last executing test programs:

9m22.551145592s ago: executing program 0 (id=505):
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) (async)
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0xffffff71, 0x10000}) (async)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0xffffff71, 0x10000})
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0x81)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r1)
sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x7d, 0x4, 0x0, 0x1, [@generic="2314162b8809a9c81aa161e6603cb9996c3408eb278f3e2faf7969aecfe273474b5396d84f8cfbe97c3eaa022521a21d89f5c9874df3faf9b382a1e7eb618b7d6a86d61eafb172d594977fd8b7b75a1920574f0946ebca4b587dfc918b412fa1535ce43d4a3d3edb8173e5554130a370c069e89adf01ac5eff"]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) (async)
sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x7d, 0x4, 0x0, 0x1, [@generic="2314162b8809a9c81aa161e6603cb9996c3408eb278f3e2faf7969aecfe273474b5396d84f8cfbe97c3eaa022521a21d89f5c9874df3faf9b382a1e7eb618b7d6a86d61eafb172d594977fd8b7b75a1920574f0946ebca4b587dfc918b412fa1535ce43d4a3d3edb8173e5554130a370c069e89adf01ac5eff"]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8840)
r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x80000000}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800)

9m22.356578903s ago: executing program 0 (id=506):
mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2)
mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
renameat2$auto(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00', 0x2)
socket(0xa, 0x3, 0x3c)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0)
socket(0x2, 0x1, 0x106)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0)
r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x8}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="0d60a52076af28", 0xffffffff}, 0x6, 0x0)
ioctl$auto(r3, 0x40246f4c, 0xffffffffffffffff)

9m22.182889928s ago: executing program 0 (id=507):
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
sysinfo$auto(0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(0xffffffffffffffff, 0x0, 0x1060)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18}, 0x1)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd)
socket(0x1d, 0x3, 0x1)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card1/pcm1p/sub7/hw_params\x00', 0x120002, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000180)=""/218, 0xda)
write$auto(0xffffffffffffffff, 0x0, 0x8)
write$auto(0xca, &(0x7f00000002c0)='\x04\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc\x04\x7f\x9f\xb1\xb6\x17\x80f\xf2P\xe1/?\xec z\xcbM\x05\xc84\xfc .\xf8\xc2\f9(\xd5\x02\"\x05\xcd\xeb\xa5\xd6\xe0\x9f\xbb]W\xc1\xbc;\n\xc8\xb3\xa6\xb7+\xcc\xf2/\x96H\xee$=\xe8-\bpV\xd4a\x91\x8f\xb9\xe4L[\x99g\xe1\x95-{\xf8\x8d\xb6\x82\x85Y.}lg\xbb/\xdf\xd3zJ\xf2', 0x7f)
mmap$auto(0x0, 0x20009, 0x100000006, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = pidfd_open$auto(0x1, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
move_mount$auto(r3, 0x0, 0xffffffffffffffff, 0x0, 0x104)
statmount$auto(0x0, 0x0, 0x9, 0xd)
r4 = ioctl$auto_TIOCGPTPEER2(r3, 0x5441, 0x0)
io_uring_setup$auto(0x7fffffff, &(0x7f0000000380)={0x3, 0x1, 0x8, 0x2, 0x4, 0xd, r4, [0x4, 0x1, 0x6], {0x3, 0x813, 0x0, 0x5, 0x18, 0x0, 0x3, 0x7, 0xfffffffffffff800}, {0x40, 0x5, 0x666c, 0x400, 0x48000, 0x13, 0x3, 0x98, 0xffffffffffffffff}})
read$auto(0xffffffffffffffff, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

9m21.63942157s ago: executing program 0 (id=509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0)
sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0}}, 0xc0)

9m21.542769762s ago: executing program 0 (id=510):
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
r0 = socket(0x2, 0x5, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x3, 0x0, 0x8)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x3, 0x29f, 0xfe, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x2000008, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}})
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2)
io_uring_setup$auto(0x6, 0x0)
r2 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000180)=@iter_create={r1, 0xffffff00}, 0x9)
write$auto_vhost_vsock_fops_vsock(r2, &(0x7f00000003c0)="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", 0x1d4)
timer_create$auto(0x2, 0x0, &(0x7f0000000140)=0x6)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(0x0, 0x20, 0x0, 0x8000006)
sendfile$auto(r3, r3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xffd8)
socket$nl_generic(0x10, 0x3, 0x10)

9m21.233728044s ago: executing program 0 (id=512):
socket(0x2, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x0)
socket(0x2, 0x1, 0x84)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4)
listen$auto(0x3, 0x81)
mmap$auto(0x1ffffffffffffd, 0x4000000ad21, 0x3, 0xebd, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x541b, 0x7f)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x10, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)

9m6.119073114s ago: executing program 32 (id=512):
socket(0x2, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x0)
socket(0x2, 0x1, 0x84)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4)
listen$auto(0x3, 0x81)
mmap$auto(0x1ffffffffffffd, 0x4000000ad21, 0x3, 0xebd, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0x3, 0x541b, 0x7f)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x10, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc)
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)

8m23.884561452s ago: executing program 4 (id=749):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0xe, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0)
r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0)

8m23.693872943s ago: executing program 4 (id=753):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r0, 0x8, 0xe, &(0x7f0000000300)='*\\\x00', &(0x7f0000000180)=0x46)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f00000002c0)={0x100000000, 0x8001, 0x0, 0x0, 0x2, 0x3, "008fc036cdb9f66d2c90315ebd23caae", 0xb, 0x4e, 0xb3, 0x18, 0x3, 0x80, 0x7f})
listen$auto(r0, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/ip_vti0/ndisc_tclass\x00', 0x642, 0x0)
write$auto(r2, &(0x7f0000000200)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400)
getsockopt$auto_SO_SELECT_ERR_QUEUE(r0, 0x8001, 0x2d, &(0x7f0000000080)='/dev/mtd0\x00', &(0x7f0000000100)=0x3)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0)
ioctl$auto_SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000000c0))
close_range$auto(0xffffffffffffffff, 0xa, 0x0)
r4 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x143382, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
preadv$auto(r4, &(0x7f0000000000)={0x0, 0x6}, 0x8, 0x7, 0x89)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000100)="000004")

8m23.461784327s ago: executing program 4 (id=755):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/pci_bus/0000:00/cpulistaffinity\x00', 0xc0200, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='b', 0x1)
r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
ppoll$auto(&(0x7f0000000040)={r2, 0x7ff}, 0x7, 0x0, 0x0, 0x8)
r3 = socket(0x2, 0x80802, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rxrpc/calls\x00', 0x101000, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
unshare$auto(0x40000080)
r6 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x80201, 0x0)
writev$auto(r6, &(0x7f0000005f00)={0x0, 0x4}, 0x6)
ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0)
r7 = socket(0x11, 0x80003, 0x300)
ioctl$auto_IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)=0x3)
setsockopt$auto(r7, 0x107, 0x12, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x402000d, 0x6, 0x111, r5, 0x3)
r8 = socket(0x2, 0x5, 0x0)
setsockopt$auto(r8, 0x0, 0x10, 0x0, 0x5)
pread64$auto(r4, 0x0, 0x566, 0x80000000)
fcntl$auto(r3, 0x5, 0x0)
sendmsg$auto_SMC_NETLINK_DUMP_HS_LIMITATION(r3, &(0x7f0000001440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000003c0)={0x1014, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, "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"}, 0x1014}}, 0x8000)
ioctl$auto_MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x10, 0x2, 0x0, 0x9, 0x4, 0xff, 0x6, 0x6, 0x7, 0x8001, 0x8, 0x0, @setup="7e3b87bb96febe00", 0x66, 0xfffffff7, 0x7, 0x1ff}, &(0x7f0000000300)="8d56e686ae9197d454ddfd921e24ea276e46b5c8fabc17dc81f74df1eae674", 0x8})
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/231, 0xe7)
r9 = socket(0x11, 0x3, 0x9)
epoll_ctl$auto(r9, 0x0, r9, &(0x7f0000000040)={0xffff1205, 0x6})
sendmsg$auto_NL80211_CMD_SET_PMK(r9, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfff}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x6a, 0xfa, "19e78ec51b28340069e3ba16de9e3602ba7ae846fe04f082aca8876cebb763e6f752e0ddeee81f1a233bd1d4796da14b426db3e25476cd3e518cef6256de7da23c019a75de11eb02e31a4f9b10650f336f274d2ec58b1207c75056c4d0f1c07176ec066b2829"}]}, 0x90}, 0x1, 0x0, 0x0, 0xc094}, 0x10)

8m22.503233994s ago: executing program 4 (id=763):
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/conf/wlan0/route_localnet\x00', 0xd7a185e906c5fc10, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x2a, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0)
write$auto(r0, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfdFq\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)~\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\x96\xcc\xa8\xae\xcb\xac\xd5\xd4\xee1\"L\xacC\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97MT\xd5g\x1e\x04sD\x92+', 0x9) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000)
socket(0x10, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) (async)
msync$auto(0x110c230000, 0x200001, 0x6) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40043d04, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xc0a00, 0x0) (async)
pread64$auto(r1, 0x0, 0x1000006, 0x40008) (async)
close_range$auto(0xffffffffffffffff, 0x8, 0x0) (async)
r3 = socket(0x2, 0xa, 0x5) (async)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10002, 0x0)
r4 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/current_tracer\x00', 0x88000, 0x0)
timerfd_settime$auto(r4, 0x4, &(0x7f0000000240)={{0x7fffffff, 0xffffffffffffffff}, {0x1, 0xfffffffffffffffb}}, &(0x7f0000000280)={{0x6, 0xb382}, {0x5, 0xbd78}}) (async)
getsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0x9) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
futex_waitv$auto(&(0x7f0000000480)={0x1, 0x4}, 0x4, 0x1, &(0x7f00000004c0)={0x6}, 0x1)

8m22.358766129s ago: executing program 4 (id=766):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
setsockopt$auto(r0, 0x0, 0x40, 0x0, 0x6f7250c4)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x810)
mknod$auto(&(0x7f00000012c0)=':,\x00', 0xca, 0x6)
r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400009, 0x5, 0x17, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x82, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r7=>0x0})
sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r6, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x64810)
socket(0x2, 0x3, 0x8)
r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2, 0x0)
ppoll$auto(&(0x7f0000000140)={r8, 0x7, 0x4}, 0x7f, 0x0, 0x0, 0x8)
socket(0x2, 0x1, 0x0)
epoll_create$auto(0x7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r9, 0x0)
epoll_ctl$auto(0x5, 0x9, r9, 0x0)
fanotify_init$auto(0x8, 0x2000000000002)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5')

8m21.013696794s ago: executing program 4 (id=770):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
socket(0xa, 0x1, 0x84)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats_percpu\x00', 0x40100, 0x0)
read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1)
keyctl$auto(0xb, 0xffffffffffffffff, 0x0, 0x4, 0x7a)
bind$auto(0x3, &(0x7f0000000380)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x54)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x2)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="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", 0x2f8)
ioctl$auto_SNDRV_CTL_IOCTL_POWER(r2, 0xc00455d0, &(0x7f0000000340)=0x8)
r4 = socket(0x2, 0x1, 0x106)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
socket(0x8, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
write$auto(0x3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
socket(0x8, 0x2, 0x7f)
openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x80000, 0x0)

8m5.458091439s ago: executing program 33 (id=770):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
socket(0xa, 0x1, 0x84)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats_percpu\x00', 0x40100, 0x0)
read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1)
keyctl$auto(0xb, 0xffffffffffffffff, 0x0, 0x4, 0x7a)
bind$auto(0x3, &(0x7f0000000380)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x54)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x2)
close_range$auto(0x2, 0x8, 0x0)
r2 = io_uring_setup$auto(0x6, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="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", 0x2f8)
ioctl$auto_SNDRV_CTL_IOCTL_POWER(r2, 0xc00455d0, &(0x7f0000000340)=0x8)
r4 = socket(0x2, 0x1, 0x106)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
socket(0x8, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
write$auto(0x3, 0x0, 0x1)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
socket(0x8, 0x2, 0x7f)
openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x80000, 0x0)

7m56.578562431s ago: executing program 5 (id=834):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/pci_bus/0000:00/cpulistaffinity\x00', 0xc0200, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
mq_open$auto(0x0, 0xffffffff, 0xa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x5, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000000, 0x402, 0xc0}]})
mq_unlink$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/231, 0xe7)

7m56.337424338s ago: executing program 5 (id=863):
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
sysinfo$auto(0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(0xffffffffffffffff, 0x0, 0x1060)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa})
ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18}, 0x1)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd)
socket(0x1d, 0x3, 0x1)
socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x281, 0x0)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/218, 0xda)
write$auto(0xffffffffffffffff, 0x0, 0x8)
write$auto(0xca, &(0x7f00000002c0)='\x04\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc\x04\x7f\x9f\xb1\xb6\x17\x80f\xf2P\xe1/?\xec z\xcbM\x05\xc84\xfc .\xf8\xc2\f9(\xd5\x02\"\x05\xcd\xeb\xa5\xd6\xe0\x9f\xbb]W\xc1\xbc;\n\xc8\xb3\xa6\xb7+\xcc\xf2/\x96H\xee$=\xe8-\bpV\xd4a\x91\x8f\xb9\xe4L[\x99g\xe1\x95-{\xf8\x8d\xb6\x82\x85Y.}lg\xbb/\xdf\xd3zJ\xf2', 0x7f)
mmap$auto(0x0, 0x20009, 0x100000006, 0xeb1, 0xffffffffffffffff, 0x8000)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x104)
statmount$auto(0x0, 0x0, 0x9, 0xd)
r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0)
io_uring_setup$auto(0x7fffffff, &(0x7f0000000380)={0x3, 0x1, 0x8, 0x2, 0x4, 0xd, r2, [0x4, 0x1, 0x6], {0x3, 0x813, 0x0, 0x5, 0x18, 0x0, 0x3, 0x7, 0xfffffffffffff800}, {0x40, 0x5, 0x666c, 0x400, 0x48000, 0x13, 0x3, 0x98, 0xffffffffffffffff}})
read$auto(0xffffffffffffffff, 0x0, 0x20)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

7m55.401124302s ago: executing program 5 (id=867):
socket(0xa, 0x3, 0x3b) (async)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x2202, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(0xffffffffffffffff, 0x0, 0x81)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) (async)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x7, 0x200}) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async, rerun: 32)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
sysfs$auto(0x2, 0x49, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x8002, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048840}, 0x4000804)
lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x848, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x6, 0x25, 0x8, 0x40006, 0x5, 0x5, 0x3, 0x200000005b71, 0x10000, 0x1}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async, rerun: 32)
fsopen$auto(0x0, 0x1) (async, rerun: 32)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0)

7m54.59673981s ago: executing program 5 (id=869):
r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x2000000000000008, 0xbff, 0x2c, 0x2c, 0x3, 0x2})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$auto(0x3, 0x40605346, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
ioctl$auto_TIOCGDEV2(r3, 0x80045432, &(0x7f00000000c0)=0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
ioctl$auto_USB_RAW_IOCTL_EP0_READ(r3, 0xc0085504, &(0x7f0000000280)={0x0, 0x10, 0x8})
bpf$auto(0x1, &(0x7f0000000340)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf)

7m52.706978282s ago: executing program 5 (id=879):
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0)
sendfile$auto(r0, r0, 0x0, 0x6) (async, rerun: 64)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nilfs2/features/revision\x00', 0x400, 0x0) (rerun: 64)
ioctl$auto_NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x48401, 0x0)
ioctl$auto(r2, 0x901064af, 0xffffffffffffffff) (async, rerun: 32)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/19, 0x13) (rerun: 32)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63142, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32)
close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32)
socket(0x10, 0x2, 0x4) (async, rerun: 64)
socket(0x26, 0x2, 0x2) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r6=>0x0})
sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250d00000008000300a8a2ced2484334216ff88f607486a1e376381f9699907d9037f276e989b02367272217fcbd94d079e6a6a27c4dc42038371c20a9a27558f632e7278e0420f9430103bd302d1ee3a5e0146482e242dd2c4dba6d9aa3396aa8a02b50d44574998abe27379dae27126b1b44c77bdbe1b72eb451187f1a423b85ad407dca", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async)
io_uring_setup$auto(0x52, 0x0) (async)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) (rerun: 32)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001700)=""/4082, 0xff2)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x34, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x0, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) (async, rerun: 32)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40080) (async, rerun: 32)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket(0x10, 0x2, 0x0)

7m51.671496428s ago: executing program 5 (id=882):
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x2, 0x4, 0x8000006)
r0 = gettid()
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec7\x00', 0x0, 0x0)
ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0)
ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0)
write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f00000000c0)="6f377a9a3ae549aefa744d10c284c0c33d9900bec9799fad623ae420e7277e1d4e36656049c0eb215d147c15850cc5f8486285220982b01005ecfffc6b6c17f6a089a48701bf41a05413f1a20586ef2046735e7d4a3740966c9fb973f82f3a6017f4861a973a2c3c8f55a17c88c4301d0662d5dbff21cb8a7bbc4e00d62779dfeaa4946543bb1a8e1800ea5e15a3c9d8cf92ffc6f5c127af9a00000000000000", 0xa0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79400d01532f2ed0d", 0x18)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x20003e, 0xfffffffffffffffe, r2, 0x800000046, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x60a000, 0x0)
read$auto(r4, &(0x7f0000000000)='veth1\x00', 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x1000000000000003, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
read$auto(0xffffffffffffffff, 0x0, 0x200000000000d)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4)
r5 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r0, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x3)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)

7m36.640962992s ago: executing program 34 (id=882):
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x2, 0x4, 0x8000006)
r0 = gettid()
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec7\x00', 0x0, 0x0)
ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0)
ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0)
write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, &(0x7f00000000c0)="6f377a9a3ae549aefa744d10c284c0c33d9900bec9799fad623ae420e7277e1d4e36656049c0eb215d147c15850cc5f8486285220982b01005ecfffc6b6c17f6a089a48701bf41a05413f1a20586ef2046735e7d4a3740966c9fb973f82f3a6017f4861a973a2c3c8f55a17c88c4301d0662d5dbff21cb8a7bbc4e00d62779dfeaa4946543bb1a8e1800ea5e15a3c9d8cf92ffc6f5c127af9a00000000000000", 0xa0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79400d01532f2ed0d", 0x18)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x20003e, 0xfffffffffffffffe, r2, 0x800000046, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x60a000, 0x0)
read$auto(r4, &(0x7f0000000000)='veth1\x00', 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x1000000000000003, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
read$auto(0xffffffffffffffff, 0x0, 0x200000000000d)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4)
r5 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r0, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x3)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)

19.733008526s ago: executing program 1 (id=2405):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(r0, r0, 0x0, 0x82fa5)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x5a7, &(0x7f0000000000)={&(0x7f0000000300)="669b0c0c4afa", 0x28}, 0x1, 0x0, 0x5, 0x100001}, 0x2}, 0x2, 0x8)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x1, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x464900, 0x0)
poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108)
write$auto(r1, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
r2 = socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(r2, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57)
write$auto(0x3, 0x0, 0x3f00)
write$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
io_uring_register$auto(0x2, 0x11, 0x0, 0x83)
timerfd_create$auto(0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r3, 0x114, 0x2716, 0xfffffffffffffffc, 0x0)
ioctl$auto(0x1, 0x890c, 0x8)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000)
write$auto(r4, 0x0, 0x7)
wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0)
r5 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$auto_I2C_RDWR(r5, 0x707, &(0x7f0000000180))

16.518528448s ago: executing program 1 (id=2415):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x82801, 0x0)
socket(0x11, 0xa, 0x9)
socket(0x1, 0x1, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0x2000, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC0\x00', 0x2000, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/fs/ext4/sda1/options\x00', 0x0, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x8800, 0x0)
socket(0x26, 0xa, 0x0) (async)
socket(0x26, 0xa, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x800, 0x4)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884)
lstat$auto(0x0, &(0x7f0000000180)={0xf, 0xfffffffffffffffe, 0x8, 0x81, 0x0, 0xee01, 0x0, 0x220fa98, 0xc, 0x6, 0x8000000008, 0x100000007fffffff, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0xb})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
socket(0x10, 0x2, 0xc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x6, 0x1, 0x84) (async)
socket(0x6, 0x1, 0x84)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
getrandom$auto(0x0, 0x6000000, 0x3)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x6, 0x8, 0x4, 0x7, 0x7) (async)
prctl$auto(0x6, 0x8, 0x4, 0x7, 0x7)
madvise$auto(0x0, 0x2003f2, 0x15) (async)
madvise$auto(0x0, 0x2003f2, 0x15)
msgsnd$auto(0x0, 0x0, 0xf, 0xc45)

11.91531085s ago: executing program 1 (id=2426):
r0 = socket(0x2, 0x1, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x6d)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
sendmmsg$auto(r0, 0x0, 0x9, 0x1)
mmap$auto(0x0, 0x1000000400008, 0x4, 0x9b72, 0x2, 0x0)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x18, 0xa, 0x1)
socket(0x28, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0)
mmap$auto(0x0, 0xfffffffffffffffe, 0xe3, 0xeb1, r1, 0x7ffd)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
socketpair$auto(0x7ff, 0x3, 0x101, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)

7.667451799s ago: executing program 2 (id=2434):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
shutdown$auto(r0, 0xda6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r2, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40010)
r3 = setfsuid$auto(0xee00)
r4 = setfsuid$auto(0xee01)
setresuid$auto(r3, r4, r3)
r5 = setfsuid$auto(0xee00)
setreuid$auto(r5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wg2\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={0x0}, 0x1, 0x0, 0x0, 0x484}, 0x4c000)
close_range$auto(0x0, 0xffffeffe, 0x2)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/perf_event_max_sample_rate\x00', 0xd97f760c479e8c8e, 0x0)
quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/btrfs/features/rmdir_subvol\x00', 0x40000, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r6, 0x541c, r7)
msync$auto(0x0, 0x2000000005, 0x6)

