last executing test programs:

15.15266567s ago: executing program 0 (id=265):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0)
ppoll$auto(&(0x7f0000000040)={<r2=>r1, 0x4, 0xa7}, 0x1f, 0x0, 0x0, 0x8)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, 0x0, 0x0)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_vs_stats\x00', 0x121140, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
socket(0x18, 0x805, 0x2)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
open(0x0, 0x161342, 0x100)
socket(0x29, 0x2, 0x2)
r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), r0)
sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc102000", @ANYRES16=r5, @ANYBLOB="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"], 0x10fc}}, 0x1080)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da05, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x79f, 0x4, 0x6d41, 0x9, 0x2, 0x4000000000000d]}, 0x0)

13.622688477s ago: executing program 0 (id=270):
r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6)
unshare$auto(0x40000080)
socket(0x15, 0x800, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
tgkill$auto(0x0, 0x1, 0x1)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4)
openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0)
read$auto(0x3, 0x0, 0x1f40)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x40000, 0x0)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}})
r5 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r5, 0x550c, 0x0)

11.135074885s ago: executing program 2 (id=274):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
rseq$auto(0x0, 0xfffffff4, 0x0, 0x5)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0)
r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
socket(0x15, 0xa, 0x5)
connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2)
ioperm$auto(0x5, 0x8000020000008001, 0x2000000000000149)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
fcntl$auto_F_UNLCK(r2, 0x8, 0x2)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4)
select$auto(0x2, &(0x7f0000000100)={[0x3, 0x7ff, 0x1, 0x8, 0x94c1, 0x0, 0x5, 0x14, 0x9, 0x2, 0x1, 0x7, 0xd11, 0x420, 0x4, 0x27de]}, &(0x7f0000000180)={[0x7fffffffffffffff, 0x586, 0x5, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x7, 0x40, 0x7fffffffffffffff, 0x0, 0x1, 0x5d, 0x8, 0x6]}, &(0x7f0000000200)={[0x96c, 0xb, 0x8000000000000001, 0x7, 0x54bf, 0xf50, 0xcb20, 0x1, 0x8, 0x8000, 0x2, 0x7f, 0x6df, 0x8ad5, 0x2, 0x3]}, &(0x7f0000000040)={0x7fffffff, 0x3})
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0x3b, 0x5, 0x8)

10.105801312s ago: executing program 0 (id=277):
unshare$auto(0xb7)
mmap$auto(0x6, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5f}, 0x1, 0x0, 0x0, 0x400c810}, 0x8800)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0xf663, 0x15)
mmap$auto(0x2000000000000000, 0x8, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)

8.366968262s ago: executing program 0 (id=281):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x801, 0x100)
io_uring_setup$auto(0x8, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
socket(0x1b, 0x3, 0x1)
madvise$auto(0x0, 0x2000040080000004, 0xe)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x9eff, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r5, 0x1, 0x470bd26, 0x25dfdbfe, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x4)
syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0)
readv$auto(0x3, 0x0, 0x1)
mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r3, 0x1)
socket(0x5, 0xa, 0x2000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0xd551)
socket(0x2c, 0x6, 0x2)
write$auto_rfkill_fops_core(r2, &(0x7f0000000200)="9dea31913cb498217735bbce17f68148281da8acc8b124f8dc04f11f1fa2a9ae7463c4f77ee1feaf711d833ea95c4f433afc6d44d6e591370504369fcc8b786d2db722ab2d5d80df1c7d2ae6eeb0b7cd11d603918ac22abe77711c05c1c11d59bb7c542b966790f31b3d100e436e619db789dd3ae1413d0d9bf34731f5e94f49f389f79f3a3ed9d518bee3c6545f096462d8dad84732e9300a0b987bcc66f7d9fbaa7bb75b353885b325e4707d", 0xad)

8.185609785s ago: executing program 2 (id=282):
unshare$auto(0xb7)
mmap$auto(0x6, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5f}, 0x1, 0x0, 0x0, 0x400c810}, 0x8800)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0xf663, 0x15)
mmap$auto(0x2000000000000000, 0x8, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)

7.090211144s ago: executing program 3 (id=283):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0)
timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @inferred=r0, 0x0, @_tid=r1}, &(0x7f0000000080)=0x2)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
futex_wake$auto(&(0x7f00000001c0), 0x5, 0x4, 0xa)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
socket(0x25, 0x1, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(r4, 0x8, 0x0)
unshare$auto(0x40000080)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe6, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
r5 = gettid()
process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x20000000000008}, 0x1007, 0x0, 0x9, 0x0)

7.072379374s ago: executing program 1 (id=284):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = socketpair$auto(0x1e, 0x100005, 0x1ffe, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/status.8\x00', 0x103000, 0x0)
readv$auto(r1, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0x8)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0100c349c7f6f9dbdf25010000000000140008006d61637674617030000000000000000014001f00"/56], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4e}, 0x1, 0x0, 0x0, 0x24000101}, 0x4)
mmap$auto(0x0, 0x80000002020009, 0x3, 0x410, 0xfffffffffffffffa, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
msgrcv$auto(0x4, 0x0, 0x3a, 0x6e2e, 0xfffffffb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
write$auto(0x3, 0x0, 0xfdef)
lseek$auto(0x3, 0xfffffffffffffff7, 0x4)
read$auto(r3, 0x0, 0xb4d3)

6.714839343s ago: executing program 2 (id=285):
unshare$auto(0xb7)
mmap$auto(0x6, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0xf663, 0x15)
mmap$auto(0x2000000000000000, 0x8, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)

5.382756434s ago: executing program 1 (id=286):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x800, 0x0)

5.116678838s ago: executing program 3 (id=287):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x0, 0x0)
write$auto(r0, 0x0, 0x7ef)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0x20499d, 0x9)
select$auto(0x12, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(r2, r0, 0x8)
r3 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000080)=""/202, 0xca)
ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r3, 0x8010661b, &(0x7f0000000040)="cd0c0864cb7845cf2a936ec1fbdd9279")
keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)

5.058753416s ago: executing program 2 (id=288):
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x80, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/controlC2\x00', 0x2100, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x88002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
ioctl$auto(r2, 0xc0104d04, 0x8)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008080)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0)
write$auto_sg_fops_sg(r3, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c7", 0x30)
ioctl$auto_SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000040))
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x8002, 0x0)
setsockopt$auto_SO_RCVTIMEO_OLD(r4, 0xef4, 0x14, &(0x7f0000000040)=',.\x00', 0x5)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0)
socketpair$auto(0x7, 0x2a7998f5, 0x3, &(0x7f00000010c0)=0x1)
read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f00000000c0)=""/4087, 0xff7)
r6 = io_uring_setup$auto(0x9e6, 0x0)
ioctl$auto_EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000080)=0x6)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'<x\xfc\x19j\xfd\x95\xeaf\x06\x14+\x06:\x803\xae[\xfa\xac\x83\xd2', 0x4f, 0x7)
socket(0xa, 0x1, 0x84)
listen$auto(0x3, 0x83)
accept4$auto(r4, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/security/tomoyo/query\x00', 0x2300, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f6da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0)

5.038448441s ago: executing program 1 (id=289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0xcac5, 0x400008, 0xdf, 0x19, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';')
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0)
write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7fffffff)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/batadv_slave_0/arp_announce\x00', 0x141241, 0x0)
pwrite64$auto(r5, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5)
readahead$auto(r5, 0x4, 0x4)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000)
read$auto_dfs_cpu_ops_debugfs(r3, &(0x7f00000003c0)=""/213, 0x6c)
r6 = io_uring_setup$auto(0x6, 0x0)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(r7, 0xc1205531, r6)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
sendfile$auto(r8, r8, 0x0, 0x1)

