last executing test programs:

14.792998442s ago: executing program 2 (id=448):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto(0x10, 0x9, 0x9)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})
syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex_wake$auto(0x0, 0x5, 0x4, 0xa)
futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973b65703b664991ab45d13445d9c4df1d25210345f44468854c9689b943d1c65073bf11fd0c98fb48f9f4d67c0908e7470167", 0xfffffffffffffff8, 0xfff, 0x7f)

7.91904739s ago: executing program 3 (id=471):
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x634483, 0x0)
ioctl$auto_UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x2, 0xb, {0x1c, 0x9, 0x2, {0x1, 0x5}, {0xe, 0x7f}, @ramp={0x5, 0x1000, {0x38bc, 0xf5, 0x0, 0x800}}}, {0x0, 0x8001, 0x0, {}, {0x5, 0x3ff}, @constant={0xf, {0x1ff, 0x7, 0xdb2, 0x9}}}})
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x440000, 0x0)
sendfile$auto(r0, r1, &(0x7f0000000100)=0x2, 0x4f0de452)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)={0x13c, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PACKET={0x12, 0x1, "16e66576005becc228338c79461e"}, @OVS_PACKET_ATTR_ACTIONS={0xfc, 0x3, 0x0, 0x1, [@nested={0xf7, 0xc, 0x0, 0x1, [@generic="e5df693e7828d393d32ed2943b81c1d899e5b9c47e820442f59448ea07e44f2827d867ab61561efee981287633ffc8315707d4bbcf68f4554638871daf3b64ec5f51004419f1e1e98830b458e333560288c6446b9ab36e50b4cc08ca93f6bca03593a6b832997f16aee8f80606a43a0705552f790ea3a41b04fb56cdada143918bb8154c0dd2e2a12aeea521d195a114dbcabdb1511c267a8b8c68fd084d227fd655888ba75b237f4905a1ad594cb16f88bd238680ffec96de439b58b9ce32fb5806e9e4e56dbf71f434bd85fd613077f07e8e904b2d304dc585afb52be4e867e12140bdf6aa068ed9af1d2fa246b4c1ea7bef"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x50}, 0x8880)
r6 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f00000002c0)={&(0x7f0000000400)="2aba9487e9208944d93f8d25c0ed546d0dec4675c4ddecd35f86f01de55be576733cb3c293f0c758ed0f73c4eedf186128f83496e86c1a9861a346d4654f7ee9ddf82e78c5bc2d8644b95a585ffffe946beaa96a3c5626bf0e332e17b7b27ab8450344235664457ff194709181a163fa151a3cd93ef8cbe547aacef96959b496e7a061859e6bda9ba8e9febe3d5c800900cecdc5786e27b7fd4ea53de890d8801702cd7baa53ef01d66f7b36f0a9521fb263adc0cea0f6b571242085bf790953d1761523aa75da33c6490a9ea83716d228fc075aed666af0ccb4b0", 0xfc2}, 0x2, &(0x7f0000000300), 0x7, 0xa505}, 0x1}, 0x7, 0x6)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000001980)=ANY=[@ANYBLOB="c8030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3c8}}, 0x4)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0103f9453539e8903776b800"/22], 0xfffffffffffffe98}, 0x1, 0x0, 0x0, 0x30000801}, 0xc040810)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video3\x00', 0x40080, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0)
r8 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0)
read$auto_tracing_fops_trace(r8, &(0x7f0000000580)=""/4096, 0x1000)
mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0xfffffffa)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0)
unshare$auto(0x40000080)

7.812954417s ago: executing program 2 (id=473):
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x46c0, 0x0)
mmap$auto(0x9, 0x20009, 0x2df, 0xeb4, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = epoll_create$auto(0x8800001)
fcntl$auto_F_SETSIG(r0, 0xa, 0x8)
r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x101, 0x103)
read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/021/001\x00', 0x6181c1, 0x0)
keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x5, 0x3, 0xfffffffffffffffc, 0x4)
close_range$auto(0x2, 0x8, 0x0)
readv$auto(0xffffffffffffffff, 0x0, 0x3)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
migrate_pages$auto(0x0, 0x99, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x23, 0x0)
r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r3, 0x0, 0x4)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64)
fchdir$auto(r4)
r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents64$auto(r5, 0x0, 0x40002)
getdents64$auto(r5, 0x0, 0x400)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0)
socket(0xa, 0x1, 0x84)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80240, 0x0)

6.99948234s ago: executing program 1 (id=476):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0)
socket(0xa, 0x801, 0x106)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x2, 0x0, 0x28)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, 0x0, 0xd1)
r1 = socket(0x11, 0x80003, 0x300)
r2 = socket(0x1a, 0x2, 0xfffffff0)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirty_bytes\x00', 0x8a042, 0x0)
r4 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_on\x00', 0xc2182, 0x0)
write$auto(r4, 0x0, 0x1)
sendfile$auto(r3, r3, 0x0, 0x48)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend\x00', 0x8102, 0x0)
mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17)
llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7)
openat$auto_stats_fops_2(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000040), 0x3000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00'})
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r5, 0x0, 0x4040004)
r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vgem/name\x00', 0x2100, 0x0)
lseek$auto(r6, 0x9, 0x0)
socket(0x11, 0x80003, 0x300)
r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r7, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)

6.773032506s ago: executing program 3 (id=478):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
remap_file_pages$auto(0x6a27, 0x1, 0x2686, 0x6, 0x2)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) (async)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
newfstatat$auto(r0, 0x0, 0x0, 0x1000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0)
read$auto(r1, 0x0, 0x1) (async, rerun: 32)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x2, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x100000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) (async, rerun: 32)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = io_uring_setup$auto(0x6, 0x0) (rerun: 32)
madvise$auto(0x0, 0x200204, 0x15)
mincore$auto(0x0, 0x10007f, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
r3 = wait4$auto(0x0, &(0x7f00000003c0)=0xff, 0xc, &(0x7f00000004c0)={{0x8000000000000000, 0x6}, {0x208, 0x5}, 0xffffffffffff0001, 0x8d4, 0x1, 0x6, 0x3, 0xfffffffffffffffb, 0x4, 0x8, 0x8, 0x9f0, 0x8, 0xfffffffffffffffe, 0x9, 0x2}) (async)
shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f0000000680)={{0xc, <r4=>0xee00, 0x0, 0x5, 0x0, 0x10000, 0x90}, 0x9, 0x631, 0x8, 0x7, @inferred=<r5=>0x0, @inferred=<r6=>0x0, 0x3, 0x0, &(0x7f0000000400)="b69eaf360b9d493bd8a82a", 0x0})
r7 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000700)={@_si_pad}, 0x1, &(0x7f0000000780)={{0x3c8}, {0x8, 0x5d}, 0x3, 0x3, 0x0, 0x1, 0x0, 0x40, 0x2, 0x4, 0x2, 0x0, 0x2, 0x61130532, 0x9, 0xba})
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="e0290000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001d00", @ANYRES32=r0, @ANYBLOB="47074b80b6a8c146f746a8506dc8a569e2868a5dd3ee4210396891a5659a830a29e4683e6e6eb22b2b155db7b42c24d0d98327a8b14c04b2e76581b089f91cad9451edfa6c910423809c008c800800bf00", @ANYRES32=0x0, @ANYBLOB="05007b00000000000400a28008003f00", @ANYRES32=r6, @ANYBLOB="adfb97423e882e6cc10652cced1ac14e0cc95121b494b5484393bf89a13ad23539bdfaa137cb3626c30e13bd9ee1654385cd29c03ea0aeb74881d451a0911b9263e8862550a7caac2776d2e441e0a14be5a39e5d0400cc800c003e0002000000000000001400ef00fc01000000000000000000000000000104000680830011002ce7cbd1c5b17943a26f9defdf5dfe56481feadf17abcc63bdf850defb33094f911d67db065c61e476d4100d8f99159026227dc8db9ff8daab4ce9313122c52168eb6d3095d57641f0f6e1c272a6f4ba3ad4fcb7f35821402a7fa1db8be1dd71b8b915bbb2bbaeae465c37be61c005001d4366fdbcf972e3ec5ec79f048ccdfa1cdc5f5285c14343f25805b9d9579d134e41ca7d08004a00"/296, @ANYRES32=r4, @ANYBLOB="18002d8014004600000000000000000000000000000000006002d08008007d00640101012f013c800c000b00cb84ffffffffffffcda7ea08e353fdfa678c4c5563bd6c348bd5b96321ebba9beafe933386172f5c2c2b5771d51fa8be6aac36b06f7f98be1bdaa0fc93df0618b3d4fd2e8197fcff3eaee513ca705b489b79801c31f38292a287bac2b0e07c931a3a6be8c287ffc1610fcc46d8a5fa2e28c9f5db672be804b5cd047c0883523cf4bc32e5dfcf47e457e488e66975c3bad9706c7e4e11a30de611809a2f9473f48818735e9b9149e1691525853b23551c4112df1b4fbcf95ac410cb2631745a868c75d6c4e645eb6600bf3ad46c29914729a62c89da46daa23ecadebd5cec45cb55329d1036047e4c3b6b8cf26d8d84f7bec00b121f578759e0712e05bdabbeac8f76781c00ba800400558008006100960e00000400198008006800", @ANYRES32=r5, @ANYBLOB='\b\x00|\x00', @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0800a900", @ANYRES32=r6, @ANYBLOB="d122031f5f31fc8784105bb828d808009800", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0a004e00b49af82c541200000800d600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="000000000800110001000100"], 0x29e0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async)
r8 = socket(0x2a, 0x5, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r9)
sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) (async, rerun: 64)
sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x5c, r10, 0x200, 0x70bda7, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x1}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x3}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xbc}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfff7}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfffc}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x6}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4e57}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x100}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x401}]}, 0x5c}}, 0x4000000) (async, rerun: 64)
sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64)
r11 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) (async, rerun: 64)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, 0x0, 0x1b, 0x70bd26, 0x25dfdbfa, {}, [@OVS_PACKET_ATTR_ACTIONS={0x1c, 0x3, 0x0, 0x1, [@nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x106, 0x0, 0x1, [@nested={0x10, 0x74, 0x0, 0x1, [@nested={0x4, 0x4d}, @typed={0x4, 0x3}, @generic, @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async)
ioctl$auto(r11, 0x542e, r11)

5.665895968s ago: executing program 2 (id=481):
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804)
msgctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000000240)={{0xffffff01, <r0=>0xee01, 0xee01, 0x4, 0x3d6, 0xab, 0x3}, &(0x7f0000000080)=0xf6, &(0x7f0000000100)=0x1, 0x7, 0x7f, 0x1, 0x6, 0x3, 0x0, 0x8, 0x438, @raw=0x7, @raw=0xb})
lstat$auto(0x0, &(0x7f0000000180)={0xb, 0x2, 0x100000001, 0x9, r0, 0x0, 0x0, 0xfa9a, 0x1, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x3})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getrandom$auto(0x0, 0xffffffffffff59de, 0x2)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109040, 0x0)
ioctl$auto_FS_IOC_RESVSP(r2, 0x40305828, 0x4)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3)

5.665209927s ago: executing program 3 (id=482):
add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc)
openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0)
r1 = open(0x0, 0x161342, 0x100)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r1)
ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f00000000c0)={"9e70b0b66ea3ebc67f1cb5c282a207e7b10479077cf1409536e4e88d3486a02e", 0x0, 0x340b5092, 0x4, 0x200, 0x7, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/can/rcvlist_all\x00', 0x2080, 0x0)
pipe$auto(&(0x7f0000001480)=<r6=>0xffffffffffffffff)
vmsplice$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x5, 0x1)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2, 0x5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r7=>0x0})
sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="f1c9c2f9b648c21b5f0003846a201a760dba9eaf586c94a1139168987aa6a3236b3876c077e335ae6449fdb09107bb63d824f19e67f3550267a749eca64800ee8ee7dc1afaab6171fdc07e8190e2574b3a00"/95, @ANYRES16=r6, @ANYRESHEX, @ANYBLOB="c841e3d5b1f7f9d6ed9a54a54ae988911d93674fd5ae9f715e074d64be217e420dd0e39e56de92a651063ff8edb93ae0a0e033358df67b12c0540f77d98e2e27f11218d34a04a68f6e7f0dcfaf80475dc21e8efd285f079003c5372d625ac425b166e7834583f6fa65d4b0a3603a26a9d4eba3463dc89c946bae75e0d67f39c32960c6b649ee898cae381100"/151, @ANYBLOB="8c46db9db2cc2d8015b2227aabec5106a5d3ae14302836f23ee6d8ac663bc47ef17d91f2d200c5f1f15dedb12e95acbe89a20b4b4127734837194e4d076bb67471129974e7a82d84777f89"], 0x1c}}, 0x10)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00')
r9 = memfd_create$auto(0x0, 0x9)
fchown$auto(r9, 0x0, 0x0)
r10 = getpid()
process_vm_readv$auto(r10, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x400000000000004, 0x0)
r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0)
sendfile$auto(r8, r11, 0x0, 0x1)
sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r11, @ANYRES16=r2, @ANYBLOB="000226bd7000fbdbdf251a0000007b032e80f8007e80c02c6d03a7161fe78db949d2918a4550f1796edd8f1f9b7b767783ac60206841e4eeff38a88cd55a017b2f3ffdadb69cdd8f93bf883e8069ea85553a767636a9ea60fe9e9166065162cb9ffa8356a6e0a708f32470832971c36e51c9269f14948b0f9c79852c2410926dbbf7e9b4f8e4385ba3dba54e80f34bbfafd9002ec7354d89db721f75e98225275fd2dcae41f78435798a15ce5135a0825bb389f9daee2dd3aea126607be1826150b08c05905586bdbbe703ca44f974df9a558f4f88fe22e03f1c7a3038108ebdb85328cf71a71d67cb4ea427d02ab1f90800dd00", @ANYRES32=r3, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES32=r11, @ANYRES32=r7, @ANYRESOCT=r5, @ANYRESHEX=r11, @ANYBLOB="05000f00080000000500070081000000", @ANYRES16=r1, @ANYRESDEC=r9], 0x3c4}, 0x1, 0x0, 0x0, 0x1}, 0x44004)
read$auto(r0, 0x0, 0x20)

5.02273918s ago: executing program 1 (id=484):
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
utime$auto(0x0, 0xfffffffffffffffc)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/admmidi2\x00', 0xa041, 0x0)
msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8d5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfffffffffffffff8, 0x0, 0x9, 0x9, 0x4, 0x9, 0xf})
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7B\xea\xff\x00\x00\x00\x00\x00\xfa\b\x1c\xc7k', 0x10000)
ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x200403, 0x0)
ioctl$auto(r3, 0x540a, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r4 = socket(0xa, 0x1, 0x84)
setsockopt$auto(r4, 0x0, 0x40, 0x0, 0x10000)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0)
pread64$auto(r6, 0x0, 0x10001, 0x82d)
write$auto(r5, 0x0, 0xc)
close_range$auto(0x2, 0x8, 0x0)
msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x1, 0x2a, 0x7fffeffffffff780, 0x80020009b73, r5, 0x8)
madvise$auto(0x2, 0x5c61fa2c, 0xf)

4.458086927s ago: executing program 3 (id=485):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xfffffffffffeffff, 0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000)
mincore$auto(0x1000, 0x8001, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
fallocate$auto(r1, 0x81, 0x9, 0x0)

4.273096114s ago: executing program 2 (id=487):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x1, 0x41, 0x0, 0xd8)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}}, 0x40000)
mmap$auto(0x0, 0x2400008, 0xdf, 0x9b72, 0x2, 0x8000)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r1 = socket(0x29, 0x5, 0x0)
sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, &(0x7f0000000140), 0x3, 0xab}, 0x8066d}, 0x3f7ffffe, 0xd9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54)
listen$auto(0x3, 0x81)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0)
ioctl$auto(0x3, 0x541b, 0x38)
setsockopt$auto_SO_DETACH_FILTER(r2, 0x1, 0x19, 0x0, 0x5)

4.097155068s ago: executing program 1 (id=488):
rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000940)={@siginfo_0_0={0x4, 0x8, 0xffff1e3b, @_sigchld={0x0, 0x0, 0x200, 0x8, 0xbb7d}}}) (async)
rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000940)={@siginfo_0_0={0x4, 0x8, 0xffff1e3b, @_sigchld={0x0, 0x0, 0x200, 0x8, 0xbb7d}}})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df"], 0x1ac}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
madvise$auto(0x4, 0x10001, 0x7)
socket(0x10, 0x2, 0x6)
openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) (async)
openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0)
r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r0, r0, 0x0)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0)
ioctl$auto(r1, 0xc0585611, r1)
socket(0x10, 0x2, 0x6) (async)
r2 = socket(0x10, 0x2, 0x6)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/vulnerabilities/retbleed\x00', 0x101000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r6=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000100)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x7fff}, @NET_SHAPER_A_BW_MAX={0xc, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x14)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/181, 0xb5) (async)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/181, 0xb5)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r7, 0x0, 0x20) (async)
read$auto(r7, 0x0, 0x20)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3)
listmount$auto(&(0x7f0000000100)={0x20, @inferred, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) (async)
listmount$auto(&(0x7f0000000100)={0x20, @inferred, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio1/name\x00', 0xa2500, 0x0) (async)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/radio1/name\x00', 0xa2500, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000002c0)=""/106, 0x6a)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