7.359510526s ago: executing program 2 (id=2437):
sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async, rerun: 64)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/conf/wlan0/route_localnet\x00', 0xd7a185e906c5fc10, 0x0) (async, rerun: 64)
statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x1ff, 0x7c9, 0x0, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0x80000a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff1, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000340)={0x40, r2, 0x401, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @uid}, @nested={0x1c, 0xc3, 0x0, 0x1, [@nested={0x15, 0xf2, 0x0, 0x1, [@nested={0x4, 0x2b}, @generic="a66b90273e7677aa3c39d9ec79"]}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) (async)
r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x6, 0x400a, r0, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x3ff, 0xa, 0x1}, {0x10100, 0x1, 0x52, 0x82, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async)
mmap$auto(0x0, 0x810004, 0xff9, 0x8000000008011, 0x3, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
semctl$auto_GETPID(0x0, 0x2e3, 0xb, 0x10) (async, rerun: 64)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x2, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) (async, rerun: 64)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x401bf, 0x734f, 0x33, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1c97, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd)
futex_waitv$auto(&(0x7f0000000000)={0x7, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) (async)
io_uring_setup$auto(0x6, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x56, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) (async, rerun: 32)
ioctl$auto_FIOCLEX(r3, 0x5451, 0x0) (rerun: 32)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)

7.292762592s ago: executing program 1 (id=2438):
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) (async)
removexattr$auto(0x0, 0x0) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x34, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x0, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async)
r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r1)
sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_PHY_NAME={0x5, 0x1f, '\''}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x6}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x400}, 0x40) (async)
close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async)
socket(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84) (async)
r5 = socket(0x18, 0x5, 0x1)
connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) (async)
sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c) (async)
acct$auto(&(0x7f0000000080)='/dev/ptyaf\x00') (async)
r6 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008)

6.98014633s ago: executing program 6 (id=2439):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
unshare$auto(0x40000080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0xa8, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MACSEC_ATTR_SA_CONFIG={0x8c, 0x3, 0x0, 0x1, [@nested={0x85, 0x4, 0x0, 0x1, [@generic="4cf5c2317fd9dfc637a94c964a67169a44c71805af71f2d4cd1bb2b09c4a3a1d520ef6530152f3dd3f5c3c96f4f181c7fcb0a4fd622229c3db4c82eb3b227879092fe3325b8805670ba98f3135ce0d440b4bb72e2a49fb7d7272903bfbe3906a0ca0c96f9e9dc9fb8cc4f0683cd7e3d4587595c3dc8f8aee44777503ecbeb2ad9f"]}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r2, r2, 0x0, 0x3)

6.86330387s ago: executing program 2 (id=2440):
unshare$auto(0x40000080)
mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000)
bind$auto(0x3, 0x0, 0x6d)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
socket(0x2, 0x801, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
fanotify_init$auto(0xf, 0x0)
mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/4110, 0x100e)
io_uring_setup$auto(0x5, 0x0)
mknod$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1<w\xd3:\x835\xac\r\x06\xc9\xc1HG\x1c\xd4J\x8aZ%+\xe6/~\xd6\xe1[+Z\xb1\x8d\xc5\x9b\xcfhb\'\x80\xeb7%>\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1085, 0x9)
mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')

6.560068603s ago: executing program 1 (id=2442):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x400, 0x3f)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x20c00, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
setreuid$auto(0x4, 0x8)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
socket(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r0, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x83)
r1 = epoll_create$auto(0x7)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x18a041, 0x0)
epoll_ctl$auto(r1, 0x1, r2, 0x0)
close_range$auto(0x2, 0x8, 0x0)

5.504331703s ago: executing program 6 (id=2445):
chmod$auto(&(0x7f0000000000)='.\x00', 0xfffb)
shmctl$auto_IPC_RMID(0x8000, 0x0, &(0x7f0000000140)={{0xe, <r0=>0xee00, 0x0, 0x8, 0x75c, 0x3, 0x7}, 0xe026, 0x0, 0x8, 0x7, @inferred, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="6234e7256854c18a0fe8a6c175a8255c06deb3be18a235f6f0676a282aa0c9f56ab534435d5743eb490f33d52ef9ba59113f5eb400d2711667", &(0x7f0000000100)="98be95da2ec9bdeb18193f4e5e6b66e47c301d9f412db1e41de25ede65327d69af5061d746a849535a5f6ead0d1064bdd235146c602a960d3ac8a4"})
setresuid$auto(0xd48d, 0xdc, r0)
r1 = timerfd_create$auto(0x7, 0x1)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_BSSID={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x7}, @NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, "eb65eb1531e0cb1f4ab8bc23b49a2fc299c540f6868351ca1ec351ff221f46b2"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xab81}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
setsockopt$auto_SO_PASSCRED(r1, 0x5, 0x10, &(0x7f0000000340)='nl80211\x00', 0x2)
symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)

5.146235963s ago: executing program 6 (id=2446):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xa, 0x9b72, 0xc, 0x800008000) (async)
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x4c141, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x60000, 0x0)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r1, 0x1269, 0x0)
ioctl$auto_RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) (async)
mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
close_range$auto(0x0, 0x5, 0x0) (async)
r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000fedbdf25040000000c0003001d060001000000000c000100ffffffff000000000c400169f2800000000000000c000100090000000000000008000400", @ANYRES32=r3, @ANYRESDEC=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x51}, 0x20000000)
socket(0x6, 0x5, 0x0) (async)
r4 = socket(0x2, 0x801, 0x106)
getsockopt$auto(r4, 0x11c, 0x3616, 0x0, 0x0) (async)
rmdir$auto(&(0x7f0000004840)='.\x00') (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
sethostname$auto(0x0, 0x7)
r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x980, 0x0)
set_mempolicy$auto(0x3, 0x0, 0x3) (async)
read$auto(r5, 0x0, 0x4)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r6, &(0x7f0000000100)={0x0, 0x20004000000407}, 0x201) (async)
write$auto_event_inject_fops_trace(0xffffffffffffffff, 0x0, 0x0)

4.717289571s ago: executing program 3 (id=2447):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(r0, r0, 0x0, 0x82fa5)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{0x0, 0x5a7, &(0x7f0000000000)={&(0x7f0000000300)="669b0c0c4afa", 0x28}, 0x1, 0x0, 0x5, 0x100001}, 0x2}, 0x2, 0x8)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0xa, 0x1, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x464900, 0x0)
poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108)
write$auto(r2, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x20000003)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
r3 = socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(r3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x57)
write$auto(0x3, 0x0, 0x3f00)
write$auto_fops_ulong_ro_(0xffffffffffffffff, 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
io_uring_register$auto(0x2, 0x11, 0x0, 0x83)
close_range$auto(r1, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r4, 0x114, 0x2716, 0xfffffffffffffffc, 0x0)
ioctl$auto(0x1, 0x890c, 0x8)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x101001, 0x0)
mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000)
write$auto(r5, 0x0, 0x7)
wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0)
r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$auto_I2C_RDWR(r6, 0x707, &(0x7f0000000180))

4.519480423s ago: executing program 6 (id=2448):
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc045}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
unshare$auto(0x40000080)
prctl$auto(0x4, 0x0, 0x0, 0x1, 0xb)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0)
futex$auto(0x0, 0x10b, 0x1, 0x0, 0x0, 0xfbfffffa)
ioctl$auto(r0, 0x4b65, r0)

4.192217469s ago: executing program 3 (id=2449):
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff)
mmap$auto(0x0, 0x5, 0x5, 0x1c, 0xffffffffffffffff, 0xae)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
connect$auto(0x3, 0x0, 0x50)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
ioctl$auto(r1, 0x560a, 0xffffffffffffffff)

4.031922036s ago: executing program 6 (id=2450):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101601, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
shmctl$auto_IPC_STAT(0x0, 0x2, 0x0)
pwritev$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2}, 0x3, 0x5, 0x5)
r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0)
keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x10001)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x0, 0x0)
ioctl$auto_BLKPG2(r1, 0x1269, 0x0)
socket(0xa, 0x3, 0x3b)
setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0xa, 0x2, 0x73)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0)
r3 = fcntl$getown(r2, 0x9)
process_vm_readv$auto(r3, &(0x7f0000001ac0)={&(0x7f0000000ac0)="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", 0x7}, 0xbf3, &(0x7f0000001b80)={&(0x7f0000001b00)="e17c6bab6e308e4cd5a08fa370e3d23dba6b9bff97ef12073f855b0bb6ad64c3aa976b028733558761daf681c629d6856a0e1f3033be6a0b1a7ceb705c15d76b5b1cf774ae9e"}, 0x7, 0xffffffff80000000)
io_uring_setup$auto(0x7, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x9)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100)
ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0)

3.942459302s ago: executing program 3 (id=2451):
ftruncate$auto(0xffffffffffffffff, 0x9)
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2)
r0 = socket(0x2, 0x80002, 0x73)
sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000002}, 0x81)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
shutdown$auto(0x200000003, 0x2)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x58)
mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r2 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r2, 0x84, 0x11, 0x0, &(0x7f0000000000)=0x28000000)
mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0xc0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
io_uring_setup$auto(0x401, 0x0)
bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6)
bpf$auto(0x12, 0x0, 0x26)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r0, 0x0, 0x5)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
mmap$auto(0x0, 0x4020007, 0x6, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r3, 0x0, 0x20)

3.905285376s ago: executing program 2 (id=2452):
mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa)
clone$auto(0x1, 0x40000000003e, 0x0, 0x0, 0x40000009)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r1)
r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x101102, 0x0)
write$auto_proc_pid_attr_operations_base(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x20000050)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0x800000000ffb, 0x8000000008012, r4, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0)
pread64$auto(r5, 0x0, 0xeda5, 0xc86)
getdents64$auto(r0, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8)

3.514529199s ago: executing program 6 (id=2453):
mmap$auto(0x0, 0x400008, 0xdf, 0x86b8, 0xffffffffffffffff, 0x40000008000)
unshare$auto(0x40000080)
userfaultfd$auto(0x8)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x3ff, 0xeb1, 0x401, 0x8000)
r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x1, 0x2800], {0x6, 0x41e, 0xe, 0x2de, 0x504, 0x3, 0x101, 0x9, 0x1}, {0xfff80002, 0x2, 0x53, 0x5, 0x10001, 0x400, 0x76c5, 0x8, 0x8000000000000000}})
r2 = getpid()
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x9}, 0x7, 0x4008)
process_vm_readv$auto(r2, &(0x7f00000001c0)={0x0, 0x100fff}, 0x3, &(0x7f0000000180)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
r4 = socket(0xa, 0x2, 0x0)
setsockopt$auto(r4, 0x29, 0x30, 0x0, 0x56b)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x9, 0x1, 0xf)
socket(0xa, 0x5, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'dvmrp1\x00', <r7=>0x0})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r6, @ANYRES32=r7], 0x20}}, 0x40000)
mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x0, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_nfc(0x0, r1)
mmap$auto(0x6, 0x2400008, 0xdd, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffff7fffff0005, 0x8)

2.733299878s ago: executing program 1 (id=2454):
unshare$auto(0x40000080)
mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000)
bind$auto(0x3, 0x0, 0x6d)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
socket(0x2, 0x801, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
fanotify_init$auto(0xf, 0x0)
mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/4110, 0x100e)
io_uring_setup$auto(0x5, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0x5d, 0x9b72, 0x2, 0x8000)
clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6)
acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e')

2.723629806s ago: executing program 3 (id=2455):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x16, 0xff8, 0x13, 0x3, 0x8000)
preadv2$auto(r0, 0x0, 0x6, 0x3, 0x4, 0x2a)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000)
r1 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$auto_NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd13357350f7e6883a000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804)
r5 = io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, <r6=>r1, [0x1000003, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x2005}, {0x9, 0x10000000, 0x808, 0x100, 0x0, 0xc52, 0x5, 0x9, 0x9}})
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff)
r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0xe4b02, 0x0)
write$auto(r7, 0x0, 0x6)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x9, 0x4040000000df, 0x40eb2, 0x4, 0x800)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0)
clone$auto(0x8000000000000005, 0x7fff, 0x0, 0x0, 0x2)
r8 = socket(0x15, 0x5, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r9)
sendmsg$auto_TCP_METRICS_CMD_DEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010029f3956ffebd000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2)
recvmmsg$auto(r8, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000000c0)={0x0, 0xf32}, 0x4, 0x0, 0x7, 0x4}, 0x8}, 0x100, 0x5, 0x0)
mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r11 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), r6)
mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x10012, r5, 0x8)
sendmsg$auto_MACSEC_CMD_ADD_RXSA(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2cc4daf05ca03deb4014a785e67a6ef3ed261bda5397e41c79809bf2f123e50652cbb1c11283b94a01807846f16232f633cc16fb55cc917f4c7e08896865ef70affb5d8b7484abf59c4e2832e484ff10f2abffca294661b916b0ca8a5290976482db2ab3c2bda77f6322ab70732d530a8dc8e796c357845261120741415f1a3feb09db68e3722ca1451b6a65c551fa4024ad1fb7df9bd224060da7558eb783c30b6c1efa00128d43d0787bc2df2475bc61e756f998a32dc348", @ANYRES16=r11, @ANYBLOB="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"], 0x514}, 0x1, 0x0, 0x0, 0x840}, 0x881)
socket$nl_generic(0x10, 0x3, 0x10)

2.185845148s ago: executing program 3 (id=2456):
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"})
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x101042, 0x0)
read$auto(r0, 0x0, 0x4)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2})
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
shutdown$auto(0x200000003, 0x2)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8)

2.002430941s ago: executing program 2 (id=2457):
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130)
r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x420001, 0x0)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd15/mq/0/nr_reserved_tags\x00', 0x2280, 0x0)
read$auto(r1, 0x0, 0x20) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) (async)
r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0)
ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0) (async)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$auto(0x3, 0x0, 0x4b34) (async)
sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/firmware/acpi/interrupts/gpe06\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
unlink$auto(&(0x7f0000000380)='./file0\x00')

143.492126ms ago: executing program 2 (id=2458):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0xa, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x204041, 0x0)
socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x6a500, 0x0)
socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$auto(0x0, 0x0)
io_uring_setup$auto(0x7, 0x0)
socketpair$auto(0x1, 0x5, 0x100000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyd8\x00', 0x480, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0)
ioctl$auto(0x3, 0x80000541b, r4)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
madvise$auto(0x0, 0x200204, 0x15)

0s ago: executing program 3 (id=2459):
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc045}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
unshare$auto(0x40000080)
prctl$auto(0x4, 0x0, 0x0, 0x1, 0xb)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
futex$auto(0x0, 0x10b, 0x1, 0x0, 0x0, 0xfbfffffa)
ioctl$auto(r0, 0x4b65, r0)

kernel console output (not intermixed with test programs):

