last executing test programs:

1m25.875174041s ago: executing program 3 (id=629):
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2fb)

1m25.840298327s ago: executing program 3 (id=630):
r0 = socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
sysfs$auto(0x2, 0x41, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) (async)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'}) (async)
socket(0xa, 0x2, 0x3a)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/veth1/locktime\x00', 0x200200, 0x0) (async)
io_uring_register$auto(r1, 0x1, &(0x7f00000001c0), 0x1) (async)
r4 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r4, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x9b) (async)
sendfile$auto(r3, r3, 0x0, 0x7fffe000) (async)
prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100)
socket(0x11, 0x0, 0x302)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4)

1m24.884986159s ago: executing program 3 (id=637):
r0 = openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/ht40allow_map\x00', 0xc9400, 0x0)
read$auto(r0, &(0x7f0000000040)='^{-!S\x84\x00', 0x9)
socket(0x2, 0x801, 0x84)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x840)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
writev$auto(r1, &(0x7f0000000080)={0x0, 0x6}, 0x3)
listen$auto(0x3, 0x83)
accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd)

1m23.875796594s ago: executing program 3 (id=642):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000)
socketpair$auto(0x1, 0x2, 0xfeec, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x6, 0x8, 0xfff) (async)
madvise$auto(0x6, 0x8, 0xfff)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x7) (async)
sendfile$auto(r4, r4, 0x0, 0x7)
r5 = fspick$auto(r2, &(0x7f0000000040)='./file0\x00', 0x80000000)
writev$auto(r5, 0x0, 0x95)
r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100253d7000fddbdf2501000000100007800c0001727660f76ffa908008000180000000000c0002000600000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x29, &(0x7f0000000080)=',)-&\x00', 0x8001)

1m21.791027686s ago: executing program 3 (id=650):
r0 = socket(0x23, 0x80805, 0x0)
poll$auto(&(0x7f0000000000)={<r1=>r0, 0x1, 0x8}, 0x5, 0x400)
setsockopt$auto(r1, 0x113, 0x4, 0x0, 0x1)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000400)=""/217, 0xd9)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x240001, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.prio.class\x00', 0x183042, 0x0)
sendfile$auto(r3, r3, 0x0, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r4, 0x541c, r5)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/block/nbd6/hctx0/cpu0/poll_rq_list\x00', 0xa0200, 0x0)
r6 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r6, 0x29, 0x1f, 0x0, 0x1)
ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f00000001c0)=0x4a7c)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000200), 0x701081, 0x0)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400, 0x0)
epoll_create$auto(0x20003f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r7 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r7, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)

1m21.661248249s ago: executing program 3 (id=653):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2040, 0x0)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
sysfs$auto(0x2, 0x46, 0x0)
fsopen$auto(0x0, 0x1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0)
open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
select$auto(0x5, &(0x7f00000000c0)={[0xeeda, 0x7, 0x4, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x0, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = socket(0x15, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb)
connect$auto(0x3, 0x0, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)

1m20.487208978s ago: executing program 1 (id=662):
r0 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/printk_formats\x00', 0x109000, 0x0)
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb1\x00', 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000000)="f3af806aa063d3e57ade678d2404b3b3185b2913dc20")
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0)
memfd_secret$auto(0x0) (async)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
read$auto(r2, 0x0, 0x7) (async)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, 0x0, 0x5)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async)
write$auto(0x3, 0x0, 0xfffffdef)
r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r5) (async)
ioctl$auto_NS_GET_PARENT(r5, 0xb702, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r6 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async)
r7 = socket(0x10, 0x2, 0xffffff5c)
sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async)
recvmmsg$auto(r7, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async)
write$auto_proc_clear_refs_operations_internal(r6, 0x0, 0xffffff4b) (async)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async)
mmap$auto(0x0, 0x0, 0x6, 0x11, r0, 0x27) (async)
fchown$auto(r0, 0x0, 0x0) (async)
madvise$auto(0xfc3, 0x5, 0x5) (async)
r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0)
write$auto(r8, &(0x7f0000000040)='.G+*@sys\x00', 0x9)

1m19.918741136s ago: executing program 1 (id=663):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0)
write$auto(r0, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1)
sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000a40), r1)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x18, r2, 0x740f16fcea7cbf75, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_MASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8810)
write$auto(0x3, 0x0, 0xfffffdef)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000d00), r3)
sendmsg$auto_SMC_PNETID_DEL(r3, 0x0, 0x20000000)
getpid()
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000000)="c2b6c2f1da7809678c0c49dc9b26adc64e1708dae0e64e107a887dfc9ab28a082c8626e5c89c3028d33a594320121606ffa9a6ac2b", 0xfffffff9, &(0x7f0000000040)={&(0x7f0000001540)="5e8022965bbd7504c18d87e21f1ee933b907f7f88a70fc98f7227d3eb5b015b93b832c31f35baadeba3a9b8e42f267d4b02b734a169fff07fd2ad1eab2995841b1e35cf5fe2971d3fb19880ca4efd03ede706f356c74bb53095775e73e8d58fdec185a96ab74757de90b8160a6abdefe0068be30a0977ce3c83e0a7fd1c17da09668769388eccb7b657dadde7119b512ed3a9b278e76a3889d6001013cd358032026951587f3f442fe07c857aaea4fe766e86d88c7102934295a52e5da89bbeb18da3fb3fbda82b18d3fc01e4836967c692cb1b8d6d84fecf272ed2989189b0c13ec7d8743edd476c6c9d9e7098dc359e5c0b1d00295cb267407301fac890873dff0d0185d482ddb7ca3dae518b199952acfaf027d109e6dbc24c6fb37941314568d4cfe32777c88a67deb3e3d82dabd769c4532327b2e9eea290fa234bed42416364b725bd599c3011384e4339a5dd2c130fa63e5501377c5435f70156ea4397c52417754e7b28a6509e46305d183cf60f49fa5e5860b90cb50be55e08c60feeea24d07c64ffb1ea5edf1da680d7e1ade4b894e485969dd7f65bb5a3aae94fb22e40144b4048a50bf093b149b457dcc3d9d7f57e7164fbb20bfd82a9fabb5208a731cc57e7d923fbecb2342197c1f003e05dc1c367038bb3e7f2e38e3f0bb481b59d14cfe799f49e0701ef055b156e5c59571b47b81214adc73128f5d9accefafa8a341964872350f1a38eabd19b2289c0637033125ffd3296adfb40b9daf84cbed8572f35789a7d549300fd8d3bbc0dba5a455d8135ecb982006693ad73564c5a3236c18fb185ec6bd6469e555d1eb2a15dff21e875cdcd99bd908dc57d5bc52e4c756205b55d4054c257e8efea15e40744bcce7507fa9ace34899131b8bbf538d2592008f65c6cb67de01484761112962ec63a7c657f84976d8a474c14e2ffd3a408877b92c65f7077260490bec736c92196eb9705794a834f079a1f44369e597342bcb5d9439c6a1207ed57eaab58949a3bc5cfa615a7dc94bf404971db568b598640802eb9d38ec5ea0529803a983b7815fc3a1013da9e2725bc3aeb4770b5aaaf9a86fc42051a4cabc79ad8232d71c306a51bf7c9c9061ff12737905cb02dbb932ddb4d68c13e98928eba21a19b07da55c4b43447b1ac373ba2873dfcead582de742ad89259472080ff7fe311a2577732502e3228d66f6dc10f2edc8b1dbfb2e3d3a4c62d87fb481f2ba75ed008b02e64467bfc811f8cb485d13a213f8eb8d727e4463d925279822851ceed9025c99bf580e2f2d4fefdb0912bf1c6c774775d448384089580ccd5b0b3ed1931060f89e26d98a31f1a8567787ceee4469c6ad096d556bfabc9d8c98f64b25c4a35d853c19b2d6ee5f8984f7000b357c9857d6506a0c571906486fa3b40183b1fb00f203e1be72e06a02f446984ee794268d84fc36644ef2c046e4f60ea0407bf1148bb2920ff72be4df29ce6a672fcd0da6f3e1aee8e4ff3b67b3a4188f937944d1dff8f0a3166f150c42226d18a6ea367382c9a4d5eb8c25ec38b3c96b7f58a5631e0da86863f76599a60166aac3eee1c2c8b90a6e741831a79ee19a2aa51665b812fe606239208b435f698c906af9b8ee1075da9cf1669e5b29db2030ce62ee9e8fe24b91a22e71462d015c5c51539fa57f06d853278ef40d5444ef679107978c2667f3cf941c63f3e6d63863138de6f4274ebf822e5f373eced40686704c85dd117af1bed415a7a0e526ab12d7e5173083173da9179cbac768863f486c46a6fb4439f8316450627d2013187550b2af36417b7a9aead7d772745490a43a5a01b8a7f3b5a6bbe29af5375e9802e3aa618948b77defa331f185ffa7a4e811e4575649b03ea8493e7d04b2a7a9afac48e2f96a4301f38fb3a8016ae374051b4f6dedf4e28c45d72936075e93777720f664000d18b6182c83490964637b132df5c5fdf3330bcaea10a893a6b155132f7119417145dc1439c63475cd88542fab83aa35946dc11ee16c8061cee403940f9c0f47cb7625f81ac8c3e44f3df85b8e6c791719a508bb75b4f4eae96437dd3042e392bb63a240326d9c1874d890ad501419e9db6bb67e4b405803862ce8a8996837125090be5597fa3c3fc26a429aebd941b1f0db266cd7678c95d17b455cb5e48d1bcf8c7138babd5c2fd92b52e9096112a7d4685405ccdc802de9fb237ee8a321afc2144821a17880268d2eaabec68707e6c6626954de03bb767cffb3d965aa3c2da7b4bd96c15086eda866a92c61a849d5fc4b0173d3fab59c4803325b9a42ddf2ea2b46da38976f1bfe6c34b8f2120befb29f27ae43116372d8cecbaae13a9bb9dfa11befc925785c38bf40e88d7442f83962e8f2834ed276973aa1fa19e1f62dff3842acab0659b914974f82edb4002e5574df88f080616ae5b6e8bc496f2f42d023137cd3a65b93cc848fdcf395fbf6911bc6dc60beb0fc810169faa709022a5fb607a7e4e99b81dea75cb60b8806c6f59c21618409416a401fc794ed8b7ec1b7c82f4dfbcb74e0dac0e3d7634c71b483c35c06551eb04206118f6677f0553af693ea8364031a4f02ef8293ca6e813329b4d21d364818654d394081a3deb88bfe030b81f198cb23fcbc481f200ca58066a0e521e724cea601c0dcfadf10de8b5177e6ec4bab6c2af1d9a76cb69bfa84e59fd202bdd28da779966f1762539c54a72f8fcbdf3596621a7cb7dc8f3891e56a1d4a652d472a2a03e16fed31706dac3c3a5678a52b503d5a0c40bd4a86cfeb108c7e1ad5e10eb84c8b0f707951b50e470b8d0c0c3989c5cd61c915b20f6d2275dbeefe8d7c3a02442198be4d0cd66d3c6d2fffa294337e84d531147d523f969720d4e814654a6a65e23b6c531bd0d23d1a953c2948ed91a7397a560067a29766bf83a402efb65e45119d131a47df2c1725038f73f236251b96bfdf7a91d931a5ac1235c3bc06a07bea981cfc0180d2c3e8096a187387dbd08fd42c5ae590a8672470e2e87e2e9c9f4218fd03ae28750dd8d8a0de4454a7d253aae55bf2b8b3f3a67cb3c8cbd9552614578f10d74abd982dc0737a3df91bd62354369f693962b610846ecf9aac1362cd551d87cb66399927b40cb6b434d391ad0dd0967a456af83dae2a725bc898408c68daff2779b9165666b6b145fc0c2481430183854167ae6fb9d11d6fac6194990cab504ec94cc491cab82405d872c185092533900510cf245fb24d750bcbb826cf4af674803ecfdacc80ef6d1f5f01b5652821534a25461da385bc8bb2d3478ff5c4c530a972bb7a3c574b5e8282e2d4ee91a9153d7047dd01644d24eeb727859167e87dbb38e7ad54f61f5e3ee548d8a1a4a403c8766ee5498e7359dec8fa9823c1b8d9a6477196726bad5c5f085c82197c4a7562ac3969de2ebe8f865ab961b922d5b12cae47de29e1b6e31adc45a8a822fd920a74716b4bf7bc93a3465516a5f81457f53866c29175079abea9cfaaed762a2d4ccdd97f489b30845b36936ea8ece1750596e2de2af9d5de85b972e7f91e76f9ab5e58e95923883fed76a39398a6551fd9e8973d3a9806b4d1c6dd4c759be4e133336a0ef7f8ff4f30dc5331733a96a13c414b259d05de9eb265d7f9e31ad1c55f90ca4df4a262fd256ceb1126df79d6629130d32aafbe4650803410a5a7d332521e4ea979c9d48560c7a37b933c9e808279de77dda4f981a2738c589a0fb927145259bc96685c69c9a3c88345f4bf75d50691032173d661ea850274ee24285a700d07f43a745b64bba419fa9633c329a17ad13cf95120f5b5a2f0784134b3afe3d15b5914ec9ebd8495c7dec4a4247e64ce5c7bd6636b436e74d62943ffdda5ff5c5cd6a579f335365debe7a8f12452a259a5b21f27df842c2e893e5303de9928f93c5f91f3c4af34abcec97709f6c1b7448c195cd361825ac39af8ca380f8f8190f81bac0a33b3c734943369fd664a1bcd5b1e1aadad3422c28a610109b5db0c347ff94f0f60a637f3f23fd3e2414a7e76e73103a6e85f0a4aed2f13a964bb3e1000eaa5481e6aa7e51940bcf5f69d7e16b018619dcfacf8224cada1c6cca391519e3d292b19054c5b995ca390833966e32c253d85d67bc9cb592dab66480a9a1c243488defe88343115f838b454d1cd2b88434c85d2dee69d79078b4048019ae958d3a146760facdd2882df2ab16fe8ca7fb050334bdca3cc6e688268a7edf5d3b3a6094abc490c680cfaeafbd884ec71f2cf4253d6523d93e00563f26687fedbc384e1ddb666dee58f436129b50a486fd8664148d6df8b795376ec759c013528b0d711196604c9b0da3ff0de8f05c7e7538a91b3a4f15c97df82aa942ab317f54ca4b94a32086ab630324ee37eba72ee13a9f325ede55fa9daeb5e4adceda9d76040558ce5d5d5adde86d568c83da4d54e3b82abfcf03185318fdca0d729d0e825a71160ecff894b53bfe7376709e4dc773b4308c9cb6b24547d777455e3ca303021c89f83fce8b4dc7f0c253daa9ccbf04ee447244f096942bba00ce6a7f01bd5010d200b33a58a190d4329c0ca7b786035779ac718833935c2919952c5c141871518ad9d14806b4fb35d42de7cf386d6d51adfaba7cf0fdcfb1e13564991f4662d439db791f7578e7639271c0801d018bcd501d36b09cf5dd07714d998dca4c8ec52df055a755358171b10f401cf92a3863b7d5dd4789fd91d3ece848f6124bef80484e9db4f487f8773cee6cd0cbca76ccb98cf5e36f4f483362c7ca6b4af4da59cb8d521902e7352f4550b933136f1bd13b60e40986fa6a8bee5f74ace9df1fa45b65ec425c6b99b8c43eaf2f72c073f54be950ec113ad55c89d13743e63d6c74ba3ae00be5d64285fb8bfd45ab16233c7b0fe8d47d5e3ef2871e17bbb9cb5959603b2cc3422aaffb096a965bea034369edccd0355f137bad310cd511c1ab68a60909f14741c96d95214d3b8a8ee67c49bef2867dfda99fb19a64d789917bb5fb31968dfd9e50715af73e523751a38b2b2167b9d2f705f1ab68128b6f159a3b9024c11804831513dfa2884c163", 0x8000000000000000}, 0x8, &(0x7f0000000280), 0x8000, 0x2}, 0x3}, 0x2, 0x8)
statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x1000004909b6f8, 0x1ffe0, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0x8b4, 0x9, 0x6, 0x10003, 0x7, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84}, 0x8, 0xd)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m19.740905251s ago: executing program 1 (id=666):
msync$auto(0x6, 0x5, 0x400) (async)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0xa, 0x2, 0x4800)
getsockopt$auto(r2, 0x84, 0x2, 0x0, &(0x7f0000000080)=0x9c8) (async, rerun: 32)
mlock$auto(0x112, 0xd6) (rerun: 32)
mlockall$auto(0x800000000000005)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
write$auto(0xffffffffffffffff, 0x0, 0xf)
msync$auto(0x5, 0x7fffffffffffffff, 0x2)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async)
r4 = socket(0x2, 0x801, 0x84)
getsockopt$auto(r4, 0xa4, 0x75, 0x0, &(0x7f00000002c0)=0x1000c7) (async)
ptrace$auto(0x10, r3, 0x4, 0x7ff) (async)
ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, r3, 0xffffffffffffffff, 0x1) (async)
close_range$auto(r1, r1, 0x400) (async)
madvise$auto(0x0, 0x200007, 0x19) (async)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async, rerun: 32)
connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x51) (rerun: 32)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b081, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) (async, rerun: 32)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (rerun: 32)
sendto$auto(0x3, 0x0, 0x3, 0x101, 0x0, 0x1c)
write$auto(0x3, 0x0, 0xfdf3)

1m19.406742559s ago: executing program 1 (id=667):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'})
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r2, 0x323, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20008804) (async)
sendmsg$auto_SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000440)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r2, 0x323, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20008804)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)=<r3=>0x0)
sendto$auto(r1, &(0x7f0000000180)="b03188399fe6c630a0e6e9b47e7cdf95ed6db3740c77c6e4de1bba028e746f6e53b45fe99e1671935cd1bf714c986cf5e0b12652266aaeb0a487c221e7a3986a1335b52576ce78ed4aac413528c30f05de3e549aa4743b3599b036e373822e6f7d1bd0e621f1d1", 0x8000000000000000, 0x7, &(0x7f0000000300)=@nfc={0x27, r3, 0x0, 0x1}, 0x5)
connect$auto(0x3, &(0x7f0000000000)=@nfc={0x27, r3, 0xffffffffffffffff, 0x7}, 0x5b)
quotactl$auto(0x9, 0x0, 0x62a0, 0x0) (async)
quotactl$auto(0x9, 0x0, 0x62a0, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async)
setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x800, 0x0)
ioctl$auto_SG_NEXT_CMD_LEN(r4, 0x2283, 0x0) (async)
ioctl$auto_SG_NEXT_CMD_LEN(r4, 0x2283, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
epoll_create$auto(0x3ff) (async)
epoll_create$auto(0x3ff)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
close_range$auto(0xffffffffffffffff, r5, 0x8)
madvise$auto(0x0, 0x2003f0, 0x17)
r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6)
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, r6, 0x4000000007ffc) (async)
mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, r6, 0x4000000007ffc)
unshare$auto(0x8000000)
semget$auto(0x0, 0x2e4a, 0x8000)

1m18.442851542s ago: executing program 1 (id=670):
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x1, 0x84)
r0 = eventfd$auto(0x80)
readv$auto(r0, &(0x7f0000000380)={0x0, 0x8}, 0x8)
read$auto(r0, 0x0, 0xcc9c)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x74, 0x2000000000002)
write$auto(0x0, &(0x7f00000000c0)='vlan1\x00', 0x10001)
write$auto(r0, &(0x7f0000000400)='\'\x00', 0x8)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c)
shutdown$auto(0x200000003, 0x2)
acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90')
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x5e)
ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)

1m17.490009786s ago: executing program 1 (id=674):
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8108}, 0x0)
socket(0x23, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
pidfd_open$auto(0x1, 0x0)
socket(0x2, 0x80002, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0)
socketpair$auto(0x1, 0x1, 0x4, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0)
ioctl$auto(0x3, 0x40106f52, r0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x20942, 0x0)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
listen$auto(0x3, 0x400000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='5', 0x1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0)
writev$auto(r3, &(0x7f00000002c0)={&(0x7f00000001c0)="3472517ba6", 0x5}, 0x1)
open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)

1m6.517337891s ago: executing program 32 (id=653):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2040, 0x0)
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
sysfs$auto(0x2, 0x46, 0x0)
fsopen$auto(0x0, 0x1)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0)
open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95)
select$auto(0x5, &(0x7f00000000c0)={[0xeeda, 0x7, 0x4, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x0, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r0 = socket(0x15, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb)
connect$auto(0x3, 0x0, 0x54)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)

1m2.11879081s ago: executing program 33 (id=674):
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8108}, 0x0)
socket(0x23, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
pidfd_open$auto(0x1, 0x0)
socket(0x2, 0x80002, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00', 0x688480, 0x0)
socketpair$auto(0x1, 0x1, 0x4, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12de82, 0x0)
ioctl$auto(0x3, 0x40106f52, r0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x20942, 0x0)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
listen$auto(0x3, 0x400000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='5', 0x1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0)
writev$auto(r3, &(0x7f00000002c0)={&(0x7f00000001c0)="3472517ba6", 0x5}, 0x1)
open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)