3.321922927s ago: executing program 1 (id=490):
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
fsopen$auto(&(0x7f0000000040)='/dev/tty0\x00', 0x40)
r0 = socket(0x11, 0x80003, 0x300)
mmap$auto(0x8000, 0x66e0, 0xdf, 0x13, r0, 0x8000)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b6c", 0x7)

3.19041886s ago: executing program 1 (id=491):
mmap$auto(0xbb1, 0x100000001, 0x9, 0xeb3, 0xfffffffffffffffa, 0x81)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xb4300, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-0/xps_cpus\x00', 0x10b062, 0x0)
write$auto(r1, &(0x7f0000000080)='3\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x9b\xcf\x1a@4\x1d>\x9b\xb8\xe7\t\x88\xe0\x85\x97\x1a\x1e-T\xf8\xcfHx|j\xa0\n\xc7q\x93\x8e\bPp\xd8\x05\x94\xb77\x8d.\xb3t\xbd\x15\xfdR\xfd3\xa0\xe4\xecz8\x1a\xa1V8\xa4\xe3O\xc8w|\xd4\x7f\xea\xa2X\x86\xa0\xec\xd7\x91\xb1B\xcdd9\x1a[\x96\xe0=\x9aU\xeb\r\xb5\x8e\x8b\xaeq\xa12\xc9\\\xb2\xd5\xfd\xf5\xfb\x88R\xa7\xb5\xfd\xe3\xf9\x10\xf2f\xe7\t}\xe61\xcb\x14\x88\xa2\x0f\xfa\xb5T%\xc6 \\\xa3\xa1\x10@y\xbd\x16\xe1\xdfh\xee\xde\xaa\xa2U\xd7\xf4\xa8\xd6\xc1\xe0X\x8f{m\'(\xfb\xab\x8bXW\x9a>Hl\x9d\xcb\xa3T\x9a%\x1e\x92|a\x9f\xbc\xe4\xd0\xa7\xeb\xb1\xe6\x8e\xae\x02\x964q#u\x8c\x19\x17\xeb\xfc\x16\xab\xb7\b_\xdfh\r\f\xa8/', 0x81)
close_range$auto(r0, 0x8, 0xca)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20440, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
prctl$auto(0xb, 0x2, 0x0, 0x7fff, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(0xffffffffffffffff, &(0x7f00000003c0)='7\x00\\\xa0\x04\x9c\"\xa9Nd_\xff\xa0k\xd8\xc9\xba\x00\xb5\x89\x8cg\xa84\xd8D)\xfdcR8\xdb\x98\xc5\xd7\x94\x94\xda\xc0r\x8f)\xbb_\xa2\fz\xe1\xffm\xf9t\x012A\xc8%H\x88\xaej\xda\xae\x1dO\xd7\x88?\x19\xf3\x068\xb4e\xb5\x93\x9a\xb9|Kh\xc2d\xb2\x9f\xb0\xf7\b\xba\x17\"-\x90\xda\xac\xe5\x1fb~8\xf2q\x0e\x98A[\xbb5\xb8\xeb\n!\x80r*}\x9cS5\xff0\xe9\xafx\xe9\x17\xbd\xf9m\xfa\xac`\x1d\xa3\xeb\xb1[\x971\xd92\xce=V\xe8\xb3}\xc2\x17k{\x182}\xe1\xa5\x05!\aws(\x19\xfe\x82?\x14L\x7f\xc0By\xa7\xca\xcbB\xd7?\x97', 0x84)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
socket(0x1d, 0x3, 0x1)
r2 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xeb66)
madvise$auto(0x3, 0x200007, 0x19)
r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
read$auto(r3, 0x0, 0x7)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x735200, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2c102, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
poll$auto(&(0x7f00000002c0)={0xffffffffffffffff, 0xfff, 0x6}, 0x40, 0xffffc)
sendmsg$auto_OVS_METER_CMD_GET(0xffffffffffffffff, 0x0, 0x10)
vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0)

1.64335181s ago: executing program 3 (id=494):
pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a)
semctl$auto(0x80001ff, 0x804, 0x13, 0x4)
keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4)
sysfs$auto(0x1, 0x3, 0xa)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
timerfd_create$auto(0x1, 0x0)
getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0, &(0x7f00000001c0)={0x0, 0xa50, 0x10000}, 0x1000)
unshare$auto(0x40000080)
openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0)
openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x1c000, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred=<r1=>0x0, 0x7, 0x109, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439d070a00", @raw=0x2}, 0x6, 0x4, 0x6, @raw=0xd7, @integer64={0x442df60c, 0x81, 0x7}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={@inferred=r1, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c})

1.313818242s ago: executing program 0 (id=496):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x62382, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async)
mmap$auto(0x100000000009, 0x5, 0xdf, 0x9b72, r0, 0xfffffffffffffffe)
read$auto(0x3, 0x0, 0x8080)
r1 = socket(0x2, 0x2, 0x0) (async)
mmap$auto(0x0, 0x2, 0x5, 0xeb1, 0xffffffffffffffff, 0x0)
setsockopt$auto(0x3, 0x0, 0xc, 0x0, 0x10000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) (async)
r2 = socket(0xa, 0x2, 0x88) (async)
close_range$auto(r0, r1, 0x80)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000015c0)={'wg1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dvmrp0\x00'})
r3 = socket(0x1d, 0xa, 0x7) (async)
r4 = socket(0x21, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4008000) (async)
r5 = pidfd_open$auto(0x1, 0x0) (async)
finit_module$auto(r3, &(0x7f0000000100)='-+$&(#\x00', 0x9)
ioctl$auto_BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async)
pipe2$auto(0x0, 0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x28, 0x5, 0x0)
ppoll$auto(&(0x7f0000000140)={<r6=>0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
bind$auto(r6, &(0x7f0000000000)=@can, 0x6b)
socket(0x1d, 0x2, 0x7)

1.05251545s ago: executing program 2 (id=497):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
madvise$auto(0x4, 0x7, 0x2)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKID={0xff, 0x55, "5ac66b951974619d52b37dd2aab4b2db909a11504ab0165a7d105897630003f60b5694e0f70e75c875337b501a4524bc7ed66d0dc746982aec2dd40c20c9c550bbd25478c640479e59db88e3f243d8d27363b47d8f45a9daca2186d6732ac32407a5e52a5aabb8f0c236217f4ae2da1103868f6c6cc9fdc6ba52976b4e1b01c28bd71798de4c1f30a67ee35b27628e8b7cfd1a38b89129617b93ffa1807777523d6d68c6e9d3aaec58bdb5aed1d70b9208ccec4a9f03f7a96806eeaf226432798ccbcece6f87a3ae6871db3ed5086e364c14fecdeb2d0982c97f4bcf521301434a1a0cdd73e6fc2ca01369a3043f85da05b02251ef30ed1fa50d41"}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x50}, 0x4000001)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfffffdef)
mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = socket(0x2, 0x5, 0x0)
sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000380)={0x7a0, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_BEACON_TAIL={0x785, 0xf, "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"}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x48001}, 0x40040)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)

954.313598ms ago: executing program 1 (id=498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async)
r1 = socket(0x10, 0x2, 0x4)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
socket(0xa, 0x3, 0xff) (async)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64)
close_range$auto(0x2, 0x8, 0x0) (rerun: 64)
socket(0x2, 0x80002, 0x73) (async)
socket(0xa, 0x1, 0x84) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
socket(0x2, 0x1, 0x106)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x3000, 0x0, 0x7ff)
prctl$auto(0x3e, 0x5, 0x0, 0x401, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (rerun: 64)
sysfs$auto(0x2, 0x23, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x4)
rseq$auto(0x0, 0x8000, 0x0, 0x6) (async)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) (async, rerun: 64)
r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b)
read$auto(r3, 0x0, 0x1) (async)
r4 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/test_nop_accept\x00', 0x5, 0x0)
write$auto(r4, 0x0, 0x6) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x68c80, 0x0)

862.46588ms ago: executing program 0 (id=499):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x1d, 0x2, 0x6)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket(0x15, 0x5, 0x0)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto(0x3, 0xc0104d03, r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2, 0x801, 0x106)
clone$auto(0x20003b46, 0x6, 0x0, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mseal$auto(0x0, 0x7dda, 0x0)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
setsockopt$auto(r2, 0x6, 0x1e, 0x0, 0xa1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
r5 = socket(0x23, 0x805, 0x0)
accept$auto(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="29a0aa14279619743352424163ce84b0bae9492874bb6609f740b6128d45fd5c50b043f32c375e330811def76bd530170517f9ef8ddb6934e12453ae833ac8bfdcceaf5d945938661bbe9502d9dcea1e4ea83ab903b162f4541ce49a9c64899cc3ff00286dbd6979a3f259db988713f745638fcf02", @ANYRES16=r4, @ANYBLOB="01ee696b97a772f4c2255900000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x804)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x29fb8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

738.161639ms ago: executing program 0 (id=500):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdc00, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001500), 0xffffffffffffffff)
sendmsg$auto_KSMBD_EVENT_STARTING_UP(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x10) (async)
sendmsg$auto_KSMBD_EVENT_RPC_RESPONSE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa020000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
getrlimit$auto(0x3, 0x0) (async)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0)
ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async)
mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) (async)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) (async)
lseek$auto(0x3, 0xffffffffff800002, 0x10) (async)
ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async)
setsockopt$auto_SO_TIMESTAMPNS_OLD(r0, 0x9, 0x23, &(0x7f0000000200)='@&\x00', 0x9) (async, rerun: 64)
unshare$auto(0x40000080) (async, rerun: 64)
write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0)

470.433579ms ago: executing program 0 (id=501):
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0x3, 0x0, 0xfff8, 0xfffffffe, 0x0}) (async)
mmap$auto(0x8000000000000, 0x4000f, 0xdf, 0x2000000000009b72, 0x7, 0x4)
socket(0x10, 0x2, 0x0) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/sn9c2028/bind\x00', 0x400080, 0x0) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async, rerun: 64)
shmctl$auto_IPC_INFO(0x28, 0x3, 0x0) (async, rerun: 64)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) (async)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)="7f0d40")

237.810196ms ago: executing program 0 (id=502):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8001) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8001)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xf, 0x80805, 0x8) (async)
socket(0xf, 0x80805, 0x8)
memfd_secret$auto(0x0) (async)
memfd_secret$auto(0x0)
socket(0x2b, 0x1, 0x1)
setsockopt$auto(0x3, 0x0, 0x80, 0x0, 0xff) (async)
setsockopt$auto(0x3, 0x0, 0x80, 0x0, 0xff)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) (async)
setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)
getdents64$auto(r1, &(0x7f0000000f40)={0x309, 0x7, 0xffff, 0x7}, 0x200c8)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/vbi16/power/control\x00', 0x49e202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x2, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x0, 0x4, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) (async)
io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, <r3=>0xffffffffffffffff, [0xcfa, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x2, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x0, 0x4, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}})
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x6) (async)
setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a})
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000), 0x6, &(0x7f0000000100)={&(0x7f0000000240)="4d3d33035ba2e7f601190e67a6eecbcabc6c2f6244b88605913c95f440a72fe76d8d32090d324897cc510d08f1e00bd3dd6b888143d91b8d302556325d60dafb85fe37df181a388c6f4a2d2cdddabd8a92fdc72010940000010000000000d7", 0x4}, 0x400000005, 0x0, 0x5, 0x8}, 0x20000005}, 0x5, 0xcae) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000000), 0x6, &(0x7f0000000100)={&(0x7f0000000240)="4d3d33035ba2e7f601190e67a6eecbcabc6c2f6244b88605913c95f440a72fe76d8d32090d324897cc510d08f1e00bd3dd6b888143d91b8d302556325d60dafb85fe37df181a388c6f4a2d2cdddabd8a92fdc72010940000010000000000d7", 0x4}, 0x400000005, 0x0, 0x5, 0x8}, 0x20000005}, 0x5, 0xcae)
write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)="fb", 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
ioctl$auto_NS_GET_USERNS(r3, 0xb701, 0x0)
r6 = socket(0x2a, 0x5, 0x9)
setsockopt$auto(r6, 0x10000000084, 0x9, 0x0, 0x9c)
sendfile$auto(r3, r5, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x4000000008, 0xdf, 0x9b7f, r0, 0x8000)

228.009183ms ago: executing program 2 (id=503):
pidfd_open$auto(0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000)
r0 = socket(0xa, 0x2, 0x73)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0xdd4)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0x7fffffff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0)
unshare$auto(0x1)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003)
move_pages$auto(0x0, 0x24007, 0x0, 0x0, 0x0, 0x800fb8)
r4 = socket(0x31, 0x6, 0x7fff)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0)
prctl$auto(0x3e, 0x1, r6, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00V\x00\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3)
socket(0x18, 0x5, 0x1)
syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r4)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850)
socket(0x10, 0x2, 0xc)
r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, r7, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x1}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24010883}, 0x10004010)

221.326724ms ago: executing program 3 (id=504):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x8000000000000000, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0xb, 0x6, 0x10003, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={<r1=>0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, r1, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
ioctl$auto(0x3, 0x8905, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0)
ioctl$auto(r3, 0x5457, 0xd8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
bpf$auto(0x2, 0x0, 0x1)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)
sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf2503000000180006800c002b8004009a8004001c8008002800", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x400c0d0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x0, 0x0)

