last executing test programs:

4m24.862227094s ago: executing program 0 (id=1344):
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0x400004, 0x4, 0x36)

4m24.595047768s ago: executing program 0 (id=1346):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x3a)
io_uring_setup$auto(0x52, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgget$auto(0xc, 0x77d9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/set_event\x00', 0x941, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x3, 0x6)
r1 = socket(0xa, 0x1, 0x84)
capget$auto(0x0, 0xfffffffffffffffe)
getsockopt$auto(r1, 0x84, 0x85, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(0x0, 0x2040, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)

4m23.677478429s ago: executing program 0 (id=1350):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
setfsuid$auto(0xee01)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyca/uevent\x00', 0x82000, 0x0)
mmap$auto(0x0, 0x40006, 0xe2, 0x20009b72, 0x7, 0x28000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80800, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffdffd}, 0x6, 0x400000000000008, 0x5)
socket(0x18, 0xa, 0x1)
recvfrom$auto(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x5)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x100, 0xd08, 0xc, 0x200000000000c, 0x0, 0x6d2f, 0xffffffffffffff00, 0x2, 0x4000000000000d]}, 0x0)
socket(0x2c, 0x1, 0x4004)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r0 = socket(0xa, 0x801, 0x84)
setsockopt$auto(r0, 0x84, 0x23, &(0x7f00000002c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\x9c\x97\xcb\x97\x19V-\x1f\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\x85|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84\xda\xceKj_\f\x19\x9b\xd3\xe3\xee\x1e \'\xddTx\x15\x8fdq\a\x86\xb0\xe3[>P\xf1\f\xf5\xba|\xd1\xa5\x15 \xb2\x9b`\xf9\x9e\xd9Q\xd2\xe3\xe9\xf7\xcf\xbd\xba\x8a\xbb\x8b\xe3\xdaj\xfe\x85\x8a*FS\xdfi\x0eD\x10\xcdBz\xa8\x06\xe0\x14\xcc*\xad{\xb2\xf8\xb6\xbb>\x1fO\x96k5\xd1M9\xf0\x9a\xda\xa1\xaa~X\xd7&\xde\xa3\rI\xad\xc4A\x12\xeae*/\x8f}\xb6\xe7\v\xaa\xe5c\x88\x03\xf9\xe8S\xd4\xe2<\x88\xc4+\xf4w\x0e\xfe\x13|\x05\xf0\xfc\xa4\xb4\xf5\xf8\xb1\xf2\x8dyE\xf4\xfc\xf4\x99\x00\xfb\xc9\x7f\x142d\x99U$^\xbc\xf6`\x9b=bC\xb4uME#\xc4\x99\x87\xb9~\x8cv\x84\xd6M/j>j\xd5j\xb2\xb1\xf7\xcbL\xfe\xd6\xce\xf1\x81\xea\xfc@\xd4\xbb\xd6\xf4\xad\xc4\xf0\xfd\x8f\xbc?\xf1\x80\xb5J\nn|*\x81\x96\xe1M\xebS\'\x85\xcd\xc1\x95\n\x8a>\xd6\xf8\xf3\x11\xc6{\xba\x1f\xd7qK\x92\x95\x109\x80\x8c\x8f\x86j\xac\xdc\xb6\xe0\x88\xab}\xb3\xd6\xa3\x0f\xb4\xcd\x1f\xb1\x98\f=', 0x3ff)

4m19.750392441s ago: executing program 0 (id=1371):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/5/hwirq\x00', 0x901203, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
clock_adjtime$auto(0xa, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socket(0x2, 0x3, 0xa)
unshare$auto(0xfff)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x36}, 0x1)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x3, 0x73)
socket(0x11, 0x3, 0x9)
pipe2$auto(&(0x7f00000000c0), 0x0)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003)
mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1)
mbind$auto(0x0, 0x800605, 0x1, 0x0, 0xa, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x1ab101, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
unshare$auto(0x40000080)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x4, 0xffffffffffff0005, 0x1d)
madvise$auto(0x0, 0x8000000000000000, 0x15)
connect$auto(0xffffffffffffffff, 0x0, 0x32)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
exit$auto(0x6)
msgsnd$auto(0x9, 0x0, 0xfffffffffffffffd, 0x4)

4m18.649214815s ago: executing program 0 (id=1378):
mmap$auto(0x0, 0x2020409, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000080)={0x1f, 0x0, 0x202, 0x9, 0x1})
write$auto(r0, 0x0, 0x2)
getrlimit$auto(0x3, 0x0)
fdatasync$auto(r0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0)
r3 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0)
getsockopt$auto_SO_PEEK_OFF(r3, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6)
io_uring_setup$auto(0x0, &(0x7f0000000240)={0xaa, 0x7ff, 0x3, 0x5, 0x8, 0x9, r3, [0x2, 0x9, 0x2], {0x6, 0x8000, 0x1, 0x1, 0x4, 0x995d, 0x75a929d5, 0x6f2, 0x3}, {0x0, 0x4000003, 0x4, 0xb16, 0x9, 0x44f2, 0x69, 0x7fffffff, 0x2}})
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
r4 = gettid()
rt_sigtimedwait$auto(&(0x7f00000000c0)={0x7fffffff}, &(0x7f00000001c0)={@_si_pad}, 0x0, 0x8)
kill$auto(r4, 0x11)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
io_uring_setup$auto(0x6, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x121102, 0x0)
ioctl$auto_IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0xe, 0x2, 0x6c0, 0x3})
close_range$auto(0x2, 0x8, 0x0)

4m17.214182926s ago: executing program 0 (id=1381):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x4100, 0x0)
mmap$auto(0x0, 0x20009, 0x8000000000000000, 0xeb1, 0x403, 0x8000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x7fffe, 0xa, 0x1000009, <r0=>0x5f, 0x0, 0x3}, 0x6f3)
read$auto(r0, &(0x7f00000000c0)='*(\x00', 0x20)
bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0xca99, @value=0x5, 0xa}, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0)
sendfile$auto(r1, r1, 0x0, 0x4000000a1f)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x27c001, 0x44d)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x4800, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x2c42, 0x0)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0p/xrun_debug\x00', 0x200000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000e80)=""/215, 0xd7)
bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e)

4m2.066540236s ago: executing program 32 (id=1381):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x4100, 0x0)
mmap$auto(0x0, 0x20009, 0x8000000000000000, 0xeb1, 0x403, 0x8000)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x7fffe, 0xa, 0x1000009, <r0=>0x5f, 0x0, 0x3}, 0x6f3)
read$auto(r0, &(0x7f00000000c0)='*(\x00', 0x20)
bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0xca99, @value=0x5, 0xa}, 0xc)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0)
sendfile$auto(r1, r1, 0x0, 0x4000000a1f)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000100)='.\x00', 0x27c001, 0x44d)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x4800, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x2c42, 0x0)
ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0p/xrun_debug\x00', 0x200000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000e80)=""/215, 0xd7)
bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3)
writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e)

2m0.859233813s ago: executing program 4 (id=1887):
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x801, 0x84) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
fanotify_init$auto(0x6a4e, 0x4) (async)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
dup2$auto(0x0, 0x3) (async)
ioctl$auto(0x3, 0x541b, r0) (async)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0xc, 0xffffffffffffffff, [0x8000], {0xa, 0x6, 0xf, 0x2df, 0x500, 0x7e, 0x101, 0x6, 0x5}, {0x100, 0x1, 0x52, 0xa, 0x10001, 0x43, 0x76c5, 0x5, 0x8000000000000001}}) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x8402, 0x0)
r2 = setfsuid$auto(0xee00) (async)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socketpair$auto(0xf, 0x8, 0xffffffff, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r3 = setfsuid$auto(0xee01)
setresuid$auto(r2, r3, r2)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/uapsd_queues\x00', 0x30000, 0x0) (async)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)='8', 0x1) (async)
openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x48900, 0x0)
select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000006, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0)

2m0.339146825s ago: executing program 4 (id=1891):
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x7) (async)
close_range$auto(0x2, 0x8, 0x4) (async)
socket(0x2, 0x80002, 0x73) (async)
socket(0xa, 0x2, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
unshare$auto(0x40000080)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4091}, 0x800)
ioctl$auto_IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x103, 0x21b}) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
access$auto(&(0x7f00000002c0)='./file0\x00', 0x5) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0x60800, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xd, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca690c900", @raw=0x5}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) (async)
close_range$auto(0x0, 0xffffffffffffffff, 0xb)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
r1 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) (async)
r2 = setfsuid$auto(0xee00)
r3 = setfsuid$auto(0xee01) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
bpf$auto(0x5, &(0x7f0000000000)=@link_create={@map_fd=r0, @target_ifindex, 0x1ff, 0xfa4, @perf_event={0x1}}, 0x40007)
setresuid$auto(0x0, r3, r2) (async)
write$auto(r1, 0x0, 0x881) (async)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)
r4 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x600000, 0x0)
ioctl$auto_BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000080)={0x0, 0x8000, 0x29})

1m59.894340918s ago: executing program 4 (id=1895):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/comedi\x00', 0xa0000, 0x0)
pread64$auto(r0, &(0x7f00000002c0)='\x04\xefr\tbgc/\xd0\xe1\xf7$/tg/,s\b\xf5\xf7\x0f\x03\xd5\xef\xbf\xf6j\xe2\xed\x7f0\b\xff^\xe3th\xd2\x1bA\xba&\xba\xd0\xbb\xca\xb0\xa1\t\x00\x00\r(\xccF\xeeg\n\x00/\xa9l\x9cd\xcf\xff\x97=\xf4\xa1\xca\x82j\xf2\x17\t\x00\x00\x00\x00\x00\x00\x000\xf76\xb96\xd1\xb9\xde\xe2\x167\xc5\x94\x00A[B\xd9\x82\xaa\xc5\xfcoB\xfe\'\xfbI\xc9\xcb\xc3\xc1\x1e6~\x81\xb9\x0ff\x8e\xd3\x06\xba;yX\x966\x97#\xfb\x8d!F\xfc\x99\x86\x1d\xbb\xaf(\x92\x887\x01Z\xa7\xe3Y\x17\xd2#\x8aO\xef\r\xfa\xe0\x18IiI\xaek\xa9R\x02N;+@\x12>\'\x1a\xa6i\x93\x8c\x16BO@ \xb5\xd9\xd0\xb6S\xfc\x17\x11\x04\x8b?$\xean\xa1|D\xbbV%\xde\x87\xd1@\x00\x8cM\xfdr\xc9\x86\xbaq', 0x100003ffd, 0x6)

1m59.641393095s ago: executing program 4 (id=1897):
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44d, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x9, 0xd)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000000), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0x10, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x1, 0x0)
socket(0x25, 0x1, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880)
mmap$auto(0x0, 0x2000c, 0xde, 0x20eb1, 0x40000000000a5, 0x8000)
ioprio_set$auto(0x6, 0x7fff, 0x2646)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0x29, 0x2, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
r2 = getpid()
mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PHY_GET(r3, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f2ffffffd2f7be242f417a9050720aff7d4098f08da449b3cccfe2ca6869df9c9c2bd8f0311e4ea40fe9075471fb0c266820c0683d24d9f451999f0306680e43c4bf8c5c1d500657b692925fd13497dca75125dcb694060037ff59d2641b60a6ed3baa69f8e4b0fea4ba316184", @ANYRES16=r4, @ANYBLOB="010326bd7000ffdbdf252d000000"], 0x14}, 0x1, 0x1000000, 0x0, 0x2404c012}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'batadv0\x00'})

1m58.673498678s ago: executing program 4 (id=1901):
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}})
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x81)
write$auto_buffer_percent_fops_trace(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0)
read$auto(r4, 0x0, 0x20)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3)
writev$auto(r3, &(0x7f0000000100)={0x0, 0x1d24}, 0x8)
bind$auto(0x3, 0x0, 0x9)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)

1m58.353586031s ago: executing program 4 (id=1902):
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(r1, 0xc0304d18, 0x8)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x711440, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
io_uring_register$auto(0x2, 0x1d, 0x0, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)
mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6)

1m43.379393164s ago: executing program 33 (id=1902):
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(r1, 0xc0304d18, 0x8)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x711440, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}})
io_uring_register$auto(0x2, 0x1d, 0x0, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)
mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6)

17.14593209s ago: executing program 3 (id=2295):
r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000280), 0xc0000, 0x0)
ioctl$auto_RNDADDTOENTCNT2(r0, 0x40045201, &(0x7f00000002c0)=0xfffffffa)
futex$auto(&(0x7f0000000100)=0x200, 0x86, 0x2, 0x0, 0x0, 0xc)

16.933949819s ago: executing program 3 (id=2298):
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x3, 0x2)
socket(0xf, 0x3, 0x2)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0)
sendfile$auto(r0, r1, 0x0, 0x4)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/ff\x00', 0x300, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/225, 0xe1)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
ioctl$auto(r3, 0xc0304d18, 0x8)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x501000, 0x0)
ioctl$auto(0x3, 0xae41, r4)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xc0000080, 0x2000400, 0xfffffffffffffffd}]})

16.323711536s ago: executing program 3 (id=2301):
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a})
sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000340)="a19d6757db9783eea2e5518fd316cfa13e4e799164e592d55a3cee8678957c69e8a685b8256de81b09b6ff6ad60e7b8c42b089a40f5fb57435da6eb9318f2564b6234dd50882a17c7e41fcba2b1a76a2f6b68d798e86bd66115df87ee5e3a4465fda034d6e8486f368b610b206269bb1a1dab4f5694b47a3a4373c4a06cd7ed55094d6e9e30075daeb5f2d3df89e652bfdcb198f1af39b8ce7597ec0c81d5df92a", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x5}, 0x10000005}, 0xffffffff, 0x100)
select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x80000000008, 0xffffffffffffff4b, 0x100000004, 0x15, 0x80000001, 0x1, 0x5, 0x5, 0x8, 0x40000000000000, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x8000000000000, 0x4]}, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
mmap$auto(0x1, 0x2e, 0x4000000000df, 0xeb1, 0x401, 0x8000)
capset$auto(&(0x7f0000000040)={0x19980330}, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/mqueue/msgsize_max\x00', 0x701283, 0x0)
io_uring_setup$auto(0x1, 0x0)
poll$auto(&(0x7f0000000040)={r1, 0x7, 0x8}, 0x80, 0x400400)
setsockopt$auto(r2, 0x10f, 0x0, 0x0, 0x6) (async)
setsockopt$auto(r2, 0x10f, 0x0, 0x0, 0x6)
sendfile$auto(0x1, r2, 0x0, 0x2)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x14100, 0x0)
socket(0x11, 0x3, 0x9) (async)
r3 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000180)={0xb213, 0x2c, 0x800}) (async)
capset$auto(0x0, &(0x7f0000000180)={0xb213, 0x2c, 0x800})
sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000140)="7fd71e1fb078cb6b932de6c7a8eff5d125e6ccac7447c63bca88f7300b868a080b1e8ca93b331ae10e000000efe8", 0x5aa, &(0x7f00000000c0)={&(0x7f0000000280)="59e3373596806dce3380d33bdc770100f75e13cae2619b132cd07275600b76deab670a39db9d01c86374d1d534c2ff2d4ae48029d9998505cc05000000d5f286e33c3bdb1aa3a8db421d9fac68ea3ce5d0eb90368650d747bb6a0d2b76fec4301963d0fae655e8d890dc079ff67de66381e8952396e7155662444780becce2b01290f545c892aed7ba3f50f290a5ac7f15f418c1121cf0e3913e96439e44ed333b546e79711ec7a9df58da30cc5810ed56cd3095aeed", 0xffffffff80000001}, 0x1, &(0x7f0000000180), 0x1, 0x7}, 0x4}, 0x2, 0x4) (async)
sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000140)="7fd71e1fb078cb6b932de6c7a8eff5d125e6ccac7447c63bca88f7300b868a080b1e8ca93b331ae10e000000efe8", 0x5aa, &(0x7f00000000c0)={&(0x7f0000000280)="59e3373596806dce3380d33bdc770100f75e13cae2619b132cd07275600b76deab670a39db9d01c86374d1d534c2ff2d4ae48029d9998505cc05000000d5f286e33c3bdb1aa3a8db421d9fac68ea3ce5d0eb90368650d747bb6a0d2b76fec4301963d0fae655e8d890dc079ff67de66381e8952396e7155662444780becce2b01290f545c892aed7ba3f50f290a5ac7f15f418c1121cf0e3913e96439e44ed333b546e79711ec7a9df58da30cc5810ed56cd3095aeed", 0xffffffff80000001}, 0x1, &(0x7f0000000180), 0x1, 0x7}, 0x4}, 0x2, 0x4)
socket(0x10, 0x6, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, r4, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

14.839813497s ago: executing program 3 (id=2306):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfff)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x8000b, 0x0)
ioctl$auto(0x3, 0x5411, 0x38)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0)
mmap$auto(0xd55, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sigaltstack$auto(0x0, 0x0)
sigaltstack$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x1, 0xb4d, 0x4)
mmap$auto(0x0, 0x1020008, 0x9, 0xeb1, 0x401, 0x102)
clone3$auto(&(0x7f0000000000)={0x2, 0x1, 0x7, 0x1, 0x1, 0x87, 0x1000000000008, 0x8, 0x9, 0x9, 0xcb9}, 0x40000000000000aa)
r2 = socket(0x29, 0x5, 0x20000)
socket(0x5, 0x2, 0x10080)
syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r2)

10.724700569s ago: executing program 3 (id=2317):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/i8042/serio1/id/type\x00', 0x20400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3)
mlock$auto(0xfff, 0xde7f)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_suspend_late\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
r2 = io_uring_setup$auto(0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0)
ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0xab74, 0x2000000000200008, 0x400018)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x0, 0x0)
write$auto(r4, 0x0, 0x0)
pwrite64$auto(r4, &(0x7f0000002500)=']\x00', 0x3, 0xd)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r6 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
kill$auto(r6, 0x11)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0006, 0x17)
setsockopt$auto_SO_NO_CHECK(r2, 0x200, 0xb, &(0x7f0000000000)='/sys/power/suspend_stats/failed_suspend_late\x00', 0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

9.368137954s ago: executing program 3 (id=2324):
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000000)=0xd2a9)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000040)=0xffffffffffff8b38)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000080)=0xb)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000000c0)=0x8a58)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000100)=0x6)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000140)=0x101)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000180)=0x7f)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000001c0))
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000200)=0x8000000000000000)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000240)=0x1000)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000280)=0xbbc7)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000002c0)=0x2)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000300)=0x5)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000340)=0x9)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000380)=0x1)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000003c0)=0x9)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000400)=0x8)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000440)=0xa8dd)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000480)=0x2)
shmctl$auto_SHM_STAT_ANY(0xfffffffc, 0xf, &(0x7f0000000680)={{0xffff, 0x0, <r0=>0x0, 0xfffffff8, 0xe, 0x8a15, 0xb2b0}, 0x10001, 0x5, 0x3, 0x8000000000000001, @raw=0xb1ce, @inferred, 0x7, 0x0, &(0x7f00000004c0)="505f287ae936cd49b450e2eba272a888c8d1faebe96d21047fe846b4b6ce95df34b582477bb3cd0fe65108a1de27a205acb19cc20225e14eaca32b9ae7b85d1ffd35a9020664be98c8ac748ce433c0a2863eab14d581a6a1d7728d12d64a0500a1ea1aca02af02a99d268ccde559d94620143fd3195ddb048f4cc8b0f0f2e2e8baa3d2", &(0x7f0000000580)="f19daca74772dc0c2aa3b7978b8a00c065f628b2b9eff607ac85525b4f95b9697edeb7733e790b28d2e0cbd8067f51e8fcd9b599263112d6ba6e61de30f765370761ae22416fd0d9e94a48e7e0311fc381f415dd991707991e2fb532e89728b8addc9b10f1470e2a91c67b8afa40d2f8f344686d6b3acf3939ba7bc8a42897f87a89695f735ab1f84af7a6fe3e093ab01b7ab40e3a2ddc912655b4ba1fb3755d47ee90999cb7147a865d2c152e59d109b246b5b739446b800fb15a140eecf42a2b40"})
r1 = waitid$auto(0x6, 0xffffffffffffffff, &(0x7f0000000780)={@_si_pad}, 0xad1, &(0x7f0000000800)={{0x1, 0x6}, {0x6, 0x8}, 0x4c4b, 0x624, 0x1, 0x2, 0xa8, 0x6c9, 0xb, 0x8000, 0xfffffffffffffff8, 0xeae1, 0x9, 0x45, 0x8001, 0x6})
msgctl$auto_MSG_STAT_ANY(0x8, 0xd, &(0x7f00000008c0)={{0x7a92, 0xee01, r0, 0x80000000, 0x3, 0x6, 0xa5}, &(0x7f0000000700)=0x8, &(0x7f0000000740)=0x40, 0x9, 0x0, 0xff, 0x79b861e0, 0x2, 0x0, 0x7, 0x4, @raw=0x3, @inferred=r1})
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000940)=0xccb0)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000980)=0x47cd)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000009c0)=0x1000)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000a00)=0x80)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000a40)=0x8000000000000000)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000a80)=0x40)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000ac0)=0xf2)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000b00)=0x2)

7.653912238s ago: executing program 5 (id=2330):
listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000024, 0x0, 0x4}, 0x0, 0xf4240, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x1f40)
sethostname$auto(&(0x7f00000002c0)='\x00', 0x5) (async)
sethostname$auto(&(0x7f00000002c0)='\x00', 0x5)
writev$auto(r0, &(0x7f0000000040)={0x0, 0x7}, 0x1ff)
bpf$auto(0x7, &(0x7f0000000140)=@link_detach={r0}, 0x306)

7.066470967s ago: executing program 5 (id=2332):
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
bpf$auto(0x0, 0x0, 0x6f4)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7]}, 0x1fe, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14)
r3 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc804)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0)
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x400280, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0xb, 0xd, 0x1, 0x948a, 0x3, 0x15f4da07, 0x3, 0x3, 0x0, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x80002, 0x8]}, 0x0)
sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff)
select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb})
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x80000, 0x0)

5.072630562s ago: executing program 1 (id=2340):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9ae, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0)
sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x128, r1, 0x21, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0xfe, 0x3, "46c72c4abd14873f88ca3ea0e13e3967bd43f333721006fd5ab79ea62cf3ee561a1c07a09a5ff131ea7e10cbe836d84915a293b95440c27a5cc71a790159dbdd083f5440b9f296249dd6edf04500d88edf5a28bcade295b21d940a5797d094f0963d1c1fc7f93926c6c941d5a2e0ed7d9c7c41fd87761a624b8d4bbbb730c81d48587da0dd7add660246d5ec7a5cac73f2d19c2792132496ccbb230e56d2980f646f656d9545e7a2fd4e910075fc21a7245f97f612a1b72e2416474174a7028fe64932b6400eea75bf0e84b904541572d26bcde34b08f755032143aa6cd2f6036db0036f4bc7dd9e80348731e7336141f828acfb23d9664c96b6"}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x24040004}, 0x0)
r3 = socket(0x18, 0x5, 0x1)
connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r2)
sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x3}, @ETHTOOL_A_PLCA_ENABLED={0x5}, @ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x3}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x212}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x2204c080)

4.907870746s ago: executing program 1 (id=2341):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101, 0x0)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x40902, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', <r2=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022bbd7000fcdbdf251b0000000c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00028008000200a64b401c2dc8a3ea91b83bebaec5cc665d654481737b1f4cb08c0e08429b08237b8c06c4243db0d1515147854a26e72cc252011eea6ed2c9fed0699c32a7d55a93f5a3bfd89f47a332d4f12a0ac1d3e9a076952a2323cfeabe0345d80a789dc1615968f241bc9cdf7f2d06d3b9", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x44)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0)
read$auto_proc_pagemap_operations_internal(r3, &(0x7f0000001540)=""/209, 0xd1)
writev$auto(0xffffffffffffffff, 0x0, 0x3)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/udp_slot_table_entries\x00', 0x80302, 0x0)
sendfile$auto(r5, r5, 0x0, 0x1f82)

