swap_cache_async+0x397/0x500
[  518.385679][ T5842]  ? __pfx___read_swap_cache_async+0x10/0x10
[  518.385696][ T5842]  ? finish_task_switch.isra.0+0x202/0xbd0
[  518.385717][ T5842]  ? rcu_is_watching+0x12/0xc0
[  518.385735][ T5842]  ? finish_task_switch.isra.0+0x207/0xbd0
[  518.385753][ T5842]  ? lockdep_hardirqs_on+0x7c/0x110
[  518.385775][ T5842]  swap_cluster_readahead+0x432/0x770
[  518.385796][ T5842]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  518.385815][ T5842]  ? __lock_acquire+0x436/0x2890
[  518.385836][ T5842]  ? get_vma_policy+0x242/0x3c0
[  518.385850][ T5842]  swapin_readahead+0x160/0x1220
[  518.385874][ T5842]  ? __pfx_swapin_readahead+0x10/0x10
[  518.385891][ T5842]  ? find_held_lock+0x2b/0x80
[  518.385906][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  518.385921][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  518.385935][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  518.385952][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  518.385967][ T5842]  ? swap_cache_get_folio+0x293/0x8e0
[  518.385983][ T5842]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  518.385998][ T5842]  ? __pfx_get_swap_device+0x10/0x10
[  518.386017][ T5842]  ? rcu_read_unlock+0x2d/0xb0
[  518.386036][ T5842]  ? do_swap_page+0x962/0x64a0
[  518.386048][ T5842]  do_swap_page+0x962/0x64a0
[  518.386065][ T5842]  ? __lock_acquire+0x436/0x2890
[  518.386083][ T5842]  ? __pfx_do_swap_page+0x10/0x10
[  518.386099][ T5842]  ? __pfx_default_wake_function+0x10/0x10
[  518.386119][ T5842]  ? rcu_is_watching+0x12/0xc0
[  518.386136][ T5842]  ? __free_object+0x286/0x410
[  518.386157][ T5842]  ? rcu_is_watching+0x12/0xc0
[  518.386175][ T5842]  ? ___pte_offset_map+0x175/0x380
[  518.386197][ T5842]  __handle_mm_fault+0x19cb/0x2bb0
[  518.386215][ T5842]  ? reacquire_held_locks+0xcd/0x1f0
[  518.386228][ T5842]  ? __pfx___handle_mm_fault+0x10/0x10
[  518.386245][ T5842]  ? lock_vma_under_rcu+0x176/0x580
[  518.386266][ T5842]  ? get_timespec64+0x136/0x1b0
[  518.386284][ T5842]  handle_mm_fault+0x3fe/0xad0
[  518.386302][ T5842]  do_user_addr_fault+0x60c/0x1370
[  518.386321][ T5842]  ? rcu_is_watching+0x12/0xc0
[  518.386342][ T5842]  exc_page_fault+0x64/0xc0
[  518.386361][ T5842]  asm_exc_page_fault+0x26/0x30
[  518.386374][ T5842] RIP: 0033:0x7fa6eadc2088
[  518.386387][ T5842] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  518.386401][ T5842] RSP: 002b:00007ffd9da20990 EFLAGS: 00010293
[  518.386412][ T5842] RAX: 0000000000000000 RBX: 000000000000047b RCX: 00007fa6eadc2085
[  518.386422][ T5842] RDX: 00007ffd9da209d0 RSI: 0000000000000000 RDI: 0000000000000000
[  518.386430][ T5842] RBP: 00007ffd9da20a3c R08: 0000000000000000 R09: 0000000000000000
[  518.386439][ T5842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  518.386447][ T5842] R13: 00000000000927c0 R14: 000000000007e1ce R15: 00007ffd9da20a90
[  518.386466][ T5842]  </TASK>
[  518.394769][T13854] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  519.928364][ T5842] memory: usage 3072kB, limit 3072kB, failcnt 155459
[  519.935112][ T5842] memory+swap: usage 7608kB, limit 9007199254740988kB, failcnt 0
[  519.986121][ T5842] kmem: usage 2944kB, limit 9007199254740988kB, failcnt 0
[  520.006117][ T5842] Memory cgroup stats for /syz3:
[  520.006214][ T5842] cache 0
[  520.044096][ T5842] rss 0
[  520.047236][ T5842] rss_huge 0
[  520.050454][ T5842] shmem 0
[  520.053389][ T5842] mapped_file 0
[  520.087844][ T5842] dirty 0
[  520.090858][ T5842] writeback 0
[  520.094230][ T5842] workingset_refault_anon 17004
[  520.120766][ T5842] workingset_refault_file 20114
[  520.146127][ T5842] swap 4644864
[  520.149688][ T5842] swapcached 131072
[  520.153537][ T5842] pgpgin 307479
[  520.173732][ T5842] pgpgout 313068
[  520.186171][ T5842] pgfault 233817
[  520.196562][ T5842] pgmajfault 8318
[  520.210668][ T5842] inactive_anon 0
[  520.214373][ T5842] active_anon 131072
[  520.240875][ T5842] inactive_file 0
[  520.250972][ T5842] active_file 0
[  520.254468][ T5842] unevictable 0
[  520.271181][ T5842] hierarchical_memory_limit 3145728
[  520.288483][ T5842] hierarchical_memsw_limit 9223372036854771712
[  520.308692][ T5842] total_cache 0
[  520.312219][ T5842] total_rss 0
[  520.349156][ T5842] total_rss_huge 0
[  520.352936][ T5842] total_shmem 0
[  520.377179][ T5842] total_mapped_file 0
[  520.386536][ T5842] total_dirty 0
[  520.390073][ T5842] total_writeback 0
[  520.416334][ T5842] total_workingset_refault_anon 17004
[  520.421794][ T5842] total_workingset_refault_file 20114
[  520.456354][ T5842] total_swap 4644864
[  520.471360][ T5842] total_swapcached 131072
[  520.475759][ T5842] total_pgpgin 307479
[  520.506369][ T5842] total_pgpgout 313068
[  520.520697][ T5842] total_pgfault 233817
[  520.531037][ T5842] total_pgmajfault 8318
[  520.540881][ T5842] total_inactive_anon 0
[  520.545077][ T5842] total_active_anon 131072
[  520.561169][ T5842] total_inactive_file 0
[  520.571281][ T5842] total_active_file 0
[  520.582155][ T5842] total_unevictable 0
[  520.588798][ T5842] anon_cost 413
[  520.595789][ T5842] file_cost 0
[  520.603873][ T5842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1307,pid=12424,uid=0
[  520.634640][ T5842] Memory cgroup out of memory: Killed process 12424 (syz.3.1307) total-vm:110632kB, anon-rss:1264kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  520.910235][T13854] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  520.968032][T13854] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  521.019701][T13854] page dumped because: unmovable page
[  521.153335][T13854] page_owner tracks the page as allocated
[  521.174107][T13877] type: 4278190080 invalid
[  521.180202][T13854] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  521.330620][T13854]  post_alloc_hook+0x1af/0x220
[  521.351640][T13854]  get_page_from_freelist+0xd0b/0x31a0
[  521.382088][T13854]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  521.419636][T13854]  alloc_pages_mpol+0x1fb/0x550
[  521.462413][T13854]  new_slab+0x2c3/0x430
[  521.491991][T13854]  ___slab_alloc+0xe18/0x1c90
[  521.506142][T13890] : Can't lookup blockdev
[  521.523332][T13854]  __slab_alloc.constprop.0+0x63/0x110
[  521.558533][T13854]  __kmalloc_noprof+0x4fc/0x910
[  521.587056][T13854]  tomoyo_realpath_from_path+0xc2/0x6e0
[  521.626396][T13854]  tomoyo_path_number_perm+0x245/0x580
[  521.652771][T13854]  tomoyo_path_mknod+0x10c/0x190
[  521.690596][T13854]  security_path_mknod+0x161/0x310
[  521.723571][T13854]  lookup_open.isra.0+0xc10/0x1780
[  521.756665][T13854]  path_openat+0xa95/0x3140
[  521.798324][T13854]  do_filp_open+0x20b/0x470
[  521.828478][T13854]  do_sys_openat2+0x121/0x290
[  521.857329][T13854] page last free pid 8428 tgid 8428 stack trace:
[  521.884033][T13854]  __free_frozen_pages+0x7df/0x1170
[  521.897916][T13854]  __put_partials+0x130/0x170
[  521.903183][T13854]  qlist_free_all+0x4c/0xf0
[  521.908892][T13854]  kasan_quarantine_reduce+0x195/0x1e0
[  521.915745][T13854]  __kasan_slab_alloc+0x69/0x90
[  521.921079][T13854]  kmem_cache_alloc_node_noprof+0x298/0x800
[  521.928010][T13854]  __alloc_skb+0x156/0x410
[  521.932656][T13854]  inet_netconf_notify_devconf+0x8b/0x1f0
[  521.938937][T13854]  devinet_exit_net+0x11f/0x2c0
[  521.943955][T13854]  ops_undo_list+0x2ee/0xab0
[  521.949072][T13854]  cleanup_net+0x41b/0x830
[  521.953565][T13854]  process_one_work+0x9ba/0x1b20
[  521.958993][T13854]  worker_thread+0x6c8/0xf10
[  521.963737][T13854]  kthread+0x3c5/0x780
[  521.969575][T13854]  ret_from_fork+0x983/0xb10
[  521.974282][T13854]  ret_from_fork_asm+0x1a/0x30
[  522.172158][T10538] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.416671][T13896] NFSD: Failed to start, no listeners configured.
[  522.429320][T10538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.616699][T10538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.831728][T10538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.020125][T10538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.514593][T10538] bridge_slave_1: left allmulticast mode
[  523.565877][T10538] bridge_slave_1: left promiscuous mode
[  523.625499][T10538] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.662874][T10538] bridge_slave_0: left allmulticast mode
[  523.702429][T10538] bridge_slave_0: left promiscuous mode
[  523.731368][T10538] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.064365][T13942] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  525.126877][T13942] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  525.239911][T13942] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  525.339596][T13942] page_type: f5(slab)
[  525.357055][T13942] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  525.407556][T13942] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  525.436842][T10538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  525.489872][T10538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  525.507725][T13942] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  525.543751][T13942] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  525.554358][T10538] bond0 (unregistering): Released all slaves
[  525.590861][T13942] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  525.649214][T13942] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  525.699132][T10538] tipc: Left network mode
[  525.715257][T13942] page dumped because: unmovable page
[  525.762194][T13942] page_owner tracks the page as allocated
[  525.803436][T13942] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  525.894379][T13942]  post_alloc_hook+0x1af/0x220
[  525.901463][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'.
[  525.921556][T13942]  get_page_from_freelist+0xd0b/0x31a0
[  525.940639][T13942]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  525.946564][T13942]  alloc_pages_mpol+0x1fb/0x550
[  525.976729][T13942]  new_slab+0x2c3/0x430
[  525.992131][T13942]  ___slab_alloc+0xe18/0x1c90
[  525.996849][T13942]  __slab_alloc.constprop.0+0x63/0x110
[  526.032125][T13942]  __kmalloc_noprof+0x4fc/0x910
[  526.050317][T13942]  tomoyo_realpath_from_path+0xc2/0x6e0
[  526.072264][T13942]  tomoyo_path_number_perm+0x245/0x580
[  526.077755][T13942]  tomoyo_path_mknod+0x10c/0x190
[  526.110884][T13942]  security_path_mknod+0x161/0x310
[  526.135745][T13942]  lookup_open.isra.0+0xc10/0x1780
[  526.153037][T13942]  path_openat+0xa95/0x3140
[  526.171759][T13942]  do_filp_open+0x20b/0x470
[  526.188203][T13942]  do_sys_openat2+0x121/0x290
[  526.205364][T13942] page last free pid 8428 tgid 8428 stack trace:
[  526.238716][T13942]  __free_frozen_pages+0x7df/0x1170
[  526.261070][T13942]  __put_partials+0x130/0x170
[  526.282164][T13942]  qlist_free_all+0x4c/0xf0
[  526.299647][T13942]  kasan_quarantine_reduce+0x195/0x1e0
[  526.322711][T13942]  __kasan_slab_alloc+0x69/0x90
[  526.342239][T13942]  kmem_cache_alloc_node_noprof+0x298/0x800
[  526.365563][T13942]  __alloc_skb+0x156/0x410
[  526.383464][T13942]  inet_netconf_notify_devconf+0x8b/0x1f0
[  526.404788][T13942]  devinet_exit_net+0x11f/0x2c0
[  526.426435][T13942]  ops_undo_list+0x2ee/0xab0
[  526.443445][T13942]  cleanup_net+0x41b/0x830
[  526.462785][T13942]  process_one_work+0x9ba/0x1b20
[  526.481058][T13942]  worker_thread+0x6c8/0xf10
[  526.498987][T13942]  kthread+0x3c5/0x780
[  526.515629][T13942]  ret_from_fork+0x983/0xb10
[  526.525732][T13942]  ret_from_fork_asm+0x1a/0x30
[  527.758033][T10538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.796260][T10538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.827558][T10538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.857092][T10538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.968397][T10538] veth1_macvtap: left promiscuous mode
[  527.997236][T10538] veth0_macvtap: left promiscuous mode
[  528.022785][T10538] veth1_vlan: left promiscuous mode
[  528.043696][T10538] veth0_vlan: left promiscuous mode
[  529.115241][T13995] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  529.145619][T13995] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  529.175864][T13995] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  529.255048][T13995] page_type: f5(slab)
[  529.259100][T13995] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  529.319245][T14001] FAULT_INJECTION: forcing a failure.
