last executing test programs:

1m47.459425262s ago: executing program 3 (id=2400):
mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x21043, 0x0)
socket(0x11, 0x3, 0x9)
openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
socket(0x1d, 0x2, 0x6)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptye9\x00', 0x5cdc00, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x400008, 0x1, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5c, &(0x7f0000000380)={0x0, 0x1d, 0x3000, 0x4, 0x7, 0x400a, r0, [], {0x6, 0x6, 0x8c48, 0x0, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x51, 0x85, 0x2, 0x0, 0x76c2, 0x8000f, 0x800100000000}})
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f00000001c0)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
capset$auto(0x0, 0x0)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
write$auto(0xffffffffffffffff, 0x0, 0x8000007f)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0)
sendfile$auto(0x3, r2, 0x0, 0x400000000006)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0)
sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7fe426b4770410238c400000003f85fe8a940abd01187aad4c17284e6ff81e008601f1d35105fe7c285cf165a0dce71e5de1a1c1e40b8cf8098666ec8343b5bd00bd0dbf852113ca0eb238cc8e9a48eb9d533cb9abd4d56c2cee3efaa40a5c334fc94bdd362867d753762a2f06ccb94912ead951724c68c974d2c6dd6cbd02d66c106abb0e8a39f0136424b745e22a32cd7ac82422495bfb84fe8956240da7e57bc8c19b707f69680833489c60c737ed45dfc96006d6ff9b320c28e544aac9798f20", @ANYRES16=0x0, @ANYBLOB="010125bd7000ffdbdf253900000008004b00010000000800b7000100008008006900020000001400040069703667726530000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24008881}, 0x1)

1m46.237814203s ago: executing program 3 (id=2402):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x7, 0x0, 0x1)
setresuid$auto(0x0, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pread64$auto(r1, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6, 0x2)
r3 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x28902, 0x0)
r4 = open(&(0x7f0000000340)='./file0\x00', 0x2041, 0xda)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
epoll_ctl$auto(r3, 0x3, r0, &(0x7f00000001c0)={0x3, 0xff51})
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r4)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00*\x00', @ANYRES16=r7, @ANYBLOB="000226bd7000fcdbdf250200000008004201410300000500130106000000"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8000)
writev$auto(r6, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$auto(r4, 0x0, 0xfffffdf1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40342, 0x22)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x4)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb1\x00', 0x102, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0500240055000000"], 0x5c}}, 0x40084)
write$auto(r8, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\xac\x9f*~\x9e\xf4\x14\xd2d2i\a*\x93\xda\xec\xfe\xb6HI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg2\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x03\x00\x00\x00\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85c\xf6\r^\xa2\b\x9c\xb9\xff\x89i\x04\xc8\r\x14p\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92', 0x808585)

1m43.930603915s ago: executing program 3 (id=2406):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/topology/core_siblings\x00', 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r2 = socket(0x11, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r3=>0x0})
bpf$auto(0x5, &(0x7f0000000000)=@link_create={@prog_fd=r2, @target_ifindex=r3, 0x0, 0x3f, @netfilter={0xb, 0x1, 0x3, 0x6}}, 0x7)
sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100)
sendfile$auto(r1, r1, 0x0, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000020c0)=""/4123, 0x8f8)
openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x10800, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r4)
ioctl$auto_VHOST_SET_VRING_CALL2(0xffffffffffffffff, 0x4008af21, &(0x7f00000003c0)={0x2, <r5=>r4})
sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="996d108fc464245930274208e8aa691c4277bed8133a3c5a6193734caf906da834b81ed0aebf93d2ca3f2ab0d9a925ad00d3b772910d27568331e4eaedaa269f8f0129d50cbc5e4499704a2da4d46dc1a2fe975ad6a8937e422a84d1df5c7453545546d2728de6adc7b88dfbff", @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40c0)
r6 = socket(0x10, 0x2, 0x0)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x9, &(0x7f0000000600)={@siginfo_0_0={0x9, 0x8, 0x8, @_sigsys={&(0x7f0000000080)="773ac00055c16a1900e98c3f06353acd1e9f828cb0694ee69b56bbda6f942f1809494bd84cdabfd55ce979c7351e796368d7729eeab5cc1ea00d5e6522a77b9cc6", 0xbb, 0xfffffffc}}}, 0x3)
r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0)
ioctl$auto_BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0))
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000380), r6)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
capget$auto(&(0x7f0000000080)={0x19980330, <r8=>0xffffffffffffffff}, &(0x7f00000001c0)={0x8, 0x7fff, 0x2})
r9 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0)
read$auto_ftrace_event_filter_fops_trace_events(r9, &(0x7f0000000080)=""/72, 0x48)
capget$auto(&(0x7f0000000100)={0x80000000, r8}, &(0x7f0000000140)={0x66, 0x3, 0x6})

1m43.296510367s ago: executing program 3 (id=2407):
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x5, 0xfff8, 0x3, 0x9, 0x1, <r0=>0x0})
r1 = prctl$auto(0x3e, 0x1, r0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d})
ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
r4 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0)
read$auto_transaction_log_fops_(r4, &(0x7f0000000100)=""/3, 0x3)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
getcwd$auto(0x0, 0xff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130)
open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)

1m41.059340132s ago: executing program 3 (id=2413):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket(0x29, 0xa, 0xb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffffffffffff)
r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe})
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="669c1298f795c33883592c87971388ad6deb634516c3828042d271eb00e2be1123934fd4c7921d734b811b3fe72299e35f217d65b55f61818a1c60bfc95316f35c12d73f79f37c52f3be3391", @ANYRES16=r6, @ANYBLOB="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"], 0x3f0}}, 0x40000)
getsockopt$auto(r5, 0xae1, 0x1, 0xffffffffffffffff, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0xc0ed0000, 0x0)
connect$auto(0x3, 0x0, 0x54)
socket(0xa, 0x3, 0x3a)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10)
syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x15)

1m39.934212654s ago: executing program 3 (id=2416):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x7, 0x0, 0x1)
setresuid$auto(0x0, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pread64$auto(r1, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6, 0x2)
r3 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x28902, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
epoll_ctl$auto(r3, 0x3, r0, &(0x7f00000001c0)={0x3, 0xff51})
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00*\x00', @ANYRES16=r6, @ANYBLOB="000226bd7000fcdbdf250200000008004201410300000500130106000000"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8000)
writev$auto(r5, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40342, 0x22)
linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x4)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb1\x00', 0x102, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0500240055000000"], 0x5c}}, 0x40084)
write$auto(r7, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\xac\x9f*~\x9e\xf4\x14\xd2d2i\a*\x93\xda\xec\xfe\xb6HI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg2\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x03\x00\x00\x00\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85c\xf6\r^\xa2\b\x9c\xb9\xff\x89i\x04\xc8\r\x14p\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92', 0x808585)

1m35.669385169s ago: executing program 0 (id=2424):
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080)
r0 = socket(0x10, 0x2, 0x14)
r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000000), 0x301182, 0x0)
mmap$auto(0x0, 0x400008, 0xf4e4, 0x9b72, r1, 0x10000000008000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x15)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(0x3, 0x541b, 0x10000000000402)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41)
write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb)
mmap$auto(0x0, 0x40000c, 0xffffffff, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x106)
connect$auto(r0, 0x0, 0x2050)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x4, &(0x7f0000000140)={0xb00e4cd, 0x1, 0x9, 0x210001, 0xc, 0xc05, <r3=>0xffffffffffffffff, [0x7fd, 0x7, 0x3], {0x9, 0x3, 0xff, 0x0, 0x4, 0x895, 0x8, 0x7, 0x5}, {0x2, 0x1d11, 0x54ed, 0xffffffff, 0x101, 0xff, 0x7, 0xa, 0xb}})
sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="08002c000001050018001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22040, 0x75)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1200", @ANYRES32=r4, @ANYRESOCT=r3], 0x1ac}}, 0x20004884)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0)
setsockopt$auto_SO_TIMESTAMP_NEW(r5, 0x8, 0x3f, &(0x7f0000000440)='/sys/kern\xff\a\x00\x00ebug/z?s\x02ap/stored_pages\x00\x96@\xa6?\x9b`E\xc4]=\xa0\x84\xe6\xde\xe7\x9a\xb8\xf1\x8d\f\r}\xac\xc9\\Q\xbf\x9a s\xde\xc7\x0fq\xfe\xc8/\x1e\xcb\\\xe4\xea\x81\x9cu\xff\x1ek\xf7\xa4\xad\"\xa1\xf5\x91\x9c\xa3\x82\xc5\x8803\x90w\x1d\x9f\xe2*\xa0E<\xeba\xb5%\xaaq%*\xb3\xcd\xd6\xf0\x83\x81\xf5\x93(\xc6z\xd2\x023\tm)\xec,19b\xe3\x90\xf1=\xefZ6|\xcb\xf6\x1fGdu\xdce\xbc#\n\xdc)\x95D\xbed\x932\x86\x8a\xd0\x894%,\xf7', 0xc)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
fanotify_init$auto(0x5, 0x2000000000002)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)

1m34.927559553s ago: executing program 0 (id=2428):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
remap_file_pages$auto(0x8000000000000000, 0x6, 0x10, 0x5, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee)
mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000)
modify_ldt$auto(0x1, 0x0, 0x10)
modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82002, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)="2dfc", 0x2)
close_range$auto(0x2, 0x8, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto_VHOST_SET_FEATURES2(r3, 0x4008af00, &(0x7f00000001c0)=0x3)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mremap$auto(0x10000, 0x40000000100008, 0x843, 0x3, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r4 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0)
write$auto(r4, 0x0, 0x6)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x4020009, 0xdb, 0xebf, r3, 0x8000)
fanotify_init$auto(0x5, 0x0)
creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r5, r5, 0x0, 0x3)
read$auto(r0, 0x0, 0x20)
r6 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80001, 0x0)
writev$auto(r6, &(0x7f0000000340)={0x0, 0x2}, 0x7)

1m31.707950611s ago: executing program 0 (id=2437):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket(0x29, 0xa, 0xb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffffffffffff)
r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe})
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="669c1298f795c33883592c87971388ad6deb634516c3828042d271eb00e2be1123934fd4c7921d734b811b3fe72299e35f217d65b55f61818a1c60bfc95316f35c12d73f79f37c52f3be3391", @ANYRES16=r6, @ANYBLOB="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"], 0x3f0}}, 0x40000)
getsockopt$auto(r5, 0xae1, 0x1, 0xffffffffffffffff, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0xc0ed0000, 0x0)
connect$auto(0x3, 0x0, 0x54)
socket(0xa, 0x3, 0x3a)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10)
syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x15)

1m26.759897074s ago: executing program 0 (id=2433):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/topology/core_siblings\x00', 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace\x00', 0x80302, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r2 = socket(0x11, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r3=>0x0})
bpf$auto(0x5, &(0x7f0000000000)=@link_create={@prog_fd=r2, @target_ifindex=r3, 0x0, 0x3f, @netfilter={0xb, 0x1, 0x3, 0x6}}, 0x7)
sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100)
sendfile$auto(r1, r1, 0x0, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000020c0)=""/4123, 0x8f8)
openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x10800, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto(0x3, 0x40106f52, r4)
ioctl$auto_VHOST_SET_VRING_CALL2(0xffffffffffffffff, 0x4008af21, &(0x7f00000003c0)={0x2, <r5=>r4})
sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="996d108fc464245930274208e8aa691c4277bed8133a3c5a6193734caf906da834b81ed0aebf93d2ca3f2ab0d9a925ad00d3b772910d27568331e4eaedaa269f8f0129d50cbc5e4499704a2da4d46dc1a2fe975ad6a8937e422a84d1df5c7453545546d2728de6adc7b88dfbff", @ANYRES64=r4], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40c0)
r6 = socket(0x10, 0x2, 0x0)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x9, &(0x7f0000000600)={@siginfo_0_0={0x9, 0x8, 0x8, @_sigsys={&(0x7f0000000080)="773ac00055c16a1900e98c3f06353acd1e9f828cb0694ee69b56bbda6f942f1809494bd84cdabfd55ce979c7351e796368d7729eeab5cc1ea00d5e6522a77b9cc6", 0xbb, 0xfffffffc}}}, 0x3)
r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0)
ioctl$auto_BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0))
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000380), r6)
sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
capget$auto(&(0x7f0000000080)={0x19980330, <r8=>0xffffffffffffffff}, &(0x7f00000001c0)={0x8, 0x7fff, 0x2})
r9 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x0, 0x0)
read$auto_ftrace_event_filter_fops_trace_events(r9, &(0x7f0000000080)=""/72, 0x48)
capget$auto(&(0x7f0000000100)={0x80000000, r8}, &(0x7f0000000140)={0x66, 0x3, 0x6})

1m26.464478895s ago: executing program 0 (id=2436):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x7, 0x0, 0x1)
setresuid$auto(0x0, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pread64$auto(r1, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6, 0x2)
r3 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x28902, 0x0)
r4 = open(&(0x7f0000000340)='./file0\x00', 0x2041, 0xda)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
epoll_ctl$auto(r3, 0x3, r0, &(0x7f00000001c0)={0x3, 0xff51})
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r4)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00*\x00', @ANYRES16=r7, @ANYBLOB="000226bd7000fcdbdf250200000008004201410300000500130106000000"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8000)
writev$auto(r6, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$auto(r4, 0x0, 0xfffffdf1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40342, 0x22)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x4)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb1\x00', 0x102, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0500240055000000"], 0x5c}}, 0x40084)
write$auto(r8, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\xac\x9f*~\x9e\xf4\x14\xd2d2i\a*\x93\xda\xec\xfe\xb6HI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg2\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x03\x00\x00\x00\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85c\xf6\r^\xa2\b\x9c\xb9\xff\x89i\x04\xc8\r\x14p\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92', 0x808585)

1m25.687004375s ago: executing program 0 (id=2439):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c0082, 0x0)
r2 = socket(0x2, 0x3, 0x100)
capget$auto(&(0x7f00000000c0)={0x4, <r3=>0xffffffffffffffff}, &(0x7f0000000100)={0x1ff, 0xfffffffa, 0xa4})
r4 = getuid()
waitid$auto_P_PID(0x1, r3, &(0x7f0000000140)={@siginfo_0_0={0x20000, 0x1, 0x40, @_rt={0x0, r4, @sival_int=0x3}}}, 0xffff8000, &(0x7f0000000240)={{0x20000001, 0x5e7}, {0x7ff, 0x40000000001}, 0x3, 0x9, 0x6, 0xfcad, 0x9, 0xb90, 0x7, 0x3, 0x7, 0x8, 0x5, 0x1, 0x1, 0xfffffffffffffc00})
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$auto_thermal(0x0, r2)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, 0x0, 0x4048005)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18)
capset$auto(&(0x7f00000001c0)={0x5, <r5=>r3}, &(0x7f00000003c0)={0x9, 0x4, 0x35})
shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000004c0)={{0x8, 0xffffffffffffffff, 0x0, 0x22, 0x7fffffff, 0x9, 0x4}, 0x0, 0x5a3cbc6a, 0x2, 0x4, @inferred=r5, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000380), &(0x7f0000000400)="bad40ffd72211b15712af6fb4d4dfa686c24f389f6e99151081151c0060adab51093c273df92cd61f007bc6b0c3c205f7877b2032ca17877a160e60691f0980584885c934e7d1294d8006c904f"})
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x80ffff, 0x400000ffb, 0x200000957, 0x3, 0x8000)
r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r6, 0x0, 0x1)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x4)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0x90, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

1m16.728215173s ago: executing program 1 (id=2459):
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x5, 0xfff8, 0x3, 0x9, 0x1, <r0=>0x0})
r1 = prctl$auto(0x3e, 0x1, r0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d})
r4 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0)
read$auto_transaction_log_fops_(r4, &(0x7f0000000100)=""/3, 0x3)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
getcwd$auto(0x0, 0xff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130)
open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)

1m15.844633402s ago: executing program 1 (id=2461):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x2400, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xe7b9, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x898}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid()
mmap$auto(0x7f000, 0x128009, 0xdf, 0x16, 0x401, 0x5)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x446a02, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
shmctl$auto_SHM_INFO(0x300, 0xe, &(0x7f00000004c0)={{0x1, <r2=>0x0, 0x0, 0x2, 0x7, 0x1, 0x1}, 0x7, 0xa, 0x8fec, 0x39, @raw=0x1, @inferred=r0, 0x80, 0x0, &(0x7f0000000780)="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", &(0x7f0000000400)="eb0f22bf84a7e8f9997728874a4e7fe2bc1e00437755187a6ccf8f22777acc07"})
setfsuid$auto(r2)
r3 = socket(0x28, 0x6, 0x6)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000020c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01f7ffffffffffffff250a00"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r6)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="07031abdaa250c00587a22"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40800)
getpid()
process_vm_readv$auto(0x0, &(0x7f00000000c0)={0x0, 0xfff}, 0x9, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x10)
r8 = getpid()
process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000004, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r9, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000580)=ANY=[@ANYBLOB="6b2ed075ab0fb0f2dc9f2b7015928f616adb1f131a7c07012b66ee1212bdc3f7a1a561721118c3691eac21789156384be5feffffffffffffff343b06ba5428decca2eff608f61ea6bb3eb3d023eaebedb720969af9f7156de08b42e300e15c644aba510a8cc44a62dd118f560f9d21e04f8199b972bf326a62dce67eae980f951993c00832edeaf4b04a6557c79a5318b0f86e782f526d91a799", @ANYRES16=r10, @ANYBLOB="010026bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080)

1m15.5767778s ago: executing program 1 (id=2463):
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x5, 0xfff8, 0x3, 0x9, 0x1, <r0=>0x0})
r1 = prctl$auto(0x3e, 0x1, r0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d})
r4 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0)
read$auto_transaction_log_fops_(r4, &(0x7f0000000100)=""/3, 0x3)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
getcwd$auto(0x0, 0xff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130)
open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)

1m13.713241159s ago: executing program 1 (id=2464):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket(0x29, 0xa, 0xb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffffffffffff)
r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe})
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="669c1298f795c33883592c87971388ad6deb634516c3828042d271eb00e2be1123934fd4c7921d734b811b3fe72299e35f217d65b55f61818a1c60bfc95316f35c12d73f79f37c52f3be3391", @ANYRES16=r6, @ANYBLOB="010d29bd7000fedbdf253f0000000600f70001d700000600b400000200000600f7000f0400002f022a00ec13ad2cb0bbe5816bbcc6e63813e3334f520625a8bc255e1d92e492055b3061dfc76e638b57b16f7517e0954740de73bcda7cf499a2cba026d2edc19bf930d90440cc0d9a5929768c90f9c4ad1089930db7167b79a12978265204ef5c6ff7f83b496ba7b66f6756d10c520ec91982bbe2b0b2df6524823ba6eb9730e38eb784df4db91325b06875146f29f503ddcefcc71a1159e06c32f7d030276e3fd2d47c54c65d21d9e35993fe73ea31677e63440e10bc9f73ed6d47272cb16b2f9e7908fb145f42e0da58a099dc8ab1b1502061bb4a8e311dbfde97701ecba311d44f12b30123531f109abf33b471acc6fa67d80fd096aa24ede0f8a1592a84fa8ebb14fb5f0565164e6d262cf08230e0a71b519f841a4bddcd214b57ab7aa278c04f564568c458869cc12c2b716abd9a66e690bf70558489183258cb9ad0abb8761f03dad97a1f8545ba881060121558dd03428f5a5618061ee57c12226cacfad6a87002d5479f8a7a5b19caea002170077a2a6aaa1e557e1df584fb027724cb0f321d39da6a99654d94d62cd9f6baf393c25fe7a02c94f678b3fe2c2f14780dbb03889e4929a1235b7ad48fd54f03430acaee5caae35cd789db7da0e983baa6018af845e08a2c20ff27794b2d3dd41fc76d7b412e3841d27ac8aa3af6f1b343b958e8a1e1806e57d0684a075886059d3d754aa8f349bcedeced8b645abdfe2ac21ceb62d6f4582d46d2c9a0b7d2b138c9f5db3a36e23c164e5dd86fb15185cdab039485b603d89edafe62558978000400bf00200002002f70726f632f7468726561642d73656c662f6e756d615f6d6170730005002900080000009100c800f459a87089083ce0997f6c81bb482d4bbfbac76d87c53fb899ef553c8707d3ec9f5138d808a4bfdd09f7c309fbf05cafd878abae7c057da06859f2d90ea9ac308d6a9cdb98be65aa82eef7b5ce033b30eebaa91a9b91b3246dc6a0b4aec6ee20ef3f8f26f4c189974f1140b5c4a3424cd4a02794c5ab723a020538c7529acc3edfac89f3f84cd428bc6ca8f8bf000000d300fa005d2163d74c4dc8fa425ef23bf0dd1a64ecf59112b61f02b33b61db8ac8387b2ec7c5d771baca11051422a0467fecff4f8b247c8d062bfc1e7668469b8dfaf55123014fb1d2f1ef9a79c3176feff6b5f96202d6"], 0x3f0}}, 0x40000)
getsockopt$auto(r5, 0xae1, 0x1, 0xffffffffffffffff, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0xc0ed0000, 0x0)
connect$auto(0x3, 0x0, 0x54)
socket(0xa, 0x3, 0x3a)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10)
syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x15)