3.694030151s ago: executing program 3 (id=290):
mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0)
ioctl$auto_FIOASYNC(r1, 0x5452, 0x2)
r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040))
fcntl$auto(r3, 0x402, 0x2)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x22240, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cpu.weight\x00', 0x128082, 0x0)
write$auto(r5, 0x0, 0x4)
open(0x0, 0x22240, 0x55)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80)
bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)=@bpf_attr_0={0x63, 0x7, 0x8, 0x10, 0x1, r0, 0x2, "af97841f2ac2f03d758ede3751856d98", r8, r2, 0xe, 0x1, 0x2, 0x90, r0, r0}, 0xbe0)
socket(0x2, 0x3, 0xa)
sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x28c, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_EHT_CAPABILITY={0xa8, 0x136, "6539edb559487d73133be20b8e4c21bbf1992287eefd4c3af744c3403fbb4cdd706fe7f9ccd184ee8ee9e28f8c4d248323c7d7d1182ba6de50ce506944fa3f66686c6aa208b100c20ffa4a4c51eb33c9019ae31b765104719b87494af7f34cf84a1f1214da95f8b5a3c9f9842050dc3854531e856d754349cdbe4039498507a012eb1ad7049dc13b6d0b0e717f2bcbf01ca3d340a06c812e1bd5a4b1189d24465f043a10"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SAR_SPEC={0x1c8, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xffffffff}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x1a4, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffa}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffc}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8c}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}]}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010)
r9 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x200000, 0x0)
ioctl$auto_BTRFS_IOC_ENCODED_READ(r9, 0x80809440, &(0x7f0000000700)={&(0x7f0000000280)={&(0x7f0000000300)="de77be54a6900db2d9debba9b04e17f7ec237bc5d990d5298dfd106b9113051076007e4891e2cd4ff6e777c9e68ab4b796a5fe83dfb305cb2e36f98206652097b5833a72b6c4a3660ac223e5c547db26a8cbc5f302e73dc73f23ab196152d8dbde30d2030d6b5fd94b942d060102ece86495552a1a2833277a5e342a6a2b0fd06ec0c41d43625d4c539a53d8495a82633d1002094f6919dec4fd0c559e061f369c42f897b07e20e65aa19a5772069d8ea780a2a411ec01e444520d192b4bd9ac294ae2521cc52bebeb384e4d9ad365", 0x4}, 0xffffffff, 0x100000000, 0x6, 0x6, 0x6, 0x8, 0x1, 0x0, "0da6aa3d6ee79cc77b0d3dcac0bc7115890d5f9e796072d7a0890695f3201e3fc0bbcda1bcb2f5f391fa2696b067746cc369ff362f01ff4e802510123a1fbd37"})
ioctl$auto(0x3, 0x80000541b, 0x38)
lseek$auto(0x3, 0x0, 0x1)
munmap$auto(0x400, 0xffffffff)

3.605333892s ago: executing program 2 (id=291):
r0 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x7, 0x2, 0x0, 0xb380, 0x1)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000140)={{0x4, <r2=>0xee00, 0xee00, 0x800080, 0x4, 0x40, 0x9}, &(0x7f00000000c0)=0xc7, &(0x7f0000000100), 0x9, 0x4, 0x6e08, 0x10, 0x10, 0x3, 0x81, 0xd977, @raw=0x2, @inferred=0xffffffffffffffff})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x10000000000002a, 0x0)
r3 = fsopen$auto(0x0, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, r4)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0)
io_uring_setup$auto(0x85, 0x0)
r5 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r5, 0x0, 0x487, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x3b71, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
ioctl$auto_XFS_IOC_FREESP64(r3, 0x40305825, &(0x7f00000001c0)={0x1, 0x3, 0x35, 0x100, 0x6, 0xffffffffffffffff})
fcntl$auto(0x3, 0x4, 0xa553)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_TIPC_NL_SOCK_GET(r0, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc140000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x14fc}}, 0x4002000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r6, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
close_range$auto(0x2, 0x8, 0x0)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0)

3.570439441s ago: executing program 1 (id=292):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = socketpair$auto(0x1e, 0x100005, 0x1ffe, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/status.8\x00', 0x103000, 0x0)
readv$auto(r1, &(0x7f0000006080)={&(0x7f0000000040), 0xba41}, 0x8)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40090)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100c349c7f6f9dbdf25010000000000140008006d61637674617030000000000000000014001f00"/56], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4e}, 0x1, 0x0, 0x0, 0x24000101}, 0x4)
mmap$auto(0x0, 0x80000002020009, 0x3, 0x410, 0xfffffffffffffffa, 0x8000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
msgrcv$auto(0x4, 0x0, 0x3a, 0x6e2e, 0xfffffffb)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x15)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
write$auto(0x3, 0x0, 0xfdef)
lseek$auto(0x3, 0xfffffffffffffff7, 0x4)
read$auto(r3, 0x0, 0xb4d3)

3.284115859s ago: executing program 0 (id=293):
unshare$auto(0xb7)
mmap$auto(0x6, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x8800)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0xf663, 0x15)
mmap$auto(0x2000000000000000, 0x8, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)

2.396199656s ago: executing program 3 (id=294):
r0 = socket(0x15, 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000)
getsockopt$auto(r0, 0x87, 0x84, 0x0, &(0x7f00000000c0)=0x10008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r1, 0x0, 0xe8)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000040)={0x0, 0x2}, 0x6)
madvise$auto(0x0, 0x100000, 0x17)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2, 0x1, 0x0)
epoll_create$auto(0x4)
openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
open(0x0, 0x7ffd, 0x12)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r2 = io_uring_setup$auto(0x406, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46)
io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3)
move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2)
io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2)
write$auto(0x0, 0x0, 0x0)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)

1.944425248s ago: executing program 1 (id=295):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x0, 0x0)
write$auto(r0, 0x0, 0x7ef)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0x20499d, 0x9)
select$auto(0x12, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(r2, r0, 0x8)
r3 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000080)=""/202, 0xca)
ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r3, 0x8010661b, &(0x7f0000000040)="cd0c0864cb7845cf2a936ec1fbdd9279")
keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)

1.312927613s ago: executing program 2 (id=296):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
futex_wake$auto(&(0x7f00000001c0), 0x5, 0x4, 0xa)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0)
socket(0x25, 0x1, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(r4, 0x8, 0x0)
unshare$auto(0x40000080)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xe6, 0x9b72, 0x2, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
r5 = gettid()
process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x20000000000008}, 0x1007, 0x0, 0x9, 0x0)

1.103796953s ago: executing program 3 (id=297):
unshare$auto(0xb7)
mmap$auto(0x6, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
sched_get_priority_min$auto(0x40)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x8800)
sendmmsg$auto(0x3, 0x0, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0xf663, 0x15)
mmap$auto(0x2000000000000000, 0x8, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)

379.969132ms ago: executing program 0 (id=298):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x0, 0x0)
write$auto(r0, 0x0, 0x7ef)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
madvise$auto(0x0, 0x20499d, 0x9)
select$auto(0x12, 0x0, 0x0, 0x0, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(r2, r0, 0x8)
r3 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0)
read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000080)=""/202, 0xca)
ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r3, 0x8010661b, &(0x7f0000000040)="cd0c0864cb7845cf2a936ec1fbdd9279")
keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8)
keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2)

55.886369ms ago: executing program 3 (id=299):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop5/queue/nr_requests\x00', 0xa801, 0x0)
write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)