[  529.319245][T14001] name failslab, interval 1, probability 0, space 0, times 0
[  529.341894][T13995] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  529.353118][T14001] CPU: 0 UID: 0 PID: 14001 Comm: syz.6.1613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  529.353143][T14001] Tainted: [L]=SOFTLOCKUP
[  529.353149][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  529.353159][T14001] Call Trace:
[  529.353164][T14001]  <TASK>
[  529.353170][T14001]  dump_stack_lvl+0x16c/0x1f0
[  529.353197][T14001]  should_fail_ex+0x512/0x640
[  529.353213][T14001]  ? __kmalloc_cache_noprof+0x5f/0x800
[  529.353231][T14001]  should_failslab+0xc2/0x120
[  529.353251][T14001]  __kmalloc_cache_noprof+0x80/0x800
[  529.353267][T14001]  ? kernfs_fop_open+0x244/0xda0
[  529.353300][T14001]  ? kernfs_fop_open+0x244/0xda0
[  529.353319][T14001]  kernfs_fop_open+0x244/0xda0
[  529.353344][T14001]  do_dentry_open+0x748/0x1590
[  529.353363][T14001]  ? __pfx_kernfs_fop_open+0x10/0x10
[  529.353387][T14001]  vfs_open+0x82/0x3f0
[  529.353404][T14001]  path_openat+0x2078/0x3140
[  529.353429][T14001]  ? __pfx_path_openat+0x10/0x10
[  529.353454][T14001]  do_filp_open+0x20b/0x470
[  529.353473][T14001]  ? __pfx_do_filp_open+0x10/0x10
[  529.353505][T14001]  ? alloc_fd+0x471/0x7d0
[  529.353529][T14001]  do_sys_openat2+0x121/0x290
[  529.353544][T14001]  ? __pfx_do_sys_openat2+0x10/0x10
[  529.353565][T14001]  __x64_sys_openat+0x174/0x210
[  529.353580][T14001]  ? __pfx___x64_sys_openat+0x10/0x10
[  529.353603][T14001]  do_syscall_64+0xcd/0xf80
[  529.353623][T14001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.353637][T14001] RIP: 0033:0x7ff95ff8f7c9
[  529.353649][T14001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.353663][T14001] RSP: 002b:00007ff960e7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  529.353677][T14001] RAX: ffffffffffffffda RBX: 00007ff9601e5fa0 RCX: 00007ff95ff8f7c9
[  529.353687][T14001] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c
[  529.353695][T14001] RBP: 00007ff960013f91 R08: 0000000000000000 R09: 0000000000000000
[  529.353703][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.353711][T14001] R13: 00007ff9601e6038 R14: 00007ff9601e5fa0 R15: 00007fffdffc9578
[  529.353730][T14001]  </TASK>
[  529.651909][T13995] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  529.660975][T13995] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  529.669925][T13995] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  529.678755][T13995] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  529.687480][T13995] page dumped because: unmovable page
[  529.693210][T13995] page_owner tracks the page as allocated
[  529.699639][T13995] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  529.719985][T13995]  post_alloc_hook+0x1af/0x220
[  529.724814][T13995]  get_page_from_freelist+0xd0b/0x31a0
[  529.730361][T13995]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  529.736480][T13995]  alloc_pages_mpol+0x1fb/0x550
[  529.741515][T13995]  new_slab+0x2c3/0x430
[  529.745787][T13995]  ___slab_alloc+0xe18/0x1c90
[  529.750493][T13995]  __slab_alloc.constprop.0+0x63/0x110
[  529.756349][T13995]  __kmalloc_noprof+0x4fc/0x910
[  529.761487][T13995]  tomoyo_realpath_from_path+0xc2/0x6e0
[  529.767285][T13995]  tomoyo_path_number_perm+0x245/0x580
[  529.772901][T13995]  tomoyo_path_mknod+0x10c/0x190
[  529.778005][T13995]  security_path_mknod+0x161/0x310
[  529.783327][T13995]  lookup_open.isra.0+0xc10/0x1780
[  529.788634][T13995]  path_openat+0xa95/0x3140
[  529.793269][T13995]  do_filp_open+0x20b/0x470
[  529.798144][T13995]  do_sys_openat2+0x121/0x290
[  529.811347][T13995] page last free pid 8428 tgid 8428 stack trace:
[  529.820571][T13995]  __free_frozen_pages+0x7df/0x1170
[  529.826041][T13995]  __put_partials+0x130/0x170
[  529.830926][T13995]  qlist_free_all+0x4c/0xf0
[  529.835659][T13995]  kasan_quarantine_reduce+0x195/0x1e0
[  529.841263][T13995]  __kasan_slab_alloc+0x69/0x90
[  529.846181][T13995]  kmem_cache_alloc_node_noprof+0x298/0x800
[  529.852291][T13995]  __alloc_skb+0x156/0x410
[  529.862046][T13995]  inet_netconf_notify_devconf+0x8b/0x1f0
[  529.883072][T13995]  devinet_exit_net+0x11f/0x2c0
[  529.931214][T13995]  ops_undo_list+0x2ee/0xab0
[  529.935959][T13995]  cleanup_net+0x41b/0x830
[  529.965665][T13995]  process_one_work+0x9ba/0x1b20
[  529.985159][T13995]  worker_thread+0x6c8/0xf10
[  529.998696][T13995]  kthread+0x3c5/0x780
[  530.002915][T13995]  ret_from_fork+0x983/0xb10
[  530.008195][T13995]  ret_from_fork_asm+0x1a/0x30
[  530.039515][T14009] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  530.048736][T14009] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  530.058200][T14009] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  530.076179][T14009] page_type: f5(slab)
[  530.081270][T14009] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  530.090144][T14009] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  530.106308][T14009] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  530.130785][T14009] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  530.151173][T14009] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  530.172188][T14009] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  530.191548][T14009] page dumped because: unmovable page
[  530.218547][T14009] page_owner tracks the page as allocated
[  530.238851][T14009] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  530.266377][T14009]  post_alloc_hook+0x1af/0x220
[  530.272354][T14009]  get_page_from_freelist+0xd0b/0x31a0
[  530.277987][T14009]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  530.284622][T14009]  alloc_pages_mpol+0x1fb/0x550
[  530.289706][T14009]  new_slab+0x2c3/0x430
[  530.295782][T14009]  ___slab_alloc+0xe18/0x1c90
[  530.300581][T14009]  __slab_alloc.constprop.0+0x63/0x110
[  530.307094][T14009]  __kmalloc_noprof+0x4fc/0x910
[  530.312253][T14009]  tomoyo_realpath_from_path+0xc2/0x6e0
[  530.318706][T14009]  tomoyo_path_number_perm+0x245/0x580
[  530.324624][T14009]  tomoyo_path_mknod+0x10c/0x190
[  530.329723][T14009]  security_path_mknod+0x161/0x310
[  530.335348][T14009]  lookup_open.isra.0+0xc10/0x1780
[  530.340732][T14009]  path_openat+0xa95/0x3140
[  530.345649][T14009]  do_filp_open+0x20b/0x470
[  530.350341][T14009]  do_sys_openat2+0x121/0x290
[  530.355455][T14009] page last free pid 8428 tgid 8428 stack trace:
[  530.363641][T14009]  __free_frozen_pages+0x7df/0x1170
[  530.369004][T14009]  __put_partials+0x130/0x170
[  530.380139][T14009]  qlist_free_all+0x4c/0xf0
[  530.385002][T14009]  kasan_quarantine_reduce+0x195/0x1e0
[  530.390754][T14009]  __kasan_slab_alloc+0x69/0x90
[  530.396209][T14009]  kmem_cache_alloc_node_noprof+0x298/0x800
[  530.404949][T14009]  __alloc_skb+0x156/0x410
[  530.410164][T14009]  inet_netconf_notify_devconf+0x8b/0x1f0
[  530.417293][T14009]  devinet_exit_net+0x11f/0x2c0
[  530.422584][T14009]  ops_undo_list+0x2ee/0xab0
[  530.427419][T14009]  cleanup_net+0x41b/0x830
[  530.432343][T14009]  process_one_work+0x9ba/0x1b20
[  530.437539][T14009]  worker_thread+0x6c8/0xf10
[  530.442506][T14009]  kthread+0x3c5/0x780
[  530.446645][T14009]  ret_from_fork+0x983/0xb10
[  530.451996][T14009]  ret_from_fork_asm+0x1a/0x30
[  530.518353][T10538] team0 (unregistering): Port device team_slave_1 removed
[  530.575250][T10538] team0 (unregistering): Port device team_slave_0 removed
[  531.964209][T14040] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  532.081755][T14040] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  532.158029][T14040] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  532.310056][T14040] page_type: f5(slab)
[  532.356610][T14040] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  532.530978][T14040] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  532.605030][T14040] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  532.708168][T14040] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  532.892686][T14040] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  532.901391][T14040] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  532.970102][T14040] page dumped because: unmovable page
[  533.004540][T14040] page_owner tracks the page as allocated
[  533.026471][T14040] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  533.111746][T14040]  post_alloc_hook+0x1af/0x220
[  533.121845][T14040]  get_page_from_freelist+0xd0b/0x31a0
[  533.134255][T14040]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  533.148035][T14040]  alloc_pages_mpol+0x1fb/0x550
[  533.160181][T14040]  new_slab+0x2c3/0x430
[  533.170227][T14040]  ___slab_alloc+0xe18/0x1c90
[  533.181458][T14040]  __slab_alloc.constprop.0+0x63/0x110
[  533.196729][T14040]  __kmalloc_noprof+0x4fc/0x910
[  533.206420][T14040]  tomoyo_realpath_from_path+0xc2/0x6e0
[  533.217803][T14040]  tomoyo_path_number_perm+0x245/0x580
[  533.223854][T14040]  tomoyo_path_mknod+0x10c/0x190
[  533.229187][T14040]  security_path_mknod+0x161/0x310
[  533.235240][T14040]  lookup_open.isra.0+0xc10/0x1780
[  533.241238][T14040]  path_openat+0xa95/0x3140
[  533.246220][T14040]  do_filp_open+0x20b/0x470
[  533.250929][T14040]  do_sys_openat2+0x121/0x290
[  533.256451][T14040] page last free pid 8428 tgid 8428 stack trace:
[  533.263144][T14040]  __free_frozen_pages+0x7df/0x1170
[  533.271529][T14070] __vm_enough_memory: pid: 14070, comm: syz.3.1622, bytes: 4398046511104 not enough memory for the allocation
[  533.286010][T14040]  __put_partials+0x130/0x170
[  533.291154][T14040]  qlist_free_all+0x4c/0xf0
[  533.297676][T14040]  kasan_quarantine_reduce+0x195/0x1e0
[  533.310185][T14040]  __kasan_slab_alloc+0x69/0x90
[  533.317582][T14040]  kmem_cache_alloc_node_noprof+0x298/0x800
[  533.324181][T14040]  __alloc_skb+0x156/0x410
[  533.328844][T14040]  inet_netconf_notify_devconf+0x8b/0x1f0
[  533.335067][T14040]  devinet_exit_net+0x11f/0x2c0
[  533.340155][T14040]  ops_undo_list+0x2ee/0xab0
[  533.345885][T14040]  cleanup_net+0x41b/0x830
[  533.350553][T14040]  process_one_work+0x9ba/0x1b20
[  533.356043][T14040]  worker_thread+0x6c8/0xf10
[  533.360797][T14040]  kthread+0x3c5/0x780
[  533.365202][T14040]  ret_from_fork+0x983/0xb10
[  533.375400][T14040]  ret_from_fork_asm+0x1a/0x30
[  534.838951][T14091] syz.3.1626 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[  534.958705][T14091] CPU: 0 UID: 0 PID: 14091 Comm: syz.3.1626 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  534.958730][T14091] Tainted: [L]=SOFTLOCKUP
[  534.958735][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  534.958744][T14091] Call Trace:
[  534.958751][T14091]  <TASK>
[  534.958757][T14091]  dump_stack_lvl+0x16c/0x1f0
[  534.958782][T14091]  dump_header+0x101/0x960
[  534.958801][T14091]  oom_kill_process+0x176/0x910
[  534.958818][T14091]  out_of_memory+0x350/0x1700
[  534.958834][T14091]  ? __lock_acquire+0x436/0x2890
[  534.958851][T14091]  ? __pfx_out_of_memory+0x10/0x10
[  534.958871][T14091]  mem_cgroup_out_of_memory+0x118/0x130
[  534.958888][T14091]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  534.958909][T14091]  ? do_raw_spin_unlock+0x172/0x230
[  534.958928][T14091]  try_charge_memcg+0x695/0xd30
[  534.958953][T14091]  ? __pfx_try_charge_memcg+0x10/0x10
[  534.958973][T14091]  ? peak_open+0x41/0x50
[  534.958988][T14091]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[  534.959008][T14091]  obj_cgroup_charge_account+0x336/0x670
[  534.959039][T14091]  __memcg_slab_post_alloc_hook+0x2e3/0x880
[  534.959068][T14091]  __kmalloc_node_track_caller_noprof+0x6e3/0x930
[  534.959088][T14091]  ? neigh_sysctl_register+0xb2/0x670
[  534.959111][T14091]  ? kmemdup_noprof+0x29/0x60
[  534.959126][T14091]  kmemdup_noprof+0x29/0x60
[  534.959142][T14091]  neigh_sysctl_register+0xb2/0x670
[  534.959161][T14091]  ? __pfx_neigh_sysctl_register+0x10/0x10
[  534.959178][T14091]  ? inetdev_init+0x245/0x580
[  534.959190][T14091]  ? inetdev_event+0xc32/0x1870
[  534.959201][T14091]  ? notifier_call_chain+0xbc/0x3e0
[  534.959225][T14091]  ? copy_net_ns+0x351/0x7c0
[  534.959244][T14091]  ? create_new_namespaces+0x3ea/0xab0
[  534.959260][T14091]  ? unshare_nsproxy_namespaces+0xc0/0x1f0
[  534.959278][T14091]  ? ksys_unshare+0x45b/0xa40
[  534.959298][T14091]  ? __x64_sys_unshare+0x31/0x40
[  534.959309][T14091]  ? do_syscall_64+0xcd/0xf80
[  534.959328][T14091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.959344][T14091]  devinet_sysctl_register+0xb6/0x200
[  534.959360][T14091]  inetdev_init+0x2b8/0x580
[  534.959374][T14091]  inetdev_event+0xc32/0x1870
[  534.959389][T14091]  ? ib_netdevice_event+0xfc/0x330
[  534.959406][T14091]  ? __pfx_inetdev_event+0x10/0x10
[  534.959420][T14091]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  534.959444][T14091]  notifier_call_chain+0xbc/0x3e0
[  534.959463][T14091]  ? __pfx_inetdev_event+0x10/0x10
[  534.959480][T14091]  call_netdevice_notifiers_info+0xbe/0x110
[  534.959503][T14091]  register_netdevice+0x1792/0x21d0
[  534.959527][T14091]  ? __pfx_register_netdevice+0x10/0x10
[  534.959551][T14091]  ? __pfx_loopback_net_init+0x10/0x10
[  534.959567][T14091]  register_netdev+0x34/0x50
[  534.959586][T14091]  loopback_net_init+0x7a/0x170
[  534.959602][T14091]  ? __pfx_loopback_net_init+0x10/0x10
[  534.959616][T14091]  ops_init+0x1e2/0x5f0
[  534.959641][T14091]  setup_net+0x11d/0x3a0
[  534.959659][T14091]  ? __pfx_setup_net+0x10/0x10
[  534.959676][T14091]  ? lockdep_init_map_type+0x5c/0x270
[  534.959690][T14091]  ? mutex_init_lockep+0x110/0x150
[  534.959707][T14091]  copy_net_ns+0x351/0x7c0
[  534.959734][T14091]  create_new_namespaces+0x3ea/0xab0
[  534.959757][T14091]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  534.959778][T14091]  ksys_unshare+0x45b/0xa40
[  534.959799][T14091]  ? __pfx_ksys_unshare+0x10/0x10
[  534.959822][T14091]  ? do_user_addr_fault+0x843/0x1370
[  534.959843][T14091]  __x64_sys_unshare+0x31/0x40
[  534.959856][T14091]  do_syscall_64+0xcd/0xf80
[  534.959876][T14091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.959890][T14091] RIP: 0033:0x7fa6ead8f7c9
[  534.959903][T14091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.959917][T14091] RSP: 002b:00007fa6ebc2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  534.959931][T14091] RAX: ffffffffffffffda RBX: 00007fa6eafe5fa0 RCX: 00007fa6ead8f7c9
[  534.959940][T14091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  534.959949][T14091] RBP: 00007fa6eae13f91 R08: 0000000000000000 R09: 0000000000000000
[  534.959958][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.959966][T14091] R13: 00007fa6eafe6038 R14: 00007fa6eafe5fa0 R15: 00007ffd9da20678
[  534.959985][T14091]  </TASK>
[  534.959992][T14091] memory: usage 3072kB, limit 3072kB, failcnt 160106
[  535.626549][T14115] sg_write: data in/out 14745563/34144 bytes for SCSI command 0x0-- guessing data in;
[  535.626549][T14115]    program syz.0.1629 not setting count and/or reply_len properly
[  536.256531][T14091] memory+swap: usage 3256kB, limit 9007199254740988kB, failcnt 0
[  536.294810][T14091] kmem: usage 2816kB, limit 9007199254740988kB, failcnt 0
[  536.322227][T14091] Memory cgroup stats for /syz3:
[  536.322357][T14091] cache 0
[  536.341470][T14091] rss 0
[  536.360946][T14091] rss_huge 0
[  536.373048][T14091] shmem 0
[  536.385946][T14091] mapped_file 0
[  536.399597][T14091] dirty 0
[  536.409229][T14091] writeback 0
[  536.412530][T14091] workingset_refault_anon 17714
[  536.440387][T14091] workingset_refault_file 20114
[  536.458053][T14091] swap 188416
[  536.464890][T14091] swapcached 122880
[  536.485660][T14091] pgpgin 312493
[  536.493822][T14091] pgpgout 318084
[  536.503947][T14091] pgfault 239255
[  536.508232][T14091] pgmajfault 8753
[  536.517363][T14091] inactive_anon 0
[  536.521005][T14091] active_anon 122880
[  536.544967][T14091] inactive_file 0
[  536.548728][T14091] active_file 0
[  536.555794][T14091] unevictable 0
[  536.563835][T14091] hierarchical_memory_limit 3145728
[  536.575134][T14091] hierarchical_memsw_limit 9223372036854771712
[  536.588015][T14091] total_cache 0
[  536.596029][T14091] total_rss 0
[  536.602650][T14091] total_rss_huge 0
[  536.610990][T14091] total_shmem 0
[  536.624880][T14091] total_mapped_file 0
[  536.633351][T14091] total_dirty 0
[  536.643919][T14091] total_writeback 0
[  536.651395][T14091] total_workingset_refault_anon 17714
[  536.664213][T14091] total_workingset_refault_file 20114
[  536.676228][T14091] total_swap 188416
[  536.684544][T14091] total_swapcached 122880
[  536.693324][T14091] total_pgpgin 312493
[  536.702111][T14091] total_pgpgout 318084
[  536.710736][T14091] total_pgfault 239255
[  536.720771][T14091] total_pgmajfault 8753
[  536.730305][T14091] total_inactive_anon 0
[  536.740033][T14091] total_active_anon 122880
[  536.753031][T14091] total_inactive_file 0
[  536.762006][T14091] total_active_file 0
[  536.771010][T14091] total_unevictable 0
[  536.779431][T14091] anon_cost 408
[  536.782917][T14091] file_cost 0
[  536.794224][T14091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1626,pid=14090,uid=0
[  536.828439][T14091] Memory cgroup out of memory: Killed process 14090 (syz.3.1626) total-vm:98592kB, anon-rss:1268kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  538.232022][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1638'.