]  ? ip6mr_device_event+0x1c4/0x230
[  651.862998][T16880]  notifier_call_chain+0x99/0x3f0
[  651.863035][T16880]  call_netdevice_notifiers_info+0xbe/0x110
[  651.863076][T16880]  register_netdevice+0x1998/0x25a0
[  651.863114][T16880]  ? __pfx_register_netdevice+0x10/0x10
[  651.863148][T16880]  ? net_generic+0xea/0x2a0
[  651.863170][T16880]  ? net_generic+0xea/0x2a0
[  651.863191][T16880]  ? lock_release+0x24d/0x310
[  651.863231][T16880]  register_netdev+0x34/0x50
[  651.863264][T16880]  vti6_init_net+0x2ff/0x480
[  651.863288][T16880]  ? __pfx_vti6_init_net+0x10/0x10
[  651.863311][T16880]  ops_init+0x1e2/0x5f0
[  651.863351][T16880]  setup_net+0x118/0x3a0
[  651.863386][T16880]  ? __pfx_setup_net+0x10/0x10
[  651.863420][T16880]  ? mutex_init_lockdep+0xf1/0x120
[  651.863446][T16880]  copy_net_ns+0x46f/0x7c0
[  651.863484][T16880]  create_new_namespaces+0x3ea/0xac0
[  651.863513][T16880]  unshare_nsproxy_namespaces+0xf2/0x220
[  651.863541][T16880]  ksys_unshare+0x438/0xab0
[  651.863571][T16880]  ? kcov_ioctl+0x17a/0x750
[  651.863604][T16880]  ? kfree+0x1e5/0x6c0
[  651.863624][T16880]  ? __pfx_ksys_unshare+0x10/0x10
[  651.863655][T16880]  ? kcov_ioctl+0x17a/0x750
[  651.863692][T16880]  __x64_sys_unshare+0x31/0x40
[  651.863722][T16880]  do_syscall_64+0x115/0x840
[  651.863745][T16880]  ? clear_bhb_loop+0x40/0x90
[  651.863773][T16880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.863798][T16880] RIP: 0033:0x7f2349b9ce59
[  651.863818][T16880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.863843][T16880] RSP: 002b:00007f234ab42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  651.863868][T16880] RAX: ffffffffffffffda RBX: 00007f2349e15fa0 RCX: 00007f2349b9ce59
[  651.863885][T16880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  651.863900][T16880] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  651.863916][T16880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  651.863930][T16880] R13: 00007f2349e16038 R14: 00007f2349e15fa0 R15: 00007fff584dc338
[  651.863954][T16880]  </TASK>
[  652.228900][T16880] memory: usage 3072kB, limit 3072kB, failcnt 91757
[  652.235593][T16880] memory+swap: usage 7776kB, limit 9007199254740988kB, failcnt 0
[  652.243315][T16880] kmem: usage 2840kB, limit 9007199254740988kB, failcnt 0
[  652.250464][T16880] Memory cgroup stats for /syz1:
[  652.250612][T16880] cache 0
[  652.258584][T16880] rss 4096
[  652.261628][T16880] rss_huge 0
[  652.264858][T16880] shmem 0
[  652.267875][T16880] mapped_file 0
[  652.271368][T16880] dirty 0
[  652.274399][T16880] writeback 0
[  652.277757][T16880] workingset_refault_anon 19564
[  652.282613][T16880] workingset_refault_file 23574
[  652.287493][T16880] swap 4816896
[  652.290875][T16880] swapcached 568446976
[  652.294961][T16880] pgpgin 603625
[  652.298453][T16880] pgpgout 630181
[  652.302000][T16880] pgfault 455972
[  652.305619][T16880] pgmajfault 6950
[  652.309256][T16880] inactive_anon 204800
[  652.313466][T16880] active_anon 28672
[  652.317314][T16880] inactive_file 0
[  652.320992][T16880] active_file 0
[  652.325639][T16880] unevictable 4096
[  652.329368][T16880] hierarchical_memory_limit 3145728
[  652.334597][T16880] hierarchical_memsw_limit 9223372036854771712
[  652.340864][T16880] total_cache 0
[  652.344326][T16880] total_rss 4096
[  652.347907][T16880] total_rss_huge 0
[  652.351630][T16880] total_shmem 0
[  652.355105][T16880] total_mapped_file 0
[  652.359115][T16880] total_dirty 0
[  652.362662][T16880] total_writeback 0
[  652.366526][T16880] total_workingset_refault_anon 19564
[  652.371951][T16880] total_workingset_refault_file 23574
[  652.377399][T16880] total_swap 4816896
[  652.381318][T16880] total_swapcached 568446976
[  652.385969][T16880] total_pgpgin 603625
[  652.390054][T16880] total_pgpgout 630181
[  652.394133][T16880] total_pgfault 455972
[  652.398272][T16880] total_pgmajfault 6950
[  652.402455][T16880] total_inactive_anon 204800
[  652.407115][T16880] total_active_anon 28672
[  652.411447][T16880] total_inactive_file 0
[  652.416025][T16880] total_active_file 0
[  652.420209][T16880] total_unevictable 4096
[  652.424466][T16880] anon_cost 0
[  652.428911][T16880] file_cost 0
[  652.432215][T16880] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2160,pid=16879,uid=0
[  652.447369][T16880] Memory cgroup out of memory: Killed process 16879 (syz.1.2160) total-vm:135396kB, anon-rss:1244kB, file-rss:21984kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  653.026886][T16910] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2165'.
[  653.801274][T16932] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  653.979871][T16938] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  655.064043][T16924] syz.1.2169 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[  655.276494][T16924] CPU: 0 UID: 0 PID: 16924 Comm: syz.1.2169 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  655.276538][T16924] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  655.276550][T16924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  655.276569][T16924] Call Trace:
[  655.276578][T16924]  <TASK>
[  655.276587][T16924]  dump_stack_lvl+0x100/0x190
[  655.276620][T16924]  dump_header+0xfb/0x606
[  655.276645][T16924]  oom_kill_process.cold+0xd/0x330
[  655.276671][T16924]  out_of_memory+0x340/0x14f0
[  655.276711][T16924]  ? __pfx_out_of_memory+0x10/0x10
[  655.276748][T16924]  ? rcu_is_watching+0x12/0xc0
[  655.276779][T16924]  mem_cgroup_out_of_memory+0xc6/0x130
[  655.276804][T16924]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  655.276831][T16924]  ? do_raw_spin_unlock+0x145/0x1e0
[  655.276858][T16924]  ? _raw_spin_unlock+0x28/0x50
[  655.276894][T16924]  try_charge_memcg+0x6e5/0xdf0
[  655.276937][T16924]  ? __pfx_try_charge_memcg+0x10/0x10
[  655.276972][T16924]  ? peak_open+0x1/0x50
[  655.277005][T16924]  ? rcu_read_unlock+0x17/0x60
[  655.277038][T16924]  ? lock_release+0x24d/0x310
[  655.277079][T16924]  __memcg_slab_post_alloc_hook+0x469/0x1160
[  655.277120][T16924]  ? kasan_unpoison+0x27/0x60
[  655.277146][T16924]  __kmalloc_node_track_caller_noprof+0x64f/0x830
[  655.277182][T16924]  ? neigh_sysctl_register+0xb4/0x660
[  655.277217][T16924]  kmemdup_noprof+0x29/0x60
[  655.277244][T16924]  neigh_sysctl_register+0xb4/0x660
[  655.277275][T16924]  ? call_netdevice_notifiers_info+0xbe/0x110
[  655.277314][T16924]  ? __pfx_neigh_sysctl_register+0x10/0x10
[  655.277346][T16924]  ? inetdev_init+0x245/0x570
[  655.277368][T16924]  ? inetdev_event+0x7fa/0x17f0
[  655.277390][T16924]  ? notifier_call_chain+0x99/0x3f0
[  655.277428][T16924]  ? copy_net_ns+0x46f/0x7c0
[  655.277463][T16924]  ? create_new_namespaces+0x3ea/0xac0
[  655.277488][T16924]  ? unshare_nsproxy_namespaces+0xf2/0x220
[  655.277513][T16924]  ? ksys_unshare+0x438/0xab0
[  655.277543][T16924]  ? __x64_sys_unshare+0x31/0x40
[  655.277573][T16924]  ? do_syscall_64+0x115/0x840
[  655.277595][T16924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.277622][T16924]  devinet_sysctl_register+0xb6/0x210
[  655.277648][T16924]  inetdev_init+0x2b8/0x570
[  655.277671][T16924]  inetdev_event+0x7fa/0x17f0
[  655.277695][T16924]  ? ib_netdevice_event+0xfc/0x330
[  655.277723][T16924]  ? __pfx_inetdev_event+0x10/0x10
[  655.277747][T16924]  ? wext_netdev_notifier_call+0xe/0x20
[  655.277785][T16924]  ? cfg802154_netdev_notifier_call+0x17a/0xad0
[  655.277813][T16924]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  655.277850][T16924]  notifier_call_chain+0x99/0x3f0
[  655.277884][T16924]  call_netdevice_notifiers_info+0xbe/0x110
[  655.277922][T16924]  register_netdevice+0x1998/0x25a0
[  655.277965][T16924]  ? __pfx_register_netdevice+0x10/0x10
[  655.278003][T16924]  __ip_tunnel_create+0x52b/0x670
[  655.278027][T16924]  ? __pfx___ip_tunnel_create+0x10/0x10
[  655.278054][T16924]  ip_tunnel_init_net+0x230/0x780
[  655.278081][T16924]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  655.278108][T16924]  ? lockdep_init_map_type+0x5c/0x250
[  655.278130][T16924]  ? ops_init+0x77/0x5f0
[  655.278161][T16924]  ? __pfx_ipgre_init_net+0x10/0x10
[  655.278195][T16924]  ops_init+0x1e2/0x5f0
[  655.278227][T16924]  setup_net+0x118/0x3a0
[  655.278259][T16924]  ? __pfx_setup_net+0x10/0x10
[  655.278292][T16924]  ? mutex_init_lockdep+0xf1/0x120
[  655.278316][T16924]  copy_net_ns+0x46f/0x7c0
[  655.278352][T16924]  create_new_namespaces+0x3ea/0xac0
[  655.278380][T16924]  unshare_nsproxy_namespaces+0xf2/0x220
[  655.278407][T16924]  ksys_unshare+0x438/0xab0
[  655.278437][T16924]  ? __pfx_ksys_unshare+0x10/0x10
[  655.278472][T16924]  __x64_sys_unshare+0x31/0x40
[  655.278502][T16924]  do_syscall_64+0x115/0x840
[  655.278523][T16924]  ? clear_bhb_loop+0x40/0x90
[  655.278550][T16924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.278574][T16924] RIP: 0033:0x7f2349b9ce59
[  655.278593][T16924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  655.278617][T16924] RSP: 002b:00007f234ab00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  655.278641][T16924] RAX: ffffffffffffffda RBX: 00007f2349e16180 RCX: 00007f2349b9ce59
[  655.278658][T16924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  655.278673][T16924] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  655.278688][T16924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  655.278702][T16924] R13: 00007f2349e16218 R14: 00007f2349e16180 R15: 00007fff584dc338
[  655.278725][T16924]  </TASK>
[  655.874403][T16924] memory: usage 3036kB, limit 3072kB, failcnt 92194
[  655.881116][T16924] memory+swap: usage 6504kB, limit 9007199254740988kB, failcnt 0
[  655.888931][T16924] kmem: usage 2728kB, limit 9007199254740988kB, failcnt 0
[  655.896079][T16924] Memory cgroup stats for /syz1:
[  655.896239][T16924] cache 65536
[  655.904550][T16924] rss 12288
[  655.908882][T16924] rss_huge 0
[  655.912088][T16924] shmem 0
[  655.915105][T16924] mapped_file 0
[  655.918617][T16924] dirty 0
[  655.921561][T16924] writeback 0
[  655.924890][T16924] workingset_refault_anon 19623
[  655.929827][T16924] workingset_refault_file 23574
[  655.934685][T16924] swap 3551232
[  655.938607][T16924] swapcached 568795136
[  655.942749][T16924] pgpgin 603762
[  655.946282][T16924] pgpgout 630314
[  655.949910][T16924] pgfault 456769
[  655.953529][T16924] pgmajfault 6981
[  655.957211][T16924] inactive_anon 155648
[  655.961310][T16924] active_anon 77824
[  655.965214][T16924] inactive_file 65536
[  655.969243][T16924] active_file 0
[  655.972709][T16924] unevictable 4096
[  655.976512][T16924] hierarchical_memory_limit 3145728
[  655.981977][T16924] hierarchical_memsw_limit 9223372036854771712
[  655.988226][T16924] total_cache 65536
[  655.992062][T16924] total_rss 12288
[  655.995745][T16924] total_rss_huge 0
[  655.999524][T16924] total_shmem 0
[  656.002990][T16924] total_mapped_file 0
[  656.007004][T16924] total_dirty 0
[  656.011457][T16924] total_writeback 0
[  656.016321][T16924] total_workingset_refault_anon 19623
[  656.021786][T16924] total_workingset_refault_file 23574
[  656.027205][T16924] total_swap 3551232
[  656.031100][T16924] total_swapcached 568795136
[  656.035782][T16924] total_pgpgin 603762
[  656.039779][T16924] total_pgpgout 630314
[  656.043969][T16924] total_pgfault 456769
[  656.048208][T16924] total_pgmajfault 6981
[  656.052381][T16924] total_inactive_anon 155648
[  656.057014][T16924] total_active_anon 77824
[  656.061508][T16924] total_inactive_file 65536
[  656.066047][T16924] total_active_file 0
[  656.070054][T16924] total_unevictable 4096
[  656.074354][T16924] anon_cost 0
[  656.077708][T16924] file_cost 0
[  656.080997][T16924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2169,pid=16920,uid=0
[  656.095966][T16924] Memory cgroup out of memory: Killed process 16920 (syz.1.2169) total-vm:172400kB, anon-rss:1248kB, file-rss:26272kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  657.821010][T17009] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input61
[  658.006606][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2186'.
[  658.091439][T17015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2186'.
[  658.870270][T17031] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2189'.
[  659.965667][T17052] FAULT_INJECTION: forcing a failure.
[  659.965667][T17052] name failslab, interval 1, probability 0, space 0, times 0
[  660.130495][T17052] CPU: 0 UID: 0 PID: 17052 Comm: syz.2.2193 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  660.130536][T17052] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  660.130546][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  660.130560][T17052] Call Trace:
[  660.130569][T17052]  <TASK>
[  660.130577][T17052]  dump_stack_lvl+0x100/0x190
[  660.130609][T17052]  should_fail_ex.cold+0x5/0xa
[  660.130634][T17052]  ? kmem_cache_alloc_lru_noprof+0x67/0x6a0
[  660.130666][T17052]  should_failslab+0xc2/0x120
[  660.130697][T17052]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  660.130725][T17052]  ? start_dirop+0x79/0xb0
[  660.130760][T17052]  ? alloc_inode+0x68/0x250
[  660.130788][T17052]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  660.130816][T17052]  alloc_inode+0x68/0x250
[  660.130843][T17052]  new_inode+0x22/0x1c0
[  660.130871][T17052]  __debugfs_create_file+0x105/0x4f0
[  660.130900][T17052]  debugfs_create_file_full+0x41/0x60
[  660.130936][T17052]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  660.130964][T17052]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  660.130989][T17052]  ? ida_alloc_range+0x70d/0x830
[  660.131023][T17052]  ? kasan_save_track+0x14/0x30
[  660.131051][T17052]  ? __kasan_kmalloc+0xaa/0xb0
[  660.131078][T17052]  ? lockdep_init_map_type+0x5c/0x250
[  660.131101][T17052]  preinit_net.part.0+0x252/0x920
[  660.131135][T17052]  copy_net_ns+0x339/0x7c0
[  660.131170][T17052]  create_new_namespaces+0x3ea/0xac0
[  660.131198][T17052]  unshare_nsproxy_namespaces+0xf2/0x220
[  660.131224][T17052]  ksys_unshare+0x438/0xab0
[  660.131255][T17052]  ? __pfx_ksys_unshare+0x10/0x10
[  660.131289][T17052]  __x64_sys_unshare+0x31/0x40
[  660.131318][T17052]  do_syscall_64+0x115/0x840
[  660.131340][T17052]  ? clear_bhb_loop+0x40/0x90
[  660.131366][T17052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.131389][T17052] RIP: 0033:0x7f22c779ce59
[  660.131407][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.131430][T17052] RSP: 002b:00007f22c86e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  660.131453][T17052] RAX: ffffffffffffffda RBX: 00007f22c7a15fa0 RCX: 00007f22c779ce59
[  660.131470][T17052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  660.131485][T17052] RBP: 00007f22c7832e6f R08: 0000000000000000 R09: 0000000000000000
[  660.131500][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.131518][T17052] R13: 00007f22c7a16038 R14: 00007f22c7a15fa0 R15: 00007ffcf6df3388
[  660.131541][T17052]  </TASK>
[  660.655502][T17052] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888059bba9c0'
[  661.701050][T17074] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input62
[  662.075933][T17071] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  662.806057][T17102] FAULT_INJECTION: forcing a failure.
[  662.806057][T17102] name failslab, interval 1, probability 0, space 0, times 0
[  662.932561][T17102] CPU: 0 UID: 0 PID: 17102 Comm: syz.6.2205 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  662.932605][T17102] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  662.932618][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  662.932635][T17102] Call Trace:
[  662.932643][T17102]  <TASK>
[  662.932653][T17102]  dump_stack_lvl+0x100/0x190
[  662.932689][T17102]  should_fail_ex.cold+0x5/0xa
[  662.932718][T17102]  ? kmem_cache_alloc_noprof+0x6b/0x6a0
[  662.932750][T17102]  should_failslab+0xc2/0x120
[  662.932784][T17102]  kmem_cache_alloc_noprof+0x91/0x6a0
[  662.932812][T17102]  ? vm_area_dup+0x27/0x8e0
[  662.932837][T17102]  vm_area_dup+0x27/0x8e0
[  662.932859][T17102]  dup_mmap+0x6f6/0x21b0
[  662.932899][T17102]  ? __pfx_dup_mmap+0x10/0x10
[  662.932935][T17102]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  662.932973][T17102]  ? lock_release+0x24d/0x310
[  662.933013][T17102]  ? do_raw_spin_lock+0x128/0x260
[  662.933039][T17102]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  662.933065][T17102]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  662.933196][T17102]  ? rcu_is_watching+0x12/0xc0
[  662.933226][T17102]  ? lock_acquire+0x301/0x370
[  662.933268][T17102]  copy_process+0x4588/0x7ff0
[  662.933305][T17102]  ? __pfx_copy_process+0x10/0x10
[  662.933340][T17102]  kernel_clone+0x176/0x9d0
[  662.933367][T17102]  ? lockdep_init_map_type+0x5c/0x250
[  662.933391][T17102]  ? __pfx_kernel_clone+0x10/0x10
[  662.933426][T17102]  __do_sys_clone+0xd9/0x120
[  662.933455][T17102]  ? __pfx___do_sys_clone+0x10/0x10
[  662.933484][T17102]  ? fd_install+0x24f/0x580
[  662.933527][T17102]  ? rcu_is_watching+0x12/0xc0
[  662.933557][T17102]  do_syscall_64+0x115/0x840
[  662.933579][T17102]  ? clear_bhb_loop+0x40/0x90
[  662.933606][T17102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.933631][T17102] RIP: 0033:0x7fcced19ce59
[  662.933651][T17102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.933678][T17102] RSP: 002b:00007fccee006fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  662.933702][T17102] RAX: ffffffffffffffda RBX: 00007fcced416180 RCX: 00007fcced19ce59
[  662.933720][T17102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  662.933735][T17102] RBP: 00007fcced232e6f R08: 0000000000000000 R09: 0000000000000000
[  662.933751][T17102] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  662.933766][T17102] R13: 00007fcced416218 R14: 00007fcced416180 R15: 00007ffc8ba14578
[  662.933789][T17102]  </TASK>
[  663.722485][   T50] Bluetooth: hci5: unexpected event for opcode 0x7c89
[  663.750700][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'.
[  664.896032][T17136] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  665.946371][T17183] sd 0:0:1:0: PR command failed: 1026
[  665.974989][T17183] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  666.025613][T17183] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  667.020060][T17191] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  667.122858][T17204] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  667.211901][ T2257] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  668.190132][T17204] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  668.256258][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  670.517797][T17234] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  671.515917][T17274] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  673.366342][T15940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  673.377847][T15940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  673.387057][T15940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  673.398316][T15940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  673.405953][T15940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  673.535984][T15940] Bluetooth: hci5: command 0x0419 tx timeout
[  675.309135][T17307] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.341611][T17307] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.368948][T17307] bridge_slave_0: entered allmulticast mode
[  675.415702][T17307] bridge_slave_0: entered promiscuous mode
[  675.455711][T15940] Bluetooth: hci1: command tx timeout
[  675.475673][T17307] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.518612][T17307] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.545215][T17307] bridge_slave_1: entered allmulticast mode
[  675.583246][T17307] bridge_slave_1: entered promiscuous mode
[  675.678201][T17340] FAULT_INJECTION: forcing a failure.
[  675.678201][T17340] name failslab, interval 1, probability 0, space 0, times 0
[  675.705043][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.725774][T17340] CPU: 0 UID: 0 PID: 17340 Comm: syz.6.2247 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  675.725815][T17340] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  675.725825][T17340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  675.725840][T17340] Call Trace:
[  675.725847][T17340]  <TASK>
[  675.725856][T17340]  dump_stack_lvl+0x100/0x190
[  675.725887][T17340]  should_fail_ex.cold+0x5/0xa
[  675.725913][T17340]  ? fs_reclaim_acquire+0x70/0x100
[  675.725948][T17340]  should_failslab+0xc2/0x120
[  675.725981][T17340]  __kmalloc_noprof+0xfc/0x820
[  675.726008][T17340]  ? rcu_is_watching+0x12/0xc0
[  675.726036][T17340]  ? tomoyo_realpath_from_path+0xb6/0x690
[  675.726064][T17340]  tomoyo_realpath_from_path+0xb6/0x690
[  675.726091][T17340]  tomoyo_path_number_perm+0x23c/0x580
[  675.726126][T17340]  ? tomoyo_path_number_perm+0x22e/0x580
[  675.726161][T17340]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  675.726199][T17340]  ? preempt_count_add+0x76/0x150
[  675.726251][T17340]  ? rcu_is_watching+0x12/0xc0
[  675.726278][T17340]  ? __fget_files+0x215/0x3d0
[  675.726314][T17340]  ? hook_file_ioctl_common+0x140/0x440
[  675.726350][T17340]  ? lock_release+0x24d/0x310
[  675.726389][T17340]  ? __fget_files+0x21f/0x3d0
[  675.726426][T17340]  security_file_ioctl+0xd3/0x230
[  675.726461][T17340]  __x64_sys_ioctl+0xb7/0x210
[  675.726493][T17340]  do_syscall_64+0x115/0x840
[  675.726515][T17340]  ? clear_bhb_loop+0x40/0x90
[  675.726541][T17340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.726565][T17340] RIP: 0033:0x7fcced19ce59