4.757052887s ago: executing program 5 (id=2342):
ioprio_set$auto(0x3, 0x0, 0x4b34)
socket(0x2, 0x2, 0x0)
mmap$auto(0x0, 0x5f04, 0xffffffff00000001, 0xeb3, 0xfffffffffffffffa, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2000c, 0x4000000000e2, 0x100000000000eb1, r0, 0x8000)
unshare$auto(0x40000080)
quotactl$auto(0x9, 0x0, 0x62a0, 0x0)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00'})
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
rseq$auto(&(0x7f0000000040)={0xa63, 0x100, 0x5, 0x30, 0x7f, 0x6, "1762b857465314290780b009b7cb55559caf72e932b6493c790ab44c41b464dc40334b"}, 0x4a, 0x8, 0xf)
futex$auto(0x0, 0x86, 0x8, &(0x7f0000000280)={0x40000000000800, 0x9}, 0x0, 0x7)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
madvise$auto(0x1000000, 0xffffffffffff0006, 0x17)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
select$auto(0xa4d, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x8, 0x208, 0x1, 0x0, 0x4000000008, 0x15f6da12, 0x3, 0x800080000010d08, 0x10000000000000b, 0xfffffffffffffffc, 0x3, 0x6d3f, 0x6, 0x4, 0x5]}, 0x0)
r2 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x250, r2, 0x8000)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2)

4.401240425s ago: executing program 1 (id=2343):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
close_range$auto(r0, r0, 0x0)
socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r1)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x2d, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
r3 = socket(0x1d, 0x1, 0x7fff)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r6 = socket(0x18, 0x5, 0x1)
connect$auto(r6, 0x0, 0x3a)
syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r6, 0x0, 0x30004850)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r7, 0x4b47, 0x1)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
getsockopt$auto(0x3, 0x11d, 0xb, 0x0, 0x0)
openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x426a2, 0x0)

3.776885493s ago: executing program 2 (id=2344):
madvise$auto(0x0, 0xffffffffffff0005, 0x11)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x101000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0)
sendfile$auto(r1, r1, 0x0, 0x5)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003200)=""/64, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x154, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0xe2, 0x3, 0x0, 0x1, [@typed={0x4, 0x4c}, @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="bc8f57f07be82c4eb718634c5f871d7d86053aaff92461cc8243122e123faac5823c4836757c989001a5ee2745c9f51a287a47c15c3cecc8eb0f33d264e58d7c56a0b8830379c8e7d99c04562bc4a5c0d23a4bba038a46e05c9a8467afe949fc96d941b431085d5d37dca49c2aa0a0e04fda2bd6a440c51428074e8861cce3f473a53083b6efff747a8292e47797aae78ef610e59e7ba8a81f09334754b52dd7c243762e3e8af61dcc161f36eff842017e523ceeb1294f1a4721e6853b2a31b675e1b7d3248e"]}, @MACSEC_ATTR_OFFLOAD={0x5a, 0x9, 0x0, 0x1, [@nested={0x8, 0x5a, 0x0, 0x1, [@nested={0x4, 0x44}]}, @generic="f0e96aed2acc2432eb25499f3e0a6e06814b6eb6fb381fb1ab338f74149f8049aca21b2031b8be6211f9270c06fdc3050bac77d7171985a0da1c39bd3bc5cb906b1f8dea9f08f1f066b1a1bf031d"]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8010}, 0x400)
madvise$auto(0x0, 0xffffffffffff0005, 0x11) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x101000, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) (async)
sendfile$auto(r1, r1, 0x0, 0x5) (async)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003200)=""/64, 0x40) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x154, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0xe2, 0x3, 0x0, 0x1, [@typed={0x4, 0x4c}, @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="bc8f57f07be82c4eb718634c5f871d7d86053aaff92461cc8243122e123faac5823c4836757c989001a5ee2745c9f51a287a47c15c3cecc8eb0f33d264e58d7c56a0b8830379c8e7d99c04562bc4a5c0d23a4bba038a46e05c9a8467afe949fc96d941b431085d5d37dca49c2aa0a0e04fda2bd6a440c51428074e8861cce3f473a53083b6efff747a8292e47797aae78ef610e59e7ba8a81f09334754b52dd7c243762e3e8af61dcc161f36eff842017e523ceeb1294f1a4721e6853b2a31b675e1b7d3248e"]}, @MACSEC_ATTR_OFFLOAD={0x5a, 0x9, 0x0, 0x1, [@nested={0x8, 0x5a, 0x0, 0x1, [@nested={0x4, 0x44}]}, @generic="f0e96aed2acc2432eb25499f3e0a6e06814b6eb6fb381fb1ab338f74149f8049aca21b2031b8be6211f9270c06fdc3050bac77d7171985a0da1c39bd3bc5cb906b1f8dea9f08f1f066b1a1bf031d"]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8010}, 0x400) (async)

3.54580486s ago: executing program 2 (id=2345):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000)
epoll_create$auto(0x4)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x18, 0x2, 0x1)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x80, 0x9, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
request_key$auto_KEY_SPEC_THREAD_KEYRING(&(0x7f0000000080)='\x00', &(0x7f0000000100)='-(\x00', &(0x7f0000000140)='ovs_flow\x00', 0xffffffffffffffff)
setsockopt$auto_SO_LINGER(r0, 0x6, 0xd, 0x0, 0x6)
syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff)
readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9)
select$auto(0xfffffff7, &(0x7f0000000180)={[0x4, 0x538, 0xf42, 0x1, 0xffffffffffffffff, 0x6, 0x2, 0x5, 0x0, 0xfffffffffffffff6, 0x8, 0x2, 0x7, 0x8, 0xf, 0xe59]}, &(0x7f0000000200)={[0x0, 0x100000000, 0x5, 0x7, 0x1, 0xfffffffffffffc00, 0x8, 0x6, 0x6e, 0xfff, 0x4, 0x10001, 0x2e2, 0x3, 0x0, 0x20b]}, 0x0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000)
sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={0x0}, 0x1, 0x0, 0x0, 0xf0}, 0x0)
socket(0x1e, 0x1, 0x106)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0)
bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0)

2.978530345s ago: executing program 1 (id=2346):
getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0, 0x0, 0x1000)
rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@_si_pad})
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000380)="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")
timer_settime$auto(0xffffffff, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10008}, {0x9, 0x2}}, 0x0)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000))
fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x6004000)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r2 = socket(0x10, 0x2, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1b"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
mmap$auto(0x0, 0x400007, 0x4, 0x9b72, r1, 0x4)
r3 = prctl$auto_SIGCONT(0x401, 0x12, 0xffffffffffffffff, 0x2, 0x2)
getsockopt$auto_SO_MEMINFO(r3, 0xfff, 0x37, 0x0, &(0x7f00000000c0))
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0)
write$auto(r4, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d)
getsockopt$auto_SO_ACCEPTCONN(r3, 0x800, 0x1e, 0x0, 0x0)
read$auto(r1, 0x0, 0x8083)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
mmap$auto(0x4, 0x9, 0x2000000000000dd, 0x9b72, r1, 0x7ffd)
unshare$auto(0x40000080)
socket(0x29, 0x5, 0x0)
mmap$auto(0x100000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
ioctl$auto_EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x80000001]}, 0x0, 0x0, &(0x7f0000001040))

2.590537358s ago: executing program 2 (id=2347):
socket(0xa, 0x3, 0x3b)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
open(0x0, 0x22240, 0x55)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x2000000000000, 0x8}, 0x7}, 0x3, 0x800)
bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080))
unshare$auto(0x40000080)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_SOUND_MIXER_READ_RECMASK2(r0, 0x80044dfd, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x7, 0x8400008, 0xdf, 0x18, r1, 0x7ffb)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd15/queue/io_poll\x00', 0x400040, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r3, 0x1, 0x33, &(0x7f0000000280)='o\x00\xfb\x00\x00\x00\xe4(\xe5\xb9Y\xacS\xbe\xcc4\xf9!\xd0\x92<\x9bf\x01j\x83\xb3\xd7a.\x92\xf5\xb0j\xd3\x01\xfe:\x93\xed\xe4\x16\a\xcemS\xeb\x93D\b\xdb\x0f\x9f\x903\xad?\x17\xddF2\x7f\x15~\x94\x1d\x1c\x83\x03\xb9K\x04\xd3\x99\xe6[\xf8\xddn`\xdb\x19\xa9R\xc2\x00\x8a\xc7>\xfbC\x9e\xcfY\xaa\xc9\x99_\x8d\xc14o\xd9\x97\xf9\xb6\x80\xc0Tf\xea\x82\x8f\x82^\xf7\x01\x894?\xf7\xb8\"\x9dd/\x15\xf5\x013\x84\xe8\xdev\x8eW\xfaym\x8a_\x0e\xc5\xde\x90\xc4$\xbb\xaa\x839]\x14m{R,i\x80\xecM.\xa9\'<\xd6\xc8\xd6\xc4\x1b\xd2\xd6\x193<\".\x85\xea\xb7\x9d\xa3r\xca\xeeP\xdeu4\xf2s\x9b\x03\xbex.\x17\xf2\xa4\xba\x9a$\x1f.e\v3.\xd1{}\x94\xd9\xc4\xf1\xa9\x9aK\xbc?0x\xa1G\xf5\xd3K\xf7\xa25=\x9f+\x1d\xe7\x00', 0x10)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fanotify_init$auto(0x65, 0x2)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)

1.710705236s ago: executing program 5 (id=2348):
r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x0, 0x0)
r1 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x8000, 0x0)
close_range$auto(r0, r1, 0x101)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x0, 0x0)
ioctl$auto_EVIOCGID(r2, 0x80084502, &(0x7f00000000c0)={0x5, 0x3, 0x2, 0x5})
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyuc\x00', 0x400000, 0x0)
sendmmsg$auto(r1, &(0x7f0000000300)={{&(0x7f0000000140)="9e57a3ac9bfa3282db112405706e7a9c71810faa6e8cb450080da6009ddc7ad8e534c1ae0f77c04afe7bef13354f3bbecc", 0x9, &(0x7f0000000240)={&(0x7f0000000180)="59d0aee012b5b333c840e1e87058025ba749b116445b3a46bfad346aca91a03dc5459a4253f15a3b8c276671733fc95e9fde12d7b1357b2dcb3978ce59edda9ef2de77258286472ef99024df86e71a64fc8ae6f7afdfb7762bc42f8b83952353e22bbc83609aede065df109f89067c850b8a89984d8c2cc6f7385ce77ba852a1265287a38911b2f0cb0d4f40cd477e58b25b292a9eadc0a6762f10c31a6672f328fd5b1d63c91ecf29a722ed219d", 0x6}, 0x5, &(0x7f0000000280)="f722a334d9e98362afed03da7feab94727f287c848b34136fa0d289fd107834839820f95c156cb77419e25f682c231d08312dce858cfb3a41be989f04aa5e50e055890caad0a8ccefc5ea6a3e9725401d8ef597a88e89c9df59856e0f10c4e930b9c0cefc2da2799", 0x0, 0x3}}, 0x230, 0x3)
ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000340)="c6adef59daf32c872604bcb8bd50b80a0f39a5cf95381486b0fe4aba9f0c2f76c0bd335b330969a6412e66893bfae2a3c66ff65cf4f900193cc22bf32a572eb42b25d5565345121daa60fa3c0e3d53167d8e915bfb4810421d06e9f9d486bed3e8acf7d264b8003efb96e84fafbeb950bccc9dd0498f1463d7b995b5cd69")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = ioctl$auto_NS_GET_USERNS(r1, 0xb701, 0x0)
ioctl$auto_TUNSETVNETBE(r5, 0x400454de, &(0x7f00000003c0)=0x6)
r6 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000440), r4)
sendmsg$auto_CGROUPSTATS_CMD_GET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}]}, 0x34}}, 0x804)
ioctl$auto_I2C_TENBIT(r5, 0x704, &(0x7f0000000540)="86223b4135729e347880f20c0834c4db6838ba6feb85919af27f92a82a3d81c69cf45a84015fb963e18a4ed399f94e04e9941fc1c4c821491439aec0bb94d712f1edf7a621f591a7828412b0f4462389432ce7416a07ce77f60375acc0f7d3f63acde6a06f004aed5f6b421a2547e4bcc15c31d62f149dcaef46d2195554199efb2445c27cc4a189b08851a27112dadf6ea63c7de84f2048a42dbf74795043915402ee6dee1e8a5558f5f110464358595c5f463ca5d425d289909de54b8a18469ffa392437337584fbcc163c02a129c221ca31209c486adf026fad8c9cc0baa4a8103b2095d99c734f3c58953d152deac4")
lseek$auto(r5, 0xf7f3, 0x3ff)
ustat$auto(0x81, &(0x7f0000000640)={0x0, 0x266, "295c32492ac6", "2da6e1426dd0"})
r7 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000006c0), r4)
sendmsg$auto_WG_CMD_GET_DEVICE(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x51ff6da186295b66}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PUBLIC_KEY={0x7a, 0x4, "238eed25eb28e56dd012b86439e5a2c713566e55602618701aab78cdaf85dfa5e8832f844069e24abb3c669ed63689bbbd8a9361983efbc3f3acf2730250c756c8478153ef45aff5fb5f24e29e2660e77460edef0035b0078e64fc812d4b9c01c45b6d46ecedc2b43395acca58f8914a7404ea1de554"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0)
recvmmsg$auto(r1, &(0x7f00000009c0)={{&(0x7f0000000840)="978493713263cd0b0cf082b1f2f2674f929b3e259ac74b5bba2aafbe38c4e553e1581c623731335d8de645ae6f7a29cfc0201e2bb198", 0x0, &(0x7f00000008c0)={&(0x7f0000000880), 0x1}, 0x6, &(0x7f0000000900)="7e6beeedd8477ee62168fd3582496fd02923bd045e4444fd49659b1b774f0988e566025995f96761707292d7ba0ae9a935f25ccc9ee8a65d5beb68604358cd3966ab52fb52c236d4eb0b0d73b127ab4d518ab35ca14ce249b39080cd2e7edf6bc43e9952df456bec9ead0442b0201cde0a992a13287140b63b8efee91446f72dcb30eeac0a7fee0d139e3bdc", 0x6, 0x3ff}, 0x1}, 0x4, 0xfffffff3, &(0x7f0000000a00)={0x832})
r8 = open_by_handle_at$auto(r0, &(0x7f0000000a40)={0x6c, 0x7, "973938ad5593fc94eea8545b62b462a0f4eb5255e2cdaa026bf194c7230e751c7a90f7850627e3446a3de370c03697f9b52284ac817d4bf6ff58081c9b0b4c5994ed9701292293d9fa4bc3c9f97ce0e122268b4ac42f7fad0f2d4fba5164e6a0b115c1cb075bca7f2fe68b15"}, 0xffffffff)
getdents$auto(r8, &(0x7f0000000ac0)={0x8, 0x0, 0x3, "7ad49a649af4db02a76d30afdaf6b8569b7395cb3d70636865f97458c61f31137651b5048c0a3b4844e5a6bc8f7a8cd3ef6a958eecf1c2fd63f9cb38540caae45f102db611d843fd9d32e924d69143237b45d07327e76af1b58781d32a952e192e7d1b96b5f4f57a33183447c61d379b83f739a41a86b5bc02a2e9ff39ce7c890e6b449f2353590a6fc6c06d5b94a6f44280bf49213e"}, 0x9)
shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f0000000d00)={{0x7, <r9=>0xee00, 0xee00, 0x2, 0x1000, 0x3eac, 0x3}, 0x0, 0x5, 0x4, 0x2, @raw=0x80000000, @inferred=<r10=>0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000bc0)="5b7d5254091d6b2ec23cad5b8fd09954b45a686448a7772aa8e2dd789c9387c7397d014acae48d0932b82f6d19a0b756b42ebf74195ebf9a3d7f2dd0f9e72888a3bdad1b6450e6b1cdcb429045894d38169bb0eaebe3f737332695854a645ed338", &(0x7f0000000c40)="cb521eeca5b977e977838f645ad11d08df9af0d74cab958d364d6321aad0006daded62e87115cad500607dc85dc279f8bead656441e23b5c56b92cabbecd489e7a34d8869d41b131586fdd38d903d03de65028ed7e4eaaefbf967b877bf404f50e41b55b4906c8c1b1d9eab029787a79ca3ee561fb5b77f43db50d82c55a1eddb7bad1abc6520860a1d4f7cb274ac1"})
sendmsg$auto_OVS_FLOW_CMD_GET(r8, &(0x7f00000013c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000000d80)={0x5fc, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_ACTIONS={0x41a, 0x2, 0x0, 0x1, [@typed={0x4, 0x23}, @generic="ce74bcece42f74be65b0e58c7ada683add0ef3154939810a312303398f270d152b3985359759f7cb2cee2790765b640c2c3b70486ef7a2204181aa64c78a26e305e2c8daeeeb16d143f3eed9e4e265f5602e68c6aa3e72a12bbb4d8bc55a3ee9f20d95dd3d4d082c010d638df9543fc3df4d8f9b4c9f29943f740a27b7dd671dbd2b3e4f5f69be0fe29eb7d4a2f01dc5b19bc7930269ca86ba15fb47ac5c865af48e4759798320e573227a4ba41318afb3b0c8e573e3a03bc8cd659e5463726a53410615eeb4ce81fad082e16beb6a4d751d521ed21afe8621867c939ce44be8eefdcbab13f8db45b15ffd", @generic="8c91f93151f253dc288bd1f752da7782f17d9b5703975efdbc29c6d69c3021de483a4730281e8cd81bc7", @nested={0x21d, 0x124, 0x0, 0x1, [@nested={0x4, 0x13b}, @nested={0x4, 0x96}, @generic="738776b36d28c847bca102e439216aa33e3ec2d6e9adff5ea9bc1112a11b07226d86f410b4b0b1924e675c53336d3316170bf541c9fead7c1e14e85acba3f91ac110a8ff76a0273258f9ad6a20d3d5efdfc11c785bf9bfd2ac800f43b4c838392a6a6e2d8e281a01c0085b", @generic="ce8c4cfdb1e890963cd22d0035139b724611e5e132000971b114c2b0ac37ace5ac2c76cb0b754aae51df39ff128b5fc51e4bc7b1df1252b867d2d99fa54593b43bb5f9af329a3fde6931e3df5bbef97d4de2f573c2451246b633f4dc5315f6075b06be1f17a544d6a6c7c957cc5951cfba191cef6bff863b6debd61178410c0487109f9375cd97ff4023176fc12f94c53fa7554b7e1834c5ef2786d62c856598be8c5976a78ac9f59bbaae3f921b654255f793de24ada5", @generic="42d930cf775201939d48ee2eedc3a4c7dc87e9668557706da53f180a6c0384e214770cb486baca8a901c74b42bb11070a14f9bceaba17e3ab669e7007e3dc19ac19896e086a7b7111e0dd0638ebc90e0abfe7bfc5ca5045952a73c9adb9d2b1a107a086215a9d5d40b3920f6e056004c6062da407621f0d3e35432293376eda13fa2bd216dfd7cf3edb8cfa4c4ed7ffbd5436a2b00a9af836156358d8ece25c2aa670041321bf89987098b71f9c20f9ba7d77c8edec36df95a229182f986ddbbb57e264d5321519c84085ab974a38d8bbdf010fe6393801bac84df5ebc95caeb370f4b07e1f3c37ac480d8", @nested={0x4, 0xee}]}, @generic="20f93218abfcbbe13bde851871265ff5d68688781bf5f7e3bfcf91228313eb30eedf0df9a1", @nested={0xb8, 0x67, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x147}, @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xb1, 0x0, 0x0, @fd=r8}, @generic="bb1c6547e80699881a4a2ff9d4d4050fc397e5b3389796078959460eccfa144c10cf9500cc8d22f2489a214ee671e9a537a75d5be55dcddeee3f04307354e2ce35fc80123fc624cba053c2e07b9bb3782ddd7bb90a94e2aad6d14c540e29748aefe3c56698dc304a6616bac7098512716d194d631bad71dc76672a6236a3b39e487acadf1e1f3c25c7aeca93ce44852e"]}]}, @OVS_FLOW_ATTR_UFID={0x5}, @OVS_FLOW_ATTR_ACTIONS={0x1c2, 0x2, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @uid=r9}, @generic="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", @typed={0x14, 0xce, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x3a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@empty}, @nested={0x90, 0xe6, 0x0, 0x1, [@generic="b9760ee6c34e35c465ee1e14bd07e8802e8e75d1139dbbea9d67607dc73146946a7efd7a281f4b32d6abdefb8abc94a439116533715d16", @generic="e0cc640fac5d5158fd2f18395cd58c53b47bee6a9ee6202378bd3d59236d71d54f", @nested={0x4, 0x1a}, @nested={0x4, 0x6}, @generic="0b02606a2a2ae15f3f82769521ab12c6c571dfc8b7f8bf60bb6bd62c76b0353f7d4967b43177edb13fa8b84e"]}, @typed={0x8, 0xde, 0x0, 0x0, @u32=0x8}]}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x80}, 0x20040000)
syz_clone3(&(0x7f0000001600)={0x0, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480), {0x3c}, &(0x7f00000014c0)=""/133, 0x85, &(0x7f0000001580), &(0x7f00000015c0)=[r10, r10, r10, r10, r10], 0x5, {r8}}, 0x58)
io_uring_setup$auto(0xe, &(0x7f0000001680)={0x8, 0x0, 0x48e8, 0xffff, 0x8, 0x5, r2, [0xf6, 0x7, 0x5c], {0x0, 0xff, 0x5, 0x3, 0x2, 0x28, 0x7, 0x7, 0x8eae}, {0x1, 0xc98, 0x9, 0x8, 0x40, 0x800, 0x8a8e, 0x10000, 0x3}})
ustat$auto(0x8, &(0x7f0000001700)={0xfffffffa, 0x7, "8366976da7b0", "0acff20bfbeb"})
vmsplice$auto(r4, &(0x7f0000001840)={&(0x7f0000001740)="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", 0x1}, 0x565, 0x4f9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000018c0), r8)
sendmsg$auto_NFC_CMD_DEV_DOWN(r11, &(0x7f0000002c80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000001900)={0x132c, r12, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x400}, @NFC_ATTR_LLC_SDP={0x130f, 0x13, 0x0, 0x1, [@typed={0x4, 0x10c}, @nested={0x1127, 0xab, 0x0, 0x1, [@typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@local}, @typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0xbb, 0x0, 0x0, @uid=r9}, @generic="718d4e5c9856f4c7185500fd393a6990eddd73ae291de0c9624f9e834a5f0878a59816eb56a2fc92bd63acb6f3e36c38573ca65f89d1d804b283ad8cb0bfc08d3a577e981490a605f6a764d0ecb70dc8f1533fedb8800d7251ddfd938a3f66554376b3837e957c9e8960170d31e38c0e91a515c44fff97c908bf9ecf4705722be6c92960edd019828836a7cb8ce362bbfcaf211d80a6c45de025ffbc5d40b4bcc10410d910364ab01daac3dc476d7f5e72a377bb4802e1b3c8bcf0c85f43f2758fb80c249141393e2fff1b3fc231a67061b4b87e997747e7f0790569414a0fda3323560ac39ebae3167ba975ca3c5c5b724a2a", @generic="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"]}, @generic="70fb6ebf686b5d2f6f0a8b3d2632fdcb2c0b842c3844675538f23130e454730505182a2fda9b80e61ec89e2c7cc7343a1004ee05f32a2c85104db67949a0489d1f915ca3117fbde67c167cba2f7d8decc6579faea83b38e81ee60891891b0d8ddbe1710c218c5d63679275305a7a66f65b584034b12188c333bbd11b8e50a4bf562b76891b5bc02a0cb182f5ce3bc2fd92dbd85d1b858c7cd82b5ca3ee2f43ddf3f72cd7128d850f72b9b3be2653b912efdf7f8c15b3393cada55690441fbb5ce802b83b088116f5e6257d78f371ef93bb8bbd9821f055", @typed={0x1a, 0x14c, 0x0, 0x0, @binary="e9111132eae154ff85bcd48f58254a649691af0423ab"}, @generic="5b3a91e2695936b5d0fd6a8a00506851b9fa8ed7d606447ae0c0179b3b098a7d5104fef69162dfafcf236633ad6d9b4e8098a0f53bb75fc31936f636a346c367126a9fe81d23bc4c9be868bf1a7ecd86ec4b0a33d1419c362abee33f5183895c21422a9cb31d16dc924fbf5ce15886f82070e3c7ff0dcfc85c2f7dc0f159738cdead36156832630c837f6b1ef6e2feeb21ce620ef0e34df5c7cf0194c6d55700fb9657788a8ce95b90ddf40ad00d6bf369673dbd6cfaa3baa39c9b9d2b47fc07d6b8944c8bbe6d737c99dd496ad297339f6997677430a365d6d73a48a182b6496eedfad4", @typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}]}, 0x132c}, 0x1, 0x0, 0x0, 0x884}, 0x44000)