16.125338035s ago: executing program 2 (id=801):
write$auto(0xffffffffffffffff, 0x0, 0x1)
unshare$auto(0x40000080)
socket(0x8, 0xa, 0x5)
mmap$auto(0x0, 0x2020009, 0xffffffffffffffde, 0xebf, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0x0, 0x48001, 0x0, 0x0, 0x0, 0xa)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x94000, 0x10)
mmap$auto(0x0, 0x8, 0x4000000000e3, 0xeb1, 0x401, 0x8000)
capget$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130)
fchmod$auto(r1, 0xa)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d)
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
open(&(0x7f00000001c0)='./file0/file0\x00', 0xaa480, 0x104)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff)
r3 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x1, 0x6)
landlock_restrict_self$auto(r3, 0xe3)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20443, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
mmap$auto(0x0, 0x400008, 0x5d07e767, 0x9b7e, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000300)="5651676e8ab3fd6b48fd3eefe666e1eecdc93f090cf7a3d0bbdf855ed681637d53db2ab4f8c0fc70848fc762dd41d5aad5fb53dcc3bfb87953f919c2551720e2a055dccdcee50a85474b0404c735b4e26f92d6dfbff077047cf1a1309092b18b81e9f0492358e729dbc5f54d7987aaf245385ea5ca66c43897324995185a31cb57ae9845d35c60d64ddb958ff616dad3d40a5af3cf36c59b0b0e789238980a", 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001e00)={0x0, 0xffffffffffffff5d, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc031}, 0x4008811)
ioctl$auto(0x3, 0x4, 0xffffffffffffffff)

13.723404864s ago: executing program 2 (id=808):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
madvise$auto(0x0, 0x2003f2, 0x15)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x24}}, 0x4000)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/dvb_usb_dibusb_mc/new_id\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000240)='nfsd\x00', 0x7, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
socket(0x10, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)

9.034879418s ago: executing program 4 (id=823):
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4008100)
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x222800, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})
mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x52, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x3, 0x9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2000b, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0)
sendfile$auto(r0, r0, 0x0, 0x400)

8.72055364s ago: executing program 2 (id=825):
mmap$auto(0x8001, 0xa, 0xdb, 0x13, 0x5, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x80, 0x0)
io_uring_setup$auto(0x7, 0x0)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40383d0c, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14)
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80680, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r4 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
r5 = getsockopt$auto(r4, 0x84, 0x70, 0x0, &(0x7f0000000280)=0x1000c0)
setsockopt$auto_SO_NOFCS(r5, 0x3, 0x2b, &(0x7f00000000c0)='/dev/kvm\x00', 0x1)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r6, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)

5.484375071s ago: executing program 5 (id=833):
mremap$auto(0xa, 0x7, 0x4800000, 0x3, 0xcd67) (async)
mremap$auto(0xa, 0x7, 0x4800000, 0x3, 0xcd67)
mremap$auto(0x7f, 0xffffffff, 0x32, 0x7, 0x7fffffffffffffff)
r0 = epoll_create$auto(0x8)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x200, 0x0) (async)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x200, 0x0)
mremap$auto(0x3, 0x0, 0x5, 0x7bf, 0x4c45dbda)
mmap$auto(0x0, 0x2, 0xfffffffeffffffff, 0x11, r1, 0x5)
mremap$auto(0xfff, 0x1, 0xffff, 0x200, 0xc59) (async)
mremap$auto(0xfff, 0x1, 0xffff, 0x200, 0xc59)
mremap$auto(0x1, 0x8, 0xc, 0x3, 0xf0b8)
mremap$auto(0x7, 0x2, 0x0, 0x7, 0x10001)
write$auto_bm_entry_operations_binfmt_misc(r0, &(0x7f0000000040)="6af0e8aac9b011fa751fc4090989bf09c2a1db8c8a2bb4bfda6a1d27aaa3f856dc470517f87a4b1d03adce6581a2b704a7f78d584d2f535d075ad86979f9515c4f8a1530d328472ee5cca26372982be5dc6da2eb6423b28db80bfeeaceaa8aaeb99d1d1ae2be3e0d6f6f27523c6dd03d0500b7dd9c59ede751c2fd9bdaaaf505b2e597c94f205a5f21f9f4001021afd7e5a2a50ca1ad68b6297f1a37b13e2597e92f55f4319fb7d902835848fea7fc3a5f4b4757ac6a4525c7a1744eb23ae51ba17cd7bc84752ed86c9e62463638a4971e38a9f89dcb13d181cfc15f07d251452dd84a3d", 0xe4) (async)
write$auto_bm_entry_operations_binfmt_misc(r0, &(0x7f0000000040)="6af0e8aac9b011fa751fc4090989bf09c2a1db8c8a2bb4bfda6a1d27aaa3f856dc470517f87a4b1d03adce6581a2b704a7f78d584d2f535d075ad86979f9515c4f8a1530d328472ee5cca26372982be5dc6da2eb6423b28db80bfeeaceaa8aaeb99d1d1ae2be3e0d6f6f27523c6dd03d0500b7dd9c59ede751c2fd9bdaaaf505b2e597c94f205a5f21f9f4001021afd7e5a2a50ca1ad68b6297f1a37b13e2597e92f55f4319fb7d902835848fea7fc3a5f4b4757ac6a4525c7a1744eb23ae51ba17cd7bc84752ed86c9e62463638a4971e38a9f89dcb13d181cfc15f07d251452dd84a3d", 0xe4)
symlink$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00')
mremap$auto(0xffffffffffffffff, 0x5, 0xfffffffffffffff8, 0x2, 0x5) (async)
mremap$auto(0xffffffffffffffff, 0x5, 0xfffffffffffffff8, 0x2, 0x5)
close_range$auto(r0, r0, 0x10000)
fadvise64$auto_POSIX_FADV_NORMAL(r0, 0x6, 0x0, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0p/sub1/sw_params\x00', 0x40001, 0x0)
mremap$auto(0x8, 0x1, 0x2a, 0x129b1fef, 0xe)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000240), r0) (async)
r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000240), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0xffff}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x8000)
sendmmsg$auto(r0, &(0x7f00000004c0)={{&(0x7f0000000340)="5e4c2ce62abac7b6d8e450dc202ba90376764dbbeaa4fc6366100228860da609a7e83fdf5afe8b", 0xde, &(0x7f0000000400)={&(0x7f0000000380)="fc8c41160180768465ec10faf425d0b4f9d6ab8f57db8f311a1f1c1c2295ae6f96c3d2e5145268c0767614e6fd34199bde695ad278ee2ec54782140d76a62c877ab1d2d71df9edd80d49418c6d0d8570", 0xff}, 0x401, &(0x7f0000000440)="a0eb852152a86f3682831da17d48fb9070c7a1b2eb99f6cdb16e66a040017e4881c188814012083da687c9ccb4bd347d25dee4c88c7752292106a3f7617c4698e0ebe30a7e784f821fd3a101ede3", 0x3, 0xfffffffe}, 0xe5e6}, 0x6, 0x7)
ioctl$auto_TUNSETOFFLOAD(r0, 0x400454d0, &(0x7f0000000500)=0x5)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/card0/pcm0c/sub7/info\x00', 0x30000, 0x0)
pread64$auto(r2, &(0x7f0000000580)=']\x00', 0x0, 0x1)
removexattr$auto(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='{/&&\x00')
getsockopt$auto(r4, 0x4, 0x0, &(0x7f0000000640)='/proc/asound/card0/pcm0c/sub7/info\x00', &(0x7f0000000680))
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r0)
getpgid(0x0) (async)
r6 = getpgid(0x0)
sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x338, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_NAN_FUNC={0x1be, 0xf0, 0x0, 0x1, [@nested={0x28, 0x87, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @pid=r6}, @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@empty}, @generic="4e3ff976e5793750"]}, @generic="8081e4e5b239818f658195de5a444ac315944a0be9f5f79fd8020835b5f10dd27e6dff25460b474a5f106f9d47af115d3fd730ad1a24769b7c3d0d982d70ebc7527cb5d6bf6ddc971ee96290c2987ae10ff9c4b57eeac9334a237114580b0bc7612b325e0f07f2eaf0b96c1e86", @typed={0x9, 0x116, 0x0, 0x0, @str='{/&&\x00'}, @nested={0xa8, 0xc1, 0x0, 0x1, [@typed={0xa3, 0x111, 0x0, 0x0, @binary="0f7343ac2b4b615ce5f8cf3a4e71779a8dc79e07ed1382a292f4228604769e283b986eb7e4d57633f3d84b0e4ee7137f6a629512811fe4fd4f5bc292e205389c6d7eee3e0307c98519500ad2a9035111a9a96e1e57b958fba99d9731cf497a0803631ad8b676f1dee679e082f0dd5090297fbf023b1806bf2706a55d3089ee33c575db983de36b977b6af225e37f46c96c16bd03808d6d12991c20fe98a57c"}]}, @generic="e78b608eb81f0938939d52df6d54a2ed435039718abe0b54b453cacedff8c511d4f99a30fb70ad7c845f884846d4518bcb202ed5cb79c9af8cbc77df6491451943eb765cb959462f06b730744728396e5bd6508cf4e46e6234a2cdda26784ded2614e5116651d422a6a1940426c7ba0efc"]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8}, @NL80211_ATTR_FTM_RESPONDER={0xa0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6d, 0x2, "e4e6558d38be195918042cd543c59076e225a06190570a5375d0f343eba196cb9bdc7f542e812552f361bb0f0fa129ab9c05d3f6d52e0ab4321b8ff823c610889865e7b7a5b8783087d8f4be86772a6638779ae4059c23bb8a59814c56688d9518f59cf64bddc927e9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x27, 0x3, "3805b6e5052223ac96d3cf9a374e0d35aa45c90e29a921dcc450b6649675b1d99cec92"}]}, @NL80211_ATTR_QOS_MAP={0xa6, 0xc7, "be1179d53638af8119795576558e798a40bb719119aa94323cccf163ce29638abc869b2ef9bc9d256fd89078545a13a3686ba36edee7de8f6b9fd5eb98e4e8b965d035b5b058a4999355e40c0f7775d4ffcbb532a06649831190ee58205488b31056a44f249dc029f1e50990ffd5026c606e1fa1f42f9ddc900986f6fe7b22b67167ff789e58bab8eb692e7cf8130354b9f33df469fe1eac1c6cf599f9e5eb764b91"}, @NL80211_ATTR_FILS_ERP_RRK={0x11, 0xfc, "9ab5bb320f9cdc85dfe151e7e8"}]}, 0x338}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
unlinkat$auto(r0, &(0x7f0000000b00)='./file0\x00', 0x3) (async)
unlinkat$auto(r0, &(0x7f0000000b00)='./file0\x00', 0x3)
capset$auto(&(0x7f0000000b40)={0x8000, r6}, &(0x7f0000000b80)={0x6e, 0x4, 0xffff0001}) (async)
capset$auto(&(0x7f0000000b40)={0x8000, r6}, &(0x7f0000000b80)={0x6e, 0x4, 0xffff0001})
mremap$auto(0x1d4000000, 0x1, 0x0, 0x6, 0x1) (async)
mremap$auto(0x1d4000000, 0x1, 0x0, 0x6, 0x1)

5.3839059s ago: executing program 4 (id=834):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5)
ioctl$auto(r1, 0x4008af23, r0)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x5e, 0x4, "d1d27b0110e8101687d2e5e9eb0d92cd08afbe922a0b48f112ce041d83bede20cb254f4b3d013a8fa99e307a6b08b34ffa18224ad21d763ef01ecbba81c075e92a728eef67395a233ee91ed2b84920e942981aafbfa7212a46fa"}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0)
close_range$auto(0x2, 0x8, 0xfffffffe)
r4 = socketcall$auto(0x8000, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(r3, 0xc040aed5, &(0x7f00000000c0)={0xdd})
read$auto_tracing_stats_fops_trace(0xffffffffffffffff, &(0x7f0000000200)=""/241, 0xf1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0xbf, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0xe47, 0x7)
r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r6)
r8 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/ieee80211/phy1/power\x00', 0x610000, 0x0)
write$auto(r8, &(0x7f0000000480)='netdev\x00', 0x8)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r9 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r9, 0x29, 0x1f, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x110)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = epoll_create$auto(0x3e)
epoll_ctl$auto(r10, 0x1, 0x8000000000000000, 0x0)

5.226965847s ago: executing program 5 (id=835):
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r1, 0x2, 0x9)
ioctl$auto(r1, 0x400c4d02, r1)
eventfd$auto(0x3)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS0\x00', 0x121000, 0x0)
ioctl$auto(0x3, 0x540b, 0x1)
ioctl$auto_SNDCTL_TMR_STOP(r0, 0x5403, &(0x7f0000000000)="48c78344a594ab328fa5")

5.004534037s ago: executing program 5 (id=836):
socket(0x10, 0x3, 0x6)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
mmap$auto(0x3, 0x400008, 0xdc, 0x800000009b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0)
ioctl$auto_TIOCGPTPEER2(r0, 0x5441, 0xebffffff)
close_range$auto(0x2, 0x8, 0x0)

4.99448973s ago: executing program 2 (id=837):
ioperm$auto(0xefdd, 0x4, 0xfffffffa)
semget$auto(0x80000000, 0x13c, 0x3ff)
unshare$auto(0x40000080)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)={0x1, 0x7, 0x17, 0x8, 0x1, 0x63, 0x10, 0x3, 0x3})
semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x10, 0x2, 0x7fffffff)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0)
r2 = epoll_create$auto(0x8)
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x25ad81, 0x0)
sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r3], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
r4 = ioctl$auto_TUNSETVNETBE2(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0xfffffffd)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f00000002c0)="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")
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r1)
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000002700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f00000012c0)={0x1400, r5, 0x401, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1186, 0x3, 0x0, 0x1, [@nested={0x14, 0x11, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0x5, 0x125, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x4b}]}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x3}, @generic="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", @generic="2a050261331c3c7c6ac6338dc4ce2eb023d98dd96b70aefc538dbec9f6adc62e877b44f7f9a4a4833e81a15127ec39fc7c3d7e793261666ed62896afe7aecb48b0dce2e679211017098344b523012957f362e6b0aa0fdab0750f7891506ae6143e1119ad2b516d3d2f8742edf8b4af75b6815515c6940e3ff22f95fb61c71bd19c0a92591466d6ab86fb9198a2e3200ea5a0ef0dfd28aadd424e", @typed={0xcc, 0x28, 0x0, 0x0, @binary="0936a0d2f383986aa0a6802979fa2a0c9630f7f8780a764a84d558c50d1fd7f92556370645abadebe78c55a9a2e8f7b8425b356348abaf4d28001240aee7edb071f8398285e41e1c2e82042e4f2fcb5acf8554c0214f233c2bc34ca74a26be8893ebd4915dbdfa6adbfe5eaafe0e46f15885f54f4ec464bec6846dcddc885e60f3a693d5c72cfcd033c436a390f28c23f3a167616b3bbebbd28f88a2d1bf57bac18841867f0449b43fc61d6a3fa8a38023ea5a5a51e39464b0479d12b8886ec81be03f1decfea77e"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x34, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @u32=0x6}]}]}, @TIPC_NLA_BEARER={0x253, 0x1, 0x0, 0x1, [@nested={0x1a5, 0x3, 0x0, 0x1, [@typed={0x8, 0xa9, 0x0, 0x0, @pid=r6}, @generic="d69c7102084ba5ba2bf6686cc301d1f479ef9a0928259cc38c609a45abdb43c5741abdeb4f6694bea5063919827e8d149d2a880fe04134d7d9446fd371a44687fc495deb37f87dbbeef00c7d9e1f8140a4e2b32a1196e5e73bf7818d85c5cebfa08edc6f187bc2b7aea0e9b8847531f214d024ee85fb6de76f30fcc8b33397c55048ba5ea0e889e7e47b6ce467bcd8fcfa0e854d9ec73708a34afe983b46b00defb7", @generic="fc9c3da7f465e4a71d09f337a0619b4ccfddd94d163531ef00479c79bbb34bb0659b2c56d0baa5f31e5c66e50a4acc141126c9cb4a83945ab63b5d5eb367fb0ec770dadc99a9975354ea31354fcdbc0d4b96349b9792c09e240ef71f69591e06a134257b8bdeed3be661a695ee05ce2144e62cdc54d5d31e757b25543b507e657878ce7e4a18c8339639f89b8012f857b16165c711a16211cb281efad2e679de4c68196c62b20884466be25b03ff5d42d2814ce8af365db8444110ac7874ab1215d43a277e65b5b6469f9d9fa623f0843c526f0ac55fc3145c1217282ad15e692213d2eff0f6815562bd2b5df3d3ec", @nested={0x4, 0x5c}, @nested={0x4, 0x88}]}, @generic="a420d655c7c4782cf7f0f8f1c6d1650a176a7218c909a3425b822c4a904461504d58084f994633019cc3a09d6e4f51126f76558bc9fdf4d1f9f795b52fcb147c4bedf762024ebd53c8b906d1d57eb1ab65b57c095243d537dbd715790544c7b34900a6346c041ee5f74e8d52e8de5100e407bc8e43afae932568e6a53f3e2fa2d501993d6b3823273b8549d8c68eac0df6c5f8a2e36e5a5f7db8956a7c34f54f4828095f3500a6"]}]}, 0x1400}, 0x1, 0x0, 0x0, 0x2}, 0x4)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x0)
sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8)

4.75442121s ago: executing program 4 (id=838):
r0 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r0, 0x0, 0x2fb)

4.684463619s ago: executing program 5 (id=840):
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1, 0x3, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0)
ioctl$auto(0xffffffffffffffff, 0x89f0, 0xffffffffffffffff)
mmap$auto(0x0, 0xc, 0x5, 0x16, 0xffffffffffffffff, 0x6)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

4.403083723s ago: executing program 4 (id=841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = open(&(0x7f00000004c0)='./cgroup\x00', 0x181080, 0x118)
open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x1, "0400000000000000"}, 0x42)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x14000000000, 0xf)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x440d0}, 0x2002c810)
prctl$auto_PR_SYS_DISPATCH_OFF(0x15, 0x0, 0x0, 0x9, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001c00), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000002100)={0x18, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x42, 0x0, 0x400)
keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x1000000000000000, 0x1, 0x31, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000280)=""/175, 0xaf)
setsockopt$auto_SO_DETACH_FILTER(r6, 0x2, 0x1b, &(0x7f0000000000)='!\x00', 0x8)

3.63177234s ago: executing program 5 (id=842):
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4008100)
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x222800, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})
mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x52, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x11, 0x3, 0x9)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2000b, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa)
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0)
sendfile$auto(r0, r0, 0x0, 0x400)

3.631568212s ago: executing program 4 (id=843):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop5/queue/nr_zones\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000072c0)=""/137, 0x89)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
r2 = socket(0xa, 0x5, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
getsockopt$auto(r2, 0x0, 0x50, 0x0, 0x0)
r3 = socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24004081)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00\'a'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xffc3, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000340)="6065535431129d4c20323f68d176fd8d3805776f0df093be8ad70f43950c0bee2d5c3645fa24bcbaeb7b2dab3df389b45247f788a789e94b244b4e4744be3f93f42aa6b3008f3e43b8a025f22fee881b75446e6bd026fd56314c3d80d61d2b3be78f74d4d9cbfd6a420bce1fc16d739951d86d2147264af208f56522d56d38ca2a7f018cff1bc46758ab4b85a771330bd3acb9d25e303f089f98f1c68973b94432beffb4f577d56c5cc764526b44090e032d278e7fee3786e8ddfcf2506a16e1691a13974b4f11d000"/214, 0x7, 0x3}, 0x800}, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffffe, 0xeb1, 0xfffffffffffffffa, 0x8000)
writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x600, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x74c)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r5 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58)
getsockopt$auto(r5, 0x29, 0x10, 0x0, 0x0)
sendmmsg$auto(r1, &(0x7f0000000280)={{&(0x7f0000000180), 0x3ff, &(0x7f00000001c0)={&(0x7f0000000440)="d5120793f0b01cb4eeef72dbd5e51878e1897de7993d317b0dedaa932d91e7b9cbcf7e4c20499ffc4c6c1f6e41058e4fc0f116acd3ae21d7f8f5efb690f6a4071f9c9f4eccb0ca8a4eefff85aa98a7693af0226bf34afb57f78f38df56d062a008c25adddea6a14896a2a3dd43661292e6b4f88520aa805a845f7f55a49a4fb9a304040e2c0ef7240290596b094811ea670db981689a3a5b61f6177f76427529f1d706d49400c476d4d700748e2d41f43034850adf15829931ce3a96161be1331d6a23e5afc5d67a3f89a978204d22cd6d2aba76f3009cce1fcc44", 0x7f}, 0x8, &(0x7f0000000540)="1be80d1dbab3ceea0090bff8e1b77da0da5ede4784cc733309ae4b77fa2ac2d14b8d5cc9ee40c1dae7fc28e778f828bf043b2a4f004af5526c3ed4f40fe8018fe4ab3499185a8782e1dc0a7906c0a296354442a29151f32b6045f212e1314093811e99e1f7af0186ec6dbb0fc438bbd4c9b94a3184662da03f477104262252f15c6fafef9c73fc43d2b461038ebb2b217f64ab04354060b71f93b49c7d987287c143073f95c2b09df0d248c49dbebfaa808ffa020c6865fe3e845251ed9fa4ff388ce3ae65d32837cc48162039b53913", 0x4, 0x47d64de9}, 0x6}, 0x3, 0xd20c)
mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400)
madvise$auto(0x2, 0x3, 0x20006)
socket(0xa, 0x2, 0x88)
capset$auto(0x0, 0x0)