0s ago: executing program 1 (id=300):
r0 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
write$auto(r0, 0x0, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts.
[  102.572233][ T5852] cgroup: Unknown subsys name 'net'
[  102.621918][   T24] cfg80211: failed to load regulatory.db
[  102.735226][ T5852] cgroup: Unknown subsys name 'cpuset'
[  102.749339][ T5852] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  104.895029][ T5852] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  107.387910][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  107.404301][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  107.425279][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  107.436065][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.452236][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.463141][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  107.475257][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.491617][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  107.543032][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.574213][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  107.583144][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.585781][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  107.597386][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.606453][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  107.625547][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  107.626578][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  107.642526][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.660345][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  107.671006][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.682163][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  108.318026][ T5862] chnl_net:caif_netlink_parms(): no params data found
[  108.467160][ T5865] chnl_net:caif_netlink_parms(): no params data found
[  108.521373][ T5869] chnl_net:caif_netlink_parms(): no params data found
[  108.627838][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.636980][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.648226][ T5862] bridge_slave_0: entered allmulticast mode
[  108.658133][ T5862] bridge_slave_0: entered promiscuous mode
[  108.688450][ T5872] chnl_net:caif_netlink_parms(): no params data found
[  108.718674][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.730537][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.741305][ T5862] bridge_slave_1: entered allmulticast mode
[  108.753120][ T5862] bridge_slave_1: entered promiscuous mode
[  108.861572][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.873884][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.885115][ T5865] bridge_slave_0: entered allmulticast mode
[  108.896218][ T5865] bridge_slave_0: entered promiscuous mode
[  108.953218][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.965550][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.976530][ T5865] bridge_slave_1: entered allmulticast mode
[  108.988173][ T5865] bridge_slave_1: entered promiscuous mode
[  109.027531][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.046865][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.064153][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.078454][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.088712][ T5869] bridge_slave_0: entered allmulticast mode
[  109.101118][ T5869] bridge_slave_0: entered promiscuous mode
[  109.167746][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.178295][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.188874][ T5869] bridge_slave_1: entered allmulticast mode
[  109.200919][ T5869] bridge_slave_1: entered promiscuous mode
[  109.255734][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.297591][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.314689][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.346047][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.375829][ T5862] team0: Port device team_slave_0 added
[  109.387322][ T5862] team0: Port device team_slave_1 added
[  109.410183][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.421615][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.433228][ T5872] bridge_slave_0: entered allmulticast mode
[  109.442799][ T5872] bridge_slave_0: entered promiscuous mode
[  109.497778][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.509279][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.520775][ T5872] bridge_slave_1: entered allmulticast mode
[  109.530222][ T5872] bridge_slave_1: entered promiscuous mode
[  109.541703][ T5865] team0: Port device team_slave_0 added
[  109.567641][ T5869] team0: Port device team_slave_0 added
[  109.593078][ T5865] team0: Port device team_slave_1 added
[  109.618680][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.629604][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.669499][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.669595][ T5864] Bluetooth: hci0: command tx timeout
[  109.688897][ T5869] team0: Port device team_slave_1 added
[  109.734707][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.744358][ T5873] Bluetooth: hci3: command tx timeout
[  109.747281][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.751643][ T5185] Bluetooth: hci1: command tx timeout
[  109.794983][ T5864] Bluetooth: hci2: command tx timeout
[  109.800187][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.842342][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.855060][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.865159][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.904601][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.952339][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.967169][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.984758][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.028493][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.078057][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.088683][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.126226][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.196504][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.207691][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.244585][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.274864][ T5872] team0: Port device team_slave_0 added
[  110.290276][ T5862] hsr_slave_0: entered promiscuous mode
[  110.299196][ T5862] hsr_slave_1: entered promiscuous mode
[  110.344361][ T5872] team0: Port device team_slave_1 added
[  110.382890][ T5865] hsr_slave_0: entered promiscuous mode
[  110.391713][ T5865] hsr_slave_1: entered promiscuous mode
[  110.407099][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[  110.420279][ T5865] Cannot create hsr debugfs directory
[  110.483738][ T5869] hsr_slave_0: entered promiscuous mode
[  110.495413][ T5869] hsr_slave_1: entered promiscuous mode
[  110.504321][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[  110.512925][ T5869] Cannot create hsr debugfs directory
[  110.547906][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.558835][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.590648][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.658649][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.670321][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.705954][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.904226][ T5872] hsr_slave_0: entered promiscuous mode
[  110.914583][ T5872] hsr_slave_1: entered promiscuous mode
[  110.924129][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[  110.931289][ T5872] Cannot create hsr debugfs directory
[  111.304661][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  111.327328][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  111.356999][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  111.382758][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  111.472373][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  111.508104][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  111.560787][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  111.592707][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  111.675347][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  111.717462][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  111.731754][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  111.740843][ T5864] Bluetooth: hci0: command tx timeout
[  111.761044][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  111.820410][ T5864] Bluetooth: hci1: command tx timeout
[  111.821420][ T5185] Bluetooth: hci2: command tx timeout
[  111.826868][ T5873] Bluetooth: hci3: command tx timeout
[  111.873318][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  111.892493][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  111.922243][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  111.937529][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  112.011943][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.078675][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[  112.096707][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.123472][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.136469][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.186213][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[  112.215030][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.225283][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.296256][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.306754][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.368331][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.378758][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.459058][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.507126][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.543042][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[  112.595269][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.604244][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.651912][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[  112.711031][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.721031][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.766006][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.776678][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.807884][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.819896][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.304455][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.385899][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.655503][ T5865] veth0_vlan: entered promiscuous mode