1.402177352s ago: executing program 5 (id=2349):
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r1, 0x170b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
io_setup$auto(0x80000000, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x20, 0x70bd27, 0x7, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x6}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x9}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x7b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sysfs$auto(0x2, 0xc, 0x0) (async)
fsopen$auto(0x0, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x2, 0xc) (async)
dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) (async)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe) (async)
socket(0xa, 0x801, 0x106) (async)
pipe2$auto(0x0, 0x4800)

1.168462576s ago: executing program 1 (id=2350):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x20282, 0x0)
ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, 0x0)
ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0)
readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87)

1.081741366s ago: executing program 5 (id=2351):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_target_port\x00', 0x2a001, 0x0)
write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x20)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r3, r3, 0x0, 0x2)
settimeofday$auto(0x0, &(0x7f0000000080)={0x9, 0x9})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0)
mmap$auto(0x9, 0x20009, 0xe2, 0xeb1, 0xf6f6, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
read$auto(r4, 0x0, 0x80)
socket(0x23, 0x1, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_MON_GET(r6, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)=ANY=[@ANYBLOB, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080)
mmap$auto(0x2000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100008001)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x250a, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9)
recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0)

860.570597ms ago: executing program 1 (id=2352):
r0 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy11/hwsim/ps\x00', 0xc857cd9b6ced5d23, 0x0)
r1 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x8, &(0x7f0000000080)={@siginfo_0_0={0x1, 0x400, 0x6, @_sigpoll={0x8, <r2=>r1}}}, 0x2)
read$auto_hwsim_fops_ps_(r2, &(0x7f0000000100)=""/17, 0x11)
setsockopt$auto_SO_RCVTIMEO_NEW(r2, 0x10, 0x42, &(0x7f0000000140)='\x00', 0x8)
read$auto_userio_fops_userio(r2, &(0x7f0000000180)=""/212, 0xd4)
r3 = socketpair$auto(0xc6, 0x744, 0x7, &(0x7f0000000280)=0xc0f)
read$auto_component_list_fops_(r3, &(0x7f00000002c0)=""/221, 0xdd)
r4 = waitid$auto_P_ALL(0x0, 0x0, &(0x7f00000003c0)={@siginfo_0_0={0xfff, 0x3, 0x1, @_sigpoll={0x2, <r5=>0xffffffffffffffff}}}, 0x8, &(0x7f0000000440)={{0x40, 0x10000}, {0x5, 0x2}, 0xb800000000000000, 0x3, 0x0, 0x2, 0x4, 0xded4, 0x8, 0x6, 0x4, 0x7, 0x10001, 0x200, 0x7, 0x10})
ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000000500)={0x8047, 0x0, 0x9, 0x3, 0x1, r4})
madvise$auto_MADV_GUARD_INSTALL(0x1ff, 0x5, 0x66)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'gretap0\x00', <r6=>0x0})
bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000580)=@bpf_attr_0={0x7, 0xfffffffb, 0x4, 0x8, 0x43, <r7=>r5, 0x6, "87ef985da960c3454e225bac8214c5bd", r6, <r8=>r3, 0x7, 0x80000000, 0x80000001, 0x1, <r9=>r0, <r10=>r5}, 0x1)
pread64$auto(r1, &(0x7f0000000640)='gretap0\x00', 0xc2, 0x5)
capset$auto(&(0x7f0000000680)={0x3, <r11=>r4}, &(0x7f00000006c0)={0x40000000, 0x5, 0x6})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r10, 0x40405515, &(0x7f0000000700)={@inferred=r4, 0x8, 0x42bd7a9d, 0x9, "c8be68c65ee89044f3a35cbdc2be4d8f9234ba289cfb5f54839e19662b70e502701b648ce555ea4821997900", @inferred=r11})
sendfile$auto(r3, r0, &(0x7f0000000740)=0x80000001, 0xb8fd)
getsockopt$auto_SO_TXREHASH(r9, 0x5, 0x4a, &(0x7f0000000780)='/sys/kernel/debug/asoc/components\x00', &(0x7f00000007c0)=0x7)
ioctl$auto_XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000800)={<r12=>0xffffffffffffffff, 0x0, 0x6, 0xfffffffffffffbff, 0x8, 0x4, [0x80000001, 0x2, 0x8, 0x0, 0x2, 0x3]})
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000c00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x2dc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_AUTH_DATA={0x4e, 0x9c, "d84e3e23414f715ab0385f121e3597c030a8fe1b760d9198efda79b96a4a60644c7989c41d960efc8925b95fdf65ee11375b06308434b41be10b92aa68e28b70378afdefbab6dd67bc00"}, @NL80211_ATTR_KEY_DATA={0x14, 0x7, "56e63a610671b3bc481f941b5588c353"}, @NL80211_ATTR_FTM_RESPONDER={0x250, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe2, 0x2, "2eafda90b4fccfc9bf5ee5cd27e482f498e15a60a8fa341ef57c22ce88d7542d60afa23ce70e83388cd97100584a2fdb84bff73d627c3365eb89217a564bb1bf0858e7d4bd9924f380c2d3d053fc7c0e595c775de8bd5bbbecee14fb18c045b35b11275df5a0ef29b1a88763f8a1e477e7516b016b0fe8889b1e25c202e382771ce2d7233169c8f6cbf3f1a5ca1333d990e903b67711b4f1a625287c9ece4268ed55d99690192e19077cfb8aec8845cea1a971c83a957a287fe65f0c73e1a778192805db432ee1acb97d80e642b56c693225bffb2308266b0024515ef75a"}, @NL80211_FTM_RESP_ATTR_LCI={0xf2, 0x2, "0119e55afbc245a542c6139e3e95afd59ebd1cef3999f77d8717e09f4a5dd9be4e213c056535ff3905bfe92bbe410f4adc99cb2913e184e78d0ff2d99b5175c434e08a083d9ebc4789ef772b0b3a2a24e6722a51160111ff51ea9b8be4c83937f2984584094c0336d07c1c8895ed697cc3392e735992d598c440f2dffcb34be25635cc4a023d95362383317c825f5e189c540ab97f9646be46ed9f014ddba7bf5bb69d6097ba315beeff8e74d751d5481f46d370afbe8a38e716a5809597fb08b9ef86b03316e0b444c9f58738133278d5ebcefc28b7381d3d7fd57d64415a12b69545b335e133f99e8109d53c06"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "9d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x65, 0x2, "8b78b83d3939c8e00b3085a5c74f57089c4a33a0557b2525bc732d700647bb3766462a8f6c6191990a95bd3e0ac8aa0123fc43fcc22a78480b23302082379ffbad48959fc898a29c427ddde6fcbfdd79c3f47b2404897538ff4631086c3c5865b2"}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
fcntl$auto_F_SETPIPE_SZ(r7, 0x407, 0x3)
ioctl$auto_TIOCCBRK(r8, 0x5428, &(0x7f0000000c40)="d0c66c8a50e4e11ebe466c9bd5e0e42b7fee91ee21715ef98a3e23f3c1a2268112117c0dad08e65cab0f6e6d12c795437f1287b5f57002f7f380b86474dc74c42e2ea0f9f72406ae9509d267fe9d77848cb0da01b56626e866ac6afa3e3064d9f7e4177b159debad5f37be72")
r13 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/txpower\x00', 0x200002, 0x0)
setsockopt$auto_SO_TIMESTAMPING_OLD(r13, 0x0, 0x25, &(0x7f0000000d00)='/sys/kernel/debug/asoc/components\x00', 0x7)
r14 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/nbd2\x00', 0x40000, 0x0)
lseek$auto(r14, 0x8, 0x7)
ppoll$auto(&(0x7f0000000d80)={r10}, 0x10000, &(0x7f0000000dc0)={0x5cf, 0x3}, &(0x7f0000000e00)={0x2}, 0x8)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000e40)={{@raw, 0xc, 0x7fffffff, 0x7df3, "99c04adb680e72717eff17b60c6edd0e48ca0c927425af219126a17d68e729184f5c027cef1b48e32ddec626", @raw=0x9}, 0x5, 0x10, 0x3c, @inferred=r11, @integer={0xdf1, 0x6, 0x2f6}, "2b74a7660cada62672b81c0ecb4af7c7a0b7b30290260821979fc81f0a53d2170a8a743c82a857044526ee9781df4f5e2f2f1db411fc4bbf26fa27cc6abc5b50"})
mmap$auto(0x111b, 0xb3d, 0x7, 0x14, r7, 0xffc9)
madvise$auto_MADV_GUARD_INSTALL(0x7, 0x8, 0x66)

633.053565ms ago: executing program 2 (id=2353):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
r0 = socket(0x2, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="22c7d29790cfdd5a742234b5b3479cdcfb27b587ba83f05c82932e7c03d0be26bcb4adb07d4136768505be82d75b5620ace04f2e101b81280e71027bb04368c2b382db1152158c13f2006e1a93d69fd3557ed0b61447d3ae072c52deeb8f1136544ee42b8c2c473aa05b0f2473ab3702c9098241051850f9ed192c7cf3e715128f8f1336273b8b5641adbd2db8e5d785c0dbd3355918179ba70dc2d192c32071ea1ff8bc4716a526fbbb04bb20edd0dcf4938c25dee8f2b4c80a3a48393b9a213593bb3363e3620cf7c32ca025d3e375a9d6aa6e9333f7005a9c21767241724abb0fc90a"], 0x40}, 0x1, 0x0, 0x0, 0x2404c041}, 0xc800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r5 = socket(0x2, 0x3, 0x1)
connect$auto(r5, &(0x7f0000000000), 0x55)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x924c3, 0x0)
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
setns(r7, 0x40020080)
write$auto_proc_mem_operations_base(r6, &(0x7f0000001100)="a7c1f7", 0x3)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0xfff, &(0x7f00000000c0)={0x0, 0x1feff}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311)

233.175054ms ago: executing program 2 (id=2354):
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
prctl$auto(0x1000000003b, 0x100000000, r0, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x100203, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000084)
pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x5, 0x0, 0x1ff)

0s ago: executing program 2 (id=2355):
getsockopt$auto(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r0 = socket(0x18, 0x805, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14be02, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
io_pgetevents$auto(0x8, 0xfffffffffffffffe, 0x4000003ff, 0x0, 0x0, 0x0) (async, rerun: 64)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-touch0\x00', 0xe0800, 0x0) (rerun: 64)
ioctl$auto(r2, 0xc0205648, r2) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0)
write$auto(r3, &(0x7f0000000080)='1\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) (async, rerun: 64)
sendfile$auto(r1, r1, 0x0, 0x3) (rerun: 64)
mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) (async)
r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async)
r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0)
ioctl$auto_UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000100)={0x8, 0x0, 0x695c831f}) (async, rerun: 32)
pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) (rerun: 32)
read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
madvise$auto(0x2, 0x200005, 0x19) (rerun: 32)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
ioctl$auto(r6, 0x41045508, r6) (async)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r7 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$auto_SO_PREFER_BUSY_POLL(r7, 0x0, 0x45, 0x0, 0x2)
io_uring_setup$auto(0xc, 0x0)

kernel console output (not intermixed with test programs):