3.262658206s ago: executing program 0 (id=844):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322df4)
r4 = open_by_handle_at$auto(r3, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6)
sendfile$auto(r4, r3, 0x0, 0x2)
r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0)
sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_TID={0xc, 0x3, 0xd00}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x19}}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000404)
ioctl$auto(0x3, 0xc040aed4, r1)

2.626526765s ago: executing program 0 (id=845):
select$auto(0x32, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x10000, 0xffff, 0x9, 0x6, 0xfffffffffffffffd, 0x1, 0x4, 0x8, 0xfffffffffffffff5, 0x4, 0x10, 0x2, 0x0, 0x6, 0x6]}, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async)
socket(0x2, 0x1, 0x106) (async)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) (async)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x3)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@btf_id=0x1, 0x3, 0x3}, 0x3)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
socket(0xa, 0x3, 0x6) (async)
socket(0x11, 0x80003, 0x300) (async)
socket(0x10, 0x2, 0x0)
socket(0x2, 0x3, 0x2) (async)
socket(0x2, 0x3, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
timer_create$auto(0x0, 0x0, 0x0) (async)
timer_settime$auto(0x0, 0x803, &(0x7f0000000000)={{0x800000008, 0xa}, {0x9, 0x2}}, 0x0) (async)
timer_gettime$auto(0x0, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socketpair$auto(0x3, 0x5, 0x7, 0x0) (async)
mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0))
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x400081, 0x0) (async)
r1 = gettid()
prctl$auto(0x3e, 0x1, r1, 0x1, 0x0)
prctl$auto(0x3e, 0x80000000, r1, 0x1, 0x0) (async)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
connect$auto(0x3, 0x0, 0x54) (async)
mmap$auto(0x0, 0x20009, 0x4000000000dd, 0xeb1, 0x401, 0x8000) (async)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon32\x00', 0x90600, 0x0)
ioctl$auto_MON_IOCX_GET(r2, 0x40189206, 0x0)

2.266862005s ago: executing program 0 (id=846):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)={0x678, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "1990fe9feb8837fe11dd9138"}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_TID_CONFIG={0x188, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xff}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, "2a9c588a24a8cedc9c34fb8924ba46ea3b6e20ae133e54cb95254ff2b714bd04c8"}, @NL80211_TXRATE_HE={0x10, 0x5, "8e870487633836ca973e5cd9"}, @NL80211_TXRATE_HT={0x29, 0x2, "5eb76d7ab8dc14858498a31099fef465d104bd95ac63c90f3849e568277ccac4cb2e83d6e2"}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7f}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x12000000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xe2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x40}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xffff}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x30a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xf9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}]}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x414, 0x80, "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"}, @NL80211_ATTR_MAC={0xae, 0x6, "22acb7ca79cd3bdd172b858e0dc57686f6a4458d16ca7d3ae21de1780c40d22a7242a302723d8203d46c7b005f36420950c7d47593be9183755e6be8feb7a4e34fd56f292369fd8771bbdf381c3f5f2a099f2f38efca8a4dc5c3da42e44a77532277357ad4d2baae931aa7b06a9f90695e0b3d7c54d2c39b13541d451fb7fdefab7dd25f482bf9b766e30e76d7ae16062bb701e26f0ebd5bb59f211e35c9740b30152e3c83e2277d49f8"}]}, 0x678}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x14)
socket(0x11, 0x80003, 0x300)
socket(0x2, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x48001, 0x0)
socket(0x10, 0x2, 0x0)
socket(0xa, 0x2, 0x73)
io_uring_setup$auto(0xa, 0x0)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x303a00, 0x0)
socket(0x1e, 0x1, 0x0)
pipe$auto(0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000700)={{0x7, 0x1, 0x80, 0x4b5, 0x200000}, "daccc6647b08aabace7ff0da7000df9ef7d27b32f0bfbcba2eb01f629a896281"})
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x500, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82000, 0x0)
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
socket(0xa, 0x5, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x900, 0x0)
socket(0x10, 0x2, 0x14)

1.768858504s ago: executing program 2 (id=847):
bpf$auto(0x0, &(0x7f0000000040)=@raw_tracepoint={0x5, <r0=>0xffffffffffffffff, 0x0, 0x5}, 0x92)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x88882, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mtd0ro\x00', 0x420d40, 0x0)
ioctl$auto(r3, 0x40084d02, r3)
getdents$auto(r2, 0x0, 0x3f1)
socket(0x10, 0x3, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r4)
sendmsg$auto_TIPC_NL_MEDIA_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="f8070000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="05001e000000000008001400ac14141b00a001098014004600fe8000000000000000000000000000206c002f804a62293ae5757b8ff7f0ab5929e2e076575d8823ab3be1846dc6d0559f96dc4e78f6eff8cfe52762c6583a8648fc6287ea40e8694a5fa62348b2326ce9f1d6c4143ab402d6ca6fbd1ea10001b02bd47a61039f46ad70902d242fa446d0c2dd590b48d39e0400238008004d80040080800b00a90026255b2a2d280000fd008480d29dc0db433e7d87eb400cc554b659b1ff60a39222f66e10e19999257e783058adf9f80b51c99bbad064e91772fda844cb3b7861617b7bd01a561867b0fcd42588a8692c3efee9387ef7312a80484afa526fbd12ec1e064f3acc513a024d2c5f1d959106738cd56f08ffbf08bb6f6a983d24df34b5fd13a0f69e21bf4a6f3a9cb0c1232660d4a709b56145dd31558ec6b21bc80447b278f2c3d0024198962db0e3cc6825157091082e664c3e5309e288fa321d370aa1c3c2d39b72ffc10b26fa4cda4a36fd6678108dcee13679432f9f92b7a374c2b78ed511f846b1dd84fa1d7d08009000000000", @ANYRES32=0x0, @ANYBLOB="0400508000000008008600", @ANYRES32, @ANYBLOB], 0x7f8}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff94, 0xfd3, 0x2, 0xec, 0x4, 0x100000000, 0x6, 0x7ffffffffffffffd, 0xfffffffffffffff8, 0x1})
r6 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0)
writev$auto(r6, &(0x7f0000000280)={&(0x7f0000000440)="8e2588b506f60fc33c76d9e12061ef516d344eadcb10271787535320dcdce232b4722338882ed9efb589921eaa08ada3a217bbc437141f0394c325ba83cb7ddf79eac354ef8719b9917567ea5420b2ea9d29d4ac2d12e860e7e22077e710da19549bb98258b5608dbdee8597624ed06e9e0c117b680c6f56592660b8e55f9343c6a99ae07d067c568ac5f8f2d681c9169ed031f7886288e91ca84d088429ff55e23d1fdbb088c3affc4722603a1731e0827623d928f71965c3a9db2b92f764922ecf5c9401dee6dc02f9c9", 0x4}, 0x1ff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r7 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0)
read$auto(r7, 0x0, 0x80)
r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x80402, 0x0)
write$auto(r8, 0x0, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r0)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="07031abd70250c00587b22"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
writev$auto(0x3, &(0x7f0000000140)={&(0x7f0000000000), 0xdc7}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYBLOB="1a00", @ANYRESDEC=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044080)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x9}, 0x10007}, 0x3, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0)
getdents$auto(r2, 0x0, 0xa2b0)
pread64$auto(r1, &(0x7f0000000140)='\xe8\xaa\n\x99\x92\x0e<P\x8c\xd10\xc0\x94\xd4\xda\xb1\r\f\x00\x00\xddJ\xe80\x8e\x9c\xb4U\r\xa5C.\xa9EN.\x1c\xef\xb9<w\xe2\x05~SD\x1907G\x97]\x0eS\t\v\xce\xe5-?\xd2\xa1V\x94\xaf\x81\n\x18K\x90\xed\xec\xd6,\x9bK\x9d\a^\xb0!\xd3\xd2\x9ez\x86b\xd1z\x90|\xb0Z<\\\xf4O\xefl\x8f{\xbd\x8b\x1f\xc03\x0f@\xb1\xb9j\xc3\xf4\x96\x1a#-G2d\xa2\n\x1f\xd0\xd7u\xc8\x9b#\xcd\x8c\xc5\x00\x8c\x03\xb6\vre\xbe\xca\xa88\x92\xfb\x82\xc9\x82m\xc1-3jZ\x82\xb2g\x7f\x0ei\xf1\xc1\xaa\xdd\x0faN\x92&b\xbb\xc9\x1d\xbe\x00'/194, 0x7fff, 0x3)

1.107695802s ago: executing program 0 (id=848):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async)
bpf$auto(0x0, 0x0, 0x92)
futex_requeue$auto(&(0x7f0000000040)={0x8, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4000000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
ioctl$auto_FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x7)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x3, 0x6) (async)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) (async)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1bff, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x5, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async)
write$auto(0x3, 0x0, 0x100085) (async)
r2 = getpid()
rt_tgsigqueueinfo$auto(r2, 0x0, 0x21, 0x0)
prctl$auto_PR_SET_MM_BRK(0xc, 0x7, r2, 0x5, 0x7fffffff) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x3, 0x100)

552.339408ms ago: executing program 2 (id=849):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xda0, 0x400, 0x718c1257}]})
socket(0xa, 0x3, 0x3b)
close_range$auto(r0, r1, 0x100)
mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000)
fchown$auto(0xffffffffffffffff, 0xe5a, 0x5)
ioctl$auto_KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
adjtimex$auto(&(0x7f0000000000)={0x16, 0x0, 0x7, 0x4, 0x7fffffff, 0x4, 0x100, 0x0, 0x5, 0xffffffffffff8000, 0x4, {0x3, 0xa}, 0xe5, 0x9, 0x9, 0x4, 0x0, 0x6, 0x6, 0x81, 0x20, 0xffffffffffff8472, 0x1000})
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
write$auto(0xca, &(0x7f0000000400)='\x04>\x01\x03\x00\x00\x00\x00\x00\x00\x003\x940\x97\x87\x87\x8f\xe3\xc0\xfa$ H\xb1o\'\x90\xef\xa1/\x8e>\x14\x89\xfeu\xaf\xcd\xd3\x0ev\xf3if\x7fN4\r\xf8\xd1\xd1?]\x90\xe6\"D\x90\xb2\xffK\xd1\x12\x19\xdd)\x9aG\x8b\xa7\x95\xa4\xc3\\\xdbR\xf85=\x8d\xa9\xc9\xbb\x9e\x82\xfb;e\xf8b\x8a3\xec\xfc\xf3V\xc9\xd2\xea\x87\x18\xe1\xe7\xbcM\xec}r\x10@U~\x84G;\xe8RS{\xac\xea\x1f\t\x93\x8bF\x93', 0x2d9)

278.847675ms ago: executing program 0 (id=850):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
r1 = socket(0x18, 0x5, 0x1)
connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00', 0x18b940, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7fffefff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
open(0x0, 0x161342, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0)
ioctl$auto_MON_IOCX_GET(r2, 0x40189206, 0x0)
ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0)
r3 = prctl$auto(0x44, 0x0, 0x0, 0x0, 0x0)
r4 = io_uring_setup$auto(0x89, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb5, r4, 0x8004)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
arch_prctl$auto_ARCH_SHSTK_DISABLE(0x5002, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x8202, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x44400)
syz_genetlink_get_family_id$auto_nl802154(0x0, r3)
mmap$auto(0x20000006c80000, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x7ffc)

265.095272ms ago: executing program 4 (id=851):
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40940, 0x0)
socket(0x2, 0x1, 0x106)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20007, 0x84000000000d7, 0x19, 0x401, 0x8000)
close_range$auto(r0, r0, 0x7)
io_uring_setup$auto(0xb, 0x0)
r1 = socket(0x2, 0x5, 0x0)
r2 = socket(0x15, 0x4, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0xfffffff7, &(0x7f0000000000)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0xd, 0x311)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
epoll_create$auto(0x8800001)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
sendfile$auto(r2, r2, 0x0, 0x4)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
close_range$auto(0x2, 0x8, 0x0)
write$auto(0x6, 0x0, 0x100000002)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), r1)

202.793103ms ago: executing program 5 (id=852):
r0 = socketpair$auto(0x1, 0x1, 0xffe, 0x0)
setsockopt$auto_SO_REUSEADDR(r0, 0xffffffff, 0x2, &(0x7f0000000040)=')\x00', 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r4=>0x0})
sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="44010000", @ANYRES16=r2, @ANYRES64=r4, @ANYRES32=r4, @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x4, r5})
epoll_wait$auto(r0, &(0x7f0000000100)={0x80000000, 0xec}, 0x6, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x200, 0x1)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45)
fanotify_mark$auto(0x0, 0x55, 0x9, r6, 0x0)
sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000140)=0x81, 0x9)
symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
close_range$auto(0x2, 0x8, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r7 = socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r7, 0x3)
mmap$auto(0xfffffffffffffffd, 0xba7, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex_wake$auto(0x0, 0x5, 0x4, 0xa)
socketpair$auto(0x4, 0x5, 0x8000000000000000, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54)
getsockopt$auto(r7, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0)
setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90)
fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0xffff4a2f, &(0x7f0000000000)='@!/\x00', &(0x7f0000000040)="1eef837a04de0775deaa7fb533b7086044565373c05b9fb0f5adf20b3ad79160b2c9854ef7f9fa91fa85909377c9605806a7ae22d29d9be5ec4bd01305ff79a5b3a0a209397fd21da5537d1b17e9e5328169ad6dd632ce2fbc39d77d565daf74aecd490c5e8ff5119d53d18f915fbf1e12100c4837cdc24f763bc44e4772a341924eed3f312276e570e71e4d0d0bdd3b24deb543ab8e61f80c1b7c22c87bc9176fb1b9ee371f1b57502e5d14e42943297e6fda088c06fe5d2237821481dbbc", 0x1)

0s ago: executing program 0 (id=853):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.5/power/runtime_suspended_time\x00', 0x569a02, 0x0)
r0 = socket(0x6, 0x3, 0x37)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, r0, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x2, 0x2, 0x73)
socket(0xa, 0x6, 0x80000a4)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x8000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x591e42, 0x0)
ioperm$auto(0x10000, 0x80, 0x6)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socket(0x15, 0xa, 0x0)
mmap$auto(0x7, 0x1, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
close_range$auto(r2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x7, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0)
r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0)
read$auto(r4, 0x0, 0xb4d3)
unshare$auto(0x40000080)
setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567)

kernel console output (not intermixed with test programs):