0s ago: executing program 0 (id=505):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r1 = socketcall$auto(0x8000, 0x0) (async, rerun: 64)
set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) (async, rerun: 64)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cec21\x00', 0x240, 0x0) (async)
r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x2, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5, <r3=>0xffffffffffffffff}, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff)
r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rate_ctrl_alg\x00', 0x0, 0x0)
readv$auto(r6, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4)
sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250b0000000a000280019e695f99bb0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) (rerun: 64)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) (async)
ioctl$auto_BLKTRACESETUP2(r7, 0xc0481273, &(0x7f0000000280)={"b3efc16b86b24b821e90a2e1a74c38c88843237b4095eea24d4d39023c954a56", 0x5, 0x4000, 0xfffff7dc, 0x6, 0x3, 0xffffffffffffffff})
read$auto(r7, 0x0, 0x1ff) (async, rerun: 32)
r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0) (rerun: 32)
write$auto(r8, 0x0, 0x3)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
sysfs$auto(0x2, 0x11, 0x0)
r9 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r9, 0x8, 0x0, 0x0, 0x0)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
close_range$auto(r2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r1) (async)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts.
[   82.810013][ T5820] cgroup: Unknown subsys name 'net'
[   82.918655][ T5820] cgroup: Unknown subsys name 'cpuset'
[   82.927669][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.404083][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.118151][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.127046][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.133771][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.135295][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.143310][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.149393][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.156603][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.163118][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.170879][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.177548][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.184415][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.198565][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.200441][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.208044][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.220787][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.220938][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.228858][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.258553][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.274771][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.282949][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.767433][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   86.854754][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   86.919555][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   86.964757][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   87.063200][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.071078][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.078621][ T5832] bridge_slave_0: entered allmulticast mode
[   87.086559][ T5832] bridge_slave_0: entered promiscuous mode
[   87.114838][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.122025][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.129286][ T5832] bridge_slave_1: entered allmulticast mode
[   87.136365][ T5832] bridge_slave_1: entered promiscuous mode
[   87.184759][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.192463][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.199705][ T5834] bridge_slave_0: entered allmulticast mode
[   87.206752][ T5834] bridge_slave_0: entered promiscuous mode
[   87.241511][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.248792][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.256046][ T5834] bridge_slave_1: entered allmulticast mode
[   87.263207][ T5834] bridge_slave_1: entered promiscuous mode
[   87.272479][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.312634][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.322123][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.330125][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.337651][ T5833] bridge_slave_0: entered allmulticast mode
[   87.345021][ T5833] bridge_slave_0: entered promiscuous mode
[   87.352701][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.360124][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.367430][ T5831] bridge_slave_0: entered allmulticast mode
[   87.374378][ T5831] bridge_slave_0: entered promiscuous mode
[   87.400204][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.407497][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.415073][ T5833] bridge_slave_1: entered allmulticast mode
[   87.422807][ T5833] bridge_slave_1: entered promiscuous mode
[   87.431081][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.445314][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.452555][ T5831] bridge_slave_1: entered allmulticast mode
[   87.460907][ T5831] bridge_slave_1: entered promiscuous mode
[   87.472587][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.530550][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.542340][ T5832] team0: Port device team_slave_0 added
[   87.597214][ T5832] team0: Port device team_slave_1 added
[   87.622310][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.637060][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.667581][ T5834] team0: Port device team_slave_0 added
[   87.677629][ T5834] team0: Port device team_slave_1 added
[   87.686757][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.698818][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.750167][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.757170][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.783307][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.827188][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.834171][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.860853][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.872778][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.879917][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.906054][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.919103][ T5833] team0: Port device team_slave_0 added
[   87.926833][ T5831] team0: Port device team_slave_0 added
[   87.940125][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.947178][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.973575][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.994069][ T5833] team0: Port device team_slave_1 added
[   88.001679][ T5831] team0: Port device team_slave_1 added
[   88.085645][ T5832] hsr_slave_0: entered promiscuous mode
[   88.091954][ T5832] hsr_slave_1: entered promiscuous mode
[   88.099528][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.106772][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.132996][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.145971][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.152917][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.178986][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.201751][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.209155][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.235442][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.247612][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.254558][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.281140][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.295978][ T5841] Bluetooth: hci2: command tx timeout
[   88.304949][ T5834] hsr_slave_0: entered promiscuous mode
[   88.311245][ T5834] hsr_slave_1: entered promiscuous mode
[   88.317819][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   88.323617][ T5834] Cannot create hsr debugfs directory
[   88.364743][ T5841] Bluetooth: hci0: command tx timeout
[   88.364844][ T5835] Bluetooth: hci1: command tx timeout
[   88.376208][ T5843] Bluetooth: hci3: command tx timeout
[   88.462952][ T5831] hsr_slave_0: entered promiscuous mode
[   88.469342][ T5831] hsr_slave_1: entered promiscuous mode
[   88.475629][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   88.481364][ T5831] Cannot create hsr debugfs directory
[   88.492009][ T5833] hsr_slave_0: entered promiscuous mode
[   88.498448][ T5833] hsr_slave_1: entered promiscuous mode
[   88.504446][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   88.510270][ T5833] Cannot create hsr debugfs directory
[   88.904327][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.919278][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.940542][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.952172][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.019211][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.044508][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.066294][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.089210][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.133288][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.153827][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.169673][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.197130][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.257416][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.272641][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.292299][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.308369][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.408201][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.453739][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   89.481322][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.499564][ T3376] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.506822][ T3376] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.528159][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.535296][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.592092][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.612598][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   89.646496][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.653630][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.678848][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   89.696484][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.703649][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.723410][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.730573][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.747313][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.765302][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.772428][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.871720][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   89.898361][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.905631][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.937849][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.945048][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.149755][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.308272][ T5832] veth0_vlan: entered promiscuous mode
[   90.346294][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.367144][ T5835] Bluetooth: hci2: command tx timeout
[   90.375402][ T5832] veth1_vlan: entered promiscuous mode
[   90.445328][ T5835] Bluetooth: hci0: command tx timeout
[   90.448761][ T5843] Bluetooth: hci1: command tx timeout
[   90.451186][ T5841] Bluetooth: hci3: command tx timeout
[   90.516704][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.524257][ T5832] veth0_macvtap: entered promiscuous mode
[   90.546182][ T5833] veth0_vlan: entered promiscuous mode
[   90.560531][ T5832] veth1_macvtap: entered promiscuous mode
[   90.571627][ T5833] veth1_vlan: entered promiscuous mode
[   90.624359][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.638129][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.666981][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.682008][ T1120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.693654][ T1120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.710422][ T1120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.727281][ T1120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.747405][ T5833] veth0_macvtap: entered promiscuous mode
[   90.764546][ T5834] veth0_vlan: entered promiscuous mode
[   90.773869][ T5833] veth1_macvtap: entered promiscuous mode
[   90.828393][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.841271][ T5834] veth1_vlan: entered promiscuous mode
[   90.870638][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.931152][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.941047][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.949171][ T1120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.958274][ T1120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.968058][ T5831] veth0_vlan: entered promiscuous mode
[   90.980096][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.003069][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.043812][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.052234][ T5831] veth1_vlan: entered promiscuous mode
[   91.060668][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.083357][ T5834] veth0_macvtap: entered promiscuous mode
[   91.100391][ T5834] veth1_macvtap: entered promiscuous mode
[   91.156908][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.192414][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.223808][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.246373][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.254268][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.258858][ T5831] veth0_macvtap: entered promiscuous mode
[   91.277158][ T1043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.286267][ T1043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.305385][ T1043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.322571][ T1120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.374298][ T5831] veth1_macvtap: entered promiscuous mode
[   91.401104][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.410229][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.450565][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.482791][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.553812][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.571817][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.604783][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.612649][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.631598][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.655997][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.709723][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.731380][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.874319][ T5929] netlink: zone id is out of range
[   91.898985][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.923776][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.981621][ T5929] netlink: zone id is out of range
[   91.996369][ T5929] netlink: zone id is out of range
[   92.055273][ T5929] netlink: zone id is out of range
[   92.063352][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.081347][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.084336][ T5929] netlink: zone id is out of range
[   92.116515][ T5929] netlink: zone id is out of range
[   92.116530][ T5929] netlink: zone id is out of range
[   92.116539][ T5929] netlink: zone id is out of range
[   92.116549][ T5929] netlink: zone id is out of range
[   92.116558][ T5929] netlink: zone id is out of range
[   92.190233][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.445120][ T5835] Bluetooth: hci2: command tx timeout
[   92.513599][ T5929] FAULT_INJECTION: forcing a failure.
[   92.513599][ T5929] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   92.527163][ T5841] Bluetooth: hci3: command tx timeout
[   92.527254][ T5835] Bluetooth: hci0: command tx timeout
[   92.527319][ T5835] Bluetooth: hci1: command tx timeout
[   92.534377][    T9] cfg80211: failed to load regulatory.db
[   92.575357][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.581967][ T5929] CPU: 1 UID: 7 PID: 5929 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) 
[   92.582000][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   92.582021][ T5929] Call Trace:
[   92.582030][ T5929]  <TASK>
[   92.582041][ T5929]  dump_stack_lvl+0x16c/0x1f0
[   92.582085][ T5929]  should_fail_ex+0x512/0x640
[   92.582117][ T5929]  should_fail_alloc_page+0xe7/0x130
[   92.582156][ T5929]  prepare_alloc_pages+0x401/0x670
[   92.582191][ T5929]  ? do_raw_spin_lock+0x12c/0x2b0
[   92.582221][ T5929]  __alloc_frozen_pages_noprof+0x18b/0x2430
[   92.582250][ T5929]  ? mark_held_locks+0x49/0x80
[   92.582271][ T5929]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   92.582301][ T5929]  ? lockdep_hardirqs_on+0x7c/0x110
[   92.582332][ T5929]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   92.582363][ T5929]  ? stack_depot_save_flags+0x3de/0x9b0
[   92.582398][ T5929]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   92.582425][ T5929]  ? kasan_save_stack+0x42/0x60
[   92.582454][ T5929]  ? kasan_save_track+0x14/0x30
[   92.582481][ T5929]  ? snd_pcm_attach_substream+0x441/0xd60
[   92.582509][ T5929]  ? snd_pcm_open_substream+0x8d/0x1820
[   92.582535][ T5929]  ? snd_pcm_oss_open+0x735/0x1400
[   92.582567][ T5929]  ? soundcore_open+0x40c/0x580
[   92.582595][ T5929]  ? chrdev_open+0x234/0x6a0
[   92.582626][ T5929]  ? do_dentry_open+0x748/0x1590
[   92.582656][ T5929]  ? vfs_open+0x82/0x3f0
[   92.582681][ T5929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.582713][ T5929]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   92.582758][ T5929]  ? policy_nodemask+0xea/0x4e0
[   92.582796][ T5929]  alloc_pages_mpol+0x1fb/0x550
[   92.582833][ T5929]  ? __pfx_alloc_pages_mpol+0x10/0x10
[   92.582876][ T5929]  alloc_pages_noprof+0x131/0x390
[   92.582909][ T5929]  alloc_pages_exact_noprof+0x37/0xe0
[   92.582934][ T5929]  snd_pcm_attach_substream+0x468/0xd60
[   92.582972][ T5929]  snd_pcm_open_substream+0x8d/0x1820
[   92.583001][ T5929]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[   92.583039][ T5929]  snd_pcm_oss_open+0x735/0x1400
[   92.583087][ T5929]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[   92.583122][ T5929]  ? __lock_acquire+0x12c2/0x2890
[   92.583145][ T5929]  ? __pfx_default_wake_function+0x10/0x10
[   92.583177][ T5929]  ? __lock_acquire+0x436/0x2890
[   92.583206][ T5929]  ? do_raw_spin_lock+0x12c/0x2b0
[   92.583236][ T5929]  ? soundcore_open+0x35a/0x580
[   92.583268][ T5929]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[   92.583304][ T5929]  soundcore_open+0x40c/0x580
[   92.583338][ T5929]  ? __pfx_soundcore_open+0x10/0x10
[   92.583388][ T5929]  chrdev_open+0x234/0x6a0
[   92.583424][ T5929]  ? __pfx_chrdev_open+0x10/0x10
[   92.583462][ T5929]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[   92.583503][ T5929]  do_dentry_open+0x748/0x1590
[   92.583533][ T5929]  ? __pfx_chrdev_open+0x10/0x10
[   92.583575][ T5929]  vfs_open+0x82/0x3f0
[   92.583604][ T5929]  path_openat+0x2078/0x3140
[   92.583647][ T5929]  ? __pfx_path_openat+0x10/0x10
[   92.583692][ T5929]  do_filp_open+0x20b/0x470
[   92.583730][ T5929]  ? __pfx_do_filp_open+0x10/0x10
[   92.583788][ T5929]  ? alloc_fd+0x471/0x7d0
[   92.583833][ T5929]  do_sys_openat2+0x121/0x290
[   92.583859][ T5929]  ? __pfx_do_sys_openat2+0x10/0x10
[   92.583901][ T5929]  __x64_sys_openat+0x174/0x210
[   92.583927][ T5929]  ? __pfx___x64_sys_openat+0x10/0x10
[   92.583967][ T5929]  do_syscall_64+0xcd/0xf80
[   92.584002][ T5929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.584026][ T5929] RIP: 0033:0x7f050ab8f7c9
[   92.584056][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.584079][ T5929] RSP: 002b:00007f050bade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   92.584101][ T5929] RAX: ffffffffffffffda RBX: 00007f050ade5fa0 RCX: 00007f050ab8f7c9
[   92.584117][ T5929] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c
[   92.584132][ T5929] RBP: 00007f050ac13f91 R08: 0000000000000000 R09: 0000000000000000
[   92.584146][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.584161][ T5929] R13: 00007f050ade6038 R14: 00007f050ade5fa0 R15: 00007fffa3a0c8f8
[   92.584197][ T5929]  </TASK>
[   92.953720][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.260227][ T5947] can: request_module (can-proto-5) failed.
[   93.573874][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'.
[   94.344918][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   94.534041][ T5965] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET)
[   94.536300][ T5841] Bluetooth: hci2: command tx timeout
[   94.605994][ T5841] Bluetooth: hci1: command tx timeout
[   94.607918][ T5843] Bluetooth: hci3: command tx timeout
[   94.611499][ T5835] Bluetooth: hci0: command tx timeout
[   94.855155][ T5957] Zero length message leads to an empty skb
[   95.001521][ T5979] kafs: addr_prefs: Too many elements in string
[   95.111057][ T5981] netlink: 'syz.3.14': attribute type 1 has an invalid length.
[   95.758433][ T5990] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   97.315162][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.323798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.332711][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   97.574988][    T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!!
[   97.586234][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   97.725923][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.135689][ T6056] kafs: addr_prefs: Too many elements in string
[   98.233420][ T6060] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[   98.605223][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   98.685560][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.925276][    T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!!
[   99.073835][ T6071] netlink: 350 bytes leftover after parsing attributes in process `syz.1.35'.
[   99.741242][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'.
[  101.229536][ T6116] mmap: syz.0.32 (6116) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  104.427340][ T6186] capability: warning: `syz.2.45' uses 32-bit capabilities (legacy support in use)
[  104.599152][ T6188] netlink: 25 bytes leftover after parsing attributes in process `syz.0.46'.
[  104.622888][   T30] audit: type=1800 audit(1766037423.160:2): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=8874 res=0 errno=0
[  104.812116][ T6191] futex_wake_op: syz.1.48 tries to shift op by -2048; fix this program
[  104.847121][ T6191] 0x74206d6100000001-0x74206d6100000066 : ""
[  104.861238][ T6191] mtd: partition "" is out of reach -- disabled
[  104.923027][ T6191] ftl_cs: FTL header not found.
[  105.928660][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'.
[  106.554031][ T6210] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  106.875392][ T6239] netlink: 338 bytes leftover after parsing attributes in process `syz.3.56'.
[  108.185823][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'.
[  108.216371][ T6272] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  108.257564][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'.