1m12.415000447s ago: executing program 1 (id=2467):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1ec83609", @ANYRESHEX=r1, @ANYRES8=r1, @ANYRESOCT, @ANYRES64=r0, @ANYBLOB="5a69b4dac7a99fa2367946de4484fc4be4003515bfd623010f4435d5a1698926252faaffb9becd342f9381af623581bcf8b04bf07d626a3e63780a9c8bd3399f87adb7bd1d214e500ddd8e3646a8b62ecbf570b25dea39b6988abedb2b2872eec316ca6ed156cc2bfdef5781dfd84f0e912731688a08cebfb41176f190b30553f107f79bd7a9d9dec535fa643d2783453d26aa8364328f68617df3e7dc78a8121c4f7407374edceacaa42fa5bbc3dbd33a90668a6142e00fe9109a741a6f2549a8ffd1392dd3194e2ba7d0e7", @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYBLOB="85a392bac623455a1b741aded85a27c51ea1d169a3f2a0edd4512de88f9338f803b922df33bba0981b7bd6db38b9305a706764d1c59e42429da4e2774ebd543dcb6dd3787d38bf48664a6d7c2db0565205936baa1f1f6a756c1401bc805d8f5fb44ebc1a98f3ef3c82e80910dc762eda91ce86dee906"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1)
read$auto(r0, &(0x7f0000000300)='\xcfN\xe0HE\xc1\x17h\xec\xa5\xa1$\xeb\x89\xf8C\x1b\x96i\xbf\xc4\xef\xb2\f\xd8z\x19\xcb\x0e\xf01\v,\"g\xe7\xb4ss\x1a\x04\xa5\x17\xea_\xd3\x8a7\xcfk\x1d\xa0\xc7R\xcbh\xac\x7f\x8a\xfd&\xee\xa7C\x86\xea\x8a\b8\xf2T7\xa5\x83\xff\xd8\x0fM\xa7N\x00\x97\xccxwN\xbc\n\xc4\xcf\xc3-\xc3\x97\x1e\x8d\x9d\x02p\x9b\xad\x0f\x88\xbdH\xf9:\x8b\xb2\x1a\xd6\x06\x82\r\xa8\xd6\xf6(I\xdcV\xc70f\xb9y\xd7\t\xce\xd2$\x98\x7f\xfcy\xa9\xe6\xc7\xd6\vIP9x\xd2\x1f\xbf\x01\xd3\xa6<+[i\xed\x81\x1b\xfb\xa9gd\b\xcc\x976U\x11\xd7\xf4!\x9cH!<\n\x02&\xfa\xd1\xb8\x87\x17lmx}\xd8\xe0\xef7\xfc/\x8a\xc0z\xa3td\xbf\x1a\xbb\xc4\xdb\xed\xae:\x8a\x95J\x1d\xa7>TiA\xa4-\x1f\xd6\xcf\xd3\x82\x83\x98JG)\xaa\x0f\x1b\x93\"\x9c\x95\x04', 0xfffffffd)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a"], 0x6c}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram7\x00', 0x600, 0x0)
socket(0xa, 0x801, 0x84)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket(0x27, 0x4, 0x2)
setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4)
mmap$auto(0x4000000000000000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0)
write$auto(r2, 0x0, 0x200c)
mbind$auto(0xf4000000, 0x2, 0x2, 0x0, 0x7, 0x0)
close_range$auto(0x2, 0xa, 0x0)
ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={"52b9488d055fffbed6eb138fcd56dd424019963c641252e1e9f1a7bded20f724", 0x400, 0x8, 0x20000000, 0x7, 0x6})
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)

1m11.466027625s ago: executing program 1 (id=2469):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c0082, 0x0)
r2 = socket(0x2, 0x3, 0x100)
capget$auto(&(0x7f00000000c0)={0x4, <r3=>0xffffffffffffffff}, &(0x7f0000000100)={0x1ff, 0xfffffffa, 0xa4})
r4 = getuid()
waitid$auto_P_PID(0x1, r3, &(0x7f0000000140)={@siginfo_0_0={0x20000, 0x1, 0x40, @_rt={0x0, r4, @sival_int=0x3}}}, 0xffff8000, &(0x7f0000000240)={{0x20000001, 0x5e7}, {0x7ff, 0x40000000001}, 0x3, 0x9, 0x6, 0xfcad, 0x9, 0xb90, 0x7, 0x3, 0x7, 0x8, 0x5, 0x1, 0x1, 0xfffffffffffffc00})
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$auto_thermal(0x0, r2)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, 0x0, 0x4048005)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18)
capset$auto(&(0x7f00000001c0)={0x5, <r5=>r3}, &(0x7f00000003c0)={0x9, 0x4, 0x35})
shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000004c0)={{0x8, 0xffffffffffffffff, 0x0, 0x22, 0x7fffffff, 0x9, 0x4}, 0x0, 0x5a3cbc6a, 0x2, 0x4, @inferred=r5, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000380), &(0x7f0000000400)="bad40ffd72211b15712af6fb4d4dfa686c24f389f6e99151081151c0060adab51093c273df92cd61f007bc6b0c3c205f7877b2032ca17877a160e60691f0980584885c934e7d1294d8006c"})
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x80ffff, 0x400000ffb, 0x200000957, 0x3, 0x8000)
r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r6, 0x0, 0x1)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x4)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0x90, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1m10.535788388s ago: executing program 32 (id=2439):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c0082, 0x0)
r2 = socket(0x2, 0x3, 0x100)
capget$auto(&(0x7f00000000c0)={0x4, <r3=>0xffffffffffffffff}, &(0x7f0000000100)={0x1ff, 0xfffffffa, 0xa4})
r4 = getuid()
waitid$auto_P_PID(0x1, r3, &(0x7f0000000140)={@siginfo_0_0={0x20000, 0x1, 0x40, @_rt={0x0, r4, @sival_int=0x3}}}, 0xffff8000, &(0x7f0000000240)={{0x20000001, 0x5e7}, {0x7ff, 0x40000000001}, 0x3, 0x9, 0x6, 0xfcad, 0x9, 0xb90, 0x7, 0x3, 0x7, 0x8, 0x5, 0x1, 0x1, 0xfffffffffffffc00})
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$auto_thermal(0x0, r2)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, 0x0, 0x4048005)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18)
capset$auto(&(0x7f00000001c0)={0x5, <r5=>r3}, &(0x7f00000003c0)={0x9, 0x4, 0x35})
shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000004c0)={{0x8, 0xffffffffffffffff, 0x0, 0x22, 0x7fffffff, 0x9, 0x4}, 0x0, 0x5a3cbc6a, 0x2, 0x4, @inferred=r5, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000380), &(0x7f0000000400)="bad40ffd72211b15712af6fb4d4dfa686c24f389f6e99151081151c0060adab51093c273df92cd61f007bc6b0c3c205f7877b2032ca17877a160e60691f0980584885c934e7d1294d8006c904f"})
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x80ffff, 0x400000ffb, 0x200000957, 0x3, 0x8000)
r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r6, 0x0, 0x1)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x4)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0x90, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, 0x0, 0x80, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

56.339685586s ago: executing program 33 (id=2469):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c0082, 0x0)
r2 = socket(0x2, 0x3, 0x100)
capget$auto(&(0x7f00000000c0)={0x4, <r3=>0xffffffffffffffff}, &(0x7f0000000100)={0x1ff, 0xfffffffa, 0xa4})
r4 = getuid()
waitid$auto_P_PID(0x1, r3, &(0x7f0000000140)={@siginfo_0_0={0x20000, 0x1, 0x40, @_rt={0x0, r4, @sival_int=0x3}}}, 0xffff8000, &(0x7f0000000240)={{0x20000001, 0x5e7}, {0x7ff, 0x40000000001}, 0x3, 0x9, 0x6, 0xfcad, 0x9, 0xb90, 0x7, 0x3, 0x7, 0x8, 0x5, 0x1, 0x1, 0xfffffffffffffc00})
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$auto_thermal(0x0, r2)
sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r2, 0x0, 0x4048005)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18)
capset$auto(&(0x7f00000001c0)={0x5, <r5=>r3}, &(0x7f00000003c0)={0x9, 0x4, 0x35})
shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f00000004c0)={{0x8, 0xffffffffffffffff, 0x0, 0x22, 0x7fffffff, 0x9, 0x4}, 0x0, 0x5a3cbc6a, 0x2, 0x4, @inferred=r5, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000380), &(0x7f0000000400)="bad40ffd72211b15712af6fb4d4dfa686c24f389f6e99151081151c0060adab51093c273df92cd61f007bc6b0c3c205f7877b2032ca17877a160e60691f0980584885c934e7d1294d8006c"})
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x80ffff, 0x400000ffb, 0x200000957, 0x3, 0x8000)
r6 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r6, 0x0, 0x1)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x2502, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x4)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x400007, 0xd3e, 0x1d, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0x90, 0xfffffffffffffffe]}, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
socket(0x10, 0x80002, 0x0)
openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

2.637829415s ago: executing program 2 (id=2593):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket(0x29, 0xa, 0xb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffffffffffff)
r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe})
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="669c1298f795c33883592c87971388ad6deb634516c3828042d271eb00e2be1123934fd4c7921d734b811b3fe72299e35f217d65b55f61818a1c60bfc95316f35c12d73f79f37c52f3be3391", @ANYRES16=r6, @ANYBLOB="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"], 0x3f0}}, 0x40000)
getsockopt$auto(r5, 0xae1, 0x1, 0xffffffffffffffff, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0xc0ed0000, 0x0)
connect$auto(0x3, 0x0, 0x54)
socket(0xa, 0x3, 0x3a)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10)
syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x15)

1.785481591s ago: executing program 2 (id=2594):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x7, 0x0, 0x1)
setresuid$auto(0x0, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pread64$auto(r1, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6, 0x2)
r3 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x28902, 0x0)
r4 = open(&(0x7f0000000340)='./file0\x00', 0x2041, 0xda)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
epoll_ctl$auto(r3, 0x3, r0, &(0x7f00000001c0)={0x3, 0xff51})
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r4)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00*\x00', @ANYRES16=r7, @ANYBLOB="000226bd7000fcdbdf250200000008004201410300000500130106000000"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8000)
writev$auto(r6, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$auto(r4, 0x0, 0xfffffdf1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40342, 0x22)
linkat$auto(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
mprotect$auto(0x200000000000, 0x806121, 0x4)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb1\x00', 0x102, 0x0)
sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0500240055000000"], 0x5c}}, 0x40084)
write$auto(r8, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\xac\x9f*~\x9e\xf4\x14\xd2d2i\a*\x93\xda\xec\xfe\xb6HI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg2\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x03\x00\x00\x00\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85c\xf6\r^\xa2\b\x9c\xb9\xff\x89i\x04\xc8\r\x14p\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92', 0x808585)

1.046153841s ago: executing program 2 (id=2595):
r0 = socket(0x2, 0x1, 0x106)
r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim7/health/break_health\x00', 0x82001, 0x0)
ioctl$auto(r0, 0x5, r1)
r2 = socket(0x2, 0x1, 0x106)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
ioctl$auto(0x3, 0x541b, 0x10000000000402)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000300), r0)
sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x1}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0xc}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BLA_BACKBONE={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stat\x00', 0x400, 0x0)
read$auto_proc_single_file_operations_base(r4, &(0x7f0000000080)=""/119, 0x77)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
write$auto(r6, &(0x7f0000000340)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\xff\xcf\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x\x00\x80\x00\x00\x00\x00\x00\x00-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\x9a\xc4\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44o\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\x03\x00@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xbb\x7f\xa5\x87\x02\x87\xbbR<A\x00\x1f\x8a\xa7/Q&J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8u\xa3\x90\xe1\xd1\x15.\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xcau6^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1Tz\xc1;Pw!\x8b\xf5{\xc7Zf/7\xf7h\xe2f\x1d\xa2\x11U\x91v\xf8Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VEv\xeb>\xffY\xe7\xc7\xe1,\xe7`\xe3\xc4\x95\xe52\x9d\x1e`#\xd8\xd7M\xc7\x15\x00\x00\x00\x00\x00\x00E\xd0e\x0eM\xa9Q\xac\x0eX]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x00'/551, 0xcd)
r7 = getpgid(0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x200, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x34, 0x19, 0x0, 0x1, [@generic="fe299241fa553feeac4e5eff22e525ca52fb2e3433f687c02078af4871ce672ca5ced5b9a624e6c970b3fe0badd977b7"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5e}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x198, 0x19, 0x0, 0x1, [@nested={0x18c, 0xc9, 0x0, 0x1, [@typed={0x4, 0x151}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r7}, @generic="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", @generic, @nested={0x4, 0x60}, @nested={0x4, 0x3f}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@remote}, @generic="26f292b007b4f086e248ea9a393d5f28d136fec95027752c7414a5697dbb8e278261e9ec5770d610bef233d22608bc97fe9dc1bcc6542f194a40266a0882da110a7ad5d2cf750b5219e5cf8e27", @nested={0x4, 0x113}]}, @typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}]}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x200}, 0x1, 0x0, 0x0, 0x8800}, 0x4040080)
r8 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000008c0), r0)
write$auto_dynamic_events_ops_trace_dynevent(r8, &(0x7f0000000180)='!:-', 0x3)
r9 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x20000, 0x0)
read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r9, &(0x7f0000000140)=""/136, 0x88)
r10 = getpid()
ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, r10, 0x80)
prctl$auto(0x3e, 0x5, r10, 0x1, 0x6a02)

954.425878ms ago: executing program 2 (id=2596):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x7, 0x0, 0x1)
setresuid$auto(0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pread64$auto(r1, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6, 0x2)
r2 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x28902, 0x0)
r3 = open(&(0x7f0000000340)='./file0\x00', 0x2041, 0xda)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mprotect$auto(0x1000, 0x84a1, 0x10000000000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
epoll_ctl$auto(r2, 0x3, r0, &(0x7f00000001c0)={0x3, 0xff51})
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r3)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYBLOB="000226bd7000fcdbdf250200000008004201410300000500130106000000"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x8000)
writev$auto(r5, &(0x7f0000000080)={0x0, 0x1000}, 0x3)
openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

673.695648ms ago: executing program 2 (id=2597):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = socket(0x29, 0xa, 0xb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb1, 0x401, 0x300000000000)
mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fffffffffffffff)
r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000880)='/proc/thread-self/numa_maps\x00', 0x28100, 0x0)
pread64$auto(r3, 0x0, 0x10001, 0x3)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe})
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2)
sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="669c1298f795c33883592c87971388ad6deb634516c3828042d271eb00e2be1123934fd4c7921d734b811b3fe72299e35f217d65b55f61818a1c60bfc95316f35c12d73f79f37c52f3be3391", @ANYRES16=r6, @ANYBLOB="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"], 0x3f0}}, 0x40000)
getsockopt$auto(r5, 0xae1, 0x1, 0xffffffffffffffff, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0xc0ed0000, 0x0)
connect$auto(0x3, 0x0, 0x54)
socket(0xa, 0x3, 0x3a)
sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x10)
syz_clone(0x60000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xfffffffffffefffd, 0x15)

0s ago: executing program 2 (id=2598):
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x5, 0xfff8, 0x3, 0x9, 0x1, <r0=>0x0})
r1 = prctl$auto(0x3e, 0x1, r0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x800)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d})
ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
r4 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0)
read$auto_transaction_log_fops_(r4, &(0x7f0000000100)=""/3, 0x3)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
getcwd$auto(0x0, 0xff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130)
open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)

kernel console output (not intermixed with test programs):