slave_0): Enslaving as an active interface with an up link
[   85.881589][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.889145][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.896294][ T5827] bridge_slave_1: entered allmulticast mode
[   85.903621][ T5827] bridge_slave_1: entered promiscuous mode
[   85.917492][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.929580][ T5828] team0: Port device team_slave_0 added
[   85.960698][ T5828] team0: Port device team_slave_1 added
[   86.016806][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.028552][ T5824] team0: Port device team_slave_0 added
[   86.034301][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.042032][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.049407][ T5833] bridge_slave_0: entered allmulticast mode
[   86.056317][ T5833] bridge_slave_0: entered promiscuous mode
[   86.076009][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.086994][ T5824] team0: Port device team_slave_1 added
[   86.093067][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.101290][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.108570][ T5833] bridge_slave_1: entered allmulticast mode
[   86.115645][ T5833] bridge_slave_1: entered promiscuous mode
[   86.123702][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.131253][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.157297][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.201901][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.209164][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.235217][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.284441][ T5827] team0: Port device team_slave_0 added
[   86.291507][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.298585][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.324813][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.339971][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.352264][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.363095][ T5827] team0: Port device team_slave_1 added
[   86.369480][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.376412][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.402972][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.484120][ T5833] team0: Port device team_slave_0 added
[   86.492538][ T5833] team0: Port device team_slave_1 added
[   86.505600][ T5828] hsr_slave_0: entered promiscuous mode
[   86.512780][ T5828] hsr_slave_1: entered promiscuous mode
[   86.520146][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.527100][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.553290][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.565969][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.573010][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.599105][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.667821][ T5824] hsr_slave_0: entered promiscuous mode
[   86.674428][ T5824] hsr_slave_1: entered promiscuous mode
[   86.680741][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   86.686520][ T5824] Cannot create hsr debugfs directory
[   86.703166][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.710491][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.737352][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.737424][ T5830] Bluetooth: hci0: command tx timeout
[   86.750367][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.761408][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.787685][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.808830][ T5830] Bluetooth: hci2: command tx timeout
[   86.808836][ T5832] Bluetooth: hci1: command tx timeout
[   86.888515][ T5830] Bluetooth: hci3: command tx timeout
[   86.930222][ T5827] hsr_slave_0: entered promiscuous mode
[   86.936999][ T5827] hsr_slave_1: entered promiscuous mode
[   86.944125][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   86.950592][ T5827] Cannot create hsr debugfs directory
[   87.047983][ T5833] hsr_slave_0: entered promiscuous mode
[   87.056782][ T5833] hsr_slave_1: entered promiscuous mode
[   87.063789][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   87.072589][ T5833] Cannot create hsr debugfs directory
[   87.488846][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.502326][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.513129][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.532674][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.589996][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.603242][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.621326][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.655224][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.720882][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.748048][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.759414][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.770803][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.856422][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.875304][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.890159][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.901514][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.961010][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.001537][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.036419][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   88.045954][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   88.070112][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.077385][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.100914][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.108021][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.121357][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.128648][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.159340][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.166494][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.216778][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.300377][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   88.350794][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.376783][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.383983][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.453912][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.461115][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.485591][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   88.537148][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.544368][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.584646][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.591844][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.712758][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.802562][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.822786][ T5830] Bluetooth: hci0: command tx timeout
[   88.882284][ T5824] veth0_vlan: entered promiscuous mode
[   88.898470][ T5830] Bluetooth: hci1: command tx timeout
[   88.904100][ T5830] Bluetooth: hci2: command tx timeout
[   88.952360][ T5824] veth1_vlan: entered promiscuous mode
[   88.970624][ T5832] Bluetooth: hci3: command tx timeout
[   89.004456][ T5828] veth0_vlan: entered promiscuous mode
[   89.080897][ T5828] veth1_vlan: entered promiscuous mode
[   89.092691][ T5824] veth0_macvtap: entered promiscuous mode
[   89.106090][ T5824] veth1_macvtap: entered promiscuous mode
[   89.139371][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.164856][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.193954][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.235916][ T5828] veth0_macvtap: entered promiscuous mode
[   89.253820][ T3456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.263386][ T3456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.275146][ T5828] veth1_macvtap: entered promiscuous mode
[   89.293748][ T3456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.310256][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.317230][ T3456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.345096][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.371973][ T5833] veth0_vlan: entered promiscuous mode
[   89.394863][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.431458][ T5833] veth1_vlan: entered promiscuous mode
[   89.452460][ T3456] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.462251][ T3456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.494389][ T3456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.503793][ T3456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.593268][ T5827] veth0_vlan: entered promiscuous mode
[   89.600550][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.618508][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.635410][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.644475][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.653325][ T5833] veth0_macvtap: entered promiscuous mode
[   89.682714][ T5833] veth1_macvtap: entered promiscuous mode
[   89.708990][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.716907][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.728012][ T5827] veth1_vlan: entered promiscuous mode
[   89.760376][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.768237][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.796294][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.823768][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.844694][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.863970][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.880761][ T5827] veth0_macvtap: entered promiscuous mode
[   89.887506][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.898235][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.911409][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   89.939444][ T5827] veth1_macvtap: entered promiscuous mode
[   89.997201][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.045263][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.121572][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.174362][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.198422][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.210727][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.230123][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.238230][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.367983][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.382461][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.455040][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.465925][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.563747][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.633760][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.888732][ T5832] Bluetooth: hci0: command tx timeout
[   90.968517][ T5832] Bluetooth: hci2: command tx timeout
[   90.978434][ T5830] Bluetooth: hci1: command tx timeout
[   91.011345][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.053492][ T5832] Bluetooth: hci3: command tx timeout
[   91.135262][ T5925] random: crng reseeded on system resumption
[   91.211595][ T5925] FAULT_INJECTION: forcing a failure.
[   91.211595][ T5925] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   91.262624][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) 
[   91.262661][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   91.262683][ T5925] Call Trace:
[   91.262692][ T5925]  <TASK>
[   91.262702][ T5925]  dump_stack_lvl+0x100/0x190
[   91.262745][ T5925]  should_fail_ex.cold+0x5/0xa
[   91.262784][ T5925]  ? prepare_alloc_pages+0x16d/0x5f0
[   91.262827][ T5925]  should_fail_alloc_page+0xeb/0x140
[   91.262868][ T5925]  prepare_alloc_pages+0x1f0/0x5f0
[   91.262915][ T5925]  ? rcu_is_watching+0x12/0xc0
[   91.262947][ T5925]  __alloc_frozen_pages_noprof+0x193/0x2410
[   91.262984][ T5925]  ? __alloc_frozen_pages_noprof+0x2a0/0x2410
[   91.263021][ T5925]  ? mark_held_locks+0x40/0x70
[   91.263055][ T5925]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   91.263086][ T5925]  ? lockdep_hardirqs_on+0x78/0x100
[   91.263118][ T5925]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   91.263149][ T5925]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   91.263186][ T5925]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   91.263222][ T5925]  ? kasan_save_stack+0x30/0x50
[   91.263254][ T5925]  ? kasan_save_track+0x14/0x30
[   91.263295][ T5925]  ? do_sys_openat2+0x12e/0x220
[   91.263335][ T5925]  ? __x64_sys_openat+0x12d/0x210
[   91.263374][ T5925]  ? do_syscall_64+0xc9/0xf80
[   91.263404][ T5925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.263435][ T5925]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   91.263467][ T5925]  ? policy_nodemask+0xed/0x4f0
[   91.263509][ T5925]  alloc_pages_mpol+0x1fb/0x550
[   91.263546][ T5925]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   91.263574][ T5925]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   91.263606][ T5925]  alloc_pages_noprof+0x131/0x390
[   91.263635][ T5925]  get_zeroed_page_noprof+0x18/0xb0
[   91.263665][ T5925]  get_image_page+0x18/0x1a0
[   91.263705][ T5925]  alloc_rtree_node+0x3c/0xb0
[   91.263727][ T5925]  memory_bm_create+0x65e/0xba0
[   91.263759][ T5925]  create_basic_memory_bitmaps+0xbd/0x350
[   91.263787][ T5925]  snapshot_open+0x230/0x2a0
[   91.263814][ T5925]  ? __pfx_snapshot_open+0x10/0x10
[   91.263843][ T5925]  misc_open+0x26d/0x450
[   91.263868][ T5925]  ? __pfx_misc_open+0x10/0x10
[   91.263897][ T5925]  chrdev_open+0x234/0x6a0
[   91.263926][ T5925]  ? __pfx_chrdev_open+0x10/0x10
[   91.263954][ T5925]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   91.263990][ T5925]  do_dentry_open+0x73e/0x1570
[   91.264018][ T5925]  ? __pfx_chrdev_open+0x10/0x10
[   91.264046][ T5925]  ? security_inode_permission+0xbf/0x250
[   91.264088][ T5925]  vfs_open+0x82/0x3f0
[   91.264131][ T5925]  path_openat+0x21dc/0x3120
[   91.264177][ T5925]  ? __pfx_path_openat+0x10/0x10
[   91.264223][ T5925]  do_filp_open+0x1f7/0x420
[   91.264259][ T5925]  ? __pfx_do_filp_open+0x10/0x10
[   91.264318][ T5925]  ? _raw_spin_unlock+0x28/0x50
[   91.264345][ T5925]  ? alloc_fd+0x476/0x790
[   91.264387][ T5925]  do_sys_openat2+0x12e/0x220
[   91.264428][ T5925]  ? __pfx_do_sys_openat2+0x10/0x10
[   91.264484][ T5925]  __x64_sys_openat+0x12d/0x210
[   91.264527][ T5925]  ? __pfx___x64_sys_openat+0x10/0x10
[   91.264567][ T5925]  ? xfd_validate_state+0x129/0x190
[   91.264643][ T5925]  do_syscall_64+0xc9/0xf80
[   91.264679][ T5925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.264707][ T5925] RIP: 0033:0x7f3f34d9aeb9
[   91.264736][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.264765][ T5925] RSP: 002b:00007f3f32fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   91.264791][ T5925] RAX: ffffffffffffffda RBX: 00007f3f35016090 RCX: 00007f3f34d9aeb9
[   91.264809][ T5925] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[   91.264826][ T5925] RBP: 00007f3f34e08c1f R08: 0000000000000000 R09: 0000000000000000
[   91.264842][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.264857][ T5925] R13: 00007f3f35016128 R14: 00007f3f35016090 R15: 00007ffc21301a98
[   91.264906][ T5925]  </TASK>
[   91.956917][  T797] cfg80211: failed to load regulatory.db
[   92.258601][ T5949] Invalid ELF header magic: != ELF
[   92.518505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.968634][ T5832] Bluetooth: hci0: command tx timeout
[   93.048883][ T5832] Bluetooth: hci2: command tx timeout
[   93.054407][ T5832] Bluetooth: hci1: command tx timeout
[   93.121293][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   93.131148][ T5832] Bluetooth: hci3: command tx timeout
[   93.418901][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.508748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.609342][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   93.785907][ T5973] Console: switching to colour VGA+ 80x25
[   93.818619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.828538][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   93.838008][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   94.178877][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.348600][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.716201][ T5992] FAULT_INJECTION: forcing a failure.
[   94.716201][ T5992] name failslab, interval 1, probability 0, space 0, times 1
[   94.756079][ T5992] CPU: 1 UID: 0 PID: 5992 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) 
[   94.756114][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   94.756128][ T5992] Call Trace:
[   94.756136][ T5992]  <TASK>
[   94.756145][ T5992]  dump_stack_lvl+0x100/0x190
[   94.756182][ T5992]  should_fail_ex.cold+0x5/0xa
[   94.756225][ T5992]  should_failslab+0xc2/0x120
[   94.756261][ T5992]  ? aa_label_asxprint+0x75/0x130
[   94.756293][ T5992]  ? aa_label_asxprint+0x75/0x130
[   94.756324][ T5992]  __kmalloc_noprof+0xf6/0x9c0
[   94.756362][ T5992]  ? aa_label_asxprint+0x75/0x130
[   94.756393][ T5992]  aa_label_asxprint+0x75/0x130
[   94.756440][ T5992]  apparmor_lsmprop_to_secctx+0xb2/0x1a0
[   94.756469][ T5992]  security_lsmprop_to_secctx+0x146/0x1a0
[   94.756506][ T5992]  audit_log_subj_ctx+0x34f/0x460
[   94.756546][ T5992]  ? map_id_range_up+0x2ce/0x3b0
[   94.756574][ T5992]  ? __pfx_audit_log_subj_ctx+0x10/0x10
[   94.756617][ T5992]  ? audit_log_format+0xe8/0x130
[   94.756654][ T5992]  ? apparmor_current_getlsmprop_subj+0x118/0x400
[   94.756696][ T5992]  audit_log_task_context+0x88/0xb0
[   94.756735][ T5992]  ? __pfx_audit_log_task_context+0x10/0x10
[   94.756783][ T5992]  audit_log_task+0x1b7/0x3a0
[   94.756813][ T5992]  ? __pfx_audit_log_task+0x10/0x10
[   94.756843][ T5992]  ? arch_do_signal_or_restart+0x1f9/0x770
[   94.756886][ T5992]  audit_seccomp+0x79/0x190
[   94.756925][ T5992]  __secure_computing+0x26d/0x2c0
[   94.756965][ T5992]  syscall_trace_enter+0x90/0x230
[   94.757002][ T5992]  ? do_syscall_64+0x94/0xf80
[   94.757035][ T5992]  do_syscall_64+0x460/0xf80
[   94.757069][ T5992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.757095][ T5992] RIP: 0033:0x7f0b7c19aeb9
[   94.757117][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.757141][ T5992] RSP: 002b:00007f0b7d0c8a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   94.757166][ T5992] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f0b7c19aeb9
[   94.757182][ T5992] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[   94.757197][ T5992] RBP: 00007f0b7d0c9030 R08: 0000000000000000 R09: 000000000000000b
[   94.757213][ T5992] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[   94.757228][ T5992] R13: 00007f0b7c416218 R14: 00007f0b7c416180 R15: 00007ffcbba3afe8
[   94.757262][ T5992]  </TASK>
[   94.757287][ T5992] audit: error in audit_log_subj_ctx
[   95.084018][   T30] audit: type=1326 audit(1769884179.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5987 comm="syz.0.18" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b7c19aeb9 code=0x0
[   95.117552][   T30] audit: type=1326 audit(1769884180.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.0.18" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b7c19aeb9 code=0x0
[   97.705237][ T6026] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   97.714286][ T6026] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   97.752506][ T6026] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   97.820825][ T6026] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   97.828552][ T6026] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   97.844911][ T6046] zswap: compressor  not available
[   97.851520][ T6026] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   97.922976][ T6026] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   97.937103][ T6026] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   97.969284][ T6026] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   97.980305][ T6026] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   97.988966][ T6026] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.003363][ T6026] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.354402][ T6060] FAULT_INJECTION: forcing a failure.
[   98.354402][ T6060] name failslab, interval 1, probability 0, space 0, times 0
[   98.380850][ T6060] CPU: 0 UID: 0 PID: 6060 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) 
[   98.380887][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   98.380902][ T6060] Call Trace:
[   98.380910][ T6060]  <TASK>
[   98.380919][ T6060]  dump_stack_lvl+0x100/0x190
[   98.380959][ T6060]  should_fail_ex.cold+0x5/0xa
[   98.381001][ T6060]  should_failslab+0xc2/0x120
[   98.381038][ T6060]  __kmalloc_node_noprof+0xfb/0x9e0
[   98.381073][ T6060]  ? lockdep_hardirqs_on+0x78/0x100
[   98.381106][ T6060]  ? alloc_slab_obj_exts+0x46/0x110
[   98.381140][ T6060]  ? alloc_slab_obj_exts+0x46/0x110
[   98.381166][ T6060]  alloc_slab_obj_exts+0x46/0x110
[   98.381195][ T6060]  __memcg_slab_post_alloc_hook+0x24c/0x880
[   98.381244][ T6060]  ? kvm_io_bus_register_dev+0x1d2/0x710
[   98.381287][ T6060]  __kmalloc_noprof+0x777/0x9c0
[   98.381327][ T6060]  ? kvm_io_bus_register_dev+0x1d2/0x710
[   98.381376][ T6060]  kvm_io_bus_register_dev+0x1d2/0x710
[   98.381431][ T6060]  kvm_pic_init+0x22f/0x380
[   98.381467][ T6060]  kvm_arch_vm_ioctl+0xec4/0x18d0
[   98.381519][ T6060]  ? __lock_acquire+0x4a5/0x2630
[   98.381557][ T6060]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[   98.381607][ T6060]  ? __lock_acquire+0x4a5/0x2630
[   98.381650][ T6060]  ? __lock_acquire+0x4a5/0x2630
[   98.381697][ T6060]  ? __lock_acquire+0x4a5/0x2630
[   98.381741][ T6060]  ? __lock_acquire+0x4a5/0x2630
[   98.381807][ T6060]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   98.381842][ T6060]  ? is_bpf_text_address+0x94/0x1a0
[   98.381882][ T6060]  ? kernel_text_address+0x8d/0x100
[   98.381923][ T6060]  ? __kernel_text_address+0xd/0x30
[   98.381966][ T6060]  ? unwind_get_return_address+0x59/0xa0
[   98.382001][ T6060]  ? arch_stack_walk+0xa6/0xf0
[   98.382048][ T6060]  ? stack_trace_save+0x8e/0xc0
[   98.382079][ T6060]  ? __pfx_stack_trace_save+0x10/0x10
[   98.382111][ T6060]  ? stack_depot_save_flags+0x27/0x9c0
[   98.382155][ T6060]  ? __lock_acquire+0x4a5/0x2630
[   98.382196][ T6060]  ? kasan_save_stack+0x3f/0x50
[   98.382229][ T6060]  ? kasan_save_stack+0x30/0x50
[   98.382261][ T6060]  ? kasan_save_track+0x14/0x30
[   98.382291][ T6060]  ? kasan_save_free_info+0x3b/0x70
[   98.382316][ T6060]  ? __kasan_slab_free+0x5f/0x80
[   98.382351][ T6060]  ? kfree+0x1c7/0x690
[   98.382375][ T6060]  ? tomoyo_path_number_perm+0x46d/0x580
[   98.382414][ T6060]  ? security_file_ioctl+0xd3/0x230
[   98.382452][ T6060]  ? __x64_sys_ioctl+0xb7/0x210
[   98.382501][ T6060]  kvm_vm_ioctl+0x1564/0x4020
[   98.382561][ T6060]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[   98.382623][ T6060]  ? kasan_quarantine_put+0x104/0x240
[   98.382658][ T6060]  ? lockdep_hardirqs_on+0x78/0x100
[   98.382698][ T6060]  ? find_held_lock+0x2b/0x80
[   98.382725][ T6060]  ? tomoyo_path_number_perm+0x28f/0x580
[   98.382765][ T6060]  ? tomoyo_path_number_perm+0x28f/0x580
[   98.382815][ T6060]  ? tomoyo_path_number_perm+0x188/0x580
[   98.382860][ T6060]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   98.382900][ T6060]  ? futex_wake+0x1ad/0x530
[   98.382952][ T6060]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   98.382983][ T6060]  ? do_vfs_ioctl+0x226/0x13e0
[   98.383021][ T6060]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   98.383073][ T6060]  ? find_held_lock+0x2b/0x80
[   98.383102][ T6060]  ? hook_file_ioctl_common+0x146/0x410
[   98.383149][ T6060]  ? __fget_files+0x21f/0x3d0