[  538.384224][T14156] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  538.534812][T14156] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  538.625321][T14156] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  538.632897][T14156] page_type: f5(slab)
[  538.851702][T14156] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  538.946887][T14156] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  539.087921][T14156] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  539.219280][T14156] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  539.335689][T14156] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  539.458622][T14156] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  539.535419][T14189] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1646'.
[  539.549077][T14156] page dumped because: unmovable page
[  539.554468][T14156] page_owner tracks the page as allocated
[  539.668532][T14156] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  539.865947][T14156]  post_alloc_hook+0x1af/0x220
[  539.898999][T14156]  get_page_from_freelist+0xd0b/0x31a0
[  539.936987][T14156]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  539.976652][T14156]  alloc_pages_mpol+0x1fb/0x550
[  540.014129][T14156]  new_slab+0x2c3/0x430
[  540.048717][T14156]  ___slab_alloc+0xe18/0x1c90
[  540.096378][T14156]  __slab_alloc.constprop.0+0x63/0x110
[  540.130472][T14156]  __kmalloc_noprof+0x4fc/0x910
[  540.169481][T14156]  tomoyo_realpath_from_path+0xc2/0x6e0
[  540.214951][T14156]  tomoyo_path_number_perm+0x245/0x580
[  540.254254][T14156]  tomoyo_path_mknod+0x10c/0x190
[  540.296758][T14156]  security_path_mknod+0x161/0x310
[  540.328858][T14156]  lookup_open.isra.0+0xc10/0x1780
[  540.366209][T14156]  path_openat+0xa95/0x3140
[  540.395971][T14156]  do_filp_open+0x20b/0x470
[  540.420271][T14156]  do_sys_openat2+0x121/0x290
[  540.446222][T14156] page last free pid 8428 tgid 8428 stack trace:
[  540.504239][T14156]  __free_frozen_pages+0x7df/0x1170
[  540.525339][T14156]  __put_partials+0x130/0x170
[  540.561435][T14156]  qlist_free_all+0x4c/0xf0
[  540.600249][T14156]  kasan_quarantine_reduce+0x195/0x1e0
[  540.638745][T14156]  __kasan_slab_alloc+0x69/0x90
[  540.666884][T14156]  kmem_cache_alloc_node_noprof+0x298/0x800
[  540.672809][T14156]  __alloc_skb+0x156/0x410
[  540.722488][T14156]  inet_netconf_notify_devconf+0x8b/0x1f0
[  540.742711][T14156]  devinet_exit_net+0x11f/0x2c0
[  540.765422][T14156]  ops_undo_list+0x2ee/0xab0
[  540.791865][T14156]  cleanup_net+0x41b/0x830
[  540.802077][T14156]  process_one_work+0x9ba/0x1b20
[  540.812187][T14156]  worker_thread+0x6c8/0xf10
[  540.822288][T14156]  kthread+0x3c5/0x780
[  540.842520][T14156]  ret_from_fork+0x983/0xb10
[  540.866947][T14156]  ret_from_fork_asm+0x1a/0x30
[  541.375715][T14208] ubi0: attaching mtd0
[  541.399141][T14208] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0
[  541.490394][T14212] __vm_enough_memory: pid: 14212, comm: syz.6.1654, bytes: 4398046511104 not enough memory for the allocation
[  541.528471][T14208] ubi0: scanning is finished
[  541.576012][T14208] ubi0 warning: ubi_read_volume_table: volume table copy #2 is corrupted
[  541.646940][T14208] ubi0: volume table was restored
[  541.967828][T14208] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  542.089543][T14208] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  542.156701][T14208] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  542.225393][T14231] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  542.258034][T14231] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  542.267395][T14208] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  542.299975][T14231] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  542.341690][T14231] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  542.357157][T14208] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  542.377318][T14231] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  542.404046][T14208] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  542.440187][T14231] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  542.501547][T14208] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 0
[  542.635507][T14208] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  542.765155][T14209] ubi0: detaching mtd0
[  542.772134][T14224] ubi0: background thread "ubi_bgt0d" started, PID 14224
[  542.811085][T14224] ubi0: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 30
[  542.903134][T14250] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  542.916594][T14209] ubi0: mtd0 is detached
[  543.025328][T14250] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  543.081823][T14250] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  543.160851][T14250] page_type: f5(slab)
[  543.167218][T14250] raw: 00fff00000000040 ffff88813ff27140 ffffea0001e07400 dead000000000002
[  543.296798][T14250] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  543.423803][T14250] head: 00fff00000000040 ffff88813ff27140 ffffea0001e07400 dead000000000002
[  543.606785][T14250] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  543.674157][T14250] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  543.725408][T14250] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  543.796528][T14250] page dumped because: unmovable page
[  543.825672][T14250] page_owner tracks the page as allocated
[  543.872798][T14250] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  543.996307][T14250]  post_alloc_hook+0x1af/0x220
[  544.015284][T14250]  get_page_from_freelist+0xd0b/0x31a0
[  544.044788][T14250]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  544.078641][T14250]  alloc_pages_mpol+0x1fb/0x550
[  544.083541][T14250]  new_slab+0x2c3/0x430
[  544.118078][T14250]  ___slab_alloc+0xe18/0x1c90
[  544.141285][T14250]  __slab_alloc.constprop.0+0x63/0x110
[  544.158255][T14250]  __kmalloc_noprof+0x4fc/0x910
[  544.183651][T14250]  tomoyo_realpath_from_path+0xc2/0x6e0
[  544.198157][T14250]  tomoyo_path_number_perm+0x245/0x580
[  544.218198][T14250]  tomoyo_path_mknod+0x10c/0x190
[  544.235088][T14250]  security_path_mknod+0x161/0x310
[  544.256310][T14250]  lookup_open.isra.0+0xc10/0x1780
[  544.265133][T14250]  path_openat+0xa95/0x3140
[  544.275302][T14250]  do_filp_open+0x20b/0x470
[  544.286695][T14250]  do_sys_openat2+0x121/0x290
[  544.298264][ T8795] Bluetooth: hci1: command 0x0c1a tx timeout
[  544.305916][ T9894] Bluetooth: hci3: command 0x0c1a tx timeout
[  544.315163][T14250] page last free pid 8428 tgid 8428 stack trace:
[  544.328811][T14250]  __free_frozen_pages+0x7df/0x1170
[  544.338911][T14250]  __put_partials+0x130/0x170
[  544.350296][T14250]  qlist_free_all+0x4c/0xf0
[  544.360401][T14250]  kasan_quarantine_reduce+0x195/0x1e0
[  544.372604][T14250]  __kasan_slab_alloc+0x69/0x90
[  544.378364][ T9894] Bluetooth: hci0: command 0x0c1a tx timeout
[  544.384794][ T8795] Bluetooth: hci4: command 0x0c1a tx timeout
[  544.395439][T14250]  kmem_cache_alloc_node_noprof+0x298/0x800
[  544.411574][T14250]  __alloc_skb+0x156/0x410
[  544.421183][T14250]  inet_netconf_notify_devconf+0x8b/0x1f0
[  544.433488][T14250]  devinet_exit_net+0x11f/0x2c0
[  544.444623][T14250]  ops_undo_list+0x2ee/0xab0
[  544.456337][T14250]  cleanup_net+0x41b/0x830
[  544.466491][T14250]  process_one_work+0x9ba/0x1b20
[  544.476149][T14250]  worker_thread+0x6c8/0xf10
[  544.487474][T14250]  kthread+0x3c5/0x780
[  544.496026][T14250]  ret_from_fork+0x983/0xb10
[  544.511041][T14250]  ret_from_fork_asm+0x1a/0x30
[  544.752431][T14290] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1667'.
[  545.338758][T14308] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  545.479958][T14308] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  545.558809][T14308] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  545.698976][T14308] page_type: f5(slab)
[  545.757991][T14308] raw: 00fff00000000040 ffff88813ff27140 ffffea0001ee9600 dead000000000002
[  545.818461][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'.
[  545.838953][T14308] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  545.879618][T14318] kAFS: Invalid Command on /proc/fs/afs/cells file
[  545.951163][T14308] head: 00fff00000000040 ffff88813ff27140 ffffea0001ee9600 dead000000000002
[  546.001881][T14308] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  546.113619][T14308] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  546.199930][T14308] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  546.267936][T14308] page dumped because: unmovable page
[  546.296598][T14308] page_owner tracks the page as allocated
[  546.329319][T14308] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  546.410934][T14308]  post_alloc_hook+0x1af/0x220
[  546.451498][T14308]  get_page_from_freelist+0xd0b/0x31a0
[  546.459523][ T8795] Bluetooth: hci4: command 0x0c1a tx timeout
[  546.503684][T14308]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  546.525513][T14308]  alloc_pages_mpol+0x1fb/0x550
[  546.540536][T14308]  new_slab+0x2c3/0x430
[  546.555045][T14308]  ___slab_alloc+0xe18/0x1c90
[  546.570914][T14308]  __slab_alloc.constprop.0+0x63/0x110
[  546.588180][T14308]  __kmalloc_noprof+0x4fc/0x910
[  546.606862][T14308]  tomoyo_realpath_from_path+0xc2/0x6e0
[  546.627501][T14308]  tomoyo_path_number_perm+0x245/0x580
[  546.645245][T14308]  tomoyo_path_mknod+0x10c/0x190
[  546.661195][T14308]  security_path_mknod+0x161/0x310
[  546.681420][T14308]  lookup_open.isra.0+0xc10/0x1780
[  546.697217][T14308]  path_openat+0xa95/0x3140
[  546.714550][T14308]  do_filp_open+0x20b/0x470
[  546.730604][T14308]  do_sys_openat2+0x121/0x290
[  546.749469][T14308] page last free pid 8428 tgid 8428 stack trace:
[  546.769869][T14308]  __free_frozen_pages+0x7df/0x1170
[  546.785749][T14308]  __put_partials+0x130/0x170
[  546.803997][T14308]  qlist_free_all+0x4c/0xf0
[  546.819424][T14308]  kasan_quarantine_reduce+0x195/0x1e0
[  546.839099][T14308]  __kasan_slab_alloc+0x69/0x90
[  546.855691][T14308]  kmem_cache_alloc_node_noprof+0x298/0x800
[  546.877134][T14308]  __alloc_skb+0x156/0x410
[  546.891917][T14308]  inet_netconf_notify_devconf+0x8b/0x1f0
[  546.912859][T14308]  devinet_exit_net+0x11f/0x2c0
[  546.926826][T14308]  ops_undo_list+0x2ee/0xab0
[  546.946906][T14308]  cleanup_net+0x41b/0x830
[  546.962781][T14308]  process_one_work+0x9ba/0x1b20
[  546.979800][T14308]  worker_thread+0x6c8/0xf10
[  546.994620][T14308]  kthread+0x3c5/0x780
[  547.009517][T14308]  ret_from_fork+0x983/0xb10
[  547.036011][T14308]  ret_from_fork_asm+0x1a/0x30
[  547.150043][T14333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  547.158919][T14333] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  547.311165][T14342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1678'.
[  547.366217][T14342] bridge_slave_1: left allmulticast mode
[  547.372082][T14333] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  547.419770][T14342] bridge_slave_1: left promiscuous mode
[  547.460126][T14342] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.469904][T14333] page_type: f5(slab)
[  547.473951][T14333] raw: 00fff00000000040 ffff88813ff27140 ffffea0001ee9600 dead000000000002
[  547.536206][T14342] bridge_slave_0: left allmulticast mode
[  547.563087][T14351] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1679'.
[  547.582094][T14342] bridge_slave_0: left promiscuous mode
[  547.620879][T14342] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.642192][T14333] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  547.733245][T14333] head: 00fff00000000040 ffff88813ff27140 ffffea0001ee9600 dead000000000002
[  547.838089][T14333] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  547.946348][T14333] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  548.065681][T14333] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  548.278059][T14333] page dumped because: unmovable page
[  548.340210][T14333] page_owner tracks the page as allocated
[  548.397177][T14333] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  548.550509][ T8795] Bluetooth: hci4: command 0x0c1a tx timeout
[  548.590426][T14333]  post_alloc_hook+0x1af/0x220
[  548.595266][T14333]  get_page_from_freelist+0xd0b/0x31a0
[  548.630326][T14333]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  548.636256][T14333]  alloc_pages_mpol+0x1fb/0x550
[  548.700460][T14333]  new_slab+0x2c3/0x430
[  548.704772][T14333]  ___slab_alloc+0xe18/0x1c90
[  548.818251][T14333]  __slab_alloc.constprop.0+0x63/0x110
[  548.892189][T14333]  __kmalloc_noprof+0x4fc/0x910
[  548.897107][T14333]  tomoyo_realpath_from_path+0xc2/0x6e0
[  549.013972][T14333]  tomoyo_path_number_perm+0x245/0x580
[  549.250635][T14333]  tomoyo_path_mknod+0x10c/0x190
[  549.255828][T14333]  security_path_mknod+0x161/0x310
[  549.336006][ T8795] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260
[  549.336028][ T8795] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260
[  549.351142][ T8795] Bluetooth: hci4: Dropping invalid advertising data
[  549.358245][ T8795] Bluetooth: hci4: unknown advertising packet type: 0xe9
[  549.400891][T14333]  lookup_open.isra.0+0xc10/0x1780
[  549.467819][T14333]  path_openat+0xa95/0x3140
[  549.474926][T14399] Invalid ELF header magic: != ELF
[  549.489829][T14333]  do_filp_open+0x20b/0x470
[  549.510767][T14333]  do_sys_openat2+0x121/0x290
[  549.536852][T14333] page last free pid 8428 tgid 8428 stack trace:
[  549.573796][T14333]  __free_frozen_pages+0x7df/0x1170
[  549.602772][T14333]  __put_partials+0x130/0x170
[  549.628045][T14333]  qlist_free_all+0x4c/0xf0
[  549.638839][T14399] Invalid ELF header magic: != ELF
[  549.657576][T14333]  kasan_quarantine_reduce+0x195/0x1e0
[  549.684343][T14333]  __kasan_slab_alloc+0x69/0x90
[  549.707563][T14333]  kmem_cache_alloc_node_noprof+0x298/0x800
[  549.734675][T14333]  __alloc_skb+0x156/0x410
[  549.762019][T14333]  inet_netconf_notify_devconf+0x8b/0x1f0
[  549.778432][T14399] Invalid ELF header magic: != ELF
[  549.793263][T14333]  devinet_exit_net+0x11f/0x2c0
[  549.811452][T14333]  ops_undo_list+0x2ee/0xab0
[  549.837209][T14333]  cleanup_net+0x41b/0x830
[  549.849781][T14333]  process_one_work+0x9ba/0x1b20
[  549.867947][T14333]  worker_thread+0x6c8/0xf10
[  549.886729][T14333]  kthread+0x3c5/0x780
[  549.891411][T14399] Invalid ELF header magic: != ELF
[  549.902674][T14333]  ret_from_fork+0x983/0xb10
[  549.914544][T14333]  ret_from_fork_asm+0x1a/0x30
[  550.434371][T14423] ERROR: Out of memory at tomoyo_memory_ok.