[  108.341166][ T6267] syz.3.61 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  108.444304][ T6279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  112.153959][ T6363] FAULT_INJECTION: forcing a failure.
[  112.153959][ T6363] name failslab, interval 1, probability 0, space 0, times 1
[  112.181416][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.1.73 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  112.181445][ T6363] Tainted: [L]=SOFTLOCKUP
[  112.181450][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  112.181459][ T6363] Call Trace:
[  112.181464][ T6363]  <TASK>
[  112.181471][ T6363]  dump_stack_lvl+0x16c/0x1f0
[  112.181495][ T6363]  should_fail_ex+0x512/0x640
[  112.181510][ T6363]  ? kmem_cache_alloc_noprof+0x62/0x770
[  112.181527][ T6363]  should_failslab+0xc2/0x120
[  112.181548][ T6363]  kmem_cache_alloc_noprof+0x83/0x770
[  112.181563][ T6363]  ? getname_flags.part.0+0x4c/0x550
[  112.181581][ T6363]  ? getname_flags.part.0+0x4c/0x550
[  112.181599][ T6363]  getname_flags.part.0+0x4c/0x550
[  112.181616][ T6363]  getname_flags+0x93/0xf0
[  112.181633][ T6363]  do_sys_openat2+0xb9/0x290
[  112.181649][ T6363]  ? __pfx_do_sys_openat2+0x10/0x10
[  112.181671][ T6363]  __x64_sys_openat+0x174/0x210
[  112.181686][ T6363]  ? __pfx___x64_sys_openat+0x10/0x10
[  112.181708][ T6363]  do_syscall_64+0xcd/0xf80
[  112.181728][ T6363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.181741][ T6363] RIP: 0033:0x7f050ab8f7c9
[  112.181753][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.181765][ T6363] RSP: 002b:00007f050bade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  112.181778][ T6363] RAX: ffffffffffffffda RBX: 00007f050ade5fa0 RCX: 00007f050ab8f7c9
[  112.181786][ T6363] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  112.181794][ T6363] RBP: 00007f050ac13f91 R08: 0000000000000000 R09: 0000000000000000
[  112.181801][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.181809][ T6363] R13: 00007f050ade6038 R14: 00007f050ade5fa0 R15: 00007fffa3a0c8f8
[  112.181827][ T6363]  </TASK>
[  112.393307][ T5835] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  112.667387][ T6377] process 'syz.1.73' launched ':,' with NULL argv: empty string added
[  113.314450][ T6372] net_ratelimit: 5 callbacks suppressed
[  113.314470][ T6372] netlink: set zone limit has 8 unknown bytes
[  113.521463][ T6371] ubi0: attaching mtd0
[  113.533116][ T6371] ubi0: scanning is finished
[  113.544745][ T6371] ubi0: empty MTD device detected
[  113.875803][ T6371] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  114.126109][ T6396] netlink: 909 bytes leftover after parsing attributes in process `syz.0.79'.
[  114.244879][ T6408] FAULT_INJECTION: forcing a failure.
[  114.244879][ T6408] name failslab, interval 1, probability 0, space 0, times 0
[  114.323150][ T6422] netlink: 'syz.3.83': attribute type 27 has an invalid length.
[  114.439778][ T6422] netlink: 334 bytes leftover after parsing attributes in process `syz.3.83'.
[  114.542283][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.2.80 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  114.542314][ T6408] Tainted: [L]=SOFTLOCKUP
[  114.542329][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.542339][ T6408] Call Trace:
[  114.542345][ T6408]  <TASK>
[  114.542352][ T6408]  dump_stack_lvl+0x16c/0x1f0
[  114.542382][ T6408]  should_fail_ex+0x512/0x640
[  114.542401][ T6408]  ? kmem_cache_alloc_noprof+0x62/0x770
[  114.542425][ T6408]  should_failslab+0xc2/0x120
[  114.542451][ T6408]  kmem_cache_alloc_noprof+0x83/0x770
[  114.542471][ T6408]  ? __x64_sys_futex+0x1e0/0x4c0
[  114.542490][ T6408]  ? getname_flags.part.0+0x4c/0x550
[  114.542516][ T6408]  ? getname_flags.part.0+0x4c/0x550
[  114.542534][ T6408]  getname_flags.part.0+0x4c/0x550
[  114.542557][ T6408]  getname_flags+0x93/0xf0
[  114.542581][ T6408]  __x64_sys_mknod+0x74/0xb0
[  114.542605][ T6408]  do_syscall_64+0xcd/0xf80
[  114.542631][ T6408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.542649][ T6408] RIP: 0033:0x7ffbabb8f7c9
[  114.542665][ T6408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.542681][ T6408] RSP: 002b:00007ffbac97b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  114.542699][ T6408] RAX: ffffffffffffffda RBX: 00007ffbabde5fa0 RCX: 00007ffbabb8f7c9
[  114.542714][ T6408] RDX: 0000000000008001 RSI: 0000000000000003 RDI: 0000000000000000
[  114.542726][ T6408] RBP: 00007ffbabc13f91 R08: 0000000000000000 R09: 0000000000000000
[  114.542738][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.542750][ T6408] R13: 00007ffbabde6038 R14: 00007ffbabde5fa0 R15: 00007fff0c6eba68
[  114.542780][ T6408]  </TASK>
[  114.730413][ T5835] Bluetooth: hci0: command 0x2016 tx timeout
[  115.549541][ T6443] FAULT_INJECTION: forcing a failure.
[  115.549541][ T6443] name failslab, interval 1, probability 0, space 0, times 0
[  115.579889][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.3.87 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.579926][ T6443] Tainted: [L]=SOFTLOCKUP
[  115.579933][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  115.579946][ T6443] Call Trace:
[  115.579953][ T6443]  <TASK>
[  115.579963][ T6443]  dump_stack_lvl+0x16c/0x1f0
[  115.580004][ T6443]  should_fail_ex+0x512/0x640
[  115.580030][ T6443]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  115.580062][ T6443]  should_failslab+0xc2/0x120
[  115.580095][ T6443]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  115.580128][ T6443]  ? __pfx___might_resched+0x10/0x10
[  115.580161][ T6443]  ? sock_alloc_inode+0x25/0x1c0
[  115.580207][ T6443]  ? __pfx_sock_alloc_inode+0x10/0x10
[  115.580234][ T6443]  ? sock_alloc_inode+0x25/0x1c0
[  115.580261][ T6443]  sock_alloc_inode+0x25/0x1c0
[  115.580289][ T6443]  alloc_inode+0x64/0x240
[  115.580311][ T6443]  sock_alloc+0x40/0x280
[  115.580337][ T6443]  __sock_create+0xc2/0x8a0
[  115.580368][ T6443]  __sys_socket+0x14d/0x260
[  115.580390][ T6443]  ? __pfx___sys_socket+0x10/0x10
[  115.580413][ T6443]  ? xfd_validate_state+0x61/0x180
[  115.580443][ T6443]  __x64_sys_socket+0x72/0xb0
[  115.580463][ T6443]  ? lockdep_hardirqs_on+0x7c/0x110
[  115.580496][ T6443]  do_syscall_64+0xcd/0xf80
[  115.580526][ T6443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.580549][ T6443] RIP: 0033:0x7f8c1418f7c9
[  115.580568][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.580589][ T6443] RSP: 002b:00007f8c123ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  115.580611][ T6443] RAX: ffffffffffffffda RBX: 00007f8c143e5fa0 RCX: 00007f8c1418f7c9
[  115.580627][ T6443] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  115.580639][ T6443] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 0000000000000000
[  115.580652][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.580666][ T6443] R13: 00007f8c143e6038 R14: 00007f8c143e5fa0 R15: 00007ffd011578c8
[  115.580699][ T6443]  </TASK>
[  115.580743][ T6443] socket: no more sockets
[  116.264103][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'.
[  116.291883][ T6457] netlink: 25 bytes leftover after parsing attributes in process `syz.3.89'.
[  116.766336][ T5843] Bluetooth: hci0: command 0x2016 tx timeout
[  117.016051][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.92'.
[  118.614687][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  119.312867][ T6501] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  119.329280][ T6501] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  119.348433][ T6501] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  119.359365][ T6501] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  119.367383][ T6501] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  119.377354][ T6501] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  119.388296][ T6501] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  119.394400][ T6501] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  119.431189][ T6501] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  119.438859][ T6501] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  119.446955][ T6501] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  119.463024][ T6501] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  119.780884][ T6532] FAULT_INJECTION: forcing a failure.
[  119.780884][ T6532] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  119.822560][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.3.104 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  119.822603][ T6532] Tainted: [L]=SOFTLOCKUP
[  119.822612][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  119.822630][ T6532] Call Trace:
[  119.822638][ T6532]  <TASK>
[  119.822647][ T6532]  dump_stack_lvl+0x16c/0x1f0
[  119.822702][ T6532]  should_fail_ex+0x512/0x640
[  119.822734][ T6532]  should_fail_alloc_page+0xe7/0x130
[  119.822772][ T6532]  prepare_alloc_pages+0x401/0x670
[  119.822806][ T6532]  ? rcu_is_watching+0x12/0xc0
[  119.822842][ T6532]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  119.822878][ T6532]  ? stack_trace_save+0x8e/0xc0
[  119.822910][ T6532]  ? __pfx_stack_trace_save+0x10/0x10
[  119.822943][ T6532]  ? stack_depot_save_flags+0x29/0x9b0
[  119.822968][ T6532]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  119.822999][ T6532]  ? kasan_save_stack+0x42/0x60
[  119.823027][ T6532]  ? kasan_save_stack+0x33/0x60
[  119.823052][ T6532]  ? kasan_save_track+0x14/0x30
[  119.823078][ T6532]  ? __kasan_kmalloc+0xaa/0xb0
[  119.823103][ T6532]  ? mon_bin_open+0x1a8/0x4a0
[  119.823137][ T6532]  ? do_sys_openat2+0x121/0x290
[  119.823161][ T6532]  ? __x64_sys_openat+0x174/0x210
[  119.823184][ T6532]  ? do_syscall_64+0xcd/0xf80
[  119.823214][ T6532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.823246][ T6532]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  119.823282][ T6532]  ? policy_nodemask+0xea/0x4e0
[  119.823318][ T6532]  alloc_pages_mpol+0x1fb/0x550
[  119.823352][ T6532]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  119.823395][ T6532]  alloc_pages_noprof+0x131/0x390
[  119.823429][ T6532]  get_zeroed_page_noprof+0x18/0xb0
[  119.823463][ T6532]  mon_alloc_buff+0xce/0x1b0
[  119.823493][ T6532]  ? kasan_save_track+0x14/0x30
[  119.823536][ T6532]  mon_bin_open+0x207/0x4a0
[  119.823574][ T6532]  ? __pfx_mon_bin_open+0x10/0x10
[  119.823607][ T6532]  chrdev_open+0x234/0x6a0
[  119.823640][ T6532]  ? __pfx_apparmor_file_open+0x10/0x10
[  119.823665][ T6532]  ? __pfx_chrdev_open+0x10/0x10
[  119.823700][ T6532]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  119.823743][ T6532]  do_dentry_open+0x748/0x1590
[  119.823773][ T6532]  ? __pfx_chrdev_open+0x10/0x10
[  119.823816][ T6532]  vfs_open+0x82/0x3f0
[  119.823846][ T6532]  path_openat+0x2078/0x3140
[  119.823891][ T6532]  ? __pfx_path_openat+0x10/0x10
[  119.823938][ T6532]  do_filp_open+0x20b/0x470
[  119.823971][ T6532]  ? __pfx_do_filp_open+0x10/0x10
[  119.824026][ T6532]  ? alloc_fd+0x471/0x7d0
[  119.824069][ T6532]  do_sys_openat2+0x121/0x290
[  119.824091][ T6532]  ? __pfx_do_sys_openat2+0x10/0x10
[  119.824126][ T6532]  __x64_sys_openat+0x174/0x210
[  119.824151][ T6532]  ? __pfx___x64_sys_openat+0x10/0x10
[  119.824192][ T6532]  do_syscall_64+0xcd/0xf80
[  119.824227][ T6532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.824251][ T6532] RIP: 0033:0x7f8c1418f7c9
[  119.824281][ T6532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.824306][ T6532] RSP: 002b:00007f8c123ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  119.824329][ T6532] RAX: ffffffffffffffda RBX: 00007f8c143e5fa0 RCX: 00007f8c1418f7c9
[  119.824343][ T6532] RDX: 0000000000121200 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  119.824358][ T6532] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 0000000000000000
[  119.824370][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.824383][ T6532] R13: 00007f8c143e6038 R14: 00007f8c143e5fa0 R15: 00007ffd011578c8
[  119.824419][ T6532]  </TASK>
[  120.473046][ T6560] bond0: invalid ARP target specified
[  120.569749][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'.
[  121.066539][ T6539] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  121.087408][ T6539] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  121.108072][ T6539] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  121.119557][ T6539] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  122.153665][ T6595] kfence: disabled
[  122.161449][ T6595] kfence: re-enabled
[  122.447141][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  122.999502][ T6614] FAULT_INJECTION: forcing a failure.
[  122.999502][ T6614] name fail_futex, interval 1, probability 0, space 0, times 1
[  123.046048][ T6614] CPU: 0 UID: 0 PID: 6614 Comm: syz.2.120 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  123.046085][ T6614] Tainted: [L]=SOFTLOCKUP
[  123.046093][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  123.046105][ T6614] Call Trace:
[  123.046113][ T6614]  <TASK>
[  123.046122][ T6614]  dump_stack_lvl+0x16c/0x1f0
[  123.046159][ T6614]  should_fail_ex+0x512/0x640
[  123.046197][ T6614]  get_futex_key+0x1d0/0x15f0
[  123.046227][ T6614]  ? __pfx_get_futex_key+0x10/0x10
[  123.046262][ T6614]  futex_wake+0xea/0x530
[  123.046295][ T6614]  ? __pfx_futex_wake+0x10/0x10
[  123.046338][ T6614]  do_futex+0x1e3/0x350
[  123.046364][ T6614]  ? __pfx_do_futex+0x10/0x10
[  123.046386][ T6614]  ? __might_fault+0xe3/0x190
[  123.046420][ T6614]  mm_release+0x24e/0x300
[  123.046451][ T6614]  do_exit+0x69e/0x2bd0
[  123.046479][ T6614]  ? __pfx_do_exit+0x10/0x10
[  123.046500][ T6614]  ? do_raw_spin_lock+0x12c/0x2b0
[  123.046525][ T6614]  ? find_held_lock+0x2b/0x80
[  123.046558][ T6614]  do_group_exit+0xd3/0x2a0
[  123.046582][ T6614]  get_signal+0x2671/0x26d0
[  123.046619][ T6614]  ? __lock_acquire+0x436/0x2890
[  123.046642][ T6614]  ? __pfx_get_signal+0x10/0x10
[  123.046674][ T6614]  ? do_futex+0x122/0x350
[  123.046701][ T6614]  arch_do_signal_or_restart+0x8f/0x7a0
[  123.046734][ T6614]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  123.046773][ T6614]  ? __fget_files+0x20e/0x3c0
[  123.046802][ T6614]  ? __pfx___x64_sys_futex+0x10/0x10
[  123.046833][ T6614]  exit_to_user_mode_loop+0x8c/0x540
[  123.046865][ T6614]  do_syscall_64+0x4ee/0xf80
[  123.046899][ T6614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.046922][ T6614] RIP: 0033:0x7ffbabb8f7c9
[  123.046941][ T6614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.046961][ T6614] RSP: 002b:00007ffbac97b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  123.046983][ T6614] RAX: fffffffffffffe00 RBX: 00007ffbabde5fa8 RCX: 00007ffbabb8f7c9
[  123.046998][ T6614] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffbabde5fa8
[  123.047011][ T6614] RBP: 00007ffbabde5fa0 R08: 0000000000000000 R09: 0000000000000000
[  123.047025][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.047037][ T6614] R13: 00007ffbabde6038 R14: 00007fff0c6eb980 R15: 00007fff0c6eba68
[  123.047070][ T6614]  </TASK>
[  123.164725][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout
[  123.298243][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  123.304275][ T5841] Bluetooth: hci0: command 0x2016 tx timeout
[  124.288316][ T6650] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5
[  124.449345][ T6650] input: failed to attach handler evdev to device input5, error: -4
[  124.526215][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  125.100054][ T6661] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000
[  125.205972][ T6661] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  125.214505][ T6661] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  125.235564][ T6661] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000
[  125.244380][ T6661] raw: ffff888078000000 0000000000000000 00000008ffffffff 0000000000000000
[  125.254660][ T6661] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000
[  125.296552][ T6661] head: ffff888078000000 0000000000000000 00000008ffffffff 0000000000000000
[  125.328588][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  125.334687][ T5841] Bluetooth: hci0: command 0x2016 tx timeout
[  125.335744][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[  125.380215][ T6661] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[  125.436148][ T6661] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  125.522912][ T6661] page dumped because: unmovable page
[  125.566565][ T6661] page_owner tracks the page as allocated
[  125.582276][ T6661] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5763, tgid 5763 (dhcpcd-run-hook), ts 71831355573, free_ts 69331725933
[  125.717156][ T6672] random: crng reseeded on system resumption
[  125.753962][ T6661]  post_alloc_hook+0x1af/0x220
[  125.760066][ T6661]  get_page_from_freelist+0xd0b/0x31a0
[  125.765623][ T6661]  __alloc_frozen_pages_noprof+0x25f/0x2430
[  125.771644][ T6661]  alloc_pages_mpol+0x1fb/0x550
[  125.776633][ T6661]  alloc_pages_noprof+0x131/0x390
[  125.781783][ T6661]  skb_page_frag_refill+0x186/0x5c0
[  125.787098][ T6661]  try_fill_recv+0x7e4/0x2930
[  125.791798][ T6661]  virtnet_poll+0x18d5/0x3e00
[  125.797417][ T6661]  __napi_poll.constprop.0+0xb3/0x540
[  125.802970][ T6661]  net_rx_action+0x9f9/0xfa0
[  125.809635][ T5841] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  125.809689][ T6661]  handle_softirqs+0x219/0x950
[  125.822087][ T6661]  __irq_exit_rcu+0x109/0x170
[  125.826864][ T6661]  irq_exit_rcu+0x9/0x30
[  125.831131][ T6661]  common_interrupt+0xbf/0xe0
[  125.835976][ T6661]  asm_common_interrupt+0x26/0x40
[  125.842458][ T6661] page last free pid 5703 tgid 5703 stack trace:
[  125.849112][ T6661]  __free_frozen_pages+0x7df/0x1170
[  125.854342][ T6661]  __put_partials+0x130/0x170
[  125.859714][ T6661]  qlist_free_all+0x4c/0xf0
[  125.864266][ T6661]  kasan_quarantine_reduce+0x195/0x1e0
[  125.870054][ T6661]  __kasan_slab_alloc+0x69/0x90
[  125.875011][ T6661]  kmem_cache_alloc_noprof+0x25e/0x770
[  125.880597][ T6661]  vm_area_alloc+0x1f/0x160
[  125.885197][ T6661]  __mmap_region+0x107a/0x2a00
[  125.889980][ T6661]  mmap_region+0x1ab/0x3f0
[  125.894540][ T6661]  do_mmap+0xa3e/0x1210
[  125.898765][ T6661]  vm_mmap_pgoff+0x29e/0x470
[  125.903394][ T6661]  ksys_mmap_pgoff+0x32c/0x5c0
[  125.908349][ T6661]  __x64_sys_mmap+0x125/0x190
[  125.913056][ T6661]  do_syscall_64+0xcd/0xf80
[  125.917788][ T6661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.261983][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'.
[  126.427204][ T6708] netlink: 206 bytes leftover after parsing attributes in process `syz.2.134'.
[  126.450252][ T6712] netlink: 206 bytes leftover after parsing attributes in process `syz.0.138'.
[  126.604648][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout
[  127.006525][ T5841] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6
[  127.064847][ T5841] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6
[  127.409800][ T5841] Bluetooth: hci0: command 0x2016 tx timeout
[  127.423183][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout
[  127.430062][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[  127.853077][ T6750] bond0: option all_slaves_active: invalid value ()
[  128.395032][ T6763] can: request_module (can-proto-4) failed.
[  128.428643][ T6774] random: crng reseeded on system resumption
[  128.457406][   T30] audit: type=1800 audit(1766037447.020:3): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  128.502594][ T6763] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.150' sets config #0
[  129.286916][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'.
[  131.409178][ T6856] netlink: 346 bytes leftover after parsing attributes in process `syz.0.168'.
[  133.900228][ T6896] FAULT_INJECTION: forcing a failure.
[  133.900228][ T6896] name failslab, interval 1, probability 0, space 0, times 0
[  133.941010][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz.3.177 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  133.941050][ T6896] Tainted: [L]=SOFTLOCKUP
[  133.941059][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  133.941073][ T6896] Call Trace:
[  133.941082][ T6896]  <TASK>
[  133.941091][ T6896]  dump_stack_lvl+0x16c/0x1f0
[  133.941131][ T6896]  should_fail_ex+0x512/0x640
[  133.941155][ T6896]  ? __kvmalloc_node_noprof+0x129/0xa40
[  133.941189][ T6896]  should_failslab+0xc2/0x120
[  133.941222][ T6896]  __kvmalloc_node_noprof+0x14a/0xa40
[  133.941260][ T6896]  ? sk_alloc+0x57e/0xe30
[  133.941287][ T6896]  ? tap_open+0x38a/0x1170
[  133.941321][ T6896]  ? tap_open+0x38a/0x1170
[  133.941346][ T6896]  tap_open+0x38a/0x1170
[  133.941377][ T6896]  ? __pfx_tap_open+0x10/0x10
[  133.941403][ T6896]  chrdev_open+0x234/0x6a0
[  133.941438][ T6896]  ? __pfx_chrdev_open+0x10/0x10
[  133.941474][ T6896]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  133.941517][ T6896]  do_dentry_open+0x748/0x1590
[  133.941548][ T6896]  ? __pfx_chrdev_open+0x10/0x10
[  133.941592][ T6896]  vfs_open+0x82/0x3f0
[  133.941622][ T6896]  path_openat+0x2078/0x3140
[  133.941667][ T6896]  ? __pfx_path_openat+0x10/0x10
[  133.941713][ T6896]  do_filp_open+0x20b/0x470
[  133.941747][ T6896]  ? __pfx_do_filp_open+0x10/0x10
[  133.941808][ T6896]  ? alloc_fd+0x471/0x7d0
[  133.941850][ T6896]  do_sys_openat2+0x121/0x290
[  133.941876][ T6896]  ? __pfx_do_sys_openat2+0x10/0x10
[  133.941917][ T6896]  __x64_sys_openat+0x174/0x210
[  133.941944][ T6896]  ? __pfx___x64_sys_openat+0x10/0x10
[  133.941984][ T6896]  do_syscall_64+0xcd/0xf80
[  133.942020][ T6896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.942049][ T6896] RIP: 0033:0x7f8c1418f7c9
[  133.942070][ T6896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.942093][ T6896] RSP: 002b:00007f8c123cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  133.942116][ T6896] RAX: ffffffffffffffda RBX: 00007f8c143e6090 RCX: 00007f8c1418f7c9
[  133.942132][ T6896] RDX: 0000000000080000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  133.942148][ T6896] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 0000000000000000
[  133.942163][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.942177][ T6896] R13: 00007f8c143e6128 R14: 00007f8c143e6090 R15: 00007ffd011578c8
[  133.942214][ T6896]  </TASK>
[  134.400520][ T6898] syz.1.178 (6898) used greatest stack depth: 19688 bytes left
[  134.475405][ T6895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'.
[  135.545113][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'.
[  135.711963][ T6940] binder: 6933:6940 ioctl 4010620d 9 returned -22
[  135.856423][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'.
[  136.006326][ T6949] vhci_hcd: pdev 6806809
[  136.033485][ T6944] zswap: compressor  not available
[  136.654375][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'.
[  136.673922][ T6963] netlink: 13 bytes leftover after parsing attributes in process `syz.1.191'.
[  136.807196][ T6969] tipc: Started in network mode
[  136.814790][ T6969] tipc: Node identity ee00, cluster identity 4711
[  136.827452][ T6969] tipc: Node number set to 60928
[  137.679181][ T6984] FAULT_INJECTION: forcing a failure.
[  137.679181][ T6984] name failslab, interval 1, probability 0, space 0, times 0
[  137.716253][ T6984] CPU: 1 UID: 0 PID: 6984 Comm: syz.1.195 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  137.716294][ T6984] Tainted: [L]=SOFTLOCKUP
[  137.716302][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  137.716316][ T6984] Call Trace:
[  137.716324][ T6984]  <TASK>
[  137.716334][ T6984]  dump_stack_lvl+0x16c/0x1f0
[  137.716374][ T6984]  should_fail_ex+0x512/0x640
[  137.716400][ T6984]  ? __kmalloc_cache_noprof+0x5f/0x800
[  137.716428][ T6984]  should_failslab+0xc2/0x120
[  137.716464][ T6984]  __kmalloc_cache_noprof+0x80/0x800
[  137.716489][ T6984]  ? do_user_addr_fault+0x829/0x1370