[   98.383182][ T6060]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[   98.383216][ T6060]  __x64_sys_ioctl+0x18e/0x210
[   98.383258][ T6060]  do_syscall_64+0xc9/0xf80
[   98.383290][ T6060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.383315][ T6060] RIP: 0033:0x7f0b7c19aeb9
[   98.383334][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.383357][ T6060] RSP: 002b:00007f0b7d10b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   98.383381][ T6060] RAX: ffffffffffffffda RBX: 00007f0b7c415fa0 RCX: 00007f0b7c19aeb9
[   98.383397][ T6060] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003
[   98.383412][ T6060] RBP: 00007f0b7c208c1f R08: 0000000000000000 R09: 0000000000000000
[   98.383427][ T6060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.383441][ T6060] R13: 00007f0b7c416038 R14: 00007f0b7c415fa0 R15: 00007ffcbba3afe8
[   98.383476][ T6060]  </TASK>
[   99.315677][ T6083] blktrace: Concurrent blktraces are not allowed on loop2
[   99.361526][ T6082] netlink: 342 bytes leftover after parsing attributes in process `syz.0.39'.
[   99.458322][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[   99.713628][ T6097] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[   99.859501][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[   99.915704][ T6101] Invalid ELF header magic: != ELF
[   99.939110][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  100.008519][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[  100.140600][ T6098] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  100.681381][ T6111] nvme_fabrics: unknown parameter or missing value '10' in ctrl creation request
[  101.530732][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[  101.686207][ T6121] can: request_module (can-proto-0) failed.
[  101.929200][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.011483][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.088396][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.874301][ T6151] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET)
[  103.362992][ T6160] Invalid ELF header magic: != ELF
[  103.608333][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout
[  104.008425][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.090955][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout
[  104.177546][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout
[  104.583114][ T6189] zswap: compressor  not available
[  106.130515][ T6226] process 'syz.3.67' launched './file0' with NULL argv: empty string added
[  106.757488][ T5830] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  107.775272][ T6262] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.75' sets config #0
[  108.810292][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout
[  108.910599][ T6288] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  109.453155][ T6273] ima: policy update failed
[  109.459042][ T5830] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  109.520633][   T30] audit: type=1802 audit(1769884194.620:4): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.79" res=0 errno=0
[  109.720338][ T6302] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  110.709409][ T6315] random: crng reseeded on system resumption
[  110.889300][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout
[  111.151618][ T6327] mmap: syz.1.87 (6327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  111.493245][ T6333] Invalid ELF header magic: != ELF
[  111.945060][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.93'.
[  112.027641][ T6348] Zero length message leads to an empty skb
[  112.355869][   T30] audit: type=1800 audit(1769884197.450:5): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.95" name="dbroot" dev="configfs" ino=10101 res=0 errno=0
[  112.613244][ T6362] zswap: compressor  not available
[  113.182295][ T6375] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.226811][ T6390] syz.3.104 (6390) used greatest stack depth: 19688 bytes left
[  114.377802][ T6406] bridge0: port 3(ipvlan0) entered blocking state
[  114.405965][ T6406] bridge0: port 3(ipvlan0) entered disabled state
[  114.416460][ T6406] ipvlan0: entered allmulticast mode
[  114.424044][ T6406] veth0_vlan: entered allmulticast mode
[  114.466581][ T6406] ipvlan0: left allmulticast mode
[  114.475684][ T6406] veth0_vlan: left allmulticast mode
[  116.377431][ T6470] netlink: 342 bytes leftover after parsing attributes in process `syz.0.121'.
[  117.563957][ T6495] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  117.606622][ T6495] FAULT_INJECTION: forcing a failure.
[  117.606622][ T6495] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  117.628672][ T6495] CPU: 0 UID: 0 PID: 6495 Comm: syz.1.128 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  117.628712][ T6495] Tainted: [L]=SOFTLOCKUP
[  117.628720][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  117.628735][ T6495] Call Trace:
[  117.628744][ T6495]  <TASK>
[  117.628754][ T6495]  dump_stack_lvl+0x100/0x190
[  117.628817][ T6495]  should_fail_ex.cold+0x5/0xa
[  117.628864][ T6495]  _copy_from_user+0x2e/0xd0
[  117.628910][ T6495]  proc_do_submiturb+0x1a88/0x3950
[  117.628970][ T6495]  usbdev_ioctl+0x2adb/0x3aa0
[  117.629005][ T6495]  ? __pfx_usbdev_ioctl+0x10/0x10
[  117.629042][ T6495]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  117.629083][ T6495]  ? do_vfs_ioctl+0x226/0x13e0
[  117.629130][ T6495]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  117.629185][ T6495]  ? find_held_lock+0x2b/0x80
[  117.629212][ T6495]  ? hook_file_ioctl_common+0x146/0x410
[  117.629271][ T6495]  ? __pfx_usbdev_ioctl+0x10/0x10
[  117.629301][ T6495]  __x64_sys_ioctl+0x18e/0x210
[  117.629343][ T6495]  do_syscall_64+0xc9/0xf80
[  117.629385][ T6495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.629411][ T6495] RIP: 0033:0x7f232e39aeb9
[  117.629440][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.629467][ T6495] RSP: 002b:00007f232f2e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  117.629494][ T6495] RAX: ffffffffffffffda RBX: 00007f232e615fa0 RCX: 00007f232e39aeb9
[  117.629513][ T6495] RDX: 00002000000002c0 RSI: 000000008038550a RDI: 0000000000000004
[  117.629531][ T6495] RBP: 00007f232e408c1f R08: 0000000000000000 R09: 0000000000000000
[  117.629549][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.629565][ T6495] R13: 00007f232e616038 R14: 00007f232e615fa0 R15: 00007fff9d4c24c8
[  117.629603][ T6495]  </TASK>
[  122.206031][ T6629] FAULT_INJECTION: forcing a failure.
[  122.206031][ T6629] name fail_futex, interval 1, probability 0, space 0, times 1
[  122.296936][ T6629] CPU: 0 UID: 0 PID: 6629 Comm: syz.0.154 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  122.296979][ T6629] Tainted: [L]=SOFTLOCKUP
[  122.296989][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  122.297003][ T6629] Call Trace:
[  122.297012][ T6629]  <TASK>
[  122.297022][ T6629]  dump_stack_lvl+0x100/0x190
[  122.297063][ T6629]  should_fail_ex.cold+0x5/0xa
[  122.297109][ T6629]  get_futex_key+0x1d2/0x1620
[  122.297150][ T6629]  ? __pfx_get_futex_key+0x10/0x10
[  122.297199][ T6629]  futex_wait_setup+0x81/0x500
[  122.297235][ T6629]  __futex_wait+0x19f/0x300
[  122.297264][ T6629]  ? __pfx___futex_wait+0x10/0x10
[  122.297296][ T6629]  ? __pfx_futex_wake_mark+0x10/0x10
[  122.297346][ T6629]  ? futex_hash+0x2c5/0x380
[  122.297393][ T6629]  futex_wait+0xed/0x380
[  122.297420][ T6629]  ? __pfx_futex_wait+0x10/0x10
[  122.297458][ T6629]  ? do_vfs_ioctl+0x226/0x13e0
[  122.297506][ T6629]  do_futex+0x1ef/0x350
[  122.297546][ T6629]  ? __pfx_do_futex+0x10/0x10
[  122.297587][ T6629]  ? find_held_lock+0x2b/0x80
[  122.297620][ T6629]  __x64_sys_futex+0x34f/0x4d0
[  122.297662][ T6629]  ? __pfx_blkdev_ioctl+0x10/0x10
[  122.297696][ T6629]  ? __pfx___x64_sys_futex+0x10/0x10
[  122.297734][ T6629]  ? xfd_validate_state+0x129/0x190
[  122.297824][ T6629]  do_syscall_64+0xc9/0xf80
[  122.297862][ T6629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.297892][ T6629] RIP: 0033:0x7f0b7c19aeb9
[  122.297915][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.297942][ T6629] RSP: 002b:00007f0b7d0ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  122.297969][ T6629] RAX: ffffffffffffffda RBX: 00007f0b7c416098 RCX: 00007f0b7c19aeb9
[  122.297989][ T6629] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0b7c416098
[  122.298007][ T6629] RBP: 00007f0b7c416090 R08: 0000000000000000 R09: 0000000000000000
[  122.298023][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.298040][ T6629] R13: 00007f0b7c416128 R14: 00007ffcbba3af00 R15: 00007ffcbba3afe8
[  122.298078][ T6629]  </TASK>
[  123.702993][ T6683] FAULT_INJECTION: forcing a failure.
[  123.702993][ T6683] name failslab, interval 1, probability 0, space 0, times 0
[  123.740765][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.162 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  123.740807][ T6683] Tainted: [L]=SOFTLOCKUP
[  123.740813][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  123.740822][ T6683] Call Trace:
[  123.740827][ T6683]  <TASK>
[  123.740833][ T6683]  dump_stack_lvl+0x100/0x190
[  123.740857][ T6683]  should_fail_ex.cold+0x5/0xa
[  123.740882][ T6683]  should_failslab+0xc2/0x120
[  123.740902][ T6683]  ? ima_write_template_field_data+0x59/0x1d0
[  123.740927][ T6683]  __kmalloc_noprof+0xf6/0x9c0
[  123.740942][ T6683]  ? __pfx_sprintf+0x10/0x10
[  123.740957][ T6683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.740977][ T6683]  ? ima_write_template_field_data+0x59/0x1d0
[  123.741000][ T6683]  ima_write_template_field_data+0x59/0x1d0
[  123.741027][ T6683]  ima_eventdigest_init_common+0x158/0x460
[  123.741052][ T6683]  ? __pfx_ima_eventdigest_init_common+0x10/0x10
[  123.741086][ T6683]  ? trace_kmalloc+0x50/0xb0
[  123.741104][ T6683]  ? __kmalloc_noprof+0x365/0x9c0
[  123.741118][ T6683]  ? __pfx_prepend_path+0x10/0x10
[  123.741144][ T6683]  ima_alloc_init_template+0x399/0x6d0
[  123.741168][ T6683]  ima_store_measurement+0x1e3/0x5b0
[  123.741189][ T6683]  ? __pfx_ima_store_measurement+0x10/0x10
[  123.741210][ T6683]  ? ima_d_path+0x132/0x2a0
[  123.741233][ T6683]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  123.741253][ T6683]  process_measurement+0x1958/0x2400
[  123.741281][ T6683]  ? __pfx_process_measurement+0x10/0x10
[  123.741306][ T6683]  ? find_held_lock+0x2b/0x80
[  123.741320][ T6683]  ? rcu_read_unlock+0x17/0x60
[  123.741341][ T6683]  ? rcu_read_unlock+0x17/0x60
[  123.741378][ T6683]  ? mutex_init_lockep+0x110/0x150
[  123.741398][ T6683]  ? inode_to_bdi+0x9e/0x160
[  123.741420][ T6683]  ima_file_check+0xca/0x110
[  123.741441][ T6683]  ? __pfx_ima_file_check+0x10/0x10
[  123.741464][ T6683]  security_file_post_open+0xc4/0x210
[  123.741486][ T6683]  path_openat+0x1564/0x3120
[  123.741510][ T6683]  ? __pfx_path_openat+0x10/0x10
[  123.741534][ T6683]  do_filp_open+0x1f7/0x420
[  123.741552][ T6683]  ? __pfx_do_filp_open+0x10/0x10
[  123.741582][ T6683]  ? _raw_spin_unlock+0x28/0x50
[  123.741597][ T6683]  ? alloc_fd+0x476/0x790
[  123.741618][ T6683]  do_sys_openat2+0x12e/0x220
[  123.741640][ T6683]  ? __pfx_do_sys_openat2+0x10/0x10
[  123.741662][ T6683]  ? fd_install+0x24f/0x580
[  123.741690][ T6683]  __x64_sys_openat+0x12d/0x210
[  123.741714][ T6683]  ? __pfx___x64_sys_openat+0x10/0x10
[  123.741735][ T6683]  ? xfd_validate_state+0x129/0x190
[  123.741771][ T6683]  do_syscall_64+0xc9/0xf80
[  123.741792][ T6683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.741807][ T6683] RIP: 0033:0x7f3f34d9aeb9
[  123.741821][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.741834][ T6683] RSP: 002b:00007f3f32ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  123.741848][ T6683] RAX: ffffffffffffffda RBX: 00007f3f35015fa0 RCX: 00007f3f34d9aeb9
[  123.741858][ T6683] RDX: 0000000000000542 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  123.741867][ T6683] RBP: 00007f3f34e08c1f R08: 0000000000000000 R09: 0000000000000000
[  123.741875][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.741884][ T6683] R13: 00007f3f35016038 R14: 00007f3f35015fa0 R15: 00007ffc21301a98
[  123.741903][ T6683]  </TASK>
[  124.074525][   T30] audit: type=1804 audit(1769884208.840:6): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.162" name="/newroot/sys/kernel/tracing/dynamic_events" dev="tracefs" ino=1069 res=0 errno=0
[  124.648485][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  126.213262][ T5826] Bluetooth: hci0: unexpected event 0x04 length: 43 > 10
[  126.213456][ T5826] Bluetooth: hci0: connection err: -111
[  126.460459][ T6751] Invalid ELF header magic: != ELF
[  126.738810][ T6743] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  126.803799][ T6759] Invalid ELF header magic: != ELF
[  127.840882][ T6775] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff
[  128.283782][ T6810] netlink: zone id is out of range
[  128.298504][ T6810] netlink: zone id is out of range
[  128.314168][ T6810] netlink: zone id is out of range
[  128.354334][ T6810] netlink: zone id is out of range
[  128.376160][ T6810] netlink: zone id is out of range
[  128.399472][ T6810] netlink: zone id is out of range
[  128.417112][ T6810] netlink: zone id is out of range
[  128.438507][ T6810] netlink: zone id is out of range
[  128.458036][ T6810] netlink: zone id is out of range
[  128.478328][ T6810] netlink: zone id is out of range
[  128.659783][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'.
[  128.950950][ T6826] netlink: 'syz.3.183': attribute type 11 has an invalid length.
[  129.573724][ T6838] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  129.619049][ T6838] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  129.681282][ T6838] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  129.861391][ T6851] Invalid ELF header magic: != ELF
[  132.283885][ T6919] Invalid ELF header magic: != ELF
[  135.047796][ T6977] FAULT_INJECTION: forcing a failure.
[  135.047796][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.140139][ T6977] CPU: 1 UID: 0 PID: 6977 Comm: syz.3.209 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.140191][ T6977] Tainted: [L]=SOFTLOCKUP
[  135.140201][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  135.140215][ T6977] Call Trace:
[  135.140225][ T6977]  <TASK>
[  135.140234][ T6977]  dump_stack_lvl+0x100/0x190
[  135.140275][ T6977]  should_fail_ex.cold+0x5/0xa
[  135.140322][ T6977]  _copy_from_user+0x2e/0xd0
[  135.140365][ T6977]  io_uring_setup+0xc0/0x160
[  135.140405][ T6977]  ? __pfx_io_uring_setup+0x10/0x10
[  135.140439][ T6977]  ? do_futex+0x192/0x350
[  135.140478][ T6977]  ? __pfx_do_futex+0x10/0x10
[  135.140529][ T6977]  ? __pfx_task_work_run+0x10/0x10
[  135.140568][ T6977]  ? xfd_validate_state+0x129/0x190
[  135.140617][ T6977]  __x64_sys_io_uring_setup+0xc2/0x170
[  135.140651][ T6977]  do_syscall_64+0xc9/0xf80
[  135.140690][ T6977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.140718][ T6977] RIP: 0033:0x7ff4f199aeb9
[  135.140743][ T6977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.140769][ T6977] RSP: 002b:00007ff4f289b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  135.140795][ T6977] RAX: ffffffffffffffda RBX: 00007ff4f1c15fa0 RCX: 00007ff4f199aeb9
[  135.140822][ T6977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  135.140839][ T6977] RBP: 00007ff4f1a08c1f R08: 0000000000000000 R09: 0000000000000000
[  135.140857][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.140872][ T6977] R13: 00007ff4f1c16038 R14: 00007ff4f1c15fa0 R15: 00007ffc7c594388
[  135.140907][ T6977]  </TASK>
[  135.781444][ T6989] Invalid ELF header magic: != ELF
[  138.028139][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  138.044819][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  138.206655][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[  138.579256][ T7055] Invalid ELF header magic: != ELF
[  140.056010][ T7099] FAULT_INJECTION: forcing a failure.
[  140.056010][ T7099] name failslab, interval 1, probability 0, space 0, times 0
[  140.082455][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.3.236 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  140.082502][ T7099] Tainted: [L]=SOFTLOCKUP
[  140.082513][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  140.082529][ T7099] Call Trace:
[  140.082538][ T7099]  <TASK>
[  140.082548][ T7099]  dump_stack_lvl+0x100/0x190
[  140.082588][ T7099]  should_fail_ex.cold+0x5/0xa
[  140.082636][ T7099]  should_failslab+0xc2/0x120
[  140.082676][ T7099]  kmem_cache_alloc_lru_noprof+0x8e/0x7d0
[  140.082714][ T7099]  ? dquot_alloc_inode+0x51b/0xb10
[  140.082757][ T7099]  ? __d_alloc+0x34/0xa80
[  140.082797][ T7099]  ? __d_alloc+0x34/0xa80
[  140.082829][ T7099]  __d_alloc+0x34/0xa80
[  140.082868][ T7099]  d_alloc_pseudo+0x1c/0xc0
[  140.082912][ T7099]  alloc_file_pseudo+0xcf/0x230
[  140.082955][ T7099]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  140.083007][ T7099]  __shmem_file_setup+0x1a3/0x330
[  140.083041][ T7099]  shmem_zero_setup+0x93/0x1b0
[  140.083080][ T7099]  __mmap_region+0x2101/0x2820
[  140.083136][ T7099]  ? __pfx___mmap_region+0x10/0x10
[  140.083198][ T7099]  ? finish_task_switch.isra.0+0x204/0xb70
[  140.083232][ T7099]  ? lockdep_hardirqs_on+0x78/0x100
[  140.083265][ T7099]  ? finish_task_switch.isra.0+0x204/0xb70
[  140.083374][ T7099]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  140.083421][ T7099]  ? rcu_is_watching+0x12/0xc0
[  140.083459][ T7099]  mmap_region+0x180/0x3e0
[  140.083500][ T7099]  do_mmap+0xc63/0x12f0
[  140.083549][ T7099]  ? __pfx_do_mmap+0x10/0x10
[  140.083589][ T7099]  ? __pfx_down_write_killable+0x10/0x10
[  140.083635][ T7099]  vm_mmap_pgoff+0x29e/0x470
[  140.083683][ T7099]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  140.083734][ T7099]  ? __x64_sys_futex+0x34f/0x4d0
[  140.083771][ T7099]  ? __x64_sys_futex+0x358/0x4d0
[  140.083815][ T7099]  ksys_mmap_pgoff+0x7d/0x5b0
[  140.083861][ T7099]  __x64_sys_mmap+0x125/0x190
[  140.083893][ T7099]  do_syscall_64+0xc9/0xf80
[  140.083930][ T7099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.083958][ T7099] RIP: 0033:0x7ff4f199aeb9
[  140.083981][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.084008][ T7099] RSP: 002b:00007ff4f289b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  140.084035][ T7099] RAX: ffffffffffffffda RBX: 00007ff4f1c15fa0 RCX: 00007ff4f199aeb9
[  140.084054][ T7099] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000
[  140.084071][ T7099] RBP: 00007ff4f1a08c1f R08: 0000000000000401 R09: 0000000000008000
[  140.084095][ T7099] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  140.084111][ T7099] R13: 00007ff4f1c16038 R14: 00007ff4f1c15fa0 R15: 00007ffc7c594388
[  140.084145][ T7099]  </TASK>
[  140.686588][ T7096] mkiss: ax0: crc mode is auto.
[  142.240282][ T7129] Invalid ELF header magic: != ELF
[  142.803983][ T7137] futex_wake_op: syz.0.244 tries to shift op by -2048; fix this program
[  142.812917][ T7137] futex_wake_op: syz.0.244 tries to shift op by -2048; fix this program
[  142.830569][ T7137] 0x000000000001-0x000000020000 : ""
[  142.841371][ T7137] ftl_cs: FTL header corrupt!
[  144.319319][ T7160] NFSD: Failed to start, no listeners configured.
[  144.807613][ T7181] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  145.048001][ T7183] Invalid ELF header magic: != ELF
[  145.944163][ T7209] futex_wake_op: syz.1.258 tries to shift op by -2048; fix this program
[  145.952735][ T7209] futex_wake_op: syz.1.258 tries to shift op by -2048; fix this program
[  146.017891][ T7209] 0x000000000001-0x000000020000 : ""
[  146.048621][ T7209] ftl_cs: FTL header corrupt!
[  150.696457][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18
[  152.757164][ T7370] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  155.309968][ T7419] zswap: compressor  not available
[  155.506096][ T7420] zswap: compressor 0 not available
[  155.692150][ T7433] netlink: 334 bytes leftover after parsing attributes in process `syz.1.302'.
[  155.920842][ T7432] netlink: 'syz.2.301': attribute type 2 has an invalid length.
[  156.058641][ T7437] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[  156.088406][ T7437] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  156.115280][ T7437] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  156.163747][ T7437] page_type: f5(slab)
[  156.178069][ T7437] raw: 00fff00000000040 ffff88813ff26dc0 ffffea0001eb0800 dead000000000002
[  156.197321][ T7437] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  156.237748][ T7437] head: 00fff00000000040 ffff88813ff26dc0 ffffea0001eb0800 dead000000000002
[  156.300616][ T7437] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  156.380655][ T7437] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  156.419029][ T7437] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  156.492526][ T7437] page dumped because: unmovable page
[  156.571391][ T7437] page_owner tracks the page as allocated
[  156.577257][ T7437] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5579, tgid 5579 (start-stop-daem), ts 56954819041, free_ts 56953112352
[  156.637142][ T7437]  post_alloc_hook+0x1e1/0x250
[  156.645686][ T7437]  get_page_from_freelist+0xe3d/0x2e10
[  156.665787][ T7437]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  156.716667][ T7437]  alloc_pages_mpol+0x1fb/0x550
[  156.731932][ T7437]  new_slab+0x2c4/0x440
[  156.736268][ T7437]  ___slab_alloc+0xda3/0x1ca0
[  156.741178][ T7437]  __slab_alloc.isra.0+0x63/0x110
[  156.758385][ T7437]  __kmalloc_noprof+0x618/0x9c0
[  156.771964][ T7437]  tomoyo_init_log+0x1224/0x20c0
[  156.782939][ T7437]  tomoyo_supervisor+0x506/0x1340
[  156.793635][ T7437]  tomoyo_env_perm+0x191/0x200
[  156.830239][ T7437]  tomoyo_find_next_domain+0x13d7/0x2010
[  156.870565][ T7437]  tomoyo_bprm_check_security+0x12d/0x1d0
[  156.888848][ T7437]  security_bprm_check+0x87/0x1e0
[  156.893901][ T7437]  bprm_execve+0x84b/0x1620
[  156.938423][ T7437]  do_execveat_common.isra.0+0x4dc/0x5b0
[  156.966265][ T7437] page last free pid 5579 tgid 5579 stack trace:
[  156.989099][ T7437]  __free_frozen_pages+0x822/0x1130
[  157.010794][ T7437]  qlist_free_all+0x47/0xe0
[  157.015329][ T7437]  kasan_quarantine_reduce+0x1a0/0x1f0
[  157.062332][ T7437]  __kasan_slab_alloc+0x69/0x90
[  157.067220][ T7437]  __kmalloc_noprof+0x300/0x9c0
[  157.108400][ T7437]  tomoyo_supervisor+0x65d/0x1340
[  157.130227][ T7437]  tomoyo_env_perm+0x191/0x200
[  157.138636][ T7437]  tomoyo_find_next_domain+0x13d7/0x2010
[  157.179024][ T7437]  tomoyo_bprm_check_security+0x12d/0x1d0
[  157.184778][ T7437]  security_bprm_check+0x87/0x1e0
[  157.275222][ T7437]  bprm_execve+0x84b/0x1620
[  157.306450][ T7437]  do_execveat_common.isra.0+0x4dc/0x5b0
[  157.338125][ T7437]  __x64_sys_execve+0x8e/0xb0
[  157.348854][ T7437]  do_syscall_64+0xc9/0xf80
[  157.353424][ T7437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.141801][ T7467] Invalid ELF header magic: != ELF
[  159.200345][ T7487] sp0: Synchronizing with TNC
[  159.269005][ T7488] smc: net device dummy0 applied user defined pnetid DUMMY0
[  160.297488][ T7509] netlink: 'syz.1.317': attribute type 11 has an invalid length.
[  160.460844][   T30] audit: type=1800 audit(1769884245.560:7): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.318" name="features" dev="configfs" ino=16210 res=0 errno=0
[  161.499230][ T7531] Invalid ELF header magic: != ELF
[  161.735459][ T7538] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  163.696663][ T7570] Invalid ELF header magic: != ELF
[  164.827049][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.336'.
[  164.979073][ T7590] nvme_fabrics: missing parameter 'transport=%s'
[  164.988311][ T7590] nvme_fabrics: missing parameter 'nqn=%s'