[  113.683779][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.701664][ T5865] veth1_vlan: entered promiscuous mode
[  113.729480][ T5862] veth0_vlan: entered promiscuous mode
[  113.778338][ T5862] veth1_vlan: entered promiscuous mode
[  113.823385][ T5864] Bluetooth: hci0: command tx timeout
[  113.831820][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.881637][ T5865] veth0_macvtap: entered promiscuous mode
[  113.900805][ T5864] Bluetooth: hci1: command tx timeout
[  113.910719][ T5873] Bluetooth: hci3: command tx timeout
[  113.910731][ T5185] Bluetooth: hci2: command tx timeout
[  113.931790][ T5865] veth1_macvtap: entered promiscuous mode
[  113.986575][ T5862] veth0_macvtap: entered promiscuous mode
[  114.016554][ T5862] veth1_macvtap: entered promiscuous mode
[  114.048417][ T5872] veth0_vlan: entered promiscuous mode
[  114.069229][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.090404][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.126736][ T3510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.142817][ T3510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.170231][ T3510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.184532][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.204762][ T5872] veth1_vlan: entered promiscuous mode
[  114.224815][ T3510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.261076][ T5869] veth0_vlan: entered promiscuous mode
[  114.273096][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.331394][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.363547][ T5869] veth1_vlan: entered promiscuous mode
[  114.384275][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.398964][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.457128][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.508253][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.533756][ T5872] veth0_macvtap: entered promiscuous mode
[  114.537184][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.593960][ T5872] veth1_macvtap: entered promiscuous mode
[  114.693826][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.704588][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.716822][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.748439][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.767199][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.792958][ T5869] veth0_macvtap: entered promiscuous mode
[  114.846792][ T5869] veth1_macvtap: entered promiscuous mode
[  114.862545][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.888664][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  114.926120][   T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.941771][   T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.967357][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.971099][   T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.991711][   T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.010639][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.074602][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.136055][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.216614][   T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.265661][   T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.374642][   T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.374726][   T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.494072][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.540141][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.818975][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.823573][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.858397][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.892383][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.911937][ T5873] Bluetooth: hci0: command tx timeout
[  115.983749][ T5873] Bluetooth: hci2: command tx timeout
[  116.000368][ T5873] Bluetooth: hci3: command tx timeout
[  116.010896][ T5864] Bluetooth: hci1: command tx timeout
[  116.165901][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  116.572362][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.614277][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.640704][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.671600][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.603068][ T5970] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  117.725714][ T5973] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  118.000738][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.013782][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  118.030409][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.040380][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  118.044816][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.077748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.091103][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  119.122048][ T5986] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  119.235077][ T5995] random: crng reseeded on system resumption
[  119.654561][ T5997] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  119.963921][ T5997] FAULT_INJECTION: forcing a failure.
[  119.963921][ T5997] name failslab, interval 1, probability 0, space 0, times 1
[  120.020165][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.0.8 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  120.020208][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  120.020225][ T5997] Call Trace:
[  120.020235][ T5997]  <TASK>
[  120.020247][ T5997]  dump_stack_lvl+0x16c/0x1f0
[  120.020286][ T5997]  should_fail_ex+0x512/0x640
[  120.020325][ T5997]  ? __kmalloc_noprof+0xbf/0x510
[  120.020374][ T5997]  ? ima_write_template_field_data+0x5d/0x1f0
[  120.020413][ T5997]  should_failslab+0xc2/0x120
[  120.020454][ T5997]  __kmalloc_noprof+0xd2/0x510
[  120.020498][ T5997]  ima_write_template_field_data+0x5d/0x1f0
[  120.020545][ T5997]  ima_eventname_init_common+0x1b8/0x260
[  120.020591][ T5997]  ? __pfx_ima_eventname_init_common+0x10/0x10
[  120.020638][ T5997]  ? trace_kmalloc+0x2b/0xd0
[  120.020678][ T5997]  ? __kmalloc_noprof+0x242/0x510
[  120.020724][ T5997]  ima_alloc_init_template+0x39d/0x720
[  120.020759][ T5997]  ? rcu_is_watching+0x12/0xc0
[  120.020832][ T5997]  ima_store_measurement+0x1eb/0x5c0
[  120.020892][ T5997]  ? __pfx_ima_store_measurement+0x10/0x10
[  120.020928][ T5997]  ? vfs_getxattr_alloc+0xec/0x340
[  120.020975][ T5997]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  120.021030][ T5997]  process_measurement+0x1ddb/0x23e0
[  120.021100][ T5997]  ? __pfx_process_measurement+0x10/0x10
[  120.021149][ T5997]  ? __pfx___might_resched+0x10/0x10
[  120.021191][ T5997]  ? tracing_check_open_get_tr.part.0+0xdc/0x190
[  120.021270][ T5997]  ? tracing_check_open_get_tr.part.0+0xe1/0x190
[  120.021312][ T5997]  ? inode_to_bdi+0x9e/0x160
[  120.021366][ T5997]  ima_file_check+0xc5/0x110
[  120.021412][ T5997]  ? __pfx_ima_file_check+0x10/0x10
[  120.021472][ T5997]  security_file_post_open+0x8e/0x210
[  120.021509][ T5997]  path_openat+0x1404/0x2cb0
[  120.021560][ T5997]  ? __pfx_path_openat+0x10/0x10
[  120.021609][ T5997]  do_filp_open+0x20b/0x470
[  120.021645][ T5997]  ? __pfx_do_filp_open+0x10/0x10
[  120.021709][ T5997]  ? alloc_fd+0x471/0x7d0
[  120.021755][ T5997]  do_sys_openat2+0x11b/0x1d0
[  120.021801][ T5997]  ? __pfx_do_sys_openat2+0x10/0x10
[  120.021866][ T5997]  __x64_sys_openat+0x174/0x210
[  120.021913][ T5997]  ? __pfx___x64_sys_openat+0x10/0x10
[  120.021975][ T5997]  do_syscall_64+0xcd/0x490
[  120.022014][ T5997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.022044][ T5997] RIP: 0033:0x7f70e778ebe9
[  120.022070][ T5997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.022096][ T5997] RSP: 002b:00007f70e85e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  120.022126][ T5997] RAX: ffffffffffffffda RBX: 00007f70e79b6090 RCX: 00007f70e778ebe9
[  120.022145][ T5997] RDX: 0000000000080100 RSI: 0000200000008140 RDI: ffffffffffffff9c
[  120.022164][ T5997] RBP: 00007f70e7811e19 R08: 0000000000000000 R09: 0000000000000000
[  120.022182][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.022199][ T5997] R13: 00007f70e79b6128 R14: 00007f70e79b6090 R15: 00007ffee5366f48
[  120.022241][ T5997]  </TASK>
[  120.026190][   T30] audit: type=1804 audit(1754639254.693:2): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.8" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb" dev="tracefs" ino=162 res=0 errno=0
[  122.659038][ T6012] can: request_module (can-proto-0) failed.
[  124.062927][ T6034] process 'syz.2.14' launched './file0' with NULL argv: empty string added
[  124.202807][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.518734][ T6039] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet.
[  125.803558][ T6051] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE�r��҄y�*�"�l-���y–��
[  128.350037][ T6077] capability: warning: `syz.1.22' uses 32-bit capabilities (legacy support in use)
[  128.631100][ T6086] ACPI: Can not change Invalid GPE/Fixed Event status
[  129.658719][ T6096] nbd: nbd7 already in use
[  130.376576][ T6110] FAULT_INJECTION: forcing a failure.
[  130.376576][ T6110] name failslab, interval 1, probability 0, space 0, times 0
[  130.490102][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.3.27 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  130.490161][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  130.490179][ T6110] Call Trace:
[  130.490189][ T6110]  <TASK>
[  130.490202][ T6110]  dump_stack_lvl+0x16c/0x1f0
[  130.490244][ T6110]  should_fail_ex+0x512/0x640
[  130.490280][ T6110]  ? __kmalloc_noprof+0xbf/0x510
[  130.490319][ T6110]  ? snd_pcm_plugin_build+0x64/0x650
[  130.490364][ T6110]  should_failslab+0xc2/0x120
[  130.490725][ T6110]  __kmalloc_noprof+0xd2/0x510
[  130.490769][ T6110]  ? __mutex_unlock_slowpath+0x163/0x800
[  130.490814][ T6110]  snd_pcm_plugin_build+0x64/0x650
[  130.490859][ T6110]  ? snd_pcm_plugin_build+0x4b7/0x650
[  130.490907][ T6110]  snd_pcm_plugin_build_linear+0x29d/0x850
[  130.490943][ T6110]  ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10
[  130.490981][ T6110]  ? snd_pcm_hw_params+0xcd/0x1ba0
[  130.491015][ T6110]  snd_pcm_plug_format_plugins+0x614/0x1430
[  130.491070][ T6110]  ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10