[  550.501937][T14429] ERROR: Out of memory at tomoyo_memory_ok.
[  550.509483][T14430] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1687'.
[  550.843142][T14443] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1690'.
[  551.966361][T14470] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  552.122583][T14470] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  552.263589][T14470] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  552.383856][T14470] page_type: f5(slab)
[  552.388100][T14470] raw: 00fff00000000040 ffff88813ff27140 ffffea0001ee9600 dead000000000002
[  552.459065][T14470] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  552.573147][T14470] head: 00fff00000000040 ffff88813ff27140 ffffea0001ee9600 dead000000000002
[  552.636665][T14470] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  552.699620][T14470] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  552.751205][T14470] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  552.811612][T14470] page dumped because: unmovable page
[  552.872482][T14470] page_owner tracks the page as allocated
[  552.878335][T14470] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  553.030228][T14470]  post_alloc_hook+0x1af/0x220
[  553.058603][T14470]  get_page_from_freelist+0xd0b/0x31a0
[  553.083240][T14470]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  553.111068][T14470]  alloc_pages_mpol+0x1fb/0x550
[  553.130988][T14470]  new_slab+0x2c3/0x430
[  553.151197][T14470]  ___slab_alloc+0xe18/0x1c90
[  553.169810][T14470]  __slab_alloc.constprop.0+0x63/0x110
[  553.198891][T14470]  __kmalloc_noprof+0x4fc/0x910
[  553.221460][T14470]  tomoyo_realpath_from_path+0xc2/0x6e0
[  553.246934][T14470]  tomoyo_path_number_perm+0x245/0x580
[  553.281042][T14470]  tomoyo_path_mknod+0x10c/0x190
[  553.313705][T14470]  security_path_mknod+0x161/0x310
[  553.347548][T14470]  lookup_open.isra.0+0xc10/0x1780
[  553.374543][T14470]  path_openat+0xa95/0x3140
[  553.401567][T14470]  do_filp_open+0x20b/0x470
[  553.422896][T14470]  do_sys_openat2+0x121/0x290
[  553.450149][T14470] page last free pid 8428 tgid 8428 stack trace:
[  553.488057][T14470]  __free_frozen_pages+0x7df/0x1170
[  553.520308][T14470]  __put_partials+0x130/0x170
[  553.541388][T14470]  qlist_free_all+0x4c/0xf0
[  553.564088][T14470]  kasan_quarantine_reduce+0x195/0x1e0
[  553.592610][T14470]  __kasan_slab_alloc+0x69/0x90
[  553.613961][T14470]  kmem_cache_alloc_node_noprof+0x298/0x800
[  553.645782][T14470]  __alloc_skb+0x156/0x410
[  553.660871][T14470]  inet_netconf_notify_devconf+0x8b/0x1f0
[  553.692482][T14470]  devinet_exit_net+0x11f/0x2c0
[  553.712882][T14470]  ops_undo_list+0x2ee/0xab0
[  553.741045][T14470]  cleanup_net+0x41b/0x830
[  553.755921][T14470]  process_one_work+0x9ba/0x1b20
[  553.782372][T14470]  worker_thread+0x6c8/0xf10
[  553.801523][T14470]  kthread+0x3c5/0x780
[  553.833766][T14470]  ret_from_fork+0x983/0xb10
[  553.838499][T14470]  ret_from_fork_asm+0x1a/0x30
[  554.528547][T14514] NFSD: Failed to start, no listeners configured.
[  554.632475][T14521] ecryptfs_parse_packet_length: Error parsing packet length
[  554.696615][T14521] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22]
[  555.156572][T14525] vivid-003: =================  START STATUS  =================
[  555.197316][T14525] vivid-003: Radio HW Seek Mode: Bounded
[  555.229383][T14525] vivid-003: Radio Programmable HW Seek: false
[  555.267122][T14525] vivid-003: RDS Rx I/O Mode: Block I/O
[  555.291546][T14525] vivid-003: Generate RBDS Instead of RDS: false
[  555.317099][T14525] vivid-003: RDS Reception: true
[  555.356935][T14525] vivid-003: RDS Program Type: 0 inactive
[  555.363155][T14525] vivid-003: RDS PS Name:  inactive
[  555.404701][T14525] vivid-003: RDS Radio Text:  inactive
[  555.477448][T14525] vivid-003: RDS Traffic Announcement: false inactive
[  555.553811][T14525] vivid-003: RDS Traffic Program: false inactive
[  555.622237][T14525] vivid-003: RDS Music: false inactive
[  555.652469][T14525] vivid-003: ==================  END STATUS  ==================
[  555.673632][T14537] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  555.837936][T14537] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  555.932549][T14537] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  556.112308][T14537] page_type: f5(slab)
[  556.187916][T14537] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  556.247992][T14537] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  556.290527][T14537] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  556.332393][T14537] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  556.375289][T14537] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  556.424841][T14537] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  556.483116][T14537] page dumped because: unmovable page
[  556.524293][T14537] page_owner tracks the page as allocated
[  556.530153][T14537] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  556.657372][T14537]  post_alloc_hook+0x1af/0x220
[  556.686150][T14537]  get_page_from_freelist+0xd0b/0x31a0
[  556.691652][T14537]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  556.739515][T14537]  alloc_pages_mpol+0x1fb/0x550
[  556.767016][T14537]  new_slab+0x2c3/0x430
[  556.777139][T14537]  ___slab_alloc+0xe18/0x1c90
[  556.804401][T14537]  __slab_alloc.constprop.0+0x63/0x110
[  556.825695][T14537]  __kmalloc_noprof+0x4fc/0x910
[  556.849311][T14537]  tomoyo_realpath_from_path+0xc2/0x6e0
[  556.879030][T14537]  tomoyo_path_number_perm+0x245/0x580
[  556.894509][T14537]  tomoyo_path_mknod+0x10c/0x190
[  556.924167][T14537]  security_path_mknod+0x161/0x310
[  556.944975][T14537]  lookup_open.isra.0+0xc10/0x1780
[  556.950155][T14537]  path_openat+0xa95/0x3140
[  556.985107][T14537]  do_filp_open+0x20b/0x470
[  557.004574][T14537]  do_sys_openat2+0x121/0x290
[  557.034703][T14537] page last free pid 8428 tgid 8428 stack trace:
[  557.071500][T14537]  __free_frozen_pages+0x7df/0x1170
[  557.081787][T14537]  __put_partials+0x130/0x170
[  557.104008][T14537]  qlist_free_all+0x4c/0xf0
[  557.125371][T14537]  kasan_quarantine_reduce+0x195/0x1e0
[  557.172572][T14537]  __kasan_slab_alloc+0x69/0x90
[  557.188617][T14537]  kmem_cache_alloc_node_noprof+0x298/0x800
[  557.224627][T14537]  __alloc_skb+0x156/0x410
[  557.235249][T14537]  inet_netconf_notify_devconf+0x8b/0x1f0
[  557.269428][T14537]  devinet_exit_net+0x11f/0x2c0
[  557.274368][T14537]  ops_undo_list+0x2ee/0xab0
[  557.325289][T14537]  cleanup_net+0x41b/0x830
[  557.329782][T14537]  process_one_work+0x9ba/0x1b20
[  557.384743][T14537]  worker_thread+0x6c8/0xf10
[  557.389376][T14537]  kthread+0x3c5/0x780
[  557.393489][T14537]  ret_from_fork+0x983/0xb10
[  557.459856][T14537]  ret_from_fork_asm+0x1a/0x30
[  558.544103][T14595] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  558.725901][T14595] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  558.865717][T14595] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  558.953825][T14595] page_type: f5(slab)
[  558.964025][T14595] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  559.056570][T14595] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  559.165780][T14595] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  559.209907][T14595] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  559.257704][T14595] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  559.300819][T14595] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  559.349674][T14595] page dumped because: unmovable page
[  559.389954][T14595] page_owner tracks the page as allocated
[  559.415803][T14595] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  559.515589][T14595]  post_alloc_hook+0x1af/0x220
[  559.539805][T14595]  get_page_from_freelist+0xd0b/0x31a0
[  559.560315][T14595]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  559.587706][T14595]  alloc_pages_mpol+0x1fb/0x550
[  559.605972][T14595]  new_slab+0x2c3/0x430
[  559.626629][T14595]  ___slab_alloc+0xe18/0x1c90
[  559.652315][T14595]  __slab_alloc.constprop.0+0x63/0x110
[  559.668202][T14595]  __kmalloc_noprof+0x4fc/0x910
[  559.700849][T14595]  tomoyo_realpath_from_path+0xc2/0x6e0
[  559.725932][T14595]  tomoyo_path_number_perm+0x245/0x580
[  559.746014][T14595]  tomoyo_path_mknod+0x10c/0x190
[  559.764736][T14595]  security_path_mknod+0x161/0x310
[  559.793960][T14595]  lookup_open.isra.0+0xc10/0x1780
[  559.814127][T14595]  path_openat+0xa95/0x3140
[  559.841968][T14595]  do_filp_open+0x20b/0x470
[  559.852097][T14595]  do_sys_openat2+0x121/0x290
[  559.874549][T14595] page last free pid 8428 tgid 8428 stack trace:
[  559.908872][T14595]  __free_frozen_pages+0x7df/0x1170
[  559.934286][T14595]  __put_partials+0x130/0x170
[  559.951828][T14595]  qlist_free_all+0x4c/0xf0
[  559.966703][T14595]  kasan_quarantine_reduce+0x195/0x1e0
[  559.994985][T14595]  __kasan_slab_alloc+0x69/0x90
[  560.018069][T14595]  kmem_cache_alloc_node_noprof+0x298/0x800
[  560.023998][T14595]  __alloc_skb+0x156/0x410
[  560.066801][T14595]  inet_netconf_notify_devconf+0x8b/0x1f0
[  560.072558][T14595]  devinet_exit_net+0x11f/0x2c0
[  560.107148][T14595]  ops_undo_list+0x2ee/0xab0
[  560.111812][T14595]  cleanup_net+0x41b/0x830
[  560.149706][T14595]  process_one_work+0x9ba/0x1b20
[  560.174660][T14595]  worker_thread+0x6c8/0xf10
[  560.184766][T14595]  kthread+0x3c5/0x780
[  560.204153][T14595]  ret_from_fork+0x983/0xb10
[  560.214283][T14595]  ret_from_fork_asm+0x1a/0x30
[  560.775829][T14615] lo: entered allmulticast mode
[  560.826661][T14615] lo: left allmulticast mode
[  560.976832][T14621] netlink: 'syz.6.1723': attribute type 2 has an invalid length.
[  561.105499][T14630] hub 3-0:1.0: USB hub found
[  561.142677][T14630] hub 3-0:1.0: 1 port detected
[  561.213764][T14615] zswap: compressor � not available
[  561.384153][T14630] usb usb3: authorized to connect
[  562.050959][T14649] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  562.152414][T14649] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  562.302035][T14649] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  562.491660][T14649] page_type: f5(slab)
[  562.568792][T14649] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  562.625451][T14649] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  562.687387][T14649] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  562.752137][T14649] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  562.832945][T14649] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  562.897883][T14649] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  562.962750][T14649] page dumped because: unmovable page
[  563.009890][T14649] page_owner tracks the page as allocated
[  563.052244][T14649] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  563.197402][T14649]  post_alloc_hook+0x1af/0x220
[  563.221049][T14649]  get_page_from_freelist+0xd0b/0x31a0
[  563.226555][T14649]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  563.276177][T14649]  alloc_pages_mpol+0x1fb/0x550
[  563.292788][T14649]  new_slab+0x2c3/0x430
[  563.310843][T14649]  ___slab_alloc+0xe18/0x1c90
[  563.315555][T14649]  __slab_alloc.constprop.0+0x63/0x110
[  563.348934][T14649]  __kmalloc_noprof+0x4fc/0x910
[  563.366782][T14649]  tomoyo_realpath_from_path+0xc2/0x6e0
[  563.389080][T14649]  tomoyo_path_number_perm+0x245/0x580
[  563.408387][T14649]  tomoyo_path_mknod+0x10c/0x190
[  563.426013][T14649]  security_path_mknod+0x161/0x310
[  563.445321][T14649]  lookup_open.isra.0+0xc10/0x1780
[  563.463626][T14649]  path_openat+0xa95/0x3140
[  563.485849][T14649]  do_filp_open+0x20b/0x470
[  563.497390][T14649]  do_sys_openat2+0x121/0x290
[  563.518932][T14649] page last free pid 8428 tgid 8428 stack trace:
[  563.542046][T14649]  __free_frozen_pages+0x7df/0x1170
[  563.561628][T14649]  __put_partials+0x130/0x170
[  563.582188][T14649]  qlist_free_all+0x4c/0xf0
[  563.586781][T14649]  kasan_quarantine_reduce+0x195/0x1e0
[  563.616917][T14649]  __kasan_slab_alloc+0x69/0x90
[  563.630453][T14649]  kmem_cache_alloc_node_noprof+0x298/0x800
[  563.651554][T14649]  __alloc_skb+0x156/0x410
[  563.663884][T14649]  inet_netconf_notify_devconf+0x8b/0x1f0
[  563.695606][T14649]  devinet_exit_net+0x11f/0x2c0
[  563.711276][T14649]  ops_undo_list+0x2ee/0xab0
[  563.724897][T14649]  cleanup_net+0x41b/0x830
[  563.737887][T14649]  process_one_work+0x9ba/0x1b20
[  563.755254][T14649]  worker_thread+0x6c8/0xf10
[  563.773473][T14649]  kthread+0x3c5/0x780
[  563.788269][T14649]  ret_from_fork+0x983/0xb10
[  563.792896][T14649]  ret_from_fork_asm+0x1a/0x30
[  564.106190][T14690] ERROR: Out of memory at tomoyo_memory_ok.