[  675.726583][T17340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  675.726606][T17340] RSP: 002b:00007fccee049028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  675.726629][T17340] RAX: ffffffffffffffda RBX: 00007fcced415fa0 RCX: 00007fcced19ce59
[  675.726645][T17340] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000014
[  675.726660][T17340] RBP: 00007fccee049090 R08: 0000000000000000 R09: 0000000000000000
[  675.726674][T17340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  675.726689][T17340] R13: 00007fcced416038 R14: 00007fcced415fa0 R15: 00007ffc8ba14578
[  675.726711][T17340]  </TASK>
[  675.726721][T17340] ERROR: Out of memory at tomoyo_realpath_from_path.
[  675.974253][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.077027][T17342] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  676.088578][T17342] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  676.103137][T17342] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  676.114785][T17307] team0: Port device team_slave_0 added
[  676.126126][T17342] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  676.137959][T17307] team0: Port device team_slave_1 added
[  676.178726][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  676.202392][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.275617][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  676.320160][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  676.346551][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  676.447756][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  676.552346][T17307] hsr_slave_0: entered promiscuous mode
[  676.583615][T17307] hsr_slave_1: entered promiscuous mode
[  676.614329][T17307] debugfs: 'hsr0' already exists in 'hsr'
[  676.667592][T17307] Cannot create hsr debugfs directory
[  677.030244][T17307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.114693][T17307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.203060][T17307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.273796][T17307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.521331][T17366] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input63
[  677.701199][T17307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  677.748830][T17307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  677.775483][T15940] Bluetooth: hci5: command 0x0419 tx timeout
[  677.788684][T17307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  677.831111][T17307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  678.081187][T17307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  678.114175][T17307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  678.175773][T15940] Bluetooth: hci1: command 0x040f tx timeout
[  678.431656][ T8039] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  678.483447][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz-executor Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  678.483489][ T8039] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  678.483499][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  678.483514][ T8039] Call Trace:
[  678.483522][ T8039]  <TASK>
[  678.483531][ T8039]  dump_stack_lvl+0x100/0x190
[  678.483562][ T8039]  dump_header+0xfb/0x606
[  678.483589][ T8039]  oom_kill_process.cold+0xd/0x330
[  678.483616][ T8039]  out_of_memory+0x340/0x14f0
[  678.483654][ T8039]  ? lock_acquire+0x301/0x370
[  678.483692][ T8039]  ? __pfx_out_of_memory+0x10/0x10
[  678.483728][ T8039]  ? rcu_is_watching+0x12/0xc0
[  678.483758][ T8039]  mem_cgroup_out_of_memory+0xc6/0x130
[  678.483782][ T8039]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  678.483808][ T8039]  ? do_raw_spin_unlock+0x145/0x1e0
[  678.483834][ T8039]  ? _raw_spin_unlock+0x28/0x50
[  678.483869][ T8039]  try_charge_memcg+0x6e5/0xdf0
[  678.483904][ T8039]  ? __pfx_try_charge_memcg+0x10/0x10
[  678.483936][ T8039]  ? rcu_read_unlock+0x17/0x60
[  678.483969][ T8039]  ? rcu_is_cpu_rrupt_from_idle+0x1c1/0x270
[  678.483999][ T8039]  ? lock_release+0x24d/0x310
[  678.484034][ T8039]  ? rcu_read_unlock+0x17/0x60
[  678.484067][ T8039]  ? rcu_is_watching+0x12/0xc0
[  678.484093][ T8039]  ? rcu_read_unlock+0x17/0x60
[  678.484126][ T8039]  ? lock_release+0x24d/0x310
[  678.484163][ T8039]  charge_memcg+0x187/0x1e0
[  678.484196][ T8039]  mem_cgroup_swapin_charge_folio+0xc1/0x450
[  678.484235][ T8039]  swap_cache_alloc_folio+0x548/0xc50
[  678.484264][ T8039]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  678.484289][ T8039]  ? swap_cache_get_folio+0x28d/0x360
[  678.484313][ T8039]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  678.484338][ T8039]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  678.484367][ T8039]  swap_cache_read_folio+0x47/0x140
[  678.484394][ T8039]  swap_cluster_readahead+0x387/0x5f0
[  678.484423][ T8039]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  678.484475][ T8039]  ? update_curr+0x71/0x540
[  678.484495][ T8039]  ? __css_rstat_updated+0x1ce/0x5a0
[  678.484535][ T8039]  ? debug_object_assert_init+0x1c4/0x300
[  678.484634][ T8039]  ? rcu_is_watching+0x12/0xc0
[  678.484661][ T8039]  ? debug_object_assert_init+0x1c4/0x300
[  678.484683][ T8039]  ? lock_release+0x24d/0x310
[  678.484717][ T8039]  ? get_vma_policy+0x23d/0x3b0
[  678.484753][ T8039]  swapin_readahead+0x159/0x1200
[  678.484778][ T8039]  ? debug_object_assert_init+0x1c4/0x300
[  678.484802][ T8039]  ? rcu_is_watching+0x12/0xc0
[  678.484830][ T8039]  ? __pfx_swapin_readahead+0x10/0x10
[  678.484855][ T8039]  ? rcu_is_watching+0x12/0xc0
[  678.484880][ T8039]  ? swap_table_get+0x103/0x2c0
[  678.484901][ T8039]  ? lock_release+0x24d/0x310
[  678.484938][ T8039]  ? swap_table_get+0x10d/0x2c0
[  678.484960][ T8039]  ? swap_cache_get_folio+0x28d/0x360
[  678.484984][ T8039]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  678.485008][ T8039]  ? __pfx_softleaf_type+0x10/0x10
[  678.485032][ T8039]  ? rcu_read_unlock+0x2d/0xb0
[  678.485056][ T8039]  ? do_swap_page+0xf98/0x5780
[  678.485091][ T8039]  do_swap_page+0xf98/0x5780
[  678.485132][ T8039]  ? do_raw_spin_lock+0x128/0x260
[  678.485158][ T8039]  ? __pfx_do_swap_page+0x10/0x10
[  678.485194][ T8039]  ? lock_acquire+0x301/0x370
[  678.485228][ T8039]  ? rcu_is_watching+0x12/0xc0
[  678.485254][ T8039]  ? trace_irq_enable.constprop.0+0x122/0x160
[  678.485296][ T8039]  ? __pte_offset_map+0x50/0x310
[  678.485323][ T8039]  ? __pte_offset_map+0x179/0x310
[  678.485352][ T8039]  __handle_mm_fault+0x192f/0x2a00
[  678.485378][ T8039]  ? __pfx___handle_mm_fault+0x10/0x10
[  678.485416][ T8039]  ? __pfx_vma_start_read+0x10/0x10
[  678.485460][ T8039]  ? rcu_is_watching+0x12/0xc0
[  678.485496][ T8039]  handle_mm_fault+0x37b/0xa30
[  678.485520][ T8039]  do_user_addr_fault+0x5a3/0x12f0
[  678.485556][ T8039]  exc_page_fault+0x6f/0xd0
[  678.485594][ T8039]  asm_exc_page_fault+0x26/0x30
[  678.485617][ T8039] RIP: 0033:0x7f2349b5d68e
[  678.485636][ T8039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  678.485660][ T8039] RSP: 002b:00007fff584dc618 EFLAGS: 00010246
[  678.485680][ T8039] RAX: 0000000000000000 RBX: 0000555562e94500 RCX: 00007f2349b5d68e
[  678.485696][ T8039] RDX: 00007fff584dc670 RSI: 0000000000000000 RDI: 0000000000000000
[  678.485711][ T8039] RBP: 00007fff584dc6dc R08: 0000000000000000 R09: 0000000000000000
[  678.485727][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  678.485742][ T8039] R13: 00000000000927c0 R14: 00000000000a5759 R15: 00007fff584dc730
[  678.485764][ T8039]  </TASK>
[  680.285445][T15940] Bluetooth: hci1: command 0x040f tx timeout
[  680.373155][ T8039] memory: usage 3028kB, limit 3072kB, failcnt 94368
[  680.410469][ T8039] memory+swap: usage 6524kB, limit 9007199254740988kB, failcnt 0
[  680.441938][T17381] device-mapper: ioctl: name not supplied when creating device
[  680.456749][ T8039] kmem: usage 2820kB, limit 9007199254740988kB, failcnt 0
[  680.490853][ T8039] Memory cgroup stats for /syz1:
[  680.491016][ T8039] cache 0
[  680.531119][ T8039] rss 45056
[  680.549079][ T8039] rss_huge 0
[  680.562275][ T8039] shmem 0
[  680.579565][ T8039] mapped_file 0
[  680.598747][ T8039] dirty 0
[  680.611528][ T8039] writeback 0
[  680.625040][ T8039] workingset_refault_anon 19907
[  680.650039][ T8039] workingset_refault_file 23574
[  680.680169][ T8039] swap 3584000
[  680.698552][ T8039] swapcached 581648384
[  680.715300][ T8039] pgpgin 607371
[  680.731970][ T8039] pgpgout 633935
[  680.742262][ T8039] pgfault 461135
[  680.755271][ T8039] pgmajfault 7124
[  680.762330][ T8039] inactive_anon 147456
[  680.772719][ T8039] active_anon 8192
[  680.786046][ T8039] inactive_file 0
[  680.789840][ T8039] active_file 0
[  680.800063][ T8039] unevictable 4096
[  680.810069][ T8039] hierarchical_memory_limit 3145728
[  680.820669][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  680.827211][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  680.836536][ T8039] hierarchical_memsw_limit 9223372036854771712
[  680.853848][ T8039] total_cache 0
[  680.859618][ T8039] total_rss 45056
[  680.874069][ T8039] total_rss_huge 0
[  680.878015][ T8039] total_shmem 0
[  680.882982][ T8039] total_mapped_file 0
[  680.894329][ T8039] total_dirty 0
[  680.901317][ T8039] total_writeback 0
[  680.915391][ T8039] total_workingset_refault_anon 19907
[  680.922399][ T8039] total_workingset_refault_file 23574
[  680.935464][ T8039] total_swap 3584000
[  680.944119][ T8039] total_swapcached 581648384
[  680.954862][ T8039] total_pgpgin 607371
[  680.967077][ T8039] total_pgpgout 633935
[  680.976337][ T8039] total_pgfault 461135
[  680.984452][ T8039] total_pgmajfault 7124
[  680.996787][ T8039] total_inactive_anon 147456
[  681.005746][ T8039] total_active_anon 8192
[  681.017685][ T8039] total_inactive_file 0
[  681.025871][ T8039] total_active_file 0
[  681.035545][ T8039] total_unevictable 4096
[  681.042784][ T8039] anon_cost 0
[  681.052506][ T8039] file_cost 0
[  681.058896][ T8039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2249,pid=17365,uid=0
[  681.094216][ T8039] Memory cgroup out of memory: Killed process 17365 (syz.1.2249) total-vm:137312kB, anon-rss:1324kB, file-rss:22608kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000
[  681.175713][T17307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  681.198588][T17307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  681.240559][T17380] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2257: iget: checksum invalid
[  681.261151][T17380] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  681.304463][T17380] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2257: iget: checksum invalid
[  681.348529][T17380] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  681.382636][T17380] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2257: iget: checksum invalid
[  681.437200][T17380] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  681.484291][T17380] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2257: iget: checksum invalid
[  681.534223][T17380] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  681.615610][T17380] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  681.637590][T17307] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.658260][T17380] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  681.703357][T17380] FAULT_INJECTION: forcing a failure.
[  681.703357][T17380] name failslab, interval 1, probability 0, space 0, times 0
[  681.718892][T17307] 8021q: adding VLAN 0 to HW filter on device team0
[  681.749360][T13286] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.756610][T13286] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.768232][T17389] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  681.774448][T17380] CPU: 0 UID: 0 PID: 17380 Comm: syz.2.2257 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  681.774490][T17380] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  681.774500][T17380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  681.774515][T17380] Call Trace:
[  681.774525][T17380]  <TASK>
[  681.774535][T17380]  dump_stack_lvl+0x100/0x190
[  681.774568][T17380]  should_fail_ex.cold+0x5/0xa
[  681.774596][T17380]  ? kmem_cache_alloc_noprof+0x6b/0x6a0
[  681.774627][T17380]  should_failslab+0xc2/0x120
[  681.774661][T17380]  kmem_cache_alloc_noprof+0x91/0x6a0
[  681.774689][T17380]  ? kernfs_link_sibling+0x5ec/0x850
[  681.774726][T17380]  ? __kernfs_new_node+0xd2/0xa10
[  681.774766][T17380]  __kernfs_new_node+0xd2/0xa10
[  681.774802][T17380]  ? kernfs_add_one+0x611/0xaa0
[  681.774845][T17380]  ? rcu_is_watching+0x12/0xc0
[  681.774875][T17380]  ? lock_release+0x24d/0x310
[  681.774914][T17380]  ? __pfx___kernfs_new_node+0x10/0x10
[  681.774954][T17380]  ? up_write+0x2e5/0x5c0
[  681.774979][T17380]  ? rcu_is_watching+0x12/0xc0
[  681.775009][T17380]  ? kernfs_root+0xee/0x2a0
[  681.775042][T17380]  ? rcu_is_watching+0x12/0xc0
[  681.775079][T17380]  ? kernfs_root+0xee/0x2a0
[  681.775112][T17380]  ? lock_release+0x24d/0x310
[  681.775154][T17380]  kernfs_new_node+0x117/0x150
[  681.775196][T17380]  __kernfs_create_file+0x53/0x350
[  681.775227][T17380]  sysfs_add_file_mode_ns+0x207/0x3c0
[  681.775263][T17380]  sysfs_create_file_ns+0x145/0x1e0
[  681.775295][T17380]  ? rcu_is_watching+0x12/0xc0
[  681.775324][T17380]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  681.775358][T17380]  ? __pfx___up_read+0x10/0x10
[  681.775384][T17380]  ? acpi_device_notify+0x464/0x500
[  681.775504][T17380]  ? lock_release+0x24d/0x310
[  681.775543][T17380]  ? kobject_put+0xb9/0x640
[  681.775578][T17380]  device_create_file+0xf2/0x1d0
[  681.775611][T17380]  device_add+0x2cb/0x1970
[  681.775639][T17380]  ? __pfx_device_add+0x10/0x10
[  681.775664][T17380]  ? __init_waitqueue_head+0xca/0x150
[  681.775698][T17380]  firmware_fallback_sysfs+0x2e2/0xc20
[  681.775784][T17380]  _request_firmware+0xfd7/0x13c0
[  681.775826][T17380]  ? __pfx__request_firmware+0x10/0x10
[  681.775864][T17380]  ? __pfx_netdev_run_todo+0x10/0x10
[  681.775901][T17380]  ? rcu_is_watching+0x12/0xc0
[  681.775932][T17380]  ? __kasan_kmalloc+0xaa/0xb0
[  681.775965][T17380]  request_firmware+0x35/0x50
[  681.776001][T17380]  reg_reload_regdb+0x85/0x460
[  681.776040][T17380]  ? __pfx_reg_reload_regdb+0x10/0x10
[  681.776086][T17380]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  681.776113][T17380]  ? nl80211_pre_doit+0x19a/0xae0
[  681.776143][T17380]  genl_family_rcv_msg_doit+0x214/0x300
[  681.776176][T17380]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  681.776207][T17380]  ? genl_get_cmd+0x3e7/0x760
[  681.776237][T17380]  ? bpf_lsm_capable+0x9/0x10
[  681.776264][T17380]  ? security_capable+0x80/0x260
[  681.776300][T17380]  genl_rcv_msg+0x560/0x800
[  681.776330][T17380]  ? __pfx_genl_rcv_msg+0x10/0x10
[  681.776359][T17380]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  681.776386][T17380]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  681.776422][T17380]  ? __pfx_nl80211_post_doit+0x10/0x10
[  681.776455][T17380]  netlink_rcv_skb+0x159/0x420
[  681.776481][T17380]  ? __pfx_genl_rcv_msg+0x10/0x10
[  681.776511][T17380]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  681.776542][T17380]  ? netlink_deliver_tap+0x1ae/0xcc0
[  681.776585][T17380]  genl_rcv+0x28/0x40
[  681.776610][T17380]  netlink_unicast+0x585/0x850
[  681.776637][T17380]  ? __pfx_netlink_unicast+0x10/0x10
[  681.776667][T17380]  netlink_sendmsg+0x8b0/0xda0
[  681.776694][T17380]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.776719][T17380]  ? __import_iovec+0x1d2/0x640
[  681.776749][T17380]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  681.776784][T17380]  ____sys_sendmsg+0xa4d/0xbe0
[  681.776823][T17380]  ? __pfx_netlink_sendmsg+0x10/0x10
[  681.776850][T17380]  ? __pfx_____sys_sendmsg+0x10/0x10
[  681.776881][T17380]  ___sys_sendmsg+0x190/0x1e0
[  681.776908][T17380]  ? __pfx____sys_sendmsg+0x10/0x10
[  681.776940][T17380]  ? rcu_is_watching+0x12/0xc0
[  681.776983][T17380]  __sys_sendmsg+0x160/0x210
[  681.777026][T17380]  ? __pfx___sys_sendmsg+0x10/0x10
[  681.777080][T17380]  ? rcu_is_watching+0x12/0xc0
[  681.777114][T17380]  do_syscall_64+0x115/0x840
[  681.777140][T17380]  ? clear_bhb_loop+0x40/0x90
[  681.777170][T17380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.777198][T17380] RIP: 0033:0x7f22c779ce59
[  681.777220][T17380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.777247][T17380] RSP: 002b:00007f22c86e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  681.777274][T17380] RAX: ffffffffffffffda RBX: 00007f22c7a15fa0 RCX: 00007f22c779ce59
[  681.777293][T17380] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008
[  681.777310][T17380] RBP: 00007f22c7832e6f R08: 0000000000000000 R09: 0000000000000000
[  681.777327][T17380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  681.777343][T17380] R13: 00007f22c7a16038 R14: 00007f22c7a15fa0 R15: 00007ffcf6df3388
[  681.777369][T17380]  </TASK>
[  682.786531][T17389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  682.796638][T13286] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.803785][T13286] bridge0: port 2(bridge_slave_1) entered forwarding state
[  683.032264][T17307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  683.064280][T17307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  683.268747][T17391] FAULT_INJECTION: forcing a failure.
[  683.268747][T17391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  683.379674][T17391] CPU: 0 UID: 0 PID: 17391 Comm: syz.6.2259 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  683.379715][T17391] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  683.379724][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  683.379739][T17391] Call Trace:
[  683.379747][T17391]  <TASK>
[  683.379756][T17391]  dump_stack_lvl+0x100/0x190
[  683.379788][T17391]  should_fail_ex.cold+0x5/0xa
[  683.379816][T17391]  _copy_from_user+0x2e/0xd0
[  683.379840][T17391]  __x64_sys_rt_sigprocmask+0x185/0x410
[  683.379866][T17391]  ? __pfx___x64_sys_rt_sigprocmask+0x10/0x10
[  683.379902][T17391]  ? rcu_is_watching+0x12/0xc0
[  683.379932][T17391]  do_syscall_64+0x115/0x840
[  683.379955][T17391]  ? clear_bhb_loop+0x40/0x90
[  683.379981][T17391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.380005][T17391] RIP: 0033:0x7fcced159bbb
[  683.380024][T17391] Code: 48 89 df 4c 89 e9 4c 8d 4c 24 57 e8 8f f3 ff ff 41 ba 08 00 00 00 31 d2 4c 89 fe 41 89 c4 bf 02 00 00 00 b8 0e 00 00 00 0f 05 <45> 85 e4 0f 85 8c 02 00 00 80 7c 24 56 00 0f 85 01 02 00 00 64 c7
[  683.380048][T17391] RSP: 002b:00007ffc8ba14520 EFLAGS: 00000246 ORIG_RAX: 000000000000000e
[  683.380071][T17391] RAX: ffffffffffffffda RBX: 00007fccedfe66c0 RCX: 00007fcced159bbb
[  683.380087][T17391] RDX: 0000000000000000 RSI: 00007ffc8ba14578 RDI: 0000000000000002
[  683.380103][T17391] RBP: 0000000000000000 R08: 00007fccedfe66c0 R09: 00007ffc8ba14577
[  683.380118][T17391] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  683.380133][T17391] R13: 00007fccedfc6000 R14: 00007fccedfe66c0 R15: 00007ffc8ba14578
[  683.380156][T17391]  </TASK>
[  683.873186][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  683.944534][T17395] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist!
[  684.532118][T17380] firmware regulatory.db: fw_load_sysfs_fallback: device_register failed
[  684.818227][T17307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  684.975741][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  685.017940][T17307] veth0_vlan: entered promiscuous mode
[  685.082619][T17307] veth1_vlan: entered promiscuous mode
[  685.210302][T17307] veth0_macvtap: entered promiscuous mode
[  685.284654][T17307] veth1_macvtap: entered promiscuous mode
[  685.374756][T17307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  685.442938][T17307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  685.514825][T13282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  685.561942][T13282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  685.607854][T13282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  685.667417][T13282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  685.837620][T13285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  685.884217][T13285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.001821][ T6660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  686.035426][ T6660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  686.568920][T17444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2244'.
[  686.721135][T17447] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2266: iget: checksum invalid
[  686.799286][T17440] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[  686.813269][T17447] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  686.881413][T17447] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2266: iget: checksum invalid
[  686.950911][T17447] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  687.008263][T17447] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2266: iget: checksum invalid
[  687.054782][T17447] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  687.069348][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  687.101077][T17447] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2266: iget: checksum invalid
[  687.160923][T17447] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  687.210699][T17447] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  687.239068][T17452] random: crng reseeded on system resumption