[  130.491268][ T6110]  ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10
[  130.491339][ T6110]  snd_pcm_oss_change_params_locked+0x2dec/0x3a30
[  130.491399][ T6110]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  130.491479][ T6110]  snd_pcm_oss_get_active_substream+0x168/0x1d0
[  130.491532][ T6110]  snd_pcm_oss_ioctl+0x21e9/0x37a0
[  130.491580][ T6110]  ? hook_file_ioctl_common+0x145/0x410
[  130.491617][ T6110]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  130.491667][ T6110]  ? __fget_files+0x20e/0x3c0
[  130.491707][ T6110]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  130.491753][ T6110]  __x64_sys_ioctl+0x18e/0x210
[  130.491802][ T6110]  do_syscall_64+0xcd/0x490
[  130.491841][ T6110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.491872][ T6110] RIP: 0033:0x7fdf3418ebe9
[  130.491897][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.491925][ T6110] RSP: 002b:00007fdf35077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  130.491957][ T6110] RAX: ffffffffffffffda RBX: 00007fdf343b6090 RCX: 00007fdf3418ebe9
[  130.491977][ T6110] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a
[  130.491996][ T6110] RBP: 00007fdf34211e19 R08: 0000000000000000 R09: 0000000000000000
[  130.492014][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.492031][ T6110] R13: 00007fdf343b6128 R14: 00007fdf343b6090 R15: 00007ffd31a190f8
[  130.492073][ T6110]  </TASK>
[  130.824707][    C0] vkms_vblank_simulate: vblank timer overrun
[  131.346852][ T6100] netlink: 334 bytes leftover after parsing attributes in process `syz.2.26'.
[  131.395829][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.977063][ T6139] mmap: syz.3.33 (6139) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.416526][ T6139] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  135.233301][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'.
[  138.504247][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  138.523675][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  139.704845][ T6219] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  139.821871][ T6219] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.139524][ T6219] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.485999][ T6219] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  140.604603][ T6219] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.716042][ T6219] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.754606][ T6219] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  140.798898][ T6219] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  140.895356][ T6219] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  140.955122][ T6219] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  140.995810][ T6219] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  141.045788][ T6219] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  141.089616][ T6232] syz.2.44 (6232) used greatest stack depth: 19752 bytes left
[  141.750724][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout
[  142.280754][ T6251] random: crng reseeded on system resumption
[  142.548539][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.783565][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout
[  143.054617][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout
[  143.850037][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout
[  144.630000][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout
[  144.674839][ T6276] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  144.861926][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout
[  145.099870][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout
[  145.959824][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout
[  146.033719][ T6290] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  146.447232][ T6293] FAULT_INJECTION: forcing a failure.
[  146.447232][ T6293] name failslab, interval 1, probability 0, space 0, times 0
[  146.462162][ T6293] CPU: 1 UID: 0 PID: 6293 Comm: syz.0.53 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  146.462199][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  146.462210][ T6293] Call Trace:
[  146.462217][ T6293]  <TASK>
[  146.462224][ T6293]  dump_stack_lvl+0x16c/0x1f0
[  146.462251][ T6293]  should_fail_ex+0x512/0x640
[  146.462272][ T6293]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  146.462297][ T6293]  should_failslab+0xc2/0x120
[  146.462321][ T6293]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  146.462346][ T6293]  ? sk_prot_alloc+0x60/0x2a0
[  146.462373][ T6293]  sk_prot_alloc+0x60/0x2a0
[  146.462398][ T6293]  sk_alloc+0x36/0xc20
[  146.462416][ T6293]  inet_create+0x3a1/0x1040
[  146.462444][ T6293]  ? inet_create+0x93/0x1040
[  146.462474][ T6293]  __sock_create+0x338/0x8d0
[  146.462503][ T6293]  mptcp_subflow_create_socket+0xf5/0xed0
[  146.462533][ T6293]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  146.462567][ T6293]  __mptcp_nmpc_sk+0x182/0x7d0
[  146.462593][ T6293]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  146.462621][ T6293]  ? __local_bh_enable_ip+0xa4/0x120
[  146.462648][ T6293]  mptcp_getsockopt+0xcf8/0xe20
[  146.462671][ T6293]  ? __pfx_mptcp_getsockopt+0x10/0x10
[  146.462694][ T6293]  ? find_held_lock+0x2b/0x80
[  146.462711][ T6293]  ? __might_fault+0xe3/0x190
[  146.462730][ T6293]  ? __might_fault+0xe3/0x190
[  146.462749][ T6293]  ? __might_fault+0x13b/0x190
[  146.462777][ T6293]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  146.462800][ T6293]  do_sock_getsockopt+0x34a/0x440
[  146.462827][ T6293]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  146.462850][ T6293]  ? __fget_files+0x204/0x3c0
[  146.462879][ T6293]  __sys_getsockopt+0x123/0x1b0
[  146.462902][ T6293]  __x64_sys_getsockopt+0xbd/0x160
[  146.462920][ T6293]  ? do_syscall_64+0x91/0x490
[  146.462939][ T6293]  ? lockdep_hardirqs_on+0x7c/0x110
[  146.462958][ T6293]  do_syscall_64+0xcd/0x490
[  146.462979][ T6293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.462998][ T6293] RIP: 0033:0x7f70e778ebe9
[  146.463012][ T6293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.463029][ T6293] RSP: 002b:00007f70e8604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  146.463047][ T6293] RAX: ffffffffffffffda RBX: 00007f70e79b5fa0 RCX: 00007f70e778ebe9
[  146.463058][ T6293] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006
[  146.463068][ T6293] RBP: 00007f70e7811e19 R08: 0000000000000000 R09: 0000000000000000
[  146.463087][ T6293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.463097][ T6293] R13: 00007f70e79b6038 R14: 00007f70e79b5fa0 R15: 00007ffee5366f48
[  146.463123][ T6293]  </TASK>
[  146.776926][ T5185] Bluetooth: hci1: command 0x0c1a tx timeout
[  146.940142][ T5185] Bluetooth: hci2: command 0x0c1a tx timeout
[  147.182190][ T5185] Bluetooth: hci3: command 0x0c1a tx timeout
[  148.446316][ T6317] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  148.689976][ T6325] FAULT_INJECTION: forcing a failure.
[  148.689976][ T6325] name failslab, interval 1, probability 0, space 0, times 0
[  148.739992][ T6325] CPU: 1 UID: 0 PID: 6325 Comm: syz.2.60 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  148.740036][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  148.740052][ T6325] Call Trace:
[  148.740062][ T6325]  <TASK>
[  148.740073][ T6325]  dump_stack_lvl+0x16c/0x1f0
[  148.740100][ T6325]  should_fail_ex+0x512/0x640
[  148.740122][ T6325]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  148.740148][ T6325]  should_failslab+0xc2/0x120
[  148.740173][ T6325]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  148.740196][ T6325]  ? __d_alloc+0x32/0xae0
[  148.740222][ T6325]  __d_alloc+0x32/0xae0
[  148.740247][ T6325]  d_alloc_parallel+0x111/0x1480
[  148.740288][ T6325]  ? do_raw_spin_lock+0x12c/0x2b0
[  148.740321][ T6325]  ? __pfx_d_alloc_parallel+0x10/0x10
[  148.740352][ T6325]  ? lockdep_init_map_type+0x5c/0x280
[  148.740378][ T6325]  ? lockdep_init_map_type+0x5c/0x280
[  148.740407][ T6325]  __lookup_slow+0x193/0x460
[  148.740435][ T6325]  ? __pfx___lookup_slow+0x10/0x10
[  148.740477][ T6325]  ? lookup_fast+0x156/0x610
[  148.740498][ T6325]  walk_component+0x353/0x5b0
[  148.740518][ T6325]  path_lookupat+0x142/0x6d0
[  148.740540][ T6325]  path_openat+0x16f1/0x2cb0
[  148.740561][ T6325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.740587][ T6325]  ? __pfx_path_openat+0x10/0x10
[  148.740614][ T6325]  do_filp_open+0x20b/0x470
[  148.740636][ T6325]  ? __pfx_do_filp_open+0x10/0x10
[  148.740673][ T6325]  ? alloc_fd+0x471/0x7d0
[  148.740698][ T6325]  do_sys_openat2+0x11b/0x1d0
[  148.740725][ T6325]  ? __pfx_do_sys_openat2+0x10/0x10
[  148.740761][ T6325]  __x64_sys_openat+0x174/0x210
[  148.740789][ T6325]  ? __pfx___x64_sys_openat+0x10/0x10
[  148.740826][ T6325]  do_syscall_64+0xcd/0x490
[  148.740849][ T6325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.740866][ T6325] RIP: 0033:0x7fa16b98ebe9
[  148.740881][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.740898][ T6325] RSP: 002b:00007fa16c731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  148.740916][ T6325] RAX: ffffffffffffffda RBX: 00007fa16bbb5fa0 RCX: 00007fa16b98ebe9
[  148.740927][ T6325] RDX: 0000000000282180 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  148.740938][ T6325] RBP: 00007fa16ba11e19 R08: 0000000000000000 R09: 0000000000000000
[  148.740948][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.740959][ T6325] R13: 00007fa16bbb6038 R14: 00007fa16bbb5fa0 R15: 00007fff4d1a0fe8
[  148.740980][ T6325]  </TASK>
[  150.381681][ T6341] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  150.622928][ T6340] FAULT_INJECTION: forcing a failure.
[  150.622928][ T6340] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  150.622981][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.2.63 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  150.623014][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.623028][ T6340] Call Trace:
[  150.623037][ T6340]  <TASK>
[  150.623047][ T6340]  dump_stack_lvl+0x16c/0x1f0
[  150.623082][ T6340]  should_fail_ex+0x512/0x640
[  150.623122][ T6340]  should_fail_alloc_page+0xe7/0x130
[  150.623167][ T6340]  prepare_alloc_pages+0x3c2/0x610
[  150.623215][ T6340]  ? rcu_is_watching+0x12/0xc0
[  150.623263][ T6340]  __alloc_frozen_pages_noprof+0x18b/0x23f0
[  150.623306][ T6340]  ? rcu_is_watching+0x12/0xc0
[  150.623338][ T6340]  ? trace_mm_page_alloc+0x11f/0x1a0
[  150.623386][ T6340]  ? __alloc_frozen_pages_noprof+0x294/0x23f0