code 0x0c03 failed: -110
[  704.606601][T15861] Process accounting paused
[  705.435559][T15893] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2162'.
[  706.970182][T15922] FAULT_INJECTION: forcing a failure.
[  706.970182][T15922] name failslab, interval 1, probability 0, space 0, times 0
[  707.107348][T15922] CPU: 0 UID: 0 PID: 15922 Comm: syz.2.2171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  707.107379][T15922] Tainted: [L]=SOFTLOCKUP
[  707.107386][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  707.107396][T15922] Call Trace:
[  707.107402][T15922]  <TASK>
[  707.107408][T15922]  dump_stack_lvl+0x100/0x190
[  707.107433][T15922]  should_fail_ex.cold+0x5/0xa
[  707.107455][T15922]  should_failslab+0xc2/0x120
[  707.107478][T15922]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  707.107497][T15922]  ? __lock_acquire+0x49f/0x1a40
[  707.107513][T15922]  ? __d_alloc+0x35/0xa50
[  707.107533][T15922]  __d_alloc+0x35/0xa50
[  707.107548][T15922]  ? do_raw_spin_lock+0x128/0x260
[  707.107567][T15922]  d_alloc+0x4a/0x1e0
[  707.107585][T15922]  d_alloc_name+0x83/0xb0
[  707.107602][T15922]  ? __pfx_d_alloc_name+0x10/0x10
[  707.107617][T15922]  ? fast_dput+0x168/0x6d0
[  707.107636][T15922]  ? dput.part.0+0x4f/0x240
[  707.107656][T15922]  simple_fill_super+0x4c3/0x680
[  707.107676][T15922]  ? __pfx_nfsd_fill_super+0x10/0x10
[  707.107823][T15922]  nfsd_fill_super+0x98/0x560
[  707.107851][T15922]  ? __pfx_nfsd_fill_super+0x10/0x10
[  707.107873][T15922]  get_tree_keyed+0x10e/0x1d0
[  707.107897][T15922]  vfs_get_tree+0x92/0x320
[  707.107921][T15922]  path_mount+0x7d0/0x23d0
[  707.107942][T15922]  ? __pfx_path_mount+0x10/0x10
[  707.107959][T15922]  ? lockdep_hardirqs_on+0x78/0x100
[  707.107985][T15922]  ? putname+0xb1/0x110
[  707.108001][T15922]  ? kmem_cache_free+0x127/0x6b0
[  707.108024][T15922]  ? __x64_sys_mount+0x293/0x310
[  707.108049][T15922]  __x64_sys_mount+0x293/0x310
[  707.108069][T15922]  ? __pfx___x64_sys_mount+0x10/0x10
[  707.108093][T15922]  do_syscall_64+0x115/0x840
[  707.108107][T15922]  ? clear_bhb_loop+0x40/0x90
[  707.108127][T15922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.108143][T15922] RIP: 0033:0x7f7bd6d9de59
[  707.108158][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.108172][T15922] RSP: 002b:00007f7bd7ca3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  707.108187][T15922] RAX: ffffffffffffffda RBX: 00007f7bd7025fa0 RCX: 00007f7bd6d9de59
[  707.108198][T15922] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000
[  707.108208][T15922] RBP: 00007f7bd6e33e6f R08: 0000000000000000 R09: 0000000000000000
[  707.108218][T15922] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  707.108228][T15922] R13: 00007f7bd7026038 R14: 00007f7bd7025fa0 R15: 00007ffe5e29b708
[  707.108248][T15922]  </TASK>
[  707.390527][T15932] FAULT_INJECTION: forcing a failure.
[  707.390527][T15932] name failslab, interval 1, probability 0, space 0, times 0
[  707.403234][T15932] CPU: 0 UID: 0 PID: 15932 Comm: syz.0.2173 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  707.403261][T15932] Tainted: [L]=SOFTLOCKUP
[  707.403267][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  707.403277][T15932] Call Trace:
[  707.403284][T15932]  <TASK>
[  707.403291][T15932]  dump_stack_lvl+0x100/0x190
[  707.403316][T15932]  should_fail_ex.cold+0x5/0xa
[  707.403338][T15932]  should_failslab+0xc2/0x120
[  707.403360][T15932]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  707.403381][T15932]  ? __pfx___kasan_kmalloc+0x10/0x10
[  707.403402][T15932]  ? vidtv_psi_service_desc_init+0x27c/0x4c0
[  707.403425][T15932]  kstrdup+0x51/0xe0
[  707.403444][T15932]  vidtv_psi_service_desc_init+0x27c/0x4c0
[  707.403464][T15932]  vidtv_psi_desc_clone+0x496/0x5d0
[  707.403483][T15932]  vidtv_channel_si_init+0x4b7/0x18f0
[  707.403509][T15932]  vidtv_mux_init+0x522/0xbf0
[  707.403532][T15932]  vidtv_start_feed+0x34e/0x500
[  707.403556][T15932]  ? __pfx_vidtv_start_feed+0x10/0x10
[  707.403580][T15932]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  707.403614][T15932]  dmx_section_feed_start_filtering+0x3a8/0x660
[  707.403638][T15932]  dvb_dmxdev_filter_start+0x767/0xdd0
[  707.403668][T15932]  dvb_demux_do_ioctl+0xe64/0x1200
[  707.403697][T15932]  dvb_usercopy+0x167/0x340
[  707.403717][T15932]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  707.403741][T15932]  ? __pfx_dvb_usercopy+0x10/0x10
[  707.403769][T15932]  ? __fget_files+0x21f/0x3d0
[  707.403787][T15932]  dvb_demux_ioctl+0x29/0x40
[  707.403807][T15932]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  707.403828][T15932]  __x64_sys_ioctl+0x18e/0x210
[  707.403851][T15932]  do_syscall_64+0x115/0x840
[  707.403865][T15932]  ? clear_bhb_loop+0x40/0x90
[  707.403884][T15932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.403900][T15932] RIP: 0033:0x7f33c859de59
[  707.403916][T15932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.403930][T15932] RSP: 002b:00007f33c9443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.403945][T15932] RAX: ffffffffffffffda RBX: 00007f33c8826090 RCX: 00007f33c859de59
[  707.403981][T15932] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  707.403991][T15932] RBP: 00007f33c8633e6f R08: 0000000000000000 R09: 0000000000000000
[  707.404001][T15932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  707.404010][T15932] R13: 00007f33c8826128 R14: 00007f33c8826090 R15: 00007ffd55cdee38
[  707.404032][T15932]  </TASK>
[  707.952039][T15938] [U] 0�="�/�
[  707.955824][T15938] [U] 
[  707.959775][T15938] [U] E�e�Q��@�
[  707.971807][T15937] [U] 
[  709.370384][T15952] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2178'.
[  710.713612][T15973] FAULT_INJECTION: forcing a failure.
[  710.713612][T15973] name failslab, interval 1, probability 0, space 0, times 0
[  710.789240][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.1.2185 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  710.789269][T15973] Tainted: [L]=SOFTLOCKUP
[  710.789275][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  710.789285][T15973] Call Trace:
[  710.789291][T15973]  <TASK>
[  710.789298][T15973]  dump_stack_lvl+0x100/0x190
[  710.789322][T15973]  should_fail_ex.cold+0x5/0xa
[  710.789345][T15973]  should_failslab+0xc2/0x120
[  710.789367][T15973]  __kmalloc_cache_noprof+0x91/0x6c0
[  710.789384][T15973]  ? __asan_memcpy+0x3c/0x60
[  710.789400][T15973]  ? vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  710.789422][T15973]  vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  710.789442][T15973]  vidtv_psi_desc_clone+0x33f/0x5d0
[  710.789461][T15973]  vidtv_channel_si_init+0x76c/0x18f0
[  710.789487][T15973]  vidtv_mux_init+0x522/0xbf0
[  710.789510][T15973]  vidtv_start_feed+0x34e/0x500
[  710.789534][T15973]  ? __pfx_vidtv_start_feed+0x10/0x10
[  710.789558][T15973]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  710.789603][T15973]  dmx_section_feed_start_filtering+0x3a8/0x660
[  710.789628][T15973]  dvb_dmxdev_filter_start+0x767/0xdd0
[  710.789659][T15973]  dvb_demux_do_ioctl+0xe64/0x1200
[  710.789690][T15973]  dvb_usercopy+0x167/0x340
[  710.789710][T15973]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  710.789734][T15973]  ? __pfx_dvb_usercopy+0x10/0x10
[  710.789762][T15973]  ? __fget_files+0x21f/0x3d0
[  710.789781][T15973]  dvb_demux_ioctl+0x29/0x40
[  710.789801][T15973]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  710.789822][T15973]  __x64_sys_ioctl+0x18e/0x210
[  710.789845][T15973]  do_syscall_64+0x115/0x840
[  710.789860][T15973]  ? clear_bhb_loop+0x40/0x90
[  710.789879][T15973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.789895][T15973] RIP: 0033:0x7f39c0b9de59
[  710.789909][T15973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.789924][T15973] RSP: 002b:00007f39c1a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  710.789939][T15973] RAX: ffffffffffffffda RBX: 00007f39c0e26090 RCX: 00007f39c0b9de59
[  710.789949][T15973] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  710.789958][T15973] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  710.789968][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  710.789977][T15973] R13: 00007f39c0e26128 R14: 00007f39c0e26090 R15: 00007ffe37cf6aa8
[  710.789998][T15973]  </TASK>
[  711.100580][T15978] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2187'.
[  711.805735][T15994] blktrace: Concurrent blktraces are not allowed on nbd5
[  712.061999][T15995] FAULT_INJECTION: forcing a failure.
[  712.061999][T15995] name failslab, interval 1, probability 0, space 0, times 0
[  712.405319][T15995] CPU: 0 UID: 0 PID: 15995 Comm: syz.2.2189 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  712.405347][T15995] Tainted: [L]=SOFTLOCKUP
[  712.405353][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  712.405363][T15995] Call Trace:
[  712.405372][T15995]  <TASK>
[  712.405378][T15995]  dump_stack_lvl+0x100/0x190
[  712.405404][T15995]  should_fail_ex.cold+0x5/0xa
[  712.405428][T15995]  should_failslab+0xc2/0x120
[  712.405450][T15995]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  712.405472][T15995]  ? __kasan_kmalloc+0xaa/0xb0
[  712.405490][T15995]  ? vidtv_psi_short_event_desc_init+0x1bf/0x5f0
[  712.405512][T15995]  kstrdup+0x51/0xe0
[  712.405531][T15995]  vidtv_psi_short_event_desc_init+0x1bf/0x5f0
[  712.405552][T15995]  vidtv_psi_desc_clone+0x33f/0x5d0
[  712.405571][T15995]  vidtv_channel_si_init+0x76c/0x18f0
[  712.405597][T15995]  vidtv_mux_init+0x522/0xbf0
[  712.405629][T15995]  vidtv_start_feed+0x34e/0x500
[  712.405654][T15995]  ? __pfx_vidtv_start_feed+0x10/0x10
[  712.405680][T15995]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  712.405715][T15995]  dmx_section_feed_start_filtering+0x3a8/0x660
[  712.405739][T15995]  dvb_dmxdev_filter_start+0x767/0xdd0
[  712.405772][T15995]  dvb_demux_do_ioctl+0xe64/0x1200
[  712.405802][T15995]  dvb_usercopy+0x167/0x340
[  712.405823][T15995]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  712.405848][T15995]  ? __pfx_dvb_usercopy+0x10/0x10
[  712.405876][T15995]  ? __fget_files+0x21f/0x3d0
[  712.405895][T15995]  dvb_demux_ioctl+0x29/0x40
[  712.405915][T15995]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  712.405936][T15995]  __x64_sys_ioctl+0x18e/0x210
[  712.405960][T15995]  do_syscall_64+0x115/0x840
[  712.405974][T15995]  ? clear_bhb_loop+0x40/0x90
[  712.405993][T15995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.406010][T15995] RIP: 0033:0x7f7bd6d9de59
[  712.406024][T15995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.406039][T15995] RSP: 002b:00007f7bd7c82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  712.406054][T15995] RAX: ffffffffffffffda RBX: 00007f7bd7026090 RCX: 00007f7bd6d9de59
[  712.406064][T15995] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  712.406073][T15995] RBP: 00007f7bd6e33e6f R08: 0000000000000000 R09: 0000000000000000
[  712.406082][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.406091][T15995] R13: 00007f7bd7026128 R14: 00007f7bd7026090 R15: 00007ffe5e29b708
[  712.406112][T15995]  </TASK>
[  714.357202][T15991] Process accounting paused
[  715.810745][T16054] netlink: 29 bytes leftover after parsing attributes in process `syz.3.2205'.
[  716.159139][T16059] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2207'.
[  716.502340][T16065] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2208'.
[  717.464582][T16072] binder: 16071:16072 ioctl c0306201 2000000000c0 returned -14
[  718.122986][T16084] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  720.100858][T16110] [U] 0�="�/�
[  720.127760][T16110] [U] 
[  720.142709][T16110] [U] E�e�Q��@�
[  720.184128][T16109] [U] 
[  720.270115][T16111] Process accounting resumed
[  721.523072][T16129] FAULT_INJECTION: forcing a failure.
[  721.523072][T16129] name failslab, interval 1, probability 0, space 0, times 0
[  721.604515][T16129] CPU: 0 UID: 0 PID: 16129 Comm: syz.2.2223 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.604542][T16129] Tainted: [L]=SOFTLOCKUP
[  721.604548][T16129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  721.604558][T16129] Call Trace:
[  721.604565][T16129]  <TASK>
[  721.604571][T16129]  dump_stack_lvl+0x100/0x190
[  721.604597][T16129]  should_fail_ex.cold+0x5/0xa
[  721.604619][T16129]  should_failslab+0xc2/0x120
[  721.604641][T16129]  __kmalloc_cache_noprof+0x91/0x6c0
[  721.604658][T16129]  ? __kasan_kmalloc+0xaa/0xb0
[  721.604676][T16129]  ? vidtv_psi_nit_table_init+0x9b/0x5f0
[  721.604699][T16129]  vidtv_psi_nit_table_init+0x9b/0x5f0
[  721.604720][T16129]  vidtv_channel_si_init+0xccf/0x18f0
[  721.604746][T16129]  vidtv_mux_init+0x522/0xbf0
[  721.604769][T16129]  vidtv_start_feed+0x34e/0x500
[  721.604795][T16129]  ? __pfx_vidtv_start_feed+0x10/0x10
[  721.604819][T16129]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  721.604853][T16129]  dmx_section_feed_start_filtering+0x3a8/0x660
[  721.604876][T16129]  dvb_dmxdev_filter_start+0x767/0xdd0
[  721.604905][T16129]  dvb_demux_do_ioctl+0xe64/0x1200
[  721.604934][T16129]  dvb_usercopy+0x167/0x340
[  721.604954][T16129]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  721.604978][T16129]  ? __pfx_dvb_usercopy+0x10/0x10
[  721.605006][T16129]  ? __fget_files+0x21f/0x3d0
[  721.605025][T16129]  dvb_demux_ioctl+0x29/0x40
[  721.605045][T16129]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  721.605074][T16129]  __x64_sys_ioctl+0x18e/0x210
[  721.605098][T16129]  do_syscall_64+0x115/0x840
[  721.605114][T16129]  ? clear_bhb_loop+0x40/0x90
[  721.605132][T16129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.605149][T16129] RIP: 0033:0x7f7bd6d9de59
[  721.605163][T16129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.605178][T16129] RSP: 002b:00007f7bd7c82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  721.605193][T16129] RAX: ffffffffffffffda RBX: 00007f7bd7026090 RCX: 00007f7bd6d9de59
[  721.605204][T16129] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  721.605213][T16129] RBP: 00007f7bd6e33e6f R08: 0000000000000000 R09: 0000000000000000
[  721.605223][T16129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  721.605233][T16129] R13: 00007f7bd7026128 R14: 00007f7bd7026090 R15: 00007ffe5e29b708
[  721.605255][T16129]  </TASK>
[  722.106744][T16130] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2222'.
[  722.424226][T16134] FAULT_INJECTION: forcing a failure.
[  722.424226][T16134] name failslab, interval 1, probability 0, space 0, times 0
[  722.458008][T16134] CPU: 0 UID: 0 PID: 16134 Comm: syz.0.2224 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  722.458037][T16134] Tainted: [L]=SOFTLOCKUP
[  722.458043][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  722.458053][T16134] Call Trace:
[  722.458059][T16134]  <TASK>
[  722.458066][T16134]  dump_stack_lvl+0x100/0x190
[  722.458091][T16134]  should_fail_ex.cold+0x5/0xa
[  722.458113][T16134]  should_failslab+0xc2/0x120
[  722.458137][T16134]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  722.458157][T16134]  ? __kasan_kmalloc+0xaa/0xb0
[  722.458177][T16134]  ? vidtv_psi_network_name_desc_init+0x183/0x310
[  722.458199][T16134]  kstrdup+0x51/0xe0
[  722.458217][T16134]  vidtv_psi_network_name_desc_init+0x183/0x310
[  722.458236][T16134]  vidtv_psi_nit_table_init+0x291/0x5f0
[  722.458258][T16134]  vidtv_channel_si_init+0xccf/0x18f0
[  722.458284][T16134]  vidtv_mux_init+0x522/0xbf0
[  722.458307][T16134]  vidtv_start_feed+0x34e/0x500
[  722.458331][T16134]  ? __pfx_vidtv_start_feed+0x10/0x10
[  722.458355][T16134]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  722.458389][T16134]  dmx_section_feed_start_filtering+0x3a8/0x660
[  722.458412][T16134]  dvb_dmxdev_filter_start+0x767/0xdd0
[  722.458441][T16134]  dvb_demux_do_ioctl+0xe64/0x1200
[  722.458470][T16134]  dvb_usercopy+0x167/0x340
[  722.458490][T16134]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  722.458514][T16134]  ? __pfx_dvb_usercopy+0x10/0x10
[  722.458543][T16134]  ? __fget_files+0x21f/0x3d0
[  722.458561][T16134]  dvb_demux_ioctl+0x29/0x40
[  722.458581][T16134]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  722.458603][T16134]  __x64_sys_ioctl+0x18e/0x210
[  722.458634][T16134]  do_syscall_64+0x115/0x840
[  722.458650][T16134]  ? clear_bhb_loop+0x40/0x90
[  722.458670][T16134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.458687][T16134] RIP: 0033:0x7f33c859de59
[  722.458702][T16134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.458717][T16134] RSP: 002b:00007f33c9443028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  722.458732][T16134] RAX: ffffffffffffffda RBX: 00007f33c8826090 RCX: 00007f33c859de59
[  722.458743][T16134] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  722.458752][T16134] RBP: 00007f33c8633e6f R08: 0000000000000000 R09: 0000000000000000
[  722.458762][T16134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  722.458772][T16134] R13: 00007f33c8826128 R14: 00007f33c8826090 R15: 00007ffd55cdee38
[  722.458793][T16134]  </TASK>
[  723.510762][T16143] [U] 0�="�/�
[  723.544922][T16143] [U] 
[  723.574187][T16143] [U] E�e�Q��@�
[  723.631964][T16137] [U] 
[  724.015929][T16154] random: crng reseeded on system resumption
[  724.766512][T16171] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2231'.
[  726.373624][T16196] FAULT_INJECTION: forcing a failure.
[  726.373624][T16196] name failslab, interval 1, probability 0, space 0, times 0
[  726.457423][T16196] CPU: 0 UID: 0 PID: 16196 Comm: syz.1.2237 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  726.457451][T16196] Tainted: [L]=SOFTLOCKUP
[  726.457457][T16196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  726.457467][T16196] Call Trace:
[  726.457474][T16196]  <TASK>
[  726.457481][T16196]  dump_stack_lvl+0x100/0x190
[  726.457505][T16196]  should_fail_ex.cold+0x5/0xa
[  726.457528][T16196]  should_failslab+0xc2/0x120
[  726.457550][T16196]  __kmalloc_cache_noprof+0x91/0x6c0
[  726.457566][T16196]  ? vidtv_psi_network_name_desc_init+0x183/0x310
[  726.457585][T16196]  ? vidtv_psi_service_list_desc_init+0xf3/0x550
[  726.457605][T16196]  vidtv_psi_service_list_desc_init+0xf3/0x550
[  726.457625][T16196]  vidtv_psi_nit_table_init+0x39a/0x5f0
[  726.457647][T16196]  vidtv_channel_si_init+0xccf/0x18f0
[  726.457673][T16196]  vidtv_mux_init+0x522/0xbf0
[  726.457696][T16196]  vidtv_start_feed+0x34e/0x500
[  726.457720][T16196]  ? __pfx_vidtv_start_feed+0x10/0x10
[  726.457744][T16196]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  726.457778][T16196]  dmx_section_feed_start_filtering+0x3a8/0x660
[  726.457801][T16196]  dvb_dmxdev_filter_start+0x767/0xdd0
[  726.457830][T16196]  dvb_demux_do_ioctl+0xe64/0x1200
[  726.457859][T16196]  dvb_usercopy+0x167/0x340
[  726.457880][T16196]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  726.457906][T16196]  ? __pfx_dvb_usercopy+0x10/0x10
[  726.457935][T16196]  ? __fget_files+0x21f/0x3d0
[  726.457954][T16196]  dvb_demux_ioctl+0x29/0x40
[  726.457973][T16196]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  726.457994][T16196]  __x64_sys_ioctl+0x18e/0x210
[  726.458018][T16196]  do_syscall_64+0x115/0x840
[  726.458032][T16196]  ? clear_bhb_loop+0x40/0x90
[  726.458051][T16196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.458067][T16196] RIP: 0033:0x7f39c0b9de59
[  726.458082][T16196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.458096][T16196] RSP: 002b:00007f39c1a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  726.458111][T16196] RAX: ffffffffffffffda RBX: 00007f39c0e26090 RCX: 00007f39c0b9de59
[  726.458122][T16196] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  726.458132][T16196] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  726.458142][T16196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  726.458151][T16196] R13: 00007f39c0e26128 R14: 00007f39c0e26090 R15: 00007ffe37cf6aa8
[  726.458173][T16196]  </TASK>
[  727.656460][T16203] [U] 0�="�/�
[  727.660421][T16203] [U] 
[  727.664700][T16203] [U] E�e�Q��@�
[  727.680476][T16202] [U] 
[  729.083303][T16213] Process accounting paused
[  729.721802][T16243] FAULT_INJECTION: forcing a failure.
[  729.721802][T16243] name failslab, interval 1, probability 0, space 0, times 0
[  729.793608][T16243] CPU: 0 UID: 0 PID: 16243 Comm: syz.1.2249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  729.793637][T16243] Tainted: [L]=SOFTLOCKUP
[  729.793643][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  729.793654][T16243] Call Trace:
[  729.793660][T16243]  <TASK>
[  729.793666][T16243]  dump_stack_lvl+0x100/0x190
[  729.793692][T16243]  should_fail_ex.cold+0x5/0xa
[  729.793714][T16243]  should_failslab+0xc2/0x120
[  729.793736][T16243]  __kmalloc_cache_noprof+0x91/0x6c0
[  729.793753][T16243]  ? rfkill_fop_open+0x1cc/0x480
[  729.793779][T16243]  rfkill_fop_open+0x1cc/0x480
[  729.793802][T16243]  ? __pfx_rfkill_fop_open+0x10/0x10
[  729.793824][T16243]  misc_open+0x26d/0x450
[  729.793841][T16243]  ? __pfx_misc_open+0x10/0x10
[  729.793856][T16243]  chrdev_open+0x234/0x6a0
[  729.793872][T16243]  ? __pfx_apparmor_file_open+0x10/0x10
[  729.793891][T16243]  ? __pfx_chrdev_open+0x10/0x10
[  729.793908][T16243]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  729.793929][T16243]  do_dentry_open+0x6ab/0x14d0
[  729.793945][T16243]  ? __pfx_chrdev_open+0x10/0x10
[  729.793966][T16243]  vfs_open+0x82/0x3f0
[  729.793987][T16243]  path_openat+0x2873/0x4280
[  729.794020][T16243]  ? __pfx_path_openat+0x10/0x10
[  729.794041][T16243]  do_file_open+0x20e/0x430
[  729.794060][T16243]  ? __pfx_do_file_open+0x10/0x10