e/0x2a0
[  416.946135][T11801]  kernfs_new_node+0x13c/0x1e0
[  416.946177][T11801]  kernfs_create_link+0xcc/0x240
[  416.946207][T11801]  sysfs_do_create_link_sd+0x90/0x140
[  416.946242][T11801]  sysfs_create_link+0x61/0xc0
[  416.946275][T11801]  device_add+0xb14/0x1aa0
[  416.946303][T11801]  ? __pfx_device_add+0x10/0x10
[  416.946325][T11801]  ? __pfx___might_resched+0x10/0x10
[  416.946349][T11801]  ? lockdep_hardirqs_on+0x7c/0x110
[  416.946393][T11801]  __add_disk+0x457/0xf00
[  416.946433][T11801]  add_disk_fwnode+0x13f/0x5d0
[  416.946471][T11801]  loop_add+0x903/0xb70
[  416.946500][T11801]  ? __pfx_loop_add+0x10/0x10
[  416.946553][T11801]  ? find_held_lock+0x2b/0x80
[  416.946592][T11801]  loop_control_ioctl+0x13e/0x630
[  416.946622][T11801]  ? __pfx_loop_control_ioctl+0x10/0x10
[  416.946658][T11801]  ? __pfx_loop_control_ioctl+0x10/0x10
[  416.946688][T11801]  __x64_sys_ioctl+0x18e/0x210
[  416.946729][T11801]  do_syscall_64+0xcd/0xfa0
[  416.946763][T11801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.946789][T11801] RIP: 0033:0x7fa81558f749
[  416.946810][T11801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.946835][T11801] RSP: 002b:00007fa8163a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  416.946861][T11801] RAX: ffffffffffffffda RBX: 00007fa8157e5fa0 RCX: 00007fa81558f749
[  416.946879][T11801] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007
[  416.946895][T11801] RBP: 00007fa815613f91 R08: 0000000000000000 R09: 0000000000000000
[  416.946912][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.946927][T11801] R13: 00007fa8157e6038 R14: 00007fa8157e5fa0 R15: 00007ffea4dba028
[  416.946964][T11801]  </TASK>
[  417.625199][ T6955] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.844017][T11819] FAULT_INJECTION: forcing a failure.
[  417.844017][T11819] name fail_futex, interval 1, probability 0, space 0, times 0
[  417.960474][T11819] CPU: 0 UID: 0 PID: 11819 Comm: syz.0.1208 Not tainted syzkaller #0 PREEMPT(full) 
[  417.960514][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.960529][T11819] Call Trace:
[  417.960537][T11819]  <TASK>
[  417.960547][T11819]  dump_stack_lvl+0x16c/0x1f0
[  417.960591][T11819]  should_fail_ex+0x512/0x640
[  417.960634][T11819]  get_futex_key+0x1d0/0x1560
[  417.960669][T11819]  ? __pfx_get_futex_key+0x10/0x10
[  417.960700][T11819]  ? find_held_lock+0x2b/0x80
[  417.960730][T11819]  futex_wake+0xea/0x530
[  417.960772][T11819]  ? __pfx_futex_wake+0x10/0x10
[  417.960812][T11819]  ? __lock_acquire+0x622/0x1c90
[  417.960847][T11819]  do_futex+0x1e3/0x350
[  417.960876][T11819]  ? __pfx_do_futex+0x10/0x10
[  417.960912][T11819]  ? find_held_lock+0x2b/0x80
[  417.960940][T11819]  __x64_sys_futex+0x1e0/0x4c0
[  417.960974][T11819]  ? __fget_files+0x20e/0x3c0
[  417.960996][T11819]  ? __pfx___x64_sys_futex+0x10/0x10
[  417.961030][T11819]  ? fdget+0x187/0x210
[  417.961055][T11819]  do_syscall_64+0xcd/0xfa0
[  417.961084][T11819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.961105][T11819] RIP: 0033:0x7fa81558f749
[  417.961124][T11819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.961144][T11819] RSP: 002b:00007fa8163a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  417.961165][T11819] RAX: ffffffffffffffda RBX: 00007fa8157e5fa8 RCX: 00007fa81558f749
[  417.961180][T11819] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8157e5fac
[  417.961193][T11819] RBP: 00007fa8157e5fa0 R08: 00007fa8163a7000 R09: 0000000000000000
[  417.961207][T11819] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  417.961220][T11819] R13: 00007fa8157e6038 R14: 00007ffea4db9f40 R15: 00007ffea4dba028
[  417.961250][T11819]  </TASK>
[  421.578052][T11900] block nbd9: NBD_DISCONNECT
[  424.236057][T11921] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  424.282414][T11921] EXT4-fs (sda1): This should not happen!! Data will be lost
[  424.282414][T11921] 
[  425.595894][T11981] ksmbd: Unknown IPC event: 14, ignore.
[  426.399369][ T6979] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  426.442275][ T6979] EXT4-fs (sda1): This should not happen!! Data will be lost
[  426.442275][ T6979] 
[  428.198350][T12045] openvswitch: netlink: Missing valid actions attribute.
[  428.768178][T12064] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  428.783885][T12064] EXT4-fs (sda1): This should not happen!! Data will be lost
[  428.783885][T12064] 
[  430.606836][T12095] random: crng reseeded on system resumption
[  430.690353][T12103] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  430.901063][T12103] EXT4-fs (sda1): This should not happen!! Data will be lost
[  430.901063][T12103] 
[  432.137081][T12123] ovs_: entered promiscuous mode
[  435.402812][T12166] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  435.415990][T12166] EXT4-fs (sda1): This should not happen!! Data will be lost
[  435.415990][T12166] 
[  435.938436][T12159] zswap: compressor  not available
[  436.072343][T12170] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1274'.
[  438.341462][T12215] input: f¬
 as /devices/virtual/input/input20
[  438.595460][T12214] vivid-007: =================  START STATUS  =================
[  438.614195][T12214] vivid-007: Generate PTS: true
[  438.624181][T12214] vivid-007: Generate SCR: true
[  438.635235][T12214] tpg source WxH: 320x240 (Y'CbCr)
[  438.647127][T12214] tpg field: 1
[  438.655089][T12214] tpg crop: (0,0)/320x240
[  438.664260][T12214] tpg compose: (0,0)/320x240
[  438.674331][T12214] tpg colorspace: 8
[  438.682795][T12214] tpg transfer function: 0/0
[  438.693388][T12214] tpg Y'CbCr encoding: 0/0
[  438.706812][T12214] tpg quantization: 0/0
[  438.722267][T12214] tpg RGB range: 0/2
[  438.738019][T12214] vivid-007: ==================  END STATUS  ==================
[  439.345579][T12231] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1287'.
[  439.977846][T12240] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  440.045217][T12240] EXT4-fs (sda1): This should not happen!! Data will be lost
[  440.045217][T12240] 
[  441.708178][ T6967] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  441.808673][ T6967] EXT4-fs (sda1): This should not happen!! Data will be lost
[  441.808673][ T6967] 
[  442.242655][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1299'.
[  442.283084][T12285] futex_wake_op: syz.0.1299 tries to shift op by -2048; fix this program
[  443.684297][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  443.690737][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  443.862334][   T30] audit: type=1800 audit(1843105798.933:13): pid=12336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1310" name="features" dev="configfs" ino=46881 res=0 errno=0
[  444.231013][T12350] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x5b8 pfn:0x78000
[  444.254891][T12350] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  444.265961][T12350] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  444.276298][T12350] raw: 00000000000005b8 0000000000000000 00000001ffffffff 0000000000000000
[  444.286726][T12350] page dumped because: unmovable page
[  444.314067][T12350] page_owner tracks the page as allocated
[  444.321336][T12350] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 11863, tgid 11861 (syz.1.1214), ts 420694627391, free_ts 420692112873
[  444.341992][T12350]  post_alloc_hook+0x1af/0x220
[  444.342271][T12352] program syz.1.1315 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  444.348324][T12350]  get_page_from_freelist+0x10a3/0x3a30
[  444.363170][T12350]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  444.388639][T12350]  alloc_pages_mpol+0x1fb/0x550
[  444.399306][T12350]  alloc_pages_noprof+0x131/0x390
[  444.413525][T12350]  stack_depot_save_flags+0x933/0x9c0
[  444.447001][T12350]  kasan_save_stack+0x42/0x60
[  444.469750][T12350]  kasan_save_track+0x14/0x30
[  444.484722][T12350]  __kasan_kmalloc+0xaa/0xb0
[  444.502147][T12350]  __ipv6_dev_mc_inc+0x2f1/0xbc0
[  444.525752][T12350]  ipv6_add_dev+0xbc6/0x15f0
[  444.544174][T12350]  addrconf_notify+0x53e/0x19e0
[  444.570237][T12350]  notifier_call_chain+0xbc/0x410
[  444.616006][T12350]  call_netdevice_notifiers_info+0xbe/0x140
[  444.653795][T12350]  register_netdevice+0x182e/0x2270
[  444.669176][T12350]  register_netdev+0x34/0x50
[  444.679792][T12350] page last free pid 11863 tgid 11861 stack trace:
[  444.707526][T12350]  __free_frozen_pages+0x7df/0x1160
[  444.725106][T12350]  stack_depot_save_flags+0x352/0x9c0
[  444.730673][T12350]  ref_tracker_alloc+0x1e1/0x5b0
[  444.751149][T12350]  net_rx_queue_update_kobjects+0x334/0x770
[  444.771342][T12350]  netdev_register_kobject+0x290/0x3d0
[  444.814616][T12350]  register_netdevice+0x13dc/0x2270
[  444.824622][T12350]  register_netdev+0x34/0x50
[  444.829273][T12350]  loopback_net_init+0x7a/0x170
[  444.840276][T12350]  ops_init+0x1e2/0x5f0
[  444.845019][T12350]  setup_net+0x100/0x390
[  444.852883][T12350]  copy_net_ns+0x2f8/0x690
[  444.860967][T12350]  create_new_namespaces+0x3ea/0xa90
[  444.870010][T12350]  copy_namespaces+0x468/0x560
[  444.877201][T12350]  copy_process+0x2828/0x76a0
[  444.885524][T12350]  kernel_clone+0xfc/0x930
[  444.892871][T12350]  __do_sys_clone+0xce/0x120
[  445.436526][T12382] FAULT_INJECTION: forcing a failure.
[  445.436526][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.542853][T12382] CPU: 1 UID: 0 PID: 12382 Comm: syz.0.1322 Not tainted syzkaller #0 PREEMPT(full) 
[  445.542880][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  445.542890][T12382] Call Trace:
[  445.542895][T12382]  <TASK>
[  445.542901][T12382]  dump_stack_lvl+0x16c/0x1f0
[  445.542924][T12382]  should_fail_ex+0x512/0x640
[  445.542950][T12382]  _copy_from_user+0x2e/0xd0
[  445.542972][T12382]  sw_sync_ioctl+0x45b/0xfd0
[  445.542995][T12382]  ? find_held_lock+0x2b/0x80
[  445.543011][T12382]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  445.543038][T12382]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  445.543057][T12382]  __x64_sys_ioctl+0x18e/0x210
[  445.543081][T12382]  do_syscall_64+0xcd/0xfa0
[  445.543099][T12382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.543114][T12382] RIP: 0033:0x7fa81558f749
[  445.543134][T12382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.543149][T12382] RSP: 002b:00007fa8163a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  445.543164][T12382] RAX: ffffffffffffffda RBX: 00007fa8157e5fa0 RCX: 00007fa81558f749
[  445.543175][T12382] RDX: 0000000000000000 RSI: 00000000c0285700 RDI: 0000000000000005
[  445.543184][T12382] RBP: 00007fa815613f91 R08: 0000000000000000 R09: 0000000000000000
[  445.543192][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  445.543201][T12382] R13: 00007fa8157e6038 R14: 00007fa8157e5fa0 R15: 00007ffea4dba028
[  445.543222][T12382]  </TASK>
[  445.945871][T12391] syz.3.1324 (12391): attempted to duplicate a private mapping with mremap.  This is not supported.
[  446.494637][T12407] FAULT_INJECTION: forcing a failure.
[  446.494637][T12407] name failslab, interval 1, probability 0, space 0, times 0
[  446.535862][T12407] CPU: 0 UID: 0 PID: 12407 Comm: syz.1.1330 Not tainted syzkaller #0 PREEMPT(full) 
[  446.535897][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  446.535910][T12407] Call Trace:
[  446.535918][T12407]  <TASK>
[  446.535927][T12407]  dump_stack_lvl+0x16c/0x1f0
[  446.535964][T12407]  should_fail_ex+0x512/0x640
[  446.535999][T12407]  ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[  446.536046][T12407]  should_failslab+0xc2/0x120
[  446.536081][T12407]  __kmalloc_node_track_caller_noprof+0xde/0x8a0
[  446.536114][T12407]  ? kstrdup_const+0x63/0x80
[  446.536152][T12407]  ? kstrdup+0x53/0x100
[  446.536176][T12407]  kstrdup+0x53/0x100
[  446.536203][T12407]  kstrdup_const+0x63/0x80
[  446.536228][T12407]  kvasprintf_const+0x10f/0x1a0
[  446.536253][T12407]  kobject_set_name_vargs+0x5a/0x140
[  446.536287][T12407]  dev_set_name+0xc7/0x100
[  446.536310][T12407]  ? __pfx_dev_set_name+0x10/0x10
[  446.536336][T12407]  ? lockdep_init_map_type+0x5c/0x280
[  446.536369][T12407]  ? __init_waitqueue_head+0xca/0x150
[  446.536397][T12407]  netdev_register_kobject+0xc5/0x3d0
[  446.536431][T12407]  register_netdevice+0x13dc/0x2270
[  446.536463][T12407]  ? __pfx_register_netdevice+0x10/0x10
[  446.536499][T12407]  slip_open+0xb86/0x1150
[  446.536540][T12407]  ? __pfx_slip_open+0x10/0x10
[  446.536573][T12407]  ? down_write+0x14d/0x200
[  446.536608][T12407]  ? __pfx_slip_open+0x10/0x10
[  446.536640][T12407]  tty_ldisc_open+0x9f/0x120
[  446.536656][T12407]  tty_set_ldisc+0x32b/0x780
[  446.536674][T12407]  tty_ioctl+0xc2d/0x1680
[  446.536692][T12407]  ? __pfx_tty_ioctl+0x10/0x10
[  446.536715][T12407]  ? find_held_lock+0x2b/0x80
[  446.536730][T12407]  ? hook_file_ioctl_common+0x145/0x410
[  446.536750][T12407]  ? __fget_files+0x20e/0x3c0
[  446.536768][T12407]  ? __pfx_tty_ioctl+0x10/0x10
[  446.536784][T12407]  __x64_sys_ioctl+0x18e/0x210
[  446.536806][T12407]  do_syscall_64+0xcd/0xfa0
[  446.536825][T12407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.536839][T12407] RIP: 0033:0x7f6044f8f749
[  446.536852][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.536867][T12407] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  446.536881][T12407] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  446.536890][T12407] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000008
[  446.536898][T12407] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  446.536906][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.536914][T12407] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  446.536935][T12407]  </TASK>
[  447.700865][T12431] bond0: option all_slaves_active: invalid value ()
[  447.835218][ T5832] Bluetooth: hci0: unexpected event 0x36 length: 123 > 7
[  452.036775][T12518] FAULT_INJECTION: forcing a failure.
[  452.036775][T12518] name failslab, interval 1, probability 0, space 0, times 0
[  452.070636][T12518] CPU: 0 UID: 0 PID: 12518 Comm: syz.1.1355 Not tainted syzkaller #0 PREEMPT(full) 
[  452.070660][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  452.070670][T12518] Call Trace:
[  452.070677][T12518]  <TASK>
[  452.070683][T12518]  dump_stack_lvl+0x16c/0x1f0
[  452.070706][T12518]  should_fail_ex+0x512/0x640
[  452.070728][T12518]  ? __kmalloc_cache_noprof+0x5f/0x780
[  452.070744][T12518]  should_failslab+0xc2/0x120
[  452.070764][T12518]  __kmalloc_cache_noprof+0x72/0x780
[  452.070778][T12518]  ? ip_vs_protocol_net_init+0xbe/0x300
[  452.070801][T12518]  ? ip_vs_protocol_net_init+0xbe/0x300
[  452.070818][T12518]  ip_vs_protocol_net_init+0xbe/0x300
[  452.070839][T12518]  __ip_vs_init+0x239/0x520
[  452.070853][T12518]  ? __pfx___ip_vs_init+0x10/0x10
[  452.070866][T12518]  ops_init+0x1e2/0x5f0
[  452.070884][T12518]  setup_net+0x100/0x390
[  452.070899][T12518]  ? __pfx_setup_net+0x10/0x10
[  452.070915][T12518]  ? debug_mutex_init+0x37/0x70
[  452.070933][T12518]  copy_net_ns+0x2f8/0x690
[  452.070951][T12518]  create_new_namespaces+0x3ea/0xa90
[  452.070972][T12518]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  452.070990][T12518]  ksys_unshare+0x45b/0xa40
[  452.071009][T12518]  ? __pfx_ksys_unshare+0x10/0x10
[  452.071028][T12518]  ? xfd_validate_state+0x61/0x180
[  452.071053][T12518]  __x64_sys_unshare+0x31/0x40
[  452.071071][T12518]  do_syscall_64+0xcd/0xfa0
[  452.071090][T12518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.071104][T12518] RIP: 0033:0x7f6044f8f749
[  452.071116][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.071130][T12518] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  452.071144][T12518] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  452.071154][T12518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  452.071163][T12518] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  452.071171][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.071179][T12518] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  452.071199][T12518]  </TASK>
[  453.085383][T12537] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  453.125944][T12537] EXT4-fs (sda1): This should not happen!! Data will be lost
[  453.125944][T12537] 
[  453.201458][T12529] ima: policy update failed
[  453.219070][   T30] audit: type=1802 audit(1843105808.337:14): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1358" res=0 errno=0
[  453.262584][T12539] nfs: Unknown parameter 'w¾Ă`_…à‚ûÏI+;ưá�	ÑöHYø º†»·«ÏLuơ>>ËƠuh�*àéC<+°đÀÛ'
[  453.838171][T12552] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1364'.
[  453.964175][T12557] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  455.047390][T12643] netlink: 'syz.2.1369': attribute type 20 has an invalid length.
[  455.069762][T12643] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1369'.
[  455.098136][T12643] IPv6: NLM_F_CREATE should be specified when creating new route
[  455.243216][ T5832] Bluetooth: hci0: ISO packet too small
[  455.772554][T12669] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  455.944206][T12669] EXT4-fs (sda1): This should not happen!! Data will be lost
[  455.944206][T12669] 
[  456.197693][T12680] ubi31: attaching mtd0
[  456.244225][T12680] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514
[  456.290950][T12680] ubi31 error: validate_ec_hdr: bad EC header
[  456.330807][T12680] Erase counter header dump:
[  456.339547][T12680] 	magic          0x55424923
[  456.370984][T12680] 	version        1
[  456.375386][T12680] 	ec             1
[  456.440081][T12680] 	vid_hdr_offset 64
[  456.444318][T12680] 	data_offset    128
[  456.448286][T12680] 	image_seq      1806188227
[  456.489837][T12680] 	hdr_crc        0x15e0e571
[  456.509779][T12680] erase counter header hexdump:
[  456.527129][T12680] CPU: 1 UID: 0 PID: 12680 Comm: syz.0.1378 Not tainted syzkaller #0 PREEMPT(full) 
[  456.527157][T12680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  456.527171][T12680] Call Trace:
[  456.527178][T12680]  <TASK>
[  456.527187][T12680]  dump_stack_lvl+0x16c/0x1f0
[  456.527220][T12680]  validate_ec_hdr+0x28c/0x330
[  456.527256][T12680]  ubi_io_read_ec_hdr+0x63b/0x6c0
[  456.527291][T12680]  ubi_attach+0x601/0x4be0
[  456.527335][T12680]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  456.527373][T12680]  ? __pfx_ubi_msg+0x10/0x10
[  456.527398][T12680]  ? __pfx_ubi_attach+0x10/0x10
[  456.527430][T12680]  ? ubi_attach_mtd_dev+0x155b/0x35d0
[  456.527457][T12680]  ? __vmalloc_node_noprof+0xad/0xf0
[  456.527493][T12680]  ? ubi_attach_mtd_dev+0x155b/0x35d0
[  456.527525][T12680]  ubi_attach_mtd_dev+0x15a7/0x35d0
[  456.527571][T12680]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  456.527598][T12680]  ? __pfx_get_mtd_device+0x10/0x10
[  456.527642][T12680]  ctrl_cdev_ioctl+0x337/0x3d0
[  456.527670][T12680]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  456.527708][T12680]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  456.527738][T12680]  __x64_sys_ioctl+0x18e/0x210
[  456.527779][T12680]  do_syscall_64+0xcd/0xfa0
[  456.527811][T12680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  456.527837][T12680] RIP: 0033:0x7fa81558f749
[  456.527858][T12680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  456.527883][T12680] RSP: 002b:00007fa8163a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  456.527906][T12680] RAX: ffffffffffffffda RBX: 00007fa8157e5fa0 RCX: 00007fa81558f749
[  456.527923][T12680] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000004
[  456.527939][T12680] RBP: 00007fa815613f91 R08: 0000000000000000 R09: 0000000000000000
[  456.527955][T12680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.527970][T12680] R13: 00007fa8157e6038 R14: 00007fa8157e5fa0 R15: 00007ffea4dba028
[  456.528008][T12680]  </TASK>
[  456.528579][T12680] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 1
[  457.151258][T12690] random: crng reseeded on system resumption
[  457.163496][T12680] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  457.853931][T12703] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1383'.
[  457.965096][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  458.586200][T12725] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1386'.
[  459.470977][T12742] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1391'.
[  461.182291][T12760] futex_wake_op: syz.3.1396 tries to shift op by -2048; fix this program
[  461.321830][T12760] futex_wake_op: syz.3.1396 tries to shift op by -2048; fix this program
[  462.255253][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.272883][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.303979][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.345296][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.374472][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.424102][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.458485][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.502714][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  462.523610][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'.
[  463.479686][T12791] ovs_ÿ₫: entered promiscuous mode
[  465.837316][T12832] Setting dangerous option i915.mitigations - tainting kernel
[  465.855549][T12832] Bad "i915.mitigations=!hó́@ÛS̀", 'hó́@ÛS̀' is unknown
[  465.990425][T12835] __nla_validate_parse: 24 callbacks suppressed
[  465.990447][T12835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1410'.
[  472.007136][ T8329] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  472.039996][ T8329] EXT4-fs (sda1): This should not happen!! Data will be lost
[  472.039996][ T8329] 
[  472.627319][T12949] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  472.653181][T12951] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1435'.
[  472.703335][T12949] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  472.793052][T12949] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  472.943680][T12957] FAULT_INJECTION: forcing a failure.
[  472.943680][T12957] name failslab, interval 1, probability 0, space 0, times 0
[  473.053340][T12957] CPU: 0 UID: 0 PID: 12957 Comm: syz.1.1437 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  473.053380][T12957] Tainted: [U]=USER
[  473.053388][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  473.053401][T12957] Call Trace:
[  473.053409][T12957]  <TASK>
[  473.053418][T12957]  dump_stack_lvl+0x16c/0x1f0
[  473.053454][T12957]  should_fail_ex+0x512/0x640
[  473.053489][T12957]  ? __kmalloc_noprof+0xca/0x880
[  473.053527][T12957]  should_failslab+0xc2/0x120
[  473.053559][T12957]  __kmalloc_noprof+0xdd/0x880
[  473.053595][T12957]  ? lsm_blob_alloc+0x68/0x90
[  473.053631][T12957]  ? lsm_blob_alloc+0x68/0x90
[  473.053658][T12957]  lsm_blob_alloc+0x68/0x90
[  473.053687][T12957]  security_sk_alloc+0x30/0x270
[  473.053725][T12957]  sk_prot_alloc+0xfb/0x2a0
[  473.053758][T12957]  sk_alloc+0x36/0xc20
[  473.053795][T12957]  tipc_sk_create+0xce/0x22a0
[  473.053829][T12957]  ? find_held_lock+0x2b/0x80
[  473.053857][T12957]  ? __sock_create+0x2f2/0x8d0
[  473.053892][T12957]  __sock_create+0x338/0x8d0
[  473.053929][T12957]  __sys_socket+0x14d/0x260
[  473.053961][T12957]  ? __pfx___sys_socket+0x10/0x10
[  473.053992][T12957]  ? xfd_validate_state+0x61/0x180
[  473.054023][T12957]  ? __pfx_do_writev+0x10/0x10
[  473.054056][T12957]  __x64_sys_socket+0x72/0xb0
[  473.054085][T12957]  ? lockdep_hardirqs_on+0x7c/0x110
[  473.054114][T12957]  do_syscall_64+0xcd/0xfa0
[  473.054146][T12957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.054170][T12957] RIP: 0033:0x7f6044f8f749
[  473.054191][T12957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  473.054213][T12957] RSP: 002b:00007f6045ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  473.054236][T12957] RAX: ffffffffffffffda RBX: 00007f60451e6090 RCX: 00007f6044f8f749
[  473.054253][T12957] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e
[  473.054267][T12957] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  473.054288][T12957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  473.054302][T12957] R13: 00007f60451e6128 R14: 00007f60451e6090 R15: 00007fffe358f7a8
[  473.054340][T12957]  </TASK>
[  473.278582][    C0] vkms_vblank_simulate: vblank timer overrun
[  473.551682][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  473.562361][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  473.581942][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  473.611238][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  473.619336][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  473.942264][T12963] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.3.1438: Error -117 reading block bitmap for 4
[  474.766554][T12968] chnl_net:caif_netlink_parms(): no params data found
[  475.065749][T12968] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.111236][T12968] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.173584][T12986] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  475.181571][T12986] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  475.198907][T12986] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  475.217814][T12986] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  475.244702][T12986] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  475.290956][T12986] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  475.320861][T12986] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  475.335072][T12968] bridge_slave_0: entered allmulticast mode
[  475.355625][T12968] bridge_slave_0: entered promiscuous mode
[  475.383464][T12968] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.391073][T12968] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.398427][T12968] bridge_slave_1: entered allmulticast mode
[  475.429808][T12968] bridge_slave_1: entered promiscuous mode
[  475.460719][T12990] netlink: 'syz.3.1443': attribute type 33 has an invalid length.
[  475.461785][T12986] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  475.724418][T12968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.768714][T12968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.036774][T12968] team0: Port device team_slave_0 added
[  476.076343][T12968] team0: Port device team_slave_1 added
[  476.088833][T12996] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  476.097778][T12996] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  476.115306][T12996] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  476.129802][T12996] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  476.158862][T12996] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  476.487719][T12968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.528297][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.589260][T12968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.617470][T12968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.628060][T12968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.704729][T12968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.095772][   T30] audit: type=1800 audit(1843105832.320:15): pid=13011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1450" name="lu_gp_id" dev="configfs" ino=51317 res=0 errno=0
[  477.160246][T12968] hsr_slave_0: entered promiscuous mode
[  477.184997][T12968] hsr_slave_1: entered promiscuous mode
[  477.221357][T12968] debugfs: 'hsr0' already exists in 'hsr'
[  477.231237][T12968] Cannot create hsr debugfs directory
[  477.285184][   T30] audit: type=1800 audit(1843105832.480:16): pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1450" name="lu_gp_id" dev="configfs" ino=50481 res=0 errno=0
[  477.632288][T13033] netlink: 'syz.2.1452': attribute type 11 has an invalid length.
[  478.113297][T13038] Malformed UNC in devname
[  478.113297][T13038] 
[  478.128208][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  478.134636][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[  478.135574][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  478.207953][T13042] Bluetooth: hci4: command 0x041b tx timeout
[  478.242262][T13038] CIFS: VFS: Malformed UNC in devname
[  479.700422][T12968] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  479.855738][T12968] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  479.896685][T12968] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  479.970774][T12968] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  480.208296][T13042] Bluetooth: hci3: command 0x0c1a tx timeout
[  480.292704][T13042] Bluetooth: hci4: command 0x041b tx timeout
[  480.407020][T12968] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.485499][T12968] 8021q: adding VLAN 0 to HW filter on device team0
[  480.678694][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.686000][ T6969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  480.823247][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.830514][ T6955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.918039][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'.
[  481.038400][T12968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  481.362365][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1463'.
[  482.268785][T13042] Bluetooth: hci3: command 0x0c1a tx timeout
[  482.348618][T13042] Bluetooth: hci4: command 0x041b tx timeout
[  483.585064][T12968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  483.723213][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1465'.
[  483.753109][T13110] bridge0: entered promiscuous mode
[  483.758374][T13110] bridge0: entered allmulticast mode
[  483.792915][T13109] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1466'.
[  484.418750][T13042] Bluetooth: hci4: command 0x041b tx timeout
[  484.468059][T12968] veth0_vlan: entered promiscuous mode
[  484.483386][T12968] veth1_vlan: entered promiscuous mode
[  484.584413][T12968] veth0_macvtap: entered promiscuous mode
[  484.629510][T12968] veth1_macvtap: entered promiscuous mode
[  484.731720][T12968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  484.781518][T12968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  484.834956][ T6955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.990121][ T6955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.016440][ T6955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.025217][ T6955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.447701][ T6955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.478760][ T6955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.611232][T13135] netlink: set zone limit has 8 unknown bytes
[  485.790524][ T6955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.811949][ T6955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.500550][T13042] Bluetooth: hci4: command 0x041b tx timeout
[  488.409319][T13185] zswap: compressor  not available
[  488.559261][T13041] Bluetooth: hci4: command 0x041b tx timeout
[  489.422637][T13209] batman_adv: Routing algorithm '7' is not supported
[  489.757801][T13219] program syz.3.1484 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  490.633013][T13218] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  493.055788][T13286] bond0: Unable to set down delay as MII monitoring is disabled
[  494.579648][T13314] random: crng reseeded on system resumption
[  496.984200][   T30] audit: type=1800 audit(1843105852.303:17): pid=13333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1507" name="features" dev="configfs" ino=53282 res=0 errno=0
[  497.432403][T13333] netlink: 'syz.3.1507': attribute type 11 has an invalid length.
[  497.449403][T13333] netlink: 'syz.3.1507': attribute type 11 has an invalid length.
[  497.460580][T13333] netlink: 'syz.3.1507': attribute type 11 has an invalid length.
[  497.471733][T13333] netlink: 'syz.3.1507': attribute type 11 has an invalid length.
[  497.578247][T13333] netlink: 'syz.3.1507': attribute type 11 has an invalid length.
[  497.786739][T13346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1511'.
[  497.796988][T13343] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  497.812513][T13346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.120593][T13346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.431222][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1532'.
[  504.018517][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'.
[  504.386735][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  504.808119][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  504.822684][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  507.559086][T13527] block nbd9: NBD_DISCONNECT
[  508.271078][T13534] FAULT_INJECTION: forcing a failure.
[  508.271078][T13534] name failslab, interval 1, probability 0, space 0, times 0
[  508.317920][T13534] CPU: 0 UID: 0 PID: 13534 Comm: syz.1.1553 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  508.317964][T13534] Tainted: [U]=USER
[  508.317973][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.317990][T13534] Call Trace:
[  508.318000][T13534]  <TASK>
[  508.318010][T13534]  dump_stack_lvl+0x16c/0x1f0
[  508.318050][T13534]  should_fail_ex+0x512/0x640
[  508.318088][T13534]  ? __kmalloc_cache_node_noprof+0x62/0x7a0
[  508.318124][T13534]  should_failslab+0xc2/0x120
[  508.318159][T13534]  __kmalloc_cache_node_noprof+0x75/0x7a0
[  508.318199][T13534]  ? tracing_mark_open+0x44f/0x6f0
[  508.318249][T13534]  ? tracing_mark_open+0x44f/0x6f0
[  508.318287][T13534]  tracing_mark_open+0x44f/0x6f0
[  508.318334][T13534]  do_dentry_open+0x982/0x1530
[  508.318366][T13534]  ? __pfx_tracing_mark_open+0x10/0x10
[  508.318413][T13534]  vfs_open+0x82/0x3f0
[  508.318454][T13534]  path_openat+0x1de4/0x2cb0
[  508.318496][T13534]  ? __pfx_path_openat+0x10/0x10
[  508.318528][T13534]  ? __lock_acquire+0xb8a/0x1c90
[  508.318565][T13534]  do_filp_open+0x20b/0x470
[  508.318594][T13534]  ? __pfx_do_filp_open+0x10/0x10
[  508.318641][T13534]  ? alloc_fd+0x471/0x7d0
[  508.318677][T13534]  do_sys_openat2+0x11b/0x1d0
[  508.318710][T13534]  ? __pfx_do_sys_openat2+0x10/0x10
[  508.318753][T13534]  __x64_sys_openat+0x174/0x210
[  508.318786][T13534]  ? __pfx___x64_sys_openat+0x10/0x10
[  508.318837][T13534]  do_syscall_64+0xcd/0xfa0
[  508.318870][T13534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.318897][T13534] RIP: 0033:0x7f6044f8f749
[  508.318943][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.318966][T13534] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  508.318992][T13534] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  508.319008][T13534] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  508.319022][T13534] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  508.319037][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.319049][T13534] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  508.319080][T13534]  </TASK>
[  508.698353][T13536] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.826729][T13536] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.987512][T13536] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.300562][T13536] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.703186][T13561] ubi31: attaching mtd0
[  509.709139][T13561] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514
[  509.719028][T13561] ubi31 error: validate_ec_hdr: bad EC header
[  509.719570][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1560'.
[  509.735310][T13561] Erase counter header dump:
[  509.746657][T13561] 	magic          0x55424923
[  509.756834][T13561] 	version        1
[  509.762786][T13561] 	ec             1
[  509.766709][T13561] 	vid_hdr_offset 64
[  509.770914][T13561] 	data_offset    128
[  509.775056][T13561] 	image_seq      1806188227
[  509.780320][T13561] 	hdr_crc        0x15e0e571
[  509.785516][T13561] erase counter header hexdump:
[  509.790658][T13561] CPU: 1 UID: 0 PID: 13561 Comm: syz.1.1559 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  509.790695][T13561] Tainted: [U]=USER
[  509.790703][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  509.790719][T13561] Call Trace:
[  509.790727][T13561]  <TASK>
[  509.790737][T13561]  dump_stack_lvl+0x16c/0x1f0
[  509.790779][T13561]  validate_ec_hdr+0x28c/0x330
[  509.790815][T13561]  ubi_io_read_ec_hdr+0x63b/0x6c0
[  509.790849][T13561]  ubi_attach+0x601/0x4be0
[  509.790888][T13561]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  509.790926][T13561]  ? __pfx_ubi_msg+0x10/0x10
[  509.790951][T13561]  ? __pfx_ubi_attach+0x10/0x10
[  509.790979][T13561]  ? ubi_attach_mtd_dev+0x155b/0x35d0
[  509.791005][T13561]  ? __vmalloc_node_noprof+0xad/0xf0
[  509.791038][T13561]  ? ubi_attach_mtd_dev+0x155b/0x35d0
[  509.791067][T13561]  ubi_attach_mtd_dev+0x15a7/0x35d0
[  509.791110][T13561]  ? __pfx_ubi_attach_mtd_dev+0x10/0x10
[  509.791136][T13561]  ? __pfx_get_mtd_device+0x10/0x10
[  509.791179][T13561]  ctrl_cdev_ioctl+0x337/0x3d0
[  509.791206][T13561]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  509.791242][T13561]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  509.791270][T13561]  __x64_sys_ioctl+0x18e/0x210
[  509.791310][T13561]  do_syscall_64+0xcd/0xfa0
[  509.791343][T13561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.791368][T13561] RIP: 0033:0x7f6044f8f749
[  509.791389][T13561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.791420][T13561] RSP: 002b:00007f6045ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  509.791444][T13561] RAX: ffffffffffffffda RBX: 00007f60451e6090 RCX: 00007f6044f8f749
[  509.791461][T13561] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000008
[  509.791478][T13561] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  509.791493][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.791508][T13561] R13: 00007f60451e6128 R14: 00007f60451e6090 R15: 00007fffe358f7a8
[  509.791545][T13561]  </TASK>
[  509.791554][T13561] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 1
[  510.269973][T13561] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  510.659196][T13575] sg_write: process 94 (syz.4.1562) changed security contexts after opening file descriptor, this is not allowed.
[  510.712868][T13577] ubi0: attaching mtd0
[  510.718831][T13577] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0
[  510.730969][T13577] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1
[  510.741632][T13577] eraseblock attaching information dump:
[  510.748378][T13577] 	ec       -1
[  510.752026][T13577] 	pnum     0
[  510.767913][T13577] 	lnum     0
[  510.894988][T13577] 	scrub    1
[  510.898326][T13577] 	sqnum    1
[  510.902232][T13577] Volume identifier header dump:
[  510.923700][T13577] 	magic     55424921
[  510.970819][T13577] 	version   1
[  510.974307][T13577] 	vol_type  1
[  510.983634][T13577] 	copy_flag 0
[  510.987181][T13577] 	compat    5
[  510.990574][T13577] 	vol_id    2147479551
[  511.061804][T13577] 	lnum      0
[  511.169921][T13577] 	data_size 0
[  511.179281][T13577] 	used_ebs  0
[  511.179520][T13585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1564'.
[  511.192434][T13577] 	data_pad  0
[  511.227416][T13577] 	sqnum     1
[  511.230907][T13577] 	hdr_crc   65b3bd2d
[  511.237515][T13577] Volume identifier header hexdump:
[  511.606210][T13577] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  511.921582][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1568'.
[  513.572043][T13615] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  517.996595][T13686] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1584'.
[  519.571954][T13702] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  521.620999][T13711] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes
[  524.109875][T13749] kvm_intel: kvm [13742]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x81
[  524.736325][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1603'.
[  524.786818][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1603'.
[  526.054053][T13799] vivid-007: =================  START STATUS  =================
[  526.072210][T13799] vivid-007: Generate PTS: true
[  526.079145][T13799] vivid-007: Generate SCR: true
[  526.093762][T13799] tpg source WxH: 320x240 (Y'CbCr)
[  526.102823][T13799] tpg field: 1
[  526.106227][T13799] tpg crop: (0,0)/320x240
[  526.120763][T13799] tpg compose: (0,0)/320x240
[  526.146891][T13799] tpg colorspace: 8
[  526.150751][T13799] tpg transfer function: 0/0
[  526.168242][T13799] tpg Y'CbCr encoding: 0/0
[  526.172808][T13799] tpg quantization: 0/0
[  526.176980][T13799] tpg RGB range: 0/2
[  526.180887][T13799] vivid-007: ==================  END STATUS  ==================
[  526.520636][   T30] audit: type=1800 audit(1843105881.962:18): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1612" name="version" dev="configfs" ino=55319 res=0 errno=0
[  526.605927][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future
[  526.615988][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future
[  526.653792][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future
[  526.710218][ T5900] rtc_cmos 00:00: Alarms can be up to one day in the future
[  526.717541][ T5900] rtc rtc0: __rtc_set_alarm: err=-22
[  526.732216][T13808] FAULT_INJECTION: forcing a failure.
[  526.732216][T13808] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  526.763986][T13808] CPU: 0 UID: 0 PID: 13808 Comm: syz.4.1614 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  526.764027][T13808] Tainted: [U]=USER
[  526.764035][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  526.764049][T13808] Call Trace:
[  526.764058][T13808]  <TASK>
[  526.764067][T13808]  dump_stack_lvl+0x16c/0x1f0
[  526.764102][T13808]  should_fail_ex+0x512/0x640
[  526.764143][T13808]  should_fail_alloc_page+0xe7/0x130
[  526.764171][T13808]  prepare_alloc_pages+0x3c2/0x610
[  526.764194][T13808]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  526.764209][T13808]  ? finish_task_switch.isra.0+0x21c/0xc10
[  526.764227][T13808]  ? rcu_is_watching+0x12/0xc0
[  526.764242][T13808]  ? finish_task_switch.isra.0+0x221/0xc10
[  526.764257][T13808]  ? lockdep_hardirqs_on+0x7c/0x110
[  526.764274][T13808]  ? finish_task_switch.isra.0+0x221/0xc10
[  526.764290][T13808]  ? rcu_is_watching+0x12/0xc0
[  526.764304][T13808]  ? trace_sched_exit_tp+0xd1/0x120
[  526.764326][T13808]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  526.764350][T13808]  ? __lock_acquire+0x622/0x1c90
[  526.764371][T13808]  ? __pfx___schedule+0x10/0x10
[  526.764386][T13808]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  526.764410][T13808]  ? policy_nodemask+0xea/0x4e0
[  526.764431][T13808]  alloc_pages_mpol+0x1fb/0x550
[  526.764451][T13808]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  526.764475][T13808]  folio_alloc_mpol_noprof+0x36/0x2f0
[  526.764498][T13808]  vma_alloc_folio_noprof+0xed/0x1e0
[  526.764519][T13808]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  526.764553][T13808]  do_pte_missing+0x2202/0x3ba0
[  526.764576][T13808]  ? find_held_lock+0x2b/0x80
[  526.764596][T13808]  __handle_mm_fault+0x1556/0x2aa0
[  526.764623][T13808]  ? __pfx___handle_mm_fault+0x10/0x10
[  526.764648][T13808]  ? lock_vma_under_rcu+0x176/0x530
[  526.764676][T13808]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  526.764703][T13808]  handle_mm_fault+0x589/0xd10
[  526.764725][T13808]  ? __pkru_allows_pkey+0x21/0xb0
[  526.764749][T13808]  do_user_addr_fault+0x60c/0x1370
[  526.764764][T13808]  ? rcu_is_watching+0x12/0xc0
[  526.764781][T13808]  exc_page_fault+0x64/0xc0
[  526.764798][T13808]  asm_exc_page_fault+0x26/0x30
[  526.764811][T13808] RIP: 0033:0x7f416225a65b
[  526.764824][T13808] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b
[  526.764838][T13808] RSP: 002b:00007f41632bdfb0 EFLAGS: 00010202
[  526.764850][T13808] RAX: 0000000000000000 RBX: 00007f41625e5fa0 RCX: 0000000000000000
[  526.764859][T13808] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0
[  526.764867][T13808] RBP: 00007f4162413f91 R08: 0000000000000000 R09: 0000000000000000
[  526.764876][T13808] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000000
[  526.764884][T13808] R13: 00007f41625e6038 R14: 00007f41625e5fa0 R15: 00007fff4ceaa058
[  526.764905][T13808]  </TASK>
[  526.769025][T13808] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  528.341704][T13834] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1619'.
[  528.543262][T13845] Unable to find swap-space signature
[  531.841885][T13933] hub 1-0:1.0: USB hub found
[  531.878343][T13933] hub 1-0:1.0: 1 port detected
[  535.297265][T14015] zswap: compressor  not available
[  535.304004][T14023] Setting dangerous option i915.mitigations - tainting kernel
[  536.510188][T14065] ima: policy update failed
[  536.574744][   T30] audit: type=1802 audit(1843105892.078:19): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1676" res=0 errno=0
[  536.605417][T14066] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1676'.
[  536.734316][T14059] ima: policy update failed
[  536.920102][   T30] audit: type=1802 audit(1843105892.289:20): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1676" res=0 errno=0
[  537.941345][T14102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'.
[  537.990270][T14102] veth0_vlan: entered allmulticast mode
[  541.062019][T14155] random: crng reseeded on system resumption
[  541.384097][   T30] audit: type=1800 audit(1843105896.913:21): pid=14159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1695" name="version" dev="configfs" ino=56273 res=0 errno=0
[  543.243136][T14205] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1708'.
[  544.224454][T14224] zswap: compressor  not available
[  544.232412][T14222] Setting dangerous option i915.mitigations - tainting kernel
[  544.815513][T14226] ovs_ÿ₫: entered promiscuous mode
[  544.953064][T14246] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1720'.
[  546.203472][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'.