[  687.269524][T17447] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  687.680247][T17463] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  688.134782][T17466] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000f50 pfn:0x78000
[  688.167475][T17466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  688.205018][T17466] raw: 00fff00000000000 dead000000000040 ffff888029b2c000 0000000000000000
[  688.234859][T17466] raw: ffff888078000f50 0000000000000001 00000001ffffffff 0000000000000000
[  688.256770][T17466] page dumped because: unmovable page
[  688.263563][T17466] page_owner tracks the page as allocated
[  688.281913][T17466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 5289, tgid 5289 (dhcpcd), ts 45086521124, free_ts 39440732630
[  688.316255][T17466]  post_alloc_hook+0xfd/0x120
[  688.328685][T17466]  get_page_from_freelist+0xf48/0x3530
[  688.340252][T17466]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  688.355644][T17466]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  688.366382][T17466]  __page_pool_alloc_netmems_slow+0x1c6/0xa60
[  688.384627][T17466]  page_pool_alloc_netmems+0xc4/0x1a0
[  688.391827][T17466]  page_pool_alloc_frag_netmem+0x21d/0xa10
[  688.407313][T17466]  try_fill_recv+0x909/0x2950
[  688.417938][T17466]  virtnet_open+0x2d5/0x9a0
[  688.429168][T17466]  __dev_open+0x3ad/0x8f0
[  688.439542][T17466]  __dev_change_flags+0x596/0x850
[  688.449641][T17466]  netif_change_flags+0x8d/0x160
[  688.461207][T17466]  dev_change_flags+0xba/0x260
[  688.473802][T17466]  devinet_ioctl+0x110b/0x1f10
[  688.483881][T17466]  inet_ioctl+0x3aa/0x3f0
[  688.503472][T17466]  sock_do_ioctl+0x118/0x280
[  688.513569][T17466] page last free pid 5007 tgid 5007 stack trace:
[  688.530310][T17466]  __free_frozen_pages+0x79f/0x1090
[  688.540407][T17466]  qlist_free_all+0x47/0xf0
[  688.551556][T17466]  kasan_quarantine_reduce+0x1a0/0x1f0
[  688.562079][T17466]  __kasan_slab_alloc+0x69/0x90
[  688.574716][T17466]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  688.587323][T17466]  vm_area_dup+0x27/0x8e0
[  688.597411][T17466]  dup_mmap+0x6f6/0x21b0
[  688.607019][T17466]  copy_process+0x4588/0x7ff0
[  688.619181][T17466]  kernel_clone+0x176/0x9d0
[  688.630727][T17466]  __do_sys_clone+0xd9/0x120
[  688.640839][T17466]  do_syscall_64+0x115/0x840
[  688.651682][T17466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.136475][T15940] Bluetooth: hci1: command 0x040f tx timeout
[  689.308005][  T187] Process accounting resumed
[  689.655823][T17468] Process accounting resumed
[  689.903966][T17489] sctp: [Deprecated]: syz.6.2275 (pid 17489) Use of struct sctp_assoc_value in delayed_ack socket option.
[  689.903966][T17489] Use struct sctp_sack_info instead
[  692.796235][T17501] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  692.838914][T17501] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  693.586360][T17536] syz.1.2277 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  693.655083][T17536] CPU: 0 UID: 0 PID: 17536 Comm: syz.1.2277 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  693.655125][T17536] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  693.655135][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.655150][T17536] Call Trace:
[  693.655159][T17536]  <TASK>
[  693.655168][T17536]  dump_stack_lvl+0x100/0x190
[  693.655199][T17536]  dump_header+0xfb/0x606
[  693.655225][T17536]  oom_kill_process.cold+0xd/0x330
[  693.655252][T17536]  out_of_memory+0x340/0x14f0
[  693.655298][T17536]  ? lock_acquire+0x301/0x370
[  693.655339][T17536]  ? __pfx_out_of_memory+0x10/0x10
[  693.655377][T17536]  ? rcu_is_watching+0x12/0xc0
[  693.655407][T17536]  mem_cgroup_out_of_memory+0xc6/0x130
[  693.655432][T17536]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  693.655459][T17536]  ? do_raw_spin_unlock+0x145/0x1e0
[  693.655485][T17536]  ? _raw_spin_unlock+0x28/0x50
[  693.655558][T17536]  try_charge_memcg+0x6e5/0xdf0
[  693.655594][T17536]  ? __pfx_try_charge_memcg+0x10/0x10
[  693.655628][T17536]  ? peak_open+0x1/0x50
[  693.655660][T17536]  ? rcu_read_unlock+0x17/0x60
[  693.655693][T17536]  ? lock_release+0x24d/0x310
[  693.655733][T17536]  __memcg_slab_post_alloc_hook+0x469/0x1160
[  693.655773][T17536]  ? kasan_unpoison+0x27/0x60
[  693.655799][T17536]  __kmalloc_noprof+0x644/0x820
[  693.655827][T17536]  ? rcu_is_watching+0x12/0xc0
[  693.655854][T17536]  ? __register_sysctl_table+0xac/0x1650
[  693.655897][T17536]  __register_sysctl_table+0xac/0x1650
[  693.655935][T17536]  ? rcu_is_watching+0x12/0xc0
[  693.655962][T17536]  ? is_module_address+0x5f/0xf0
[  693.655985][T17536]  ? lock_release+0x24d/0x310
[  693.656022][T17536]  ? __pfx___register_sysctl_table+0x10/0x10
[  693.656061][T17536]  ? is_module_address+0x69/0xf0
[  693.656083][T17536]  ? register_net_sysctl_sz+0x222/0x430
[  693.656111][T17536]  ? __asan_memmove+0x30/0x60
[  693.656134][T17536]  ? kmemdup_noprof+0x49/0x60
[  693.656161][T17536]  ipv6_sysctl_net_init+0x180/0x2b0
[  693.656188][T17536]  ? __pfx_ipv6_sysctl_net_init+0x10/0x10
[  693.656213][T17536]  ops_init+0x1e2/0x5f0
[  693.656246][T17536]  setup_net+0x118/0x3a0
[  693.656285][T17536]  ? __pfx_setup_net+0x10/0x10
[  693.656318][T17536]  ? mutex_init_lockdep+0xf1/0x120
[  693.656343][T17536]  copy_net_ns+0x46f/0x7c0
[  693.656380][T17536]  create_new_namespaces+0x3ea/0xac0
[  693.656409][T17536]  unshare_nsproxy_namespaces+0xf2/0x220
[  693.656437][T17536]  ksys_unshare+0x438/0xab0
[  693.656467][T17536]  ? kcov_ioctl+0x17a/0x750
[  693.656500][T17536]  ? kfree+0x1e5/0x6c0
[  693.656520][T17536]  ? __pfx_ksys_unshare+0x10/0x10
[  693.656551][T17536]  ? kcov_ioctl+0x17a/0x750
[  693.656586][T17536]  __x64_sys_unshare+0x31/0x40
[  693.656616][T17536]  do_syscall_64+0x115/0x840
[  693.656639][T17536]  ? clear_bhb_loop+0x40/0x90
[  693.656667][T17536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.656691][T17536] RIP: 0033:0x7f2349b9ce59
[  693.656710][T17536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.656735][T17536] RSP: 002b:00007f234ab00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  693.656757][T17536] RAX: ffffffffffffffda RBX: 00007f2349e16180 RCX: 00007f2349b9ce59
[  693.656774][T17536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  693.656789][T17536] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  693.656803][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.656818][T17536] R13: 00007f2349e16218 R14: 00007f2349e16180 R15: 00007fff584dc338
[  693.656840][T17536]  </TASK>
[  694.842967][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  694.910532][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  694.984182][T17536] memory: usage 3056kB, limit 3072kB, failcnt 95325
[  695.048421][T17536] memory+swap: usage 6552kB, limit 9007199254740988kB, failcnt 0
[  695.113776][T17536] kmem: usage 2756kB, limit 9007199254740988kB, failcnt 0
[  695.123723][T17548] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2285: iget: checksum invalid
[  695.154341][T17536] Memory cgroup stats for /syz1:
[  695.154494][T17536] cache 0
[  695.190162][T17536] rss 36864
[  695.200443][T17536] rss_huge 0
[  695.218588][T17536] shmem 0
[  695.242977][T17536] mapped_file 0
[  695.253922][T17548] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  695.267836][T17536] dirty 0
[  695.276243][T17536] writeback 0
[  695.280965][T17536] workingset_refault_anon 20036
[  695.297187][T17548] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2285: iget: checksum invalid
[  695.313631][T17536] workingset_refault_file 23574
[  695.344902][T17548] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  695.357450][T17536] swap 3608576
[  695.366662][T17536] swapcached 586510336
[  695.376721][T17536] pgpgin 608764
[  695.387816][T17536] pgpgout 635332
[  695.413080][T17536] pgfault 465203
[  695.419845][T17548] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2285: iget: checksum invalid
[  695.453293][T17536] pgmajfault 7204
[  695.480238][T17536] inactive_anon 0
[  695.489747][T17548] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  695.509932][T17536] active_anon 188416
[  695.531336][T17536] inactive_file 0
[  695.562700][T17536] active_file 0
[  695.568914][T17548] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2285: iget: checksum invalid
[  695.591256][T17536] unevictable 4096
[  695.612070][T17536] hierarchical_memory_limit 3145728
[  695.640820][T17536] hierarchical_memsw_limit 9223372036854771712
[  695.672864][T17536] total_cache 0
[  695.688467][T17548] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  695.705469][T17536] total_rss 36864
[  695.718410][T17536] total_rss_huge 0
[  695.736556][T17536] total_shmem 0
[  695.745608][T17548] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  695.763661][T17536] total_mapped_file 0
[  695.785068][T17536] total_dirty 0
[  695.797105][T17548] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  695.806305][T17536] total_writeback 0
[  695.823436][T17536] total_workingset_refault_anon 20036
[  695.849576][T17536] total_workingset_refault_file 23574
[  695.877441][T17536] total_swap 3608576
[  695.894229][T17536] total_swapcached 586510336
[  695.914357][T17536] total_pgpgin 608764
[  695.934917][T17536] total_pgpgout 635332
[  695.956148][T17536] total_pgfault 465203
[  695.978422][T17536] total_pgmajfault 7204
[  696.008012][T17536] total_inactive_anon 0
[  696.032984][T17536] total_active_anon 188416
[  696.060322][T17536] total_inactive_file 0
[  696.084672][T17536] total_active_file 0
[  696.106717][T17536] total_unevictable 4096
[  696.122137][T17536] anon_cost 110
[  696.135744][T17536] file_cost 0
[  696.148746][T17536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2277,pid=17503,uid=0
[  696.226085][T17536] Memory cgroup out of memory: Killed process 17512 (syz.1.2277) total-vm:239984kB, anon-rss:1256kB, file-rss:26732kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000
[  696.955730][T17565] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2288: iget: checksum invalid
[  697.019858][T17565] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  697.122828][T17565] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2288: iget: checksum invalid
[  697.187214][T17565] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  697.258992][T17565] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2288: iget: checksum invalid
[  697.334938][T17565] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  697.394742][T17565] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2288: iget: checksum invalid
[  697.478967][T17565] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  697.539211][T17565] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  697.607845][T17565] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  697.979538][T17586] netlink: 98 bytes leftover after parsing attributes in process `syz.1.2291'.
[  698.034387][T17586] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2291'.
[  698.225628][T17552] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  698.312251][T17552] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  700.255645][T15940] Bluetooth: hci5: command 0x0419 tx timeout
[  700.335557][T15940] Bluetooth: hci1: command 0x040f tx timeout
[  701.305350][T17622] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  701.900355][T17639] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  702.721711][T17632] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  702.747339][T17632] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  702.976244][T15940] Bluetooth: hci5: command 0x0419 tx timeout
[  704.698370][T17689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2310'.
[  704.815449][T15940] Bluetooth: hci1: command 0x040f tx timeout
[  705.137445][T17682] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  705.189210][T17682] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  705.998612][T17697] futex_wake_op: syz.6.2312 tries to shift op by -2048; fix this program
[  706.042068][T17697] futex_wake_op: syz.6.2312 tries to shift op by -2048; fix this program
[  706.338592][T17701] FAULT_INJECTION: forcing a failure.
[  706.338592][T17701] name failslab, interval 1, probability 0, space 0, times 0
[  706.412964][T17701] CPU: 0 UID: 0 PID: 17701 Comm: syz.6.2313 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  706.413008][T17701] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  706.413018][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  706.413034][T17701] Call Trace:
[  706.413043][T17701]  <TASK>
[  706.413053][T17701]  dump_stack_lvl+0x100/0x190
[  706.413087][T17701]  should_fail_ex.cold+0x5/0xa
[  706.413113][T17701]  ? __kmalloc_cache_node_noprof+0x6e/0x6c0
[  706.413146][T17701]  should_failslab+0xc2/0x120
[  706.413179][T17701]  __kmalloc_cache_node_noprof+0x94/0x6c0
[  706.413210][T17701]  ? __alloc_workqueue+0x912/0x1940
[  706.413242][T17701]  __alloc_workqueue+0x912/0x1940
[  706.413274][T17701]  alloc_workqueue_noprof+0xc7/0x130
[  706.413304][T17701]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  706.413337][T17701]  ? __pfx___debug_object_init+0x10/0x10
[  706.413391][T17701]  nci_register_device+0x394/0xb80
[  706.413429][T17701]  ? __pfx_nci_register_device+0x10/0x10
[  706.413466][T17701]  ? lockdep_init_map_type+0x5c/0x250
[  706.413492][T17701]  virtual_ncidev_open+0x141/0x220
[  706.413591][T17701]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  706.413616][T17701]  misc_open+0x26d/0x450
[  706.413669][T17701]  ? __pfx_misc_open+0x10/0x10
[  706.413697][T17701]  chrdev_open+0x234/0x6a0
[  706.413720][T17701]  ? __pfx_apparmor_file_open+0x10/0x10
[  706.413753][T17701]  ? __pfx_chrdev_open+0x10/0x10
[  706.413776][T17701]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  706.413805][T17701]  do_dentry_open+0x6ab/0x14d0
[  706.413827][T17701]  ? __pfx_chrdev_open+0x10/0x10
[  706.413852][T17701]  vfs_open+0x82/0x3f0
[  706.413881][T17701]  path_openat+0x2873/0x4280
[  706.413909][T17701]  ? __pfx_path_openat+0x10/0x10
[  706.413934][T17701]  do_file_open+0x20e/0x430
[  706.413957][T17701]  ? __pfx_do_file_open+0x10/0x10
[  706.413989][T17701]  ? alloc_fd+0x471/0x7a0
[  706.414027][T17701]  ? do_getname+0x191/0x390
[  706.414055][T17701]  do_sys_openat2+0x10f/0x1e0
[  706.414085][T17701]  ? __pfx_do_sys_openat2+0x10/0x10
[  706.414135][T17701]  __x64_sys_openat+0x12d/0x210
[  706.414166][T17701]  ? __pfx___x64_sys_openat+0x10/0x10
[  706.414201][T17701]  ? rcu_is_watching+0x12/0xc0
[  706.414231][T17701]  do_syscall_64+0x115/0x840
[  706.414254][T17701]  ? clear_bhb_loop+0x40/0x90
[  706.414282][T17701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.414308][T17701] RIP: 0033:0x7fcced19ce59
[  706.414328][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.414358][T17701] RSP: 002b:00007fccee049028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  706.414383][T17701] RAX: ffffffffffffffda RBX: 00007fcced415fa0 RCX: 00007fcced19ce59
[  706.414400][T17701] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  706.414416][T17701] RBP: 00007fcced232e6f R08: 0000000000000000 R09: 0000000000000000
[  706.414432][T17701] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000
[  706.414447][T17701] R13: 00007fcced416038 R14: 00007fcced415fa0 R15: 00007ffc8ba14578
[  706.414471][T17701]  </TASK>
[  707.254771][T15940] Bluetooth: hci1: command 0x040f tx timeout
[  707.266590][T15940] Bluetooth: hci5: command 0x0419 tx timeout
[  707.682021][T17711] FAULT_INJECTION: forcing a failure.
[  707.682021][T17711] name failslab, interval 1, probability 0, space 0, times 0
[  707.737294][T17711] CPU: 0 UID: 0 PID: 17711 Comm: syz.6.2315 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  707.737340][T17711] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  707.737350][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  707.737366][T17711] Call Trace:
[  707.737374][T17711]  <TASK>
[  707.737385][T17711]  dump_stack_lvl+0x100/0x190
[  707.737419][T17711]  should_fail_ex.cold+0x5/0xa
[  707.737447][T17711]  ? kmem_cache_alloc_noprof+0x6b/0x6a0
[  707.737479][T17711]  should_failslab+0xc2/0x120
[  707.737512][T17711]  kmem_cache_alloc_noprof+0x91/0x6a0
[  707.737542][T17711]  ? __anon_vma_prepare+0xae/0x5e0
[  707.737568][T17711]  __anon_vma_prepare+0xae/0x5e0
[  707.737590][T17711]  ? do_raw_spin_lock+0x128/0x260
[  707.737619][T17711]  __vmf_anon_prepare+0x11f/0x250
[  707.737655][T17711]  do_huge_pmd_anonymous_page+0x160/0x1530
[  707.737685][T17711]  ? _raw_spin_unlock+0x28/0x50
[  707.737721][T17711]  ? __pmd_alloc+0x3fb/0x950
[  707.737757][T17711]  __handle_mm_fault+0x239e/0x2a00
[  707.737783][T17711]  ? mt_find+0x45e/0x8e0
[  707.737811][T17711]  ? __pfx___handle_mm_fault+0x10/0x10
[  707.737851][T17711]  ? __pfx_mt_find+0x10/0x10
[  707.737886][T17711]  ? find_vma+0xbf/0x140
[  707.737915][T17711]  ? __pfx_find_vma+0x10/0x10
[  707.737947][T17711]  handle_mm_fault+0x37b/0xa30
[  707.737973][T17711]  __get_user_pages+0x1178/0x32a0
[  707.738013][T17711]  ? __pfx___get_user_pages+0x10/0x10
[  707.738048][T17711]  ? __pfx___might_resched+0x10/0x10
[  707.738090][T17711]  populate_vma_page_range+0x267/0x3f0
[  707.738128][T17711]  ? __pfx_populate_vma_page_range+0x10/0x10
[  707.738165][T17711]  ? __pfx_find_vma_intersection+0x10/0x10
[  707.738199][T17711]  ? do_mmap+0x93f/0x12f0
[  707.738247][T17711]  __mm_populate+0x107/0x3a0
[  707.738284][T17711]  ? __pfx___mm_populate+0x10/0x10
[  707.738322][T17711]  ? up_write+0x2e5/0x5c0
[  707.738350][T17711]  vm_mmap_pgoff+0x37f/0x470
[  707.738385][T17711]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  707.738421][T17711]  ? __pfx_do_futex+0x10/0x10
[  707.738448][T17711]  ? __pfx_do_sys_openat2+0x10/0x10
[  707.738481][T17711]  ksys_mmap_pgoff+0xe4/0x610
[  707.738513][T17711]  ? __x64_sys_futex+0x358/0x4d0
[  707.738540][T17711]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  707.738573][T17711]  ? xfd_validate_state+0x129/0x190
[  707.738604][T17711]  __x64_sys_mmap+0x125/0x190
[  707.738636][T17711]  do_syscall_64+0x115/0x840
[  707.738662][T17711]  ? clear_bhb_loop+0x40/0x90
[  707.738691][T17711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.738718][T17711] RIP: 0033:0x7fcced19ce59
[  707.738738][T17711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.738764][T17711] RSP: 002b:00007fccee049028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  707.738788][T17711] RAX: ffffffffffffffda RBX: 00007fcced415fa0 RCX: 00007fcced19ce59
[  707.738805][T17711] RDX: 000000000000005f RSI: 0000000000400008 RDI: 0000000000000000
[  707.738821][T17711] RBP: 00007fcced232e6f R08: 0000000000000002 R09: 0000000000008000
[  707.738837][T17711] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  707.738853][T17711] R13: 00007fcced416038 R14: 00007fcced415fa0 R15: 00007ffc8ba14578
[  707.738878][T17711]  </TASK>
[  708.604773][T17707] syz.1.2314 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000
[  708.651168][T17707] CPU: 0 UID: 0 PID: 17707 Comm: syz.1.2314 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  708.651210][T17707] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  708.651220][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  708.651235][T17707] Call Trace:
[  708.651243][T17707]  <TASK>
[  708.651252][T17707]  dump_stack_lvl+0x100/0x190
[  708.651287][T17707]  dump_header+0xfb/0x606
[  708.651314][T17707]  oom_kill_process.cold+0xd/0x330
[  708.651340][T17707]  out_of_memory+0x340/0x14f0
[  708.651381][T17707]  ? __pfx_out_of_memory+0x10/0x10
[  708.651418][T17707]  ? rcu_is_watching+0x12/0xc0
[  708.651449][T17707]  mem_cgroup_out_of_memory+0xc6/0x130
[  708.651474][T17707]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  708.651501][T17707]  ? do_raw_spin_unlock+0x145/0x1e0
[  708.651528][T17707]  ? _raw_spin_unlock+0x28/0x50
[  708.651565][T17707]  try_charge_memcg+0x6e5/0xdf0
[  708.651601][T17707]  ? __pfx_try_charge_memcg+0x10/0x10
[  708.651634][T17707]  ? peak_open+0x1/0x50
[  708.651667][T17707]  ? rcu_read_unlock+0x17/0x60
[  708.651700][T17707]  ? lock_release+0x24d/0x310
[  708.651740][T17707]  __memcg_slab_post_alloc_hook+0x469/0x1160
[  708.651780][T17707]  ? kasan_unpoison+0x27/0x60
[  708.651807][T17707]  __kmalloc_cache_noprof+0x592/0x6c0
[  708.651830][T17707]  ? ipv6_add_dev+0x670/0x1520
[  708.651870][T17707]  ipv6_add_dev+0x670/0x1520
[  708.651909][T17707]  addrconf_notify+0x5db/0x1ba0
[  708.651939][T17707]  ? __pfx_tls_dev_event+0x10/0x10
[  708.651972][T17707]  ? __pfx_addrconf_notify+0x10/0x10
[  708.652002][T17707]  ? ip6mr_device_event+0x1c4/0x230
[  708.652032][T17707]  notifier_call_chain+0x99/0x3f0
[  708.652067][T17707]  call_netdevice_notifiers_info+0xbe/0x110
[  708.652107][T17707]  register_netdevice+0x1998/0x25a0
[  708.652151][T17707]  ? __pfx_register_netdevice+0x10/0x10
[  708.652189][T17707]  __ip_tunnel_create+0x52b/0x670
[  708.652213][T17707]  ? __pfx___ip_tunnel_create+0x10/0x10
[  708.652240][T17707]  ip_tunnel_init_net+0x230/0x780
[  708.652267][T17707]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  708.652294][T17707]  ? lockdep_init_map_type+0x5c/0x250
[  708.652317][T17707]  ? ops_init+0x77/0x5f0
[  708.652349][T17707]  ? __pfx_erspan_init_net+0x10/0x10
[  708.652383][T17707]  ops_init+0x1e2/0x5f0
[  708.652416][T17707]  setup_net+0x118/0x3a0
[  708.652448][T17707]  ? __pfx_setup_net+0x10/0x10
[  708.652480][T17707]  ? mutex_init_lockdep+0xf1/0x120
[  708.652504][T17707]  copy_net_ns+0x46f/0x7c0
[  708.652540][T17707]  create_new_namespaces+0x3ea/0xac0
[  708.652568][T17707]  unshare_nsproxy_namespaces+0xf2/0x220
[  708.652595][T17707]  ksys_unshare+0x438/0xab0