[  729.794091][T16243]  ? alloc_fd+0x471/0x7a0
[  729.794109][T16243]  ? do_getname+0x191/0x390
[  729.794131][T16243]  do_sys_openat2+0x10f/0x1e0
[  729.794152][T16243]  ? __pfx_do_sys_openat2+0x10/0x10
[  729.794173][T16243]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  729.794204][T16243]  __x64_sys_openat+0x12d/0x210
[  729.794225][T16243]  ? __pfx___x64_sys_openat+0x10/0x10
[  729.794252][T16243]  do_syscall_64+0x115/0x840
[  729.794266][T16243]  ? clear_bhb_loop+0x40/0x90
[  729.794284][T16243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.794300][T16243] RIP: 0033:0x7f39c0b9de59
[  729.794315][T16243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.794329][T16243] RSP: 002b:00007f39c1a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  729.794345][T16243] RAX: ffffffffffffffda RBX: 00007f39c0e25fa0 RCX: 00007f39c0b9de59
[  729.794355][T16243] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  729.794366][T16243] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  729.794375][T16243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  729.794385][T16243] R13: 00007f39c0e26038 R14: 00007f39c0e25fa0 R15: 00007ffe37cf6aa8
[  729.794406][T16243]  </TASK>
[  732.229968][T16264] FAULT_INJECTION: forcing a failure.
[  732.229968][T16264] name failslab, interval 1, probability 0, space 0, times 0
[  732.329840][T16264] CPU: 0 UID: 0 PID: 16264 Comm: syz.3.2251 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  732.329869][T16264] Tainted: [L]=SOFTLOCKUP
[  732.329876][T16264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  732.329886][T16264] Call Trace:
[  732.329892][T16264]  <TASK>
[  732.329899][T16264]  dump_stack_lvl+0x100/0x190
[  732.329924][T16264]  should_fail_ex.cold+0x5/0xa
[  732.329946][T16264]  should_failslab+0xc2/0x120
[  732.329969][T16264]  __kmalloc_cache_noprof+0x91/0x6c0
[  732.329984][T16264]  ? __kasan_kmalloc+0xaa/0xb0
[  732.330003][T16264]  ? vidtv_psi_network_name_desc_init+0x68/0x310
[  732.330024][T16264]  vidtv_psi_network_name_desc_init+0x68/0x310
[  732.330042][T16264]  vidtv_psi_nit_table_init+0x291/0x5f0
[  732.330064][T16264]  vidtv_channel_si_init+0xccf/0x18f0
[  732.330090][T16264]  vidtv_mux_init+0x522/0xbf0
[  732.330113][T16264]  vidtv_start_feed+0x34e/0x500
[  732.330138][T16264]  ? __pfx_vidtv_start_feed+0x10/0x10
[  732.330162][T16264]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  732.330196][T16264]  dmx_section_feed_start_filtering+0x3a8/0x660
[  732.330219][T16264]  dvb_dmxdev_filter_start+0x767/0xdd0
[  732.330248][T16264]  dvb_demux_do_ioctl+0xe64/0x1200
[  732.330278][T16264]  dvb_usercopy+0x167/0x340
[  732.330298][T16264]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  732.330322][T16264]  ? __pfx_dvb_usercopy+0x10/0x10
[  732.330350][T16264]  ? __fget_files+0x21f/0x3d0
[  732.330369][T16264]  dvb_demux_ioctl+0x29/0x40
[  732.330389][T16264]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  732.330410][T16264]  __x64_sys_ioctl+0x18e/0x210
[  732.330434][T16264]  do_syscall_64+0x115/0x840
[  732.330448][T16264]  ? clear_bhb_loop+0x40/0x90
[  732.330468][T16264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.330484][T16264] RIP: 0033:0x7fc59cf9de59
[  732.330499][T16264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  732.330515][T16264] RSP: 002b:00007fc59ddd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  732.330531][T16264] RAX: ffffffffffffffda RBX: 00007fc59d226090 RCX: 00007fc59cf9de59
[  732.330542][T16264] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  732.330551][T16264] RBP: 00007fc59d033e6f R08: 0000000000000000 R09: 0000000000000000
[  732.330561][T16264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  732.330570][T16264] R13: 00007fc59d226128 R14: 00007fc59d226090 R15: 00007ffd857be228
[  732.330592][T16264]  </TASK>
[  734.614740][T16305] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2260'.
[  735.417565][T16303] Process accounting resumed
[  736.087338][T16330] FAULT_INJECTION: forcing a failure.
[  736.087338][T16330] name failslab, interval 1, probability 0, space 0, times 0
[  736.193336][T16330] CPU: 0 UID: 0 PID: 16330 Comm: syz.1.2264 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  736.193365][T16330] Tainted: [L]=SOFTLOCKUP
[  736.193371][T16330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  736.193381][T16330] Call Trace:
[  736.193387][T16330]  <TASK>
[  736.193401][T16330]  dump_stack_lvl+0x100/0x190
[  736.193427][T16330]  should_fail_ex.cold+0x5/0xa
[  736.193450][T16330]  should_failslab+0xc2/0x120
[  736.193472][T16330]  __kmalloc_cache_noprof+0x91/0x6c0
[  736.193489][T16330]  ? vidtv_psi_network_name_desc_init+0x183/0x310
[  736.193507][T16330]  ? vidtv_psi_service_list_desc_init+0x52/0x550
[  736.193528][T16330]  vidtv_psi_service_list_desc_init+0x52/0x550
[  736.193548][T16330]  vidtv_psi_nit_table_init+0x39a/0x5f0
[  736.193569][T16330]  vidtv_channel_si_init+0xccf/0x18f0
[  736.193596][T16330]  vidtv_mux_init+0x522/0xbf0
[  736.193618][T16330]  vidtv_start_feed+0x34e/0x500
[  736.193642][T16330]  ? __pfx_vidtv_start_feed+0x10/0x10
[  736.193666][T16330]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  736.193700][T16330]  dmx_section_feed_start_filtering+0x3a8/0x660
[  736.193723][T16330]  dvb_dmxdev_filter_start+0x767/0xdd0
[  736.193751][T16330]  dvb_demux_do_ioctl+0xe64/0x1200
[  736.193781][T16330]  dvb_usercopy+0x167/0x340
[  736.193800][T16330]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  736.193824][T16330]  ? __pfx_dvb_usercopy+0x10/0x10
[  736.193852][T16330]  ? __fget_files+0x21f/0x3d0
[  736.193870][T16330]  dvb_demux_ioctl+0x29/0x40
[  736.193891][T16330]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  736.193912][T16330]  __x64_sys_ioctl+0x18e/0x210
[  736.193935][T16330]  do_syscall_64+0x115/0x840
[  736.193949][T16330]  ? clear_bhb_loop+0x40/0x90
[  736.193968][T16330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.193985][T16330] RIP: 0033:0x7f39c0b9de59
[  736.193999][T16330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.194014][T16330] RSP: 002b:00007f39c1a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  736.194029][T16330] RAX: ffffffffffffffda RBX: 00007f39c0e26090 RCX: 00007f39c0b9de59
[  736.194040][T16330] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  736.194049][T16330] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  736.194059][T16330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.194068][T16330] R13: 00007f39c0e26128 R14: 00007f39c0e26090 R15: 00007ffe37cf6aa8
[  736.194089][T16330]  </TASK>
[  738.178811][T16348] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2267'.
[  738.543668][T16353] [U] 0�="�/�
[  738.559331][T16353] [U] 
[  738.588291][T16353] [U] E�e�Q��@�
[  738.635196][T16351] [U] 
[  738.675878][T16352] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2268'.
[  738.720538][T16352] tc_dump_action: action bad kind
[  738.744136][T16352] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2268'.
[  738.803701][T16352] tc_dump_action: action bad kind
[  738.996790][T16361] can: request_module (can-proto-0) failed.
[  739.116796][T16367] binder: 16364:16367 ioctl c0306201 0 returned -14
[  739.265404][T16373] FAULT_INJECTION: forcing a failure.
[  739.265404][T16373] name failslab, interval 1, probability 0, space 0, times 0
[  739.350094][T16373] CPU: 0 UID: 0 PID: 16373 Comm: syz.1.2276 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  739.350121][T16373] Tainted: [L]=SOFTLOCKUP
[  739.350127][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  739.350137][T16373] Call Trace:
[  739.350143][T16373]  <TASK>
[  739.350149][T16373]  dump_stack_lvl+0x100/0x190
[  739.350175][T16373]  should_fail_ex.cold+0x5/0xa
[  739.350197][T16373]  should_failslab+0xc2/0x120
[  739.350219][T16373]  kmem_cache_alloc_noprof+0x91/0x6a0
[  739.350237][T16373]  ? __pfx_map_id_range_down+0x10/0x10
[  739.350261][T16373]  ? security_inode_alloc+0x3b/0x2c0
[  739.350282][T16373]  security_inode_alloc+0x3b/0x2c0
[  739.350300][T16373]  inode_init_always_gfp+0xc77/0xfb0
[  739.350319][T16373]  alloc_inode+0x8e/0x250
[  739.350338][T16373]  sock_alloc+0x44/0x280
[  739.350357][T16373]  ? security_socket_create+0x7f/0x250
[  739.350375][T16373]  __sock_create+0xc2/0x860
[  739.350400][T16373]  __sys_socketpair+0x261/0x5b0
[  739.350416][T16373]  ? __pfx___sys_socketpair+0x10/0x10
[  739.350432][T16373]  ? __x64_sys_openat+0x12d/0x210
[  739.350452][T16373]  ? xfd_validate_state+0x129/0x190
[  739.350476][T16373]  __x64_sys_socketpair+0x96/0x100
[  739.350490][T16373]  ? lockdep_hardirqs_on+0x78/0x100
[  739.350514][T16373]  do_syscall_64+0x115/0x840
[  739.350527][T16373]  ? clear_bhb_loop+0x40/0x90
[  739.350546][T16373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.350561][T16373] RIP: 0033:0x7f39c0b9de59
[  739.350575][T16373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.350590][T16373] RSP: 002b:00007f39c1a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  739.350605][T16373] RAX: ffffffffffffffda RBX: 00007f39c0e25fa0 RCX: 00007f39c0b9de59
[  739.350615][T16373] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e
[  739.350625][T16373] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  739.350635][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  739.350645][T16373] R13: 00007f39c0e26038 R14: 00007f39c0e25fa0 R15: 00007ffe37cf6aa8
[  739.350665][T16373]  </TASK>
[  739.351116][T16373] socket: no more sockets
[  740.253230][T16396] binder: 16395:16396 ioctl c0306201 2000000000c0 returned -14
[  740.581839][T16405] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2282'.
[  742.074878][T16432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2289'.
[  743.960181][T16452] [U] 0�="�/�
[  743.980964][T16452] [U] 
[  743.998331][T16452] [U] E�e�Q��@�
[  744.043418][T16451] [U] 
[  744.303588][T16460] futex_wake_op: syz.0.2295 tries to shift op by -2048; fix this program
[  744.362140][T16460] futex_wake_op: syz.0.2295 tries to shift op by -2048; fix this program
[  744.436172][T16463] 0x000000000001-0x000000020000 : ""
[  744.475994][T16455] Process accounting resumed
[  744.524816][T16463] ftl_cs: FTL header corrupt!
[  744.556044][T16464] FAULT_INJECTION: forcing a failure.
[  744.556044][T16464] name failslab, interval 1, probability 0, space 0, times 0
[  744.654064][T16464] CPU: 0 UID: 0 PID: 16464 Comm: syz.3.2297 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  744.654093][T16464] Tainted: [L]=SOFTLOCKUP
[  744.654098][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  744.654107][T16464] Call Trace:
[  744.654113][T16464]  <TASK>
[  744.654120][T16464]  dump_stack_lvl+0x100/0x190
[  744.654148][T16464]  should_fail_ex.cold+0x5/0xa
[  744.654171][T16464]  should_failslab+0xc2/0x120
[  744.654193][T16464]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  744.654213][T16464]  ? __pfx___kasan_kmalloc+0x10/0x10
[  744.654235][T16464]  ? vidtv_psi_short_event_desc_init+0x312/0x5f0
[  744.654257][T16464]  kstrdup+0x51/0xe0
[  744.654276][T16464]  vidtv_psi_short_event_desc_init+0x312/0x5f0
[  744.654297][T16464]  vidtv_psi_desc_clone+0x33f/0x5d0
[  744.654316][T16464]  vidtv_channel_si_init+0x76c/0x18f0
[  744.654342][T16464]  vidtv_mux_init+0x522/0xbf0
[  744.654365][T16464]  vidtv_start_feed+0x34e/0x500
[  744.654388][T16464]  ? __pfx_vidtv_start_feed+0x10/0x10
[  744.654412][T16464]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  744.654446][T16464]  dmx_section_feed_start_filtering+0x3a8/0x660
[  744.654469][T16464]  dvb_dmxdev_filter_start+0x767/0xdd0
[  744.654498][T16464]  dvb_demux_do_ioctl+0xe64/0x1200
[  744.654527][T16464]  dvb_usercopy+0x167/0x340
[  744.654550][T16464]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  744.654574][T16464]  ? __pfx_dvb_usercopy+0x10/0x10
[  744.654602][T16464]  ? __fget_files+0x21f/0x3d0
[  744.654621][T16464]  dvb_demux_ioctl+0x29/0x40
[  744.654641][T16464]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  744.654663][T16464]  __x64_sys_ioctl+0x18e/0x210
[  744.654687][T16464]  do_syscall_64+0x115/0x840
[  744.654701][T16464]  ? clear_bhb_loop+0x40/0x90
[  744.654720][T16464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.654737][T16464] RIP: 0033:0x7fc59cf9de59
[  744.654751][T16464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.654767][T16464] RSP: 002b:00007fc59ddd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  744.654782][T16464] RAX: ffffffffffffffda RBX: 00007fc59d226090 RCX: 00007fc59cf9de59
[  744.654793][T16464] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  744.654802][T16464] RBP: 00007fc59d033e6f R08: 0000000000000000 R09: 0000000000000000
[  744.654811][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  744.654820][T16464] R13: 00007fc59d226128 R14: 00007fc59d226090 R15: 00007ffd857be228
[  744.654840][T16464]  </TASK>
[  745.289174][T16469] [U] 0�="�/�
[  745.296193][T16469] [U] 
[  745.308012][T16469] [U] E�e�Q��@�
[  745.321933][T16468] [U] 
[  747.292350][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  747.302524][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  747.499856][T16504] program syz.1.2303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  748.824742][T16518] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2308'.
[  751.142892][T16544] FAULT_INJECTION: forcing a failure.
[  751.142892][T16544] name failslab, interval 1, probability 0, space 0, times 0
[  751.205137][T16544] CPU: 0 UID: 0 PID: 16544 Comm: syz.2.2315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  751.205165][T16544] Tainted: [L]=SOFTLOCKUP
[  751.205171][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  751.205181][T16544] Call Trace:
[  751.205188][T16544]  <TASK>
[  751.205195][T16544]  dump_stack_lvl+0x100/0x190
[  751.205220][T16544]  should_fail_ex.cold+0x5/0xa
[  751.205242][T16544]  should_failslab+0xc2/0x120
[  751.205265][T16544]  __kmalloc_cache_noprof+0x91/0x6c0
[  751.205283][T16544]  ? rfkill_fop_open+0x1cc/0x480
[  751.205309][T16544]  rfkill_fop_open+0x1cc/0x480
[  751.205332][T16544]  ? __pfx_rfkill_fop_open+0x10/0x10
[  751.205355][T16544]  misc_open+0x26d/0x450
[  751.205371][T16544]  ? __pfx_misc_open+0x10/0x10
[  751.205386][T16544]  chrdev_open+0x234/0x6a0
[  751.205402][T16544]  ? __pfx_apparmor_file_open+0x10/0x10
[  751.205420][T16544]  ? __pfx_chrdev_open+0x10/0x10
[  751.205437][T16544]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  751.205458][T16544]  do_dentry_open+0x6ab/0x14d0
[  751.205473][T16544]  ? __pfx_chrdev_open+0x10/0x10
[  751.205494][T16544]  vfs_open+0x82/0x3f0
[  751.205516][T16544]  path_openat+0x2873/0x4280
[  751.205540][T16544]  ? __pfx_path_openat+0x10/0x10
[  751.205562][T16544]  do_file_open+0x20e/0x430
[  751.205582][T16544]  ? __pfx_do_file_open+0x10/0x10
[  751.205612][T16544]  ? alloc_fd+0x471/0x7a0
[  751.205629][T16544]  ? do_getname+0x191/0x390
[  751.205650][T16544]  do_sys_openat2+0x10f/0x1e0
[  751.205670][T16544]  ? __pfx_do_sys_openat2+0x10/0x10
[  751.205691][T16544]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  751.205723][T16544]  __x64_sys_openat+0x12d/0x210
[  751.205744][T16544]  ? __pfx___x64_sys_openat+0x10/0x10
[  751.205771][T16544]  do_syscall_64+0x115/0x840
[  751.205785][T16544]  ? clear_bhb_loop+0x40/0x90
[  751.205803][T16544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.205819][T16544] RIP: 0033:0x7f7bd6d9de59
[  751.205833][T16544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.205847][T16544] RSP: 002b:00007f7bd7ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  751.205863][T16544] RAX: ffffffffffffffda RBX: 00007f7bd7025fa0 RCX: 00007f7bd6d9de59
[  751.205873][T16544] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  751.205884][T16544] RBP: 00007f7bd6e33e6f R08: 0000000000000000 R09: 0000000000000000
[  751.205893][T16544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  751.205903][T16544] R13: 00007f7bd7026038 R14: 00007f7bd7025fa0 R15: 00007ffe5e29b708
[  751.205924][T16544]  </TASK>
[  752.566883][T16513] Process accounting paused
[  752.792774][T16563] binder: 16562:16563 ioctl c0306201 2000000000c0 returned -14
[  754.696688][T16590] [U] 0�="�/�
[  754.721871][T16590] [U] 
[  754.737080][T16590] [U] E�e�Q��@�
[  755.037842][T16589] [U] 
[  756.021587][T16607] binder: 16605:16607 ioctl c0306201 2000000000c0 returned -14
[  757.093362][T12567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  757.107789][T12567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  757.127612][T12567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  757.142523][T12567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  757.150729][T12567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  759.210975][T12567] Bluetooth: hci4: command tx timeout
[  759.446117][T16596] Process accounting resumed
[  760.092005][ T8869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.532607][ T8869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.794074][ T8869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.288368][T12567] Bluetooth: hci4: command tx timeout
[  762.014550][T16671] netlink: 'syz.1.2337': attribute type 1 has an invalid length.
[  762.050238][ T8869] bridge_slave_1: left allmulticast mode
[  762.072455][T16674] binder: 16673:16674 ioctl c0306201 2000000000c0 returned -14
[  762.097354][ T8869] bridge_slave_1: left promiscuous mode
[  762.107661][T16671] nbd: error processing sock list
[  762.138330][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.226459][ T8869] bridge_slave_0: left allmulticast mode
[  762.279034][ T8869] bridge_slave_0: left promiscuous mode
[  762.315862][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.368476][T12567] Bluetooth: hci4: command tx timeout
[  763.852948][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  765.387840][T16616] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.425797][T16616] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.454081][T12567] Bluetooth: hci4: command tx timeout
[  765.481108][T16616] bridge_slave_0: entered allmulticast mode
[  765.521627][T16616] bridge_slave_0: entered promiscuous mode
[  765.734241][T16725] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5626] was attempted by ""[16725]
[  765.754152][T16721] [U] 0�="�/�
[  765.770577][T16721] [U] 
[  765.782453][T16721] [U] E�e�Q��@�
[  765.811992][T16616] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.846179][T16719] [U] 
[  765.849849][T16616] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.880192][T16616] bridge_slave_1: entered allmulticast mode
[  765.905589][T16616] bridge_slave_1: entered promiscuous mode
[  765.929110][T16725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2341'.
[  766.042125][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  766.083241][T16728] [U] 0�="�/�
[  766.104894][T16728] [U] 
[  766.121370][T16728] [U] E�e�Q��@�
[  766.159284][T16616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.170454][T16727] [U] 
[  766.318224][T16616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.774543][T16616] team0: Port device team_slave_0 added
[  766.956656][T16739] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2344'.
[  766.983465][T16616] team0: Port device team_slave_1 added
[  767.630006][T16616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  767.670006][T16616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  767.807684][T16616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  767.973540][T16616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  768.002485][T16616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  768.116772][T16616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.202664][ T8869] hsr_slave_0: left promiscuous mode
[  768.231578][ T8869] hsr_slave_1: left promiscuous mode
[  768.254447][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  768.291867][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  768.325280][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  768.351938][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  768.411081][ T8869] veth1_macvtap: left promiscuous mode
[  768.424343][ T8869] veth0_macvtap: left promiscuous mode
[  768.435488][ T8869] veth1_vlan: left promiscuous mode
[  768.456267][ T8869] veth0_vlan: left promiscuous mode
[  768.894882][ T8869] team0 (unregistering): Port device team_slave_1 removed
[  768.930700][ T8869] team0 (unregistering): Port device team_slave_0 removed
[  769.194265][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3
[  769.515287][T16616] hsr_slave_0: entered promiscuous mode
[  769.554897][T16616] hsr_slave_1: entered promiscuous mode
[  769.771849][T16769] random: crng reseeded on system resumption
[  769.992755][T16771] hub 1-0:1.0: USB hub found
[  770.170737][T16771] hub 1-0:1.0: 1 port detected
[  773.391048][T16824] [U] 0�="�/�
[  773.417431][T16824] [U] 
[  773.432476][T16824] [U] E�e�Q��@�
[  773.468087][T16823] [U] 
[  774.305099][T16616] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  774.365490][T16616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  774.415326][T16616] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  774.491081][T16616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  774.539197][T16616] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  774.593945][T16616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  774.636423][T16616] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  774.701573][T16616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  775.202287][T16616] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.335664][T16616] 8021q: adding VLAN 0 to HW filter on device team0