[  165.506852][ T5826] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  165.580706][ T7616] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12)
[  166.023506][ T7626] ksmbd: Unknown IPC event: 14, ignore.
[  166.800110][ T7650] random: crng reseeded on system resumption
[  167.146472][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.159053][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.166651][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.176720][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.185406][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.194902][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.202503][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.213361][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.213397][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.213564][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.213591][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.213724][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.213751][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.213885][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.213911][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.214049][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.214075][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.214232][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.214257][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.214402][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.214428][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.214575][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.214604][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.214745][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.214772][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.214904][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.214929][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.215066][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.215092][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.215226][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.215252][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.215382][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.215407][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.215544][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.215578][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.215716][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.215742][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.215875][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.215902][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.216035][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.216060][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.216195][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.216221][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.216356][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.216382][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.216509][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.216533][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.216669][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.216695][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.216821][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.216845][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.216972][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.216999][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.217132][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.217158][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.217287][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.217311][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.217432][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.217456][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.217602][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.307681][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.308564][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.422363][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.682881][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  167.690407][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  167.743111][ T7672] Invalid ELF header magic: != ELF
[  168.084180][ T7678] bridge0: port 3(batadv0) entered blocking state
[  168.091121][ T7678] bridge0: port 3(batadv0) entered disabled state
[  168.095273][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'.
[  168.097780][ T7678] batadv0: entered allmulticast mode
[  168.169968][ T7678] batadv0: entered promiscuous mode
[  168.185968][ T7678] bridge0: port 3(batadv0) entered blocking state
[  168.192706][ T7678] bridge0: port 3(batadv0) entered forwarding state
[  168.658580][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  168.668094][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  168.763848][ T7686] FAULT_INJECTION: forcing a failure.
[  168.763848][ T7686] name fail_futex, interval 1, probability 0, space 0, times 0
[  168.807068][ T7686] CPU: 0 UID: 14 PID: 7686 Comm: syz.3.356 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.807112][ T7686] Tainted: [L]=SOFTLOCKUP
[  168.807121][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  168.807136][ T7686] Call Trace:
[  168.807144][ T7686]  <TASK>
[  168.807154][ T7686]  dump_stack_lvl+0x100/0x190
[  168.807193][ T7686]  should_fail_ex.cold+0x5/0xa
[  168.807295][ T7686]  get_futex_key+0x1d2/0x1620
[  168.807334][ T7686]  ? __pfx_get_futex_key+0x10/0x10
[  168.807369][ T7686]  ? __lock_acquire+0x4a5/0x2630
[  168.807412][ T7686]  futex_wake+0xea/0x530
[  168.807456][ T7686]  ? __pfx_futex_wake+0x10/0x10
[  168.807496][ T7686]  ? find_ucounts+0x218/0x3e0
[  168.807543][ T7686]  do_futex+0x32b/0x350
[  168.807578][ T7686]  ? __pfx_do_futex+0x10/0x10
[  168.807615][ T7686]  ? dec_rlimit_ucounts+0x114/0x170
[  168.807656][ T7686]  __x64_sys_futex+0x34f/0x4d0
[  168.807698][ T7686]  ? __pfx___x64_sys_futex+0x10/0x10
[  168.807747][ T7686]  do_syscall_64+0xc9/0xf80
[  168.807782][ T7686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.807809][ T7686] RIP: 0033:0x7ff4f199aeb9
[  168.807829][ T7686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.807853][ T7686] RSP: 002b:00007ff4f289b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  168.807879][ T7686] RAX: ffffffffffffffda RBX: 00007ff4f1c15fa8 RCX: 00007ff4f199aeb9
[  168.807896][ T7686] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff4f1c15fac
[  168.807913][ T7686] RBP: 00007ff4f1c15fa0 R08: 0000000000000000 R09: 0000000000000000
[  168.807928][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.807944][ T7686] R13: 00007ff4f1c16038 R14: 00007ffc7c5942a0 R15: 00007ffc7c594388
[  168.807980][ T7686]  </TASK>
[  169.129778][ T7687] can: request_module (can-proto-0) failed.
[  170.193712][ T7718] Invalid ELF header magic: != ELF
[  170.786094][ T7733] : Can't lookup blockdev
[  171.146980][ T7740] Invalid ELF header magic: != ELF
[  171.601376][ T7759] FAULT_INJECTION: forcing a failure.
[  171.601376][ T7759] name failslab, interval 1, probability 0, space 0, times 0
[  171.669634][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.1.372 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  171.669677][ T7759] Tainted: [L]=SOFTLOCKUP
[  171.669682][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  171.669691][ T7759] Call Trace:
[  171.669696][ T7759]  <TASK>
[  171.669707][ T7759]  dump_stack_lvl+0x100/0x190
[  171.669731][ T7759]  should_fail_ex.cold+0x5/0xa
[  171.669757][ T7759]  should_failslab+0xc2/0x120
[  171.669778][ T7759]  kmem_cache_alloc_noprof+0x83/0x780
[  171.669797][ T7759]  ? prepare_creds+0x2c/0x950
[  171.669814][ T7759]  ? prepare_creds+0x2c/0x950
[  171.669826][ T7759]  prepare_creds+0x2c/0x950
[  171.669840][ T7759]  __sys_setfsuid+0xda/0x380
[  171.669856][ T7759]  ? rcu_is_watching+0x12/0xc0
[  171.669873][ T7759]  do_syscall_64+0xc9/0xf80
[  171.669892][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.669907][ T7759] RIP: 0033:0x7f232e39aeb9
[  171.669924][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.669937][ T7759] RSP: 002b:00007f232f2c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a
[  171.669955][ T7759] RAX: ffffffffffffffda RBX: 00007f232e616090 RCX: 00007f232e39aeb9
[  171.669965][ T7759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  171.669974][ T7759] RBP: 00007f232e408c1f R08: 0000000000000000 R09: 0000000000000000
[  171.669982][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.669991][ T7759] R13: 00007f232e616128 R14: 00007f232e616090 R15: 00007fff9d4c24c8
[  171.670011][ T7759]  </TASK>
[  171.674154][ T5830] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  172.015121][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[  172.837423][ T7789] Invalid ELF header magic: != ELF
[  176.415011][ T7872] Invalid ELF header magic: != ELF
[  176.834120][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'.
[  177.878040][ T7891] FAULT_INJECTION: forcing a failure.
[  177.878040][ T7891] name failslab, interval 1, probability 0, space 0, times 0
[  177.961463][ T7891] CPU: 0 UID: 0 PID: 7891 Comm: syz.0.394 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  177.961491][ T7891] Tainted: [L]=SOFTLOCKUP
[  177.961497][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  177.961509][ T7891] Call Trace:
[  177.961515][ T7891]  <TASK>
[  177.961521][ T7891]  dump_stack_lvl+0x100/0x190
[  177.961545][ T7891]  should_fail_ex.cold+0x5/0xa
[  177.961576][ T7891]  should_failslab+0xc2/0x120
[  177.961598][ T7891]  kmem_cache_alloc_noprof+0x83/0x780
[  177.961619][ T7891]  ? __kernfs_new_node+0xd2/0x960
[  177.961643][ T7891]  ? __kernfs_new_node+0xd2/0x960
[  177.961661][ T7891]  __kernfs_new_node+0xd2/0x960
[  177.961683][ T7891]  ? __pfx___kernfs_new_node+0x10/0x10
[  177.961708][ T7891]  ? find_held_lock+0x2b/0x80
[  177.961723][ T7891]  ? kernfs_root+0xee/0x2a0
[  177.961741][ T7891]  ? kernfs_root+0xee/0x2a0
[  177.961764][ T7891]  kernfs_new_node+0x11b/0x1a0
[  177.961789][ T7891]  __kernfs_create_file+0x53/0x350
[  177.961807][ T7891]  sysfs_add_file_mode_ns+0x207/0x3c0
[  177.961841][ T7891]  sysfs_merge_group+0x194/0x340
[  177.961863][ T7891]  ? __pfx_sysfs_merge_group+0x10/0x10
[  177.961887][ T7891]  ? __pfx_dev_add_physical_location+0x10/0x10
[  177.961909][ T7891]  ? bus_to_subsys+0x114/0x150
[  177.961933][ T7891]  dpm_sysfs_add+0x237/0x280
[  177.961953][ T7891]  device_add+0x9ef/0x1950
[  177.961974][ T7891]  ? __pfx_device_add+0x10/0x10
[  177.961993][ T7891]  ? lockdep_init_map_type+0x5c/0x250
[  177.962014][ T7891]  ? __init_waitqueue_head+0xca/0x150
[  177.962041][ T7891]  rfkill_register+0x1ad/0xb30
[  177.962059][ T7891]  nfc_register_device+0x11f/0x3e0
[  177.962079][ T7891]  nci_register_device+0x7f1/0xb80
[  177.962096][ T7891]  ? __pfx_nci_register_device+0x10/0x10
[  177.962113][ T7891]  ? lockdep_init_map_type+0x5c/0x250
[  177.962136][ T7891]  virtual_ncidev_open+0x141/0x220
[  177.962160][ T7891]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  177.962183][ T7891]  misc_open+0x26d/0x450
[  177.962200][ T7891]  ? __pfx_misc_open+0x10/0x10
[  177.962216][ T7891]  chrdev_open+0x234/0x6a0
[  177.962234][ T7891]  ? __pfx_apparmor_file_open+0x10/0x10
[  177.962253][ T7891]  ? __pfx_chrdev_open+0x10/0x10
[  177.962272][ T7891]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  177.962294][ T7891]  do_dentry_open+0x73e/0x1570
[  177.962311][ T7891]  ? __pfx_chrdev_open+0x10/0x10
[  177.962328][ T7891]  ? security_inode_permission+0xbf/0x250
[  177.962353][ T7891]  vfs_open+0x82/0x3f0
[  177.962376][ T7891]  path_openat+0x21dc/0x3120
[  177.962401][ T7891]  ? __pfx_path_openat+0x10/0x10
[  177.962425][ T7891]  do_filp_open+0x1f7/0x420
[  177.962443][ T7891]  ? __pfx_do_filp_open+0x10/0x10
[  177.962474][ T7891]  ? _raw_spin_unlock+0x28/0x50
[  177.962488][ T7891]  ? alloc_fd+0x476/0x790
[  177.962510][ T7891]  do_sys_openat2+0x12e/0x220
[  177.962532][ T7891]  ? __pfx_do_sys_openat2+0x10/0x10
[  177.962555][ T7891]  ? __fget_files+0x21f/0x3d0
[  177.962575][ T7891]  __x64_sys_openat+0x12d/0x210
[  177.962597][ T7891]  ? __pfx___x64_sys_openat+0x10/0x10
[  177.962618][ T7891]  ? xfd_validate_state+0x129/0x190
[  177.962648][ T7891]  do_syscall_64+0xc9/0xf80
[  177.962667][ T7891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.962682][ T7891] RIP: 0033:0x7f0b7c19aeb9
[  177.962695][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.962709][ T7891] RSP: 002b:00007f0b7d10b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  177.962723][ T7891] RAX: ffffffffffffffda RBX: 00007f0b7c415fa0 RCX: 00007f0b7c19aeb9
[  177.962733][ T7891] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  177.962742][ T7891] RBP: 00007f0b7c208c1f R08: 0000000000000000 R09: 0000000000000000
[  177.962751][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.962759][ T7891] R13: 00007f0b7c416038 R14: 00007f0b7c415fa0 R15: 00007ffcbba3afe8
[  177.962780][ T7891]  </TASK>
[  178.959111][   T30] audit: type=1800 audit(1769884264.050:8): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.397" name="dbroot" dev="configfs" ino=21833 res=0 errno=0
[  179.194555][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[  179.197671][ T7917] sd 0:0:1:0: PR command failed: 1026
[  179.209307][ T7917] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  179.216984][ T7917] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  179.224878][ T7904] netlink: 330 bytes leftover after parsing attributes in process `syz.1.396'.
[  179.810737][ T7925] random: crng reseeded on system resumption
[  180.399894][ T5826] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5
[  180.901446][ T7945] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10
[  181.861994][   T30] audit: type=1800 audit(1769884266.950:9): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.411" name="file0" dev="tmpfs" ino=546 res=0 errno=0
[  181.908594][   T30] audit: type=1800 audit(1769884266.950:10): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.411" name="file0" dev="tmpfs" ino=546 res=0 errno=0
[  182.044565][ T7960] vivid-007: =================  START STATUS  =================
[  182.054432][ T7960] vivid-007: Generate PTS: true
[  182.078460][ T7960] vivid-007: Generate SCR: true
[  182.083478][ T7960] tpg source WxH: 320x240 (Y'CbCr)
[  182.090637][ T7960] tpg field: 1
[  182.094506][ T7960] tpg crop: (0,0)/320x240
[  182.099192][ T7960] tpg compose: (0,0)/320x240
[  182.104443][ T7960] tpg colorspace: 8
[  182.110118][ T7960] tpg transfer function: 0/0
[  182.114738][ T7960] tpg Y'CbCr encoding: 0/0
[  182.137583][ T7960] tpg quantization: 0/0
[  182.186579][ T7972] Invalid ELF header magic: != ELF
[  182.225081][ T7960] tpg RGB range: 0/2
[  182.238434][ T7960] vivid-007: ==================  END STATUS  ==================
[  182.270744][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'.
[  182.442574][ T7976] capability: warning: `syz.3.410' uses 32-bit capabilities (legacy support in use)
[  183.195307][ T7992] Invalid ELF header magic: != ELF
[  184.148570][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'.
[  184.190260][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'.
[  184.367825][   T30] audit: type=1800 audit(1769884269.460:11): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.426" name="dbroot" dev="configfs" ino=22042 res=0 errno=0
[  184.415448][ T8021] block2mtd: parameter too long
[  185.105913][ T8046] zswap: compressor  not available
[  185.390775][ T8056] can: request_module (can-proto-4) failed.
[  185.790510][ T8081] netlink: 'syz.1.437': attribute type 16 has an invalid length.
[  185.806438][ T8081] netlink: 50 bytes leftover after parsing attributes in process `syz.1.437'.
[  186.225681][ T8093] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[  186.229931][ T8093] ima: policy update failed
[  186.263735][   T30] audit: type=1802 audit(1769884271.360:12): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.440" res=0 errno=0
[  187.461612][ T8129] blktrace: Concurrent blktraces are not allowed on loop2
[  187.518348][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[  188.414922][ T8148] zswap: compressor � not available
[  189.707018][ T8187] Invalid ELF header magic: != ELF
[  190.002719][ T8197] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1024].
[  190.585474][ T8205] loop6: detected capacity change from 0 to 8192
[  191.086174][ T8214] Invalid ELF header magic: != ELF
[  191.463781][ T8241] Invalid ELF header magic: != ELF
[  191.536621][ T8247] Invalid ELF header magic: != ELF
[  192.438793][ T8265] netlink: 342 bytes leftover after parsing attributes in process `syz.1.474'.
[  193.153102][ T8288] bridge0: port 4(ipvlan0) entered blocking state
[  193.179387][ T8288] bridge0: port 4(ipvlan0) entered disabled state
[  193.193647][ T8288] ipvlan0: entered allmulticast mode
[  193.215280][ T8288] veth0_vlan: entered allmulticast mode
[  193.241292][ T8288] ipvlan0: left allmulticast mode
[  193.246823][ T8288] veth0_vlan: left allmulticast mode
[  193.737352][ T8296] Invalid ELF header magic: != ELF
[  196.414963][ T8345] Format for unlinking a device is "netnsfd:ifidx" (int uint).
[  196.484539][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'.
[  196.866556][ T8353] warning: `syz.1.489' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  198.189281][   T30] audit: type=1800 audit(1769884283.290:13): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.502" name="dbroot" dev="configfs" ino=24098 res=0 errno=0
[  199.455465][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  199.462124][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  200.270488][   T30] audit: type=1326 audit(1769884285.370:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8419 comm="syz.3.512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4f199aeb9 code=0x0
[  200.436943][ T8441] zram: Added device: zram1
[  200.857240][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'.
[  201.321244][ T5826] Bluetooth: hci1: unexpected event 0x20 length: 123 > 7
[  201.461322][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'.
[  202.511917][ T8507] Format for deleting device is "id" (uint).
[  203.568160][ T8524] netlink: 306 bytes leftover after parsing attributes in process `syz.1.532'.
[  203.896669][   T11] smpboot: CPU 1 is now offline
[  203.933833][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'.
[  204.029880][ T8534] FAULT_INJECTION: forcing a failure.
[  204.029880][ T8534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.168804][ T8534] CPU: 0 UID: 0 PID: 8534 Comm: syz.1.535 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  204.168831][ T8534] Tainted: [L]=SOFTLOCKUP
[  204.168836][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  204.168845][ T8534] Call Trace:
[  204.168850][ T8534]  <TASK>
[  204.168856][ T8534]  dump_stack_lvl+0x100/0x190
[  204.168879][ T8534]  should_fail_ex.cold+0x5/0xa
[  204.168904][ T8534]  _copy_from_user+0x2e/0xd0
[  204.168926][ T8534]  memdup_user+0x6b/0xe0
[  204.168948][ T8534]  strndup_user+0x78/0xe0
[  204.168967][ T8534]  set_anon_vma_name+0xc6/0x4c0
[  204.168991][ T8534]  ? __pfx_set_anon_vma_name+0x10/0x10
[  204.169014][ T8534]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  204.169031][ T8534]  ? cap_task_prctl+0x104/0xa50
[  204.169051][ T8534]  ? static_key_count+0x5a/0x70
[  204.169072][ T8534]  ? security_task_prctl+0x11c/0x160
[  204.169091][ T8534]  __do_sys_prctl+0xd73/0x21a0
[  204.169114][ T8534]  ? __pfx___do_sys_prctl+0x10/0x10
[  204.169141][ T8534]  do_syscall_64+0xc9/0xf80
[  204.169161][ T8534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.169175][ T8534] RIP: 0033:0x7f232e39aeb9
[  204.169188][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.169201][ T8534] RSP: 002b:00007f232f2e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  204.169215][ T8534] RAX: ffffffffffffffda RBX: 00007f232e615fa0 RCX: 00007f232e39aeb9
[  204.169224][ T8534] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000053564d41
[  204.169233][ T8534] RBP: 00007f232e408c1f R08: 0000000000000001 R09: 0000000000000000
[  204.169241][ T8534] R10: 0000000000008002 R11: 0000000000000246 R12: 0000000000000000
[  204.169249][ T8534] R13: 00007f232e616038 R14: 00007f232e615fa0 R15: 00007fff9d4c24c8
[  204.169268][ T8534]  </TASK>
[  205.710802][ T8549] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  205.849236][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.542'.
[  205.899523][ T8555] ipvlan1: entered promiscuous mode
[  205.918273][ T8555] ipvlan1: entered allmulticast mode
[  205.934425][ T8555] veth0_vlan: entered allmulticast mode
[  206.270540][ T8569] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  206.321825][ T8569] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  206.365053][ T8569] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  206.875903][   T30] audit: type=1800 audit(1769884291.970:15): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.549" name="features" dev="configfs" ino=25866 res=0 errno=0
[  207.407826][ T8607] netlink: 'syz.3.553': attribute type 1 has an invalid length.
[  208.291977][ T8575] nvme_fabrics: missing parameter 'transport=%s'
[  208.327661][ T8575] nvme_fabrics: missing parameter 'nqn=%s'
[  210.222554][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  210.268948][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'.
[  210.339092][ T8685] i: entered promiscuous mode
[  210.401808][ T8687] HfR: entered promiscuous mode
[  211.042439][ T8700] net_ratelimit: 47 callbacks suppressed
[  211.042455][ T8700] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  211.572512][ T8718] netlink: 'syz.3.569': attribute type 1 has an invalid length.
[  212.381255][ T8729] Invalid ELF header magic: != ELF
[  213.067720][ T8725] netlink: 342 bytes leftover after parsing attributes in process `syz.1.571'.
[  213.294187][ T8749] netlink: 342 bytes leftover after parsing attributes in process `syz.1.571'.
[  215.088902][ T8775] cougar: G6 mapped to space
[  215.623361][ T8783] netlink: 'syz.2.583': attribute type 1 has an invalid length.
[  216.054065][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[  216.123413][ T8793] Invalid ELF header magic: != ELF
[  217.373787][ T8811] FAULT_INJECTION: forcing a failure.
[  217.373787][ T8811] name fail_futex, interval 1, probability 0, space 0, times 0
[  217.451077][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.3.591 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.451104][ T8811] Tainted: [L]=SOFTLOCKUP
[  217.451110][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  217.451119][ T8811] Call Trace:
[  217.451124][ T8811]  <TASK>
[  217.451130][ T8811]  dump_stack_lvl+0x100/0x190
[  217.451153][ T8811]  should_fail_ex.cold+0x5/0xa
[  217.451179][ T8811]  get_futex_key+0x1d2/0x1620
[  217.451200][ T8811]  ? __pfx_get_futex_key+0x10/0x10
[  217.451225][ T8811]  futex_wait_setup+0x81/0x500
[  217.451243][ T8811]  __futex_wait+0x19f/0x300
[  217.451258][ T8811]  ? __pfx___futex_wait+0x10/0x10
[  217.451274][ T8811]  ? __pfx_futex_wake_mark+0x10/0x10
[  217.451300][ T8811]  ? futex_hash+0x2c5/0x380
[  217.451323][ T8811]  futex_wait+0xed/0x380
[  217.451337][ T8811]  ? __pfx_futex_wait+0x10/0x10
[  217.451360][ T8811]  do_futex+0x1ef/0x350
[  217.451379][ T8811]  ? __pfx_do_futex+0x10/0x10
[  217.451403][ T8811]  __x64_sys_futex+0x34f/0x4d0
[  217.451424][ T8811]  ? __do_sys_close_range+0x25d/0x740
[  217.451442][ T8811]  ? __pfx___x64_sys_futex+0x10/0x10
[  217.451461][ T8811]  ? xfd_validate_state+0x129/0x190
[  217.451489][ T8811]  do_syscall_64+0xc9/0xf80
[  217.451508][ T8811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.451523][ T8811] RIP: 0033:0x7ff4f199aeb9