[  137.716517][ T6984]  ? system_heap_allocate+0xe8/0x10a0
[  137.716547][ T6984]  ? system_heap_allocate+0xe8/0x10a0
[  137.716571][ T6984]  system_heap_allocate+0xe8/0x10a0
[  137.716595][ T6984]  ? irqentry_exit+0x1dd/0x8c0
[  137.716637][ T6984]  ? lockdep_hardirqs_on+0x7c/0x110
[  137.716669][ T6984]  ? irqentry_exit+0x1dd/0x8c0
[  137.716701][ T6984]  ? trace_irq_disable.constprop.0+0xd4/0x110
[  137.716741][ T6984]  ? __pfx_system_heap_allocate+0x10/0x10
[  137.716777][ T6984]  ? rep_movs_alternative+0x4a/0x90
[  137.716807][ T6984]  dma_heap_ioctl+0x385/0x610
[  137.716833][ T6984]  ? __pfx_dma_heap_ioctl+0x10/0x10
[  137.716851][ T6984]  ? find_held_lock+0x2b/0x80
[  137.716896][ T6984]  ? __pfx_dma_heap_ioctl+0x10/0x10
[  137.716921][ T6984]  __x64_sys_ioctl+0x18e/0x210
[  137.716952][ T6984]  do_syscall_64+0xcd/0xf80
[  137.716987][ T6984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.717011][ T6984] RIP: 0033:0x7f050ab8f7c9
[  137.717032][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.717055][ T6984] RSP: 002b:00007f050bade038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  137.717079][ T6984] RAX: ffffffffffffffda RBX: 00007f050ade5fa0 RCX: 00007f050ab8f7c9
[  137.717095][ T6984] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000005
[  137.717111][ T6984] RBP: 00007f050ac13f91 R08: 0000000000000000 R09: 0000000000000000
[  137.717125][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.717139][ T6984] R13: 00007f050ade6038 R14: 00007f050ade5fa0 R15: 00007fffa3a0c8f8
[  137.717173][ T6984]  </TASK>
[  138.612678][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  138.619257][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  138.934211][ T7016] FAULT_INJECTION: forcing a failure.
[  138.934211][ T7016] name failslab, interval 1, probability 0, space 0, times 0
[  138.973940][ T7016] CPU: 0 UID: 0 PID: 7016 Comm: syz.2.202 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  138.973982][ T7016] Tainted: [L]=SOFTLOCKUP
[  138.973992][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  138.974007][ T7016] Call Trace:
[  138.974015][ T7016]  <TASK>
[  138.974026][ T7016]  dump_stack_lvl+0x16c/0x1f0
[  138.974068][ T7016]  should_fail_ex+0x512/0x640
[  138.974094][ T7016]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  138.974129][ T7016]  should_failslab+0xc2/0x120
[  138.974163][ T7016]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  138.974193][ T7016]  ? alloc_inode+0xc3/0x240
[  138.974226][ T7016]  ? alloc_inode+0xc3/0x240
[  138.974250][ T7016]  alloc_inode+0xc3/0x240
[  138.974277][ T7016]  iget_locked+0x1d9/0x6d0
[  138.974305][ T7016]  ? __pfx_iget_locked+0x10/0x10
[  138.974332][ T7016]  ? kernfs_root+0xee/0x2a0
[  138.974366][ T7016]  kernfs_get_inode+0x46/0x470
[  138.974394][ T7016]  kernfs_iop_lookup+0x1a7/0x2d0
[  138.974427][ T7016]  __lookup_slow+0x251/0x460
[  138.974455][ T7016]  ? __pfx___lookup_slow+0x10/0x10
[  138.974512][ T7016]  ? __d_lookup+0x266/0x4a0
[  138.974551][ T7016]  lookup_slow+0x50/0x70
[  138.974580][ T7016]  link_path_walk+0x12d8/0x1c70
[  138.974624][ T7016]  path_openat+0x1bd/0x3140
[  138.974655][ T7016]  ? do_syscall_64+0xcd/0xf80
[  138.974686][ T7016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.974722][ T7016]  ? __pfx_path_openat+0x10/0x10
[  138.974769][ T7016]  do_filp_open+0x20b/0x470
[  138.974804][ T7016]  ? __pfx_do_filp_open+0x10/0x10
[  138.974866][ T7016]  ? alloc_fd+0x471/0x7d0
[  138.974910][ T7016]  do_sys_openat2+0x121/0x290
[  138.974937][ T7016]  ? __pfx_do_sys_openat2+0x10/0x10
[  138.974978][ T7016]  __x64_sys_openat+0x174/0x210
[  138.975006][ T7016]  ? __pfx___x64_sys_openat+0x10/0x10
[  138.975044][ T7016]  do_syscall_64+0xcd/0xf80
[  138.975075][ T7016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.975099][ T7016] RIP: 0033:0x7ffbabb8f7c9
[  138.975119][ T7016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.975142][ T7016] RSP: 002b:00007ffbac97b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  138.975166][ T7016] RAX: ffffffffffffffda RBX: 00007ffbabde5fa0 RCX: 00007ffbabb8f7c9
[  138.975182][ T7016] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  138.975197][ T7016] RBP: 00007ffbabc13f91 R08: 0000000000000000 R09: 0000000000000000
[  138.975211][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.975225][ T7016] R13: 00007ffbabde6038 R14: 00007ffbabde5fa0 R15: 00007fff0c6eba68
[  138.975260][ T7016]  </TASK>
[  139.603694][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'.
[  139.617733][ T7029] FAULT_INJECTION: forcing a failure.
[  139.617733][ T7029] name failslab, interval 1, probability 0, space 0, times 0
[  139.630663][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.2.205 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  139.630698][ T7029] Tainted: [L]=SOFTLOCKUP
[  139.630706][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  139.630719][ T7029] Call Trace:
[  139.630727][ T7029]  <TASK>
[  139.630736][ T7029]  dump_stack_lvl+0x16c/0x1f0
[  139.630772][ T7029]  should_fail_ex+0x512/0x640
[  139.630797][ T7029]  ? __kmalloc_cache_noprof+0x5f/0x800
[  139.630825][ T7029]  should_failslab+0xc2/0x120
[  139.630857][ T7029]  __kmalloc_cache_noprof+0x80/0x800
[  139.630882][ T7029]  ? rcu_is_watching+0x12/0xc0
[  139.630910][ T7029]  ? __request_module+0x2ad/0x660
[  139.630936][ T7029]  ? lockdep_hardirqs_on+0x7c/0x110
[  139.630969][ T7029]  ? __request_module+0x2ad/0x660
[  139.630994][ T7029]  __request_module+0x2ad/0x660
[  139.631019][ T7029]  ? __pfx___request_module+0x10/0x10
[  139.631062][ T7029]  ? find_held_lock+0x2b/0x80
[  139.631098][ T7029]  inet_create+0xa97/0x1040
[  139.631125][ T7029]  ? inet_create+0x93/0x1040
[  139.631154][ T7029]  __sock_create+0x339/0x8a0
[  139.631194][ T7029]  __sys_socket+0x14d/0x260
[  139.631214][ T7029]  ? fput+0x70/0xf0
[  139.631235][ T7029]  ? __pfx___sys_socket+0x10/0x10
[  139.631255][ T7029]  ? xfd_validate_state+0x61/0x180
[  139.631275][ T7029]  ? __pfx_ksys_write+0x10/0x10
[  139.631311][ T7029]  __x64_sys_socket+0x72/0xb0
[  139.631330][ T7029]  ? lockdep_hardirqs_on+0x7c/0x110
[  139.631359][ T7029]  do_syscall_64+0xcd/0xf80
[  139.631391][ T7029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.631414][ T7029] RIP: 0033:0x7ffbabb8f7c9
[  139.631433][ T7029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.631460][ T7029] RSP: 002b:00007ffbac97b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  139.631481][ T7029] RAX: ffffffffffffffda RBX: 00007ffbabde5fa0 RCX: 00007ffbabb8f7c9
[  139.631496][ T7029] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002
[  139.631508][ T7029] RBP: 00007ffbabc13f91 R08: 0000000000000000 R09: 0000000000000000
[  139.631521][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.631534][ T7029] R13: 00007ffbabde6038 R14: 00007ffbabde5fa0 R15: 00007fff0c6eba68
[  139.631568][ T7029]  </TASK>
[  140.356817][ T7050] ubi0: attaching mtd0
[  140.363135][ T7050] ubi0: scanning is finished
[  140.798691][ T7050] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  140.824807][ T7050] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  140.835496][ T7050] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  140.857455][ T7050] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  140.865036][ T7050] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  140.875222][ T7050] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  140.972197][ T7050] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 855469772
[  140.993732][ T7050] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  141.016121][ T7051] ubi0: detaching mtd0
[  141.030935][ T7059] ubi0: background thread "ubi_bgt0d" started, PID 7059
[  141.167913][ T7051] ubi0: mtd0 is detached
[  141.414066][ T5843] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260
[  141.414101][ T5843] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260
[  141.429228][ T5843] Bluetooth: hci2: Dropping invalid advertising data
[  141.436321][ T5843] Bluetooth: hci2: unknown advertising packet type: 0xe9
[  141.436343][ T5843] Bluetooth: hci2: unknown advertising packet type: 0xbd
[  141.443860][ T5843] Bluetooth: hci2: Dropping invalid advertising data
[  141.457962][ T5843] Bluetooth: hci2: Malformed LE Event: 0x02
[  142.909972][ T7098] sysfs_service_op_store: Client not running :-5:
[  142.993243][ T7099] lo: entered allmulticast mode
[  143.055737][ T7099] lo: left allmulticast mode
[  143.477702][ T7108] netlink: 146 bytes leftover after parsing attributes in process `syz.0.223'.
[  144.903820][   T30] audit: type=1800 audit(1766037463.460:4): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.228" name="lu_gp_id" dev="configfs" ino=14341 res=0 errno=0
[  145.273303][ T7166] futex_wake_op: syz.3.232 tries to shift op by -2048; fix this program
[  145.348159][ T7168] FAULT_INJECTION: forcing a failure.
[  145.348159][ T7168] name failslab, interval 1, probability 0, space 0, times 0
[  145.410233][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.0.231 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.410273][ T7168] Tainted: [L]=SOFTLOCKUP
[  145.410282][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  145.410296][ T7168] Call Trace:
[  145.410304][ T7168]  <TASK>
[  145.410313][ T7168]  dump_stack_lvl+0x16c/0x1f0
[  145.410355][ T7168]  should_fail_ex+0x512/0x640
[  145.410382][ T7168]  ? fs_reclaim_acquire+0xae/0x150
[  145.410421][ T7168]  should_failslab+0xc2/0x120
[  145.410453][ T7168]  kmem_cache_alloc_noprof+0x83/0x770
[  145.410478][ T7168]  ? __pfx_map_id_range_down+0x10/0x10
[  145.410506][ T7168]  ? security_inode_alloc+0x3b/0x2b0
[  145.410531][ T7168]  ? security_inode_alloc+0x3b/0x2b0
[  145.410550][ T7168]  security_inode_alloc+0x3b/0x2b0
[  145.410575][ T7168]  inode_init_always_gfp+0xced/0x1040
[  145.410611][ T7168]  alloc_inode+0x86/0x240
[  145.410634][ T7168]  sock_alloc+0x40/0x280
[  145.410664][ T7168]  __sock_create+0xc2/0x8a0
[  145.410701][ T7168]  __sys_socket+0x14d/0x260
[  145.410721][ T7168]  ? fput+0x70/0xf0
[  145.410740][ T7168]  ? __pfx___sys_socket+0x10/0x10
[  145.410762][ T7168]  ? xfd_validate_state+0x61/0x180
[  145.410791][ T7168]  __x64_sys_socket+0x72/0xb0
[  145.410810][ T7168]  ? lockdep_hardirqs_on+0x7c/0x110
[  145.410839][ T7168]  do_syscall_64+0xcd/0xf80
[  145.410873][ T7168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.410897][ T7168] RIP: 0033:0x7f59edb8f7c9
[  145.410918][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.410940][ T7168] RSP: 002b:00007f59ee9ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  145.410962][ T7168] RAX: ffffffffffffffda RBX: 00007f59edde5fa0 RCX: 00007f59edb8f7c9
[  145.410979][ T7168] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  145.410993][ T7168] RBP: 00007f59edc13f91 R08: 0000000000000000 R09: 0000000000000000
[  145.411015][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.411029][ T7168] R13: 00007f59edde6038 R14: 00007f59edde5fa0 R15: 00007ffd699c7558
[  145.411060][ T7168]  </TASK>
[  145.412466][ T7168] socket: no more sockets
[  145.991391][ T7174] can: request_module (can-proto-0) failed.
[  146.045197][ T7177] mkiss: ax0: crc mode is auto.
[  147.043769][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'.
[  147.544728][   T30] audit: type=1804 audit(1766037466.100:5): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.244" name="/newroot/58/file0" dev="tmpfs" ino=322 res=1 errno=0
[  147.604494][   T30] audit: type=1804 audit(1766037466.100:6): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.244" name="/newroot/58/file0" dev="tmpfs" ino=322 res=1 errno=0
[  147.664966][   T30] audit: type=1800 audit(1766037466.150:7): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.244" name="file0" dev="tmpfs" ino=322 res=0 errno=0
[  148.494320][ T7244] netlink: 342 bytes leftover after parsing attributes in process `syz.1.251'.
[  149.723994][ T7287] FAULT_INJECTION: forcing a failure.
[  149.723994][ T7287] name fail_futex, interval 1, probability 0, space 0, times 0
[  149.736979][ T7287] CPU: 1 UID: 0 PID: 7287 Comm: syz.3.262 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  149.737002][ T7287] Tainted: [L]=SOFTLOCKUP
[  149.737007][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  149.737016][ T7287] Call Trace:
[  149.737021][ T7287]  <TASK>
[  149.737026][ T7287]  dump_stack_lvl+0x16c/0x1f0
[  149.737052][ T7287]  should_fail_ex+0x512/0x640
[  149.737070][ T7287]  should_fail_futex+0x4c/0x60
[  149.737085][ T7287]  futex_lock_pi_atomic+0x16d/0xc50
[  149.737107][ T7287]  futex_lock_pi+0x23f/0x7c0
[  149.737128][ T7287]  ? __pfx_futex_lock_pi+0x10/0x10
[  149.737144][ T7287]  ? __futex_wait+0x24b/0x2f0
[  149.737174][ T7287]  ? futex_private_hash_put+0x160/0x1b0
[  149.737190][ T7287]  ? __pfx_futex_wake_mark+0x10/0x10
[  149.737212][ T7287]  ? ksys_write+0x190/0x250
[  149.737233][ T7287]  do_futex+0x11a/0x350
[  149.737248][ T7287]  ? __pfx_do_futex+0x10/0x10
[  149.737266][ T7287]  __x64_sys_futex+0x1e0/0x4c0
[  149.737299][ T7287]  ? fput+0x70/0xf0
[  149.737310][ T7287]  ? __pfx___x64_sys_futex+0x10/0x10
[  149.737325][ T7287]  ? xfd_validate_state+0x61/0x180
[  149.737337][ T7287]  ? __pfx_ksys_write+0x10/0x10
[  149.737360][ T7287]  do_syscall_64+0xcd/0xf80
[  149.737387][ T7287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.737401][ T7287] RIP: 0033:0x7f8c1418f7c9
[  149.737414][ T7287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.737426][ T7287] RSP: 002b:00007f8c123ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  149.737439][ T7287] RAX: ffffffffffffffda RBX: 00007f8c143e5fa0 RCX: 00007f8c1418f7c9
[  149.737447][ T7287] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000
[  149.737455][ T7287] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 000000008000fff5
[  149.737462][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.737470][ T7287] R13: 00007f8c143e6038 R14: 00007f8c143e5fa0 R15: 00007ffd011578c8
[  149.737488][ T7287]  </TASK>
[  150.516378][ T7301] FAULT_INJECTION: forcing a failure.
[  150.516378][ T7301] name failslab, interval 1, probability 0, space 0, times 0
[  150.564886][ T7301] CPU: 0 UID: 0 PID: 7301 Comm: syz.3.266 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  150.564923][ T7301] Tainted: [L]=SOFTLOCKUP
[  150.564931][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  150.564944][ T7301] Call Trace:
[  150.564952][ T7301]  <TASK>
[  150.564960][ T7301]  dump_stack_lvl+0x16c/0x1f0
[  150.564998][ T7301]  should_fail_ex+0x512/0x640
[  150.565023][ T7301]  ? kmem_cache_alloc_noprof+0x62/0x770
[  150.565054][ T7301]  should_failslab+0xc2/0x120
[  150.565088][ T7301]  kmem_cache_alloc_noprof+0x83/0x770
[  150.565114][ T7301]  ? alloc_empty_file+0x55/0x1e0
[  150.565143][ T7301]  ? alloc_empty_file+0x55/0x1e0
[  150.565164][ T7301]  alloc_empty_file+0x55/0x1e0
[  150.565185][ T7301]  alloc_file_clone+0x5f/0x110
[  150.565207][ T7301]  create_pipe_files+0x41b/0x9a0
[  150.565240][ T7301]  do_pipe2+0xaf/0x1c0
[  150.565280][ T7301]  ? __pfx_do_pipe2+0x10/0x10
[  150.565312][ T7301]  ? xfd_validate_state+0x61/0x180
[  150.565331][ T7301]  ? __pfx_do_writev+0x10/0x10
[  150.565367][ T7301]  __x64_sys_pipe+0x33/0x50
[  150.565397][ T7301]  do_syscall_64+0xcd/0xf80
[  150.565431][ T7301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.565452][ T7301] RIP: 0033:0x7f8c1418f7c9
[  150.565469][ T7301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.565490][ T7301] RSP: 002b:00007f8c123cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[  150.565512][ T7301] RAX: ffffffffffffffda RBX: 00007f8c143e6090 RCX: 00007f8c1418f7c9
[  150.565527][ T7301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  150.565538][ T7301] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 0000000000000000
[  150.565552][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.565563][ T7301] R13: 00007f8c143e6128 R14: 00007f8c143e6090 R15: 00007ffd011578c8
[  150.565591][ T7301]  </TASK>
[  151.210421][ T7324] FAULT_INJECTION: forcing a failure.
[  151.210421][ T7324] name failslab, interval 1, probability 0, space 0, times 0
[  151.254725][ T7324] CPU: 0 UID: 0 PID: 7324 Comm: syz.0.269 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.254759][ T7324] Tainted: [L]=SOFTLOCKUP
[  151.254764][ T7324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  151.254772][ T7324] Call Trace:
[  151.254778][ T7324]  <TASK>
[  151.254784][ T7324]  dump_stack_lvl+0x16c/0x1f0
[  151.254809][ T7324]  should_fail_ex+0x512/0x640
[  151.254824][ T7324]  ? kmem_cache_alloc_noprof+0x62/0x770
[  151.254849][ T7324]  should_failslab+0xc2/0x120
[  151.254882][ T7324]  kmem_cache_alloc_noprof+0x83/0x770
[  151.254906][ T7324]  ? sk_prot_alloc+0x60/0x2a0
[  151.254946][ T7324]  ? sk_prot_alloc+0x60/0x2a0
[  151.254978][ T7324]  sk_prot_alloc+0x60/0x2a0
[  151.255015][ T7324]  sk_alloc+0x36/0xe30
[  151.255043][ T7324]  pn_socket_create+0x22d/0x560
[  151.255075][ T7324]  __sock_create+0x339/0x8a0
[  151.255116][ T7324]  __sys_socket+0x14d/0x260
[  151.255137][ T7324]  ? fput+0x70/0xf0
[  151.255168][ T7324]  ? __pfx___sys_socket+0x10/0x10
[  151.255188][ T7324]  ? ksys_write+0x1ac/0x250
[  151.255220][ T7324]  ? __pfx_ksys_write+0x10/0x10
[  151.255256][ T7324]  __x64_sys_socket+0x72/0xb0
[  151.255277][ T7324]  ? lockdep_hardirqs_on+0x7c/0x110
[  151.255309][ T7324]  do_syscall_64+0xcd/0xf80
[  151.255344][ T7324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.255368][ T7324] RIP: 0033:0x7f59edb8f7c9
[  151.255389][ T7324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.255410][ T7324] RSP: 002b:00007f59ee98a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  151.255434][ T7324] RAX: ffffffffffffffda RBX: 00007f59edde6270 RCX: 00007f59edb8f7c9
[  151.255451][ T7324] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000023
[  151.255466][ T7324] RBP: 00007f59edc13f91 R08: 0000000000000000 R09: 0000000000000000
[  151.255482][ T7324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.255496][ T7324] R13: 00007f59edde6308 R14: 00007f59edde6270 R15: 00007ffd699c7558
[  151.255532][ T7324]  </TASK>
[  151.557635][ T7333] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  151.588927][ T7333] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  151.601421][ T7333] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  151.608076][ T7333] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  152.055632][ T7364] netlink: 334 bytes leftover after parsing attributes in process `syz.1.283'.
[  152.107046][ T7370] FAULT_INJECTION: forcing a failure.
[  152.107046][ T7370] name fail_futex, interval 1, probability 0, space 0, times 0
[  152.120109][ T7370] CPU: 0 UID: 0 PID: 7370 Comm: syz.3.284 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.120148][ T7370] Tainted: [L]=SOFTLOCKUP
[  152.120157][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  152.120170][ T7370] Call Trace:
[  152.120177][ T7370]  <TASK>
[  152.120186][ T7370]  dump_stack_lvl+0x16c/0x1f0
[  152.120227][ T7370]  should_fail_ex+0x512/0x640
[  152.120256][ T7370]  get_futex_key+0x1d0/0x15f0
[  152.120282][ T7370]  ? __pfx_get_futex_key+0x10/0x10
[  152.120311][ T7370]  ? find_held_lock+0x2b/0x80
[  152.120342][ T7370]  futex_wake+0xea/0x530
[  152.120369][ T7370]  ? __pfx_futex_wake+0x10/0x10
[  152.120401][ T7370]  ? __lock_acquire+0x436/0x2890
[  152.120429][ T7370]  do_futex+0x1e3/0x350
[  152.120455][ T7370]  ? __pfx_do_futex+0x10/0x10
[  152.120476][ T7370]  ? get_nodes+0x18b/0x210
[  152.120503][ T7370]  ? __pfx_get_nodes+0x10/0x10
[  152.120532][ T7370]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  152.120568][ T7370]  __x64_sys_futex+0x1e0/0x4c0
[  152.120597][ T7370]  ? kernel_mbind+0x155/0x1f0
[  152.120621][ T7370]  ? __pfx___x64_sys_futex+0x10/0x10
[  152.120648][ T7370]  ? __pfx_kernel_mbind+0x10/0x10
[  152.120684][ T7370]  do_syscall_64+0xcd/0xf80
[  152.120719][ T7370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.120741][ T7370] RIP: 0033:0x7f8c1418f7c9
[  152.120760][ T7370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.120784][ T7370] RSP: 002b:00007f8c123ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  152.120807][ T7370] RAX: ffffffffffffffda RBX: 00007f8c143e5fa8 RCX: 00007f8c1418f7c9
[  152.120824][ T7370] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8c143e5fac
[  152.120840][ T7370] RBP: 00007f8c143e5fa0 R08: 00007f8c13ff8000 R09: 0000000000000000
[  152.120855][ T7370] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  152.120871][ T7370] R13: 00007f8c143e6038 R14: 00007ffd011577e0 R15: 00007ffd011578c8
[  152.120907][ T7370]  </TASK>
[  152.338766][ T5843] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  152.338797][ T5843] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[  152.355001][ T5843] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  152.355101][ T5843] Bluetooth: hci0: adv larger than maximum supported
[  152.364141][ T5843] Bluetooth: hci0: adv larger than maximum supported
[  152.370975][ T5843] Bluetooth: hci0: Malformed LE Event: 0x0d
[  152.384077][ T5843] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  152.384109][ T5843] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[  152.399314][ T5843] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  152.399346][ T5843] Bluetooth: hci0: adv larger than maximum supported
[  152.406534][ T5843] Bluetooth: hci0: adv larger than maximum supported
[  152.413398][ T5843] Bluetooth: hci0: Malformed LE Event: 0x0d
[  152.474276][ T7370] zswap: compressor  not available
[  152.781859][   T30] audit: type=1400 audit(1766037471.340:8): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7395 comm="syz.2.288"
[  152.823182][ T7398] FAULT_INJECTION: forcing a failure.
[  152.823182][ T7398] name failslab, interval 1, probability 0, space 0, times 0
[  152.855722][ T7398] CPU: 0 UID: 0 PID: 7398 Comm: syz.0.289 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.855764][ T7398] Tainted: [L]=SOFTLOCKUP
[  152.855773][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  152.855787][ T7398] Call Trace:
[  152.855794][ T7398]  <TASK>
[  152.855804][ T7398]  dump_stack_lvl+0x16c/0x1f0
[  152.855844][ T7398]  should_fail_ex+0x512/0x640
[  152.855869][ T7398]  ? kmem_cache_alloc_noprof+0x62/0x770
[  152.855902][ T7398]  should_failslab+0xc2/0x120
[  152.855936][ T7398]  kmem_cache_alloc_noprof+0x83/0x770
[  152.855964][ T7398]  ? prepare_creds+0x2c/0x940
[  152.855997][ T7398]  ? prepare_creds+0x2c/0x940
[  152.856021][ T7398]  prepare_creds+0x2c/0x940
[  152.856050][ T7398]  __sys_setuid+0x9a/0x440
[  152.856082][ T7398]  do_syscall_64+0xcd/0xf80
[  152.856116][ T7398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.856140][ T7398] RIP: 0033:0x7f59edb8f7c9
[  152.856160][ T7398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.856182][ T7398] RSP: 002b:00007f59ee9ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[  152.856204][ T7398] RAX: ffffffffffffffda RBX: 00007f59edde5fa0 RCX: 00007f59edb8f7c9
[  152.856228][ T7398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e
[  152.856242][ T7398] RBP: 00007f59edc13f91 R08: 0000000000000000 R09: 0000000000000000
[  152.856257][ T7398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.856271][ T7398] R13: 00007f59edde6038 R14: 00007f59edde5fa0 R15: 00007ffd699c7558
[  152.856304][ T7398]  </TASK>
[  152.859184][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.289'.
[  153.564787][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout
[  153.644995][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout
[  153.645128][ T5835] Bluetooth: hci0: command 0x2016 tx timeout
[  153.660435][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout
[  154.262502][ T7447] netlink: 206 bytes leftover after parsing attributes in process `syz.3.298'.