[  564.132527][T14689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  564.198227][T14689] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  564.256315][T14689] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  564.409759][T14689] page_type: f5(slab)
[  564.478264][T14689] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  564.620105][T14689] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  564.749889][T14689] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  564.951672][T14689] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  565.010794][T14689] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  565.064031][T14689] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  565.100908][T14689] page dumped because: unmovable page
[  565.134331][T14689] page_owner tracks the page as allocated
[  565.170993][T14689] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  565.271340][T14701] zswap: compressor  not available
[  565.294100][T14689]  post_alloc_hook+0x1af/0x220
[  565.304215][T14689]  get_page_from_freelist+0xd0b/0x31a0
[  565.328003][T14689]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  565.362201][T14689]  alloc_pages_mpol+0x1fb/0x550
[  565.367203][T14689]  new_slab+0x2c3/0x430
[  565.411823][T14689]  ___slab_alloc+0xe18/0x1c90
[  565.416649][T14689]  __slab_alloc.constprop.0+0x63/0x110
[  565.480776][T14689]  __kmalloc_noprof+0x4fc/0x910
[  565.485799][T14689]  tomoyo_realpath_from_path+0xc2/0x6e0
[  565.508800][T14689]  tomoyo_path_number_perm+0x245/0x580
[  565.547493][T14689]  tomoyo_path_mknod+0x10c/0x190
[  565.557604][T14689]  security_path_mknod+0x161/0x310
[  565.591898][T14689]  lookup_open.isra.0+0xc10/0x1780
[  565.597055][T14689]  path_openat+0xa95/0x3140
[  565.646828][T14689]  do_filp_open+0x20b/0x470
[  565.676583][T14689]  do_sys_openat2+0x121/0x290
[  565.686705][T14689] page last free pid 8428 tgid 8428 stack trace:
[  565.707614][T14689]  __free_frozen_pages+0x7df/0x1170
[  565.727587][T14689]  __put_partials+0x130/0x170
[  565.744120][T14689]  qlist_free_all+0x4c/0xf0
[  565.766771][T14689]  kasan_quarantine_reduce+0x195/0x1e0
[  565.795369][T14689]  __kasan_slab_alloc+0x69/0x90
[  565.819612][T14689]  kmem_cache_alloc_node_noprof+0x298/0x800
[  565.845975][T14689]  __alloc_skb+0x156/0x410
[  565.857170][T14689]  inet_netconf_notify_devconf+0x8b/0x1f0
[  565.878965][T14689]  devinet_exit_net+0x11f/0x2c0
[  565.901493][T14689]  ops_undo_list+0x2ee/0xab0
[  565.925559][T14689]  cleanup_net+0x41b/0x830
[  565.942149][T14689]  process_one_work+0x9ba/0x1b20
[  565.947227][T14689]  worker_thread+0x6c8/0xf10
[  565.994230][T14689]  kthread+0x3c5/0x780
[  565.998404][T14689]  ret_from_fork+0x983/0xb10
[  566.033881][T14689]  ret_from_fork_asm+0x1a/0x30
[  566.164341][T14712] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  566.374418][T14712] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  566.526810][T14712] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  566.609771][T14712] page_type: f5(slab)
[  566.708095][T14712] raw: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  566.852996][T14712] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  567.024196][T14743] ubi31: attaching mtd0
[  567.057017][T14712] head: 00fff00000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  567.095365][T14743] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514
[  567.155340][T14743] ubi31 error: validate_ec_hdr: bad EC header
[  567.179687][T14743] Erase counter header dump:
[  567.197165][T14743] 	magic          0x55424923
[  567.209642][T14712] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  567.229676][T14743] 	version        1
[  567.238770][T14743] 	ec             1
[  567.259434][T14743] 	vid_hdr_offset 64
[  567.280953][T14743] 	data_offset    128
[  567.291168][T14743] 	image_seq      0
[  567.319678][T14743] 	hdr_crc        0xd4c49b88
[  567.330306][T14743] erase counter header hexdump:
[  567.355287][T14743] CPU: 0 UID: 0 PID: 14743 Comm: syz.5.1747 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  567.355308][T14743] Tainted: [L]=SOFTLOCKUP
[  567.355314][T14743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  567.355323][T14743] Call Trace:
[  567.355328][T14743]  <TASK>
[  567.355335][T14743]  dump_stack_lvl+0x16c/0x1f0
[  567.355367][T14743]  validate_ec_hdr+0x28c/0x330
[  567.355388][T14743]  ubi_io_read_ec_hdr+0x6d1/0x760
[  567.355407][T14743]  ubi_attach+0x61f/0x4fa0
[  567.355435][T14743]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  567.355451][T14743]  ? ubi_msg+0x108/0x160
[  567.355462][T14743]  ? __pfx_ubi_msg+0x10/0x10
[  567.355475][T14743]  ? __pfx_ubi_attach+0x10/0x10
[  567.355497][T14743]  ? ubi_attach_mtd_dev+0x15ad/0x37f0
[  567.355509][T14743]  ? __vmalloc_node_noprof+0xad/0xf0
[  567.355522][T14743]  ? ubi_attach_mtd_dev+0x15ad/0x37f0
[  567.355537][T14743]  ubi_attach_mtd_dev+0x15f9/0x37f0
[  567.355559][T14743]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  567.355573][T14743]  ? __pfx_get_mtd_device+0x10/0x10
[  567.355595][T14743]  ctrl_cdev_ioctl+0x381/0x420
[  567.355608][T14743]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  567.355627][T14743]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  567.355641][T14743]  __x64_sys_ioctl+0x18e/0x210
[  567.355660][T14743]  do_syscall_64+0xcd/0xf80
[  567.355680][T14743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.355694][T14743] RIP: 0033:0x7fe1a018f7c9
[  567.355706][T14743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  567.355719][T14743] RSP: 002b:00007fe1a0fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  567.355732][T14743] RAX: ffffffffffffffda RBX: 00007fe1a03e5fa0 RCX: 00007fe1a018f7c9
[  567.355742][T14743] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000007
[  567.355750][T14743] RBP: 00007fe1a0213f91 R08: 0000000000000000 R09: 0000000000000000
[  567.355758][T14743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  567.355766][T14743] R13: 00007fe1a03e6038 R14: 00007fe1a03e5fa0 R15: 00007ffed93053b8
[  567.355785][T14743]  </TASK>
[  567.355791][T14743] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0
[  567.586069][T14712] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  567.653681][T14712] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  567.739976][T14712] page dumped because: unmovable page
[  567.745379][T14712] page_owner tracks the page as allocated
[  567.822404][T14712] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  567.969774][T14712]  post_alloc_hook+0x1af/0x220
[  568.023087][T14712]  get_page_from_freelist+0xd0b/0x31a0
[  568.053492][T14712]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  568.059447][T14712]  alloc_pages_mpol+0x1fb/0x550
[  568.199279][T14712]  new_slab+0x2c3/0x430
[  568.267321][T14712]  ___slab_alloc+0xe18/0x1c90
[  568.315730][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  568.327813][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  568.360812][T14712]  __slab_alloc.constprop.0+0x63/0x110
[  568.418147][T14712]  __kmalloc_noprof+0x4fc/0x910
[  568.453473][T14712]  tomoyo_realpath_from_path+0xc2/0x6e0
[  568.463069][T14761] zswap: compressor  not available
[  568.499682][T14712]  tomoyo_path_number_perm+0x245/0x580
[  568.520832][T14712]  tomoyo_path_mknod+0x10c/0x190
[  568.525813][T14712]  security_path_mknod+0x161/0x310
[  568.572663][T14712]  lookup_open.isra.0+0xc10/0x1780
[  568.600613][T14712]  path_openat+0xa95/0x3140
[  568.653010][T14712]  do_filp_open+0x20b/0x470
[  568.686839][T14712]  do_sys_openat2+0x121/0x290
[  568.749727][T14712] page last free pid 8428 tgid 8428 stack trace:
[  568.808933][T14712]  __free_frozen_pages+0x7df/0x1170
[  568.875253][T14712]  __put_partials+0x130/0x170
[  568.879971][T14712]  qlist_free_all+0x4c/0xf0
[  568.966367][T14712]  kasan_quarantine_reduce+0x195/0x1e0
[  569.027190][T14712]  __kasan_slab_alloc+0x69/0x90
[  569.071516][T14712]  kmem_cache_alloc_node_noprof+0x298/0x800
[  569.131107][T14712]  __alloc_skb+0x156/0x410
[  569.159429][T14783] [U]  
[  569.162238][T14783] [U] 
[  569.164917][T14783] [U] 
[  569.167589][T14783] [U] 
[  569.193349][T14712]  inet_netconf_notify_devconf+0x8b/0x1f0
[  569.199602][T14783] [U] 
[  569.202294][T14783] [U] 
[  569.204969][T14783] [U] 
[  569.207649][T14783] [U] 
[  569.234416][T14712]  devinet_exit_net+0x11f/0x2c0
[  569.245971][T14783] [U] 
[  569.248727][T14783] [U] �<��懯��,�'��!'0��� f��K�����q$���6~��5�
��#����3�o���7���,re�E�D?�D�`�:+%w5oo(��3�����J]����Ծ[~7B��I68~�$�W��8'�<e�S�]���8�
[  569.264537][T14783] [U] �ׯ�<���vA}�`�,C��zD��Yc�����&4�X�;��s�ٮ�}��6��Q�ޒ+�-5uHl=�&��
�7(Z㺛���ZF
[  569.275209][T14783] [U] 1��c���p
[  569.278660][T14783] [U] cj����p����5�U�Ҷ�V��
[  569.283936][T14783] [U] �f��vCq��X�>�fZ�#�O���<!��{�?����K��[Ĵȉ.����$|~�	Y��v_+��M4?u�4ϭB�_�d6�4��z�2d�3wPН�6\�
[  569.295901][T14783] [U] 8�j��d��'��L��o_�=7�����
[  569.301106][T14783] [U] ��
[  569.304341][T14783] [U] X� �6�A�\e����Զ�ݜ��R�=N0���{~9���z|یj|���/�%�</���\�i}'������|�j�a���	m��^8@$�LWKW�c��\��Ԓ�.V����s0.͝?���
[  569.318605][T14783] [U] ��]��}"��K�$
[  569.322580][T14783] [U] ��4��G�O�.� �S
[  569.326659][T14783] [U] X"�E���25I;��q�@���l��K��
[  569.331769][T14783] [U] ����	0P@:!�-�BjO֓[��<"|�[gc��)��c�PG^p�X��lX`s!��N.a���c��d�=e�eKw�M6���W	�Eפ�$��P�Y��y��?w5���U�N�g
[  569.344881][T14783] [U] 	
[  569.347666][T14783] [U] 0�ǚ�1���)��+#��Ll�a��.2�Pp%����S�X�L��Q�y�|��?-"�3�i� ��|p�ki����Gr���íN�e�l~F�&���&`m̢B*��Vړ��	��8��JX�DgX�B��v|
Vki�ϓM�IAR���Fh�:-����i�-����P�����,��D�,�xLcE�
[  569.366840][T14783] [U] ��6�*���𩮍�Kà�u���2�m����6Z�ƍU{�@
[  569.373389][T14783] [U] @z�L�䗌��n.$3����#c+0������c|1'�H�_�_X1/���m�bs���I��Gu5�כ��G��R�F9��8�B�V�[�}%�<�E����X#t�����Ρ-����Q��ݣ�q���]�i�S���/�>�:{\g�����X��
[  569.389712][T14783] [U] (�ej���A����D�W�7RW�6G����~��ڥ�\����~��r�i�{�Xu�{�q�͖s���[s���%�BH} A
[  569.432034][T14712]  ops_undo_list+0x2ee/0xab0
[  569.462374][T14712]  cleanup_net+0x41b/0x830
[  569.479273][T14712]  process_one_work+0x9ba/0x1b20
[  569.508055][T14712]  worker_thread+0x6c8/0xf10
[  569.534806][T14712]  kthread+0x3c5/0x780
[  569.565463][T14712]  ret_from_fork+0x983/0xb10
[  569.590201][T14712]  ret_from_fork_asm+0x1a/0x30
[  569.749133][T14743] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  570.984666][T14815] netlink: 'syz.6.1764': attribute type 39 has an invalid length.
[  571.690145][T14783] [U] ��	��S����/.{Z�g$#�?�g��o�'-\�������9z[�o�R
[  571.697556][T14783] [U] 
[  571.700232][T14783] [U] 
[  571.702937][T14783] [U] 
[  571.750293][T14828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  571.782120][T14828] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  571.810442][T14828] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  571.842521][T14828] page_type: f5(slab)
[  571.854988][T14828] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  571.886185][T14828] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  571.922772][T14828] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  571.962274][T14783] [U] 
[  571.964998][T14783] [U] 
[  571.967676][T14783] [U] 
[  571.970358][T14783] [U] 
[  571.979253][T14828] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  572.008895][T14828] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  572.042790][T14828] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  572.092116][T14828] page dumped because: unmovable page
[  572.112169][T14828] page_owner tracks the page as allocated
[  572.132360][T14783] [U] 
[  572.142092][T14828] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  572.233142][T14828]  post_alloc_hook+0x1af/0x220
[  572.248208][T14828]  get_page_from_freelist+0xd0b/0x31a0
[  572.274523][T14828]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  572.305005][T14828]  alloc_pages_mpol+0x1fb/0x550
[  572.342212][T14828]  new_slab+0x2c3/0x430
[  572.368816][T14828]  ___slab_alloc+0xe18/0x1c90
[  572.403673][T14828]  __slab_alloc.constprop.0+0x63/0x110
[  572.443919][T14828]  __kmalloc_noprof+0x4fc/0x910
[  572.464088][T14834] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43
[  572.475175][T14828]  tomoyo_realpath_from_path+0xc2/0x6e0
[  572.508393][T14828]  tomoyo_path_number_perm+0x245/0x580
[  572.529769][T14828]  tomoyo_path_mknod+0x10c/0x190
[  572.555188][T14828]  security_path_mknod+0x161/0x310
[  572.570506][T14828]  lookup_open.isra.0+0xc10/0x1780
[  572.601484][T14828]  path_openat+0xa95/0x3140
[  572.616946][T14828]  do_filp_open+0x20b/0x470
[  572.643256][T14828]  do_sys_openat2+0x121/0x290
[  572.647979][T14828] page last free pid 8428 tgid 8428 stack trace:
[  572.692016][T14828]  __free_frozen_pages+0x7df/0x1170
[  572.711137][T14828]  __put_partials+0x130/0x170
[  572.732167][T14828]  qlist_free_all+0x4c/0xf0
[  572.751585][T14828]  kasan_quarantine_reduce+0x195/0x1e0
[  572.781189][T14828]  __kasan_slab_alloc+0x69/0x90
[  572.800622][T14828]  kmem_cache_alloc_node_noprof+0x298/0x800
[  572.819838][T14828]  __alloc_skb+0x156/0x410
[  572.835408][T14828]  inet_netconf_notify_devconf+0x8b/0x1f0
[  572.859636][T14828]  devinet_exit_net+0x11f/0x2c0
[  572.875917][T14828]  ops_undo_list+0x2ee/0xab0
[  572.891422][T14828]  cleanup_net+0x41b/0x830
[  572.907932][T14828]  process_one_work+0x9ba/0x1b20
[  572.926470][T14828]  worker_thread+0x6c8/0xf10
[  572.941934][T14828]  kthread+0x3c5/0x780
[  572.952068][T14828]  ret_from_fork+0x983/0xb10
[  572.982510][T14828]  ret_from_fork_asm+0x1a/0x30
[  573.344838][T14835] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44
[  573.412499][T14841] can: request_module (can-proto-0) failed.
[  573.455201][T14857] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1774'.
[  575.060469][T14884] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(47.0.4294967291), cmd(3)
[  575.806539][T14898] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  575.921701][T14898] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  576.000670][T14898] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  576.089985][T14898] page_type: f5(slab)
[  576.175597][T14898] raw: 00fff00000000040 ffff88813ff27140 ffffea000086d200 dead000000000002
[  576.290189][T14914] FAULT_INJECTION: forcing a failure.