syzkaller
syzkaller login: [  548.673331][T14319] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  548.699091][T14319] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  553.066472][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'.
[  554.075764][T14410] FAULT_INJECTION: forcing a failure.
[  554.075764][T14410] name failslab, interval 1, probability 0, space 0, times 0
[  554.153956][T14410] CPU: 0 UID: 0 PID: 14410 Comm: syz.1.1755 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  554.153997][T14410] Tainted: [U]=USER
[  554.154005][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  554.154019][T14410] Call Trace:
[  554.154027][T14410]  <TASK>
[  554.154037][T14410]  dump_stack_lvl+0x16c/0x1f0
[  554.154071][T14410]  should_fail_ex+0x512/0x640
[  554.154105][T14410]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[  554.154137][T14410]  should_failslab+0xc2/0x120
[  554.154168][T14410]  __kvmalloc_node_noprof+0x141/0x9c0
[  554.154200][T14410]  ? traverse.part.0.constprop.0+0x397/0x650
[  554.154245][T14410]  ? traverse.part.0.constprop.0+0x397/0x650
[  554.154280][T14410]  traverse.part.0.constprop.0+0x397/0x650
[  554.154329][T14410]  seq_read_iter+0x93c/0x12d0
[  554.154380][T14410]  proc_reg_read_iter+0x220/0x310
[  554.154415][T14410]  vfs_read+0x8bf/0xcf0
[  554.154449][T14410]  ? __pfx_vfs_read+0x10/0x10
[  554.154472][T14410]  ? find_held_lock+0x2b/0x80
[  554.154521][T14410]  __x64_sys_pread64+0x1eb/0x250
[  554.154551][T14410]  ? __pfx___x64_sys_pread64+0x10/0x10
[  554.154608][T14410]  do_syscall_64+0xcd/0xfa0
[  554.154646][T14410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.154671][T14410] RIP: 0033:0x7f6044f8f749
[  554.154691][T14410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  554.154714][T14410] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  554.154737][T14410] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  554.154754][T14410] RDX: 0000000100003ffd RSI: 00002000000002c0 RDI: 0000000000000003
[  554.154769][T14410] RBP: 00007f6045ec5090 R08: 0000000000000000 R09: 0000000000000000
[  554.154784][T14410] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[  554.154798][T14410] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  554.154834][T14410]  </TASK>
[  554.539369][T13041] block nbd2: Receive control failed (result -107)
[  554.581141][T14412] nbd2: detected capacity change from 0 to 196608
[  555.655677][T14442] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2)
[  555.855487][T14448] FAULT_INJECTION: forcing a failure.
[  555.855487][T14448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  555.918853][T14448] CPU: 1 UID: 0 PID: 14448 Comm: syz.1.1766 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  555.918892][T14448] Tainted: [U]=USER
[  555.918900][T14448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  555.918914][T14448] Call Trace:
[  555.918922][T14448]  <TASK>
[  555.918931][T14448]  dump_stack_lvl+0x16c/0x1f0
[  555.918967][T14448]  should_fail_ex+0x512/0x640
[  555.919007][T14448]  _copy_to_iter+0x29f/0x1710
[  555.919034][T14448]  ? comedi_read+0x336/0x4a0
[  555.919058][T14448]  ? __pfx__copy_to_iter+0x10/0x10
[  555.919084][T14448]  ? single_next+0xd/0x40
[  555.919113][T14448]  ? traverse.part.0.constprop.0+0x2c5/0x650
[  555.919161][T14448]  seq_read_iter+0x71e/0x12d0
[  555.919211][T14448]  proc_reg_read_iter+0x220/0x310
[  555.919246][T14448]  vfs_read+0x8bf/0xcf0
[  555.919281][T14448]  ? __pfx_vfs_read+0x10/0x10
[  555.919304][T14448]  ? find_held_lock+0x2b/0x80
[  555.919353][T14448]  __x64_sys_pread64+0x1eb/0x250
[  555.919382][T14448]  ? __pfx___x64_sys_pread64+0x10/0x10
[  555.919420][T14448]  do_syscall_64+0xcd/0xfa0
[  555.919452][T14448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.919477][T14448] RIP: 0033:0x7f6044f8f749
[  555.919497][T14448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  555.919520][T14448] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  555.919544][T14448] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  555.919561][T14448] RDX: 0000000100003ffd RSI: 00002000000002c0 RDI: 0000000000000003
[  555.919576][T14448] RBP: 00007f6045ec5090 R08: 0000000000000000 R09: 0000000000000000
[  555.919591][T14448] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[  555.919605][T14448] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  555.919642][T14448]  </TASK>
[  557.444587][   T30] audit: type=1800 audit(1843105913.056:22): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1768" name="lu_gp_id" dev="configfs" ino=58594 res=0 errno=0
[  558.884692][T14486] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1775'.
[  558.966046][T14486] netlink: 154 bytes leftover after parsing attributes in process `syz.2.1775'.
[  559.111346][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1777'.
[  559.220597][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'.
[  560.253165][T14504] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1778'.
[  560.822459][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1792'.
[  562.070496][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'.
[  562.712186][T14547] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1790'.
[  562.722583][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'.
[  563.599159][T14564] netlink: 'syz.3.1793': attribute type 4 has an invalid length.
[  563.608345][T14565] netlink: 'syz.3.1793': attribute type 4 has an invalid length.
[  563.761446][T14564] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  563.768216][T14564] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  564.020144][   T24] Process accounting resumed
[  565.273480][T14615] Invalid ELF header magic: != ELF
[  565.291001][T14610] FAULT_INJECTION: forcing a failure.
[  565.291001][T14610] name failslab, interval 1, probability 0, space 0, times 0
[  565.358350][T14610] CPU: 0 UID: 0 PID: 14610 Comm: syz.1.1806 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  565.358395][T14610] Tainted: [U]=USER
[  565.358404][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  565.358421][T14610] Call Trace:
[  565.358429][T14610]  <TASK>
[  565.358440][T14610]  dump_stack_lvl+0x16c/0x1f0
[  565.358477][T14610]  should_fail_ex+0x512/0x640
[  565.358513][T14610]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  565.358545][T14610]  should_failslab+0xc2/0x120
[  565.358581][T14610]  kmem_cache_alloc_noprof+0x75/0x6e0
[  565.358608][T14610]  ? __kernfs_new_node+0xd2/0x8e0
[  565.358649][T14610]  ? __kernfs_new_node+0xd2/0x8e0
[  565.358679][T14610]  __kernfs_new_node+0xd2/0x8e0
[  565.358716][T14610]  ? __pfx___kernfs_new_node+0x10/0x10
[  565.358759][T14610]  ? find_held_lock+0x2b/0x80
[  565.358794][T14610]  ? kernfs_root+0xee/0x2a0
[  565.358835][T14610]  kernfs_new_node+0x13c/0x1e0
[  565.358880][T14610]  __kernfs_create_file+0x53/0x350
[  565.358913][T14610]  sysfs_add_file_mode_ns+0x207/0x3c0
[  565.358955][T14610]  internal_create_group+0x578/0xf30
[  565.358999][T14610]  ? __pfx_internal_create_group+0x10/0x10
[  565.359040][T14610]  ? kernfs_create_link+0x1bd/0x240
[  565.359072][T14610]  internal_create_groups+0x9d/0x150
[  565.359109][T14610]  device_add+0x6d1/0x1aa0
[  565.359138][T14610]  ? __pfx_device_add+0x10/0x10
[  565.359162][T14610]  ? lockdep_init_map_type+0x5c/0x280
[  565.359198][T14610]  ? __init_waitqueue_head+0xca/0x150
[  565.359230][T14610]  netdev_register_kobject+0x1a9/0x3d0
[  565.359269][T14610]  register_netdevice+0x13dc/0x2270
[  565.359306][T14610]  ? __pfx_register_netdevice+0x10/0x10
[  565.359347][T14610]  __tun_chr_ioctl+0x1eb6/0x4880
[  565.359374][T14610]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  565.359417][T14610]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  565.359448][T14610]  ? hook_file_ioctl_common+0x145/0x410
[  565.359486][T14610]  ? __fget_files+0x20e/0x3c0
[  565.359518][T14610]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  565.359545][T14610]  __x64_sys_ioctl+0x18e/0x210
[  565.359585][T14610]  do_syscall_64+0xcd/0xfa0
[  565.359619][T14610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.359645][T14610] RIP: 0033:0x7f6044f8f749
[  565.359667][T14610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  565.359692][T14610] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  565.359718][T14610] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  565.359735][T14610] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003
[  565.359750][T14610] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  565.359766][T14610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.359787][T14610] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  565.359826][T14610]  </TASK>
[  565.642295][    C0] vkms_vblank_simulate: vblank timer overrun
[  565.967569][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  565.991294][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  566.111234][   T30] audit: type=1800 audit(1843105921.772:23): pid=14623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1804" name="lu_gp_id" dev="configfs" ino=59666 res=0 errno=0
[  568.378569][T14628] zswap: compressor  not available
[  568.538572][T14635] zswap: compressor  not available
[  569.852203][T14660] random: crng reseeded on system resumption
[  570.016161][T14660] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1814'.
[  570.349839][T14666] ecryptfs_miscdev_write: Invalid packet size [192]
[  570.752662][T14672] hub 1-0:1.0: USB hub found
[  570.758086][T14672] hub 1-0:1.0: 1 port detected
[  575.021577][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'.
[  575.123474][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'.
[  575.133760][T13041] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260
[  575.133798][T13041] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260
[  575.150801][T13041] Bluetooth: hci4: Dropping invalid advertising data
[  575.159555][T13041] Bluetooth: hci4: unknown advertising packet type: 0xe9
[  575.159597][T13041] Bluetooth: hci4: Dropping invalid advertising data
[  575.174078][T13041] Bluetooth: hci4: Malformed LE Event: 0x02
[  577.111608][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'.
[  580.335747][T14818] ecryptfs_miscdev_write: Invalid packet size [192]
[  580.467014][T14817] sg_write: data in/out 1047291210/65448 bytes for SCSI command 0x68-- guessing data in;
[  580.467014][T14817]    program syz.3.1845 not setting count and/or reply_len properly
[  581.765224][T14834] netlink: set zone limit has 8 unknown bytes
[  585.484564][T14883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1859'.
[  585.938923][T14894] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  586.095077][T14894] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  586.156169][T14894] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  586.162351][T14894] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  586.169307][T14894] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  587.035009][T14914] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  587.995787][T13041] Bluetooth: hci1: command 0x0c1a tx timeout
[  588.143992][T13041] Bluetooth: hci2: command 0x0c1a tx timeout
[  588.223810][T13041] Bluetooth: hci4: command 0x041b tx timeout
[  588.230377][T13041] Bluetooth: hci3: command 0x0c1a tx timeout
[  590.292877][T13041] Bluetooth: hci3: command 0x0c1a tx timeout
[  591.121946][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'.
[  592.435716][T15010] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  592.442071][T15010] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  592.456764][T15010] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  592.509638][T15010] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  592.530863][T14993] sg_write: data in/out 1047291210/65448 bytes for SCSI command 0x68-- guessing data in;
[  592.530863][T14993]    program syz.4.1883 not setting count and/or reply_len properly
[  592.625118][T15010] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  594.431799][T13041] Bluetooth: hci1: command 0x0c1a tx timeout
[  594.511315][T13041] Bluetooth: hci3: command 0x0c1a tx timeout
[  594.511356][T13042] Bluetooth: hci2: command 0x0c1a tx timeout
[  594.672137][T13042] Bluetooth: hci4: command 0x041b tx timeout
[  596.164939][T15065] FAULT_INJECTION: forcing a failure.
[  596.164939][T15065] name fail_futex, interval 1, probability 0, space 0, times 0
[  596.164983][T15065] CPU: 0 UID: 0 PID: 15065 Comm: syz.4.1901 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  596.165004][T15065] Tainted: [U]=USER
[  596.165009][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  596.165018][T15065] Call Trace:
[  596.165024][T15065]  <TASK>
[  596.165030][T15065]  dump_stack_lvl+0x16c/0x1f0
[  596.165053][T15065]  should_fail_ex+0x512/0x640
[  596.165078][T15065]  get_futex_key+0x1d0/0x1560
[  596.165101][T15065]  ? __pfx_get_futex_key+0x10/0x10
[  596.165125][T15065]  futex_wait_setup+0x9d/0x550
[  596.165144][T15065]  __futex_wait+0x193/0x2f0
[  596.165159][T15065]  ? __pfx___futex_wait+0x10/0x10
[  596.165175][T15065]  ? __pfx_futex_wake_mark+0x10/0x10
[  596.165200][T15065]  ? futex_hash+0x2c5/0x380
[  596.165219][T15065]  ? futex_private_hash_put+0xd5/0x190
[  596.165238][T15065]  futex_wait+0xe8/0x380
[  596.165251][T15065]  ? __pfx_futex_wait+0x10/0x10
[  596.165268][T15065]  ? __fget_files+0x204/0x3c0
[  596.165287][T15065]  do_futex+0x229/0x350
[  596.165306][T15065]  ? __pfx_do_futex+0x10/0x10
[  596.165324][T15065]  ? fput+0x9b/0xd0
[  596.165342][T15065]  ? __sys_sendmsg+0x18c/0x220
[  596.165359][T15065]  __x64_sys_futex+0x1e0/0x4c0
[  596.165380][T15065]  ? __pfx___x64_sys_futex+0x10/0x10
[  596.165407][T15065]  do_syscall_64+0xcd/0xfa0
[  596.165425][T15065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.165441][T15065] RIP: 0033:0x7f416238f749
[  596.165453][T15065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.165468][T15065] RSP: 002b:00007f41632bf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  596.165482][T15065] RAX: ffffffffffffffda RBX: 00007f41625e5fa8 RCX: 00007f416238f749
[  596.165491][T15065] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41625e5fa8
[  596.165500][T15065] RBP: 00007f41625e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  596.165509][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.165517][T15065] R13: 00007f41625e6038 R14: 00007fff4cea9f70 R15: 00007fff4ceaa058
[  596.165537][T15065]  </TASK>
[  596.249189][T15062] Console: switching to colour frame buffer device 128x48
[  596.580211][T13042] Bluetooth: hci3: command 0x0c1a tx timeout
[  597.610701][T13042] Bluetooth: hci3: SCO packet too small
[  597.669495][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'.
[  598.810438][T15102] FAULT_INJECTION: forcing a failure.
[  598.810438][T15102] name fail_futex, interval 1, probability 0, space 0, times 0
[  598.977117][T15102] CPU: 0 UID: 0 PID: 15102 Comm: syz.1.1917 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  598.977161][T15102] Tainted: [U]=USER
[  598.977170][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  598.977186][T15102] Call Trace:
[  598.977195][T15102]  <TASK>
[  598.977204][T15102]  dump_stack_lvl+0x16c/0x1f0
[  598.977241][T15102]  should_fail_ex+0x512/0x640
[  598.977286][T15102]  get_futex_key+0x1d0/0x1560
[  598.977325][T15102]  ? __pfx_get_futex_key+0x10/0x10
[  598.977371][T15102]  futex_wake+0xea/0x530
[  598.977406][T15102]  ? futex_wait+0x120/0x380
[  598.977428][T15102]  ? __pfx_futex_wait+0x10/0x10
[  598.977449][T15102]  ? finish_task_switch.isra.0+0x2fa/0xc10
[  598.977478][T15102]  ? __pfx_futex_wake+0x10/0x10
[  598.977532][T15102]  do_futex+0x1e3/0x350
[  598.977566][T15102]  ? __pfx_do_futex+0x10/0x10
[  598.977594][T15102]  ? fdget+0x176/0x210
[  598.977618][T15102]  ? __sys_sendmsg+0x18c/0x220
[  598.977647][T15102]  __x64_sys_futex+0x1e0/0x4c0
[  598.977687][T15102]  ? __pfx___x64_sys_futex+0x10/0x10
[  598.977715][T15102]  do_syscall_64+0xcd/0xfa0
[  598.977735][T15102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.977750][T15102] RIP: 0033:0x7f6044f8f749
[  598.977762][T15102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.977776][T15102] RSP: 002b:00007f6045ec50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  598.977793][T15102] RAX: ffffffffffffffda RBX: 00007f60451e5fa8 RCX: 00007f6044f8f749
[  598.977803][T15102] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f60451e5fac
[  598.977812][T15102] RBP: 00007f60451e5fa0 R08: 00007f6045ec6000 R09: 0000000000000000
[  598.977820][T15102] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  598.977829][T15102] R13: 00007f60451e6038 R14: 00007fffe358f6c0 R15: 00007fffe358f7a8
[  598.977848][T15102]  </TASK>
[  599.169324][    C0] vkms_vblank_simulate: vblank timer overrun
[  599.994092][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'.
[  600.108789][T15112] usb usb5: usbfs: process 15112 (syz.1.1912) did not claim interface 0 before use
[  604.622889][T15164] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1928'.
[  604.783238][T15166] usbip-vudc usbip-vudc.0: gadget not bound
[  605.337763][T15175] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1930: iget: checksum invalid
[  605.396097][T15175] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  605.408518][T15175] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1930: iget: checksum invalid
[  605.419974][T15175] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  605.434540][T15175] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1930: iget: checksum invalid
[  605.447225][T15175] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  605.464189][T15175] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1930: iget: checksum invalid
[  605.536475][T15180] QAT: Stopping all acceleration devices.
[  605.591880][T15175] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  605.698819][T15175] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  605.719321][T15175] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  606.499864][T15205] vhci_hcd: invalid port number 16
[  607.207123][T15215] netlink: 'syz.2.1941': attribute type 17 has an invalid length.
[  607.215585][T15215] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1941'.
[  608.091890][T15232] Scaler: =================  START STATUS  =================
[  608.159940][T15232] Scaler: ==================  END STATUS  ==================
[  608.774683][T15253] random: crng reseeded on system resumption
[  610.814166][T15285] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1959'.
[  611.363657][T15295] netlink: 'syz.2.1964': attribute type 11 has an invalid length.
[  611.371539][T15295] netlink: 'syz.2.1964': attribute type 11 has an invalid length.
[  611.455768][T15295] netlink: 'syz.2.1964': attribute type 11 has an invalid length.
[  611.482895][T15295] netlink: 'syz.2.1964': attribute type 11 has an invalid length.
[  612.404204][T13041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  612.415925][T13041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  612.425977][T13041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  612.434093][T13041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  612.442621][T13041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  612.582156][ T6976] bridge_slave_1: left allmulticast mode
[  612.604881][ T6976] bridge_slave_1: left promiscuous mode
[  612.617517][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.768718][ T6976] bridge_slave_0: left allmulticast mode
[  612.909768][ T6976] bridge_slave_0: left promiscuous mode
[  612.932933][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.172817][T15327] Unable to find swap-space signature
[  614.491976][T13042] Bluetooth: hci0: command tx timeout
[  615.293717][T15335] input: f¬
 as /devices/virtual/input/input22
[  616.159761][ T6976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  616.206576][ T6976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  616.218212][ T6976] bond0 (unregistering): Released all slaves
[  616.395164][T15341] Invalid ELF header magic: != ELF
[  616.413723][T15342] random: crng reseeded on system resumption
[  616.566591][T13042] Bluetooth: hci0: command tx timeout
[  618.011266][ T6976] hsr_slave_0: left promiscuous mode
[  618.025381][ T6976] hsr_slave_1: left promiscuous mode
[  618.043668][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.213565][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.249661][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.269704][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.362661][ T6976] veth1_macvtap: left promiscuous mode
[  618.377027][ T6976] veth0_macvtap: left promiscuous mode
[  618.644235][T13042] Bluetooth: hci0: command tx timeout
[  618.677646][T15365] FAULT_INJECTION: forcing a failure.
[  618.677646][T15365] name failslab, interval 1, probability 0, space 0, times 0
[  618.739029][T15365] CPU: 1 UID: 0 PID: 15365 Comm: syz.1.1978 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  618.739070][T15365] Tainted: [U]=USER
[  618.739078][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  618.739093][T15365] Call Trace:
[  618.739101][T15365]  <TASK>
[  618.739111][T15365]  dump_stack_lvl+0x16c/0x1f0
[  618.739146][T15365]  should_fail_ex+0x512/0x640
[  618.739181][T15365]  ? __kvmalloc_node_noprof+0x12e/0x9c0
[  618.739213][T15365]  should_failslab+0xc2/0x120
[  618.739245][T15365]  __kvmalloc_node_noprof+0x141/0x9c0
[  618.739277][T15365]  ? traverse.part.0.constprop.0+0x397/0x650
[  618.739324][T15365]  ? traverse.part.0.constprop.0+0x397/0x650
[  618.739360][T15365]  traverse.part.0.constprop.0+0x397/0x650
[  618.739399][T15365]  ? aa_file_perm+0x28f/0x12e0
[  618.739435][T15365]  seq_read_iter+0x93c/0x12d0
[  618.739481][T15365]  ? find_held_lock+0x2b/0x80
[  618.739509][T15365]  kernfs_fop_read_iter+0x46c/0x610
[  618.739533][T15365]  ? __lock_acquire+0x622/0x1c90
[  618.739562][T15365]  ? copy_iovec_from_user+0x131/0x170
[  618.739602][T15365]  do_iter_readv_writev+0x743/0x9e0
[  618.739631][T15365]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  618.739667][T15365]  ? rw_verify_area+0xcf/0x6c0
[  618.739694][T15365]  vfs_readv+0x4cb/0x8b0
[  618.739726][T15365]  ? __pfx_vfs_readv+0x10/0x10
[  618.739753][T15365]  ? find_held_lock+0x2b/0x80
[  618.739808][T15365]  ? __fget_files+0x20e/0x3c0
[  618.739843][T15365]  ? do_preadv+0x1a6/0x270
[  618.739865][T15365]  do_preadv+0x1a6/0x270
[  618.739890][T15365]  ? __pfx_do_preadv+0x10/0x10
[  618.739925][T15365]  do_syscall_64+0xcd/0xfa0
[  618.739957][T15365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.739982][T15365] RIP: 0033:0x7f6044f8f749
[  618.740001][T15365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  618.740021][T15365] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  618.740044][T15365] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  618.740060][T15365] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0040000000000003
[  618.740075][T15365] RBP: 00007f6045ec5090 R08: 0000000000000005 R09: 0000000000000000
[  618.740090][T15365] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  618.740104][T15365] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  618.740141][T15365]  </TASK>
[  620.206777][ T6976] team0 (unregistering): Port device team_slave_1 removed
[  620.368840][ T6976] team0 (unregistering): Port device team_slave_0 removed
[  620.704851][T13042] Bluetooth: hci0: command tx timeout
[  622.472158][T15309] chnl_net:caif_netlink_parms(): no params data found
[  622.757568][T15392] FAULT_INJECTION: forcing a failure.
[  622.757568][T15392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  622.786290][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.1.1986 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  622.786331][T15392] Tainted: [U]=USER
[  622.786339][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  622.786353][T15392] Call Trace:
[  622.786361][T15392]  <TASK>
[  622.786370][T15392]  dump_stack_lvl+0x16c/0x1f0
[  622.786413][T15392]  should_fail_ex+0x512/0x640
[  622.786454][T15392]  _copy_to_user+0x32/0xd0
[  622.786480][T15392]  simple_read_from_buffer+0xcb/0x170
[  622.786520][T15392]  proc_fail_nth_read+0x197/0x240
[  622.786549][T15392]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  622.786578][T15392]  ? rw_verify_area+0xcf/0x6c0
[  622.786601][T15392]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  622.786629][T15392]  vfs_read+0x1e4/0xcf0
[  622.786660][T15392]  ? __pfx___mutex_lock+0x10/0x10
[  622.786691][T15392]  ? __pfx_vfs_read+0x10/0x10
[  622.786727][T15392]  ? __fget_files+0x20e/0x3c0
[  622.786764][T15392]  ksys_read+0x12a/0x250
[  622.786790][T15392]  ? __pfx_ksys_read+0x10/0x10
[  622.786827][T15392]  do_syscall_64+0xcd/0xfa0
[  622.786858][T15392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.786883][T15392] RIP: 0033:0x7f6044f8e15c
[  622.786903][T15392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  622.786926][T15392] RSP: 002b:00007f6045ec5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  622.786949][T15392] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8e15c
[  622.786966][T15392] RDX: 000000000000000f RSI: 00007f6045ec50a0 RDI: 0000000000000004
[  622.786981][T15392] RBP: 00007f6045ec5090 R08: 0000000000000000 R09: 0000000000000000
[  622.786996][T15392] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  622.787011][T15392] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  622.787047][T15392]  </TASK>
[  623.283301][T15309] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.301016][T15309] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.309500][T15309] bridge_slave_0: entered allmulticast mode
[  623.334898][T15309] bridge_slave_0: entered promiscuous mode
[  623.429505][T15400] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1988: iget: checksum invalid
[  623.442540][T15309] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.449717][T15309] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.450770][T15400] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  623.473556][T15400] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1988: iget: checksum invalid
[  623.488804][T15400] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  623.500135][T15309] bridge_slave_1: entered allmulticast mode
[  623.508343][T15400] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1988: iget: checksum invalid
[  623.531539][T15309] bridge_slave_1: entered promiscuous mode
[  623.550438][T15400] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  623.601849][T15400] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1988: iget: checksum invalid
[  623.630487][T15400] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  623.655418][T15400] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  623.677769][T15400] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  623.786279][T15309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  623.826944][T15309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  623.953783][T15309] team0: Port device team_slave_0 added
[  623.983976][T15309] team0: Port device team_slave_1 added
[  624.141206][T15309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  624.166615][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  624.251992][T15415] ecryptfs_miscdev_write: Invalid packet size [192]
[  624.278498][T15309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  624.310289][T15309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  624.334630][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  624.412981][T15309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  624.633544][T15309] hsr_slave_0: entered promiscuous mode
[  624.657198][T15309] hsr_slave_1: entered promiscuous mode
[  624.690287][T15309] debugfs: 'hsr0' already exists in 'hsr'
[  624.721835][T15309] Cannot create hsr debugfs directory
[  625.595527][T15438] futex_wake_op: syz.3.1998 tries to shift op by -9; fix this program
[  626.529834][T15309] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  626.568902][T15309] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  626.622663][T15309] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  626.666634][T15309] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  627.019069][T15309] 8021q: adding VLAN 0 to HW filter on device bond0