[  775.472078][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.479249][ T8872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.627524][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.634703][ T8872] bridge0: port 2(bridge_slave_1) entered forwarding state
[  776.054692][T16881] FAULT_INJECTION: forcing a failure.
[  776.054692][T16881] name failslab, interval 1, probability 0, space 0, times 0
[  776.156103][T16881] CPU: 0 UID: 0 PID: 16881 Comm: syz.1.2357 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  776.156132][T16881] Tainted: [L]=SOFTLOCKUP
[  776.156138][T16881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  776.156148][T16881] Call Trace:
[  776.156154][T16881]  <TASK>
[  776.156161][T16881]  dump_stack_lvl+0x100/0x190
[  776.156187][T16881]  should_fail_ex.cold+0x5/0xa
[  776.156209][T16881]  should_failslab+0xc2/0x120
[  776.156231][T16881]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  776.156251][T16881]  ? __pfx___kasan_kmalloc+0x10/0x10
[  776.156271][T16881]  ? vidtv_psi_short_event_desc_init+0x429/0x5f0
[  776.156294][T16881]  kstrdup+0x51/0xe0
[  776.156313][T16881]  vidtv_psi_short_event_desc_init+0x429/0x5f0
[  776.156334][T16881]  vidtv_psi_desc_clone+0x33f/0x5d0
[  776.156352][T16881]  vidtv_channel_si_init+0x76c/0x18f0
[  776.156379][T16881]  vidtv_mux_init+0x522/0xbf0
[  776.156401][T16881]  vidtv_start_feed+0x34e/0x500
[  776.156425][T16881]  ? __pfx_vidtv_start_feed+0x10/0x10
[  776.156449][T16881]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  776.156483][T16881]  dmx_section_feed_start_filtering+0x3a8/0x660
[  776.156506][T16881]  dvb_dmxdev_filter_start+0x767/0xdd0
[  776.156535][T16881]  dvb_demux_do_ioctl+0xe64/0x1200
[  776.156565][T16881]  dvb_usercopy+0x167/0x340
[  776.156584][T16881]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  776.156608][T16881]  ? __pfx_dvb_usercopy+0x10/0x10
[  776.156636][T16881]  ? __fget_files+0x21f/0x3d0
[  776.156655][T16881]  dvb_demux_ioctl+0x29/0x40
[  776.156722][T16881]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  776.156744][T16881]  __x64_sys_ioctl+0x18e/0x210
[  776.156769][T16881]  do_syscall_64+0x115/0x840
[  776.156786][T16881]  ? clear_bhb_loop+0x40/0x90
[  776.156805][T16881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.156821][T16881] RIP: 0033:0x7f39c0b9de59
[  776.156837][T16881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.156852][T16881] RSP: 002b:00007f39c1a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  776.156867][T16881] RAX: ffffffffffffffda RBX: 00007f39c0e26090 RCX: 00007f39c0b9de59
[  776.156878][T16881] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  776.156888][T16881] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  776.156897][T16881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  776.156907][T16881] R13: 00007f39c0e26128 R14: 00007f39c0e26090 R15: 00007ffe37cf6aa8
[  776.156928][T16881]  </TASK>
[  776.664714][T16868] Process accounting paused
[  778.266872][T16901] FAULT_INJECTION: forcing a failure.
[  778.266872][T16901] name failslab, interval 1, probability 0, space 0, times 0
[  778.331021][T16901] CPU: 0 UID: 0 PID: 16901 Comm: syz.2.2359 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  778.331059][T16901] Tainted: [L]=SOFTLOCKUP
[  778.331065][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  778.331075][T16901] Call Trace:
[  778.331082][T16901]  <TASK>
[  778.331089][T16901]  dump_stack_lvl+0x100/0x190
[  778.331114][T16901]  should_fail_ex.cold+0x5/0xa
[  778.331137][T16901]  should_failslab+0xc2/0x120
[  778.331159][T16901]  __kmalloc_cache_noprof+0x91/0x6c0
[  778.331177][T16901]  ? rfkill_fop_open+0x1cc/0x480
[  778.331204][T16901]  rfkill_fop_open+0x1cc/0x480
[  778.331227][T16901]  ? __pfx_rfkill_fop_open+0x10/0x10
[  778.331251][T16901]  misc_open+0x26d/0x450
[  778.331267][T16901]  ? __pfx_misc_open+0x10/0x10
[  778.331282][T16901]  chrdev_open+0x234/0x6a0
[  778.331298][T16901]  ? __pfx_apparmor_file_open+0x10/0x10
[  778.331316][T16901]  ? __pfx_chrdev_open+0x10/0x10
[  778.331333][T16901]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  778.331355][T16901]  do_dentry_open+0x6ab/0x14d0
[  778.331371][T16901]  ? __pfx_chrdev_open+0x10/0x10
[  778.331392][T16901]  vfs_open+0x82/0x3f0
[  778.331413][T16901]  path_openat+0x2873/0x4280
[  778.331438][T16901]  ? __pfx_path_openat+0x10/0x10
[  778.331459][T16901]  do_file_open+0x20e/0x430
[  778.331480][T16901]  ? __pfx_do_file_open+0x10/0x10
[  778.331510][T16901]  ? alloc_fd+0x471/0x7a0
[  778.331527][T16901]  ? do_getname+0x191/0x390
[  778.331548][T16901]  do_sys_openat2+0x10f/0x1e0
[  778.331568][T16901]  ? __pfx_do_sys_openat2+0x10/0x10
[  778.331589][T16901]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  778.331619][T16901]  __x64_sys_openat+0x12d/0x210
[  778.331640][T16901]  ? __pfx___x64_sys_openat+0x10/0x10
[  778.331667][T16901]  do_syscall_64+0x115/0x840
[  778.331681][T16901]  ? clear_bhb_loop+0x40/0x90
[  778.331700][T16901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.331716][T16901] RIP: 0033:0x7f7bd6d9de59
[  778.331730][T16901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.331746][T16901] RSP: 002b:00007f7bd7ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  778.331761][T16901] RAX: ffffffffffffffda RBX: 00007f7bd7025fa0 RCX: 00007f7bd6d9de59
[  778.331772][T16901] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  778.331782][T16901] RBP: 00007f7bd6e33e6f R08: 0000000000000000 R09: 0000000000000000
[  778.331791][T16901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  778.331800][T16901] R13: 00007f7bd7026038 R14: 00007f7bd7025fa0 R15: 00007ffe5e29b708
[  778.331821][T16901]  </TASK>
[  779.365124][T16923] [U] 0�="�/�
[  779.395155][T16923] [U] 
[  779.413388][T16923] [U] E�e�Q��@�
[  779.456411][T16922] [U] 
[  779.506531][T16932] random: crng reseeded on system resumption
[  779.647504][T16616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  779.882861][T16616] veth0_vlan: entered promiscuous mode
[  779.895013][T16937] hub 1-0:1.0: USB hub found
[  779.994423][T16616] veth1_vlan: entered promiscuous mode
[  780.062064][T16937] hub 1-0:1.0: 1 port detected
[  780.184964][T16616] veth0_macvtap: entered promiscuous mode
[  780.261110][T16616] veth1_macvtap: entered promiscuous mode
[  780.373652][T16616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  780.479766][T16616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  780.559811][ T8114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  780.626973][ T8114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  780.753941][ T8114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  780.820490][ T8114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  781.284264][ T8872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  781.351361][ T8872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  781.495710][ T8114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  781.560266][ T8114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  782.037581][T16985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  782.639686][T16961] Process accounting resumed
[  785.786745][T17020] [U] 0�="�/�
[  785.821676][T17020] [U] 
[  785.842476][T17020] [U] E�e�Q��@�
[  785.906412][T17019] [U] 
[  785.962573][ T8094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  785.974695][ T8094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  785.984644][ T8094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  785.992428][ T8094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  786.000519][ T8094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  786.398634][T17029] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2376'.
[  787.033345][ T8869] bridge_slave_1: left allmulticast mode
[  787.059520][ T8869] bridge_slave_1: left promiscuous mode
[  787.087537][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.153505][ T8869] bridge_slave_0: left allmulticast mode
[  787.180642][ T8869] bridge_slave_0: left promiscuous mode
[  787.205327][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.750900][ T8869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.795394][ T8869] bond0 (unregistering): Released all slaves
[  787.932256][ T8869] �: left promiscuous mode
[  788.088568][ T8094] Bluetooth: hci1: command tx timeout
[  788.717722][T17067] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2383'.
[  788.793039][T17067] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.800519][T17067] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.910695][ T8869] hsr_slave_0: left promiscuous mode
[  788.917836][ T8869] hsr_slave_1: left promiscuous mode
[  788.924129][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  788.932857][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  788.940926][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  788.949717][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  788.964008][ T8869] veth1_macvtap: left promiscuous mode
[  788.970408][ T8869] veth0_macvtap: left promiscuous mode
[  788.976137][ T8869] veth1_vlan: left promiscuous mode
[  788.982391][ T8869] veth0_vlan: left promiscuous mode
[  789.174003][ T8869] team0 (unregistering): Port device team_slave_1 removed
[  789.207363][ T8869] team0 (unregistering): Port device team_slave_0 removed
[  789.595257][T17060] Process accounting paused
[  789.633910][T17073] binder: 17072:17073 ioctl c0306201 2000000000c0 returned -14
[  789.783748][T17076] binder: 17075:17076 ioctl c0306201 2000000000c0 returned -14
[  789.918602][T17080] futex_wake_op: syz.3.2385 tries to shift op by -2048; fix this program
[  789.939859][T17080] futex_wake_op: syz.3.2385 tries to shift op by -2048; fix this program
[  789.982664][T17080] 0x000000000001-0x000000020000 : ""
[  790.104832][T17080] ftl_cs: FTL header corrupt!
[  790.171099][ T8094] Bluetooth: hci1: command tx timeout
[  790.195263][T17092] binder: 17089:17092 ioctl c0306201 2000000000c0 returned -14
[  790.561194][T17097] FAULT_INJECTION: forcing a failure.
[  790.561194][T17097] name failslab, interval 1, probability 0, space 0, times 0
[  790.621646][T17097] CPU: 0 UID: 0 PID: 17097 Comm: syz.0.2388 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  790.621674][T17097] Tainted: [L]=SOFTLOCKUP
[  790.621679][T17097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  790.621690][T17097] Call Trace:
[  790.621696][T17097]  <TASK>
[  790.621703][T17097]  dump_stack_lvl+0x100/0x190
[  790.621729][T17097]  should_fail_ex.cold+0x5/0xa
[  790.621750][T17097]  should_failslab+0xc2/0x120
[  790.621772][T17097]  __kmalloc_cache_noprof+0x91/0x6c0
[  790.621790][T17097]  ? vidtv_channel_si_init+0xa43/0x18f0
[  790.621815][T17097]  vidtv_channel_si_init+0xa43/0x18f0
[  790.621841][T17097]  vidtv_mux_init+0x522/0xbf0
[  790.621864][T17097]  vidtv_start_feed+0x34e/0x500
[  790.621897][T17097]  ? __pfx_vidtv_start_feed+0x10/0x10
[  790.621922][T17097]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  790.621956][T17097]  dmx_section_feed_start_filtering+0x3a8/0x660
[  790.621981][T17097]  dvb_dmxdev_filter_start+0x767/0xdd0
[  790.622010][T17097]  dvb_demux_do_ioctl+0xe64/0x1200
[  790.622039][T17097]  dvb_usercopy+0x167/0x340
[  790.622059][T17097]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  790.622084][T17097]  ? __pfx_dvb_usercopy+0x10/0x10
[  790.622112][T17097]  ? __fget_files+0x21f/0x3d0
[  790.622131][T17097]  dvb_demux_ioctl+0x29/0x40
[  790.622151][T17097]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  790.622172][T17097]  __x64_sys_ioctl+0x18e/0x210
[  790.622195][T17097]  do_syscall_64+0x115/0x840
[  790.622210][T17097]  ? clear_bhb_loop+0x40/0x90
[  790.622229][T17097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  790.622245][T17097] RIP: 0033:0x7fbba939de59
[  790.622260][T17097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  790.622276][T17097] RSP: 002b:00007fbbaa242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  790.622291][T17097] RAX: ffffffffffffffda RBX: 00007fbba9626090 RCX: 00007fbba939de59
[  790.622301][T17097] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  790.622312][T17097] RBP: 00007fbba9433e6f R08: 0000000000000000 R09: 0000000000000000
[  790.622321][T17097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  790.622331][T17097] R13: 00007fbba9626128 R14: 00007fbba9626090 R15: 00007ffc2cce6088
[  790.622352][T17097]  </TASK>
[  791.573808][T17022] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.621259][T17022] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.656299][T17022] bridge_slave_0: entered allmulticast mode
[  791.713543][T17022] bridge_slave_0: entered promiscuous mode
[  791.750284][T17022] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.780604][T17022] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.798391][T17022] bridge_slave_1: entered allmulticast mode
[  791.811438][T17022] bridge_slave_1: entered promiscuous mode
[  792.035799][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  792.074430][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  792.248074][ T8094] Bluetooth: hci1: command tx timeout
[  792.320967][T17022] team0: Port device team_slave_0 added
[  792.348982][T17022] team0: Port device team_slave_1 added
[  792.613332][T17119] binder: 17118:17119 ioctl c0306201 2000000000c0 returned -14
[  792.948908][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  792.974052][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  793.079389][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  793.340369][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  793.367318][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  793.461819][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.215997][T17022] hsr_slave_0: entered promiscuous mode
[  794.302320][T17022] hsr_slave_1: entered promiscuous mode
[  794.328833][ T8094] Bluetooth: hci1: command tx timeout
[  794.396805][T17022] debugfs: 'hsr0' already exists in 'hsr'
[  794.495876][T17022] Cannot create hsr debugfs directory
[  794.853011][T17137] binder: 17136:17137 ioctl c0306201 2000000000c0 returned -14
[  795.538897][T17144] block nbd0: NBD_DISCONNECT
[  796.058600][T17151] [U] 0�="�/�
[  796.078997][T17151] [U] 
[  796.094169][T17151] [U] E�e�Q��@�
[  796.145507][T17150] [U] 
[  796.419796][T17022] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  796.450145][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  796.468819][T17022] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  796.488794][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  796.506381][T17022] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  796.540139][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  796.571895][T17022] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  796.613163][T17022] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  796.849347][T17022] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.924397][T17022] 8021q: adding VLAN 0 to HW filter on device team0
[  796.961600][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.968808][ T8875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  797.025560][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.032766][ T8875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  797.310450][T17173] futex_wake_op: syz.1.2401 tries to shift op by -2048; fix this program
[  797.341236][T17155] Process accounting resumed
[  797.415108][T17173] futex_wake_op: syz.1.2401 tries to shift op by -2048; fix this program
[  799.978114][T17206] binder: 17205:17206 ioctl c0306201 2000000000c0 returned -14
[  800.093334][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0
[  800.533825][T17022] veth0_vlan: entered promiscuous mode
[  800.657894][T17022] veth1_vlan: entered promiscuous mode
[  801.240847][T17022] veth0_macvtap: entered promiscuous mode
[  801.348542][T17022] veth1_macvtap: entered promiscuous mode
[  801.569923][T17221] binder: 17220:17221 ioctl c0306201 2000000000c0 returned -14
[  801.656068][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.849405][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.215586][T17227] [U] 0�="�/�
[  802.230874][T17227] [U] 
[  802.252486][T17227] [U] E�e�Q��@�
[  802.273255][ T8873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  802.326899][T17226] [U] 
[  802.404470][ T8875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.473725][ T8875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.586202][ T8875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.680220][T17231] FAULT_INJECTION: forcing a failure.
[  802.680220][T17231] name failslab, interval 1, probability 0, space 0, times 0
[  802.832837][T17231] CPU: 0 UID: 0 PID: 17231 Comm: syz.1.2412 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  802.832865][T17231] Tainted: [L]=SOFTLOCKUP
[  802.832871][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  802.832882][T17231] Call Trace:
[  802.832888][T17231]  <TASK>
[  802.832895][T17231]  dump_stack_lvl+0x100/0x190
[  802.832923][T17231]  should_fail_ex.cold+0x5/0xa
[  802.832948][T17231]  should_failslab+0xc2/0x120
[  802.832971][T17231]  __kmalloc_cache_noprof+0x91/0x6c0
[  802.832987][T17231]  ? kasan_save_track+0x14/0x30
[  802.833007][T17231]  ? __kasan_kmalloc+0xaa/0xb0
[  802.833025][T17231]  ? vidtv_psi_nit_table_init+0x5b/0x5f0
[  802.833049][T17231]  vidtv_psi_nit_table_init+0x5b/0x5f0
[  802.833070][T17231]  vidtv_channel_si_init+0xccf/0x18f0
[  802.833096][T17231]  vidtv_mux_init+0x522/0xbf0
[  802.833119][T17231]  vidtv_start_feed+0x34e/0x500
[  802.833145][T17231]  ? __pfx_vidtv_start_feed+0x10/0x10
[  802.833169][T17231]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  802.833203][T17231]  dmx_section_feed_start_filtering+0x3a8/0x660
[  802.833227][T17231]  dvb_dmxdev_filter_start+0x767/0xdd0
[  802.833257][T17231]  dvb_demux_do_ioctl+0xe64/0x1200
[  802.833285][T17231]  dvb_usercopy+0x167/0x340
[  802.833305][T17231]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  802.833328][T17231]  ? __pfx_dvb_usercopy+0x10/0x10
[  802.833357][T17231]  ? __fget_files+0x21f/0x3d0
[  802.833376][T17231]  dvb_demux_ioctl+0x29/0x40
[  802.833396][T17231]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  802.833426][T17231]  __x64_sys_ioctl+0x18e/0x210
[  802.833450][T17231]  do_syscall_64+0x115/0x840
[  802.833465][T17231]  ? clear_bhb_loop+0x40/0x90
[  802.833484][T17231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.833499][T17231] RIP: 0033:0x7f39c0b9de59
[  802.833515][T17231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.833530][T17231] RSP: 002b:00007f39c1a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  802.833546][T17231] RAX: ffffffffffffffda RBX: 00007f39c0e26090 RCX: 00007f39c0b9de59
[  802.833556][T17231] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  802.833566][T17231] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  802.833576][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.833586][T17231] R13: 00007f39c0e26128 R14: 00007f39c0e26090 R15: 00007ffe37cf6aa8
[  802.833613][T17231]  </TASK>
[  803.426166][ T8875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.472441][ T8875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.535302][ T8873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.560730][ T8873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.674006][T17249] binder: 17248:17249 ioctl c0306201 2000000000c0 returned -14
[  803.922255][T17255] FAULT_INJECTION: forcing a failure.
[  803.922255][T17255] name failslab, interval 1, probability 0, space 0, times 0
[  804.010213][T17255] CPU: 0 UID: 0 PID: 17255 Comm: syz.2.2374 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  804.010241][T17255] Tainted: [L]=SOFTLOCKUP
[  804.010247][T17255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  804.010257][T17255] Call Trace:
[  804.010270][T17255]  <TASK>
[  804.010277][T17255]  dump_stack_lvl+0x100/0x190
[  804.010302][T17255]  should_fail_ex.cold+0x5/0xa
[  804.010324][T17255]  should_failslab+0xc2/0x120
[  804.010347][T17255]  __kmalloc_cache_noprof+0x91/0x6c0
[  804.010364][T17255]  ? rfkill_fop_open+0x1cc/0x480
[  804.010390][T17255]  rfkill_fop_open+0x1cc/0x480
[  804.010413][T17255]  ? __pfx_rfkill_fop_open+0x10/0x10
[  804.010436][T17255]  misc_open+0x26d/0x450
[  804.010457][T17255]  ? __pfx_misc_open+0x10/0x10
[  804.010472][T17255]  chrdev_open+0x234/0x6a0
[  804.010488][T17255]  ? __pfx_apparmor_file_open+0x10/0x10
[  804.010507][T17255]  ? __pfx_chrdev_open+0x10/0x10
[  804.010523][T17255]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  804.010545][T17255]  do_dentry_open+0x6ab/0x14d0
[  804.010561][T17255]  ? __pfx_chrdev_open+0x10/0x10
[  804.010581][T17255]  vfs_open+0x82/0x3f0
[  804.010604][T17255]  path_openat+0x2873/0x4280
[  804.010629][T17255]  ? __pfx_path_openat+0x10/0x10
[  804.010650][T17255]  do_file_open+0x20e/0x430
[  804.010667][T17255]  ? __pfx_do_file_open+0x10/0x10
[  804.010697][T17255]  ? alloc_fd+0x471/0x7a0
[  804.010714][T17255]  ? do_getname+0x191/0x390
[  804.010735][T17255]  do_sys_openat2+0x10f/0x1e0
[  804.010756][T17255]  ? __pfx_do_sys_openat2+0x10/0x10
[  804.010776][T17255]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  804.010806][T17255]  __x64_sys_openat+0x12d/0x210
[  804.010827][T17255]  ? __pfx___x64_sys_openat+0x10/0x10
[  804.010854][T17255]  do_syscall_64+0x115/0x840
[  804.010868][T17255]  ? clear_bhb_loop+0x40/0x90
[  804.010886][T17255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.010902][T17255] RIP: 0033:0x7f7710d9de59