[  576.290189][T14914] name failslab, interval 1, probability 0, space 0, times 0
[  576.352184][T14898] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  576.394063][T14914] CPU: 0 UID: 0 PID: 14914 Comm: syz.6.1786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  576.394092][T14914] Tainted: [L]=SOFTLOCKUP
[  576.394097][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  576.394106][T14914] Call Trace:
[  576.394111][T14914]  <TASK>
[  576.394117][T14914]  dump_stack_lvl+0x16c/0x1f0
[  576.394142][T14914]  should_fail_ex+0x512/0x640
[  576.394157][T14914]  ? kmem_cache_alloc_noprof+0x62/0x770
[  576.394176][T14914]  should_failslab+0xc2/0x120
[  576.394197][T14914]  kmem_cache_alloc_noprof+0x83/0x770
[  576.394213][T14914]  ? alloc_empty_file+0x55/0x1e0
[  576.394231][T14914]  ? alloc_empty_file+0x55/0x1e0
[  576.394244][T14914]  alloc_empty_file+0x55/0x1e0
[  576.394259][T14914]  alloc_file_pseudo+0x13a/0x230
[  576.394275][T14914]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  576.394291][T14914]  ? alloc_fd+0x471/0x7d0
[  576.394313][T14914]  sock_alloc_file+0x50/0x210
[  576.394333][T14914]  __sys_socket+0x1c0/0x260
[  576.394347][T14914]  ? __pfx___sys_socket+0x10/0x10
[  576.394361][T14914]  ? do_user_addr_fault+0x843/0x1370
[  576.394381][T14914]  __x64_sys_socket+0x72/0xb0
[  576.394393][T14914]  ? lockdep_hardirqs_on+0x7c/0x110
[  576.394413][T14914]  do_syscall_64+0xcd/0xf80
[  576.394441][T14914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.394455][T14914] RIP: 0033:0x7ff95ff916e7
[  576.394467][T14914] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.394481][T14914] RSP: 002b:00007ff960df4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  576.394495][T14914] RAX: ffffffffffffffda RBX: 00007ff9601e6360 RCX: 00007ff95ff916e7
[  576.394504][T14914] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  576.394512][T14914] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  576.394520][T14914] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000
[  576.394528][T14914] R13: 00007ff9601e63f8 R14: 00007ff9601e6360 R15: 00007fffdffc9578
[  576.394547][T14914]  </TASK>
[  576.869731][T14898] head: 00fff00000000040 ffff88813ff27140 ffffea000086d200 dead000000000002
[  576.912630][T14898] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  577.003192][T14898] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  577.013813][T14898] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  577.086979][T14911] zswap: compressor  not available
[  577.097309][T14898] page dumped because: unmovable page
[  577.119143][T14898] page_owner tracks the page as allocated
[  577.129748][T14898] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  577.251132][T14898]  post_alloc_hook+0x1af/0x220
[  577.257103][T14898]  get_page_from_freelist+0xd0b/0x31a0
[  577.262891][T14898]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  577.273068][T14898]  alloc_pages_mpol+0x1fb/0x550
[  577.283181][T14898]  new_slab+0x2c3/0x430
[  577.290208][T14898]  ___slab_alloc+0xe18/0x1c90
[  577.295433][T14898]  __slab_alloc.constprop.0+0x63/0x110
[  577.301697][T14898]  __kmalloc_noprof+0x4fc/0x910
[  577.306723][T14898]  tomoyo_realpath_from_path+0xc2/0x6e0
[  577.317461][T14898]  tomoyo_path_number_perm+0x245/0x580
[  577.322944][T14898]  tomoyo_path_mknod+0x10c/0x190
[  577.346986][T14898]  security_path_mknod+0x161/0x310
[  577.357107][T14898]  lookup_open.isra.0+0xc10/0x1780
[  577.362257][T14898]  path_openat+0xa95/0x3140
[  577.377220][T14898]  do_filp_open+0x20b/0x470
[  577.387332][T14898]  do_sys_openat2+0x121/0x290
[  577.397455][T14898] page last free pid 8428 tgid 8428 stack trace:
[  577.407573][T14898]  __free_frozen_pages+0x7df/0x1170
[  577.412797][T14898]  __put_partials+0x130/0x170
[  577.430520][T14898]  qlist_free_all+0x4c/0xf0
[  577.443052][T14898]  kasan_quarantine_reduce+0x195/0x1e0
[  577.456467][T14898]  __kasan_slab_alloc+0x69/0x90
[  577.467922][T14898]  kmem_cache_alloc_node_noprof+0x298/0x800
[  577.481775][T14898]  __alloc_skb+0x156/0x410
[  577.491934][T14898]  inet_netconf_notify_devconf+0x8b/0x1f0
[  577.503910][T14898]  devinet_exit_net+0x11f/0x2c0
[  577.514498][T14898]  ops_undo_list+0x2ee/0xab0
[  577.524607][T14898]  cleanup_net+0x41b/0x830
[  577.534871][T14898]  process_one_work+0x9ba/0x1b20
[  577.549500][T14898]  worker_thread+0x6c8/0xf10
[  577.554421][T14898]  kthread+0x3c5/0x780
[  577.559483][T14898]  ret_from_fork+0x983/0xb10
[  577.564171][T14898]  ret_from_fork_asm+0x1a/0x30
[  577.920310][T14937] blktrace: Concurrent blktraces are not allowed on loop2
[  578.196800][T14945] binder: 14941:14945 ioctl c018620c 0 returned -1
[  578.243544][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1793'.
[  578.740260][T14956] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  578.944299][T14956] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  578.979470][T14956] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  579.031660][T14956] page_type: f5(slab)
[  579.046303][T14956] raw: 00fff00000000040 ffff88813ff27140 ffffea000086d200 dead000000000002
[  579.167759][T14963] WARNING! power/level is deprecated; use power/control instead
[  579.183680][T14956] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  579.295622][T14956] head: 00fff00000000040 ffff88813ff27140 ffffea000086d200 dead000000000002
[  579.372221][T14956] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  579.416732][T14956] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  579.466475][T14956] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  579.563239][T14956] page dumped because: unmovable page
[  579.627032][T14956] page_owner tracks the page as allocated
[  579.665720][T14956] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  579.736282][T14956]  post_alloc_hook+0x1af/0x220
[  579.746666][T14956]  get_page_from_freelist+0xd0b/0x31a0
[  579.759990][T14956]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  579.780804][T14956]  alloc_pages_mpol+0x1fb/0x550
[  579.791555][T14956]  new_slab+0x2c3/0x430
[  579.803165][T14956]  ___slab_alloc+0xe18/0x1c90
[  579.813742][T14956]  __slab_alloc.constprop.0+0x63/0x110
[  579.826854][T14956]  __kmalloc_noprof+0x4fc/0x910
[  579.839773][T14956]  tomoyo_realpath_from_path+0xc2/0x6e0
[  579.860226][T14956]  tomoyo_path_number_perm+0x245/0x580
[  579.881146][T14956]  tomoyo_path_mknod+0x10c/0x190
[  579.896062][T14956]  security_path_mknod+0x161/0x310
[  579.909094][T14956]  lookup_open.isra.0+0xc10/0x1780
[  579.920918][T14956]  path_openat+0xa95/0x3140
[  579.931147][T14956]  do_filp_open+0x20b/0x470
[  579.941712][T14956]  do_sys_openat2+0x121/0x290
[  579.951530][T14956] page last free pid 8428 tgid 8428 stack trace:
[  579.962426][T14956]  __free_frozen_pages+0x7df/0x1170
[  579.973655][T14956]  __put_partials+0x130/0x170
[  579.984890][T14956]  qlist_free_all+0x4c/0xf0
[  579.995434][T14956]  kasan_quarantine_reduce+0x195/0x1e0
[  580.010056][T14956]  __kasan_slab_alloc+0x69/0x90
[  580.020645][T14956]  kmem_cache_alloc_node_noprof+0x298/0x800
[  580.034545][T14956]  __alloc_skb+0x156/0x410
[  580.045907][T14956]  inet_netconf_notify_devconf+0x8b/0x1f0
[  580.056791][T14956]  devinet_exit_net+0x11f/0x2c0
[  580.062372][T14956]  ops_undo_list+0x2ee/0xab0
[  580.067507][T14956]  cleanup_net+0x41b/0x830
[  580.072031][T14956]  process_one_work+0x9ba/0x1b20
[  580.077480][T14956]  worker_thread+0x6c8/0xf10
[  580.082165][T14956]  kthread+0x3c5/0x780
[  580.087096][T14956]  ret_from_fork+0x983/0xb10
[  580.091889][T14956]  ret_from_fork_asm+0x1a/0x30
[  580.336004][T14976] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input45
[  581.909959][T15015] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552].
[  583.385110][T15046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  583.493512][T15051] ERROR: Out of memory at tomoyo_memory_ok.
[  583.531471][T15046] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  583.651573][T15046] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  583.748181][T15058] FAULT_INJECTION: forcing a failure.
[  583.748181][T15058] name failslab, interval 1, probability 0, space 0, times 0
[  583.761024][T15046] page_type: f5(slab)
[  583.765003][T15046] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  583.827965][T15058] CPU: 0 UID: 0 PID: 15058 Comm: syz.5.1817 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  583.827990][T15058] Tainted: [L]=SOFTLOCKUP
[  583.827995][T15058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  583.828004][T15058] Call Trace:
[  583.828010][T15058]  <TASK>
[  583.828016][T15058]  dump_stack_lvl+0x16c/0x1f0
[  583.828042][T15058]  should_fail_ex+0x512/0x640
[  583.828058][T15058]  ? fs_reclaim_acquire+0xae/0x150
[  583.828081][T15058]  should_failslab+0xc2/0x120
[  583.828102][T15058]  __kmalloc_noprof+0xeb/0x910
[  583.828117][T15058]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  583.828140][T15058]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  583.828158][T15058]  tomoyo_realpath_from_path+0xc2/0x6e0
[  583.828178][T15058]  ? tomoyo_profile+0x47/0x60
[  583.828200][T15058]  tomoyo_path_number_perm+0x245/0x580
[  583.828215][T15058]  ? tomoyo_path_number_perm+0x237/0x580
[  583.828232][T15058]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  583.828248][T15058]  ? find_held_lock+0x2b/0x80
[  583.828282][T15058]  ? find_held_lock+0x2b/0x80
[  583.828299][T15058]  ? hook_file_ioctl_common+0x144/0x410
[  583.828319][T15058]  ? __fget_files+0x20e/0x3c0
[  583.828341][T15058]  security_file_ioctl+0x9b/0x240
[  583.828361][T15058]  __x64_sys_ioctl+0xb7/0x210
[  583.828382][T15058]  do_syscall_64+0xcd/0xf80
[  583.828404][T15058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.828418][T15058] RIP: 0033:0x7fe1a018f7c9
[  583.828430][T15058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  583.828444][T15058] RSP: 002b:00007fe1a0fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  583.828458][T15058] RAX: ffffffffffffffda RBX: 00007fe1a03e5fa0 RCX: 00007fe1a018f7c9
[  583.828467][T15058] RDX: 0000000000000003 RSI: 00000000800064d1 RDI: 0000000000000003
[  583.828475][T15058] RBP: 00007fe1a0fb4090 R08: 0000000000000000 R09: 0000000000000000
[  583.828484][T15058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  583.828492][T15058] R13: 00007fe1a03e6038 R14: 00007fe1a03e5fa0 R15: 00007ffed93053b8
[  583.828511][T15058]  </TASK>
[  583.828517][T15058] ERROR: Out of memory at tomoyo_realpath_from_path.
[  584.089724][T15046] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  584.152259][T15046] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  584.203310][T15046] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  584.251899][T15046] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  584.282766][T15046] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  584.366693][T15046] page dumped because: unmovable page
[  584.409444][T15046] page_owner tracks the page as allocated
[  584.448952][T15046] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  584.548302][T15046]  post_alloc_hook+0x1af/0x220
[  584.588324][T15046]  get_page_from_freelist+0xd0b/0x31a0
[  584.618334][T15046]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  584.648360][T15046]  alloc_pages_mpol+0x1fb/0x550
[  584.653248][T15046]  new_slab+0x2c3/0x430
[  584.699446][T15046]  ___slab_alloc+0xe18/0x1c90
[  584.704162][T15046]  __slab_alloc.constprop.0+0x63/0x110
[  584.718217][T15069] i2c i2c-0: delete_device: Can't find device in list
[  584.738659][T15046]  __kmalloc_noprof+0x4fc/0x910
[  584.753817][T15046]  tomoyo_realpath_from_path+0xc2/0x6e0
[  584.770922][T15046]  tomoyo_path_number_perm+0x245/0x580
[  584.838504][T15069] can: request_module (can-proto-4) failed.
[  584.844611][T15046]  tomoyo_path_mknod+0x10c/0x190
[  584.853437][T15046]  security_path_mknod+0x161/0x310
[  584.874114][T15046]  lookup_open.isra.0+0xc10/0x1780
[  584.900402][T15046]  path_openat+0xa95/0x3140
[  584.909344][T15046]  do_filp_open+0x20b/0x470
[  584.924459][T15046]  do_sys_openat2+0x121/0x290
[  584.934602][T15046] page last free pid 8428 tgid 8428 stack trace:
[  584.955128][T15046]  __free_frozen_pages+0x7df/0x1170
[  584.962983][T15046]  __put_partials+0x130/0x170
[  584.976654][T15046]  qlist_free_all+0x4c/0xf0
[  584.984906][T15046]  kasan_quarantine_reduce+0x195/0x1e0
[  584.998444][T15046]  __kasan_slab_alloc+0x69/0x90
[  585.004935][T15046]  kmem_cache_alloc_node_noprof+0x298/0x800
[  585.028588][T15046]  __alloc_skb+0x156/0x410
[  585.033030][T15046]  inet_netconf_notify_devconf+0x8b/0x1f0
[  585.051733][T15046]  devinet_exit_net+0x11f/0x2c0
[  585.056613][T15046]  ops_undo_list+0x2ee/0xab0
[  585.074107][T15046]  cleanup_net+0x41b/0x830
[  585.084652][T15046]  process_one_work+0x9ba/0x1b20
[  585.094380][T15046]  worker_thread+0x6c8/0xf10
[  585.103127][T15046]  kthread+0x3c5/0x780
[  585.107348][T15046]  ret_from_fork+0x983/0xb10
[  585.112319][T15046]  ret_from_fork_asm+0x1a/0x30
[  585.377239][T15080] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1821'.
[  585.911849][T15097] blktrace: Concurrent blktraces are not allowed on loop2
[  586.031863][T15097] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.5.1826: bg 3: bad block bitmap checksum
[  586.211574][T15097] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1758 with max blocks 1 with error 74
[  586.277092][T15097] EXT4-fs (sda1): This should not happen!! Data will be lost
[  586.277092][T15097] 
[  586.336710][T15099] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1819 with max blocks 1 with error 117
[  586.531498][T15099] EXT4-fs (sda1): This should not happen!! Data will be lost
[  586.531498][T15099] 
[  587.390138][T15134] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1890 with max blocks 1 with error 117
[  587.714156][T15134] EXT4-fs (sda1): This should not happen!! Data will be lost
[  587.714156][T15134] 
[  588.695415][T15166] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1843'.
[  589.903459][T15192] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  590.081568][T15192] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  590.188846][T15192] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  590.301238][T15192] page_type: f5(slab)
[  590.327997][T15192] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  590.400822][T15192] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  590.493128][T15192] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[  590.578352][T15192] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  590.634989][T15192] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  590.702631][T15192] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  590.769646][T15192] page dumped because: unmovable page
[  590.816702][T15192] page_owner tracks the page as allocated
[  590.871461][T15192] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 221232205158, free_ts 219199523748
[  590.987730][T15192]  post_alloc_hook+0x1af/0x220
[  591.003653][T15192]  get_page_from_freelist+0xd0b/0x31a0
[  591.009158][T15192]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  591.055574][T15192]  alloc_pages_mpol+0x1fb/0x550
[  591.081516][T15192]  new_slab+0x2c3/0x430
[  591.103163][T15192]  ___slab_alloc+0xe18/0x1c90
[  591.107964][T15192]  __slab_alloc.constprop.0+0x63/0x110
[  591.153400][T15219] Invalid ELF header magic: != ELF
[  591.162587][T15192]  __kmalloc_noprof+0x4fc/0x910
[  591.167497][T15192]  tomoyo_realpath_from_path+0xc2/0x6e0
[  591.202811][T15219] FAULT_INJECTION: forcing a failure.
[  591.202811][T15219] name failslab, interval 1, probability 0, space 0, times 0
[  591.228764][T15192]  tomoyo_path_number_perm+0x245/0x580
[  591.249516][T15192]  tomoyo_path_mknod+0x10c/0x190
[  591.279278][T15192]  security_path_mknod+0x161/0x310
[  591.302289][T15192]  lookup_open.isra.0+0xc10/0x1780
[  591.307526][T15219] CPU: 0 UID: 0 PID: 15219 Comm: syz.6.1857 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  591.307551][T15219] Tainted: [L]=SOFTLOCKUP
[  591.307557][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  591.307566][T15219] Call Trace:
[  591.307573][T15219]  <TASK>
[  591.307579][T15219]  dump_stack_lvl+0x16c/0x1f0
[  591.307603][T15219]  should_fail_ex+0x512/0x640
[  591.307618][T15219]  ? fs_reclaim_acquire+0xae/0x150
[  591.307642][T15219]  should_failslab+0xc2/0x120
[  591.307663][T15219]  __kmalloc_noprof+0xeb/0x910
[  591.307678][T15219]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  591.307701][T15219]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  591.307717][T15219]  tomoyo_realpath_from_path+0xc2/0x6e0
[  591.307736][T15219]  ? tomoyo_profile+0x47/0x60
[  591.307756][T15219]  tomoyo_path_number_perm+0x245/0x580
[  591.307771][T15219]  ? tomoyo_path_number_perm+0x237/0x580
[  591.307787][T15219]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  591.307802][T15219]  ? futex_wake+0x1ad/0x530
[  591.307836][T15219]  ? find_held_lock+0x2b/0x80
[  591.307854][T15219]  ? hook_file_ioctl_common+0x144/0x410
[  591.307873][T15219]  ? __fget_files+0x20e/0x3c0
[  591.307894][T15219]  security_file_ioctl+0x9b/0x240
[  591.307911][T15219]  __x64_sys_ioctl+0xb7/0x210
[  591.307937][T15219]  do_syscall_64+0xcd/0xf80
[  591.307960][T15219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.307975][T15219] RIP: 0033:0x7ff95ff8f7c9
[  591.307987][T15219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  591.308001][T15219] RSP: 002b:00007ff960e38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  591.308015][T15219] RAX: ffffffffffffffda RBX: 00007ff9601e6180 RCX: 00007ff95ff8f7c9
[  591.308024][T15219] RDX: 0000000000000000 RSI: 00000000c004510e RDI: 0000000000000007
[  591.308032][T15219] RBP: 00007ff960013f91 R08: 0000000000000000 R09: 0000000000000000
[  591.308040][T15219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  591.308049][T15219] R13: 00007ff9601e6218 R14: 00007ff9601e6180 R15: 00007fffdffc9578
[  591.308069][T15219]  </TASK>
[  591.308076][T15219] ERROR: Out of memory at tomoyo_realpath_from_path.