[  627.059925][T15309] 8021q: adding VLAN 0 to HW filter on device team0
[  627.073843][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  627.080197][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  627.177119][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.184370][ T6991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.224914][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.232140][ T6976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  627.957652][T15309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  629.204333][T15309] veth0_vlan: entered promiscuous mode
[  629.246332][T15309] veth1_vlan: entered promiscuous mode
[  629.354976][T15309] veth0_macvtap: entered promiscuous mode
[  629.380826][T15309] veth1_macvtap: entered promiscuous mode
[  629.435758][T15309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.489013][T15309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.928982][ T6964] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.963408][ T6964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.046045][ T6964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.054815][ T6964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.579398][ T8326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.643266][ T8326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.769863][ T5925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.794802][ T5925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.260690][T15540] kexec: Could not allocate control_code_buffer
[  633.632041][T15555] FAULT_INJECTION: forcing a failure.
[  633.632041][T15555] name failslab, interval 1, probability 0, space 0, times 0
[  633.647291][T15555] CPU: 0 UID: 0 PID: 15555 Comm: syz.1.2016 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  633.647330][T15555] Tainted: [U]=USER
[  633.647339][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  633.647356][T15555] Call Trace:
[  633.647365][T15555]  <TASK>
[  633.647375][T15555]  dump_stack_lvl+0x16c/0x1f0
[  633.647405][T15555]  should_fail_ex+0x512/0x640
[  633.647427][T15555]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  633.647445][T15555]  should_failslab+0xc2/0x120
[  633.647464][T15555]  kmem_cache_alloc_noprof+0x75/0x6e0
[  633.647479][T15555]  ? security_file_alloc+0x34/0x2b0
[  633.647498][T15555]  ? security_file_alloc+0x34/0x2b0
[  633.647512][T15555]  security_file_alloc+0x34/0x2b0
[  633.647528][T15555]  init_file+0x93/0x4c0
[  633.647547][T15555]  alloc_empty_file+0x73/0x1e0
[  633.647567][T15555]  alloc_file_pseudo+0x13a/0x230
[  633.647587][T15555]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  633.647609][T15555]  ? do_raw_spin_unlock+0x172/0x230
[  633.647625][T15555]  __anon_inode_getfile+0xe8/0x280
[  633.647644][T15555]  anon_inode_getfile_fmode+0x37/0xa0
[  633.647663][T15555]  __do_sys_timerfd_create+0x216/0x3e0
[  633.647680][T15555]  ? do_syscall_64+0x91/0xfa0
[  633.647698][T15555]  do_syscall_64+0xcd/0xfa0
[  633.647716][T15555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.647731][T15555] RIP: 0033:0x7f6044f8f749
[  633.647743][T15555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  633.647757][T15555] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  633.647770][T15555] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  633.647780][T15555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  633.647788][T15555] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  633.647797][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  633.647805][T15555] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  633.647826][T15555]  </TASK>
[  634.316559][T15564] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers
[  634.585353][T15569] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4)
[  637.391813][T15618] bond0: invalid ARP target specified
[  637.542633][   T30] audit: type=1800 audit(8277292073.951:24): pid=15604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2027" name="lu_gp_id" dev="configfs" ino=64881 res=0 errno=0
[  638.226359][T15628] FAULT_INJECTION: forcing a failure.
[  638.226359][T15628] name failslab, interval 1, probability 0, space 0, times 0
[  638.263519][T15628] CPU: 1 UID: 0 PID: 15628 Comm: syz.1.2033 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  638.263564][T15628] Tainted: [U]=USER
[  638.263572][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  638.263588][T15628] Call Trace:
[  638.263597][T15628]  <TASK>
[  638.263608][T15628]  dump_stack_lvl+0x16c/0x1f0
[  638.263647][T15628]  should_fail_ex+0x512/0x640
[  638.263685][T15628]  ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[  638.263732][T15628]  should_failslab+0xc2/0x120
[  638.263768][T15628]  __kmalloc_node_track_caller_noprof+0xde/0x8a0
[  638.263801][T15628]  ? __debug_object_init+0x2de/0x3d0
[  638.263830][T15628]  ? kvasprintf_const+0x66/0x1a0
[  638.263864][T15628]  ? kvasprintf+0xbc/0x160
[  638.263886][T15628]  kvasprintf+0xbc/0x160
[  638.263910][T15628]  ? __pfx_kvasprintf+0x10/0x10
[  638.263939][T15628]  ? lockdep_init_map_type+0x5c/0x280
[  638.263982][T15628]  kvasprintf_const+0x66/0x1a0
[  638.264009][T15628]  kobject_set_name_vargs+0x5a/0x140
[  638.264045][T15628]  device_create_groups_vargs+0x1b1/0x270
[  638.264077][T15628]  device_create+0xed/0x130
[  638.264103][T15628]  ? __pfx_device_create+0x10/0x10
[  638.264130][T15628]  ? do_init_timer+0xc9/0x110
[  638.264163][T15628]  ? ieee80211_roc_setup+0x136/0x270
[  638.264193][T15628]  ? ieee80211_alloc_hw_nm+0x231/0x22b0
[  638.264234][T15628]  mac80211_hwsim_new_radio+0x36a/0x50b0
[  638.264278][T15628]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  638.264322][T15628]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  638.264362][T15628]  hwsim_new_radio_nl+0xba2/0x1330
[  638.264395][T15628]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  638.264435][T15628]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  638.264469][T15628]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  638.264511][T15628]  genl_family_rcv_msg_doit+0x209/0x2f0
[  638.264546][T15628]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  638.264591][T15628]  ? bpf_lsm_capable+0x9/0x10
[  638.264623][T15628]  ? security_capable+0x7e/0x260
[  638.264659][T15628]  ? ns_capable+0xd7/0x110
[  638.264697][T15628]  genl_rcv_msg+0x55c/0x800
[  638.264734][T15628]  ? __pfx_genl_rcv_msg+0x10/0x10
[  638.264773][T15628]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  638.264815][T15628]  netlink_rcv_skb+0x158/0x420
[  638.264843][T15628]  ? __pfx_genl_rcv_msg+0x10/0x10
[  638.264886][T15628]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  638.264938][T15628]  ? netlink_deliver_tap+0x1ae/0xd30
[  638.264975][T15628]  genl_rcv+0x28/0x40
[  638.265002][T15628]  netlink_unicast+0x5aa/0x870
[  638.265036][T15628]  ? __pfx_netlink_unicast+0x10/0x10
[  638.265078][T15628]  netlink_sendmsg+0x8c8/0xdd0
[  638.265112][T15628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.265145][T15628]  ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[  638.265188][T15628]  ____sys_sendmsg+0xa98/0xc70
[  638.265222][T15628]  ? copy_msghdr_from_user+0x10a/0x160
[  638.265247][T15628]  ? __pfx_____sys_sendmsg+0x10/0x10
[  638.265289][T15628]  ? __pfx_futex_wake_mark+0x10/0x10
[  638.265333][T15628]  ___sys_sendmsg+0x134/0x1d0
[  638.265361][T15628]  ? __pfx____sys_sendmsg+0x10/0x10
[  638.265385][T15628]  ? __lock_acquire+0x622/0x1c90
[  638.265463][T15628]  __sys_sendmsg+0x16d/0x220
[  638.265490][T15628]  ? __pfx___sys_sendmsg+0x10/0x10
[  638.265515][T15628]  ? __x64_sys_futex+0x1e0/0x4c0
[  638.265572][T15628]  do_syscall_64+0xcd/0xfa0
[  638.265606][T15628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.265632][T15628] RIP: 0033:0x7f6044f8f749
[  638.265654][T15628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  638.265680][T15628] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.265716][T15628] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  638.265736][T15628] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008
[  638.265754][T15628] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  638.265772][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  638.265790][T15628] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  638.265831][T15628]  </TASK>
[  638.875579][T15635] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2034: iget: checksum invalid
[  638.890566][T15635] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  638.903136][T15635] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2034: iget: checksum invalid
[  638.916659][T15635] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  638.929383][T15635] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2034: iget: checksum invalid
[  638.941011][T15635] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  638.969973][T15635] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2034: iget: checksum invalid
[  638.991754][T15635] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  639.040387][T15635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  639.071237][T15635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  640.171363][T15649] HfR: entered promiscuous mode
[  641.185649][T15664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'.
[  642.157681][   T30] audit: type=1800 audit(8277292078.555:25): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2043" name="lu_gp_id" dev="configfs" ino=65862 res=0 errno=0
[  643.157365][T15698] random: crng reseeded on system resumption
[  644.543455][T15726] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2055'.
[  645.373296][T15738] tipc: Started in network mode
[  645.397195][T15738] tipc: Node identity ee00, cluster identity 4711
[  645.456912][T15738] tipc: Node number set to 60928
[  645.637900][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[  645.918286][T15760] hub 8-0:1.0: USB hub found
[  645.924535][T15760] hub 8-0:1.0: 1 port detected
[  647.640023][T15786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2071'.
[  647.675573][T15786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2071'.
[  649.285144][T15842] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  649.291666][T15842] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  649.505494][T15851] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  649.511985][T15851] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  651.334132][T15896] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25
[  651.540258][T15900] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27
[  651.659008][T15904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2098: iget: checksum invalid
[  651.671077][T15904] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  651.682908][T15904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2098: iget: checksum invalid
[  651.694515][T15904] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  651.705930][T15904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2098: iget: checksum invalid
[  651.718034][T15904] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  651.729526][T15904] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2098: iget: checksum invalid
[  651.741519][T15904] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  651.751322][T15904] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  651.761229][T15904] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  652.161397][T15915] aoe: could not set interface list: too many interfaces
[  652.194035][T15912] hub 8-0:1.0: USB hub found
[  652.234842][T15912] hub 8-0:1.0: 1 port detected
[  652.838163][T15927] nbd: must specify an index to disconnect
[  653.042147][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'.
[  654.937710][T15962] phram: not enough arguments
[  655.241204][T15967] Console: switching to colour VGA+ 80x25
[  655.706813][T15981] svc: failed to register nfsdv3 RPC service (errno 111).
[  655.754619][T15981] svc: failed to register nfsaclv3 RPC service (errno 111).
[  655.806339][T15972] zswap: compressor  not available
[  655.825727][T15978] Setting dangerous option i915.mitigations - tainting kernel
[  655.855371][T15985] device-mapper: ioctl: name not supplied when creating device
[  655.932221][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'.
[  656.825625][T16012] sd 0:0:1:0: PR command failed: 1026
[  656.854953][T16012] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  656.872255][T16012] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  656.909430][T16012] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  657.429561][T16027] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2132'.
[  657.512527][T16029] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2132'.
[  659.424837][T16021] kexec: Could not allocate control_code_buffer
[  659.487891][T16065] FAULT_INJECTION: forcing a failure.
[  659.487891][T16065] name fail_futex, interval 1, probability 0, space 0, times 0
[  659.557406][T16065] CPU: 0 UID: 0 PID: 16065 Comm: syz.1.2141 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  659.557453][T16065] Tainted: [U]=USER
[  659.557463][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  659.557479][T16065] Call Trace:
[  659.557488][T16065]  <TASK>
[  659.557499][T16065]  dump_stack_lvl+0x16c/0x1f0
[  659.557537][T16065]  should_fail_ex+0x512/0x640
[  659.557580][T16065]  get_futex_key+0x1d0/0x1560
[  659.557618][T16065]  ? __pfx_get_futex_key+0x10/0x10
[  659.557664][T16065]  futex_wake+0xea/0x530
[  659.557706][T16065]  ? __pfx_futex_wake+0x10/0x10
[  659.557748][T16065]  ? lock_acquire+0x179/0x350
[  659.557781][T16065]  ? find_held_lock+0x2b/0x80
[  659.557812][T16065]  do_futex+0x1e3/0x350
[  659.557846][T16065]  ? __pfx_do_futex+0x10/0x10
[  659.557889][T16065]  __x64_sys_futex+0x1e0/0x4c0
[  659.557928][T16065]  ? __pfx___x64_sys_futex+0x10/0x10
[  659.557969][T16065]  ? __pfx___do_sys_prctl+0x10/0x10
[  659.558022][T16065]  do_syscall_64+0xcd/0xfa0
[  659.558057][T16065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.558084][T16065] RIP: 0033:0x7f6044f8f749
[  659.558107][T16065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  659.558132][T16065] RSP: 002b:00007f6045ec50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  659.558157][T16065] RAX: ffffffffffffffda RBX: 00007f60451e5fa8 RCX: 00007f6044f8f749
[  659.558175][T16065] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f60451e5fac
[  659.558191][T16065] RBP: 00007f60451e5fa0 R08: 00007f6045ec6000 R09: 0000000000000000
[  659.558208][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.558223][T16065] R13: 00007f60451e6038 R14: 00007fffe358f6c0 R15: 00007fffe358f7a8
[  659.558260][T16065]  </TASK>
[  659.742898][    C0] vkms_vblank_simulate: vblank timer overrun
[  660.108829][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2144'.
[  660.707840][T16072] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  660.725007][T16072] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  660.766180][T16072] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  660.773882][T16072] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  660.780180][T16072] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  660.788710][T16072] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  660.801682][T16072] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  661.348082][T16121] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2153'.
[  661.467140][T16127] bond0: invalid ARP target specified
[  662.000633][T13042] Bluetooth: hci1: command 0x0c1a tx timeout
[  662.597728][T16137] Invalid ELF header magic: != ELF
[  662.730696][T13042] Bluetooth: hci2: command 0x0c1a tx timeout
[  662.795868][T13042] Bluetooth: hci0: command 0x0c1a tx timeout
[  662.802819][T13041] Bluetooth: hci3: command 0x0c1a tx timeout
[  663.177623][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'.
[  663.846314][T16169] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2164'.
[  664.835361][T16181] blktrace: Concurrent blktraces are not allowed on loop5
[  664.867930][T13042] Bluetooth: hci0: command 0x0c1a tx timeout
[  664.874677][T13042] Bluetooth: hci3: command 0x0c1a tx timeout
[  665.241399][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2170'.
[  665.730745][T16204] : renamed from gre0 (while UP)
[  665.849657][T16209] netlink: zone id is out of range
[  665.870126][T16209] netlink: zone id is out of range
[  665.936392][T16213] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2177'.
[  666.660697][T13042] Bluetooth: hci1: Malformed HCI Event
[  666.758401][T16223] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2181: iget: checksum invalid
[  666.785624][T16223] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  666.797884][T16223] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2181: iget: checksum invalid
[  666.934372][T13042] Bluetooth: hci0: command 0x0c1a tx timeout
[  667.067521][T16223] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  667.078737][T16223] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2181: iget: checksum invalid
[  667.090082][T16223] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  667.100836][T16223] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2181: iget: checksum invalid
[  667.112196][T16223] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  667.122468][T16223] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  667.132392][T16223] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  667.558367][T16235] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  667.565697][T16235] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  667.572234][T16235] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  667.578516][T16235] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  667.596779][T16235] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  668.158733][T16256] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  668.654540][T16264] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2189'.
[  668.695722][T16264] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2189'.
[  668.874192][T13042] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5
[  669.500500][T13042] Bluetooth: hci1: command 0x0c1a tx timeout
[  669.652533][T13041] Bluetooth: hci2: command 0x0c1a tx timeout
[  669.661461][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  669.669083][T13042] Bluetooth: hci0: command 0x0c1a tx timeout
[  671.719501][T13042] Bluetooth: hci3: command 0x0c1a tx timeout
[  671.737863][T16327] netlink: 'syz.1.2201': attribute type 11 has an invalid length.
[  671.759187][T16327] netlink: 'syz.1.2201': attribute type 11 has an invalid length.
[  671.929546][T16327] netlink: 'syz.1.2201': attribute type 11 has an invalid length.
[  671.937524][T16327] netlink: 'syz.1.2201': attribute type 11 has an invalid length.
[  672.073994][T16327] netlink: 'syz.1.2201': attribute type 11 has an invalid length.
[  672.085492][T16332] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2)
[  672.086933][T16329] ima: policy update failed
[  672.199543][   T30] audit: type=1802 audit(8277292108.741:26): pid=16329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2202" res=0 errno=0
[  673.237673][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'.
[  673.635455][T16356] Invalid ELF header magic: != ELF
[  674.216439][T13042] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5
[  676.785501][T16413] queue_state_write: unsupported operation ''
[  676.825933][T16413] queue_state_write: use 'run', 'start' or 'kick'
[  677.076737][T13042] Bluetooth: hci0: Malformed LE Event: 0x1d
[  677.104897][T16420] FAULT_INJECTION: forcing a failure.
[  677.104897][T16420] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  677.221578][T16420] CPU: 1 UID: 0 PID: 16420 Comm: syz.5.2222 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  677.221624][T16420] Tainted: [U]=USER
[  677.221634][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  677.221651][T16420] Call Trace:
[  677.221661][T16420]  <TASK>
[  677.221673][T16420]  dump_stack_lvl+0x16c/0x1f0
[  677.221713][T16420]  should_fail_ex+0x512/0x640
[  677.221757][T16420]  should_fail_alloc_page+0xe7/0x130
[  677.221795][T16420]  prepare_alloc_pages+0x3c2/0x610
[  677.221829][T16420]  ? rcu_is_watching+0x12/0xc0
[  677.221862][T16420]  __alloc_frozen_pages_noprof+0x18b/0x2470
[  677.221901][T16420]  ? __lock_acquire+0x622/0x1c90
[  677.221942][T16420]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  677.221985][T16420]  ? __lock_acquire+0x622/0x1c90
[  677.222031][T16420]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  677.222078][T16420]  ? policy_nodemask+0xea/0x4e0
[  677.222118][T16420]  alloc_pages_mpol+0x1fb/0x550
[  677.222156][T16420]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  677.222201][T16420]  folio_alloc_mpol_noprof+0x36/0x2f0
[  677.222241][T16420]  vma_alloc_folio_noprof+0xed/0x1e0
[  677.222278][T16420]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  677.222328][T16420]  do_pte_missing+0x2202/0x3ba0
[  677.222368][T16420]  ? find_held_lock+0x2b/0x80
[  677.222405][T16420]  __handle_mm_fault+0x1556/0x2aa0
[  677.222455][T16420]  ? __pfx___handle_mm_fault+0x10/0x10
[  677.222495][T16420]  ? __pte_offset_map_lock+0x174/0x310
[  677.222529][T16420]  ? find_held_lock+0x2b/0x80
[  677.222566][T16420]  ? follow_page_pte+0x5cf/0x1390
[  677.222607][T16420]  handle_mm_fault+0x589/0xd10
[  677.222654][T16420]  __get_user_pages+0x54e/0x3530
[  677.222704][T16420]  ? __pfx___get_user_pages+0x10/0x10
[  677.222748][T16420]  populate_vma_page_range+0x267/0x3f0
[  677.222781][T16420]  ? __pfx_populate_vma_page_range+0x10/0x10
[  677.222811][T16420]  ? __pfx_find_vma_intersection+0x10/0x10
[  677.222839][T16420]  ? do_mmap+0x69c/0x1210
[  677.222871][T16420]  __mm_populate+0x1d8/0x380
[  677.222903][T16420]  ? __pfx___mm_populate+0x10/0x10
[  677.222940][T16420]  ? up_write+0x1b2/0x520
[  677.223008][T16420]  vm_mmap_pgoff+0x37f/0x470
[  677.223055][T16420]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  677.223099][T16420]  ? __x64_sys_futex+0x1e0/0x4c0
[  677.223132][T16420]  ? __x64_sys_futex+0x1e9/0x4c0
[  677.223171][T16420]  ksys_mmap_pgoff+0x7d/0x5c0
[  677.223203][T16420]  ? syscall_user_dispatch+0x78/0x140
[  677.223232][T16420]  __x64_sys_mmap+0x125/0x190
[  677.223274][T16420]  do_syscall_64+0xcd/0xfa0
[  677.223309][T16420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.223337][T16420] RIP: 0033:0x7fed3ad8f749
[  677.223359][T16420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  677.223383][T16420] RSP: 002b:00007fed3bc76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  677.223409][T16420] RAX: ffffffffffffffda RBX: 00007fed3afe5fa0 RCX: 00007fed3ad8f749
[  677.223426][T16420] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[  677.223443][T16420] RBP: 00007fed3ae13f91 R08: 0000000000000007 R09: 0000000000028000
[  677.223460][T16420] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  677.223477][T16420] R13: 00007fed3afe6038 R14: 00007fed3afe5fa0 R15: 00007ffe41e9fc98
[  677.223515][T16420]  </TASK>
[  680.929644][T16452] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  680.992056][T16452] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  681.090872][T16465] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2231'.
[  681.100340][T16452] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  681.142422][T16452] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  681.269935][T16452] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  681.361445][T16468] Invalid ELF header magic: != ELF
[  681.402556][T16455] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  681.677629][   T30] audit: type=1800 audit(8277292118.310:27): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2234" name="discovery_nqn" dev="configfs" ino=69711 res=0 errno=0
[  681.865665][T16477] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2235'.
[  682.345970][T16481] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2237'.
[  682.398369][T16481] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2237'.
[  682.744786][T16489] netlink: 'syz.1.2239': attribute type 2 has an invalid length.
[  682.931209][T13042] Bluetooth: hci1: command 0x0c1a tx timeout
[  683.026038][T13042] Bluetooth: hci2: command 0x0c1a tx timeout
[  683.173717][T13042] Bluetooth: hci3: command 0x0c1a tx timeout
[  683.330023][T13042] Bluetooth: hci0: command 0x0c1a tx timeout
[  683.582380][T16504] netlink: 'syz.1.2242': attribute type 1 has an invalid length.
[  684.493602][T16506] zswap: compressor  not available
[  685.258897][T13042] Bluetooth: hci3: command 0x0c1a tx timeout
[  686.780078][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'.
[  688.204249][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  688.210699][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  688.803646][T16580] vivid-007: =================  START STATUS  =================
[  688.839615][T16580] vivid-007: Test Pattern: 75% Colorbar
[  688.870583][T16580] vivid-007: Fill Percentage of Frame: 100
[  688.890436][T16580] vivid-007: Horizontal Movement: No Movement
[  688.896583][T16580] vivid-007: Vertical Movement: No Movement
[  688.949838][T16580] vivid-007: OSD Text Mode: All
[  688.954901][T16580] vivid-007: Show Border: false
[  688.984954][T16580] vivid-007: Show Square: false
[  688.998598][T16580] vivid-007: Sensor Flipped Horizontally: false
[  689.056616][T16580] vivid-007: Sensor Flipped Vertically: false
[  689.069399][T16580] vivid-007: Insert SAV Code in Image: false
[  689.075659][T16580] vivid-007: Insert EAV Code in Image: false
[  689.082343][T16580] vivid-007: Insert Video Guard Band: false
[  689.088565][T16580] vivid-007: Reduced Framerate: false
[  689.094312][T16580] vivid-007: HDMI 007-0 Is Connected To: Test Pattern Generator
[  689.102193][T16580] vivid-007: S-Video 007-0 Is Connected To: Test Pattern Generator
[  689.119084][T16580] vivid-007: Enable Capture Cropping: true
[  689.125115][T16580] vivid-007: Enable Capture Composing: true
[  689.139942][T16580] vivid-007: Enable Capture Scaler: true
[  689.174569][T16580] vivid-007: Timestamp Source: End of Frame
[  689.180722][T16580] vivid-007: Colorspace: sRGB
[  689.199245][T16580] vivid-007: Transfer Function: Default
[  689.239380][T16580] vivid-007: Y'CbCr Encoding: Default
[  689.282868][T16580] vivid-007: HSV Encoding: Hue 0-179
[  689.294136][T16580] vivid-007: Quantization: Default
[  689.329191][T16580] vivid-007: Apply Alpha To Red Only: false
[  689.371188][T16580] vivid-007: Standard Aspect Ratio: 4x3
[  689.388299][T16580] vivid-007: DV Timings Signal Mode: Current DV Timings inactive
[  689.407991][T16580] vivid-007: DV Timings: 640x480p59 inactive
[  689.437290][T16580] vivid-007: DV Timings Aspect Ratio: Source Width x Height
[  689.489865][T16580] vivid-007: Maximum EDID Blocks: 2
[  689.497166][T16580] vivid-007: Limited RGB Range (16-235): false
[  689.612562][T16580] vivid-007: Rx RGB Quantization Range: Automatic
[  689.652306][T16580] vivid-007: Power Present: 0x00000001
[  689.658101][   T30] audit: type=1800 audit(8277292126.332:28): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2256" name="lu_gp_id" dev="configfs" ino=70127 res=0 errno=0
[  689.701877][T16580] tpg source WxH: 320x240 (Y'CbCr)
[  689.721341][T16580] tpg field: 1
[  689.758864][T16580] tpg crop: (0,0)/320x240
[  689.825351][T16580] tpg compose: (0,0)/320x240
[  689.830085][T16580] tpg colorspace: 8
[  689.852881][T16580] tpg transfer function: 0/0
[  689.857672][   T13] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:1: bg 2: bad block bitmap checksum
[  689.897863][T16580] tpg Y'CbCr encoding: 0/0
[  689.902524][T16580] tpg quantization: 0/0
[  689.915106][T16580] tpg RGB range: 0/2
[  689.919513][   T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 10 with max blocks 26 with error 74
[  689.942846][T16580] vivid-007: ==================  END STATUS  ==================
[  689.983215][   T13] EXT4-fs (sda1): This should not happen!! Data will be lost
[  689.983215][   T13] 