[  217.451536][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.451549][ T8811] RSP: 002b:00007ff4f289b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  217.451564][ T8811] RAX: ffffffffffffffda RBX: 00007ff4f1c15fa8 RCX: 00007ff4f199aeb9
[  217.451573][ T8811] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff4f1c15fa8
[  217.451581][ T8811] RBP: 00007ff4f1c15fa0 R08: 0000000000000000 R09: 0000000000000000
[  217.451590][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.451598][ T8811] R13: 00007ff4f1c16038 R14: 00007ffc7c5942a0 R15: 00007ffc7c594388
[  217.451616][ T8811]  </TASK>
[  218.176675][ T8818] zswap: compressor  not available
[  218.352358][ T8229] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.709750][ T8842] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input11
[  219.540864][ T8836] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0
[  220.678405][ T8869] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  220.716586][ T8869] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  220.743913][ T8869] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  220.799742][ T8869] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  220.824488][ T8869] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  220.893454][ T8869] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  220.922654][ T8869] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  221.246891][ T8890] netlink: 'syz.1.608': attribute type 1 has an invalid length.
[  221.856240][ T8909] i8042 aux 00:02: in use; can't configure
[  222.053591][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'.
[  222.089291][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout
[  222.180362][ T8919] can: request_module (can-proto-0) failed.
[  222.728289][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  222.808496][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout
[  222.887865][ T8940] futex_wake_op: syz.2.622 tries to shift op by -2048; fix this program
[  222.967737][ T8940] futex_wake_op: syz.2.622 tries to shift op by -2048; fix this program
[  222.988255][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout
[  223.816173][ T8950] Process accounting resumed
[  224.639345][ T9006] FAULT_INJECTION: forcing a failure.
[  224.639345][ T9006] name failslab, interval 1, probability 0, space 0, times 0
[  224.677805][ T9005] Invalid ELF header magic: != ELF
[  224.687167][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.3.637 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.687195][ T9006] Tainted: [L]=SOFTLOCKUP
[  224.687200][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  224.687209][ T9006] Call Trace:
[  224.687214][ T9006]  <TASK>
[  224.687220][ T9006]  dump_stack_lvl+0x100/0x190
[  224.687244][ T9006]  should_fail_ex.cold+0x5/0xa
[  224.687269][ T9006]  should_failslab+0xc2/0x120
[  224.687290][ T9006]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  224.687305][ T9006]  __kmalloc_noprof+0xf6/0x9c0
[  224.687320][ T9006]  ? __pfx_aa_file_perm+0x10/0x10
[  224.687340][ T9006]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  224.687354][ T9006]  ? __lock_acquire+0x4a5/0x2630
[  224.687378][ T9006]  kernfs_fop_write_iter+0x26a/0x5f0
[  224.687393][ T9006]  ? copy_iovec_from_user+0x102/0x140
[  224.687417][ T9006]  do_iter_readv_writev+0x6ee/0x920
[  224.687435][ T9006]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  224.687460][ T9006]  vfs_writev+0x360/0xe10
[  224.687477][ T9006]  ? trace_contention_end+0xd6/0x110
[  224.687500][ T9006]  ? __pfx_vfs_writev+0x10/0x10
[  224.687514][ T9006]  ? fdget_pos+0x2aa/0x380
[  224.687544][ T9006]  ? __fget_files+0x21f/0x3d0
[  224.687564][ T9006]  ? do_writev+0x13e/0x340
[  224.687577][ T9006]  do_writev+0x13e/0x340
[  224.687592][ T9006]  ? __pfx_do_writev+0x10/0x10
[  224.687613][ T9006]  do_syscall_64+0xc9/0xf80
[  224.687633][ T9006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.687648][ T9006] RIP: 0033:0x7ff4f199aeb9
[  224.687660][ T9006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.687673][ T9006] RSP: 002b:00007ff4f289b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  224.687688][ T9006] RAX: ffffffffffffffda RBX: 00007ff4f1c15fa0 RCX: 00007ff4f199aeb9
[  224.687697][ T9006] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000005
[  224.687706][ T9006] RBP: 00007ff4f1a08c1f R08: 0000000000000000 R09: 0000000000000000
[  224.687714][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.687722][ T9006] R13: 00007ff4f1c16038 R14: 00007ff4f1c15fa0 R15: 00007ffc7c594388
[  224.687741][ T9006]  </TASK>
[  225.145573][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  225.151925][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout
[  225.158336][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout
[  226.326475][ T9060] phram: not enough arguments
[  226.807228][ T9071] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81afafea (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[  226.822931][ T9071] Call Trace:
[  226.826321][ T9071]  <TASK>
[  226.829238][ T9071]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[  226.835905][ T9071]  ? __pfx_debug_object_deactivate+0x10/0x10
[  226.841904][ T9071]  mce_cpu_restart+0xd5/0x1f0
[  226.846569][ T9071]  ? __pfx_mce_cpu_restart+0x10/0x10
[  226.851840][ T9071]  smp_call_function_many_cond+0x119e/0x14a0
[  226.857811][ T9071]  ? __pfx_mce_cpu_restart+0x10/0x10
[  226.863083][ T9071]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  226.868875][ T9071]  ? lockdep_hardirqs_on+0x78/0x100
[  226.874056][ T9071]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  226.879845][ T9071]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  226.886269][ T9071]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  226.892270][ T9071]  ? __timer_delete_sync+0x151/0x1c0
[  226.897553][ T9071]  ? __pfx_mce_cpu_restart+0x10/0x10
[  226.902840][ T9071]  on_each_cpu_cond_mask+0x40/0x90
[  226.907946][ T9071]  set_bank+0x240/0x3a0
[  226.912114][ T9071]  ? __pfx_set_bank+0x10/0x10
[  226.916772][ T9071]  ? find_held_lock+0x2b/0x80
[  226.921443][ T9071]  ? sysfs_file_kobj+0xe4/0x290
[  226.926289][ T9071]  ? sysfs_file_kobj+0xe4/0x290
[  226.931143][ T9071]  ? __pfx_set_bank+0x10/0x10
[  226.935803][ T9071]  dev_attr_store+0x58/0x80
[  226.940323][ T9071]  ? __pfx_dev_attr_store+0x10/0x10
[  226.945526][ T9071]  sysfs_kf_write+0xf2/0x150
[  226.950107][ T9071]  kernfs_fop_write_iter+0x3e0/0x5f0
[  226.955376][ T9071]  ? __pfx_sysfs_kf_write+0x10/0x10
[  226.960562][ T9071]  vfs_write+0x6ac/0x1070
[  226.964884][ T9071]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  226.970699][ T9071]  ? __pfx_vfs_write+0x10/0x10
[  226.975445][ T9071]  ? find_held_lock+0x2b/0x80
[  226.980294][ T9071]  ksys_write+0x12a/0x250
[  226.984617][ T9071]  ? __pfx_ksys_write+0x10/0x10
[  226.989457][ T9071]  do_syscall_64+0xc9/0xf80
[  226.994046][ T9071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.999924][ T9071] RIP: 0033:0x7f0b7c19aeb9
[  227.004409][ T9071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.024002][ T9071] RSP: 002b:00007f0b7d0ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  227.032400][ T9071] RAX: ffffffffffffffda RBX: 00007f0b7c416090 RCX: 00007f0b7c19aeb9
[  227.040357][ T9071] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003
[  227.048308][ T9071] RBP: 00007f0b7c208c1f R08: 0000000000000000 R09: 0000000000000000
[  227.056261][ T9071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.064298][ T9071] R13: 00007f0b7c416128 R14: 00007f0b7c416090 R15: 00007ffcbba3afe8
[  227.072263][ T9071]  </TASK>
[  227.536726][ T9053] kexec: Could not allocate control_code_buffer
[  228.049398][ T9088] usb usb3: usbfs: interface 0 claimed by hub while 'syz.0.655' sets config #0
[  229.859108][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'.
[  232.976798][ T9173] Invalid ELF header magic: != ELF
[  233.850105][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'.
[  237.403800][ T9223] random: crng reseeded on system resumption
[  239.475794][ T9244] Invalid ELF header magic: != ELF
[  241.002472][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.119404][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.209974][ T9255] nfs: Unknown parameter 'B��lY�	7�w��E�ɮH��s[�ؐu`�]��e��6z�c��ޕ�[$(�u�����Ҟ��%�E��tO��2*�p��[���Oug����r��ts���QZ׀z'
[  241.259281][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.354389][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.471247][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.578569][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.587860][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.740811][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.891917][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.988871][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  241.998134][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  242.464065][ T9258] nvme_fabrics: unknown parameter or missing value '�@�' in ctrl creation request
[  242.768113][ T9269] Invalid ELF header magic: != ELF
[  243.328930][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.337811][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.347760][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.356682][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.366112][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  243.721701][ T8230] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.990473][ T8230] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.199628][ T8230] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.319458][ T8230] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.349192][ T9273] netlink: 504 bytes leftover after parsing attributes in process `syz.2.695'.
[  244.908411][ T8230] batadv0: left allmulticast mode
[  244.918328][ T8230] batadv0: left promiscuous mode
[  244.924752][ T8230] bridge0: port 3(batadv0) entered disabled state
[  244.990404][ T8230] bridge_slave_1: left allmulticast mode
[  245.025972][ T8230] bridge_slave_1: left promiscuous mode
[  245.058921][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.105113][ T8230] bridge_slave_0: left allmulticast mode
[  245.151584][ T8230] bridge_slave_0: left promiscuous mode
[  245.157342][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.448987][ T5826] Bluetooth: hci2: command tx timeout
[  246.554522][ T8230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.590360][ T8230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.642537][ T8230] bond0 (unregistering): Released all slaves
[  246.674821][ T9275] chnl_net:caif_netlink_parms(): no params data found
[  247.446173][ T9329] Invalid ELF header magic: != ELF
[  247.528846][ T5826] Bluetooth: hci2: command tx timeout
[  247.622867][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.661139][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.717203][ T9275] bridge_slave_0: entered allmulticast mode
[  247.745549][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.755150][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.769668][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.777662][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.785944][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.814878][ T9275] bridge_slave_0: entered promiscuous mode
[  248.003599][ T8230] hsr_slave_0: left promiscuous mode
[  248.059517][ T8230] hsr_slave_1: left promiscuous mode
[  248.080677][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.088096][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.157383][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.190555][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.265468][ T8230] veth1_macvtap: left promiscuous mode
[  248.292061][ T8230] veth0_macvtap: left promiscuous mode
[  248.308074][ T8230] veth1_vlan: left promiscuous mode
[  248.323966][ T8230] veth0_vlan: left promiscuous mode
[  249.152343][ T8230] team0 (unregistering): Port device team_slave_1 removed
[  249.191029][ T8230] team0 (unregistering): Port device team_slave_0 removed
[  249.608279][ T5830] Bluetooth: hci2: command tx timeout
[  249.719058][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.726181][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.750132][ T9275] bridge_slave_1: entered allmulticast mode
[  249.787347][ T9275] bridge_slave_1: entered promiscuous mode
[  249.849599][ T5830] Bluetooth: hci4: command tx timeout
[  249.941669][ T9275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.012881][ T9275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.144813][ T9275] team0: Port device team_slave_0 added
[  250.194748][ T9275] team0: Port device team_slave_1 added
[  250.295706][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.327087][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.433324][ T5830] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260
[  250.433351][ T5830] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260
[  250.458377][ T5830] Bluetooth: hci1: Dropping invalid advertising data
[  250.466221][ T5830] Bluetooth: hci1: unknown advertising packet type: 0xe9
[  250.466256][ T5830] Bluetooth: hci1: Malformed LE Event: 0x02
[  250.488671][ T9275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.610012][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.658641][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.828262][ T9275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.237560][ T9275] hsr_slave_0: entered promiscuous mode
[  251.279290][ T9275] hsr_slave_1: entered promiscuous mode
[  251.459157][ T8230] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.584721][ T8230] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.688540][ T5830] Bluetooth: hci2: command tx timeout
[  251.727288][ T8230] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.929262][ T5830] Bluetooth: hci4: command tx timeout
[  251.936806][ T8230] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.129423][ T9336] chnl_net:caif_netlink_parms(): no params data found
[  252.673588][ T8230] bridge_slave_1: left allmulticast mode
[  252.702495][ T8230] bridge_slave_1: left promiscuous mode
[  252.708249][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.765313][ T8230] bridge_slave_0: left allmulticast mode
[  252.798426][ T8230] bridge_slave_0: left promiscuous mode
[  252.850933][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.637116][ T8230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.668803][ T8230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.701765][ T8230] bond0 (unregistering): Released all slaves
[  253.910374][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.950150][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.984591][ T9336] bridge_slave_0: entered allmulticast mode
[  254.008636][ T5830] Bluetooth: hci4: command tx timeout
[  254.026287][ T9336] bridge_slave_0: entered promiscuous mode
[  254.052665][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.089813][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.117997][ T9336] bridge_slave_1: entered allmulticast mode
[  254.147662][ T9336] bridge_slave_1: entered promiscuous mode
[  254.169788][ T9275] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  254.227595][ T9275] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  254.417539][ T9275] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  254.436165][ T9275] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  254.556428][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.629037][ T8230] hsr_slave_0: left promiscuous mode
[  254.654170][ T8230] hsr_slave_1: left promiscuous mode
[  254.680025][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.699881][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.730810][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.758343][ T8230] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.852588][ T8230] veth1_macvtap: left promiscuous mode
[  254.877527][ T8230] veth0_macvtap: left promiscuous mode
[  254.898902][ T8230] veth1_vlan: left promiscuous mode
[  254.917441][ T8230] veth0_vlan: left promiscuous mode
[  256.089265][ T5830] Bluetooth: hci4: command tx timeout
[  256.123621][ T8230] team0 (unregistering): Port device team_slave_1 removed
[  256.225475][ T8230] team0 (unregistering): Port device team_slave_0 removed
[  257.070241][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.282504][ T9336] team0: Port device team_slave_0 added
[  257.353104][ T9336] team0: Port device team_slave_1 added
[  257.471358][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.498337][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.588818][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.621182][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.648361][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  257.738295][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.774939][ T9275] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.929568][ T9336] hsr_slave_0: entered promiscuous mode
[  257.958591][ T9336] hsr_slave_1: entered promiscuous mode
[  257.988596][ T9336] debugfs: 'hsr0' already exists in 'hsr'
[  257.994335][ T9336] Cannot create hsr debugfs directory
[  258.111640][ T9275] 8021q: adding VLAN 0 to HW filter on device team0
[  258.268812][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.276056][ T8226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.311824][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.318988][ T8226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.000034][ T9336] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  259.113143][ T9336] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  259.166908][ T9336] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  259.235604][ T9336] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  259.276240][ T9275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.597033][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.675585][ T9336] 8021q: adding VLAN 0 to HW filter on device team0
[  259.738787][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.745887][ T8226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.812905][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.820147][ T8226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.259649][ T9275] veth0_vlan: entered promiscuous mode
[  260.320762][ T9275] veth1_vlan: entered promiscuous mode
[  260.449886][ T9275] veth0_macvtap: entered promiscuous mode
[  260.504597][ T9275] veth1_macvtap: entered promiscuous mode
[  260.574184][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.630102][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.680024][ T9336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.715520][ T8229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.751441][ T8229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.830379][ T8229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.873513][ T8229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.891805][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  260.898117][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  261.139251][ T8229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.178641][ T8229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.291735][ T8229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.332704][ T8229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.598965][ T9336] veth0_vlan: entered promiscuous mode
[  261.659639][ T9336] veth1_vlan: entered promiscuous mode
[  261.867572][ T9336] veth0_macvtap: entered promiscuous mode
[  261.915022][ T9336] veth1_macvtap: entered promiscuous mode
[  262.064685][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.112379][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.192848][ T9553] Invalid ELF header magic: != ELF
[  262.226090][ T8226] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.226157][ T8226] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.226183][ T8226] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.226207][ T8226] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.588990][ T8226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.589036][ T8226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.755554][ T8229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.755572][ T8229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.693206][ T9574] Invalid ELF header magic: != ELF
[  264.518741][ T9561] [U]  
[  264.521697][ T9561] [U] 
[  264.524377][ T9561] [U] 
[  264.527063][ T9561] [U] 
[  264.884238][ T9561] [U] 
[  264.886965][ T9561] [U] 
[  264.889708][ T9561] [U] 
[  264.892382][ T9561] [U] 
[  265.258001][ T9561] [U] 
[  265.260717][ T9561] [U] 
[  265.263398][ T9561] [U] 
[  265.266074][ T9561] [U] 
[  265.371550][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'.
[  265.477586][ T9561] [U] 
[  265.480304][ T9561] [U] 
[  265.482981][ T9561] [U] 
[  265.485651][ T9561] [U] 
[  265.657760][ T9561] [U] 
[  265.660470][ T9561] [U] 
[  265.663145][ T9561] [U] 
[  265.665819][ T9561] [U] 
[  265.765171][ T9601] zswap: compressor � not available
[  266.340853][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.719'.
[  266.444622][ T9613] zswap: compressor  not available
[  266.545726][ T9605] bridge0: entered promiscuous mode
[  266.636259][ T9605] bridge0: entered allmulticast mode
[  266.665176][ T9627] serio: Serial port pty6
[  267.689801][ T9524] [U] 
[  268.764262][ T9664] Invalid ELF header magic: != ELF
[  270.122482][ T9657] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  270.179788][ T9657] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  270.208613][ T9657] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  270.228429][ T9657] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  270.341867][ T9657] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  270.391915][ T9657] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  270.433154][ T9657] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  270.487221][ T9657] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  272.008387][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout
[  272.250190][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout
[  272.256321][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  272.409320][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  273.067842][ T9746] nfs: Unknown parameter 'B��lY�	7�w��E�ɮH��s[�ؐu`�]��e��6z�c��ޕ�[$(�u�����Ҟ��%�E��tO��2*�p��[���Oug����r��ts���QZ׀z'
[  273.780183][ T9779] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  273.839453][ T9779] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  273.861132][ T9776] NFSD: Failed to start, no listeners configured.
[  274.333099][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout
[  274.480665][ T9786] Invalid ELF header magic: != ELF
[  274.488297][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  274.568148][ T9789] netlink: 342 bytes leftover after parsing attributes in process `syz.5.752'.
[  275.673007][ T9811] FAULT_INJECTION: forcing a failure.
[  275.673007][ T9811] name failslab, interval 1, probability 0, space 0, times 0
[  275.762150][ T9811] CPU: 0 UID: 0 PID: 9811 Comm: syz.0.755 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  275.762176][ T9811] Tainted: [L]=SOFTLOCKUP
[  275.762182][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  275.762200][ T9811] Call Trace:
[  275.762206][ T9811]  <TASK>
[  275.762212][ T9811]  dump_stack_lvl+0x100/0x190
[  275.762237][ T9811]  should_fail_ex.cold+0x5/0xa
[  275.762262][ T9811]  should_failslab+0xc2/0x120
[  275.762284][ T9811]  __kmalloc_cache_noprof+0x80/0x810
[  275.762300][ T9811]  ? cgroup_file_open+0x92/0x460