[  591.572499][T15192]  path_openat+0xa95/0x3140
[  591.577047][T15192]  do_filp_open+0x20b/0x470
[  591.582601][T15192]  do_sys_openat2+0x121/0x290
[  591.587281][T15192] page last free pid 8428 tgid 8428 stack trace:
[  591.651887][T15192]  __free_frozen_pages+0x7df/0x1170
[  591.657121][T15192]  __put_partials+0x130/0x170
[  591.662215][T15192]  qlist_free_all+0x4c/0xf0
[  591.666741][T15192]  kasan_quarantine_reduce+0x195/0x1e0
[  591.733369][T15192]  __kasan_slab_alloc+0x69/0x90
[  591.743487][T15192]  kmem_cache_alloc_node_noprof+0x298/0x800
[  591.753591][T15192]  __alloc_skb+0x156/0x410
[  591.758081][T15192]  inet_netconf_notify_devconf+0x8b/0x1f0
[  591.831899][T15192]  devinet_exit_net+0x11f/0x2c0
[  591.861936][T15192]  ops_undo_list+0x2ee/0xab0
[  591.866591][T15192]  cleanup_net+0x41b/0x830
[  591.872027][T15192]  process_one_work+0x9ba/0x1b20
[  591.926211][T15192]  worker_thread+0x6c8/0xf10
[  591.930867][T15192]  kthread+0x3c5/0x780
[  591.936312][T15192]  ret_from_fork+0x983/0xb10
[  591.941008][T15192]  ret_from_fork_asm+0x1a/0x30
[  591.974162][ T5842] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  592.052568][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.052593][ T5842] Tainted: [L]=SOFTLOCKUP
[  592.052598][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  592.052607][ T5842] Call Trace:
[  592.052612][ T5842]  <TASK>
[  592.052618][ T5842]  dump_stack_lvl+0x16c/0x1f0
[  592.052644][ T5842]  dump_header+0x101/0x960
[  592.052662][ T5842]  oom_kill_process+0x176/0x910
[  592.052680][ T5842]  out_of_memory+0x350/0x1700
[  592.052695][ T5842]  ? __lock_acquire+0x436/0x2890
[  592.052716][ T5842]  ? __pfx_out_of_memory+0x10/0x10
[  592.052737][ T5842]  mem_cgroup_out_of_memory+0x118/0x130
[  592.052754][ T5842]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  592.052774][ T5842]  ? do_raw_spin_unlock+0x172/0x230
[  592.052800][ T5842]  try_charge_memcg+0x695/0xd30
[  592.052826][ T5842]  ? __pfx_try_charge_memcg+0x10/0x10
[  592.052851][ T5842]  ? find_held_lock+0x2b/0x80
[  592.052871][ T5842]  charge_memcg+0x8a/0x230
[  592.052891][ T5842]  mem_cgroup_swapin_charge_folio+0xeb/0x470
[  592.052908][ T5842]  __read_swap_cache_async+0x397/0x500
[  592.052928][ T5842]  ? __pfx___read_swap_cache_async+0x10/0x10
[  592.052946][ T5842]  ? __lock_acquire+0x436/0x2890
[  592.052964][ T5842]  swap_cluster_readahead+0x528/0x770
[  592.052985][ T5842]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  592.053004][ T5842]  ? __lock_acquire+0x436/0x2890
[  592.053025][ T5842]  ? get_vma_policy+0x242/0x3c0
[  592.053039][ T5842]  swapin_readahead+0x160/0x1220
[  592.053063][ T5842]  ? __pfx_swapin_readahead+0x10/0x10
[  592.053081][ T5842]  ? find_held_lock+0x2b/0x80
[  592.053097][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  592.053112][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  592.053126][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  592.053143][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  592.053158][ T5842]  ? swap_cache_get_folio+0x293/0x8e0
[  592.053175][ T5842]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  592.053190][ T5842]  ? __pfx_get_swap_device+0x10/0x10
[  592.053209][ T5842]  ? rcu_read_unlock+0x2d/0xb0
[  592.053228][ T5842]  ? do_swap_page+0x962/0x64a0
[  592.053241][ T5842]  do_swap_page+0x962/0x64a0
[  592.053258][ T5842]  ? __lock_acquire+0x436/0x2890
[  592.053276][ T5842]  ? __pfx_do_swap_page+0x10/0x10
[  592.053292][ T5842]  ? __pfx_default_wake_function+0x10/0x10
[  592.053312][ T5842]  ? rcu_is_watching+0x12/0xc0
[  592.053330][ T5842]  ? __free_object+0x286/0x410
[  592.053351][ T5842]  ? rcu_is_watching+0x12/0xc0
[  592.053369][ T5842]  ? ___pte_offset_map+0x175/0x380
[  592.053392][ T5842]  __handle_mm_fault+0x19cb/0x2bb0
[  592.053413][ T5842]  ? reacquire_held_locks+0xcd/0x1f0
[  592.053427][ T5842]  ? __pfx___handle_mm_fault+0x10/0x10
[  592.053444][ T5842]  ? lock_vma_under_rcu+0x176/0x580
[  592.053465][ T5842]  ? get_timespec64+0x136/0x1b0
[  592.053483][ T5842]  handle_mm_fault+0x3fe/0xad0
[  592.053501][ T5842]  do_user_addr_fault+0x60c/0x1370
[  592.053520][ T5842]  ? rcu_is_watching+0x12/0xc0
[  592.053541][ T5842]  exc_page_fault+0x64/0xc0
[  592.053561][ T5842]  asm_exc_page_fault+0x26/0x30
[  592.053575][ T5842] RIP: 0033:0x7fa6eadc2088
[  592.053590][ T5842] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  592.053603][ T5842] RSP: 002b:00007ffd9da20990 EFLAGS: 00010293
[  592.053615][ T5842] RAX: 0000000000000000 RBX: 0000000000000528 RCX: 00007fa6eadc2085
[  592.053624][ T5842] RDX: 00007ffd9da209d0 RSI: 0000000000000000 RDI: 0000000000000000
[  592.053633][ T5842] RBP: 00007ffd9da20a3c R08: 0000000000000000 R09: 0000000000000000
[  592.053641][ T5842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  592.053649][ T5842] R13: 00000000000927c0 R14: 000000000009060a R15: 00007ffd9da20a90
[  592.053668][ T5842]  </TASK>
[  592.053717][ T5842] memory: usage 3072kB, limit 3072kB, failcnt 188040
[  592.755513][T15236] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1898 with max blocks 1 with error 117
[  592.796860][T15236] EXT4-fs (sda1): This should not happen!! Data will be lost
[  592.796860][T15236] 
[  592.852476][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1861'.
[  593.001594][T15245] FAULT_INJECTION: forcing a failure.
[  593.001594][T15245] name fail_futex, interval 1, probability 0, space 0, times 0
[  593.015072][T15245] CPU: 0 UID: 0 PID: 15245 Comm: syz.5.1863 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.015096][T15245] Tainted: [L]=SOFTLOCKUP
[  593.015102][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  593.015111][T15245] Call Trace:
[  593.015116][T15245]  <TASK>
[  593.015123][T15245]  dump_stack_lvl+0x16c/0x1f0
[  593.015146][T15245]  should_fail_ex+0x512/0x640
[  593.015164][T15245]  should_fail_futex+0x4c/0x60
[  593.015179][T15245]  futex_lock_pi_atomic+0x127/0xc50
[  593.015200][T15245]  futex_lock_pi+0x23f/0x7c0
[  593.015220][T15245]  ? __pfx_futex_lock_pi+0x10/0x10
[  593.015237][T15245]  ? __futex_wait+0x24b/0x2f0
[  593.015268][T15245]  ? futex_private_hash_put+0x160/0x1b0
[  593.015290][T15245]  ? __pfx_futex_wake_mark+0x10/0x10
[  593.015314][T15245]  ? ksys_write+0x190/0x250
[  593.015337][T15245]  do_futex+0x11a/0x350
[  593.015352][T15245]  ? __pfx_do_futex+0x10/0x10
[  593.015372][T15245]  __x64_sys_futex+0x1e0/0x4c0
[  593.015390][T15245]  ? fput+0x70/0xf0
[  593.015403][T15245]  ? __pfx___x64_sys_futex+0x10/0x10
[  593.015417][T15245]  ? xfd_validate_state+0x61/0x180
[  593.015430][T15245]  ? __pfx_ksys_write+0x10/0x10
[  593.015453][T15245]  do_syscall_64+0xcd/0xf80
[  593.015472][T15245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.015487][T15245] RIP: 0033:0x7fe1a018f7c9
[  593.015499][T15245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.015513][T15245] RSP: 002b:00007fe1a0fb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  593.015526][T15245] RAX: ffffffffffffffda RBX: 00007fe1a03e5fa0 RCX: 00007fe1a018f7c9
[  593.015535][T15245] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000
[  593.015542][T15245] RBP: 00007fe1a0213f91 R08: 0000000000000000 R09: 000000008000fff5
[  593.015551][T15245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.015559][T15245] R13: 00007fe1a03e6038 R14: 00007fe1a03e5fa0 R15: 00007ffed93053b8
[  593.015577][T15245]  </TASK>
[  593.611369][T15252] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0
[  593.747560][T15253] vhci_hcd vhci_hcd.2: invalid port number 252
[  593.757260][T15253] vhci_hcd vhci_hcd.2: default hub control req: 040f v0772 i00fc l2
[  593.826310][ T5842] memory+swap: usage 11732kB, limit 9007199254740988kB, failcnt 0
[  593.853018][ T5842] kmem: usage 2832kB, limit 9007199254740988kB, failcnt 0
[  593.917753][ T5842] Memory cgroup stats for /syz3:
[  593.917857][ T5842] cache 0
[  593.972994][ T5842] rss 0
[  593.992991][ T5842] rss_huge 0
[  594.027395][ T5842] shmem 0
[  594.037122][ T5842] mapped_file 0
[  594.060752][ T5842] dirty 0
[  594.091108][ T5842] writeback 0
[  594.112084][ T5842] workingset_refault_anon 20590
[  594.148129][ T5842] workingset_refault_file 20114
[  594.186887][ T5842] swap 8876032
[  594.190286][ T5842] swapcached 237568
[  594.219266][ T5842] pgpgin 354173
[  594.247722][ T5842] pgpgout 359736
[  594.279662][ T5842] pgfault 285973
[  594.342737][ T5842] pgmajfault 10625
[  594.364943][ T5842] inactive_anon 106496
[  594.369029][ T5842] active_anon 131072
[  594.372903][ T5842] inactive_file 0
[  594.400732][T15263] sysfs_service_op_store: Client not running :-5:
[  594.426517][ T5842] active_file 0
[  594.434765][ T5842] unevictable 0
[  594.438230][ T5842] hierarchical_memory_limit 3145728
[  594.523885][ T5842] hierarchical_memsw_limit 9223372036854771712
[  594.563577][ T5842] total_cache 0
[  594.580648][ T5842] total_rss 0
[  594.595793][ T5842] total_rss_huge 0
[  594.599556][ T5842] total_shmem 0
[  594.602992][ T5842] total_mapped_file 0
[  594.673398][ T5842] total_dirty 0
[  594.692431][ T5842] total_writeback 0
[  594.701548][ T5842] total_workingset_refault_anon 20590
[  594.749868][ T5842] total_workingset_refault_file 20114
[  594.782527][ T5842] total_swap 8876032
[  594.825744][ T5842] total_swapcached 237568
[  594.830102][ T5842] total_pgpgin 354173
[  594.894207][T15266] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1867'.
[  594.928734][ T5842] total_pgpgout 359736
[  594.932847][ T5842] total_pgfault 285973
[  594.958187][ T5842] total_pgmajfault 10625
[  594.998144][ T5842] total_inactive_anon 106496
[  595.002751][ T5842] total_active_anon 131072
[  595.031286][ T5842] total_inactive_file 0
[  595.054446][ T5842] total_active_file 0
[  595.078563][ T5842] total_unevictable 0
[  595.115445][ T5842] anon_cost 419
[  595.142790][ T5842] file_cost 0
[  595.158099][ T5842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1794,pid=14972,uid=0
[  595.208086][ T5842] Memory cgroup out of memory: Killed process 14972 (syz.3.1794) total-vm:112680kB, anon-rss:1264kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  595.384814][T15285] device-mapper: ioctl: only supply one of name or uuid, cmd(12)
[  595.446139][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1874'.