syzkaller
syzkaller login: [  154.732399][ T7459] zswap: compressor  not available
[  155.484243][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.306'.
[  155.584880][ T7491] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  155.930679][ T7505] nvme_fcloop: unknown parameter or missing value '7'
[  156.178647][ T7511] =======================================================
[  156.178647][ T7511] WARNING: The mand mount option has been deprecated and
[  156.178647][ T7511]          and is ignored by this kernel. Remove the mand
[  156.178647][ T7511]          option from the mount to silence this warning.
[  156.178647][ T7511] =======================================================
[  156.237141][ T7513] usb usb36: usbfs: process 7513 (syz.1.312) did not claim interface 0 before use
[  156.662333][ T7520] cifs: Unknown parameter 'ù;4
çÉ.Õ°hf[Ìîø…¾GƒLöÑÈ̺_Â,"Ì’|ÉTãÕe§V•×–+ëþöš#ÍL«/ýV")W©bH›©¸#'
[  156.733795][ T7520] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  156.783999][ T7525] can0: slcan on ttyS2.
[  156.916158][ T7520] CIFS mount error: No usable UNC path provided in device string!
[  156.916158][ T7520] 
[  157.023285][ T7520] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  157.077459][ T7525] can0 (unregistered): slcan off ttyS2.
[  157.445897][ T7539] sysfs_service_op_show: Client not running :-5:
[  157.583890][ T7543] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  158.017216][ T7546] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  158.925728][ T7591] IPVS: length: 131 != 8
[  160.236918][ T7618] binder: 7617:7618 ioctl 5380 2000000000c0 returned -22
[  160.257505][ T7618] sd 0:0:1:0: PR command failed: 1026
[  160.285091][ T7618] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  160.306129][ T7618] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  160.557529][ T7627] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  160.601583][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.