[  150.623419][ T6340]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  150.623450][ T6340]  ? lockdep_hardirqs_on+0x7c/0x110
[  150.623484][ T6340]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  150.623519][ T6340]  ? stack_depot_save_flags+0x3de/0x9c0
[  150.623570][ T6340]  ? alloc_vmap_area+0x645/0x29c0
[  150.623611][ T6340]  ? __vmalloc_node_range_noprof+0x271/0x14b0
[  150.623638][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.623665][ T6340]  ? do_syscall_64+0xcd/0x490
[  150.623696][ T6340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.623745][ T6340]  alloc_pages_bulk_noprof+0x71c/0x1410
[  150.623782][ T6340]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.623826][ T6340]  ? policy_nodemask+0xea/0x4e0
[  150.623871][ T6340]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  150.623911][ T6340]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  150.623970][ T6340]  kasan_populate_vmalloc+0xf1/0x1f0
[  150.624009][ T6340]  alloc_vmap_area+0x959/0x29c0
[  150.624071][ T6340]  ? __pfx_alloc_vmap_area+0x10/0x10
[  150.624127][ T6340]  __get_vm_area_node+0x1ca/0x330
[  150.624183][ T6340]  __vmalloc_node_range_noprof+0x271/0x14b0
[  150.624331][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.624362][ T6340]  ? __pfx___schedule+0x10/0x10
[  150.624390][ T6340]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.624437][ T6340]  ? policy_nodemask+0xea/0x4e0
[  150.624480][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.624522][ T6340]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  150.624586][ T6340]  ? ___kmalloc_large_node+0xed/0x160
[  150.624639][ T6340]  __kvmalloc_node_noprof+0x30a/0x620
[  150.624689][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.624721][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.624759][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.624788][ T6340]  __do_sys_listmount+0x1c2/0xf80
[  150.624828][ T6340]  ? __x64_sys_futex+0x1e0/0x4c0
[  150.624865][ T6340]  ? __x64_sys_futex+0x1e9/0x4c0
[  150.624904][ T6340]  ? __pfx___do_sys_listmount+0x10/0x10
[  150.624956][ T6340]  do_syscall_64+0xcd/0x490
[  150.624991][ T6340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.625021][ T6340] RIP: 0033:0x7fa16b98ebe9
[  150.625045][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.625073][ T6340] RSP: 002b:00007fa169bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  150.625101][ T6340] RAX: ffffffffffffffda RBX: 00007fa16bbb6180 RCX: 00007fa16b98ebe9
[  150.625121][ T6340] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  150.625139][ T6340] RBP: 00007fa16ba11e19 R08: 0000000000000000 R09: 0000000000000000
[  150.625157][ T6340] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  150.625175][ T6340] R13: 00007fa16bbb6218 R14: 00007fa16bbb6180 R15: 00007fff4d1a0fe8
[  150.625215][ T6340]  </TASK>
[  150.626902][ T6340] syz.2.63: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  150.627094][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.2.63 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  150.627131][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.627149][ T6340] Call Trace:
[  150.627158][ T6340]  <TASK>
[  150.627169][ T6340]  dump_stack_lvl+0x16c/0x1f0
[  150.627203][ T6340]  warn_alloc+0x248/0x3a0
[  150.627245][ T6340]  ? __pfx_warn_alloc+0x10/0x10
[  150.627278][ T6340]  ? kfree+0x2b4/0x4d0
[  150.627309][ T6340]  ? __get_vm_area_node+0x208/0x330
[  150.627355][ T6340]  __vmalloc_node_range_noprof+0xb2d/0x14b0
[  150.627382][ T6340]  ? __pfx___schedule+0x10/0x10
[  150.627405][ T6340]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.627444][ T6340]  ? policy_nodemask+0xea/0x4e0
[  150.627480][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.627514][ T6340]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  150.627545][ T6340]  ? ___kmalloc_large_node+0xed/0x160
[  150.627589][ T6340]  __kvmalloc_node_noprof+0x30a/0x620
[  150.627618][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.627651][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.627683][ T6340]  ? __do_sys_listmount+0x1c2/0xf80
[  150.627705][ T6340]  __do_sys_listmount+0x1c2/0xf80
[  150.627737][ T6340]  ? __x64_sys_futex+0x1e0/0x4c0
[  150.627767][ T6340]  ? __x64_sys_futex+0x1e9/0x4c0
[  150.627799][ T6340]  ? __pfx___do_sys_listmount+0x10/0x10
[  150.627842][ T6340]  do_syscall_64+0xcd/0x490
[  150.627874][ T6340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.627900][ T6340] RIP: 0033:0x7fa16b98ebe9
[  150.627921][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.627944][ T6340] RSP: 002b:00007fa169bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca
[  150.627967][ T6340] RAX: ffffffffffffffda RBX: 00007fa16bbb6180 RCX: 00007fa16b98ebe9
[  150.627984][ T6340] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100
[  150.628000][ T6340] RBP: 00007fa16ba11e19 R08: 0000000000000000 R09: 0000000000000000
[  150.628015][ T6340] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  150.628030][ T6340] R13: 00007fa16bbb6218 R14: 00007fa16bbb6180 R15: 00007fff4d1a0fe8
[  150.628065][ T6340]  </TASK>
[  150.628315][ T6340] Mem-Info:
[  151.671437][ T6340] active_anon:22940 inactive_anon:0 isolated_anon:0
[  151.671437][ T6340]  active_file:12260 inactive_file:40152 isolated_file:0
[  151.671437][ T6340]  unevictable:768 dirty:747 writeback:0
[  151.671437][ T6340]  slab_reclaimable:10929 slab_unreclaimable:91742
[  151.671437][ T6340]  mapped:35456 shmem:13827 pagetables:1134
[  151.671437][ T6340]  sec_pagetables:0 bounce:0
[  151.671437][ T6340]  kernel_misc_reclaimable:0
[  151.671437][ T6340]  free:1314936 free_pcp:15557 free_cma:0
[  151.671493][ T6340] Node 0 active_anon:91760kB inactive_anon:0kB active_file:49040kB inactive_file:160404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141824kB dirty:2988kB writeback:0kB shmem:53772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:12288kB kernel_stack:11744kB pagetables:4412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  151.671542][ T6340] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  151.671587][ T6340] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  151.671641][ T6340] lowmem_reserve[]: 0 2480 2481 2481 2481
[  151.671678][ T6340] Node 0 DMA32 free:1354348kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91716kB inactive_anon:0kB active_file:49040kB inactive_file:159064kB unevictable:1536kB writepending:2988kB present:3129332kB managed:2539660kB mlocked:0kB bounce:0kB free_pcp:42944kB local_pcp:12012kB free_cma:0kB
[  151.671731][ T6340] lowmem_reserve[]: 0 0 1 1 1
[  151.671766][ T6340] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1340kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  151.671817][ T6340] lowmem_reserve[]: 0 0 0 0 0
[  151.671944][ T6340] Node 1 Normal free:3890036kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19280kB local_pcp:6144kB free_cma:0kB
[  151.672179][ T6340] lowmem_reserve[]: 0 0 0 0 0
[  151.672235][ T6340] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  151.672367][ T6340] Node 0 DMA32: 11*4kB (UE) 336*8kB (UME) 218*16kB (UME) 155*32kB (UM) 310*64kB (UME) 124*128kB (UME) 69*256kB (UM) 45*512kB (UME) 15*1024kB (UM) 1*2048kB (E) 305*4096kB (UM) = 1354284kB
[  151.672526][ T6340] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  151.672622][ T6340] Node 1 Normal: 171*4kB (UE) 51*8kB (UME) 41*16kB (UME) 63*32kB (UME) 27*64kB (UME) 4*128kB (ME) 6*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 947*4096kB (ME) = 3890036kB
[  151.672786][ T6340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  151.672802][ T6340] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  151.672816][ T6340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  151.672831][ T6340] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  151.672846][ T6340] 65723 total pagecache pages
[  151.672853][ T6340] 0 pages in swap cache
[  151.672859][ T6340] Free swap  = 124996kB
[  151.672866][ T6340] Total swap = 124996kB
[  151.672874][ T6340] 2097051 pages RAM
[  151.672880][ T6340] 0 pages HighMem/MovableOnly
[  151.672887][ T6340] 430174 pages reserved
[  151.672893][ T6340] 0 pages cma reserved
[  153.785505][ T6349] netlink: 350 bytes leftover after parsing attributes in process `syz.3.64'.
[  153.797814][ T6349] Zero length message leads to an empty skb
[  154.024348][ T6368] vhci_hcd: invalid port number 16
[  154.179967][ T6368] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  154.495479][ T6368] netlink: 338 bytes leftover after parsing attributes in process `syz.2.68'.
[  154.506706][ T6368] macsec0: entered allmulticast mode
[  154.553640][ T6368] veth1_macvtap: entered allmulticast mode
[  156.023661][ T6383] ubi0: attaching mtd0
[  156.032188][ T6383] ubi0: scanning is finished
[  156.037546][ T6383] ubi0: empty MTD device detected
[  156.060640][ T6383] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  156.581064][ T6383] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  158.380824][ T6400] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  159.245663][ T6408] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  159.457232][ T6404] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  161.162170][ T6414] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  163.084887][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'.
[  163.116109][   T30] audit: type=1806 audit(1754639297.743:3): xattr="" res=-22
[  163.563702][ T6452] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  163.584197][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'.
[  163.673430][ T6455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'.
[  163.760737][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.965997][ T6455] bridge_slave_1 (unregistering): left allmulticast mode
[  164.050264][ T6455] bridge_slave_1 (unregistering): left promiscuous mode
[  164.098799][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.949962][ T6475] ICMPv6: process `syz.2.87' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead
[  166.481801][ T6477] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  166.552045][ T6477] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  166.603941][ T6477] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  166.651284][ T6477] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  166.828356][ T6477] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8
[  167.372626][ T5185] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5