[  275.762320][ T9811]  ? cgroup_file_open+0x92/0x460
[  275.762337][ T9811]  cgroup_file_open+0x92/0x460
[  275.762352][ T9811]  ? __pfx_cgroup_file_open+0x10/0x10
[  275.762370][ T9811]  kernfs_fop_open+0x8b5/0xd50
[  275.762390][ T9811]  do_dentry_open+0x73e/0x1570
[  275.762407][ T9811]  ? __pfx_kernfs_fop_open+0x10/0x10
[  275.762423][ T9811]  ? security_inode_permission+0xbf/0x250
[  275.762448][ T9811]  vfs_open+0x82/0x3f0
[  275.762472][ T9811]  path_openat+0x21dc/0x3120
[  275.762495][ T9811]  ? __pfx_path_openat+0x10/0x10
[  275.762520][ T9811]  do_filp_open+0x1f7/0x420
[  275.762540][ T9811]  ? __pfx_do_filp_open+0x10/0x10
[  275.762575][ T9811]  ? _raw_spin_unlock+0x28/0x50
[  275.762591][ T9811]  ? alloc_fd+0x476/0x790
[  275.762615][ T9811]  do_sys_openat2+0x12e/0x220
[  275.762639][ T9811]  ? __pfx_do_sys_openat2+0x10/0x10
[  275.762664][ T9811]  ? __fget_files+0x21f/0x3d0
[  275.762686][ T9811]  __x64_sys_openat+0x12d/0x210
[  275.762710][ T9811]  ? __pfx___x64_sys_openat+0x10/0x10
[  275.762738][ T9811]  ? xfd_validate_state+0x129/0x190
[  275.762769][ T9811]  do_syscall_64+0xc9/0xf80
[  275.762789][ T9811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.762805][ T9811] RIP: 0033:0x7f0b7c19aeb9
[  275.762818][ T9811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  275.762832][ T9811] RSP: 002b:00007f0b7d10b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  275.762846][ T9811] RAX: ffffffffffffffda RBX: 00007f0b7c415fa0 RCX: 00007f0b7c19aeb9
[  275.762855][ T9811] RDX: 0000000000101000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  275.762864][ T9811] RBP: 00007f0b7c208c1f R08: 0000000000000000 R09: 0000000000000000
[  275.762873][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.762881][ T9811] R13: 00007f0b7c416038 R14: 00007f0b7c415fa0 R15: 00007ffcbba3afe8
[  275.762901][ T9811]  </TASK>
[  276.461946][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout
[  276.615814][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  276.857369][ T5830] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260
[  276.857417][ T5830] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260
[  276.872608][ T5830] Bluetooth: hci4: Unknown advertising packet type: 0x7f
[  276.872646][ T5830] Bluetooth: hci4: adv larger than maximum supported
[  276.884131][ T5830] Bluetooth: hci4: Unknown advertising packet type: 0x5a
[  276.898571][ T5830] Bluetooth: hci4: Unknown advertising packet type: 0x3b
[  276.905730][ T5830] Bluetooth: hci4: Malformed LE Event: 0x0d
[  278.441845][ T9857] zswap: compressor  not available
[  280.146673][ T9357] syz.2.703 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  280.543362][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.2.703 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.543395][ T9357] Tainted: [L]=SOFTLOCKUP
[  280.543400][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  280.543408][ T9357] Call Trace:
[  280.543413][ T9357]  <TASK>
[  280.543419][ T9357]  dump_stack_lvl+0x100/0x190
[  280.543443][ T9357]  dump_header+0xfb/0x606
[  280.543459][ T9357]  oom_kill_process.cold+0xd/0x321
[  280.543475][ T9357]  out_of_memory+0x340/0x14f0
[  280.543499][ T9357]  ? __pfx_out_of_memory+0x10/0x10
[  280.543522][ T9357]  mem_cgroup_out_of_memory+0xc6/0x130
[  280.543538][ T9357]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  280.543552][ T9357]  ? find_held_lock+0x2b/0x80
[  280.543571][ T9357]  ? do_raw_spin_unlock+0x145/0x1e0
[  280.543593][ T9357]  ? _raw_spin_unlock+0x28/0x50
[  280.543610][ T9357]  try_charge_memcg+0x652/0xc90
[  280.543634][ T9357]  ? __pfx_try_charge_memcg+0x10/0x10
[  280.543654][ T9357]  ? find_held_lock+0x2b/0x80
[  280.543667][ T9357]  ? rcu_read_unlock+0x17/0x60
[  280.543687][ T9357]  ? rcu_read_unlock+0x17/0x60
[  280.543714][ T9357]  charge_memcg+0xa6/0x280
[  280.543734][ T9357]  __mem_cgroup_charge+0x2b/0x1e0
[  280.543757][ T9357]  shmem_alloc_and_add_folio+0x451/0xd40
[  280.543780][ T9357]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  280.543799][ T9357]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  280.543822][ T9357]  shmem_get_folio_gfp+0x6ab/0x1900
[  280.543844][ T9357]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  280.543862][ T9357]  ? timestamp_truncate+0x22e/0x2f0
[  280.543880][ T9357]  ? __pfx_timestamp_truncate+0x10/0x10
[  280.543900][ T9357]  shmem_write_begin+0x1a4/0x420
[  280.543919][ T9357]  ? rcu_is_watching+0x12/0xc0
[  280.543934][ T9357]  ? __pfx_shmem_write_begin+0x10/0x10
[  280.543952][ T9357]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  280.543979][ T9357]  generic_perform_write+0x292/0xa40
[  280.544004][ T9357]  ? __pfx_generic_perform_write+0x10/0x10
[  280.544022][ T9357]  ? generic_update_time+0xcf/0xf0
[  280.544041][ T9357]  ? mnt_put_write_access_file+0x4e/0x100
[  280.544058][ T9357]  ? file_update_time_flags+0x31f/0x510
[  280.544081][ T9357]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  280.544101][ T9357]  shmem_file_write_iter+0x10e/0x140
[  280.544123][ T9357]  __kernel_write_iter+0x2ac/0x920
[  280.544142][ T9357]  ? __pfx___kernel_write_iter+0x10/0x10
[  280.544158][ T9357]  ? __up_read+0x2c5/0x700
[  280.544182][ T9357]  ? dump_user_range+0x73b/0xb50
[  280.544202][ T9357]  dump_user_range+0x3f9/0xb50
[  280.544221][ T9357]  ? __pfx_dump_user_range+0x10/0x10
[  280.544244][ T9357]  ? __pfx_writenote+0x10/0x10
[  280.544265][ T9357]  elf_core_dump+0x2d16/0x3c60
[  280.544293][ T9357]  ? __pfx_elf_core_dump+0x10/0x10
[  280.544309][ T9357]  ? kasan_save_stack+0x30/0x50
[  280.544326][ T9357]  ? kasan_save_track+0x14/0x30
[  280.544342][ T9357]  ? __kasan_kmalloc+0xaa/0xb0
[  280.544358][ T9357]  ? __kvmalloc_node_noprof+0x34d/0xac0
[  280.544375][ T9357]  ? vfs_coredump+0x1f01/0x5530
[  280.544394][ T9357]  ? arch_do_signal_or_restart+0x91/0x770
[  280.544413][ T9357]  ? irqentry_exit+0x1f8/0x670
[  280.544429][ T9357]  ? asm_exc_page_fault+0x26/0x30
[  280.544446][ T9357]  ? 0xffffffffff600000
[  280.544490][ T9357]  ? vfs_coredump+0x276c/0x5530
[  280.544505][ T9357]  vfs_coredump+0x276c/0x5530
[  280.544527][ T9357]  ? __pfx_vfs_coredump+0x10/0x10
[  280.544542][ T9357]  ? __lock_acquire+0x4a5/0x2630
[  280.544565][ T9357]  ? __lock_acquire+0x4a5/0x2630
[  280.544586][ T9357]  ? lock_acquire+0x17c/0x330
[  280.544608][ T9357]  ? lock_acquire+0x17c/0x330
[  280.544630][ T9357]  ? bpf_ksym_find+0x124/0x1c0
[  280.544648][ T9357]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  280.544672][ T9357]  ? arch_stack_walk+0xa6/0xf0
[  280.544696][ T9357]  ? stack_trace_save+0x8e/0xc0
[  280.544712][ T9357]  ? __pfx_stack_trace_save+0x10/0x10
[  280.544728][ T9357]  ? stack_depot_save_flags+0x27/0x9c0
[  280.544751][ T9357]  ? __lock_acquire+0x4a5/0x2630
[  280.544803][ T9357]  ? proc_coredump_connector+0x2d3/0x4f0
[  280.544827][ T9357]  ? __pfx_proc_coredump_connector+0x10/0x10
[  280.544856][ T9357]  ? rcu_is_watching+0x12/0xc0
[  280.544872][ T9357]  get_signal+0x1f2a/0x21e0
[  280.544900][ T9357]  ? __pfx_get_signal+0x10/0x10
[  280.544916][ T9357]  ? __pfx_force_sig_fault+0x10/0x10
[  280.544938][ T9357]  arch_do_signal_or_restart+0x91/0x770
[  280.544959][ T9357]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  280.544985][ T9357]  ? do_user_addr_fault+0x8d6/0x12f0
[  280.545006][ T9357]  irqentry_exit+0x1f8/0x670
[  280.545025][ T9357]  asm_exc_page_fault+0x26/0x30
[  280.545039][ T9357] RIP: 0033:0x20fff
[  280.545055][ T9357] Code: Unable to access opcode bytes at 0x20fd5.
[  280.545061][ T9357] RSP: 002b:000000000000000a EFLAGS: 00010206
[  280.545073][ T9357] RAX: 0000000000000000 RBX: 00007f3f35015fa0 RCX: 00007f3f34d9aeb9
[  280.545082][ T9357] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46
[  280.545091][ T9357] RBP: 00007f3f34e08c1f R08: 0000000000000002 R09: 0000000000000000
[  280.545100][ T9357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.545108][ T9357] R13: 00007f3f35016038 R14: 00007f3f35015fa0 R15: 00007ffc21301a98
[  280.545127][ T9357]  </TASK>
[  280.545133][ T9357] memory: usage 3072kB, limit 3072kB, failcnt 49688
[  281.709517][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  281.977488][ T9357] memory+swap: usage 127496kB, limit 9007199254740988kB, failcnt 0
[  281.994182][ T9357] kmem: usage 2000kB, limit 9007199254740988kB, failcnt 0
[  282.019047][ T9907] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  282.025247][ T9907] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  282.033267][ T9907] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  282.053639][ T9907] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  282.061118][ T9357] Memory cgroup stats for /syz2:
[  282.061478][ T9357] cache 851968
[  282.131642][ T9357] rss 102400
[  282.154969][ T9357] rss_huge 0
[  282.178480][ T9357] shmem 851968
[  282.195371][ T9357] mapped_file 0
[  282.209121][ T9357] dirty 0
[  282.240119][ T9357] writeback 0
[  282.245662][ T9357] workingset_refault_anon 3256
[  282.298404][ T9357] workingset_refault_file 23173
[  282.314035][ T9357] swap 127410176
[  282.348892][ T9357] swapcached 131072
[  282.361491][ T9357] pgpgin 216784
[  282.380294][ T9357] pgpgout 229805
[  282.406588][ T9357] pgfault 136971
[  282.418690][ T9357] pgmajfault 1826
[  282.440672][ T9357] inactive_anon 659456
[  282.499164][ T9357] active_anon 425984
[  282.521349][ T9357] inactive_file 0
[  282.548287][ T9357] active_file 0
[  282.563000][ T9357] unevictable 0
[  282.582428][ T9357] hierarchical_memory_limit 3145728
[  282.613319][ T9357] hierarchical_memsw_limit 9223372036854771712
[  282.645975][ T9357] total_cache 851968
[  282.674309][ T9357] total_rss 102400
[  282.718347][ T9357] total_rss_huge 0
[  282.728711][ T9357] total_shmem 851968
[  282.754363][ T9357] total_mapped_file 0
[  282.784375][ T9357] total_dirty 0
[  282.803114][ T9357] total_writeback 0
[  282.832117][ T9357] total_workingset_refault_anon 3256
[  282.872950][ T9357] total_workingset_refault_file 23173
[  282.908565][ T9357] total_swap 127410176
[  282.949350][ T9357] total_swapcached 131072
[  282.959572][ T9357] total_pgpgin 216784
[  282.986019][ T9357] total_pgpgout 229805
[  283.009756][ T9357] total_pgfault 136971
[  283.018406][   T30] audit: type=1804 audit(1769884368.110:16): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.771" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=8 res=1 errno=0
[  283.058996][ T9357] total_pgmajfault 1826
[  283.064623][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'.
[  283.081494][ T9357] total_inactive_anon 659456
[  283.101048][ T9357] total_active_anon 425984
[  283.151627][ T9357] total_inactive_file 0
[  283.169815][ T9357] total_active_file 0
[  283.188283][ T9357] total_unevictable 0
[  283.215421][ T9357] anon_cost 29
[  283.228357][ T9357] file_cost 0
[  283.248258][ T9357] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.703,pid=9359,uid=0
[  283.355714][ T9357] Memory cgroup out of memory: Killed process 9359 (syz.2.703) total-vm:98752kB, anon-rss:1208kB, file-rss:52512kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:1000
[  284.088376][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout
[  284.094499][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  284.101641][   T53] Bluetooth: hci0: command 0x0c1a tx timeout
[  284.107780][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  284.120142][ T9966] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  285.024747][ T5830] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  285.051847][ T5826] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  285.387848][ T9359] syz.2.703 (9359) used greatest stack depth: 19288 bytes left
[  286.938998][ T9356] syz.2.703 (9356) used greatest stack depth: 19144 bytes left
[  288.149498][ T5830] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  288.156988][ T5830] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  288.937626][T10036] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  290.532166][T10078] input input12: cannot allocate more than FF_MAX_EFFECTS effects
[  290.639987][T10085] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  292.630388][T10123] program syz.4.796 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  292.828981][T10123] mkiss: ax0: crc mode is auto.
[  293.427153][T10146] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed.
[  294.030652][ T5826] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18
[  294.030799][ T5826] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18
[  295.678878][T10194] input input13: cannot allocate more than FF_MAX_EFFECTS effects
[  296.304197][T10210] FAULT_INJECTION: forcing a failure.
[  296.304197][T10210] name fail_futex, interval 1, probability 0, space 0, times 0
[  296.371221][T10208] NFSD: Failed to start, no listeners configured.
[  296.425736][T10210] CPU: 0 UID: 0 PID: 10210 Comm: syz.0.811 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  296.425777][T10210] Tainted: [L]=SOFTLOCKUP
[  296.425787][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  296.425803][T10210] Call Trace:
[  296.425812][T10210]  <TASK>
[  296.425823][T10210]  dump_stack_lvl+0x100/0x190
[  296.425846][T10210]  should_fail_ex.cold+0x5/0xa
[  296.425871][T10210]  get_futex_key+0x106f/0x1620
[  296.425892][T10210]  ? __pfx_get_futex_key+0x10/0x10
[  296.425917][T10210]  futex_wake+0xea/0x530
[  296.425941][T10210]  ? __pfx_futex_wake+0x10/0x10
[  296.425964][T10210]  ? exit_mm_release+0x19/0x30
[  296.425989][T10210]  do_futex+0x32b/0x350
[  296.426009][T10210]  ? __pfx_do_futex+0x10/0x10
[  296.426027][T10210]  ? __might_fault+0xc5/0x140
[  296.426049][T10210]  mm_release+0x24a/0x2f0
[  296.426067][T10210]  do_exit+0x675/0x2a30
[  296.426091][T10210]  ? __pfx_do_exit+0x10/0x10
[  296.426112][T10210]  ? do_raw_spin_lock+0x128/0x260
[  296.426134][T10210]  ? find_held_lock+0x2b/0x80
[  296.426148][T10210]  ? get_signal+0x7e0/0x21e0
[  296.426167][T10210]  do_group_exit+0xd5/0x2a0
[  296.426190][T10210]  get_signal+0x1ec7/0x21e0
[  296.426214][T10210]  ? __pfx_get_signal+0x10/0x10
[  296.426231][T10210]  ? do_futex+0x192/0x350
[  296.426253][T10210]  arch_do_signal_or_restart+0x91/0x770
[  296.426275][T10210]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  296.426300][T10210]  ? __pfx___x64_sys_futex+0x10/0x10
[  296.426326][T10210]  ? ksys_write+0x1ac/0x250
[  296.426345][T10210]  exit_to_user_mode_loop+0x86/0x4b0
[  296.426366][T10210]  ? rcu_is_watching+0x12/0xc0
[  296.426382][T10210]  do_syscall_64+0x4ea/0xf80
[  296.426401][T10210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.426416][T10210] RIP: 0033:0x7f0b7c19aeb9
[  296.426429][T10210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.426443][T10210] RSP: 002b:00007f0b7d10b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  296.426457][T10210] RAX: fffffffffffffe00 RBX: 00007f0b7c415fa8 RCX: 00007f0b7c19aeb9
[  296.426467][T10210] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0b7c415fa8
[  296.426475][T10210] RBP: 00007f0b7c415fa0 R08: 0000000000000000 R09: 0000000000000000
[  296.426484][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.426492][T10210] R13: 00007f0b7c416038 R14: 00007ffcbba3af00 R15: 00007ffcbba3afe8
[  296.426511][T10210]  </TASK>
[  297.039361][T10224] syz.5.813(10224): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  297.643651][T10227] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  298.644730][ T5826] Bluetooth: hci0: ACL packet too small
[  299.827547][T10260] zram0: detected capacity change from 0 to 8
[  300.082391][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'.
[  300.630480][T10288] ubi0: attaching mtd0
[  300.741433][T10288] ubi0: scanning is finished
[  300.813364][T10288] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  301.099222][T10288] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  303.296675][   T30] audit: type=1806 audit(4294967299.500:17): xattr="." res=0
[  304.311462][T10363] MTRR 1 not used
[  308.554131][T10435] netlink: 342 bytes leftover after parsing attributes in process `syz.0.848'.
[  308.574939][T10433] netlink: 204 bytes leftover after parsing attributes in process `syz.2.847'.
[  309.550578][T10454] FAULT_INJECTION: forcing a failure.
[  309.550578][T10454] name failslab, interval 1, probability 0, space 0, times 0
[  309.630577][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.0.853 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.630604][T10454] Tainted: [L]=SOFTLOCKUP
[  309.630610][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  309.630619][T10454] Call Trace:
[  309.630625][T10454]  <TASK>
[  309.630631][T10454]  dump_stack_lvl+0x100/0x190
[  309.630655][T10454]  should_fail_ex.cold+0x5/0xa
[  309.630681][T10454]  should_failslab+0xc2/0x120
[  309.630702][T10454]  __kmalloc_cache_noprof+0x80/0x810
[  309.630717][T10454]  ? vidtv_psi_set_sec_len+0xa5/0x160
[  309.630740][T10454]  ? vidtv_psi_pmt_stream_init+0x4e/0x3e0
[  309.630758][T10454]  ? vidtv_psi_pmt_stream_init+0x4e/0x3e0
[  309.630773][T10454]  vidtv_psi_pmt_stream_init+0x4e/0x3e0
[  309.630791][T10454]  vidtv_channel_si_init+0x1289/0x18d0
[  309.630815][T10454]  vidtv_mux_init+0x526/0xbf0
[  309.630835][T10454]  vidtv_start_feed+0x33e/0x4c0
[  309.630857][T10454]  ? __pfx_vidtv_start_feed+0x10/0x10
[  309.630877][T10454]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  309.630899][T10454]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  309.630925][T10454]  ? mark_held_locks+0x40/0x70
[  309.630947][T10454]  ? __pfx_vidtv_start_feed+0x10/0x10
[  309.630968][T10454]  dmx_ts_feed_start_filtering+0xf6/0x220
[  309.630994][T10454]  dvb_dmxdev_start_feed+0x273/0x3f0
[  309.631017][T10454]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  309.631039][T10454]  ? dvb_dmxdev_add_pid+0x2a1/0x380
[  309.631062][T10454]  dvb_demux_do_ioctl+0xe64/0x1200
[  309.631089][T10454]  dvb_usercopy+0x167/0x340
[  309.631107][T10454]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  309.631128][T10454]  ? __pfx_dvb_usercopy+0x10/0x10
[  309.631172][T10454]  ? __fget_files+0x21f/0x3d0
[  309.631193][T10454]  dvb_demux_ioctl+0x29/0x40
[  309.631215][T10454]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  309.631235][T10454]  __x64_sys_ioctl+0x18e/0x210
[  309.631260][T10454]  do_syscall_64+0xc9/0xf80
[  309.631280][T10454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.631295][T10454] RIP: 0033:0x7f0b7c19aeb9
[  309.631314][T10454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.631329][T10454] RSP: 002b:00007f0b7d10b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  309.631345][T10454] RAX: ffffffffffffffda RBX: 00007f0b7c415fa0 RCX: 00007f0b7c19aeb9
[  309.631355][T10454] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003
[  309.631365][T10454] RBP: 00007f0b7c208c1f R08: 0000000000000000 R09: 0000000000000000
[  309.631374][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.631384][T10454] R13: 00007f0b7c416038 R14: 00007f0b7c415fa0 R15: 00007ffcbba3afe8
[  309.631405][T10454]  </TASK>
[  309.631493][T10454] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  309.904873][T10454] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  309.913304][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.0.853 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.924134][T10454] Tainted: [L]=SOFTLOCKUP
[  309.928435][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  309.938469][T10454] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90
[  309.944352][T10454] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 bd b9 ed f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 99 b9 ed f9 4d 85 e4
[  309.963944][T10454] RSP: 0018:ffffc900045cfa18 EFLAGS: 00010247
[  309.969994][T10454] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000b4f9000
[  309.977945][T10454] RDX: 0000000000000000 RSI: ffffffff881890c3 RDI: 0000000000000005
[  309.985896][T10454] RBP: ffff88807b288ec0 R08: 0000000000000000 R09: 4453534204050000
[  309.993935][T10454] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
[  310.001907][T10454] R13: ffff88802a82e780 R14: ffff88801fee7840 R15: ffff88802a82ea40
[  310.009860][T10454] FS:  00007f0b7d10b6c0(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000
[  310.018784][T10454] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.025355][T10454] CR2: 00007f0b7d0e9ff8 CR3: 0000000028c1a000 CR4: 00000000003526f0
[  310.033351][T10454] Call Trace:
[  310.036622][T10454]  <TASK>
[  310.039535][T10454]  vidtv_channel_si_init+0x12fc/0x18d0
[  310.044999][T10454]  vidtv_mux_init+0x526/0xbf0
[  310.049747][T10454]  vidtv_start_feed+0x33e/0x4c0
[  310.054585][T10454]  ? __pfx_vidtv_start_feed+0x10/0x10
[  310.059942][T10454]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  310.065393][T10454]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  310.072056][T10454]  ? mark_held_locks+0x40/0x70
[  310.076809][T10454]  ? __pfx_vidtv_start_feed+0x10/0x10
[  310.082257][T10454]  dmx_ts_feed_start_filtering+0xf6/0x220
[  310.087988][T10454]  dvb_dmxdev_start_feed+0x273/0x3f0
[  310.093269][T10454]  dvb_dmxdev_filter_start+0x1b6/0xdd0
[  310.098802][T10454]  ? dvb_dmxdev_add_pid+0x2a1/0x380
[  310.104021][T10454]  dvb_demux_do_ioctl+0xe64/0x1200
[  310.109120][T10454]  dvb_usercopy+0x167/0x340
[  310.113638][T10454]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  310.119242][T10454]  ? __pfx_dvb_usercopy+0x10/0x10
[  310.124255][T10454]  ? __fget_files+0x21f/0x3d0
[  310.128917][T10454]  dvb_demux_ioctl+0x29/0x40
[  310.133506][T10454]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  310.138788][T10454]  __x64_sys_ioctl+0x18e/0x210
[  310.143548][T10454]  do_syscall_64+0xc9/0xf80
[  310.148055][T10454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.153933][T10454] RIP: 0033:0x7f0b7c19aeb9
[  310.158336][T10454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.178011][T10454] RSP: 002b:00007f0b7d10b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  310.186493][T10454] RAX: ffffffffffffffda RBX: 00007f0b7c415fa0 RCX: 00007f0b7c19aeb9
[  310.194444][T10454] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003
[  310.202411][T10454] RBP: 00007f0b7c208c1f R08: 0000000000000000 R09: 0000000000000000
[  310.210361][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.218311][T10454] R13: 00007f0b7c416038 R14: 00007f0b7c415fa0 R15: 00007ffcbba3afe8
[  310.226274][T10454]  </TASK>
[  310.229272][T10454] Modules linked in:
[  310.233993][T10454] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  311.410412][T10454] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90
[  311.416349][T10454] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 bd b9 ed f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 99 b9 ed f9 4d 85 e4
[  311.454247][T10454] RSP: 0018:ffffc900045cfa18 EFLAGS: 00010247
[  311.460853][T10454] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000b4f9000
[  311.470167][T10454] RDX: 0000000000000000 RSI: ffffffff881890c3 RDI: 0000000000000005
[  311.510838][T10454] RBP: ffff88807b288ec0 R08: 0000000000000000 R09: 4453534204050000
[  311.544092][T10454] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000
[  311.558367][T10454] R13: ffff88802a82e780 R14: ffff88801fee7840 R15: ffff88802a82ea40
[  311.566352][T10454] FS:  00007f0b7d10b6c0(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000
[  311.622415][T10252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.639975][T10454] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  311.658388][T10454] CR2: 0000001b30c09ff8 CR3: 0000000028c1a000 CR4: 00000000003526f0
[  311.666385][T10454] Kernel panic - not syncing: Fatal exception
[  311.672590][T10454] Kernel Offset: disabled
[  311.676984][T10454] Rebooting in 86400 seconds..