[  804.010916][T17255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.010931][T17255] RSP: 002b:00007f7711c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  804.010946][T17255] RAX: ffffffffffffffda RBX: 00007f7711025fa0 RCX: 00007f7710d9de59
[  804.010957][T17255] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  804.010967][T17255] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  804.010977][T17255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  804.010987][T17255] R13: 00007f7711026038 R14: 00007f7711025fa0 R15: 00007ffda02eacc8
[  804.011008][T17255]  </TASK>
[  804.617702][T17266] FAULT_INJECTION: forcing a failure.
[  804.617702][T17266] name failslab, interval 1, probability 0, space 0, times 0
[  804.730125][T17266] CPU: 0 UID: 0 PID: 17266 Comm: syz.1.2418 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  804.730152][T17266] Tainted: [L]=SOFTLOCKUP
[  804.730158][T17266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  804.730169][T17266] Call Trace:
[  804.730175][T17266]  <TASK>
[  804.730188][T17266]  dump_stack_lvl+0x100/0x190
[  804.730215][T17266]  should_fail_ex.cold+0x5/0xa
[  804.730239][T17266]  should_failslab+0xc2/0x120
[  804.730261][T17266]  __kmalloc_noprof+0xfc/0x820
[  804.730281][T17266]  ? vidtv_psi_pmt_create_sec_for_each_pat_entry+0x189/0x670
[  804.730307][T17266]  vidtv_psi_pmt_create_sec_for_each_pat_entry+0x189/0x670
[  804.730331][T17266]  vidtv_channel_si_init+0xf2d/0x18f0
[  804.730358][T17266]  vidtv_mux_init+0x522/0xbf0
[  804.730381][T17266]  vidtv_start_feed+0x34e/0x500
[  804.730406][T17266]  ? __pfx_vidtv_start_feed+0x10/0x10
[  804.730430][T17266]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  804.730466][T17266]  dmx_section_feed_start_filtering+0x3a8/0x660
[  804.730489][T17266]  dvb_dmxdev_filter_start+0x767/0xdd0
[  804.730518][T17266]  dvb_demux_do_ioctl+0xe64/0x1200
[  804.730547][T17266]  dvb_usercopy+0x167/0x340
[  804.730567][T17266]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  804.730591][T17266]  ? __pfx_dvb_usercopy+0x10/0x10
[  804.730619][T17266]  ? __fget_files+0x21f/0x3d0
[  804.730637][T17266]  dvb_demux_ioctl+0x29/0x40
[  804.730657][T17266]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  804.730678][T17266]  __x64_sys_ioctl+0x18e/0x210
[  804.730702][T17266]  do_syscall_64+0x115/0x840
[  804.730716][T17266]  ? clear_bhb_loop+0x40/0x90
[  804.730735][T17266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.730751][T17266] RIP: 0033:0x7f39c0b9de59
[  804.730765][T17266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  804.730781][T17266] RSP: 002b:00007f39c1a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  804.730796][T17266] RAX: ffffffffffffffda RBX: 00007f39c0e26090 RCX: 00007f39c0b9de59
[  804.730806][T17266] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  804.730816][T17266] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  804.730825][T17266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  804.730834][T17266] R13: 00007f39c0e26128 R14: 00007f39c0e26090 R15: 00007ffe37cf6aa8
[  804.730856][T17266]  </TASK>
[  805.602871][T12567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  805.621592][T12567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  805.630502][T12567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  805.641098][T12567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  805.650071][T12567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  806.687047][ T8869] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.135181][ T8869] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.456322][ T8869] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.699910][T12567] Bluetooth: hci0: command tx timeout
[  807.736517][ T8869] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.184787][T17317] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2424'.
[  808.596440][ T8869] bridge_slave_1: left allmulticast mode
[  808.631037][ T8869] bridge_slave_1: left promiscuous mode
[  808.667351][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.726608][ T8869] bridge_slave_0: left allmulticast mode
[  808.742067][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  808.751849][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  808.786548][ T8869] bridge_slave_0: left promiscuous mode
[  808.816502][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.928804][T17330] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2426'.
[  809.529784][ T8869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  809.637052][ T8869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  809.687530][ T8869] bond0 (unregistering): Released all slaves
[  809.771581][T12567] Bluetooth: hci0: command tx timeout
[  809.958833][T17355] FAULT_INJECTION: forcing a failure.
[  809.958833][T17355] name failslab, interval 1, probability 0, space 0, times 0
[  810.014829][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  810.046581][T17355] CPU: 0 UID: 0 PID: 17355 Comm: syz.1.2429 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  810.046609][T17355] Tainted: [L]=SOFTLOCKUP
[  810.046614][T17355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  810.046624][T17355] Call Trace:
[  810.046631][T17355]  <TASK>
[  810.046639][T17355]  dump_stack_lvl+0x100/0x190
[  810.046665][T17355]  should_fail_ex.cold+0x5/0xa
[  810.046688][T17355]  should_failslab+0xc2/0x120
[  810.046714][T17355]  __kmalloc_cache_noprof+0x91/0x6c0
[  810.046731][T17355]  ? __kasan_kmalloc+0xaa/0xb0
[  810.046751][T17355]  ? vidtv_psi_nit_table_init+0x9b/0x5f0
[  810.046774][T17355]  vidtv_psi_nit_table_init+0x9b/0x5f0
[  810.046796][T17355]  vidtv_channel_si_init+0xccf/0x18f0
[  810.046822][T17355]  vidtv_mux_init+0x522/0xbf0
[  810.046846][T17355]  vidtv_start_feed+0x34e/0x500
[  810.046870][T17355]  ? __pfx_vidtv_start_feed+0x10/0x10
[  810.046894][T17355]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  810.046928][T17355]  dmx_section_feed_start_filtering+0x3a8/0x660
[  810.046957][T17355]  dvb_dmxdev_filter_start+0x767/0xdd0
[  810.046988][T17355]  dvb_demux_do_ioctl+0xe64/0x1200
[  810.047019][T17355]  dvb_usercopy+0x167/0x340
[  810.047040][T17355]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  810.047065][T17355]  ? __pfx_dvb_usercopy+0x10/0x10
[  810.047093][T17355]  ? __fget_files+0x21f/0x3d0
[  810.047119][T17355]  dvb_demux_ioctl+0x29/0x40
[  810.047140][T17355]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  810.047162][T17355]  __x64_sys_ioctl+0x18e/0x210
[  810.047186][T17355]  do_syscall_64+0x115/0x840
[  810.047200][T17355]  ? clear_bhb_loop+0x40/0x90
[  810.047219][T17355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.047235][T17355] RIP: 0033:0x7f39c0b9de59
[  810.047250][T17355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.047264][T17355] RSP: 002b:00007f39c1a46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  810.047279][T17355] RAX: ffffffffffffffda RBX: 00007f39c0e26090 RCX: 00007f39c0b9de59
[  810.047289][T17355] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  810.047298][T17355] RBP: 00007f39c0c33e6f R08: 0000000000000000 R09: 0000000000000000
[  810.047307][T17355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  810.047317][T17355] R13: 00007f39c0e26128 R14: 00007f39c0e26090 R15: 00007ffe37cf6aa8
[  810.047355][T17355]  </TASK>
[  810.566905][ T8869] �: left promiscuous mode
[  811.019300][ T8869] hsr_slave_0: left promiscuous mode
[  811.041034][ T8869] hsr_slave_1: left promiscuous mode
[  811.061696][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.079309][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.104896][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.129684][ T8869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.153202][ T8869] veth1_macvtap: left promiscuous mode
[  811.172976][ T8869] veth0_macvtap: left promiscuous mode
[  811.504136][ T8869] team0 (unregistering): Port device team_slave_1 removed
[  811.537598][ T8869] team0 (unregistering): Port device team_slave_0 removed
[  811.761727][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  811.848228][T12567] Bluetooth: hci0: command tx timeout
[  812.394271][T17280] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.419649][T17280] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.454022][T17280] bridge_slave_0: entered allmulticast mode
[  812.486202][T17280] bridge_slave_0: entered promiscuous mode
[  812.530894][T17280] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.573070][T17280] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.604372][T17280] bridge_slave_1: entered allmulticast mode
[  812.636911][T17280] bridge_slave_1: entered promiscuous mode
[  812.786330][T17354] Process accounting paused
[  813.928146][T12567] Bluetooth: hci0: command tx timeout
[  815.415794][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  815.472107][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  815.550147][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3
[  816.041042][T17280] team0: Port device team_slave_0 added
[  816.328405][T17280] team0: Port device team_slave_1 added
[  816.482355][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.502786][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.556278][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.640408][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.657621][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.690498][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.782116][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4
[  816.985229][T17280] hsr_slave_0: entered promiscuous mode
[  817.001755][T17436] binder: 17434:17436 ioctl c0306201 2000000000c0 returned -14
[  817.014890][T17280] hsr_slave_1: entered promiscuous mode
[  817.029024][T17437] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2434'.
[  817.046912][T17280] debugfs: 'hsr0' already exists in 'hsr'
[  817.063351][T17280] Cannot create hsr debugfs directory
[  817.089023][T17437] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.096463][T17437] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.183169][T17464] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  819.483839][T17485] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2442'.
[  820.559800][T17501] futex_wake_op: syz.2.2444 tries to shift op by -2048; fix this program
[  820.590484][T17501] futex_wake_op: syz.2.2444 tries to shift op by -2048; fix this program
[  821.027726][T17522] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2445'.
[  821.489083][T17531] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2446'.
[  823.551835][T17568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'.
[  824.584791][T17609] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2454'.
[  825.104318][T17624] Invalid input. Must be >= 4608
[  825.813714][T17639] binder: 17636:17639 ioctl c0306201 2000000000c0 returned -14
[  826.120525][T17644] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2457'.
[  826.979094][T17654] blktrace: Concurrent blktraces are not allowed on nbd5
[  831.066152][T17702] blktrace: Concurrent blktraces are not allowed on nbd5
[  831.371475][T17706] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2467'.
[  832.217489][T17715] [U] 0�="�/�
[  832.221338][T17715] [U] 
[  832.224118][T17715] [U] E�e�Q��@�
[  832.229788][T17714] [U] 
[  833.415401][ T8094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  833.430085][ T8094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  833.438758][ T8094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  833.447714][ T8094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  833.455553][ T8094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  834.431678][T17734] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.448106][T17734] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.461239][T17734] bridge_slave_0: entered allmulticast mode
[  834.478602][T17734] bridge_slave_0: entered promiscuous mode
[  834.494784][T17734] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.514816][T17734] bridge0: port 2(bridge_slave_1) entered disabled state
[  834.532686][T17734] bridge_slave_1: entered allmulticast mode
[  834.549186][T17734] bridge_slave_1: entered promiscuous mode
[  834.611070][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  834.713261][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  834.833016][T17734] team0: Port device team_slave_0 added
[  834.861196][T17734] team0: Port device team_slave_1 added
[  835.009899][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  835.036533][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  835.105835][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  835.149958][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  835.161801][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  835.221200][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  835.366156][T17734] hsr_slave_0: entered promiscuous mode
[  835.381448][T17734] hsr_slave_1: entered promiscuous mode
[  835.395897][T17734] debugfs: 'hsr0' already exists in 'hsr'
[  835.407600][T17734] Cannot create hsr debugfs directory
[  835.527928][ T8094] Bluetooth: hci2: command tx timeout
[  837.607929][ T8094] Bluetooth: hci2: command tx timeout
[  839.688058][ T8094] Bluetooth: hci2: command tx timeout
[  841.768015][ T8094] Bluetooth: hci2: command tx timeout
[  847.257427][ T5628] Process accounting resumed
[  847.517298][T12567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  847.535161][T12567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  847.547965][T12567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  847.558708][T12567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  847.571922][T12567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  848.483118][T17791] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.490397][T17791] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.497781][T17791] bridge_slave_0: entered allmulticast mode
[  848.505357][T17791] bridge_slave_0: entered promiscuous mode
[  848.513446][T17791] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.523656][T17791] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.533289][T17791] bridge_slave_1: entered allmulticast mode
[  848.541193][T17791] bridge_slave_1: entered promiscuous mode
[  848.576863][T17791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  848.588998][T17791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.617310][T17791] team0: Port device team_slave_0 added
[  848.625506][T17791] team0: Port device team_slave_1 added
[  848.656452][T17791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  848.663590][T17791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  848.690515][T17791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  848.702798][T17791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  848.710115][T17791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  848.737680][T17791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  848.781516][T17791] hsr_slave_0: entered promiscuous mode
[  848.788294][T17791] hsr_slave_1: entered promiscuous mode
[  848.794452][T17791] debugfs: 'hsr0' already exists in 'hsr'
[  848.800518][T17791] Cannot create hsr debugfs directory
[  849.493066][T17822] [U] 0�="�/�
[  849.496549][T17822] [U] 
[  849.499782][T17822] [U] E�e�Q��@�
[  849.505000][T17821] [U] 
[  849.610236][T12567] Bluetooth: hci5: command tx timeout
[  850.419861][T17834] FAULT_INJECTION: forcing a failure.
[  850.419861][T17834] name failslab, interval 1, probability 0, space 0, times 0
[  850.468724][T17834] CPU: 0 UID: 0 PID: 17834 Comm: syz.2.2490 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  850.468752][T17834] Tainted: [L]=SOFTLOCKUP
[  850.468758][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  850.468769][T17834] Call Trace:
[  850.468774][T17834]  <TASK>
[  850.468780][T17834]  dump_stack_lvl+0x100/0x190
[  850.468805][T17834]  should_fail_ex.cold+0x5/0xa
[  850.468827][T17834]  should_failslab+0xc2/0x120
[  850.468849][T17834]  __kmalloc_cache_noprof+0x91/0x6c0
[  850.468866][T17834]  ? __asan_memcpy+0x3c/0x60
[  850.468882][T17834]  ? vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  850.468904][T17834]  vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  850.468924][T17834]  vidtv_psi_desc_clone+0x33f/0x5d0
[  850.468943][T17834]  vidtv_channel_si_init+0x76c/0x18f0
[  850.468970][T17834]  vidtv_mux_init+0x522/0xbf0
[  850.468993][T17834]  vidtv_start_feed+0x34e/0x500
[  850.469017][T17834]  ? __pfx_vidtv_start_feed+0x10/0x10
[  850.469042][T17834]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  850.469076][T17834]  dmx_section_feed_start_filtering+0x3a8/0x660
[  850.469099][T17834]  dvb_dmxdev_filter_start+0x767/0xdd0
[  850.469128][T17834]  dvb_demux_do_ioctl+0xe64/0x1200
[  850.469157][T17834]  dvb_usercopy+0x167/0x340
[  850.469190][T17834]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  850.469216][T17834]  ? __pfx_dvb_usercopy+0x10/0x10
[  850.469245][T17834]  ? __fget_files+0x21f/0x3d0
[  850.469265][T17834]  dvb_demux_ioctl+0x29/0x40
[  850.469297][T17834]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  850.469325][T17834]  __x64_sys_ioctl+0x18e/0x210
[  850.469374][T17834]  do_syscall_64+0x115/0x840
[  850.469389][T17834]  ? clear_bhb_loop+0x40/0x90
[  850.469409][T17834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.469425][T17834] RIP: 0033:0x7f7710d9de59
[  850.469441][T17834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.469456][T17834] RSP: 002b:00007f7711bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  850.469472][T17834] RAX: ffffffffffffffda RBX: 00007f7711026090 RCX: 00007f7710d9de59
[  850.469482][T17834] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  850.469491][T17834] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  850.469510][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  850.469520][T17834] R13: 00007f7711026128 R14: 00007f7711026090 R15: 00007ffda02eacc8
[  850.469541][T17834]  </TASK>
[  851.687952][T12567] Bluetooth: hci5: command tx timeout
[  851.773733][T17844] binder: 17843:17844 ioctl c0306201 2000000000c0 returned -14
[  852.787265][T17855] FAULT_INJECTION: forcing a failure.
[  852.787265][T17855] name failslab, interval 1, probability 0, space 0, times 0
[  852.821809][T17855] CPU: 0 UID: 0 PID: 17855 Comm: syz.2.2494 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  852.821836][T17855] Tainted: [L]=SOFTLOCKUP
[  852.821842][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  852.821852][T17855] Call Trace:
[  852.821858][T17855]  <TASK>
[  852.821871][T17855]  dump_stack_lvl+0x100/0x190
[  852.821897][T17855]  should_fail_ex.cold+0x5/0xa
[  852.821924][T17855]  should_failslab+0xc2/0x120
[  852.821947][T17855]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  852.821968][T17855]  ? __kasan_kmalloc+0xaa/0xb0
[  852.821988][T17855]  ? vidtv_psi_short_event_desc_init+0x1bf/0x5f0
[  852.822010][T17855]  kstrdup+0x51/0xe0
[  852.822029][T17855]  vidtv_psi_short_event_desc_init+0x1bf/0x5f0
[  852.822050][T17855]  vidtv_psi_desc_clone+0x33f/0x5d0
[  852.822069][T17855]  vidtv_channel_si_init+0x76c/0x18f0
[  852.822096][T17855]  vidtv_mux_init+0x522/0xbf0
[  852.822119][T17855]  vidtv_start_feed+0x34e/0x500
[  852.822143][T17855]  ? __pfx_vidtv_start_feed+0x10/0x10
[  852.822167][T17855]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  852.822201][T17855]  dmx_section_feed_start_filtering+0x3a8/0x660
[  852.822224][T17855]  dvb_dmxdev_filter_start+0x767/0xdd0
[  852.822253][T17855]  dvb_demux_do_ioctl+0xe64/0x1200
[  852.822282][T17855]  dvb_usercopy+0x167/0x340
[  852.822303][T17855]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  852.822326][T17855]  ? __pfx_dvb_usercopy+0x10/0x10
[  852.822354][T17855]  ? __fget_files+0x21f/0x3d0
[  852.822374][T17855]  dvb_demux_ioctl+0x29/0x40
[  852.822394][T17855]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  852.822415][T17855]  __x64_sys_ioctl+0x18e/0x210
[  852.822441][T17855]  do_syscall_64+0x115/0x840
[  852.822456][T17855]  ? clear_bhb_loop+0x40/0x90
[  852.822474][T17855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.822490][T17855] RIP: 0033:0x7f7710d9de59
[  852.822506][T17855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.822520][T17855] RSP: 002b:00007f7711bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  852.822535][T17855] RAX: ffffffffffffffda RBX: 00007f7711026090 RCX: 00007f7710d9de59
[  852.822546][T17855] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  852.822555][T17855] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  852.822565][T17855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  852.822574][T17855] R13: 00007f7711026128 R14: 00007f7711026090 R15: 00007ffda02eacc8
[  852.822595][T17855]  </TASK>
[  853.768052][T12567] Bluetooth: hci5: command tx timeout
[  854.243451][T17868] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2498'.
[  854.444939][T17871] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2499'.
[  855.847920][T12567] Bluetooth: hci5: command tx timeout
[  857.969234][T17902] FAULT_INJECTION: forcing a failure.
[  857.969234][T17902] name failslab, interval 1, probability 0, space 0, times 0
[  858.008880][T17902] CPU: 0 UID: 0 PID: 17902 Comm: syz.2.2507 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  858.008907][T17902] Tainted: [L]=SOFTLOCKUP
[  858.008913][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  858.008924][T17902] Call Trace:
[  858.008929][T17902]  <TASK>
[  858.008937][T17902]  dump_stack_lvl+0x100/0x190