[  708.652626][T17707]  ? __pfx_ksys_unshare+0x10/0x10
[  708.652661][T17707]  __x64_sys_unshare+0x31/0x40
[  708.652691][T17707]  do_syscall_64+0x115/0x840
[  708.652713][T17707]  ? clear_bhb_loop+0x40/0x90
[  708.652740][T17707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.652765][T17707] RIP: 0033:0x7f2349b9ce59
[  708.652784][T17707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.652809][T17707] RSP: 002b:00007f234ab42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  708.652831][T17707] RAX: ffffffffffffffda RBX: 00007f2349e15fa0 RCX: 00007f2349b9ce59
[  708.652848][T17707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  708.652862][T17707] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  708.652877][T17707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  708.652891][T17707] R13: 00007f2349e16038 R14: 00007f2349e15fa0 R15: 00007fff584dc338
[  708.652913][T17707]  </TASK>
[  708.654231][T17707] memory: usage 3072kB, limit 3072kB, failcnt 99775
[  709.810289][T17707] memory+swap: usage 6560kB, limit 9007199254740988kB, failcnt 0
[  709.845163][T17707] kmem: usage 2848kB, limit 9007199254740988kB, failcnt 0
[  709.901515][T17707] Memory cgroup stats for /syz1:
[  709.901676][T17707] cache 0
[  709.968605][T17707] rss 4096
[  709.991411][T17707] rss_huge 0
[  710.018064][T17707] shmem 0
[  710.039352][T17707] mapped_file 0
[  710.068790][T17707] dirty 0
[  710.104693][T17707] writeback 0
[  710.131691][T17707] workingset_refault_anon 21387
[  710.171342][T17707] workingset_refault_file 23574
[  710.201606][T17707] swap 3571712
[  710.217022][T17707] swapcached 605179904
[  710.230723][T17707] pgpgin 613444
[  710.244016][T17707] pgpgout 640019
[  710.262311][T17707] pgfault 470472
[  710.278854][T17707] pgmajfault 7739
[  710.297286][T17707] inactive_anon 0
[  710.315031][T17707] active_anon 225280
[  710.327773][T17707] inactive_file 0
[  710.344638][T17707] active_file 0
[  710.357680][T17707] unevictable 4096
[  710.374535][T17707] hierarchical_memory_limit 3145728
[  710.391528][T17707] hierarchical_memsw_limit 9223372036854771712
[  710.419954][T17707] total_cache 0
[  710.434283][T17707] total_rss 4096
[  710.449876][T17707] total_rss_huge 0
[  710.463315][T17707] total_shmem 0
[  710.477819][T17707] total_mapped_file 0
[  710.493992][T17707] total_dirty 0
[  710.519896][T17707] total_writeback 0
[  710.533990][T17707] total_workingset_refault_anon 21387
[  710.554409][T17707] total_workingset_refault_file 23574
[  710.579972][T17707] total_swap 3571712
[  710.597662][T17707] total_swapcached 605179904
[  710.617678][T17707] total_pgpgin 613444
[  710.638287][T17707] total_pgpgout 640019
[  710.653145][T17707] total_pgfault 470472
[  710.667907][T17707] total_pgmajfault 7739
[  710.684577][T17707] total_inactive_anon 0
[  710.700576][T17707] total_active_anon 225280
[  710.719280][T17707] total_inactive_file 0
[  710.728710][T17707] total_active_file 0
[  710.747365][T17707] total_unevictable 4096
[  710.759009][T17707] anon_cost 24
[  710.766930][T17707] file_cost 0
[  710.773617][T17707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2314,pid=17706,uid=0
[  710.805856][T17707] Memory cgroup out of memory: Killed process 17706 (syz.1.2314) total-vm:106732kB, anon-rss:1244kB, file-rss:26632kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000
[  711.383940][T17741] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2322'.
[  711.715023][T17749] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2324: iget: checksum invalid
[  711.797919][T17749] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  711.876714][T17749] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2324: iget: checksum invalid
[  711.932699][T17749] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  711.988104][T17749] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2324: iget: checksum invalid
[  712.050498][T17753] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask'
[  712.062347][T17749] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  712.097764][T17749] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2324: iget: checksum invalid
[  712.141240][T17753] CPU: 0 UID: 0 PID: 17753 Comm: syz.1.2325 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  712.141285][T17753] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  712.141295][T17753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  712.141310][T17753] Call Trace:
[  712.141317][T17753]  <TASK>
[  712.141326][T17753]  dump_stack_lvl+0x100/0x190
[  712.141359][T17753]  sysfs_warn_dup.cold+0x1c/0x28
[  712.141394][T17753]  sysfs_do_create_link_sd+0x113/0x140
[  712.141429][T17753]  sysfs_create_link+0x61/0xc0
[  712.141462][T17753]  device_add+0x675/0x1970
[  712.141487][T17753]  ? __pfx_device_add+0x10/0x10
[  712.141511][T17753]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  712.141547][T17753]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  712.141579][T17753]  wiphy_register+0x2151/0x3110
[  712.141618][T17753]  ? __pfx_wiphy_register+0x10/0x10
[  712.141653][T17753]  ? __asan_memset+0x23/0x50
[  712.141676][T17753]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  712.141711][T17753]  ieee80211_register_hw+0x3053/0x4580
[  712.141745][T17753]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  712.141784][T17753]  ? __pfx___debug_object_init+0x10/0x10
[  712.141811][T17753]  ? net_generic+0xea/0x2a0
[  712.141937][T17753]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  712.141974][T17753]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  712.142002][T17753]  ? __hrtimer_setup+0x208/0x330
[  712.142031][T17753]  mac80211_hwsim_new_radio+0x2acc/0x64c0
[  712.142075][T17753]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  712.142111][T17753]  ? __asan_memcpy+0x3c/0x60
[  712.142154][T17753]  hwsim_new_radio_nl+0xc6b/0x13f0
[  712.142191][T17753]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  712.142228][T17753]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  712.142262][T17753]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  712.142295][T17753]  genl_family_rcv_msg_doit+0x214/0x300
[  712.142326][T17753]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  712.142357][T17753]  ? genl_get_cmd+0x3e7/0x760
[  712.142385][T17753]  ? bpf_lsm_capable+0x9/0x10
[  712.142411][T17753]  ? security_capable+0x80/0x260
[  712.142443][T17753]  ? ns_capable+0xd2/0xf0
[  712.142469][T17753]  genl_rcv_msg+0x560/0x800
[  712.142497][T17753]  ? __pfx_genl_rcv_msg+0x10/0x10
[  712.142525][T17753]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  712.142564][T17753]  netlink_rcv_skb+0x159/0x420
[  712.142587][T17753]  ? __pfx_genl_rcv_msg+0x10/0x10
[  712.142615][T17753]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  712.142644][T17753]  ? netlink_deliver_tap+0x1ae/0xcc0
[  712.142684][T17753]  genl_rcv+0x28/0x40
[  712.142708][T17753]  netlink_unicast+0x585/0x850
[  712.142733][T17753]  ? __pfx_netlink_unicast+0x10/0x10
[  712.142760][T17753]  ? __build_skb_around+0x278/0x390
[  712.142790][T17753]  netlink_sendmsg+0x8b0/0xda0
[  712.142816][T17753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.142839][T17753]  ? __import_iovec+0x1d2/0x640
[  712.142866][T17753]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  712.142899][T17753]  ____sys_sendmsg+0xa4d/0xbe0
[  712.142920][T17753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  712.142947][T17753]  ? __pfx_____sys_sendmsg+0x10/0x10
[  712.142971][T17753]  ? rcu_is_watching+0x12/0xc0
[  712.142999][T17753]  ? ___sys_sendmsg+0x19d/0x1e0
[  712.143022][T17753]  ? kfree+0x1e5/0x6c0
[  712.143044][T17753]  ___sys_sendmsg+0x190/0x1e0
[  712.143068][T17753]  ? __pfx____sys_sendmsg+0x10/0x10
[  712.143098][T17753]  ? rcu_is_watching+0x12/0xc0
[  712.143131][T17753]  ? __pfx___might_resched+0x10/0x10
[  712.143172][T17753]  __sys_sendmmsg+0x20c/0x440
[  712.143205][T17753]  ? __pfx___sys_sendmmsg+0x10/0x10
[  712.143236][T17753]  ? do_vfs_ioctl+0x226/0x13e0
[  712.143280][T17753]  ? trace_irq_enable.constprop.0+0x122/0x160
[  712.143322][T17753]  ? kcov_ioctl+0x17a/0x750
[  712.143358][T17753]  __x64_sys_sendmmsg+0x9c/0x100
[  712.143391][T17753]  do_syscall_64+0x115/0x840
[  712.143415][T17753]  ? clear_bhb_loop+0x40/0x90
[  712.143443][T17753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.143467][T17753] RIP: 0033:0x7f2349b9ce59
[  712.143487][T17753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.143511][T17753] RSP: 002b:00007f234ab21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  712.143536][T17753] RAX: ffffffffffffffda RBX: 00007f2349e16090 RCX: 00007f2349b9ce59
[  712.143553][T17753] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  712.143569][T17753] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  712.143584][T17753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.143600][T17753] R13: 00007f2349e16128 R14: 00007f2349e16090 R15: 00007fff584dc338
[  712.143623][T17753]  </TASK>
[  712.804196][T17749] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  712.813782][T17749] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  712.824436][T17749] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  713.737956][T17785] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[17307] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[17785]
[  713.905089][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'.
[  713.985283][T17785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2332'.
[  714.037094][T17783] HfR: entered promiscuous mode
[  714.060499][T17785] HfR: left promiscuous mode
[  714.618948][T17795] could not allocate digest TFM handle €
[  714.968522][   T30] audit: type=1800 audit(1843104993.080:29): pid=17810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2335" name="file0" dev="tmpfs" ino=118 res=0 errno=0
[  716.322643][T17820] ima: policy update failed
[  716.342340][   T30] audit: type=1802 audit(1843104994.460:30): pid=17820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2341" res=0 errno=0
[  716.834226][T17842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2345: iget: checksum invalid
[  717.037897][T17842] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  717.212895][T17842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2345: iget: checksum invalid
[  717.338963][T17842] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  717.476377][T17842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2345: iget: checksum invalid
[  717.532308][T17825] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  717.587138][T17842] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  717.637988][T17825] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  717.708768][T17842] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2345: iget: checksum invalid
[  717.790801][T17842] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  717.837433][T17842] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  717.907910][T17842] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  719.133448][T17851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  719.225753][ T5768] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  719.535419][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  719.566142][T17862] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2348: iget: checksum invalid
[  719.695531][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  719.769900][T17862] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  719.832338][T17866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2350'.
[  719.963743][T17862] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2348: iget: checksum invalid
[  720.053197][T17862] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  720.108145][T17862] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2348: iget: checksum invalid
[  720.149452][T17862] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  720.194188][T17862] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2348: iget: checksum invalid
[  720.233344][T17862] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  720.259232][T17861] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  720.280421][T17861] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  720.318978][T17862] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  720.399795][T17862] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  721.228935][T17862] Process accounting paused
[  722.095494][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  722.259846][T17915] 
[  722.336251][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  722.369531][T17908] syz.1.2357 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000
[  722.529196][T17908] CPU: 0 UID: 0 PID: 17908 Comm: syz.1.2357 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  722.529239][T17908] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  722.529249][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  722.529265][T17908] Call Trace:
[  722.529273][T17908]  <TASK>
[  722.529282][T17908]  dump_stack_lvl+0x100/0x190
[  722.529314][T17908]  dump_header+0xfb/0x606
[  722.529339][T17908]  oom_kill_process.cold+0xd/0x330
[  722.529365][T17908]  out_of_memory+0x340/0x14f0
[  722.529404][T17908]  ? lock_acquire+0x301/0x370
[  722.529442][T17908]  ? __pfx_out_of_memory+0x10/0x10
[  722.529478][T17908]  ? rcu_is_watching+0x12/0xc0
[  722.529510][T17908]  mem_cgroup_out_of_memory+0xc6/0x130
[  722.529535][T17908]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  722.529562][T17908]  ? do_raw_spin_unlock+0x145/0x1e0
[  722.529588][T17908]  ? _raw_spin_unlock+0x28/0x50
[  722.529632][T17908]  try_charge_memcg+0x6e5/0xdf0
[  722.529669][T17908]  ? __pfx_try_charge_memcg+0x10/0x10
[  722.529705][T17908]  ? peak_open+0x1/0x50
[  722.529739][T17908]  ? rcu_read_unlock+0x17/0x60
[  722.529772][T17908]  ? lock_release+0x24d/0x310
[  722.529812][T17908]  __memcg_slab_post_alloc_hook+0x469/0x1160
[  722.529853][T17908]  ? kasan_unpoison+0x27/0x60
[  722.529880][T17908]  __kmalloc_noprof+0x644/0x820
[  722.529909][T17908]  ? __register_sysctl_table+0xac/0x1650
[  722.529951][T17908]  __register_sysctl_table+0xac/0x1650
[  722.529990][T17908]  ? rcu_is_watching+0x12/0xc0
[  722.530017][T17908]  ? is_module_address+0x5f/0xf0
[  722.530040][T17908]  ? lock_release+0x24d/0x310
[  722.530079][T17908]  ? __pfx___register_sysctl_table+0x10/0x10
[  722.530117][T17908]  ? is_module_address+0x69/0xf0
[  722.530140][T17908]  ? register_net_sysctl_sz+0x222/0x430
[  722.530173][T17908]  __addrconf_sysctl_register+0x1a2/0x360
[  722.530215][T17908]  ? __pfx___addrconf_sysctl_register+0x10/0x10
[  722.530257][T17908]  ? lockdep_init_map_type+0x5c/0x250
[  722.530279][T17908]  ? mld_in_v1_mode+0x2b2/0x3a0
[  722.530307][T17908]  addrconf_sysctl_register+0x163/0x200
[  722.530348][T17908]  ipv6_add_dev+0xaf2/0x1520
[  722.530396][T17908]  addrconf_notify+0x5db/0x1ba0
[  722.530427][T17908]  ? __pfx_tls_dev_event+0x10/0x10
[  722.530461][T17908]  ? __pfx_addrconf_notify+0x10/0x10
[  722.530491][T17908]  ? ip6mr_device_event+0x1c4/0x230
[  722.530522][T17908]  notifier_call_chain+0x99/0x3f0
[  722.530558][T17908]  call_netdevice_notifiers_info+0xbe/0x110
[  722.530598][T17908]  register_netdevice+0x1998/0x25a0
[  722.530643][T17908]  ? __pfx_register_netdevice+0x10/0x10
[  722.530681][T17908]  __ip_tunnel_create+0x52b/0x670
[  722.530706][T17908]  ? __pfx___ip_tunnel_create+0x10/0x10
[  722.530733][T17908]  ip_tunnel_init_net+0x230/0x780
[  722.530759][T17908]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  722.530787][T17908]  ? lockdep_init_map_type+0x5c/0x250
[  722.530810][T17908]  ? ops_init+0x77/0x5f0
[  722.530842][T17908]  ? __pfx_ipgre_tap_init_net+0x10/0x10
[  722.530876][T17908]  ops_init+0x1e2/0x5f0
[  722.530909][T17908]  setup_net+0x118/0x3a0
[  722.530941][T17908]  ? __pfx_setup_net+0x10/0x10
[  722.530973][T17908]  ? mutex_init_lockdep+0xf1/0x120
[  722.530998][T17908]  copy_net_ns+0x46f/0x7c0
[  722.531034][T17908]  create_new_namespaces+0x3ea/0xac0
[  722.531061][T17908]  unshare_nsproxy_namespaces+0xf2/0x220
[  722.531088][T17908]  ksys_unshare+0x438/0xab0
[  722.531118][T17908]  ? kcov_ioctl+0x17a/0x750
[  722.531150][T17908]  ? kfree+0x1e5/0x6c0
[  722.531168][T17908]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  722.531204][T17908]  ? __pfx_ksys_unshare+0x10/0x10
[  722.531235][T17908]  ? kcov_ioctl+0x17a/0x750
[  722.531269][T17908]  __x64_sys_unshare+0x31/0x40
[  722.531299][T17908]  do_syscall_64+0x115/0x840
[  722.531322][T17908]  ? clear_bhb_loop+0x40/0x90
[  722.531349][T17908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.531373][T17908] RIP: 0033:0x7f2349b9ce59
[  722.531391][T17908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.531415][T17908] RSP: 002b:00007f234ab42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  722.531438][T17908] RAX: ffffffffffffffda RBX: 00007f2349e15fa0 RCX: 00007f2349b9ce59
[  722.531454][T17908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  722.531469][T17908] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  722.531483][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  722.531498][T17908] R13: 00007f2349e16038 R14: 00007f2349e15fa0 R15: 00007fff584dc338
[  722.531521][T17908]  </TASK>
[  723.482259][T17908] memory: usage 3072kB, limit 3072kB, failcnt 104100
[  723.522035][T17908] memory+swap: usage 6520kB, limit 9007199254740988kB, failcnt 0
[  723.573508][T17908] kmem: usage 2892kB, limit 9007199254740988kB, failcnt 0
[  723.613917][T17908] Memory cgroup stats for /syz1:
[  723.614068][T17908] cache 0
[  723.662608][T17908] rss 4096
[  723.681913][T17908] rss_huge 0
[  723.699528][T17908] shmem 0
[  723.711128][T17908] mapped_file 0
[  723.727837][T17908] dirty 0
[  723.740817][T17908] writeback 0
[  723.757521][T17908] workingset_refault_anon 22043
[  723.778773][T17908] workingset_refault_file 24413
[  723.796206][T17908] swap 3530752
[  723.809362][T17908] swapcached 616849408
[  723.823621][T17908] pgpgin 617436
[  723.837149][T17908] pgpgout 644025
[  723.848346][T17908] pgfault 474331
[  723.863353][T17908] pgmajfault 8086
[  723.876752][T17908] inactive_anon 61440
[  723.890888][T17908] active_anon 0
[  723.906814][T17908] inactive_file 0
[  723.917455][T17908] active_file 0
[  723.928588][T17908] unevictable 4096
[  723.940613][T17908] hierarchical_memory_limit 3145728
[  723.958246][T17908] hierarchical_memsw_limit 9223372036854771712
[  723.977711][T17908] total_cache 0
[  723.993588][T17908] total_rss 4096
[  724.014204][T17908] total_rss_huge 0
[  724.032951][T17908] total_shmem 0
[  724.048781][T17908] total_mapped_file 0
[  724.063937][T17908] total_dirty 0
[  724.086941][T17908] total_writeback 0
[  724.094883][T17908] total_workingset_refault_anon 22043
[  724.119712][T17908] total_workingset_refault_file 24413
[  724.141160][T17908] total_swap 3530752
[  724.151230][T17908] total_swapcached 616849408
[  724.167127][T17908] total_pgpgin 617436
[  724.180474][T17908] total_pgpgout 644025
[  724.192754][T17908] total_pgfault 474331
[  724.211564][T17908] total_pgmajfault 8086
[  724.233821][T17908] total_inactive_anon 61440
[  724.254045][T17908] total_active_anon 0
[  724.266102][T17908] total_inactive_file 0
[  724.280133][T17908] total_active_file 0
[  724.296186][T17908] total_unevictable 4096
[  724.312223][T17908] anon_cost 17
[  724.325253][T17908] file_cost 0
[  724.344070][T17908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2357,pid=17906,uid=0
[  724.398792][T17908] Memory cgroup out of memory: Killed process 17906 (syz.1.2357) total-vm:104412kB, anon-rss:1244kB, file-rss:21712kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  725.715619][T17940] program syz.3.2363 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  726.175803][T17948] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2364: iget: checksum invalid
[  726.365839][T17948] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  726.555746][T17948] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2364: iget: checksum invalid
[  726.744703][T17948] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  726.849188][T17948] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2364: iget: checksum invalid
[  726.958801][T17948] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  727.078947][T17948] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.6.2364: iget: checksum invalid
[  727.191327][T17948] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  727.297216][T17948] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  727.388516][T17948] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  728.536524][T17953] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  728.654001][T17953] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  730.043003][T17986] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  730.270103][   T50] block nbd1: Receive control failed (result -32)
[  730.555047][T17998] futex_wake_op: syz.6.2374 tries to shift op by -2048; fix this program
[  730.576706][   T50] Bluetooth: hci5: command 0x0419 tx timeout
[  730.655504][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  731.029945][  T187] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  733.947745][T18065] FAULT_INJECTION: forcing a failure.
[  733.947745][T18065] name failslab, interval 1, probability 0, space 0, times 0
[  734.031558][T18065] CPU: 0 UID: 0 PID: 18065 Comm: syz.6.2390 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  734.031600][T18065] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  734.031609][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  734.031625][T18065] Call Trace:
[  734.031633][T18065]  <TASK>
[  734.031642][T18065]  dump_stack_lvl+0x100/0x190
[  734.031674][T18065]  should_fail_ex.cold+0x5/0xa
[  734.031701][T18065]  ? kmem_cache_alloc_noprof+0x6b/0x6a0
[  734.031732][T18065]  should_failslab+0xc2/0x120
[  734.031764][T18065]  kmem_cache_alloc_noprof+0x91/0x6a0
[  734.031794][T18065]  ? vm_area_alloc+0x1f/0x160
[  734.031817][T18065]  vm_area_alloc+0x1f/0x160
[  734.031838][T18065]  __mmap_region+0x1033/0x2db0
[  734.031871][T18065]  ? rcu_is_watching+0x12/0xc0
[  734.031902][T18065]  ? __pfx___mmap_region+0x10/0x10
[  734.031924][T18065]  ? __pfx___might_resched+0x10/0x10
[  734.031966][T18065]  ? do_raw_spin_lock+0x128/0x260
[  734.031999][T18065]  ? debug_object_assert_init+0x1c4/0x300
[  734.032025][T18065]  ? debug_object_assert_init+0x1c4/0x300
[  734.032048][T18065]  ? lock_release+0x24d/0x310
[  734.032091][T18065]  ? hrtimer_start_range_ns_common+0x78e/0x18b0
[  734.032128][T18065]  ? rcu_is_watching+0x12/0xc0
[  734.032156][T18065]  ? trace_irq_enable.constprop.0+0x122/0x160
[  734.032219][T18065]  mmap_region+0x35d/0x620
[  734.032245][T18065]  ? rcu_is_watching+0x12/0xc0
[  734.032273][T18065]  ? __pfx_mmap_region+0x10/0x10
[  734.032298][T18065]  ? apparmor_capable+0x1d7/0x4d0
[  734.032332][T18065]  ? bpf_lsm_capable+0x9/0x10
[  734.032357][T18065]  ? security_capable+0x80/0x260
[  734.032388][T18065]  do_mmap+0xc63/0x12f0
[  734.032423][T18065]  ? __pfx_do_mmap+0x10/0x10
[  734.032454][T18065]  ? __pfx_down_write_killable+0x10/0x10
[  734.032482][T18065]  ? __pfx_futex_wait+0x10/0x10
[  734.032515][T18065]  vm_mmap_pgoff+0x29e/0x470
[  734.032550][T18065]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  734.032584][T18065]  ? __pfx_do_futex+0x10/0x10
[  734.032612][T18065]  ksys_mmap_pgoff+0xe4/0x610
[  734.032645][T18065]  ? __x64_sys_futex+0x358/0x4d0
[  734.032671][T18065]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  734.032703][T18065]  ? xfd_validate_state+0x129/0x190
[  734.032737][T18065]  __x64_sys_mmap+0x125/0x190
[  734.032768][T18065]  do_syscall_64+0x115/0x840
[  734.032791][T18065]  ? clear_bhb_loop+0x40/0x90
[  734.032819][T18065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.032844][T18065] RIP: 0033:0x7fcced19ce59
[  734.032868][T18065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.032894][T18065] RSP: 002b:00007fccee049028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  734.032918][T18065] RAX: ffffffffffffffda RBX: 00007fcced415fa0 RCX: 00007fcced19ce59
[  734.032940][T18065] RDX: 0000000001000003 RSI: 0000000000000002 RDI: 0000000000000000
[  734.032956][T18065] RBP: 00007fcced232e6f R08: fffffffffffffffa R09: 0000000000008000
[  734.032973][T18065] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  734.032988][T18065] R13: 00007fcced416038 R14: 00007fcced415fa0 R15: 00007ffc8ba14578
[  734.033012][T18065]  </TASK>
[  736.095542][   T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  737.355499][T18082] syz.1.2393 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[  737.449861][T18082] CPU: 0 UID: 0 PID: 18082 Comm: syz.1.2393 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  737.449903][T18082] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  737.449913][T18082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  737.449929][T18082] Call Trace:
[  737.449936][T18082]  <TASK>
[  737.449946][T18082]  dump_stack_lvl+0x100/0x190
[  737.449978][T18082]  dump_header+0xfb/0x606
[  737.450003][T18082]  oom_kill_process.cold+0xd/0x330
[  737.450029][T18082]  out_of_memory+0x340/0x14f0
[  737.450067][T18082]  ? preempt_schedule_irq+0x7b/0x90
[  737.450107][T18082]  ? __pfx_out_of_memory+0x10/0x10
[  737.450144][T18082]  ? rcu_is_watching+0x12/0xc0
[  737.450175][T18082]  mem_cgroup_out_of_memory+0xc6/0x130
[  737.450200][T18082]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  737.450227][T18082]  ? do_raw_spin_unlock+0x145/0x1e0
[  737.450255][T18082]  ? _raw_spin_unlock+0x28/0x50
[  737.450290][T18082]  try_charge_memcg+0x6e5/0xdf0
[  737.450326][T18082]  ? __pfx_try_charge_memcg+0x10/0x10
[  737.450359][T18082]  ? peak_open+0x1/0x50
[  737.450393][T18082]  ? rcu_read_unlock+0x17/0x60
[  737.450425][T18082]  ? lock_release+0x24d/0x310
[  737.450466][T18082]  __memcg_slab_post_alloc_hook+0x469/0x1160
[  737.450513][T18082]  ? kasan_unpoison+0x27/0x60
[  737.450540][T18082]  __kmalloc_node_track_caller_noprof+0x64f/0x830
[  737.450572][T18082]  ? rcu_is_watching+0x12/0xc0
[  737.450600][T18082]  ? neigh_sysctl_register+0xb4/0x660
[  737.450635][T18082]  kmemdup_noprof+0x29/0x60
[  737.450662][T18082]  neigh_sysctl_register+0xb4/0x660
[  737.450694][T18082]  ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10
[  737.450741][T18082]  ? __pfx_neigh_sysctl_register+0x10/0x10
[  737.450777][T18082]  ? lockdep_init_map_type+0x5c/0x250
[  737.450799][T18082]  ? mld_in_v1_mode+0x2b2/0x3a0
[  737.450828][T18082]  addrconf_sysctl_register+0xb9/0x200
[  737.450869][T18082]  ipv6_add_dev+0xaf2/0x1520
[  737.450908][T18082]  addrconf_notify+0x5db/0x1ba0
[  737.450939][T18082]  ? __pfx_tls_dev_event+0x10/0x10
[  737.450972][T18082]  ? __pfx_addrconf_notify+0x10/0x10
[  737.451002][T18082]  ? ip6mr_device_event+0x1c4/0x230
[  737.451033][T18082]  notifier_call_chain+0x99/0x3f0
[  737.451068][T18082]  call_netdevice_notifiers_info+0xbe/0x110
[  737.451109][T18082]  register_netdevice+0x1998/0x25a0
[  737.451146][T18082]  ? __pfx_register_netdevice+0x10/0x10
[  737.451183][T18082]  __ip_tunnel_create+0x52b/0x670
[  737.451207][T18082]  ? __pfx___ip_tunnel_create+0x10/0x10
[  737.451234][T18082]  ip_tunnel_init_net+0x230/0x780
[  737.451261][T18082]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  737.451289][T18082]  ? lockdep_init_map_type+0x5c/0x250
[  737.451311][T18082]  ? ops_init+0x77/0x5f0
[  737.451343][T18082]  ? __pfx_ipgre_tap_init_net+0x10/0x10
[  737.451378][T18082]  ops_init+0x1e2/0x5f0
[  737.451411][T18082]  setup_net+0x118/0x3a0
[  737.451444][T18082]  ? __pfx_setup_net+0x10/0x10
[  737.451475][T18082]  ? mutex_init_lockdep+0xf1/0x120
[  737.451505][T18082]  copy_net_ns+0x46f/0x7c0
[  737.451542][T18082]  create_new_namespaces+0x3ea/0xac0
[  737.451570][T18082]  unshare_nsproxy_namespaces+0xf2/0x220
[  737.451598][T18082]  ksys_unshare+0x438/0xab0
[  737.451628][T18082]  ? kcov_ioctl+0x17a/0x750
[  737.451660][T18082]  ? kfree+0x1e5/0x6c0
[  737.451680][T18082]  ? __pfx_ksys_unshare+0x10/0x10
[  737.451711][T18082]  ? kcov_ioctl+0x17a/0x750
[  737.451746][T18082]  __x64_sys_unshare+0x31/0x40
[  737.451776][T18082]  do_syscall_64+0x115/0x840
[  737.451798][T18082]  ? clear_bhb_loop+0x40/0x90
[  737.451826][T18082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.451850][T18082] RIP: 0033:0x7f2349b9ce59
[  737.451869][T18082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.451894][T18082] RSP: 002b:00007f234ab42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  737.451917][T18082] RAX: ffffffffffffffda RBX: 00007f2349e15fa0 RCX: 00007f2349b9ce59
[  737.451934][T18082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  737.451949][T18082] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  737.451964][T18082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  737.451979][T18082] R13: 00007f2349e16038 R14: 00007f2349e15fa0 R15: 00007fff584dc338
[  737.452002][T18082]  </TASK>
[  738.311611][T18082] memory: usage 3072kB, limit 3072kB, failcnt 107946
[  738.334396][T18082] memory+swap: usage 6568kB, limit 9007199254740988kB, failcnt 0
[  738.370909][T18082] kmem: usage 2888kB, limit 9007199254740988kB, failcnt 0
[  738.396669][T18082] Memory cgroup stats for /syz1:
[  738.396822][T18082] cache 0
[  738.436883][T18082] rss 4096
[  738.447430][T18082] rss_huge 0
[  738.459943][T18082] shmem 0
[  738.471280][T18082] mapped_file 0
[  738.484773][T18082] dirty 0
[  738.496674][T18082] writeback 0
[  738.512512][T18082] workingset_refault_anon 23635
[  738.532003][T18082] workingset_refault_file 24413
[  738.555230][T18082] swap 3579904
[  738.565870][T18102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2399'.
[  738.574907][T18082] swapcached 631783424
[  738.588455][T18082] pgpgin 621371
[  738.603872][T18082] pgpgout 647960
[  738.649170][T18082] pgfault 479167
[  738.672841][T18082] pgmajfault 8496
[  738.690667][T18082] inactive_anon 36864
[  738.715005][T18082] active_anon 16384
[  738.726837][T18082] inactive_file 0
[  738.739489][T18082] active_file 0
[  738.755466][T18082] unevictable 4096
[  738.774464][T18082] hierarchical_memory_limit 3145728
[  738.794645][T18082] hierarchical_memsw_limit 9223372036854771712
[  738.832886][T18082] total_cache 0
[  738.858096][T18082] total_rss 4096
[  738.878740][T18082] total_rss_huge 0
[  738.901607][T18082] total_shmem 0
[  738.912975][T18082] total_mapped_file 0
[  738.928897][T18082] total_dirty 0
[  738.942571][T18082] total_writeback 0
[  738.955410][T18082] total_workingset_refault_anon 23635
[  738.975138][T18082] total_workingset_refault_file 24413
[  738.997127][T18082] total_swap 3579904
[  739.023620][T18082] total_swapcached 631783424
[  739.048099][T18082] total_pgpgin 621371
[  739.067150][T18082] total_pgpgout 647960
[  739.080800][T18082] total_pgfault 479167
[  739.100181][T18082] total_pgmajfault 8496
[  739.108556][T18082] total_inactive_anon 36864
[  739.121044][T18082] total_active_anon 16384
[  739.134314][T18082] total_inactive_file 0
[  739.147388][T18082] total_active_file 0
[  739.165369][T18082] total_unevictable 4096
[  739.174207][T18082] anon_cost 19
[  739.185380][T18082] file_cost 0
[  739.193924][T18082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2393,pid=18080,uid=0
[  739.242349][T18082] Memory cgroup out of memory: Killed process 18080 (syz.1.2393) total-vm:102364kB, anon-rss:1244kB, file-rss:21904kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  739.873670][T18106] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2400: iget: checksum invalid
[  740.101095][T18106] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  740.259682][T18106] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2400: iget: checksum invalid
[  740.286246][T18102] macsec0: entered promiscuous mode
[  740.293379][T18102] macsec0: entered allmulticast mode
[  740.312258][T18102] veth1_macvtap: entered allmulticast mode
[  740.417095][T18106] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  740.535920][T18106] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2400: iget: checksum invalid
[  740.688693][T18106] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  740.835490][T18106] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2400: iget: checksum invalid
[  740.946509][T18106] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  741.108229][T18106] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  741.261280][T18106] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  742.306122][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  742.317417][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  743.093772][   T50] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5
[  743.116639][T18141] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2407: iget: checksum invalid
[  743.181303][T18141] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  743.264588][T18141] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2407: iget: checksum invalid
[  743.334066][T18141] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  743.398054][T18141] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2407: iget: checksum invalid
[  743.454079][T18141] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  743.517536][T18141] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2407: iget: checksum invalid
[  743.590019][T18141] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  743.663754][T18141] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  743.728095][T18141] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  744.638323][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'.
[  745.432456][T18194] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2414: iget: checksum invalid
[  745.731652][T18194] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  746.052572][T18194] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2414: iget: checksum invalid
[  746.266003][T18194] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  746.443474][T18194] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2414: iget: checksum invalid
[  746.654966][T18194] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  746.668800][T18195] syz.1.2415 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000
[  746.845612][T18195] CPU: 0 UID: 0 PID: 18195 Comm: syz.1.2415 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  746.845653][T18195] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  746.845663][T18195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  746.845678][T18195] Call Trace:
[  746.845685][T18195]  <TASK>
[  746.845694][T18195]  dump_stack_lvl+0x100/0x190
[  746.845726][T18195]  dump_header+0xfb/0x606
[  746.845751][T18195]  oom_kill_process.cold+0xd/0x330
[  746.845777][T18195]  out_of_memory+0x340/0x14f0
[  746.845817][T18195]  ? __pfx_out_of_memory+0x10/0x10
[  746.845853][T18195]  ? rcu_is_watching+0x12/0xc0
[  746.845884][T18195]  mem_cgroup_out_of_memory+0xc6/0x130
[  746.845908][T18195]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  746.845934][T18195]  ? do_raw_spin_unlock+0x145/0x1e0
[  746.845961][T18195]  ? _raw_spin_unlock+0x28/0x50
[  746.845996][T18195]  try_charge_memcg+0x6e5/0xdf0
[  746.846031][T18195]  ? __pfx_try_charge_memcg+0x10/0x10
[  746.846063][T18195]  ? peak_open+0x1/0x50
[  746.846102][T18195]  ? rcu_read_unlock+0x17/0x60
[  746.846135][T18195]  ? lock_release+0x24d/0x310
[  746.846174][T18195]  __memcg_slab_post_alloc_hook+0x469/0x1160
[  746.846214][T18195]  ? kasan_unpoison+0x27/0x60
[  746.846240][T18195]  __kmalloc_noprof+0x644/0x820
[  746.846268][T18195]  ? __register_sysctl_table+0xac/0x1650
[  746.846309][T18195]  __register_sysctl_table+0xac/0x1650
[  746.846346][T18195]  ? rcu_is_watching+0x12/0xc0
[  746.846372][T18195]  ? is_module_address+0x5f/0xf0
[  746.846393][T18195]  ? lock_release+0x24d/0x310
[  746.846429][T18195]  ? __pfx___register_sysctl_table+0x10/0x10
[  746.846467][T18195]  ? is_module_address+0x69/0xf0
[  746.846488][T18195]  ? register_net_sysctl_sz+0x222/0x430
[  746.846517][T18195]  ? nr_free_zone_pages+0xcd/0x210
[  746.846547][T18195]  ip_vs_control_net_init+0x1cbd/0x2740
[  746.846583][T18195]  __ip_vs_init+0x217/0x520
[  746.846615][T18195]  ? __pfx___ip_vs_init+0x10/0x10
[  746.846645][T18195]  ops_init+0x1e2/0x5f0
[  746.846678][T18195]  setup_net+0x118/0x3a0
[  746.846709][T18195]  ? __pfx_setup_net+0x10/0x10
[  746.846741][T18195]  ? mutex_init_lockdep+0xf1/0x120
[  746.846764][T18195]  copy_net_ns+0x46f/0x7c0
[  746.846800][T18195]  create_new_namespaces+0x3ea/0xac0
[  746.846828][T18195]  unshare_nsproxy_namespaces+0xf2/0x220
[  746.846854][T18195]  ksys_unshare+0x438/0xab0
[  746.846885][T18195]  ? __pfx_ksys_unshare+0x10/0x10
[  746.846921][T18195]  __x64_sys_unshare+0x31/0x40
[  746.846951][T18195]  do_syscall_64+0x115/0x840
[  746.846973][T18195]  ? clear_bhb_loop+0x40/0x90
[  746.847000][T18195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.847024][T18195] RIP: 0033:0x7f2349b9ce59
[  746.847042][T18195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  746.847067][T18195] RSP: 002b:00007f234aabe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  746.847096][T18195] RAX: ffffffffffffffda RBX: 00007f2349e16360 RCX: 00007f2349b9ce59
[  746.847112][T18195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  746.847127][T18195] RBP: 00007f2349c32e6f R08: 0000000000000000 R09: 0000000000000000
[  746.847142][T18195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  746.847157][T18195] R13: 00007f2349e163f8 R14: 00007f2349e16360 R15: 00007fff584dc338
[  746.847179][T18195]  </TASK>
[  747.184583][T18194] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2414: iget: checksum invalid
[  747.195752][T18194] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  747.205182][T18194] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  747.214928][T18194] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  747.515373][T18195] memory: usage 3072kB, limit 3072kB, failcnt 108722
[  747.539081][T18195] memory+swap: usage 6660kB, limit 9007199254740988kB, failcnt 0
[  747.559077][T18195] kmem: usage 2840kB, limit 9007199254740988kB, failcnt 0
[  747.582817][T18195] Memory cgroup stats for /syz1:
[  747.582974][T18195] cache 0
[  747.607048][T18195] rss 4096
[  747.615364][T18195] rss_huge 0
[  747.626956][T18195] shmem 0
[  747.635512][T18195] mapped_file 0
[  747.645102][T18195] dirty 0
[  747.655358][T18195] writeback 0
[  747.666073][T18195] workingset_refault_anon 23969
[  747.683229][T18195] workingset_refault_file 24413
[  747.703169][T18195] swap 3674112
[  747.722107][T18195] swapcached 633475072
[  747.742347][T18195] pgpgin 621805
[  747.758372][T18195] pgpgout 648396
[  747.772915][T18195] pgfault 479722
[  747.797847][T18195] pgmajfault 8755
[  747.819682][T18195] inactive_anon 0
[  747.842273][T18195] active_anon 0
[  747.877504][T18195] inactive_file 0
[  747.896698][T18195] active_file 0
[  747.921760][T18195] unevictable 4096
[  747.941550][T18195] hierarchical_memory_limit 3145728
[  747.962285][T18195] hierarchical_memsw_limit 9223372036854771712
[  747.987626][T18195] total_cache 0
[  748.000420][T18195] total_rss 4096
[  748.019685][T18195] total_rss_huge 0
[  748.027397][T18195] total_shmem 0
[  748.044550][T18195] total_mapped_file 0
[  748.071755][T18195] total_dirty 0
[  748.084291][T18195] total_writeback 0
[  748.091043][   T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  748.108052][T18195] total_workingset_refault_anon 23969
[  748.142976][T18195] total_workingset_refault_file 24413
[  748.164699][T18195] total_swap 3674112
[  748.192057][T18195] total_swapcached 633475072
[  748.221309][T18195] total_pgpgin 621805
[  748.234868][T18195] total_pgpgout 648396
[  748.251723][T18195] total_pgfault 479722
[  748.266858][T18195] total_pgmajfault 8755
[  748.280317][T18195] total_inactive_anon 0
[  748.296979][T18195] total_active_anon 0
[  748.308939][T18195] total_inactive_file 0
[  748.326560][T18195] total_active_file 0
[  748.345024][T18195] total_unevictable 4096
[  748.365604][T18195] anon_cost 22
[  748.372095][T18195] file_cost 0
[  748.381141][T18195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2415,pid=18177,uid=0
[  748.431047][T18195] Memory cgroup out of memory: Killed process 18177 (syz.1.2415) total-vm:131820kB, anon-rss:1244kB, file-rss:21520kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  750.049495][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2429'.
[  750.293071][T18258] FAULT_INJECTION: forcing a failure.
[  750.293071][T18258] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  750.368185][T18258] CPU: 0 UID: 0 PID: 18258 Comm: syz.2.2430 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  750.368229][T18258] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  750.368239][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  750.368254][T18258] Call Trace:
[  750.368262][T18258]  <TASK>
[  750.368272][T18258]  dump_stack_lvl+0x100/0x190
[  750.368305][T18258]  should_fail_ex.cold+0x5/0xa
[  750.368334][T18258]  strncpy_from_user+0x3b/0x2d0
[  750.368376][T18258]  do_getname+0x78/0x390
[  750.368425][T18258]  do_sys_openat2+0xc7/0x1e0
[  750.368455][T18258]  ? __pfx_do_sys_openat2+0x10/0x10
[  750.368486][T18258]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  750.368518][T18258]  ? lock_release+0x24d/0x310
[  750.368560][T18258]  __x64_sys_openat+0x12d/0x210
[  750.368598][T18258]  ? __pfx___x64_sys_openat+0x10/0x10
[  750.368632][T18258]  ? rcu_is_watching+0x12/0xc0
[  750.368663][T18258]  do_syscall_64+0x115/0x840
[  750.368687][T18258]  ? clear_bhb_loop+0x40/0x90
[  750.368715][T18258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.368740][T18258] RIP: 0033:0x7f22c779ce59
[  750.368759][T18258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.368784][T18258] RSP: 002b:00007f22c86e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  750.368808][T18258] RAX: ffffffffffffffda RBX: 00007f22c7a15fa0 RCX: 00007f22c779ce59
[  750.368825][T18258] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  750.368842][T18258] RBP: 00007f22c7832e6f R08: 0000000000000000 R09: 0000000000000000
[  750.368858][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  750.368872][T18258] R13: 00007f22c7a16038 R14: 00007f22c7a15fa0 R15: 00007ffcf6df3388
[  750.368895][T18258]  </TASK>
[  750.584961][ T8039] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  750.595976][ T8039] CPU: 0 UID: 0 PID: 8039 Comm: syz-executor Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  750.596018][ T8039] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  750.596029][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  750.596045][ T8039] Call Trace:
[  750.596055][ T8039]  <TASK>
[  750.596065][ T8039]  dump_stack_lvl+0x100/0x190
[  750.596098][ T8039]  dump_header+0xfb/0x606
[  750.596125][ T8039]  oom_kill_process.cold+0xd/0x330
[  750.596154][ T8039]  out_of_memory+0x340/0x14f0
[  750.596195][ T8039]  ? swap_read_folio+0xab7/0x3150
[  750.596224][ T8039]  ? swap_cache_read_folio+0xae/0x140
[  750.596253][ T8039]  ? __pfx_out_of_memory+0x10/0x10