getty: ttyS0: re[  163.255184][ T7695] mkiss: ax0: crc mode is auto.
[  164.191648][ T7687] kexec: Could not allocate control_code_buffer
[  164.388339][ T7720] random: crng reseeded on system resumption

syzkaller
syzkaller login: [  165.398237][ T7748] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  165.654152][ T7758] FAULT_INJECTION: forcing a failure.
[  165.654152][ T7758] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  165.703976][ T7758] CPU: 1 UID: 0 PID: 7758 Comm: syz.3.364 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.704019][ T7758] Tainted: [L]=SOFTLOCKUP
[  165.704026][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  165.704037][ T7758] Call Trace:
[  165.704044][ T7758]  <TASK>
[  165.704052][ T7758]  dump_stack_lvl+0x16c/0x1f0
[  165.704087][ T7758]  should_fail_ex+0x512/0x640
[  165.704111][ T7758]  _copy_to_iter+0x463/0x1710
[  165.704137][ T7758]  ? __pfx__copy_to_iter+0x10/0x10
[  165.704157][ T7758]  ? const_folio_flags+0x5b/0x100
[  165.704180][ T7758]  ? folio_mark_accessed+0xc1/0xbf0
[  165.704204][ T7758]  ? __pfx_folio_mark_accessed+0x10/0x10
[  165.704233][ T7758]  copy_page_to_iter+0x12a/0x1e0
[  165.704255][ T7758]  filemap_read+0x6b1/0xe40
[  165.704292][ T7758]  ? __pfx_filemap_read+0x10/0x10
[  165.704332][ T7758]  ? __pfx_down_read+0x10/0x10
[  165.704350][ T7758]  ? __pfx_aa_file_perm+0x10/0x10
[  165.704380][ T7758]  blkdev_read_iter+0x1ac/0x500
[  165.704409][ T7758]  do_iter_readv_writev+0x743/0x9e0
[  165.704435][ T7758]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  165.704457][ T7758]  ? common_file_perm+0x1b1/0x500
[  165.704480][ T7758]  ? bpf_lsm_file_permission+0x9/0x10
[  165.704501][ T7758]  ? security_file_permission+0x71/0x210
[  165.704526][ T7758]  ? rw_verify_area+0xcf/0x6c0
[  165.704551][ T7758]  vfs_readv+0x4cb/0x8b0
[  165.704583][ T7758]  ? __pfx_vfs_readv+0x10/0x10
[  165.704643][ T7758]  ? __fget_files+0x20e/0x3c0
[  165.704685][ T7758]  ? do_readv+0x132/0x340
[  165.704713][ T7758]  do_readv+0x132/0x340
[  165.704742][ T7758]  ? __pfx_do_readv+0x10/0x10
[  165.704765][ T7758]  ? xfd_validate_state+0x61/0x180
[  165.704787][ T7758]  __x64_sys_preadv2+0x11f/0x160
[  165.704815][ T7758]  do_syscall_64+0xcd/0xf80
[  165.704842][ T7758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.704861][ T7758] RIP: 0033:0x7f8c1418f7c9
[  165.704877][ T7758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.704894][ T7758] RSP: 002b:00007f8c123ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  165.704913][ T7758] RAX: ffffffffffffffda RBX: 00007f8c143e5fa0 RCX: 00007f8c1418f7c9
[  165.704926][ T7758] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000008
[  165.704938][ T7758] RBP: 00007f8c14213f91 R08: 0000000000000004 R09: 000000000000002e
[  165.704950][ T7758] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  165.704962][ T7758] R13: 00007f8c143e6038 R14: 00007f8c143e5fa0 R15: 00007ffd011578c8
[  165.704991][ T7758]  </TASK>
[  166.742231][ T7740] hub 8-0:1.0: USB hub found
[  166.755770][ T7740] hub 8-0:1.0: 1 port detected
[  167.612936][   T30] audit: type=1800 audit(1766037486.170:9): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.372" name="features" dev="configfs" ino=18084 res=0 errno=0
[  167.991103][ T7786] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  168.331072][ T7807] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  168.955924][ T7809] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  170.447263][ T7863] block nbd7: not configured, cannot reconfigure
[  170.851925][ T7857] netlink: 330 bytes leftover after parsing attributes in process `syz.2.371'.
[  170.861933][ T7821] netlink: 330 bytes leftover after parsing attributes in process `syz.2.371'.
[  171.575747][ T7888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.392'.
[  171.597834][ T7889] FAULT_INJECTION: forcing a failure.
[  171.597834][ T7889] name failslab, interval 1, probability 0, space 0, times 0
[  171.625361][ T7888] veth1_macvtap: left promiscuous mode
[  171.664174][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.3.391 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  171.664199][ T7889] Tainted: [L]=SOFTLOCKUP
[  171.664205][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  171.664219][ T7889] Call Trace:
[  171.664225][ T7889]  <TASK>
[  171.664231][ T7889]  dump_stack_lvl+0x16c/0x1f0
[  171.664257][ T7889]  should_fail_ex+0x512/0x640
[  171.664273][ T7889]  ? __kmalloc_cache_noprof+0x5f/0x800
[  171.664292][ T7889]  should_failslab+0xc2/0x120
[  171.664314][ T7889]  __kmalloc_cache_noprof+0x80/0x800
[  171.664329][ T7889]  ? netdev_create_hash+0x3c/0xc0
[  171.664351][ T7889]  ? netdev_create_hash+0x3c/0xc0
[  171.664368][ T7889]  ? __pfx_netdev_init+0x10/0x10
[  171.664384][ T7889]  netdev_create_hash+0x3c/0xc0
[  171.664403][ T7889]  ? __pfx_netdev_init+0x10/0x10
[  171.664419][ T7889]  netdev_init+0x70/0x230
[  171.664436][ T7889]  ops_init+0x1e2/0x5f0
[  171.664455][ T7889]  setup_net+0x11d/0x3a0
[  171.664472][ T7889]  ? __pfx_setup_net+0x10/0x10
[  171.664487][ T7889]  ? lockdep_init_map_type+0x5c/0x270
[  171.664502][ T7889]  ? mutex_init_lockep+0x110/0x150
[  171.664518][ T7889]  copy_net_ns+0x351/0x7c0
[  171.664537][ T7889]  create_new_namespaces+0x3ea/0xab0
[  171.664579][ T7889]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  171.664611][ T7889]  ksys_unshare+0x45b/0xa40
[  171.664634][ T7889]  ? __pfx_ksys_unshare+0x10/0x10
[  171.664654][ T7889]  ? xfd_validate_state+0x61/0x180
[  171.664672][ T7889]  __x64_sys_unshare+0x31/0x40
[  171.664684][ T7889]  do_syscall_64+0xcd/0xf80
[  171.664704][ T7889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.664718][ T7889] RIP: 0033:0x7f8c1418f7c9
[  171.664730][ T7889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.664742][ T7889] RSP: 002b:00007f8c123ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  171.664755][ T7889] RAX: ffffffffffffffda RBX: 00007f8c143e5fa0 RCX: 00007f8c1418f7c9
[  171.664764][ T7889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  171.664771][ T7889] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 0000000000000000
[  171.664779][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.664788][ T7889] R13: 00007f8c143e6038 R14: 00007f8c143e5fa0 R15: 00007ffd011578c8
[  171.664807][ T7889]  </TASK>
[  173.417169][ T7939] random: crng reseeded on system resumption
[  173.700754][ T7946] netlink: 25 bytes leftover after parsing attributes in process `syz.1.407'.
[  174.686987][ T7968] futex_wake_op: syz.3.410 tries to shift op by -2048; fix this program
[  174.822166][ T7968] zero sized request
[  175.041407][ T7977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15
[  175.673298][ T8000] bond0: invalid ARP target specified
[  175.937741][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'.
[  176.555040][ T8019] usb usb37: usbfs: process 8019 (syz.3.424) did not claim interface 0 before use
[  176.607981][ T8019] FAULT_INJECTION: forcing a failure.
[  176.607981][ T8019] name failslab, interval 1, probability 0, space 0, times 0
[  176.694680][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.3.424 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.694725][ T8019] Tainted: [L]=SOFTLOCKUP
[  176.694734][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  176.694755][ T8019] Call Trace:
[  176.694765][ T8019]  <TASK>
[  176.694781][ T8019]  dump_stack_lvl+0x16c/0x1f0
[  176.694824][ T8019]  should_fail_ex+0x512/0x640
[  176.694850][ T8019]  ? kmem_cache_alloc_noprof+0x62/0x770
[  176.694885][ T8019]  should_failslab+0xc2/0x120
[  176.694920][ T8019]  kmem_cache_alloc_noprof+0x83/0x770
[  176.694948][ T8019]  ? __anon_vma_prepare+0xae/0x5e0
[  176.694977][ T8019]  ? __anon_vma_prepare+0xae/0x5e0
[  176.695000][ T8019]  __anon_vma_prepare+0xae/0x5e0
[  176.695029][ T8019]  madvise_guard_install+0x64a/0x860
[  176.695071][ T8019]  ? __pfx_madvise_guard_install+0x10/0x10
[  176.695109][ T8019]  ? __pfx_guard_install_pud_entry+0x10/0x10
[  176.695141][ T8019]  ? __pfx_guard_install_pmd_entry+0x10/0x10
[  176.695178][ T8019]  ? __pfx_guard_install_pte_entry+0x10/0x10
[  176.695216][ T8019]  ? __pfx_guard_install_set_pte+0x10/0x10
[  176.695262][ T8019]  madvise_vma_behavior+0x8f8/0x29e0
[  176.695289][ T8019]  ? mas_prev_setup.constprop.0+0xb6/0x9d0
[  176.695323][ T8019]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  176.695346][ T8019]  ? mas_prev+0x9b/0xf0
[  176.695378][ T8019]  ? __pfx_mas_prev+0x10/0x10
[  176.695420][ T8019]  ? find_vma_prev+0xd3/0x150
[  176.695450][ T8019]  ? lock_vma_under_rcu+0x1f3/0x580
[  176.695475][ T8019]  ? __pfx_find_vma_prev+0x10/0x10
[  176.695518][ T8019]  ? madvise_do_behavior+0x1e2/0x530
[  176.695547][ T8019]  madvise_walk_vmas+0x31f/0xac0
[  176.695577][ T8019]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  176.695604][ T8019]  ? find_held_lock+0x2b/0x80
[  176.695639][ T8019]  madvise_do_behavior+0x1e2/0x530
[  176.695660][ T8019]  ? futex_private_hash_put+0x160/0x1b0
[  176.695688][ T8019]  ? __pfx_madvise_do_behavior+0x10/0x10
[  176.695709][ T8019]  ? futex_wake+0x1ad/0x530
[  176.695758][ T8019]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  176.695800][ T8019]  do_madvise+0x176/0x240
[  176.695824][ T8019]  ? __pfx_do_madvise+0x10/0x10
[  176.695845][ T8019]  ? do_futex+0x122/0x350
[  176.695896][ T8019]  ? xfd_validate_state+0x61/0x180
[  176.695917][ T8019]  ? __pfx_ksys_write+0x10/0x10
[  176.695956][ T8019]  __x64_sys_madvise+0xa9/0x110
[  176.695979][ T8019]  ? lockdep_hardirqs_on+0x7c/0x110
[  176.696012][ T8019]  do_syscall_64+0xcd/0xf80
[  176.696047][ T8019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.696071][ T8019] RIP: 0033:0x7f8c1418f7c9
[  176.696092][ T8019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.696114][ T8019] RSP: 002b:00007f8c123ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  176.696137][ T8019] RAX: ffffffffffffffda RBX: 00007f8c143e5fa0 RCX: 00007f8c1418f7c9
[  176.696153][ T8019] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000
[  176.696168][ T8019] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 0000000000000000
[  176.696186][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.696199][ T8019] R13: 00007f8c143e6038 R14: 00007f8c143e5fa0 R15: 00007ffd011578c8
[  176.696232][ T8019]  </TASK>
[  177.684834][ T8038] futex_wake_op: syz.3.427 tries to shift op by -2048; fix this program
[  177.693488][ T8038] futex_wake_op: syz.3.427 tries to shift op by -2048; fix this program
[  177.797236][ T8038] futex_wake_op: syz.3.427 tries to shift op by -2048; fix this program
[  178.692962][ T8051] aoe: copy from user failed
[  178.700694][ T8051] aoe: could not set interface list: too many interfaces
[  179.098094][ T8059] vivid-007: =================  START STATUS  =================
[  179.157131][ T8059] vivid-007: Generate PTS: true
[  179.184198][ T8059] vivid-007: Generate SCR: true
[  179.194949][ T8059] tpg source WxH: 320x240 (Y'CbCr)
[  179.228094][ T8059] tpg field: 1
[  179.241478][ T8059] tpg crop: (0,0)/320x240
[  179.314312][ T8059] tpg compose: (0,0)/320x240
[  179.436583][ T8059] tpg colorspace: 8
[  179.550002][ T8059] tpg transfer function: 0/0
[  179.562474][ T8059] tpg Y'CbCr encoding: 0/0
[  179.579692][ T8059] tpg quantization: 0/0
[  179.595363][ T8059] tpg RGB range: 0/2
[  179.609176][ T8059] vivid-007: ==================  END STATUS  ==================
[  179.617606][ T8067] zswap: compressor  not available
[  179.818825][ T8072] __vm_enough_memory: pid: 8072, comm: syz.0.432, bytes: 4398046511104 not enough memory for the allocation
[  179.991342][ T8070] __vm_enough_memory: pid: 8070, comm: syz.0.432, bytes: 4398046511104 not enough memory for the allocation
[  180.185269][ T8085] FAULT_INJECTION: forcing a failure.
[  180.185269][ T8085] name failslab, interval 1, probability 0, space 0, times 0
[  180.317806][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: syz.3.434 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.317840][ T8085] Tainted: [L]=SOFTLOCKUP
[  180.317848][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  180.317860][ T8085] Call Trace:
[  180.317868][ T8085]  <TASK>
[  180.317877][ T8085]  dump_stack_lvl+0x16c/0x1f0
[  180.317912][ T8085]  should_fail_ex+0x512/0x640
[  180.317933][ T8085]  ? kmem_cache_alloc_noprof+0x62/0x770
[  180.317962][ T8085]  should_failslab+0xc2/0x120
[  180.317992][ T8085]  kmem_cache_alloc_noprof+0x83/0x770
[  180.318018][ T8085]  ? __kernfs_new_node+0xd2/0x990
[  180.318058][ T8085]  ? __kernfs_new_node+0xd2/0x990
[  180.318080][ T8085]  __kernfs_new_node+0xd2/0x990
[  180.318109][ T8085]  ? __pfx___kernfs_new_node+0x10/0x10
[  180.318141][ T8085]  ? find_held_lock+0x2b/0x80
[  180.318169][ T8085]  ? kernfs_root+0xee/0x2a0
[  180.318198][ T8085]  kernfs_new_node+0x13c/0x1e0
[  180.318231][ T8085]  kernfs_create_link+0xcc/0x240
[  180.318266][ T8085]  sysfs_do_create_link_sd+0x90/0x140
[  180.318292][ T8085]  sysfs_create_link+0x61/0xc0
[  180.318317][ T8085]  device_add+0x5b7/0x1980
[  180.318350][ T8085]  ? __pfx_device_add+0x10/0x10
[  180.318377][ T8085]  ? lockdep_init_map_type+0x5c/0x270
[  180.318401][ T8085]  ? __init_waitqueue_head+0xca/0x150
[  180.318435][ T8085]  rfkill_register+0x1ad/0xb40
[  180.318465][ T8085]  nfc_register_device+0x11f/0x410
[  180.318499][ T8085]  nci_register_device+0x7f1/0xb80
[  180.318527][ T8085]  ? __pfx_nci_register_device+0x10/0x10
[  180.318557][ T8085]  ? lockdep_init_map_type+0x5c/0x270
[  180.318583][ T8085]  virtual_ncidev_open+0x141/0x220
[  180.318617][ T8085]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  180.318647][ T8085]  misc_open+0x26d/0x450
[  180.318673][ T8085]  ? __pfx_misc_open+0x10/0x10
[  180.318695][ T8085]  chrdev_open+0x234/0x6a0
[  180.318726][ T8085]  ? __pfx_apparmor_file_open+0x10/0x10
[  180.318749][ T8085]  ? __pfx_chrdev_open+0x10/0x10
[  180.318782][ T8085]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  180.318821][ T8085]  do_dentry_open+0x748/0x1590
[  180.318850][ T8085]  ? __pfx_chrdev_open+0x10/0x10
[  180.318888][ T8085]  vfs_open+0x82/0x3f0
[  180.318915][ T8085]  path_openat+0x2078/0x3140
[  180.318955][ T8085]  ? __pfx_path_openat+0x10/0x10
[  180.318997][ T8085]  do_filp_open+0x20b/0x470
[  180.319037][ T8085]  ? __pfx_do_filp_open+0x10/0x10
[  180.319094][ T8085]  ? alloc_fd+0x471/0x7d0
[  180.319130][ T8085]  do_sys_openat2+0x121/0x290
[  180.319150][ T8085]  ? __pfx_do_sys_openat2+0x10/0x10
[  180.319169][ T8085]  ? __pfx_do_sys_openat2+0x10/0x10
[  180.319203][ T8085]  __x64_sys_openat+0x174/0x210
[  180.319227][ T8085]  ? __pfx___x64_sys_openat+0x10/0x10
[  180.319267][ T8085]  do_syscall_64+0xcd/0xf80
[  180.319302][ T8085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.319326][ T8085] RIP: 0033:0x7f8c1418f7c9
[  180.319345][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.319365][ T8085] RSP: 002b:00007f8c123ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  180.319387][ T8085] RAX: ffffffffffffffda RBX: 00007f8c143e5fa0 RCX: 00007f8c1418f7c9
[  180.319402][ T8085] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  180.319416][ T8085] RBP: 00007f8c14213f91 R08: 0000000000000000 R09: 0000000000000000