syzkaller
syzkaller login: [  691.832709][T16632] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2266'.
[  692.135534][T16639] hub 1-0:1.0: USB hub found
[  692.145773][T16639] hub 1-0:1.0: 1 port detected
[  692.398160][T16639] hub 1-0:1.0: USB hub found
[  692.459385][T16639] hub 1-0:1.0: 1 port detected
[  694.608692][T16648] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  696.645190][T16741] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string
[  696.666603][   T24] smpboot: CPU 0 is now offline
[  698.090535][T16769] can: request_module (can-proto-0) failed.
[  698.170939][T16772] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x5b8 pfn:0x78000
[  698.273063][T16772] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  698.332151][T16772] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  698.392651][T16772] raw: 00000000000005b8 0000000000000000 00000001ffffffff 0000000000000000
[  698.424220][T16772] page dumped because: unmovable page
[  698.460386][T16772] page_owner tracks the page as allocated
[  698.490201][T16772] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 11863, tgid 11861 (syz.1.1214), ts 420694627391, free_ts 420692112873
[  698.608684][T16772]  post_alloc_hook+0x1af/0x220
[  698.618776][T16772]  get_page_from_freelist+0x10a3/0x3a30
[  698.649432][T16772]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  698.685974][T16772]  alloc_pages_mpol+0x1fb/0x550
[  698.722279][T16772]  alloc_pages_noprof+0x131/0x390
[  698.727467][T16772]  stack_depot_save_flags+0x933/0x9c0
[  698.780040][T16772]  kasan_save_stack+0x42/0x60
[  698.784899][T16772]  kasan_save_track+0x14/0x30
[  698.832817][T16772]  __kasan_kmalloc+0xaa/0xb0
[  698.837922][T16772]  __ipv6_dev_mc_inc+0x2f1/0xbc0
[  698.898063][T16772]  ipv6_add_dev+0xbc6/0x15f0
[  698.902785][T16772]  addrconf_notify+0x53e/0x19e0
[  698.949935][T16772]  notifier_call_chain+0xbc/0x410
[  698.955191][T16772]  call_netdevice_notifiers_info+0xbe/0x140
[  699.000808][T16772]  register_netdevice+0x182e/0x2270
[  699.036624][T16772]  register_netdev+0x34/0x50
[  699.051618][T16772] page last free pid 11863 tgid 11861 stack trace:
[  699.077318][T16772]  __free_frozen_pages+0x7df/0x1160
[  699.115489][T16772]  stack_depot_save_flags+0x352/0x9c0
[  699.148061][T16772]  ref_tracker_alloc+0x1e1/0x5b0
[  699.153052][T16772]  net_rx_queue_update_kobjects+0x334/0x770
[  699.209098][T16772]  netdev_register_kobject+0x290/0x3d0
[  699.214601][T16772]  register_netdevice+0x13dc/0x2270
[  699.266260][T16772]  register_netdev+0x34/0x50
[  699.293962][T16772]  loopback_net_init+0x7a/0x170
[  699.328557][T16772]  ops_init+0x1e2/0x5f0
[  699.345672][T16772]  setup_net+0x100/0x390
[  699.407805][T16772]  copy_net_ns+0x2f8/0x690
[  699.412364][T16772]  create_new_namespaces+0x3ea/0xa90
[  699.449977][T16772]  copy_namespaces+0x468/0x560
[  699.454800][T16772]  copy_process+0x2828/0x76a0
[  699.489997][T16772]  kernel_clone+0xfc/0x930
[  699.514935][T16772]  __do_sys_clone+0xce/0x120
[  700.249994][T16813] FAULT_INJECTION: forcing a failure.
[  700.249994][T16813] name failslab, interval 1, probability 0, space 0, times 0
[  700.377810][T16813] CPU: 1 UID: 0 PID: 16813 Comm: syz.1.2309 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  700.377841][T16813] Tainted: [U]=USER
[  700.377846][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  700.377855][T16813] Call Trace:
[  700.377862][T16813]  <TASK>
[  700.377869][T16813]  dump_stack_lvl+0x16c/0x1f0
[  700.377908][T16813]  should_fail_ex+0x512/0x640
[  700.377931][T16813]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  700.377949][T16813]  should_failslab+0xc2/0x120
[  700.377969][T16813]  kmem_cache_alloc_noprof+0x75/0x6e0
[  700.377984][T16813]  ? sk_prot_alloc+0x60/0x2a0
[  700.378006][T16813]  ? sk_prot_alloc+0x60/0x2a0
[  700.378021][T16813]  sk_prot_alloc+0x60/0x2a0
[  700.378040][T16813]  sk_alloc+0x36/0xc20
[  700.378062][T16813]  smc_create+0x114/0x2a0
[  700.378079][T16813]  __sock_create+0x338/0x8d0
[  700.378102][T16813]  __sys_socket+0x14d/0x260
[  700.378119][T16813]  ? __fget_files+0x20e/0x3c0
[  700.378134][T16813]  ? __pfx___sys_socket+0x10/0x10
[  700.378153][T16813]  ? xfd_validate_state+0x61/0x180
[  700.378178][T16813]  __x64_sys_socket+0x72/0xb0
[  700.378195][T16813]  ? lockdep_hardirqs_on+0x7c/0x110
[  700.378212][T16813]  do_syscall_64+0xcd/0xfa0
[  700.378231][T16813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.378246][T16813] RIP: 0033:0x7f6044f8f749
[  700.378259][T16813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.378273][T16813] RSP: 002b:00007f6045ec5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  700.378288][T16813] RAX: ffffffffffffffda RBX: 00007f60451e5fa0 RCX: 00007f6044f8f749
[  700.378298][T16813] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b
[  700.378307][T16813] RBP: 00007f6045013f91 R08: 0000000000000000 R09: 0000000000000000
[  700.378315][T16813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  700.378324][T16813] R13: 00007f60451e6038 R14: 00007f60451e5fa0 R15: 00007fffe358f7a8
[  700.378345][T16813]  </TASK>
[  700.623807][T16817] __vm_enough_memory: pid: 16817, comm: syz.1.2309, bytes: 4398046511104 not enough memory for the allocation
[  700.989422][T16821] FAULT_INJECTION: forcing a failure.
[  700.989422][T16821] name failslab, interval 1, probability 0, space 0, times 0
[  701.039318][T16821] CPU: 1 UID: 0 PID: 16821 Comm: syz.5.2310 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  701.039350][T16821] Tainted: [U]=USER
[  701.039356][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  701.039365][T16821] Call Trace:
[  701.039371][T16821]  <TASK>
[  701.039377][T16821]  dump_stack_lvl+0x16c/0x1f0
[  701.039401][T16821]  should_fail_ex+0x512/0x640
[  701.039423][T16821]  ? fs_reclaim_acquire+0xae/0x150
[  701.039445][T16821]  should_failslab+0xc2/0x120
[  701.039470][T16821]  __kmalloc_noprof+0xdd/0x880
[  701.039493][T16821]  ? tomoyo_encode2+0x100/0x3e0
[  701.039514][T16821]  ? tomoyo_encode2+0x100/0x3e0
[  701.039529][T16821]  tomoyo_encode2+0x100/0x3e0
[  701.039547][T16821]  tomoyo_encode+0x29/0x50
[  701.039563][T16821]  tomoyo_realpath_from_path+0x18f/0x6e0
[  701.039590][T16821]  tomoyo_path_number_perm+0x245/0x580
[  701.039603][T16821]  ? tomoyo_path_number_perm+0x237/0x580
[  701.039619][T16821]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  701.039632][T16821]  ? futex_wake+0x1ad/0x530
[  701.039672][T16821]  ? find_held_lock+0x2b/0x80
[  701.039687][T16821]  ? hook_file_ioctl_common+0x145/0x410
[  701.039706][T16821]  ? __fget_files+0x20e/0x3c0
[  701.039725][T16821]  security_file_ioctl+0x9b/0x240
[  701.039741][T16821]  __x64_sys_ioctl+0xb7/0x210
[  701.039763][T16821]  do_syscall_64+0xcd/0xfa0
[  701.039783][T16821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.039798][T16821] RIP: 0033:0x7fed3ad8f749
[  701.039810][T16821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  701.039824][T16821] RSP: 002b:00007fed3bc55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  701.039839][T16821] RAX: ffffffffffffffda RBX: 00007fed3afe6090 RCX: 00007fed3ad8f749
[  701.039849][T16821] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007
[  701.039857][T16821] RBP: 00007fed3ae13f91 R08: 0000000000000000 R09: 0000000000000000
[  701.039866][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  701.039874][T16821] R13: 00007fed3afe6128 R14: 00007fed3afe6090 R15: 00007ffe41e9fc98
[  701.039895][T16821]  </TASK>
[  701.260491][T16821] ERROR: Out of memory at tomoyo_realpath_from_path.
[  702.142510][T16843] FAULT_INJECTION: forcing a failure.
[  702.142510][T16843] name failslab, interval 1, probability 0, space 0, times 0
[  702.295259][T16843] CPU: 1 UID: 0 PID: 16843 Comm: syz.1.2314 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  702.295285][T16843] Tainted: [U]=USER
[  702.295290][T16843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  702.295300][T16843] Call Trace:
[  702.295306][T16843]  <TASK>
[  702.295312][T16843]  dump_stack_lvl+0x16c/0x1f0
[  702.295334][T16843]  should_fail_ex+0x512/0x640
[  702.295357][T16843]  ? __kmalloc_cache_noprof+0x5f/0x780
[  702.295374][T16843]  should_failslab+0xc2/0x120
[  702.295394][T16843]  __kmalloc_cache_noprof+0x72/0x780
[  702.295408][T16843]  ? copy_mount_options+0x55/0x190
[  702.295430][T16843]  ? copy_mount_options+0x55/0x190
[  702.295448][T16843]  copy_mount_options+0x55/0x190
[  702.295468][T16843]  __x64_sys_mount+0x1ab/0x310
[  702.295486][T16843]  ? __pfx___x64_sys_mount+0x10/0x10
[  702.295509][T16843]  do_syscall_64+0xcd/0xfa0
[  702.295528][T16843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.295543][T16843] RIP: 0033:0x7f6044f8f749
[  702.295555][T16843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  702.295570][T16843] RSP: 002b:00007f6045ea4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  702.295584][T16843] RAX: ffffffffffffffda RBX: 00007f60451e6090 RCX: 00007f6044f8f749
[  702.295594][T16843] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000080
[  702.295603][T16843] RBP: 00007f6045013f91 R08: 0000200000000240 R09: 0000000000000000
[  702.295614][T16843] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  702.295623][T16843] R13: 00007f60451e6128 R14: 00007f60451e6090 R15: 00007fffe358f7a8
[  702.295652][T16843]  </TASK>
[  703.981253][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'.
[  704.051468][T16863] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2316'.
[  706.706741][T13041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  706.720565][T13041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  706.731009][T13041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  706.739851][T13041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  706.753955][T13041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  707.236657][T16917] syz.5.2330 (16917): /proc/16912/oom_adj is deprecated, please use /proc/16912/oom_score_adj instead.
[  707.815487][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2332'.
[  708.798489][T13041] Bluetooth: hci4: command tx timeout
[  709.566166][T16903] chnl_net:caif_netlink_parms(): no params data found
[  710.097104][T16963] zswap: compressor  not available
[  710.165501][T16903] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.204583][T16903] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.246831][T16903] bridge_slave_0: entered allmulticast mode
[  710.290011][T16903] bridge_slave_0: entered promiscuous mode
[  710.357500][T16903] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.416180][T16903] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.452647][T16903] bridge_slave_1: entered allmulticast mode
[  710.511192][T16903] bridge_slave_1: entered promiscuous mode
[  710.684262][T16903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.778060][T16903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.866851][T13041] Bluetooth: hci4: command tx timeout
[  711.116919][T16903] team0: Port device team_slave_0 added
[  711.175464][T16903] team0: Port device team_slave_1 added
[  711.378736][T16903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  711.411403][T16903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  711.530741][T16903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  711.688276][T16989] netlink: 178 bytes leftover after parsing attributes in process `syz.1.2346'.
[  711.716752][T16903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  711.749831][T16903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  711.838709][T16903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  712.147566][T16903] hsr_slave_0: entered promiscuous mode
[  712.180195][T16903] hsr_slave_1: entered promiscuous mode
[  712.205516][T16903] debugfs: 'hsr0' already exists in 'hsr'
[  712.230627][T16903] Cannot create hsr debugfs directory
[  712.935365][T13041] Bluetooth: hci4: command tx timeout
[  713.561674][T17010] input: 00
[  713.561674][T17010]  as /devices/virtual/input/input29
[  713.594564][T17012] nvme_fcloop: unknown parameter or missing value '0'
[  713.663395][T17012] hub 1-0:1.0: USB hub found
[  713.680461][T16903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.752843][T17012] hub 1-0:1.0: 1 port detected
[  713.818536][T17017] block nbd2: Dead connection, failed to find a fallback
[  713.880254][T17017] block nbd2: shutting down sockets
[  713.922983][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  713.991114][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  714.038084][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.075248][T16903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.101572][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  714.138274][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.197546][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  714.255782][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.291740][T16903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.307123][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  714.350567][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.400390][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  714.442682][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.509724][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  714.539539][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  714.562179][T16903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.599115][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  714.641568][T16903] 
[  714.644007][T16903] ======================================================
[  714.651004][T16903] WARNING: possible circular locking dependency detected
[  714.658020][T16903] syzkaller #0 Tainted: G     U             
[  714.663985][T16903] ------------------------------------------------------
[  714.670998][T16903] syz-executor/16903 is trying to acquire lock:
[  714.677229][T16903] ffff888140450188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x2f/0x50
[  714.686454][T16903] 
[  714.686454][T16903] but task is already holding lock:
[  714.693811][T16903] ffffffff8f273908 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xca/0x250
[  714.702532][T16903] 
[  714.702532][T16903] which lock already depends on the new lock.
[  714.702532][T16903] 
[  714.712924][T16903] 
[  714.712924][T16903] the existing dependency chain (in reverse order) is:
[  714.722005][T16903] 
[  714.722005][T16903] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  714.729296][T16903]        __mutex_lock+0x193/0x1060
[  714.734408][T16903]        get_device_parent+0x10a/0x4e0
[  714.739946][T16903]        device_add+0xbed/0x1aa0
[  714.744880][T16903]        device_create_groups_vargs+0x1f8/0x270
[  714.751312][T16903]        device_create+0xed/0x130
[  714.756328][T16903]        msr_device_create+0x31/0x70
[  714.761627][T16903]        cpuhp_invoke_callback+0x3d5/0xa10
[  714.767420][T16903]        cpuhp_thread_fun+0x47e/0x6f0
[  714.772776][T16903]        smpboot_thread_fn+0x3f7/0xae0
[  714.778221][T16903]        kthread+0x3c5/0x780
[  714.782832][T16903]        ret_from_fork+0x675/0x7d0
[  714.787947][T16903]        ret_from_fork_asm+0x1a/0x30
[  714.793235][T16903] 
[  714.793235][T16903] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  714.800863][T16903]        cpuhp_thread_fun+0x193/0x6f0
[  714.806317][T16903]        smpboot_thread_fn+0x3f7/0xae0
[  714.811764][T16903]        kthread+0x3c5/0x780
[  714.816350][T16903]        ret_from_fork+0x675/0x7d0
[  714.821469][T16903]        ret_from_fork_asm+0x1a/0x30
[  714.826770][T16903] 
[  714.826770][T16903] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  714.834493][T16903]        cpus_read_lock+0x42/0x160
[  714.839697][T16903]        static_key_slow_inc+0x12/0x30
[  714.845627][T16903]        udp_lib_setsockopt+0xa33/0xcf0
[  714.851172][T16903]        udp_setsockopt+0xbc/0xd0
[  714.856187][T16903]        do_sock_setsockopt+0xf3/0x1d0
[  714.861643][T16903]        __sys_setsockopt+0x120/0x1a0
[  714.866995][T16903]        __x64_sys_setsockopt+0xbd/0x160
[  714.872614][T16903]        do_syscall_64+0xcd/0xfa0
[  714.877624][T16903]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.884022][T16903] 
[  714.884022][T16903] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}:
[  714.891651][T16903]        lock_sock_nested+0x41/0xf0
[  714.896839][T16903]        inet_shutdown+0x67/0x440
[  714.901861][T16903]        nbd_mark_nsock_dead+0xae/0x5d0
[  714.907479][T16903]        recv_work+0x671/0xa80
[  714.912234][T16903]        process_one_work+0x9cf/0x1b70
[  714.917684][T16903]        worker_thread+0x6c8/0xf10
[  714.922959][T16903]        kthread+0x3c5/0x780
[  714.927546][T16903]        ret_from_fork+0x675/0x7d0
[  714.932662][T16903]        ret_from_fork_asm+0x1a/0x30
[  714.938080][T16903] 
[  714.938080][T16903] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  714.945712][T16903]        __mutex_lock+0x193/0x1060
[  714.950818][T16903]        nbd_queue_rq+0x423/0x12d0
[  714.955922][T16903]        blk_mq_dispatch_rq_list+0x416/0x1e20
[  714.961972][T16903]        __blk_mq_sched_dispatch_requests+0xcb7/0x15f0
[  714.968892][T16903]        blk_mq_sched_dispatch_requests+0xd8/0x1b0
[  714.975637][T16903]        blk_mq_run_hw_queue+0x239/0x670
[  714.981707][T16903]        blk_mq_dispatch_list+0x514/0x1310
[  714.987500][T16903]        blk_mq_flush_plug_list+0x130/0x600
[  714.993405][T16903]        __blk_flush_plug+0x2c4/0x4b0
[  714.998938][T16903]        __submit_bio+0x545/0x690
[  715.003947][T16903]        submit_bio_noacct_nocheck+0x53d/0xc10
[  715.010219][T16903]        submit_bio_noacct+0x5bd/0x1f60
[  715.015789][T16903]        block_read_full_folio+0x4db/0x850
[  715.021784][T16903]        filemap_read_folio+0xc8/0x2a0
[  715.027318][T16903]        do_read_cache_folio+0x263/0x5c0
[  715.033121][T16903]        read_part_sector+0xd4/0x370
[  715.038559][T16903]        adfspart_check_ICS+0x93/0x940
[  715.044013][T16903]        bdev_disk_changed+0x723/0x1520
[  715.049575][T16903]        blkdev_get_whole+0x187/0x290
[  715.054949][T16903]        bdev_open+0x2c7/0xe40
[  715.059692][T16903]        blkdev_open+0x34e/0x4f0
[  715.064674][T16903]        do_dentry_open+0x982/0x1530
[  715.069959][T16903]        vfs_open+0x82/0x3f0
[  715.074555][T16903]        path_openat+0x1de4/0x2cb0
[  715.079651][T16903]        do_filp_open+0x20b/0x470
[  715.084658][T16903]        do_sys_openat2+0x11b/0x1d0
[  715.089843][T16903]        __x64_sys_openat+0x174/0x210
[  715.095200][T16903]        do_syscall_64+0xcd/0xfa0
[  715.100209][T16903]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.106607][T16903] 
[  715.106607][T16903] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  715.113802][T16903]        __mutex_lock+0x193/0x1060
[  715.118901][T16903]        nbd_queue_rq+0xbd/0x12d0
[  715.123912][T16903]        blk_mq_dispatch_rq_list+0x416/0x1e20
[  715.129965][T16903]        __blk_mq_sched_dispatch_requests+0xcb7/0x15f0
[  715.136915][T16903]        blk_mq_sched_dispatch_requests+0xd8/0x1b0
[  715.143440][T16903]        blk_mq_run_hw_queue+0x239/0x670
[  715.149071][T16903]        blk_mq_dispatch_list+0x514/0x1310
[  715.154864][T16903]        blk_mq_flush_plug_list+0x130/0x600
[  715.160753][T16903]        __blk_flush_plug+0x2c4/0x4b0
[  715.166108][T16903]        __submit_bio+0x545/0x690
[  715.171114][T16903]        submit_bio_noacct_nocheck+0x53d/0xc10
[  715.177254][T16903]        submit_bio_noacct+0x5bd/0x1f60
[  715.182800][T16903]        block_read_full_folio+0x4db/0x850
[  715.188604][T16903]        filemap_read_folio+0xc8/0x2a0
[  715.194050][T16903]        do_read_cache_folio+0x263/0x5c0
[  715.199760][T16903]        read_part_sector+0xd4/0x370
[  715.205029][T16903]        adfspart_check_ICS+0x93/0x940
[  715.210470][T16903]        bdev_disk_changed+0x723/0x1520
[  715.216092][T16903]        blkdev_get_whole+0x187/0x290
[  715.221451][T16903]        bdev_open+0x2c7/0xe40
[  715.226198][T16903]        blkdev_open+0x34e/0x4f0
[  715.231124][T16903]        do_dentry_open+0x982/0x1530
[  715.236486][T16903]        vfs_open+0x82/0x3f0
[  715.241123][T16903]        path_openat+0x1de4/0x2cb0
[  715.246220][T16903]        do_filp_open+0x20b/0x470
[  715.251245][T16903]        do_sys_openat2+0x11b/0x1d0
[  715.256429][T16903]        __x64_sys_openat+0x174/0x210
[  715.261896][T16903]        do_syscall_64+0xcd/0xfa0
[  715.266944][T16903]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.273632][T16903] 
[  715.273632][T16903] -> #4 (set->srcu){.+.+}-{0:0}:
[  715.280841][T16903]        __synchronize_srcu+0xa1/0x290
[  715.286478][T16903]        blk_mq_quiesce_queue+0x149/0x1b0
[  715.292197][T16903]        elevator_switch+0x17d/0x810
[  715.297567][T16903]        elevator_change+0x391/0x5d0
[  715.302853][T16903]        elevator_set_default+0x2e9/0x380
[  715.308575][T16903]        blk_register_queue+0x384/0x4e0
[  715.314151][T16903]        __add_disk+0x74a/0xf00
[  715.319030][T16903]        add_disk_fwnode+0x13f/0x5d0
[  715.324317][T16903]        nbd_dev_add+0x783/0xbb0
[  715.329427][T16903]        nbd_init+0x1a2/0x3c0
[  715.334091][T16903]        do_one_initcall+0x123/0x6e0
[  715.339372][T16903]        kernel_init_freeable+0x5c8/0x920
[  715.345086][T16903]        kernel_init+0x1c/0x2b0
[  715.349928][T16903]        ret_from_fork+0x675/0x7d0
[  715.355029][T16903]        ret_from_fork_asm+0x1a/0x30
[  715.360308][T16903] 
[  715.360308][T16903] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  715.368803][T16903]        __mutex_lock+0x193/0x1060
[  715.373938][T16903]        queue_requests_store+0x3a7/0x670
[  715.379775][T16903]        queue_attr_store+0x26b/0x310
[  715.385157][T16903]        sysfs_kf_write+0xf2/0x150
[  715.390274][T16903]        kernfs_fop_write_iter+0x3af/0x570
[  715.396157][T16903]        vfs_write+0x7d3/0x11d0
[  715.401006][T16903]        ksys_write+0x12a/0x250
[  715.405849][T16903]        do_syscall_64+0xcd/0xfa0
[  715.410955][T16903]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.417357][T16903] 
[  715.417357][T16903] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  715.426156][T16903]        blk_alloc_queue+0x619/0x760
[  715.431446][T16903]        blk_mq_alloc_queue+0x172/0x280
[  715.437020][T16903]        __blk_mq_alloc_disk+0x29/0x120
[  715.442665][T16903]        nbd_dev_add+0x492/0xbb0
[  715.447621][T16903]        nbd_init+0x1a2/0x3c0
[  715.452387][T16903]        do_one_initcall+0x123/0x6e0
[  715.457668][T16903]        kernel_init_freeable+0x5c8/0x920
[  715.463985][T16903]        kernel_init+0x1c/0x2b0
[  715.469262][T16903]        ret_from_fork+0x675/0x7d0
[  715.474363][T16903]        ret_from_fork_asm+0x1a/0x30
[  715.479652][T16903] 
[  715.479652][T16903] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  715.487126][T16903]        fs_reclaim_acquire+0x102/0x150
[  715.492681][T16903]        kmem_cache_alloc_lru_noprof+0x5f/0x6e0
[  715.498935][T16903]        alloc_inode+0xc3/0x240
[  715.504239][T16903]        iget_locked+0x2fa/0x860
[  715.509198][T16903]        kernfs_get_inode+0x48/0x460
[  715.514581][T16903]        kernfs_get_tree+0x5fd/0xb00
[  715.519976][T16903]        sysfs_get_tree+0x41/0x140
[  715.525618][T16903]        vfs_get_tree+0x8e/0x340
[  715.530569][T16903]        path_mount+0x7b9/0x23a0
[  715.535588][T16903]        __x64_sys_mount+0x293/0x310
[  715.540952][T16903]        do_syscall_64+0xcd/0xfa0
[  715.545987][T16903]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.552441][T16903] 
[  715.552441][T16903] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  715.560429][T16903]        __lock_acquire+0x126f/0x1c90
[  715.565808][T16903]        lock_acquire+0x179/0x350
[  715.570833][T16903]        down_write+0x92/0x200
[  715.575704][T16903]        kernfs_remove+0x2f/0x50
[  715.580716][T16903]        sysfs_remove_dir+0xc8/0x100
[  715.586010][T16903]        __kobject_del+0xe2/0x1f0
[  715.591092][T16903]        kobject_del+0x3f/0x60
[  715.595956][T16903]        cleanup_glue_dir+0x1fb/0x250
[  715.601413][T16903]        device_del+0x659/0x9f0
[  715.606258][T16903]        unregister_netdevice_many_notify+0x14d6/0x25c0
[  715.613268][T16903]        unregister_netdevice_queue+0x305/0x3f0
[  715.619582][T16903]        nsim_destroy+0x1a0/0x800
[  715.624594][T16903]        __nsim_dev_port_del+0x189/0x240
[  715.630224][T16903]        nsim_dev_reload_destroy+0x10a/0x4d0
[  715.636194][T16903]        nsim_drv_remove+0x52/0x1d0
[  715.641739][T16903]        device_remove+0xcb/0x170
[  715.646778][T16903]        device_release_driver_internal+0x44b/0x620
[  715.654338][T16903]        bus_remove_device+0x22f/0x420
[  715.659813][T16903]        device_del+0x396/0x9f0
[  715.664650][T16903]        device_unregister+0x1d/0xc0
[  715.669925][T16903]        del_device_store+0x355/0x4a0
[  715.675286][T16903]        bus_attr_store+0x74/0xb0
[  715.680291][T16903]        sysfs_kf_write+0xf2/0x150
[  715.685383][T16903]        kernfs_fop_write_iter+0x3af/0x570
[  715.691168][T16903]        vfs_write+0x7d3/0x11d0
[  715.696003][T16903]        ksys_write+0x12a/0x250
[  715.701100][T16903]        do_syscall_64+0xcd/0xfa0
[  715.706110][T16903]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.712511][T16903] 
[  715.712511][T16903] other info that might help us debug this:
[  715.712511][T16903] 
[  715.722728][T16903] Chain exists of:
[  715.722728][T16903]   &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex
[  715.722728][T16903] 
[  715.735518][T16903]  Possible unsafe locking scenario:
[  715.735518][T16903] 
[  715.743041][T16903]        CPU0                    CPU1
[  715.748390][T16903]        ----                    ----
[  715.753746][T16903]   lock(gdp_mutex);
[  715.757624][T16903]                                lock(cpuhp_state-up);
[  715.764489][T16903]                                lock(gdp_mutex);
[  715.771067][T16903]   lock(&root->kernfs_rwsem);
[  715.775813][T16903] 
[  715.775813][T16903]  *** DEADLOCK ***
[  715.775813][T16903] 
[  715.783936][T16903] 8 locks held by syz-executor/16903:
[  715.789287][T16903]  #0: ffff8880309d4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  715.798240][T16903]  #1: ffff888068fbd088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  715.807967][T16903]  #2: ffff888144f8de18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570
[  715.818044][T16903]  #3: ffffffff8f66d208 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0
[  715.828298][T16903]  #4: ffff888069f920e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620
[  715.838811][T16903]  #5: ffff888069f93250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0
[  715.848973][T16903]  #6: ffffffff900eb408 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x108/0x800
[  715.857935][T16903]  #7: ffffffff8f273908 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xca/0x250
[  715.867065][T16903] 
[  715.867065][T16903] stack backtrace:
[  715.872972][T16903] CPU: 1 UID: 0 PID: 16903 Comm: syz-executor Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  715.872998][T16903] Tainted: [U]=USER
[  715.873003][T16903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  715.873011][T16903] Call Trace:
[  715.873019][T16903]  <TASK>
[  715.873026][T16903]  dump_stack_lvl+0x116/0x1f0
[  715.873048][T16903]  print_circular_bug+0x275/0x350
[  715.873068][T16903]  check_noncircular+0x14c/0x170
[  715.873089][T16903]  __lock_acquire+0x126f/0x1c90
[  715.873111][T16903]  lock_acquire+0x179/0x350
[  715.873129][T16903]  ? kernfs_remove+0x2f/0x50
[  715.873150][T16903]  ? __pfx___might_resched+0x10/0x10
[  715.873167][T16903]  down_write+0x92/0x200
[  715.873186][T16903]  ? kernfs_remove+0x2f/0x50
[  715.873206][T16903]  ? __pfx_down_write+0x10/0x10
[  715.873227][T16903]  kernfs_remove+0x2f/0x50
[  715.873247][T16903]  sysfs_remove_dir+0xc8/0x100
[  715.873264][T16903]  __kobject_del+0xe2/0x1f0
[  715.873282][T16903]  kobject_del+0x3f/0x60
[  715.873300][T16903]  cleanup_glue_dir+0x1fb/0x250
[  715.873317][T16903]  device_del+0x659/0x9f0
[  715.873336][T16903]  ? __pfx_device_del+0x10/0x10
[  715.873354][T16903]  ? netdev_unregister_kobject+0x2da/0x540
[  715.873401][T16903]  unregister_netdevice_many_notify+0x14d6/0x25c0
[  715.873423][T16903]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  715.873439][T16903]  ? do_raw_spin_lock+0x12c/0x2b0
[  715.873461][T16903]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  715.873483][T16903]  ? __pfx___mutex_lock+0x10/0x10
[  715.873503][T16903]  unregister_netdevice_queue+0x305/0x3f0
[  715.873520][T16903]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  715.873539][T16903]  nsim_destroy+0x1a0/0x800
[  715.873560][T16903]  ? kfree+0x2b8/0x6d0
[  715.873572][T16903]  ? nsim_dev_reload_destroy+0x10a/0x4d0
[  715.873586][T16903]  __nsim_dev_port_del+0x189/0x240
[  715.873608][T16903]  nsim_dev_reload_destroy+0x10a/0x4d0
[  715.873624][T16903]  nsim_drv_remove+0x52/0x1d0
[  715.873638][T16903]  ? __pfx_nsim_bus_remove+0x10/0x10
[  715.873656][T16903]  device_remove+0xcb/0x170
[  715.873673][T16903]  device_release_driver_internal+0x44b/0x620
[  715.873696][T16903]  bus_remove_device+0x22f/0x420
[  715.873714][T16903]  device_del+0x396/0x9f0
[  715.873732][T16903]  ? __pfx_device_del+0x10/0x10
[  715.873752][T16903]  device_unregister+0x1d/0xc0
[  715.873770][T16903]  del_device_store+0x355/0x4a0
[  715.873788][T16903]  ? __pfx_del_device_store+0x10/0x10
[  715.873805][T16903]  ? find_held_lock+0x2b/0x80
[  715.873819][T16903]  ? sysfs_file_kobj+0xe4/0x290
[  715.873833][T16903]  ? __pfx_del_device_store+0x10/0x10
[  715.873851][T16903]  bus_attr_store+0x74/0xb0
[  715.873864][T16903]  ? __pfx_bus_attr_store+0x10/0x10
[  715.873877][T16903]  sysfs_kf_write+0xf2/0x150
[  715.873893][T16903]  kernfs_fop_write_iter+0x3af/0x570
[  715.873906][T16903]  ? __pfx_sysfs_kf_write+0x10/0x10
[  715.873922][T16903]  vfs_write+0x7d3/0x11d0
[  715.873938][T16903]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  715.873952][T16903]  ? __pfx_vfs_write+0x10/0x10
[  715.873967][T16903]  ? __pfx_do_sys_openat2+0x10/0x10
[  715.873991][T16903]  ksys_write+0x12a/0x250
[  715.874006][T16903]  ? __pfx_ksys_write+0x10/0x10
[  715.874024][T16903]  do_syscall_64+0xcd/0xfa0
[  715.874041][T16903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.874057][T16903] RIP: 0033:0x7f0fe278e1ff
[  715.874070][T16903] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  715.874083][T16903] RSP: 002b:00007fffceaa6f40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  715.874103][T16903] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f0fe278e1ff
[  715.874113][T16903] RDX: 0000000000000001 RSI: 00007fffceaa6f90 RDI: 0000000000000005
[  715.874122][T16903] RBP: 00007f0fe28152cb R08: 0000000000000000 R09: 00007fffceaa6d97
[  715.874131][T16903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  715.874140][T16903] R13: 00007fffceaa6f90 R14: 00007f0fe3514620 R15: 0000000000000003
[  715.874153][T16903]  </TASK>
[  716.667398][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  716.715415][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  716.724215][T17017] ldm_validate_partition_table(): Disk read failed.
[  716.765235][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  716.794785][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  716.816525][T17017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  716.834796][T17017] Buffer I/O error on dev nbd2, logical block 0, async page read
[  716.855046][T17017] Dev nbd2: unable to read RDB block 0
[  716.860912][T17017]  nbd2: unable to read partition table