[  858.008962][T17902]  should_fail_ex.cold+0x5/0xa
[  858.008985][T17902]  should_failslab+0xc2/0x120
[  858.009007][T17902]  __kmalloc_cache_noprof+0x91/0x6c0
[  858.009024][T17902]  ? vidtv_psi_service_list_desc_init+0x3be/0x550
[  858.009042][T17902]  ? vidtv_psi_eit_table_init+0x4c/0x320
[  858.009064][T17902]  vidtv_psi_eit_table_init+0x4c/0x320
[  858.009083][T17902]  vidtv_channel_si_init+0xde5/0x18f0
[  858.009109][T17902]  vidtv_mux_init+0x522/0xbf0
[  858.009132][T17902]  vidtv_start_feed+0x34e/0x500
[  858.009158][T17902]  ? __pfx_vidtv_start_feed+0x10/0x10
[  858.009182][T17902]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  858.009216][T17902]  dmx_section_feed_start_filtering+0x3a8/0x660
[  858.009243][T17902]  dvb_dmxdev_filter_start+0x767/0xdd0
[  858.009273][T17902]  dvb_demux_do_ioctl+0xe64/0x1200
[  858.009310][T17902]  dvb_usercopy+0x167/0x340
[  858.009330][T17902]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  858.009355][T17902]  ? __pfx_dvb_usercopy+0x10/0x10
[  858.009384][T17902]  ? __fget_files+0x21f/0x3d0
[  858.009402][T17902]  dvb_demux_ioctl+0x29/0x40
[  858.009423][T17902]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  858.009444][T17902]  __x64_sys_ioctl+0x18e/0x210
[  858.009467][T17902]  do_syscall_64+0x115/0x840
[  858.009482][T17902]  ? clear_bhb_loop+0x40/0x90
[  858.009503][T17902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.009519][T17902] RIP: 0033:0x7f7710d9de59
[  858.009533][T17902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  858.009548][T17902] RSP: 002b:00007f7711c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  858.009563][T17902] RAX: ffffffffffffffda RBX: 00007f7711025fa0 RCX: 00007f7710d9de59
[  858.009574][T17902] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  858.009584][T17902] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  858.009594][T17902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  858.009604][T17902] R13: 00007f7711026038 R14: 00007f7711025fa0 R15: 00007ffda02eacc8
[  858.009625][T17902]  </TASK>
[  860.821467][T17927] FAULT_INJECTION: forcing a failure.
[  860.821467][T17927] name failslab, interval 1, probability 0, space 0, times 0
[  860.883458][T17927] CPU: 0 UID: 0 PID: 17927 Comm: syz.2.2512 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  860.883485][T17927] Tainted: [L]=SOFTLOCKUP
[  860.883491][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  860.883501][T17927] Call Trace:
[  860.883507][T17927]  <TASK>
[  860.883513][T17927]  dump_stack_lvl+0x100/0x190
[  860.883538][T17927]  should_fail_ex.cold+0x5/0xa
[  860.883560][T17927]  should_failslab+0xc2/0x120
[  860.883583][T17927]  __kmalloc_cache_noprof+0x91/0x6c0
[  860.883607][T17927]  ? __asan_memcpy+0x3c/0x60
[  860.883624][T17927]  ? vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  860.883647][T17927]  vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  860.883668][T17927]  vidtv_psi_desc_clone+0x33f/0x5d0
[  860.883686][T17927]  vidtv_channel_si_init+0x76c/0x18f0
[  860.883712][T17927]  vidtv_mux_init+0x522/0xbf0
[  860.883735][T17927]  vidtv_start_feed+0x34e/0x500
[  860.883759][T17927]  ? __pfx_vidtv_start_feed+0x10/0x10
[  860.883783][T17927]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  860.883817][T17927]  dmx_section_feed_start_filtering+0x3a8/0x660
[  860.883840][T17927]  dvb_dmxdev_filter_start+0x767/0xdd0
[  860.883869][T17927]  dvb_demux_do_ioctl+0xe64/0x1200
[  860.883898][T17927]  dvb_usercopy+0x167/0x340
[  860.883918][T17927]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  860.883942][T17927]  ? __pfx_dvb_usercopy+0x10/0x10
[  860.883970][T17927]  ? __fget_files+0x21f/0x3d0
[  860.883989][T17927]  dvb_demux_ioctl+0x29/0x40
[  860.884009][T17927]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  860.884031][T17927]  __x64_sys_ioctl+0x18e/0x210
[  860.884054][T17927]  do_syscall_64+0x115/0x840
[  860.884069][T17927]  ? clear_bhb_loop+0x40/0x90
[  860.884088][T17927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.884104][T17927] RIP: 0033:0x7f7710d9de59
[  860.884118][T17927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  860.884133][T17927] RSP: 002b:00007f7711bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  860.884149][T17927] RAX: ffffffffffffffda RBX: 00007f7711026090 RCX: 00007f7710d9de59
[  860.884159][T17927] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  860.884169][T17927] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  860.884180][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  860.884189][T17927] R13: 00007f7711026128 R14: 00007f7711026090 R15: 00007ffda02eacc8
[  860.884211][T17927]  </TASK>
[  864.603401][T17960] FAULT_INJECTION: forcing a failure.
[  864.603401][T17960] name failslab, interval 1, probability 0, space 0, times 0
[  864.657649][T17960] CPU: 0 UID: 0 PID: 17960 Comm: syz.2.2519 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  864.657677][T17960] Tainted: [L]=SOFTLOCKUP
[  864.657684][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  864.657694][T17960] Call Trace:
[  864.657699][T17960]  <TASK>
[  864.657706][T17960]  dump_stack_lvl+0x100/0x190
[  864.657732][T17960]  should_fail_ex.cold+0x5/0xa
[  864.657754][T17960]  should_failslab+0xc2/0x120
[  864.657776][T17960]  __kmalloc_cache_noprof+0x91/0x6c0
[  864.657793][T17960]  ? __kmalloc_node_track_caller_noprof+0x34f/0x830
[  864.657812][T17960]  ? vidtv_psi_eit_event_init+0xe1/0x400
[  864.657838][T17960]  vidtv_psi_eit_event_init+0xe1/0x400
[  864.657857][T17960]  ? __pfx_vidtv_psi_eit_event_init+0x10/0x10
[  864.657881][T17960]  ? vidtv_psi_desc_clone+0x358/0x5d0
[  864.657899][T17960]  vidtv_channel_si_init+0x845/0x18f0
[  864.657925][T17960]  vidtv_mux_init+0x522/0xbf0
[  864.657948][T17960]  vidtv_start_feed+0x34e/0x500
[  864.657972][T17960]  ? __pfx_vidtv_start_feed+0x10/0x10
[  864.657996][T17960]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  864.658030][T17960]  dmx_section_feed_start_filtering+0x3a8/0x660
[  864.658052][T17960]  dvb_dmxdev_filter_start+0x767/0xdd0
[  864.658081][T17960]  dvb_demux_do_ioctl+0xe64/0x1200
[  864.658110][T17960]  dvb_usercopy+0x167/0x340
[  864.658130][T17960]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  864.658154][T17960]  ? __pfx_dvb_usercopy+0x10/0x10
[  864.658182][T17960]  ? __fget_files+0x21f/0x3d0
[  864.658201][T17960]  dvb_demux_ioctl+0x29/0x40
[  864.658221][T17960]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  864.658242][T17960]  __x64_sys_ioctl+0x18e/0x210
[  864.658265][T17960]  do_syscall_64+0x115/0x840
[  864.658279][T17960]  ? clear_bhb_loop+0x40/0x90
[  864.658298][T17960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  864.658314][T17960] RIP: 0033:0x7f7710d9de59
[  864.658329][T17960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  864.658344][T17960] RSP: 002b:00007f7711bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  864.658367][T17960] RAX: ffffffffffffffda RBX: 00007f7711026090 RCX: 00007f7710d9de59
[  864.658378][T17960] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  864.658388][T17960] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  864.658399][T17960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  864.658408][T17960] R13: 00007f7711026128 R14: 00007f7711026090 R15: 00007ffda02eacc8
[  864.658429][T17960]  </TASK>
[  865.287157][ T8094] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  865.300092][ T8094] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  865.311084][ T8094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  865.320074][ T8094] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  865.327599][ T8094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  866.249130][T17965] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.258096][T17965] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.277481][T17965] bridge_slave_0: entered allmulticast mode
[  866.291245][T17965] bridge_slave_0: entered promiscuous mode
[  866.309721][T17965] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.325238][T17965] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.348811][T17965] bridge_slave_1: entered allmulticast mode
[  866.369429][T17965] bridge_slave_1: entered promiscuous mode
[  866.437285][T17965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  866.468774][T17965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  866.539950][T17965] team0: Port device team_slave_0 added
[  866.556161][T17965] team0: Port device team_slave_1 added
[  866.615785][T17965] batman_adv: batadv0: Adding interface: batadv_slave_0
[  866.633187][T17965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  866.692817][T17965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.731085][T17965] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.747973][T17965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  866.808683][T17965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  866.897313][T17965] hsr_slave_0: entered promiscuous mode
[  866.914146][T17965] hsr_slave_1: entered promiscuous mode
[  866.930488][T17965] debugfs: 'hsr0' already exists in 'hsr'
[  866.943205][T17965] Cannot create hsr debugfs directory
[  867.321755][T18001] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2524'.
[  867.368117][ T8094] Bluetooth: hci6: command tx timeout
[  869.447996][ T8094] Bluetooth: hci6: command tx timeout
[  870.173875][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  870.180520][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  871.416924][T18037] FAULT_INJECTION: forcing a failure.
[  871.416924][T18037] name failslab, interval 1, probability 0, space 0, times 0
[  871.431781][T18037] CPU: 0 UID: 0 PID: 18037 Comm: syz.2.2532 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  871.431826][T18037] Tainted: [L]=SOFTLOCKUP
[  871.431832][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  871.431842][T18037] Call Trace:
[  871.431848][T18037]  <TASK>
[  871.431855][T18037]  dump_stack_lvl+0x100/0x190
[  871.431881][T18037]  should_fail_ex.cold+0x5/0xa
[  871.431902][T18037]  should_failslab+0xc2/0x120
[  871.431924][T18037]  __kmalloc_cache_noprof+0x91/0x6c0
[  871.431943][T18037]  ? vidtv_channel_si_init+0xa43/0x18f0
[  871.431967][T18037]  vidtv_channel_si_init+0xa43/0x18f0
[  871.431993][T18037]  vidtv_mux_init+0x522/0xbf0
[  871.432016][T18037]  vidtv_start_feed+0x34e/0x500
[  871.432041][T18037]  ? __pfx_vidtv_start_feed+0x10/0x10
[  871.432066][T18037]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  871.432099][T18037]  dmx_section_feed_start_filtering+0x3a8/0x660
[  871.432122][T18037]  dvb_dmxdev_filter_start+0x767/0xdd0
[  871.432151][T18037]  dvb_demux_do_ioctl+0xe64/0x1200
[  871.432180][T18037]  dvb_usercopy+0x167/0x340
[  871.432200][T18037]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  871.432224][T18037]  ? __pfx_dvb_usercopy+0x10/0x10
[  871.432258][T18037]  ? __fget_files+0x21f/0x3d0
[  871.432278][T18037]  dvb_demux_ioctl+0x29/0x40
[  871.432298][T18037]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  871.432320][T18037]  __x64_sys_ioctl+0x18e/0x210
[  871.432344][T18037]  do_syscall_64+0x115/0x840
[  871.432358][T18037]  ? clear_bhb_loop+0x40/0x90
[  871.432378][T18037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  871.432394][T18037] RIP: 0033:0x7f7710d9de59
[  871.432409][T18037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  871.432424][T18037] RSP: 002b:00007f7711c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  871.432439][T18037] RAX: ffffffffffffffda RBX: 00007f7711025fa0 RCX: 00007f7710d9de59
[  871.432450][T18037] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  871.432460][T18037] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  871.432470][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  871.432479][T18037] R13: 00007f7711026038 R14: 00007f7711025fa0 R15: 00007ffda02eacc8
[  871.432500][T18037]  </TASK>
[  871.668309][ T8094] Bluetooth: hci6: command tx timeout
[  873.688175][ T8094] Bluetooth: hci6: command tx timeout
[  875.029848][T18072] binder: 18071:18072 ioctl c0306201 2000000000c0 returned -14
[  877.333425][T18100] binder: 18099:18100 ioctl c0306201 2000000000c0 returned -14
[  877.472043][T18102] binder: 18101:18102 ioctl c0306201 2000000000c0 returned -14
[  879.805636][T18126] binder: 18125:18126 ioctl c0306201 2000000000c0 returned -14
[  881.994295][T18142] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2557'.
[  882.505107][T12567] Bluetooth: hci4: command 0x0406 tx timeout
[  883.751186][T18153] FAULT_INJECTION: forcing a failure.
[  883.751186][T18153] name failslab, interval 1, probability 0, space 0, times 0
[  883.778506][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.2.2560 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  883.778535][T18153] Tainted: [L]=SOFTLOCKUP
[  883.778541][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  883.778552][T18153] Call Trace:
[  883.778558][T18153]  <TASK>
[  883.778565][T18153]  dump_stack_lvl+0x100/0x190
[  883.778592][T18153]  should_fail_ex.cold+0x5/0xa
[  883.778614][T18153]  should_failslab+0xc2/0x120
[  883.778644][T18153]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  883.778666][T18153]  ? __pfx___kasan_kmalloc+0x10/0x10
[  883.778687][T18153]  ? vidtv_psi_short_event_desc_init+0x429/0x5f0
[  883.778709][T18153]  kstrdup+0x51/0xe0
[  883.778728][T18153]  vidtv_psi_short_event_desc_init+0x429/0x5f0
[  883.778750][T18153]  vidtv_psi_desc_clone+0x33f/0x5d0
[  883.778768][T18153]  vidtv_channel_si_init+0x76c/0x18f0
[  883.778794][T18153]  vidtv_mux_init+0x522/0xbf0
[  883.778817][T18153]  vidtv_start_feed+0x34e/0x500
[  883.778841][T18153]  ? __pfx_vidtv_start_feed+0x10/0x10
[  883.778865][T18153]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  883.778899][T18153]  dmx_section_feed_start_filtering+0x3a8/0x660
[  883.778922][T18153]  dvb_dmxdev_filter_start+0x767/0xdd0
[  883.778952][T18153]  dvb_demux_do_ioctl+0xe64/0x1200
[  883.778981][T18153]  dvb_usercopy+0x167/0x340
[  883.779001][T18153]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  883.779025][T18153]  ? __pfx_dvb_usercopy+0x10/0x10
[  883.779053][T18153]  ? __fget_files+0x21f/0x3d0
[  883.779073][T18153]  dvb_demux_ioctl+0x29/0x40
[  883.779093][T18153]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  883.779114][T18153]  __x64_sys_ioctl+0x18e/0x210
[  883.779137][T18153]  do_syscall_64+0x115/0x840
[  883.779152][T18153]  ? clear_bhb_loop+0x40/0x90
[  883.779171][T18153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  883.779187][T18153] RIP: 0033:0x7f7710d9de59
[  883.779203][T18153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  883.779217][T18153] RSP: 002b:00007f7711c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  883.779233][T18153] RAX: ffffffffffffffda RBX: 00007f7711025fa0 RCX: 00007f7710d9de59
[  883.779244][T18153] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  883.779253][T18153] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  883.779262][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  883.779271][T18153] R13: 00007f7711026038 R14: 00007f7711025fa0 R15: 00007ffda02eacc8
[  883.779292][T18153]  </TASK>
[  884.917016][T18165] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2564'.
[  888.445524][T18196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2569'.
[  888.666958][T18199] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2570'.
[  890.144097][T18211] [U] 0�="�/�
[  890.153125][T18211] [U] 
[  890.172131][T18211] [U] E�e�Q��@�
[  890.186193][T18210] [U] 
[  890.360103][T18214] FAULT_INJECTION: forcing a failure.
[  890.360103][T18214] name failslab, interval 1, probability 0, space 0, times 0
[  890.373618][T18214] CPU: 0 UID: 0 PID: 18214 Comm: syz.2.2574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  890.373645][T18214] Tainted: [L]=SOFTLOCKUP
[  890.373651][T18214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  890.373661][T18214] Call Trace:
[  890.373667][T18214]  <TASK>
[  890.373674][T18214]  dump_stack_lvl+0x100/0x190
[  890.373698][T18214]  should_fail_ex.cold+0x5/0xa
[  890.373720][T18214]  should_failslab+0xc2/0x120
[  890.373742][T18214]  __kmalloc_noprof+0xfc/0x820
[  890.373761][T18214]  ? vidtv_psi_pmt_create_sec_for_each_pat_entry+0x189/0x670
[  890.373787][T18214]  vidtv_psi_pmt_create_sec_for_each_pat_entry+0x189/0x670
[  890.373810][T18214]  vidtv_channel_si_init+0xf2d/0x18f0
[  890.373836][T18214]  vidtv_mux_init+0x522/0xbf0
[  890.373858][T18214]  vidtv_start_feed+0x34e/0x500
[  890.373883][T18214]  ? __pfx_vidtv_start_feed+0x10/0x10
[  890.373907][T18214]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  890.373941][T18214]  dmx_section_feed_start_filtering+0x3a8/0x660
[  890.373964][T18214]  dvb_dmxdev_filter_start+0x767/0xdd0
[  890.373993][T18214]  dvb_demux_do_ioctl+0xe64/0x1200
[  890.374022][T18214]  dvb_usercopy+0x167/0x340
[  890.374042][T18214]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  890.374066][T18214]  ? __pfx_dvb_usercopy+0x10/0x10
[  890.374094][T18214]  ? __fget_files+0x21f/0x3d0
[  890.374113][T18214]  dvb_demux_ioctl+0x29/0x40
[  890.374133][T18214]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  890.374154][T18214]  __x64_sys_ioctl+0x18e/0x210
[  890.374178][T18214]  do_syscall_64+0x115/0x840
[  890.374198][T18214]  ? clear_bhb_loop+0x40/0x90
[  890.374217][T18214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  890.374233][T18214] RIP: 0033:0x7f7710d9de59
[  890.374248][T18214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  890.374263][T18214] RSP: 002b:00007f7711bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  890.374279][T18214] RAX: ffffffffffffffda RBX: 00007f7711026090 RCX: 00007f7710d9de59
[  890.374290][T18214] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003
[  890.374299][T18214] RBP: 00007f7710e33e6f R08: 0000000000000000 R09: 0000000000000000
[  890.374309][T18214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  890.374317][T18214] R13: 00007f7711026128 R14: 00007f7711026090 R15: 00007ffda02eacc8
[  890.374338][T18214]  </TASK>
[  893.402804][T18246] binder: 18245:18246 ioctl c0306201 2000000000c0 returned -14
[  893.584549][ T8094] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  893.603734][ T8094] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  893.612100][ T8094] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  893.625911][ T8094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  893.643142][ T8094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  894.572670][T18247] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.590305][T18247] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.605223][T18247] bridge_slave_0: entered allmulticast mode
[  894.620621][T18247] bridge_slave_0: entered promiscuous mode
[  894.640289][T18247] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.654050][T18247] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.669512][T18247] bridge_slave_1: entered allmulticast mode
[  894.686735][T18247] bridge_slave_1: entered promiscuous mode
[  894.742503][T18247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  894.766826][T18247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  894.828990][T18247] team0: Port device team_slave_0 added
[  894.850511][T18247] team0: Port device team_slave_1 added
[  894.896283][T18247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  894.914945][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  894.974631][T18247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  895.011611][T18247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  895.023124][T18247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  895.054698][T18247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  895.167215][T18247] hsr_slave_0: entered promiscuous mode
[  895.184534][T18247] hsr_slave_1: entered promiscuous mode
[  895.198520][T18247] debugfs: 'hsr0' already exists in 'hsr'
[  895.210438][T18247] Cannot create hsr debugfs directory
[  895.772403][T12567] Bluetooth: hci7: command tx timeout
[  897.850088][T12567] Bluetooth: hci7: command tx timeout
[  899.928260][T12567] Bluetooth: hci7: command tx timeout
[  902.008985][T12567] Bluetooth: hci7: command tx timeout
[  902.616422][T18348] [U] 0�="�/�
[  902.620201][T18348] [U] 
[  902.623026][T18348] [U] E�e�Q��@�
[  902.630278][T18347] [U] 
[  907.429412][T18367] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  907.446496][T18367] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  907.454927][T18367] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  907.462965][T18367] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  907.473372][T18367] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  907.925414][T18365] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.933080][T18365] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.942778][T18365] bridge_slave_0: entered allmulticast mode
[  907.950514][T18365] bridge_slave_0: entered promiscuous mode
[  907.958556][T18365] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.965714][T18365] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.973247][T18365] bridge_slave_1: entered allmulticast mode
[  907.980619][T18365] bridge_slave_1: entered promiscuous mode
[  908.011217][T18365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.023191][T18365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  908.053444][T18365] team0: Port device team_slave_0 added
[  908.061831][T18365] team0: Port device team_slave_1 added
[  908.085059][T18365] batman_adv: batadv0: Adding interface: batadv_slave_0