[  180.319430][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.319442][ T8085] R13: 00007f8c143e6038 R14: 00007f8c143e5fa0 R15: 00007ffd011578c8
[  180.319473][ T8085]  </TASK>
[  181.575387][ T8119] random: crng reseeded on system resumption
[  181.777146][ T8088] kafs: addr_prefs: Too many elements in string
[  181.868211][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.1.439'.
[  182.462453][ T8145] Invalid ELF header magic: != ELF
[  182.754359][ T8148] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17
[  183.764853][ T8088] syz.2.433 (8088) used greatest stack depth: 18856 bytes left
[  184.226974][ T8175] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  184.243005][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'.
[  184.265184][ T8175] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  184.273151][ T8175] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  184.364702][ T8175] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  184.428933][ T8175] page dumped because: unmovable page
[  184.434392][ T8175] page_owner info is not present (never set?)
[  188.653856][ T8242] kexec: Could not allocate control_code_buffer
[  190.907420][ T8299] netlink: 292 bytes leftover after parsing attributes in process `syz.3.471'.
[  191.235252][ T8310] netlink: 330 bytes leftover after parsing attributes in process `syz.1.474'.
[  192.143354][ T8343] netlink: 25 bytes leftover after parsing attributes in process `syz.0.479'.
[  192.289328][ T8347] FAULT_INJECTION: forcing a failure.
[  192.289328][ T8347] name failslab, interval 1, probability 0, space 0, times 0
[  192.323012][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.0.480 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  192.323053][ T8347] Tainted: [L]=SOFTLOCKUP
[  192.323062][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.323076][ T8347] Call Trace:
[  192.323084][ T8347]  <TASK>
[  192.323094][ T8347]  dump_stack_lvl+0x16c/0x1f0
[  192.323135][ T8347]  should_fail_ex+0x512/0x640
[  192.323168][ T8347]  should_failslab+0xc2/0x120
[  192.323203][ T8347]  __kmalloc_cache_noprof+0x80/0x800
[  192.323227][ T8347]  ? __task_pid_nr_ns+0x1f5/0x500
[  192.323249][ T8347]  ? proc_self_get_link+0x1a9/0x230
[  192.323284][ T8347]  ? proc_self_get_link+0x1a9/0x230
[  192.323311][ T8347]  proc_self_get_link+0x1a9/0x230
[  192.323339][ T8347]  pick_link+0xb09/0x13b0
[  192.323367][ T8347]  ? __pfx_proc_self_get_link+0x10/0x10
[  192.323399][ T8347]  step_into_slowpath+0x6c6/0xf50
[  192.323436][ T8347]  ? __pfx_step_into_slowpath+0x10/0x10
[  192.323471][ T8347]  ? lookup_fast+0x156/0x610
[  192.323504][ T8347]  path_openat+0x10db/0x3140
[  192.323549][ T8347]  ? __pfx_path_openat+0x10/0x10
[  192.323596][ T8347]  do_filp_open+0x20b/0x470
[  192.323630][ T8347]  ? __pfx_do_filp_open+0x10/0x10
[  192.323690][ T8347]  ? alloc_fd+0x471/0x7d0
[  192.323733][ T8347]  do_sys_openat2+0x121/0x290
[  192.323769][ T8347]  ? __pfx_do_sys_openat2+0x10/0x10
[  192.323811][ T8347]  __x64_sys_openat+0x174/0x210
[  192.323838][ T8347]  ? __pfx___x64_sys_openat+0x10/0x10
[  192.323879][ T8347]  do_syscall_64+0xcd/0xf80
[  192.323914][ T8347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.323938][ T8347] RIP: 0033:0x7f59edb8e010
[  192.323958][ T8347] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  192.323980][ T8347] RSP: 002b:00007f59ee9ecf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  192.324003][ T8347] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f59edb8e010
[  192.324019][ T8347] RDX: 0000000000000002 RSI: 00007f59ee9ecfa0 RDI: 00000000ffffff9c
[  192.324034][ T8347] RBP: 00007f59ee9ecfa0 R08: 0000000000000000 R09: 0000000000000000
[  192.324049][ T8347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  192.324063][ T8347] R13: 00007f59edde6038 R14: 00007f59edde5fa0 R15: 00007ffd699c7558
[  192.324099][ T8347]  </TASK>
[  192.598475][ T8348] FAULT_INJECTION: forcing a failure.
[  192.598475][ T8348] name fail_futex, interval 1, probability 0, space 0, times 0
[  192.618898][ T8348] CPU: 1 UID: 0 PID: 8348 Comm: syz.0.480 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  192.618939][ T8348] Tainted: [L]=SOFTLOCKUP
[  192.618948][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.618962][ T8348] Call Trace:
[  192.618979][ T8348]  <TASK>
[  192.618989][ T8348]  dump_stack_lvl+0x16c/0x1f0
[  192.619030][ T8348]  should_fail_ex+0x512/0x640
[  192.619063][ T8348]  get_futex_key+0x1d0/0x15f0
[  192.619096][ T8348]  ? __pfx_get_futex_key+0x10/0x10
[  192.619120][ T8348]  ? find_held_lock+0x2b/0x80
[  192.619161][ T8348]  futex_wake+0xea/0x530
[  192.619188][ T8348]  ? futex_wait+0x120/0x380
[  192.619218][ T8348]  ? __pfx_futex_wait+0x10/0x10
[  192.619249][ T8348]  ? __pfx_futex_wake+0x10/0x10
[  192.619283][ T8348]  ? __lock_acquire+0x436/0x2890
[  192.619307][ T8348]  ? ksys_write+0x190/0x250
[  192.619344][ T8348]  do_futex+0x1e3/0x350
[  192.619371][ T8348]  ? __pfx_do_futex+0x10/0x10
[  192.619400][ T8348]  ? find_held_lock+0x2b/0x80
[  192.619435][ T8348]  __x64_sys_futex+0x1e0/0x4c0
[  192.619464][ T8348]  ? native_tss_update_io_bitmap+0x3e1/0x740
[  192.619491][ T8348]  ? __pfx___x64_sys_futex+0x10/0x10
[  192.619522][ T8348]  ? fdget_raw+0x14a/0x1d0
[  192.619562][ T8348]  do_syscall_64+0xcd/0xf80
[  192.619598][ T8348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.619630][ T8348] RIP: 0033:0x7f59edb8f7c9
[  192.619652][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.619675][ T8348] RSP: 002b:00007f59ee9cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  192.619698][ T8348] RAX: ffffffffffffffda RBX: 00007f59edde6098 RCX: 00007f59edb8f7c9
[  192.619715][ T8348] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59edde609c
[  192.619729][ T8348] RBP: 00007f59edde6090 R08: 00007f59ee9ee000 R09: 0000000000000000
[  192.619744][ T8348] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  192.619759][ T8348] R13: 00007f59edde6128 R14: 00007ffd699c7470 R15: 00007ffd699c7558
[  192.619794][ T8348]  </TASK>
[  194.279205][ T7580] syz.2.326 (7580) used greatest stack depth: 17160 bytes left
[  194.550344][ T8380] netlink: 306 bytes leftover after parsing attributes in process `syz.1.488'.
[  196.026211][ T8398] NFSD: Failed to start, no listeners configured.
[  197.927839][ T8430] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  198.175847][ T8437] usb usb2: usbfs: process 8437 (syz.0.501) did not claim interface 0 before use
[  198.430919][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'.
[  198.705884][ T8459] ==================================================================
[  198.705901][ T8459] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60
[  198.705945][ T8459] Write of size 8 at addr ffffc90003979000 by task syz.2.503/8459
[  198.705966][ T8459] 
[  198.705982][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.2.503 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  198.706016][ T8459] Tainted: [L]=SOFTLOCKUP
[  198.706025][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  198.706039][ T8459] Call Trace:
[  198.706049][ T8459]  <TASK>
[  198.706058][ T8459]  dump_stack_lvl+0x116/0x1f0
[  198.706095][ T8459]  print_report+0xcd/0x630
[  198.706133][ T8459]  ? __virt_addr_valid+0x81/0x610
[  198.706173][ T8459]  ? sys_imageblit+0x1a6f/0x1e60
[  198.706205][ T8459]  kasan_report+0xe0/0x110
[  198.706241][ T8459]  ? sys_imageblit+0x1a6f/0x1e60
[  198.706279][ T8459]  sys_imageblit+0x1a6f/0x1e60
[  198.706316][ T8459]  ? __pfx_sys_imageblit+0x10/0x10
[  198.706348][ T8459]  ? find_held_lock+0x2b/0x80
[  198.706377][ T8459]  ? up+0xcb/0x140
[  198.706397][ T8459]  ? do_raw_spin_unlock+0x172/0x230
[  198.706424][ T8459]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  198.706457][ T8459]  ? prb_read_valid+0x78/0xa0
[  198.706481][ T8459]  ? __pfx_prb_read_valid+0x10/0x10
[  198.706509][ T8459]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  198.706544][ T8459]  soft_cursor+0x524/0xa10
[  198.706574][ T8459]  ? fb_get_color_depth+0x120/0x250
[  198.706601][ T8459]  bit_cursor+0xe8c/0x17e0
[  198.706632][ T8459]  ? __pfx_bit_cursor+0x10/0x10
[  198.706658][ T8459]  ? __lock_acquire+0x436/0x2890
[  198.706684][ T8459]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  198.706718][ T8459]  ? get_color+0x1da/0x450
[  198.706741][ T8459]  ? __pfx_bit_cursor+0x10/0x10
[  198.706766][ T8459]  fbcon_cursor+0x437/0x5d0
[  198.706789][ T8459]  ? add_softcursor+0x11/0x290
[  198.706818][ T8459]  set_cursor+0x1db/0x250
[  198.706844][ T8459]  con_write+0x89/0xb0
[  198.706874][ T8459]  do_output_char+0x5d9/0x840
[  198.706910][ T8459]  n_tty_write+0x514/0x1280
[  198.706941][ T8459]  ? __pfx_n_tty_write+0x10/0x10
[  198.706965][ T8459]  ? __pfx_woken_wake_function+0x10/0x10
[  198.706994][ T8459]  ? __pfx___might_resched+0x10/0x10
[  198.707025][ T8459]  ? __pfx_n_tty_write+0x10/0x10
[  198.707050][ T8459]  file_tty_write.constprop.0+0x503/0x9b0
[  198.707086][ T8459]  redirected_tty_write+0xd4/0x120
[  198.707117][ T8459]  do_iter_readv_writev+0x662/0x9e0
[  198.707157][ T8459]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  198.707188][ T8459]  ? common_file_perm+0x1b1/0x500
[  198.707217][ T8459]  ? bpf_lsm_file_permission+0x9/0x10
[  198.707245][ T8459]  ? security_file_permission+0x71/0x210
[  198.707274][ T8459]  ? rw_verify_area+0xcf/0x6c0
[  198.707319][ T8459]  vfs_writev+0x35f/0xde0
[  198.707352][ T8459]  ? __lock_acquire+0x436/0x2890
[  198.707376][ T8459]  ? __pfx_vfs_writev+0x10/0x10
[  198.707407][ T8459]  ? putname+0xf5/0x1a0
[  198.707438][ T8459]  ? __fget_files+0x20e/0x3c0
[  198.707472][ T8459]  ? do_writev+0x132/0x340
[  198.707500][ T8459]  do_writev+0x132/0x340
[  198.707528][ T8459]  ? __pfx_do_writev+0x10/0x10
[  198.707562][ T8459]  do_syscall_64+0xcd/0xf80
[  198.707596][ T8459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.707620][ T8459] RIP: 0033:0x7ffbabb8f7c9
[  198.707640][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.707663][ T8459] RSP: 002b:00007ffba9df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  198.707687][ T8459] RAX: ffffffffffffffda RBX: 00007ffbabde6180 RCX: 00007ffbabb8f7c9
[  198.707704][ T8459] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004
[  198.707720][ T8459] RBP: 00007ffbabc13f91 R08: 0000000000000000 R09: 0000000000000000
[  198.707735][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.707750][ T8459] R13: 00007ffbabde6218 R14: 00007ffbabde6180 R15: 00007fff0c6eba68
[  198.707777][ T8459]  </TASK>
[  198.707785][ T8459] 
[  198.707792][ T8459] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003679000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0
[  198.707846][ T8459] Memory state around the buggy address:
[  198.707859][ T8459]  ffffc90003978f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  198.707876][ T8459]  ffffc90003978f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  198.707893][ T8459] >ffffc90003979000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.707907][ T8459]                    ^
[  198.707920][ T8459]  ffffc90003979080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.707936][ T8459]  ffffc90003979100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  198.707949][ T8459] ==================================================================
[  198.707964][ T8459] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  198.707981][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.2.503 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  198.708016][ T8459] Tainted: [L]=SOFTLOCKUP
[  198.708025][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  198.708041][ T8459] Call Trace:
[  198.708050][ T8459]  <TASK>
[  198.708059][ T8459]  dump_stack_lvl+0x3d/0x1f0
[  198.708092][ T8459]  vpanic+0x640/0x6f0
[  198.708118][ T8459]  panic+0xca/0xd0
[  198.708168][ T8459]  ? __pfx_panic+0x10/0x10
[  198.708213][ T8459]  check_panic_on_warn+0xab/0xb0
[  198.708240][ T8459]  end_report+0x107/0x160
[  198.708274][ T8459]  kasan_report+0xee/0x110
[  198.708309][ T8459]  ? sys_imageblit+0x1a6f/0x1e60
[  198.708345][ T8459]  sys_imageblit+0x1a6f/0x1e60
[  198.708382][ T8459]  ? __pfx_sys_imageblit+0x10/0x10
[  198.708413][ T8459]  ? find_held_lock+0x2b/0x80
[  198.708442][ T8459]  ? up+0xcb/0x140
[  198.708463][ T8459]  ? do_raw_spin_unlock+0x172/0x230
[  198.708490][ T8459]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  198.708524][ T8459]  ? prb_read_valid+0x78/0xa0
[  198.708549][ T8459]  ? __pfx_prb_read_valid+0x10/0x10
[  198.708577][ T8459]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  198.708612][ T8459]  soft_cursor+0x524/0xa10
[  198.708642][ T8459]  ? fb_get_color_depth+0x120/0x250
[  198.708669][ T8459]  bit_cursor+0xe8c/0x17e0
[  198.708700][ T8459]  ? __pfx_bit_cursor+0x10/0x10
[  198.708726][ T8459]  ? __lock_acquire+0x436/0x2890
[  198.708753][ T8459]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  198.708787][ T8459]  ? get_color+0x1da/0x450
[  198.708811][ T8459]  ? __pfx_bit_cursor+0x10/0x10
[  198.708837][ T8459]  fbcon_cursor+0x437/0x5d0
[  198.708861][ T8459]  ? add_softcursor+0x11/0x290
[  198.708889][ T8459]  set_cursor+0x1db/0x250
[  198.708916][ T8459]  con_write+0x89/0xb0
[  198.708947][ T8459]  do_output_char+0x5d9/0x840
[  198.708983][ T8459]  n_tty_write+0x514/0x1280
[  198.709014][ T8459]  ? __pfx_n_tty_write+0x10/0x10
[  198.709038][ T8459]  ? __pfx_woken_wake_function+0x10/0x10
[  198.709067][ T8459]  ? __pfx___might_resched+0x10/0x10
[  198.709100][ T8459]  ? __pfx_n_tty_write+0x10/0x10
[  198.709124][ T8459]  file_tty_write.constprop.0+0x503/0x9b0
[  198.709173][ T8459]  redirected_tty_write+0xd4/0x120
[  198.709206][ T8459]  do_iter_readv_writev+0x662/0x9e0
[  198.709237][ T8459]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  198.709269][ T8459]  ? common_file_perm+0x1b1/0x500
[  198.709298][ T8459]  ? bpf_lsm_file_permission+0x9/0x10
[  198.709325][ T8459]  ? security_file_permission+0x71/0x210
[  198.709355][ T8459]  ? rw_verify_area+0xcf/0x6c0
[  198.709383][ T8459]  vfs_writev+0x35f/0xde0
[  198.709414][ T8459]  ? __lock_acquire+0x436/0x2890
[  198.709437][ T8459]  ? __pfx_vfs_writev+0x10/0x10
[  198.709466][ T8459]  ? putname+0xf5/0x1a0
[  198.709496][ T8459]  ? __fget_files+0x20e/0x3c0
[  198.709531][ T8459]  ? do_writev+0x132/0x340
[  198.709557][ T8459]  do_writev+0x132/0x340
[  198.709586][ T8459]  ? __pfx_do_writev+0x10/0x10
[  198.709619][ T8459]  do_syscall_64+0xcd/0xf80
[  198.709647][ T8459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.709668][ T8459] RIP: 0033:0x7ffbabb8f7c9
[  198.709686][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.709706][ T8459] RSP: 002b:00007ffba9df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  198.709728][ T8459] RAX: ffffffffffffffda RBX: 00007ffbabde6180 RCX: 00007ffbabb8f7c9
[  198.709744][ T8459] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004
[  198.709757][ T8459] RBP: 00007ffbabc13f91 R08: 0000000000000000 R09: 0000000000000000
[  198.709771][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.709784][ T8459] R13: 00007ffbabde6218 R14: 00007ffbabde6180 R15: 00007fff0c6eba68
[  198.709809][ T8459]  </TASK>
[  198.710171][ T8459] Kernel Offset: disabled