[  750.596293][ T8039]  ? rcu_is_watching+0x12/0xc0
[  750.596326][ T8039]  mem_cgroup_out_of_memory+0xc6/0x130
[  750.596358][ T8039]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  750.596387][ T8039]  ? do_raw_spin_unlock+0x145/0x1e0
[  750.596416][ T8039]  ? _raw_spin_unlock+0x28/0x50
[  750.596453][ T8039]  try_charge_memcg+0x6e5/0xdf0
[  750.596491][ T8039]  ? __pfx_try_charge_memcg+0x10/0x10
[  750.596525][ T8039]  ? rcu_read_unlock+0x17/0x60
[  750.596560][ T8039]  ? rcu_is_cpu_rrupt_from_idle+0x1c1/0x270
[  750.596592][ T8039]  ? lock_release+0x24d/0x310
[  750.596629][ T8039]  ? rcu_read_unlock+0x17/0x60
[  750.596664][ T8039]  ? rcu_is_watching+0x12/0xc0
[  750.596692][ T8039]  ? rcu_read_unlock+0x17/0x60
[  750.596726][ T8039]  ? lock_release+0x24d/0x310
[  750.596766][ T8039]  charge_memcg+0x187/0x1e0
[  750.596801][ T8039]  mem_cgroup_swapin_charge_folio+0xc1/0x450
[  750.596843][ T8039]  swap_cache_alloc_folio+0x548/0xc50
[  750.596873][ T8039]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  750.596901][ T8039]  ? swap_cache_get_folio+0x28d/0x360
[  750.596927][ T8039]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  750.596973][ T8039]  ? finish_task_switch.isra.0+0x2c5/0x1010
[  750.597004][ T8039]  swap_cache_read_folio+0x47/0x140
[  750.597032][ T8039]  swap_cluster_readahead+0x387/0x5f0
[  750.597061][ T8039]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  750.597090][ T8039]  ? debug_object_activate+0x331/0x490
[  750.597114][ T8039]  ? lock_release+0x24d/0x310
[  750.597154][ T8039]  ? debug_object_assert_init+0x1c4/0x300
[  750.597179][ T8039]  ? __pfx_debug_object_activate+0x10/0x10
[  750.597202][ T8039]  ? get_vma_policy+0x23d/0x3b0
[  750.597247][ T8039]  swapin_readahead+0x159/0x1200
[  750.597277][ T8039]  ? rcu_is_watching+0x12/0xc0
[  750.597305][ T8039]  ? __pfx_swapin_readahead+0x10/0x10
[  750.597331][ T8039]  ? rcu_is_watching+0x12/0xc0
[  750.597358][ T8039]  ? swap_table_get+0x103/0x2c0
[  750.597380][ T8039]  ? lock_release+0x24d/0x310
[  750.597418][ T8039]  ? swap_table_get+0x10d/0x2c0
[  750.597441][ T8039]  ? swap_cache_get_folio+0x28d/0x360
[  750.597466][ T8039]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  750.597491][ T8039]  ? __pfx_softleaf_type+0x10/0x10
[  750.597515][ T8039]  ? rcu_read_unlock+0x2d/0xb0
[  750.597541][ T8039]  ? do_swap_page+0xf98/0x5780
[  750.597577][ T8039]  do_swap_page+0xf98/0x5780
[  750.597620][ T8039]  ? do_raw_spin_lock+0x128/0x260
[  750.597646][ T8039]  ? __pfx_do_swap_page+0x10/0x10
[  750.597684][ T8039]  ? lock_acquire+0x301/0x370
[  750.597719][ T8039]  ? rcu_is_watching+0x12/0xc0
[  750.597747][ T8039]  ? trace_irq_enable.constprop.0+0x122/0x160
[  750.597789][ T8039]  ? __pte_offset_map+0x50/0x310
[  750.597818][ T8039]  ? __pte_offset_map+0x179/0x310
[  750.597848][ T8039]  __handle_mm_fault+0x192f/0x2a00
[  750.597875][ T8039]  ? __pfx___handle_mm_fault+0x10/0x10
[  750.597937][ T8039]  ? __pfx_vma_start_read+0x10/0x10
[  750.597976][ T8039]  ? rcu_is_watching+0x12/0xc0
[  750.598013][ T8039]  handle_mm_fault+0x37b/0xa30
[  750.598038][ T8039]  do_user_addr_fault+0x5a3/0x12f0
[  750.598076][ T8039]  exc_page_fault+0x6f/0xd0
[  750.598115][ T8039]  asm_exc_page_fault+0x26/0x30
[  750.598139][ T8039] RIP: 0033:0x7f2349b5d68e
[  750.598158][ T8039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  750.598182][ T8039] RSP: 002b:00007fff584dc618 EFLAGS: 00010246
[  750.598201][ T8039] RAX: 0000000000000000 RBX: 0000555562e94500 RCX: 00007f2349b5d68e
[  750.598222][ T8039] RDX: 00007fff584dc670 RSI: 0000000000000000 RDI: 0000000000000000
[  750.598238][ T8039] RBP: 00007fff584dc6dc R08: 0000000000000000 R09: 0000000000000000
[  750.598253][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  750.598268][ T8039] R13: 00000000000927c0 R14: 00000000000b6f9c R15: 00007fff584dc730
[  750.598292][ T8039]  </TASK>
[  750.598301][ T8039] memory: usage 3072kB, limit 3072kB, failcnt 108914
[  752.430599][ T8039] memory+swap: usage 6572kB, limit 9007199254740988kB, failcnt 0
[  752.472204][ T8039] kmem: usage 2880kB, limit 9007199254740988kB, failcnt 0
[  752.519712][ T8039] Memory cgroup stats for /syz1:
[  752.519869][ T8039] cache 0
[  752.565615][ T8039] rss 4096
[  752.599835][ T8039] rss_huge 0
[  752.619048][ T8039] shmem 0
[  752.640277][ T8039] mapped_file 0
[  752.658364][ T8039] dirty 0
[  752.678412][ T8039] writeback 0
[  752.699427][ T8039] workingset_refault_anon 24026
[  752.752759][ T8039] workingset_refault_file 24413
[  752.784000][ T8039] swap 3584000
[  752.803293][ T8039] swapcached 633761792
[  752.840793][ T8039] pgpgin 621901
[  752.863675][ T8039] pgpgout 648502
[  752.887532][ T8039] pgfault 479949
[  752.905196][ T8039] pgmajfault 8792
[  752.924925][ T8039] inactive_anon 73728
[  752.937708][T18252] Process accounting resumed
[  752.955141][ T8039] active_anon 0
[  752.981928][ T8039] inactive_file 0
[  753.005179][ T8039] active_file 0
[  753.026856][ T8039] unevictable 4096
[  753.048855][ T8039] hierarchical_memory_limit 3145728
[  753.087392][ T8039] hierarchical_memsw_limit 9223372036854771712
[  753.113569][ T8039] total_cache 0
[  753.134977][ T8039] total_rss 4096
[  753.157688][ T8039] total_rss_huge 0
[  753.176763][ T8039] total_shmem 0
[  753.203471][ T8039] total_mapped_file 0
[  753.225473][ T8039] total_dirty 0
[  753.247342][ T8039] total_writeback 0
[  753.265605][ T8039] total_workingset_refault_anon 24026
[  753.299678][ T8039] total_workingset_refault_file 24413
[  753.331330][ T8039] total_swap 3584000
[  753.354101][ T8039] total_swapcached 633761792
[  753.380315][ T8039] total_pgpgin 621901
[  753.405167][ T8039] total_pgpgout 648502
[  753.438467][ T8039] total_pgfault 479949
[  753.470159][ T8039] total_pgmajfault 8792
[  753.492574][ T8039] total_inactive_anon 73728
[  753.521580][ T8039] total_active_anon 0
[  753.544282][ T5768] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  753.554371][ T8039] total_inactive_file 0
[  753.575072][ T8039] total_active_file 0
[  753.600396][ T8039] total_unevictable 4096
[  753.625430][ T8039] anon_cost 19
[  753.645430][ T8039] file_cost 0
[  753.667557][ T8039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2426,pid=18240,uid=0
[  753.761149][ T8039] Memory cgroup out of memory: Killed process 18240 (syz.1.2426) total-vm:104544kB, anon-rss:1268kB, file-rss:22776kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  754.088874][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2437'.
[  754.206142][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2437'.
[  754.325850][T18294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2438'.
[  754.604382][T18309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2441'.
[  754.653555][T18310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2440: iget: checksum invalid
[  754.691665][T18309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  754.772040][T18309] batman_adv: batadv0: Removing interface: batadv_slave_1
[  754.813760][T18310] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  755.017906][T18310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2440: iget: checksum invalid
[  755.217848][T18310] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  755.293862][T18310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2440: iget: checksum invalid
[  755.442398][T18310] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  755.598563][T18310] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2440: iget: checksum invalid
[  755.724062][T18310] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  755.785825][T18310] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  755.847342][T18310] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  756.248625][T18327] futex_wake_op: syz.6.2446 tries to shift op by -2048; fix this program
[  756.298192][T18327] 0x000000000001-0x000000020000 : ""
[  756.343602][T18327] ftl_cs: FTL header corrupt!
[  757.421461][T18355] futex_wake_op: syz.6.2450 tries to shift op by -2048; fix this program
[  759.511446][T18398] ubi0: attaching mtd0
[  759.521177][T18379] syz.1.2454 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  759.613211][T18379] CPU: 0 UID: 0 PID: 18379 Comm: syz.1.2454 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  759.613252][T18379] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  759.613262][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  759.613278][T18379] Call Trace:
[  759.613285][T18379]  <TASK>
[  759.613294][T18379]  dump_stack_lvl+0x100/0x190
[  759.613325][T18379]  dump_header+0xfb/0x606
[  759.613350][T18379]  oom_kill_process.cold+0xd/0x330
[  759.613377][T18379]  out_of_memory+0x340/0x14f0
[  759.613428][T18379]  ? swap_read_folio+0xab7/0x3150
[  759.613451][T18379]  ? swap_cache_read_folio+0xae/0x140
[  759.613476][T18379]  ? __pfx_out_of_memory+0x10/0x10
[  759.613515][T18379]  ? rcu_is_watching+0x12/0xc0
[  759.613546][T18379]  mem_cgroup_out_of_memory+0xc6/0x130
[  759.613570][T18379]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  759.613597][T18379]  ? do_raw_spin_unlock+0x145/0x1e0
[  759.613624][T18379]  ? _raw_spin_unlock+0x28/0x50
[  759.613678][T18379]  try_charge_memcg+0x6e5/0xdf0
[  759.613713][T18379]  ? __pfx_try_charge_memcg+0x10/0x10
[  759.613745][T18379]  ? rcu_read_unlock+0x17/0x60
[  759.613778][T18379]  ? rcu_is_cpu_rrupt_from_idle+0x1c1/0x270
[  759.613808][T18379]  ? lock_release+0x24d/0x310
[  759.613844][T18379]  ? rcu_read_unlock+0x17/0x60
[  759.613877][T18379]  ? rcu_is_watching+0x12/0xc0
[  759.613913][T18379]  ? rcu_read_unlock+0x17/0x60
[  759.613945][T18379]  ? lock_release+0x24d/0x310
[  759.613983][T18379]  charge_memcg+0x187/0x1e0
[  759.614016][T18379]  mem_cgroup_swapin_charge_folio+0xc1/0x450
[  759.614056][T18379]  swap_cache_alloc_folio+0x548/0xc50
[  759.614085][T18379]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  759.614111][T18379]  ? swap_cache_get_folio+0x28d/0x360
[  759.614135][T18379]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  759.614168][T18379]  swap_cache_read_folio+0x47/0x140
[  759.614196][T18379]  swap_cluster_readahead+0x387/0x5f0
[  759.614225][T18379]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  759.614253][T18379]  ? __pfx_lru_add+0x10/0x10
[  759.614277][T18379]  ? rcu_is_watching+0x12/0xc0
[  759.614305][T18379]  ? get_vma_policy+0x23d/0x3b0
[  759.614341][T18379]  swapin_readahead+0x159/0x1200
[  759.614369][T18379]  ? rcu_is_watching+0x12/0xc0
[  759.614397][T18379]  ? __pfx_swapin_readahead+0x10/0x10
[  759.614422][T18379]  ? rcu_is_watching+0x12/0xc0
[  759.614448][T18379]  ? swap_table_get+0x103/0x2c0
[  759.614469][T18379]  ? lock_release+0x24d/0x310
[  759.614506][T18379]  ? swap_table_get+0x10d/0x2c0
[  759.614528][T18379]  ? swap_cache_get_folio+0x28d/0x360
[  759.614552][T18379]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  759.614576][T18379]  ? __pfx_softleaf_type+0x10/0x10
[  759.614600][T18379]  ? rcu_read_unlock+0x2d/0xb0
[  759.614624][T18379]  ? do_swap_page+0xf98/0x5780
[  759.614667][T18379]  do_swap_page+0xf98/0x5780
[  759.614721][T18379]  ? __pfx_do_swap_page+0x10/0x10
[  759.614758][T18379]  ? lock_acquire+0x301/0x370
[  759.614792][T18379]  ? __pfx_do_wp_page+0x10/0x10
[  759.614827][T18379]  ? __pte_offset_map+0x50/0x310
[  759.614854][T18379]  ? __pte_offset_map+0x179/0x310
[  759.614883][T18379]  __handle_mm_fault+0x192f/0x2a00
[  759.614909][T18379]  ? __pfx___handle_mm_fault+0x10/0x10
[  759.614947][T18379]  ? __pfx_vma_start_read+0x10/0x10
[  759.614983][T18379]  ? rcu_is_watching+0x12/0xc0
[  759.615014][T18379]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  759.615048][T18379]  handle_mm_fault+0x37b/0xa30
[  759.615071][T18379]  do_user_addr_fault+0x5a3/0x12f0
[  759.615108][T18379]  exc_page_fault+0x6f/0xd0
[  759.615145][T18379]  asm_exc_page_fault+0x26/0x30
[  759.615168][T18379] RIP: 0033:0x7f2349a7153d
[  759.615186][T18379] Code: 70 40 88 74 24 0e 8b 7c 24 08 48 89 de e8 7b f2 fd ff 84 c0 75 5b 80 7c 24 0f 00 75 0d 80 3d 51 0b 3a 00 00 0f 85 a3 01 00 00 <49> 83 7f 68 07 77 08 49 c7 47 68 08 00 00 00 41 8b 4f 30 48 f7 d9
[  759.615210][T18379] RSP: 002b:00007fff584dc380 EFLAGS: 00010246
[  759.615229][T18379] RAX: 000000110d680000 RBX: ffffffff84b1eb70 RCX: 0000000000000006
[  759.615245][T18379] RDX: 0000000000000b70 RSI: 00000000000007ad RDI: 0000000000000040
[  759.615260][T18379] RBP: 000000000000000c R08: 00007f2349e00000 R09: 00007f2349e02000
[  759.615275][T18379] R10: 0000000084b1eb74 R11: 0000000000000001 R12: 00007f2349e16128
[  759.615290][T18379] R13: 000000000000000c R14: ffffffff84b1ee5f R15: 00007f234a945720
[  759.615306][T18379]  ? security_mmap_file+0x1f/0x9b0
[  759.615344][T18379]  ? security_backing_file_free+0x130/0x150
[  759.615387][T18379]  </TASK>
[  760.044257][T18398] ubi0: scanning is finished
[  760.049639][T18398] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  760.852170][T18398] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  761.463390][   T31] INFO: task kworker/u8:15:13281 blocked for more than 143 seconds.
[  761.498197][   T31]       Tainted: G     U       L      syzkaller #0
[  761.524068][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  761.568154][   T31] task:kworker/u8:15   state:D stack:23712 pid:13281 tgid:13281 ppid:2      task_flags:0x4208160 flags:0x00080000
[  761.628000][   T31] Workqueue: netns cleanup_net
[  761.656770][   T31] Call Trace:
[  761.666365][   T31]  <TASK>
[  761.677482][   T31]  __schedule+0x125c/0x6730
[  761.694647][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  761.720902][   T31]  ? debug_object_assert_init+0x1c4/0x300
[  761.745950][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  761.782975][   T31]  ? prepare_to_wait_event+0xbe/0x720
[  761.809722][   T31]  ? prepare_to_wait_event+0x8d/0x720
[  761.829461][   T31]  ? rcu_is_watching+0x12/0xc0
[  761.843505][   T31]  ? __pfx___schedule+0x10/0x10
[  761.863078][   T31]  ? rcu_is_watching+0x12/0xc0
[  761.875785][T18379] memory: usage 3072kB, limit 3072kB, failcnt 110869
[  761.885189][   T31]  ? schedule+0x2bf/0x390
[  761.902563][   T31]  ? lock_release+0x24d/0x310
[  761.912233][T18379] memory+swap: usage 6536kB, limit 9007199254740988kB, failcnt 0
[  761.931869][   T31]  schedule+0xdd/0x390
[  761.945618][   T31]  afs_cell_purge+0x46a/0x550
[  761.952017][T18379] kmem: usage 2872kB, limit 9007199254740988kB, failcnt 0
[  761.970516][   T31]  ? __try_to_del_timer_sync+0x107/0x160
[  761.981095][T18379] Memory cgroup stats for /syz1:
[  761.981245][T18379] cache 0
[  761.998786][   T31]  ? __pfx_afs_cell_purge+0x10/0x10
[  762.012187][T18379] rss 4096
[  762.020104][   T31]  ? __timer_delete_sync+0x151/0x1c0
[  762.034574][T18379] rss_huge 0
[  762.044522][   T31]  ? __pfx_var_wake_function+0x10/0x10
[  762.052425][T18379] shmem 0
[  762.065545][T18379] mapped_file 0
[  762.070213][   T31]  ? __timer_delete_sync+0x151/0x1c0
[  762.081285][T18379] dirty 0
[  762.091781][T18379] writeback 0
[  762.095216][   T31]  ? __timer_delete_sync+0x10f/0x1c0
[  762.110208][T18379] workingset_refault_anon 24754
[  762.120801][   T31]  ? __pfx_afs_net_exit+0x10/0x10
[  762.132491][T18379] workingset_refault_file 24413
[  762.147022][   T31]  afs_net_exit+0x83/0x150
[  762.157599][T18379] swap 3547136
[  762.167581][   T31]  ops_undo_list+0x2ee/0xab0
[  762.174024][T18379] swapcached 640909312
[  762.183219][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  762.190265][T18379] pgpgin 623749
[  762.198184][T18379] pgpgout 650349
[  762.205637][   T31]  ? cleanup_net+0x332/0x920
[  762.211829][T18379] pgfault 481848
[  762.220747][   T31]  ? lock_release+0x24d/0x310
[  762.228937][T18379] pgmajfault 9055
[  762.235010][   T31]  ? idr_destroy+0x62/0x2e0
[  762.241451][T18379] inactive_anon 0
[  762.252949][   T31]  cleanup_net+0x499/0x920
[  762.257952][T18379] active_anon 200704
[  762.267077][T18379] inactive_file 0
[  762.271777][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  762.281813][T18379] active_file 0
[  762.287147][   T31]  ? rcu_is_watching+0x12/0xc0
[  762.294980][T18379] unevictable 4096
[  762.303769][   T31]  ? lock_acquire+0x301/0x370
[  762.309998][T18379] hierarchical_memory_limit 3145728
[  762.322113][   T31]  ? rcu_is_watching+0x12/0xc0
[  762.327953][T18379] hierarchical_memsw_limit 9223372036854771712
[  762.340448][   T31]  process_one_work+0xa23/0x1940
[  762.348998][T18379] total_cache 0
[  762.360449][   T31]  ? __pfx_process_one_work+0x10/0x10
[  762.366206][T18379] total_rss 4096
[  762.374629][T18379] total_rss_huge 0
[  762.380298][   T31]  ? __pfx_cleanup_net+0x10/0x10
[  762.388665][T18379] total_shmem 0
[  762.393687][   T31]  worker_thread+0x5ef/0xe50
[  762.400863][T18379] total_mapped_file 0
[  762.410982][   T31]  ? kthread+0x13a/0x450
[  762.416340][T18379] total_dirty 0
[  762.423519][T18379] total_writeback 0
[  762.429194][   T31]  ? __pfx_worker_thread+0x10/0x10
[  762.437551][T18379] total_workingset_refault_anon 24754
[  762.444502][   T31]  kthread+0x370/0x450
[  762.453333][T18379] total_workingset_refault_file 24413
[  762.459737][   T31]  ? __pfx_kthread+0x10/0x10
[  762.473123][   T31]  ret_from_fork+0x72b/0xd50
[  762.478782][T18379] total_swap 3547136
[  762.487553][T18379] total_swapcached 640909312
[  762.492798][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  762.502895][T18379] total_pgpgin 623749
[  762.510553][   T31]  ? __switch_to+0x800/0x10f0
[  762.519585][T18379] total_pgpgout 650349
[  762.525223][   T31]  ? __switch_to_asm+0x39/0x70
[  762.533407][T18379] total_pgfault 481848
[  762.539329][   T31]  ? __pfx_kthread+0x10/0x10
[  762.547946][T18379] total_pgmajfault 9055
[  762.555147][   T31]  ret_from_fork_asm+0x1a/0x30
[  762.561767][T18379] total_inactive_anon 0
[  762.569100][   T31]  </TASK>
[  762.573821][T18379] total_active_anon 200704
[  762.620465][   T31] INFO: lockdep is turned off.
[  762.637976][T18379] total_inactive_file 0
[  762.648979][   T31] NMI backtrace for cpu 0
[  762.649000][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  762.649035][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  762.649044][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  762.649058][   T31] Call Trace:
[  762.649066][   T31]  <TASK>
[  762.649074][   T31]  dump_stack_lvl+0x100/0x190
[  762.649106][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  762.649137][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  762.649167][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  762.649203][   T31]  sys_info+0x141/0x190
[  762.649230][   T31]  watchdog+0xcb1/0x1030
[  762.649267][   T31]  ? trace_irq_enable.constprop.0+0x122/0x160
[  762.649309][   T31]  ? __pfx_watchdog+0x10/0x10
[  762.649342][   T31]  ? __kthread_parkme+0x18c/0x230
[  762.649370][   T31]  ? kthread+0x13a/0x450
[  762.649400][   T31]  ? __pfx_watchdog+0x10/0x10
[  762.649441][   T31]  kthread+0x370/0x450
[  762.649472][   T31]  ? __pfx_kthread+0x10/0x10
[  762.649504][   T31]  ret_from_fork+0x72b/0xd50
[  762.649533][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  762.649562][   T31]  ? __switch_to+0x800/0x10f0
[  762.649597][   T31]  ? __switch_to_asm+0x39/0x70
[  762.649630][   T31]  ? __pfx_kthread+0x10/0x10
[  762.649661][   T31]  ret_from_fork_asm+0x1a/0x30
[  762.649700][   T31]  </TASK>
[  762.802020][T18379] total_active_file 0
[  762.811189][T18379] total_unevictable 4096
[  762.835382][T18379] anon_cost 14
[  762.845335][T18379] file_cost 0
[  762.856844][T18379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2454,pid=18379,uid=0
[  762.910875][T18379] Memory cgroup out of memory: Killed process 18379 (syz.1.2454) total-vm:102364kB, anon-rss:1244kB, file-rss:21904kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  763.193736][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  763.200657][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  763.211364][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  763.216562][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  763.226633][   T31] Call Trace:
[  763.229959][   T31]  <TASK>
[  763.232926][   T31]  dump_stack_lvl+0x100/0x190
[  763.237657][   T31]  vpanic+0x552/0x970
[  763.241753][   T31]  ? __pfx_vpanic+0x10/0x10
[  763.246282][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  763.252497][   T31]  panic+0xd1/0xe0
[  763.256235][   T31]  ? __pfx_panic+0x10/0x10
[  763.260669][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  763.266853][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  763.273125][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  763.279445][   T31]  ? watchdog.cold+0x1ec/0x234
[  763.284248][   T31]  ? watchdog+0xcc1/0x1030
[  763.288721][   T31]  watchdog.cold+0x1fd/0x234
[  763.293361][   T31]  ? trace_irq_enable.constprop.0+0x122/0x160
[  763.299489][   T31]  ? __pfx_watchdog+0x10/0x10
[  763.304210][   T31]  ? __kthread_parkme+0x18c/0x230
[  763.309288][   T31]  ? kthread+0x13a/0x450
[  763.313580][   T31]  ? __pfx_watchdog+0x10/0x10
[  763.318305][   T31]  kthread+0x370/0x450
[  763.322424][   T31]  ? __pfx_kthread+0x10/0x10
[  763.327037][   T31]  ret_from_fork+0x72b/0xd50
[  763.331648][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  763.336778][   T31]  ? __switch_to+0x800/0x10f0
[  763.341485][   T31]  ? __switch_to_asm+0x39/0x70
[  763.346274][   T31]  ? __pfx_kthread+0x10/0x10
[  763.350894][   T31]  ret_from_fork_asm+0x1a/0x30
[  763.355718][   T31]  </TASK>
[  763.358826][   T31] Kernel Offset: disabled
[  763.363168][   T31] Rebooting in 86400 seconds..