[  908.092177][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  908.119736][T18365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  908.132180][T18365] batman_adv: batadv0: Adding interface: batadv_slave_1
[  908.139451][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  908.167728][T18365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  908.206842][T18365] hsr_slave_0: entered promiscuous mode
[  908.213307][T18365] hsr_slave_1: entered promiscuous mode
[  908.220017][T18365] debugfs: 'hsr0' already exists in 'hsr'
[  908.225758][T18365] Cannot create hsr debugfs directory
[  909.528028][T18367] Bluetooth: hci8: command tx timeout
[  911.607970][T12567] Bluetooth: hci8: command tx timeout
[  913.225203][T12567] Bluetooth: hci1: command 0x0406 tx timeout
[  913.688005][T18367] Bluetooth: hci8: command tx timeout
[  915.768040][T18367] Bluetooth: hci8: command tx timeout
[  925.438885][T12567] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  925.455272][T12567] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  925.470326][T12567] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  925.478395][T12567] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  925.485863][T12567] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  925.940405][T18387] bridge0: port 1(bridge_slave_0) entered blocking state
[  925.947670][T18387] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.955422][T18387] bridge_slave_0: entered allmulticast mode
[  925.964645][T18387] bridge_slave_0: entered promiscuous mode
[  925.972652][T18387] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.979892][T18387] bridge0: port 2(bridge_slave_1) entered disabled state
[  925.987374][T18387] bridge_slave_1: entered allmulticast mode
[  925.995000][T18387] bridge_slave_1: entered promiscuous mode
[  926.025041][T18387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  926.036796][T18387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  926.067489][T18387] team0: Port device team_slave_0 added
[  926.075867][T18387] team0: Port device team_slave_1 added
[  926.100132][T18387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  926.107119][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.134059][T18387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.146335][T18387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.153648][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.182815][T18387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.222615][T18387] hsr_slave_0: entered promiscuous mode
[  926.229208][T18387] hsr_slave_1: entered promiscuous mode
[  926.235368][T18387] debugfs: 'hsr0' already exists in 'hsr'
[  926.242072][T18387] Cannot create hsr debugfs directory
[  927.528004][T12567] Bluetooth: hci9: command tx timeout
[  928.571534][T12567] Bluetooth: hci0: command 0x0406 tx timeout
[  929.608010][T18367] Bluetooth: hci9: command tx timeout
[  931.613655][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  931.620036][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  931.688087][T18367] Bluetooth: hci9: command tx timeout
[  933.768073][T18367] Bluetooth: hci9: command tx timeout
[  953.483345][T12567] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  953.500263][T12567] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  953.510071][T12567] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  953.523237][T12567] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  953.530927][T12567] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  954.021408][T18413] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.029230][T18413] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.036838][T18413] bridge_slave_0: entered allmulticast mode
[  954.044656][T18413] bridge_slave_0: entered promiscuous mode
[  954.052929][T18413] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.060205][T18413] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.069030][T18413] bridge_slave_1: entered allmulticast mode
[  954.076239][T18413] bridge_slave_1: entered promiscuous mode
[  954.108843][T18413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  954.122988][T18413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  954.152854][T18413] team0: Port device team_slave_0 added
[  954.160804][T18413] team0: Port device team_slave_1 added
[  954.186661][T18413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  954.193763][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.223857][T18413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  954.237436][T18413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  954.246273][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.273460][T18413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  954.314560][T18413] hsr_slave_0: entered promiscuous mode
[  954.321150][T18413] hsr_slave_1: entered promiscuous mode
[  954.333879][T18413] debugfs: 'hsr0' already exists in 'hsr'
[  954.340555][T18413] Cannot create hsr debugfs directory
[  955.608280][T12567] Bluetooth: hci10: command tx timeout
[  957.688091][T12567] Bluetooth: hci10: command tx timeout
[  959.291840][T12567] Bluetooth: hci2: command 0x0406 tx timeout
[  959.767986][T18367] Bluetooth: hci10: command tx timeout
[  961.847998][T18367] Bluetooth: hci10: command tx timeout
[  968.010732][T12567] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  968.027921][T12567] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  968.037979][T12567] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  968.046961][T12567] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  968.060260][T12567] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  968.514146][T18436] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.521471][T18436] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.529103][T18436] bridge_slave_0: entered allmulticast mode
[  968.536364][T18436] bridge_slave_0: entered promiscuous mode
[  968.545558][T18436] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.553845][T18436] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.563145][T18436] bridge_slave_1: entered allmulticast mode
[  968.571423][T18436] bridge_slave_1: entered promiscuous mode
[  968.603618][T18436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  968.615841][T18436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  968.644415][T18436] team0: Port device team_slave_0 added
[  968.654332][T18436] team0: Port device team_slave_1 added
[  968.683775][T18436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  968.691125][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  968.720493][T18436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  968.735414][T18436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  968.742810][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  968.772675][T18436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  968.815504][T18436] hsr_slave_0: entered promiscuous mode
[  968.822180][T18436] hsr_slave_1: entered promiscuous mode
[  968.829738][T18436] debugfs: 'hsr0' already exists in 'hsr'
[  968.835498][T18436] Cannot create hsr debugfs directory
[  970.088105][T12567] Bluetooth: hci11: command tx timeout
[  972.167992][T12567] Bluetooth: hci11: command tx timeout
[  973.848354][   T30] INFO: task syz-executor:17280 blocked for more than 143 seconds.
[  973.857615][   T30]       Tainted: G             L      syzkaller #0
[  973.864800][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  973.874055][   T30] task:syz-executor    state:D stack:24448 pid:17280 tgid:17280 ppid:1      task_flags:0x480140 flags:0x00080002
[  973.887667][   T30] Call Trace:
[  973.891781][   T30]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  973.894743][   T30]  __schedule+0x125c/0x6730
[  973.899570][   T30]  ? trace_sched_exit_tp+0x120/0x160
[  973.905532][   T30]  ? __pfx___schedule+0x10/0x10
[  973.917841][   T30]  ? find_held_lock+0x2b/0x80
[  973.929992][   T30]  ? schedule+0x225/0x2c0
[  973.937858][   T30]  schedule+0xdd/0x2c0
[  973.948148][   T30]  schedule_timeout+0x1b2/0x280
[  973.957862][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  973.969542][   T30]  ? preempt_schedule_thunk+0x16/0x40
[  973.985406][   T30]  __wait_for_common+0x2e7/0x4c0
[  973.991152][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  974.009588][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  974.015140][   T30]  remove_one+0x312/0x420
[  974.027881][   T30]  ? up_write+0x2e5/0x5c0
[  974.033732][   T30]  __simple_recursive_removal+0x148/0x5c0
[  974.047887][   T30]  ? __pfx_remove_one+0x10/0x10
[  974.059416][   T30]  debugfs_remove+0x5d/0x80
[  974.065457][   T30]  nsim_drv_remove+0xd2/0x1e0
[  974.078089][   T30]  ? __pfx_nsim_bus_remove+0x10/0x10
[  974.093721][   T30]  device_remove+0xcb/0x180
[  974.108685][   T30]  device_release_driver_internal+0x44e/0x620
[  974.116204][   T30]  bus_remove_device+0x2bc/0x560
[  974.127876][   T30]  ? __pfx_bus_remove_device+0x10/0x10
[  974.138042][   T30]  ? __pfx_device_remove_attrs+0x10/0x10
[  974.149484][   T30]  device_del+0x376/0x9b0
[  974.158016][   T30]  ? __pfx_device_del+0x10/0x10
[  974.171409][   T30]  device_unregister+0x1d/0xe0
[  974.187912][   T30]  del_device_store+0x346/0x480
[  974.194211][   T30]  ? __pfx_del_device_store+0x10/0x10
[  974.207876][   T30]  ? find_held_lock+0x2b/0x80
[  974.214070][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  974.227870][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  974.237841][   T30]  ? __pfx_del_device_store+0x10/0x10
[  974.248016][T18367] Bluetooth: hci11: command tx timeout
[  974.253557][   T30]  bus_attr_store+0x74/0xb0
[  974.267895][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[  974.273159][   T30]  sysfs_kf_write+0xf2/0x150
[  974.277751][   T30]  kernfs_fop_write_iter+0x3e0/0x5f0
[  974.297807][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[  974.307860][   T30]  vfs_write+0x6ac/0x1050
[  974.317843][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  974.329805][   T30]  ? __pfx_vfs_write+0x10/0x10
[  974.347866][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  974.353165][   T30]  ksys_write+0x12a/0x250
[  974.359199][   T30]  ? __pfx_ksys_write+0x10/0x10
[  974.369446][   T30]  do_syscall_64+0x115/0x840
[  974.379505][   T30]  ? clear_bhb_loop+0x40/0x90
[  974.389398][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  974.408623][   T30] RIP: 0033:0x7fc961f5e68e
[  974.413097][   T30] RSP: 002b:00007ffe5f0e0368 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  974.438497][   T30] RAX: ffffffffffffffda RBX: 0000555578234500 RCX: 00007fc961f5e68e
[  974.448052][   T30] RDX: 0000000000000001 RSI: 00007ffe5f0e03f0 RDI: 0000000000000005
[  974.468049][   T30] RBP: 00007fc9620346f2 R08: 0000000000000000 R09: 0000000000000000
[  974.489170][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  974.503454][   T30] R13: 00007ffe5f0e03f0 R14: 00007fc962d54620 R15: 0000000000000003
[  974.553703][   T30]  </TASK>
[  974.573708][   T30] INFO: task syz.0.2439:17457 blocked for more than 144 seconds.
[  974.619959][   T30]       Tainted: G             L      syzkaller #0
[  974.641646][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  974.660918][T18367] Bluetooth: hci5: command 0x0406 tx timeout
[  974.667850][   T30] task:syz.0.2439      state:D stack:26872 pid:17457 tgid:17456 ppid:16616  task_flags:0x400140 flags:0x00080002
[  974.697849][   T30] Call Trace:
[  974.701686][   T30]  <TASK>
[  974.706982][   T30]  __schedule+0x125c/0x6730
[  974.730414][   T30]  ? do_raw_spin_lock+0x128/0x260
[  974.744779][   T30]  ? __pfx___schedule+0x10/0x10
[  974.752493][   T30]  ? find_held_lock+0x2b/0x80
[  974.768732][   T30]  ? schedule+0x225/0x2c0
[  974.773162][   T30]  schedule+0xdd/0x2c0
[  974.777236][   T30]  schedule_preempt_disabled+0x13/0x30
[  974.797870][   T30]  __mutex_lock+0xccc/0x1bd0
[  974.802521][   T30]  ? nsim_bus_dev_max_vfs_write+0x206/0x410
[  974.817852][   T30]  ? _kstrtoull+0x13c/0x1f0
[  974.827922][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  974.834625][   T30]  ? __pfx_kstrtouint+0x10/0x10
[  974.847849][   T30]  ? nsim_bus_dev_max_vfs_write+0x1bb/0x410
[  974.859459][   T30]  ? nsim_bus_dev_max_vfs_write+0x206/0x410
[  974.878880][   T30]  nsim_bus_dev_max_vfs_write+0x206/0x410
[  974.884773][   T30]  ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10
[  974.906890][   T30]  ? __debugfs_file_get+0x1fc/0x860
[  974.912942][   T30]  full_proxy_write+0x135/0x1a0
[  974.921306][   T30]  vfs_write+0x2aa/0x1050
[  974.930409][   T30]  ? __pfx_full_proxy_write+0x10/0x10
[  974.949544][   T30]  ? __pfx_vfs_write+0x10/0x10
[  974.954361][   T30]  ? __fget_files+0x215/0x3d0
[  974.961404][   T30]  ? __fget_files+0x21f/0x3d0
[  974.966119][   T30]  ksys_write+0x12a/0x250
[  974.972837][   T30]  ? __pfx_ksys_write+0x10/0x10
[  974.978360][   T30]  do_syscall_64+0x115/0x840
[  974.982962][   T30]  ? clear_bhb_loop+0x40/0x90
[  974.989047][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  974.995100][   T30] RIP: 0033:0x7fbba939de59
[  974.999893][   T30] RSP: 002b:00007fbbaa263028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  975.009951][   T30] RAX: ffffffffffffffda RBX: 00007fbba9625fa0 RCX: 00007fbba939de59
[  975.018555][   T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008
[  975.026650][   T30] RBP: 00007fbba9433e6f R08: 0000000000000000 R09: 0000000000000000
[  975.035707][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  975.043960][   T30] R13: 00007fbba9626038 R14: 00007fbba9625fa0 R15: 00007ffc2cce6088
[  975.053001][   T30]  </TASK>
[  975.102862][   T30] 
[  975.102862][   T30] Showing all locks held in the system:
[  975.126478][   T30] 1 lock held by khungtaskd/30:
[  975.144565][   T30]  #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  975.166191][   T30] 2 locks held by getty/5380:
[  975.171217][   T30]  #0: ffff8880363ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  975.182904][   T30]  #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  975.193394][   T30] 2 locks held by syz-executor/17022:
[  975.199253][   T30]  #0: ffffffff90641500 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[  975.211334][   T30]  #1: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  975.223080][   T30] 7 locks held by syz-executor/17280:
[  975.228689][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.237713][   T30]  #1: ffff88807774f880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.247947][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.258432][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.269057][   T30]  #4: ffff88803290a128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[  975.279941][   T30]  #5: ffff88807a8fd258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0
[  975.293097][   T30]  #6: ffff888076385950 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[  975.305087][   T30] 3 locks held by syz.0.2439/17457:
[  975.310494][   T30]  #0: ffff8880791010b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  975.322026][   T30]  #1: ffff8880202a0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.331357][   T30]  #2: ffff88807a8fd258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410
[  975.342741][   T30] 2 locks held by syz.1.2469/17717:
[  975.348568][   T30]  #0: ffff8880202a0450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280
[  975.357736][   T30]  #1: ffff888076385950 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280
[  975.368792][   T30] 4 locks held by syz-executor/17734:
[  975.374221][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.383507][   T30]  #1: ffff888032630480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.393503][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.405311][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.415953][   T30] 4 locks held by syz-executor/17791:
[  975.422948][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.433011][   T30]  #1: ffff88805ba67880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.443130][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.454440][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.465096][   T30] 4 locks held by syz-executor/17965:
[  975.470672][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.480028][   T30]  #1: ffff888079d51880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.490170][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.500603][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.512573][   T30] 4 locks held by syz-executor/18247:
[  975.518182][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.528911][   T30]  #1: ffff88807e417080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.539707][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.550097][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.560619][   T30] 4 locks held by syz-executor/18365:
[  975.566093][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.575471][   T30]  #1: ffff888029f40c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.585562][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.597062][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.607914][   T30] 4 locks held by syz-executor/18387:
[  975.613652][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.625709][   T30]  #1: ffff88802b37f480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.635719][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.645931][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.657060][   T30] 4 locks held by syz-executor/18413:
[  975.662654][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.671864][   T30]  #1: ffff88805be99880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.681824][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.692232][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.702744][   T30] 4 locks held by syz-executor/18436:
[  975.708383][   T30]  #0: ffff888036980450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  975.717377][   T30]  #1: ffff8880330a3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  975.730127][   T30]  #2: ffff888029d512d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  975.740393][   T30]  #3: ffffffff8fbafc20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  975.779492][   T30] 
[  975.781949][   T30] =============================================
[  975.781949][   T30] 
[  975.795346][   T30] NMI backtrace for cpu 0
[  975.795363][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  975.795384][   T30] Tainted: [L]=SOFTLOCKUP
[  975.795390][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  975.795399][   T30] Call Trace:
[  975.795405][   T30]  <TASK>
[  975.795411][   T30]  dump_stack_lvl+0x100/0x190
[  975.795436][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  975.795458][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  975.795491][   T30]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  975.795515][   T30]  sys_info+0x141/0x190
[  975.795532][   T30]  watchdog+0xcb1/0x1030
[  975.795559][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  975.795582][   T30]  ? __pfx_watchdog+0x10/0x10
[  975.795604][   T30]  ? __kthread_parkme+0x18c/0x230
[  975.795626][   T30]  ? kthread+0x13a/0x450
[  975.795652][   T30]  ? __pfx_watchdog+0x10/0x10
[  975.795672][   T30]  kthread+0x370/0x450
[  975.795692][   T30]  ? __pfx_kthread+0x10/0x10
[  975.795713][   T30]  ret_from_fork+0x72b/0xd50
[  975.795734][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  975.795753][   T30]  ? __switch_to+0x800/0x10f0
[  975.795774][   T30]  ? __switch_to_asm+0x39/0x70
[  975.795796][   T30]  ? __pfx_kthread+0x10/0x10
[  975.795817][   T30]  ret_from_fork_asm+0x1a/0x30
[  975.795847][   T30]  </TASK>
[  975.944915][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  975.951793][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  975.962458][   T30] Tainted: [L]=SOFTLOCKUP
[  975.966937][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  975.976974][   T30] Call Trace:
[  975.980240][   T30]  <TASK>
[  975.983155][   T30]  dump_stack_lvl+0x100/0x190
[  975.987830][   T30]  vpanic+0x552/0x970
[  975.991796][   T30]  ? __pfx_vpanic+0x10/0x10
[  975.996377][   T30]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  976.002553][   T30]  panic+0xd1/0xe0
[  976.006277][   T30]  ? __pfx_panic+0x10/0x10
[  976.010683][   T30]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  976.016867][   T30]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  976.023645][   T30]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  976.029827][   T30]  ? watchdog.cold+0x1ec/0x234
[  976.034677][   T30]  ? watchdog+0xcc1/0x1030
[  976.039099][   T30]  watchdog.cold+0x1fd/0x234
[  976.043707][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  976.049506][   T30]  ? __pfx_watchdog+0x10/0x10
[  976.054182][   T30]  ? __kthread_parkme+0x18c/0x230
[  976.059203][   T30]  ? kthread+0x13a/0x450
[  976.063437][   T30]  ? __pfx_watchdog+0x10/0x10
[  976.068189][   T30]  kthread+0x370/0x450
[  976.072258][   T30]  ? __pfx_kthread+0x10/0x10
[  976.076859][   T30]  ret_from_fork+0x72b/0xd50
[  976.081438][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  976.086549][   T30]  ? __switch_to+0x800/0x10f0
[  976.091295][   T30]  ? __switch_to_asm+0x39/0x70
[  976.096396][   T30]  ? __pfx_kthread+0x10/0x10
[  976.100979][   T30]  ret_from_fork_asm+0x1a/0x30
[  976.105742][   T30]  </TASK>
[  976.108820][   T30] Kernel Offset: disabled
[  976.113135][   T30] Rebooting in 86400 seconds..