syzkaller
syzkaller login: [  717.097036][T13041] Bluetooth: hci4: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  717.946261][T15291] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  718.000594][T15291] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  719.394112][T17025] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  719.424085][ T6964] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.462491][ T9015] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  719.474182][T17025] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  719.521502][ T9015] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.1.625: Error -117 reading block bitmap for 2
[  719.536528][ T6964] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.598067][ T9015] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  719.638815][ T6964] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.662927][T16903] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz-executor: Error -117 reading block bitmap for 2
[  719.717934][T16903] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem
[  719.731902][ T6964] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.759907][T16903] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz-executor: Error -117 reading block bitmap for 2
[  719.817083][ T6964] bridge_slave_1: left allmulticast mode
[  719.828200][ T6964] bridge_slave_1: left promiscuous mode
[  719.846933][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.880613][ T6964] bridge_slave_0: left allmulticast mode
[  719.886274][ T6964] bridge_slave_0: left promiscuous mode
[  719.920169][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.086677][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  720.109521][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  720.129328][ T6964] bond0 (unregistering): Released all slaves
[  720.310883][ T6964] hsr_slave_0: left promiscuous mode
[  720.316546][ T6964] hsr_slave_1: left promiscuous mode
[  720.339287][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  720.356139][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.367165][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  720.374543][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.410184][ T6964] veth1_macvtap: left promiscuous mode
[  720.415783][ T6964] veth0_macvtap: left promiscuous mode
[  720.607221][ T6964] team0 (unregistering): Port device team_slave_1 removed
[  720.666221][ T6964] team0 (unregistering): Port device team_slave_0 removed
[  720.942049][ T6964] bridge_slave_1: left allmulticast mode
[  720.962601][ T6964] bridge_slave_1: left promiscuous mode
[  720.974500][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.982505][ T6964] bridge_slave_0: left allmulticast mode
[  720.993935][ T6964] bridge_slave_0: left promiscuous mode
[  720.999674][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.070303][ T6964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.094861][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  721.113364][ T6964] bond0 (unregistering): Released all slaves
[  721.176037][ T6964] hsr_slave_0: left promiscuous mode
[  721.186048][ T6964] hsr_slave_1: left promiscuous mode
[  721.202450][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  721.214052][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  721.412594][ T6964] team0 (unregistering): Port device team_slave_1 removed
[  721.471487][ T6964] team0 (unregistering): Port device team_slave_0 removed