[  595.858348][T15285] team0 (unregistering): Port device team_slave_0 removed
[  595.917326][T15285] team0 (unregistering): Port device team_slave_1 removed
[  596.838036][ T5842] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  596.893171][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  596.893197][ T5842] Tainted: [L]=SOFTLOCKUP
[  596.893202][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  596.893211][ T5842] Call Trace:
[  596.893217][ T5842]  <TASK>
[  596.893223][ T5842]  dump_stack_lvl+0x16c/0x1f0
[  596.893248][ T5842]  dump_header+0x101/0x960
[  596.893266][ T5842]  oom_kill_process+0x176/0x910
[  596.893284][ T5842]  out_of_memory+0x350/0x1700
[  596.893299][ T5842]  ? __lock_acquire+0x436/0x2890
[  596.893315][ T5842]  ? __pfx_out_of_memory+0x10/0x10
[  596.893335][ T5842]  mem_cgroup_out_of_memory+0x118/0x130
[  596.893352][ T5842]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  596.893373][ T5842]  ? do_raw_spin_unlock+0x172/0x230
[  596.893391][ T5842]  try_charge_memcg+0x695/0xd30
[  596.893416][ T5842]  ? __pfx_try_charge_memcg+0x10/0x10
[  596.893441][ T5842]  ? find_held_lock+0x2b/0x80
[  596.893461][ T5842]  charge_memcg+0x8a/0x230
[  596.893482][ T5842]  mem_cgroup_swapin_charge_folio+0xeb/0x470
[  596.893498][ T5842]  __read_swap_cache_async+0x397/0x500
[  596.893519][ T5842]  ? __pfx___read_swap_cache_async+0x10/0x10
[  596.893537][ T5842]  ? __lock_acquire+0x436/0x2890
[  596.893561][ T5842]  swap_cluster_readahead+0x528/0x770
[  596.893583][ T5842]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  596.893602][ T5842]  ? __lock_acquire+0x436/0x2890
[  596.893615][ T5842]  ? _raw_spin_unlock+0x28/0x50
[  596.893640][ T5842]  ? get_vma_policy+0x242/0x3c0
[  596.893654][ T5842]  swapin_readahead+0x160/0x1220
[  596.893678][ T5842]  ? __pfx_swapin_readahead+0x10/0x10
[  596.893695][ T5842]  ? find_held_lock+0x2b/0x80
[  596.893711][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  596.893726][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  596.893741][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  596.893758][ T5842]  ? swap_cache_get_folio+0x267/0x8e0
[  596.893776][ T5842]  ? swap_cache_get_folio+0x293/0x8e0
[  596.893792][ T5842]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  596.893807][ T5842]  ? __pfx_get_swap_device+0x10/0x10
[  596.893829][ T5842]  ? rcu_read_unlock+0x2d/0xb0
[  596.893848][ T5842]  ? do_swap_page+0x962/0x64a0
[  596.893861][ T5842]  do_swap_page+0x962/0x64a0
[  596.893878][ T5842]  ? __lock_acquire+0x436/0x2890
[  596.893895][ T5842]  ? __pfx_do_swap_page+0x10/0x10
[  596.893911][ T5842]  ? __pfx_default_wake_function+0x10/0x10
[  596.893931][ T5842]  ? find_held_lock+0x2b/0x80
[  596.893950][ T5842]  ? rcu_is_watching+0x12/0xc0
[  596.893969][ T5842]  ? ___pte_offset_map+0x175/0x380
[  596.893990][ T5842]  __handle_mm_fault+0x19cb/0x2bb0
[  596.894008][ T5842]  ? reacquire_held_locks+0xcd/0x1f0
[  596.894021][ T5842]  ? __pfx___handle_mm_fault+0x10/0x10
[  596.894038][ T5842]  ? lock_vma_under_rcu+0x176/0x580
[  596.894059][ T5842]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  596.894082][ T5842]  handle_mm_fault+0x3fe/0xad0
[  596.894100][ T5842]  do_user_addr_fault+0x60c/0x1370
[  596.894119][ T5842]  ? rcu_is_watching+0x12/0xc0
[  596.894139][ T5842]  exc_page_fault+0x64/0xc0
[  596.894159][ T5842]  asm_exc_page_fault+0x26/0x30
[  596.894173][ T5842] RIP: 0033:0x7fa6eadb7560
[  596.894185][ T5842] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00
[  596.894199][ T5842] RSP: 002b:00007ffd9da20988 EFLAGS: 00010206
[  596.894210][ T5842] RAX: 00000000fffffffa RBX: 0000000000000536 RCX: 0000000000000000
[  596.894219][ T5842] RDX: 00007ffd9da209d0 RSI: 0000000000000000 RDI: 0000000000000000
[  596.894228][ T5842] RBP: 00007ffd9da20a3c R08: 0000000000000000 R09: 0000000000000000
[  596.894236][ T5842] R10: 0000000000000000 R11: 000000000001b738 R12: 0000000000001388
[  596.894244][ T5842] R13: 00000000000927c0 R14: 00000000000917e2 R15: 00007ffd9da20a90
[  596.894263][ T5842]  </TASK>
[  597.694846][ T5842] memory: usage 3072kB, limit 3072kB, failcnt 188443
[  597.701578][ T5842] memory+swap: usage 8040kB, limit 9007199254740988kB, failcnt 0
[  597.714823][ T5842] kmem: usage 2884kB, limit 9007199254740988kB, failcnt 0
[  597.722949][ T5842] Memory cgroup stats for /syz3:
[  597.723042][ T5842] cache 0
[  597.754855][ T5842] rss 0
[  597.757638][ T5842] rss_huge 0
[  597.760814][ T5842] shmem 0
[  597.763728][ T5842] mapped_file 0
[  597.774924][ T5842] dirty 0
[  597.777875][ T5842] writeback 0
[  597.781137][ T5842] workingset_refault_anon 20675
[  597.794993][ T5842] workingset_refault_file 20114
[  597.799901][ T5842] swap 5083136
[  597.803258][ T5842] swapcached 192512
[  597.824875][ T5842] pgpgin 354488
[  597.828368][ T5842] pgpgout 360062
[  597.832403][ T5842] pgfault 286458
[  597.844938][ T5842] pgmajfault 10698
[  597.848669][ T5842] inactive_anon 65536
[  597.852653][ T5842] active_anon 0
[  597.864901][ T5842] inactive_file 0
[  597.868747][ T5842] active_file 0
[  597.872189][ T5842] unevictable 0
[  597.884897][ T5842] hierarchical_memory_limit 3145728
[  597.890518][ T5842] hierarchical_memsw_limit 9223372036854771712
[  597.914988][ T5842] total_cache 0
[  597.918495][ T5842] total_rss 0
[  597.921757][ T5842] total_rss_huge 0
[  597.945269][ T5842] total_shmem 0
[  597.955469][ T5842] total_mapped_file 0
[  597.959469][ T5842] total_dirty 0
[  597.962918][ T5842] total_writeback 0
[  597.991999][ T5842] total_workingset_refault_anon 20675
[  598.009981][ T5842] total_workingset_refault_file 20114
[  598.025016][ T5842] total_swap 5083136
[  598.030325][ T5842] total_swapcached 192512
[  598.055036][ T5842] total_pgpgin 354488
[  598.065328][ T5842] total_pgpgout 360062
[  598.075099][ T5842] total_pgfault 286458
[  598.079381][ T5842] total_pgmajfault 10698
[  598.088981][ T5842] total_inactive_anon 65536
[  598.093705][ T5842] total_active_anon 0
[  598.105039][ T5842] total_inactive_file 0
[  598.115035][ T5842] total_active_file 0
[  598.119062][ T5842] total_unevictable 0
[  598.125594][ T5842] anon_cost 415
[  598.129731][ T5842] file_cost 0
[  598.133039][ T5842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1813,pid=15074,uid=0
[  598.160659][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1884'.
[  598.175072][ T5842] Memory cgroup out of memory: Killed process 15074 (syz.3.1813) total-vm:110632kB, anon-rss:1152kB, file-rss:24832kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  599.354953][T15344] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  599.555811][T15344] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  599.777535][T15359] FAULT_INJECTION: forcing a failure.
[  599.777535][T15359] name failslab, interval 1, probability 0, space 0, times 0
[  599.795904][T15344] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  599.846312][T15359] CPU: 0 UID: 0 PID: 15359 Comm: syz.3.1892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  599.846336][T15359] Tainted: [L]=SOFTLOCKUP
[  599.846341][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  599.846350][T15359] Call Trace:
[  599.846356][T15359]  <TASK>
[  599.846363][T15359]  dump_stack_lvl+0x16c/0x1f0
[  599.846388][T15359]  should_fail_ex+0x512/0x640
[  599.846404][T15359]  ? kmem_cache_alloc_noprof+0x62/0x770
[  599.846423][T15359]  should_failslab+0xc2/0x120
[  599.846445][T15359]  kmem_cache_alloc_noprof+0x83/0x770
[  599.846461][T15359]  ? prepare_creds+0x2c/0x940
[  599.846480][T15359]  ? prepare_creds+0x2c/0x940
[  599.846493][T15359]  prepare_creds+0x2c/0x940
[  599.846509][T15359]  __sys_setfsuid+0xda/0x350
[  599.846525][T15359]  ? rcu_is_watching+0x12/0xc0
[  599.846545][T15359]  do_syscall_64+0xcd/0xf80
[  599.846565][T15359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.846579][T15359] RIP: 0033:0x7fa6ead8f7c9
[  599.846591][T15359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  599.846604][T15359] RSP: 002b:00007fa6ebc2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a
[  599.846618][T15359] RAX: ffffffffffffffda RBX: 00007fa6eafe5fa0 RCX: 00007fa6ead8f7c9
[  599.846627][T15359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  599.846635][T15359] RBP: 00007fa6eae13f91 R08: 0000000000000000 R09: 0000000000000000
[  599.846643][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  599.846651][T15359] R13: 00007fa6eafe6038 R14: 00007fa6eafe5fa0 R15: 00007ffd9da20678
[  599.846670][T15359]  </TASK>
[  600.385372][T15369] ==================================================================
[  600.385385][T15369] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60
[  600.385414][T15369] Write of size 8 at addr ffffc90003b99700 by task syz.0.1893/15369
[  600.385427][T15369] 
[  600.385436][T15369] CPU: 0 UID: 0 PID: 15369 Comm: syz.0.1893 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.385456][T15369] Tainted: [L]=SOFTLOCKUP
[  600.385461][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  600.385470][T15369] Call Trace:
[  600.385476][T15369]  <TASK>
[  600.385482][T15369]  dump_stack_lvl+0x116/0x1f0
[  600.385503][T15369]  print_report+0xcd/0x630
[  600.385525][T15369]  ? __virt_addr_valid+0x81/0x610
[  600.385551][T15369]  ? sys_imageblit+0x1a6f/0x1e60
[  600.385568][T15369]  kasan_report+0xe0/0x110
[  600.385588][T15369]  ? sys_imageblit+0x1a6f/0x1e60
[  600.385609][T15369]  sys_imageblit+0x1a6f/0x1e60
[  600.385630][T15369]  ? __pfx_sys_imageblit+0x10/0x10
[  600.385647][T15369]  ? find_held_lock+0x2b/0x80
[  600.385665][T15369]  ? up+0xcb/0x140
[  600.385676][T15369]  ? do_raw_spin_unlock+0x172/0x230
[  600.385691][T15369]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  600.385710][T15369]  ? prb_read_valid+0x78/0xa0
[  600.385724][T15369]  ? __pfx_prb_read_valid+0x10/0x10
[  600.385739][T15369]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  600.385759][T15369]  soft_cursor+0x524/0xa10
[  600.385776][T15369]  ? fb_get_color_depth+0x120/0x250
[  600.385790][T15369]  bit_cursor+0xe8c/0x17e0
[  600.385807][T15369]  ? __pfx_bit_cursor+0x10/0x10
[  600.385821][T15369]  ? __lock_acquire+0x436/0x2890
[  600.385835][T15369]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  600.385855][T15369]  ? get_color+0x1da/0x450
[  600.385874][T15369]  ? __pfx_bit_cursor+0x10/0x10
[  600.385888][T15369]  fbcon_cursor+0x437/0x5d0
[  600.385902][T15369]  ? add_softcursor+0x11/0x290
[  600.385919][T15369]  set_cursor+0x1db/0x250
[  600.385935][T15369]  con_write+0x89/0xb0
[  600.385961][T15369]  n_tty_write+0x434/0x1280
[  600.385980][T15369]  ? __pfx_n_tty_write+0x10/0x10
[  600.385994][T15369]  ? __pfx_woken_wake_function+0x10/0x10
[  600.386010][T15369]  ? file_tty_write.constprop.0+0x6f3/0x9b0
[  600.386030][T15369]  ? __pfx_n_tty_write+0x10/0x10
[  600.386043][T15369]  file_tty_write.constprop.0+0x503/0x9b0
[  600.386063][T15369]  redirected_tty_write+0xd4/0x120
[  600.386080][T15369]  vfs_write+0x7d3/0x11d0
[  600.386102][T15369]  ? __pfx_redirected_tty_write+0x10/0x10
[  600.386121][T15369]  ? __pfx_vfs_write+0x10/0x10
[  600.386138][T15369]  ? find_held_lock+0x2b/0x80
[  600.386159][T15369]  ksys_write+0x12a/0x250
[  600.386177][T15369]  ? __pfx_ksys_write+0x10/0x10
[  600.386198][T15369]  do_syscall_64+0xcd/0xf80
[  600.386217][T15369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.386232][T15369] RIP: 0033:0x7fdafbd8f7c9
[  600.386244][T15369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  600.386258][T15369] RSP: 002b:00007fdafcbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  600.386272][T15369] RAX: ffffffffffffffda RBX: 00007fdafbfe6090 RCX: 00007fdafbd8f7c9
[  600.386282][T15369] RDX: 0000000000000628 RSI: 0000200000000a00 RDI: 0000000000000006
[  600.386291][T15369] RBP: 00007fdafbe13f91 R08: 0000000000000000 R09: 0000000000000000
[  600.386300][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.386309][T15369] R13: 00007fdafbfe6128 R14: 00007fdafbfe6090 R15: 00007ffd0d1f2c38
[  600.386323][T15369]  </TASK>
[  600.386328][T15369] 
[  600.386333][T15369] The buggy address belongs to a vmalloc virtual mapping
[  600.386345][T15369] Memory state around the buggy address:
[  600.386353][T15369]  ffffc90003b99600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  600.386363][T15369]  ffffc90003b99680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  600.386373][T15369] >ffffc90003b99700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  600.386381][T15369]                    ^
[  600.386389][T15369]  ffffc90003b99780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  600.386399][T15369]  ffffc90003b99800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  600.386407][T15369] ==================================================================
[  600.392952][T15369] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  600.392970][T15369] CPU: 0 UID: 0 PID: 15369 Comm: syz.0.1893 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.392992][T15369] Tainted: [L]=SOFTLOCKUP
[  600.392998][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  600.393008][T15369] Call Trace:
[  600.393014][T15369]  <TASK>
[  600.393020][T15369]  dump_stack_lvl+0x3d/0x1f0
[  600.393044][T15369]  vpanic+0x640/0x6f0
[  600.393060][T15369]  panic+0xca/0xd0
[  600.393072][T15369]  ? __pfx_panic+0x10/0x10
[  600.393085][T15369]  ? sys_imageblit+0x1a6f/0x1e60
[  600.393105][T15369]  ? preempt_schedule_common+0x44/0xc0
[  600.393125][T15369]  ? preempt_schedule_thunk+0x16/0x30
[  600.393139][T15369]  check_panic_on_warn+0xab/0xb0
[  600.393153][T15369]  end_report+0x107/0x160
[  600.393173][T15369]  kasan_report+0xee/0x110
[  600.393191][T15369]  ? sys_imageblit+0x1a6f/0x1e60
[  600.393210][T15369]  sys_imageblit+0x1a6f/0x1e60
[  600.393230][T15369]  ? __pfx_sys_imageblit+0x10/0x10
[  600.393248][T15369]  ? find_held_lock+0x2b/0x80
[  600.393264][T15369]  ? up+0xcb/0x140
[  600.393275][T15369]  ? do_raw_spin_unlock+0x172/0x230
[  600.393300][T15369]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  600.393320][T15369]  ? prb_read_valid+0x78/0xa0
[  600.393335][T15369]  ? __pfx_prb_read_valid+0x10/0x10
[  600.393351][T15369]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  600.393372][T15369]  soft_cursor+0x524/0xa10
[  600.393388][T15369]  ? fb_get_color_depth+0x120/0x250
[  600.393403][T15369]  bit_cursor+0xe8c/0x17e0
[  600.393420][T15369]  ? __pfx_bit_cursor+0x10/0x10
[  600.393435][T15369]  ? __lock_acquire+0x436/0x2890
[  600.393449][T15369]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  600.393469][T15369]  ? get_color+0x1da/0x450
[  600.393481][T15369]  ? __pfx_bit_cursor+0x10/0x10
[  600.393496][T15369]  fbcon_cursor+0x437/0x5d0
[  600.393508][T15369]  ? add_softcursor+0x11/0x290
[  600.393525][T15369]  set_cursor+0x1db/0x250
[  600.393540][T15369]  con_write+0x89/0xb0
[  600.393558][T15369]  n_tty_write+0x434/0x1280
[  600.393575][T15369]  ? __pfx_n_tty_write+0x10/0x10
[  600.393588][T15369]  ? __pfx_woken_wake_function+0x10/0x10
[  600.393604][T15369]  ? file_tty_write.constprop.0+0x6f3/0x9b0
[  600.393623][T15369]  ? __pfx_n_tty_write+0x10/0x10
[  600.393636][T15369]  file_tty_write.constprop.0+0x503/0x9b0
[  600.393656][T15369]  redirected_tty_write+0xd4/0x120
[  600.393674][T15369]  vfs_write+0x7d3/0x11d0
[  600.393693][T15369]  ? __pfx_redirected_tty_write+0x10/0x10
[  600.393711][T15369]  ? __pfx_vfs_write+0x10/0x10
[  600.393728][T15369]  ? find_held_lock+0x2b/0x80
[  600.393748][T15369]  ksys_write+0x12a/0x250
[  600.393765][T15369]  ? __pfx_ksys_write+0x10/0x10
[  600.393785][T15369]  do_syscall_64+0xcd/0xf80
[  600.393803][T15369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.393818][T15369] RIP: 0033:0x7fdafbd8f7c9
[  600.393830][T15369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  600.393843][T15369] RSP: 002b:00007fdafcbed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  600.393858][T15369] RAX: ffffffffffffffda RBX: 00007fdafbfe6090 RCX: 00007fdafbd8f7c9
[  600.393868][T15369] RDX: 0000000000000628 RSI: 0000200000000a00 RDI: 0000000000000006
[  600.393877][T15369] RBP: 00007fdafbe13f91 R08: 0000000000000000 R09: 0000000000000000
[  600.393886][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.393895][T15369] R13: 00007fdafbfe6128 R14: 00007fdafbfe6090 R15: 00007ffd0d1f2c38
[  600.393909][T15369]  </TASK>
[  600.393973][T15369] Kernel Offset: disabled