[  167.412210][ T6492] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  168.541172][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout
[  168.620073][ T5185] Bluetooth: hci2: command 0x0c1a tx timeout
[  168.629935][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout
[  168.700051][ T5185] Bluetooth: hci3: command 0x0c1a tx timeout
[  170.340607][   T30] audit: type=1804 audit(1754639304.983:4): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.92" name="/newroot/23/file0" dev="tmpfs" ino=144 res=1 errno=0
[  173.000647][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'.
[  173.156411][ T6563] ipvlan0: entered allmulticast mode
[  173.215811][ T6563] veth0_vlan: entered allmulticast mode
[  173.720914][ T6601] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  175.179068][ T6631] FAULT_INJECTION: forcing a failure.
[  175.179068][ T6631] name failslab, interval 1, probability 0, space 0, times 0
[  175.210429][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.0.105 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  175.210476][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  175.210494][ T6631] Call Trace:
[  175.210504][ T6631]  <TASK>
[  175.210516][ T6631]  dump_stack_lvl+0x16c/0x1f0
[  175.210556][ T6631]  should_fail_ex+0x512/0x640
[  175.210593][ T6631]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  175.210635][ T6631]  should_failslab+0xc2/0x120
[  175.210677][ T6631]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  175.210716][ T6631]  ? __d_alloc+0x32/0xae0
[  175.210760][ T6631]  __d_alloc+0x32/0xae0
[  175.210801][ T6631]  d_alloc_parallel+0x111/0x1480
[  175.210857][ T6631]  ? do_raw_spin_lock+0x12c/0x2b0
[  175.210908][ T6631]  ? __pfx_d_alloc_parallel+0x10/0x10
[  175.210960][ T6631]  ? lockdep_init_map_type+0x5c/0x280
[  175.211004][ T6631]  ? lockdep_init_map_type+0x5c/0x280
[  175.211053][ T6631]  __lookup_slow+0x193/0x460
[  175.211100][ T6631]  ? __pfx___lookup_slow+0x10/0x10
[  175.211190][ T6631]  ? lookup_fast+0x156/0x610
[  175.211220][ T6631]  walk_component+0x353/0x5b0
[  175.211255][ T6631]  path_lookupat+0x142/0x6d0
[  175.211294][ T6631]  path_openat+0x16f1/0x2cb0
[  175.211328][ T6631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.211376][ T6631]  ? __pfx_path_openat+0x10/0x10
[  175.211425][ T6631]  do_filp_open+0x20b/0x470
[  175.211463][ T6631]  ? __pfx_do_filp_open+0x10/0x10
[  175.211530][ T6631]  ? alloc_fd+0x471/0x7d0
[  175.211574][ T6631]  do_sys_openat2+0x11b/0x1d0
[  175.211619][ T6631]  ? __pfx_do_sys_openat2+0x10/0x10
[  175.211682][ T6631]  __x64_sys_openat+0x174/0x210
[  175.211729][ T6631]  ? __pfx___x64_sys_openat+0x10/0x10
[  175.211793][ T6631]  do_syscall_64+0xcd/0x490
[  175.211832][ T6631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.211862][ T6631] RIP: 0033:0x7f70e778ebe9
[  175.211886][ T6631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.211911][ T6631] RSP: 002b:00007f70e8604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  175.211940][ T6631] RAX: ffffffffffffffda RBX: 00007f70e79b5fa0 RCX: 00007f70e778ebe9
[  175.211959][ T6631] RDX: 0000000000282180 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  175.211978][ T6631] RBP: 00007f70e7811e19 R08: 0000000000000000 R09: 0000000000000000
[  175.211995][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.212012][ T6631] R13: 00007f70e79b6038 R14: 00007f70e79b5fa0 R15: 00007ffee5366f48
[  175.212053][ T6631]  </TASK>
[  177.698377][ T6599] netlink: 350 bytes leftover after parsing attributes in process `syz.1.103'.
[  181.493831][ T5185] Bluetooth: hci0: unexpected event 0x1d length: 10 > 5
[  182.433585][ T6742] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  182.511461][ T6742] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  182.526238][ T6742] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  182.579168][ T6742] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  184.460042][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout
[  184.543089][ T5185] Bluetooth: hci2: command 0x0c1a tx timeout
[  184.549673][ T5185] Bluetooth: hci1: command 0x0c1a tx timeout
[  184.629908][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout
[  186.092820][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'.
[  186.465257][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'.
[  186.781771][ T6806] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9
[  186.892623][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.507716][ T6789] bridge_slave_1 (unregistering): left allmulticast mode
[  187.719557][ T6789] bridge_slave_1 (unregistering): left promiscuous mode
[  187.765355][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.804442][ T6823] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  188.878776][ T6823] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  188.914216][ T6823] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  188.970260][ T6823] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  190.859880][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout
[  190.941429][ T5873] Bluetooth: hci2: command 0x0c1a tx timeout
[  190.941454][ T5185] Bluetooth: hci1: command 0x0c1a tx timeout
[  191.020618][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout
[  191.934415][ T6876] random: crng reseeded on system resumption
[  193.481993][   T30] audit: type=1804 audit(1754639328.133:5): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.139" name="/newroot/34/file0" dev="tmpfs" ino=197 res=1 errno=0
[  193.506856][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.414235][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'.
[  199.903155][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  199.910525][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  200.013017][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'.
[  200.092171][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.271672][ T6961] bridge_slave_1 (unregistering): left allmulticast mode
[  200.289906][ T6961] bridge_slave_1 (unregistering): left promiscuous mode
[  200.297464][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.049184][ T7107] random: crng reseeded on system resumption
[  207.771755][ T7120] random: crng reseeded on system resumption
[  208.790577][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'.
[  208.899333][ T7128] ipvlan0: left allmulticast mode
[  208.944711][ T7128] veth0_vlan: left allmulticast mode
[  209.483908][ T7145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'.
[  210.064625][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.169'.
[  210.084648][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.285956][ T7139] bridge_slave_1 (unregistering): left allmulticast mode
[  210.294311][ T7139] bridge_slave_1 (unregistering): left promiscuous mode
[  210.304217][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.426274][ T7156] input: jJǸ-���9�%v����l��Q�	J8fi� as /devices/virtual/input/input10
[  217.058359][ T7238] random: crng reseeded on system resumption
[  221.487175][ T7292] vivid-007: =================  START STATUS  =================
[  221.540253][ T7292] vivid-007: Generate PTS: true
[  221.547690][ T7292] vivid-007: Generate SCR: true
[  221.601865][ T7292] tpg source WxH: 320x240 (Y'CbCr)
[  221.607138][ T7292] tpg field: 1
[  221.673093][ T7292] tpg crop: (0,0)/320x240
[  221.677699][ T7292] tpg compose: (0,0)/320x240
[  221.706484][ T7292] tpg colorspace: 8
[  221.716125][ T7292] tpg transfer function: 0/0
[  221.736316][ T7292] tpg Y'CbCr encoding: 0/0
[  221.753043][ T7292] tpg quantization: 0/0
[  221.765924][ T7292] tpg RGB range: 0/2
[  221.809937][ T7292] vivid-007: ==================  END STATUS  ==================
[  222.183465][ T7292] can: request_module (can-proto-3) failed.
[  226.640446][ T7371] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  227.928429][ T7372] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12
[  228.836837][ T7398] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[  230.077892][ T7407] snd_aloop snd_aloop.0: control 16781581:65539:5:�'x?F���/��zF˷fC���:7 is already present
[  233.215753][ T7456] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13
[  233.326733][ T7450] FAULT_INJECTION: forcing a failure.
[  233.326733][ T7450] name failslab, interval 1, probability 0, space 0, times 0
[  233.372398][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.0.229 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  233.372428][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  233.372439][ T7450] Call Trace:
[  233.372453][ T7450]  <TASK>
[  233.372460][ T7450]  dump_stack_lvl+0x16c/0x1f0
[  233.372487][ T7450]  should_fail_ex+0x512/0x640
[  233.372510][ T7450]  ? __kmalloc_noprof+0xbf/0x510
[  233.372533][ T7450]  ? __register_sysctl_table+0xea2/0x1900
[  233.372560][ T7450]  should_failslab+0xc2/0x120
[  233.372583][ T7450]  __kmalloc_noprof+0xd2/0x510
[  233.372604][ T7450]  ? __register_sysctl_table+0xe8e/0x1900
[  233.372636][ T7450]  __register_sysctl_table+0xea2/0x1900
[  233.372669][ T7450]  ? __pfx___register_sysctl_table+0x10/0x10
[  233.372702][ T7450]  ? is_module_address+0x69/0xf0
[  233.372727][ T7450]  ? register_net_sysctl_sz+0x228/0x3e0
[  233.372749][ T7450]  ? __asan_memset+0x20/0x50
[  233.372767][ T7450]  ? kmemdup_noprof+0x49/0x60
[  233.372792][ T7450]  ipv6_sysctl_net_init+0x180/0x2b0
[  233.372823][ T7450]  ? __pfx_ipv6_sysctl_net_init+0x10/0x10
[  233.372851][ T7450]  ops_init+0x1df/0x5f0
[  233.372875][ T7450]  setup_net+0x10f/0x380
[  233.372894][ T7450]  ? lockdep_init_map_type+0x5c/0x280
[  233.372919][ T7450]  ? __pfx_setup_net+0x10/0x10
[  233.372941][ T7450]  ? debug_mutex_init+0x37/0x70
[  233.372961][ T7450]  copy_net_ns+0x2a6/0x5f0
[  233.372986][ T7450]  create_new_namespaces+0x3ea/0xa90
[  233.373012][ T7450]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  233.373035][ T7450]  ksys_unshare+0x45b/0xa40
[  233.373060][ T7450]  ? __pfx_ksys_unshare+0x10/0x10
[  233.373085][ T7450]  ? xfd_validate_state+0x61/0x180
[  233.373117][ T7450]  __x64_sys_unshare+0x31/0x40
[  233.373141][ T7450]  do_syscall_64+0xcd/0x490
[  233.373163][ T7450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.373180][ T7450] RIP: 0033:0x7f70e778ebe9
[  233.373195][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.373211][ T7450] RSP: 002b:00007f70e8604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  233.373229][ T7450] RAX: ffffffffffffffda RBX: 00007f70e79b5fa0 RCX: 00007f70e778ebe9
[  233.373240][ T7450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  233.373250][ T7450] RBP: 00007f70e7811e19 R08: 0000000000000000 R09: 0000000000000000
[  233.373260][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.373270][ T7450] R13: 00007f70e79b6038 R14: 00007f70e79b5fa0 R15: 00007ffee5366f48
[  233.373292][ T7450]  </TASK>
[  233.373300][ T7450] sysctl could not get directory: /net/ipv6/icmp -12
[  234.419101][ T7457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14
[  235.370940][ T7472] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1)
[  235.391923][ T7484] =======================================================
[  235.391923][ T7484] WARNING: The mand mount option has been deprecated and
[  235.391923][ T7484]          and is ignored by this kernel. Remove the mand
[  235.391923][ T7484]          option from the mount to silence this warning.
[  235.391923][ T7484] =======================================================
[  236.700358][ T7489] netlink: 342 bytes leftover after parsing attributes in process `syz.1.226'.
[  238.923409][ T7528] sctp: failed to load transform for md5: -2
[  251.389353][ T7734] binder: 7733:7734 unknown command 3
[  251.453141][ T7734] binder: 7733:7734 ioctl c0306201 0 returned -22
[  253.090605][ T7752] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15
[  253.367161][ T7751] FAULT_INJECTION: forcing a failure.
[  253.367161][ T7751] name failslab, interval 1, probability 0, space 0, times 0
[  253.500671][ T7751] CPU: 1 UID: 0 PID: 7751 Comm: syz.0.263 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  253.500715][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  253.500731][ T7751] Call Trace:
[  253.500740][ T7751]  <TASK>
[  253.500751][ T7751]  dump_stack_lvl+0x16c/0x1f0
[  253.500790][ T7751]  should_fail_ex+0x512/0x640
[  253.500835][ T7751]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  253.500875][ T7751]  should_failslab+0xc2/0x120
[  253.500913][ T7751]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  253.500946][ T7751]  ? sk_prot_alloc+0x60/0x2a0
[  253.500992][ T7751]  sk_prot_alloc+0x60/0x2a0
[  253.501028][ T7751]  sk_alloc+0x36/0xc20
[  253.501060][ T7751]  inet_create+0x3a1/0x1040
[  253.501110][ T7751]  ? inet_create+0x93/0x1040
[  253.501159][ T7751]  __sock_create+0x338/0x8d0
[  253.501205][ T7751]  mptcp_subflow_create_socket+0xf5/0xed0
[  253.501251][ T7751]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  253.501303][ T7751]  __mptcp_nmpc_sk+0x182/0x7d0
[  253.501346][ T7751]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  253.501390][ T7751]  ? __local_bh_enable_ip+0xa4/0x120
[  253.501430][ T7751]  mptcp_getsockopt+0xcf8/0xe20
[  253.501469][ T7751]  ? __pfx_mptcp_getsockopt+0x10/0x10
[  253.501508][ T7751]  ? find_held_lock+0x2b/0x80
[  253.501536][ T7751]  ? __might_fault+0xe3/0x190
[  253.501568][ T7751]  ? __might_fault+0xe3/0x190
[  253.501599][ T7751]  ? __might_fault+0x13b/0x190
[  253.501645][ T7751]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  253.501682][ T7751]  do_sock_getsockopt+0x34a/0x440
[  253.501724][ T7751]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  253.501759][ T7751]  ? __fget_files+0x204/0x3c0
[  253.501821][ T7751]  __sys_getsockopt+0x123/0x1b0
[  253.501858][ T7751]  __x64_sys_getsockopt+0xbd/0x160
[  253.501885][ T7751]  ? do_syscall_64+0x91/0x490
[  253.501940][ T7751]  ? lockdep_hardirqs_on+0x7c/0x110
[  253.501970][ T7751]  do_syscall_64+0xcd/0x490
[  253.502005][ T7751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.502034][ T7751] RIP: 0033:0x7f70e778ebe9
[  253.502059][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.502086][ T7751] RSP: 002b:00007f70e8604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  253.502114][ T7751] RAX: ffffffffffffffda RBX: 00007f70e79b5fa0 RCX: 00007f70e778ebe9
[  253.502130][ T7751] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006
[  253.502147][ T7751] RBP: 00007f70e7811e19 R08: 0000000000000000 R09: 0000000000000000
[  253.502162][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.502177][ T7751] R13: 00007f70e79b6038 R14: 00007f70e79b5fa0 R15: 00007ffee5366f48
[  253.502235][ T7751]  </TASK>
[  254.327939][ T7754] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16
[  256.041791][ T7786] netlink: 342 bytes leftover after parsing attributes in process `syz.2.267'.
[  259.227721][ T7838] kAFS: No cell specified
[  261.386202][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  261.392914][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  265.883369][ T7936] sctp: failed to load transform for md5: -2
[  267.125685][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'.
[  269.956580][ T8004] 
[  269.959055][ T8004] ======================================================
[  269.966255][ T8004] WARNING: possible circular locking dependency detected
[  269.973445][ T8004] 6.16.0-syzkaller-12016-gbec077162bd0 #0 Not tainted
[  269.980307][ T8004] ------------------------------------------------------
[  269.987367][ T8004] syz.3.299/8004 is trying to acquire lock:
[  269.993289][ T8004] ffff888025d5d468 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310
[  270.003628][ T8004] 
[  270.003628][ T8004] but task is already holding lock:
[  270.011395][ T8004] ffff888025d5cf28 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  270.022888][ T8004] 
[  270.022888][ T8004] which lock already depends on the new lock.
[  270.022888][ T8004] 
[  270.033873][ T8004] 
[  270.033873][ T8004] the existing dependency chain (in reverse order) is:
[  270.043493][ T8004] 
[  270.043493][ T8004] -> #3 (&q->q_usage_counter(io)#22){++++}-{0:0}:
[  270.052154][ T8004]        blk_alloc_queue+0x619/0x760
[  270.057506][ T8004]        blk_mq_alloc_queue+0x172/0x280
[  270.063165][ T8004]        __blk_mq_alloc_disk+0x29/0x120
[  270.068821][ T8004]        loop_add+0x490/0xb70
[  270.073519][ T8004]        loop_init+0x164/0x270
[  270.078441][ T8004]        do_one_initcall+0x120/0x6e0
[  270.083923][ T8004]        kernel_init_freeable+0x5c2/0x910
[  270.089843][ T8004]        kernel_init+0x1c/0x2b0
[  270.095075][ T8004]        ret_from_fork+0x5d7/0x6f0
[  270.100476][ T8004]        ret_from_fork_asm+0x1a/0x30
[  270.105789][ T8004] 
[  270.105789][ T8004] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  270.113197][ T8004]        fs_reclaim_acquire+0x102/0x150
[  270.118970][ T8004]        prepare_alloc_pages+0x162/0x610
[  270.124715][ T8004]        __alloc_frozen_pages_noprof+0x18b/0x23f0
[  270.131306][ T8004]        __alloc_pages_noprof+0xb/0x1b0
[  270.137217][ T8004]        pcpu_populate_chunk+0x110/0xb00
[  270.142871][ T8004]        pcpu_alloc_noprof+0x86a/0x1470
[  270.148616][ T8004]        bpf_map_alloc_percpu+0x9a/0x4b0
[  270.155084][ T8004]        htab_map_alloc+0x10ca/0x1570
[  270.160499][ T8004]        map_create+0x58f/0x1f80
[  270.165485][ T8004]        __sys_bpf+0x44d2/0x4de0
[  270.170536][ T8004]        __x64_sys_bpf+0x78/0xc0
[  270.175658][ T8004]        do_syscall_64+0xcd/0x490
[  270.180783][ T8004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.187868][ T8004] 
[  270.187868][ T8004] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  270.195934][ T8004]        __mutex_lock+0x193/0x10b0
[  270.201153][ T8004]        pcpu_alloc_noprof+0xb4c/0x1470
[  270.206892][ T8004]        sbitmap_init_node+0x2fd/0x770
[  270.212633][ T8004]        sbitmap_queue_init_node+0x41/0x560
[  270.218825][ T8004]        blk_mq_init_tags+0x12d/0x2b0
[  270.224331][ T8004]        blk_mq_alloc_map_and_rqs+0x237/0xf60
[  270.230589][ T8004]        blk_mq_init_sched+0x30c/0x610
[  270.236073][ T8004]        elevator_switch+0x1e1/0x7f0
[  270.241374][ T8004]        elevator_change+0x2ac/0x400
[  270.246864][ T8004]        elevator_set_default+0x2c4/0x360
[  270.252727][ T8004]        blk_register_queue+0x393/0x4f0
[  270.258662][ T8004]        __add_disk+0x74a/0xf00
[  270.263526][ T8004]        add_disk_fwnode+0x13f/0x5d0
[  270.268832][ T8004]        nbd_dev_add+0x783/0xbb0
[  270.273788][ T8004]        nbd_init+0x181/0x320
[  270.278662][ T8004]        do_one_initcall+0x120/0x6e0
[  270.284266][ T8004]        kernel_init_freeable+0x5c2/0x910
[  270.290182][ T8004]        kernel_init+0x1c/0x2b0
[  270.295141][ T8004]        ret_from_fork+0x5d7/0x6f0
[  270.300281][ T8004]        ret_from_fork_asm+0x1a/0x30
[  270.305691][ T8004] 
[  270.305691][ T8004] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  270.313633][ T8004]        __lock_acquire+0x12a6/0x1ce0
[  270.319380][ T8004]        lock_acquire+0x179/0x350
[  270.324425][ T8004]        __mutex_lock+0x193/0x10b0
[  270.329634][ T8004]        queue_requests_store+0x1c7/0x310
[  270.335456][ T8004]        queue_attr_store+0x26b/0x310
[  270.340969][ T8004]        sysfs_kf_write+0xf2/0x150
[  270.346465][ T8004]        kernfs_fop_write_iter+0x354/0x510
[  270.352744][ T8004]        vfs_write+0x6c4/0x1150
[  270.357812][ T8004]        ksys_write+0x12a/0x250
[  270.362938][ T8004]        do_syscall_64+0xcd/0x490
[  270.368065][ T8004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.374693][ T8004] 
[  270.374693][ T8004] other info that might help us debug this:
[  270.374693][ T8004] 
[  270.385208][ T8004] Chain exists of:
[  270.385208][ T8004]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#22
[  270.385208][ T8004] 
[  270.399680][ T8004]  Possible unsafe locking scenario:
[  270.399680][ T8004] 
[  270.407138][ T8004]        CPU0                    CPU1
[  270.412871][ T8004]        ----                    ----
[  270.418769][ T8004]   lock(&q->q_usage_counter(io)#22);
[  270.424335][ T8004]                                lock(fs_reclaim);
[  270.431040][ T8004]                                lock(&q->q_usage_counter(io)#22);
[  270.440037][ T8004]   lock(&q->elevator_lock);
[  270.444761][ T8004] 
[  270.444761][ T8004]  *** DEADLOCK ***
[  270.444761][ T8004] 
[  270.453005][ T8004] 6 locks held by syz.3.299/8004:
[  270.458554][ T8004]  #0: ffff888032b5ad38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  270.468001][ T8004]  #1: ffff88807d542428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  270.477203][ T8004]  #2: ffff888059aa1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[  270.487276][ T8004]  #3: ffff888025e27e18 (kn->active#111){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510
[  270.497657][ T8004]  #4: ffff888025d5cf28 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  270.510068][ T8004]  #5: ffff888025d5cf60 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  270.522564][ T8004] 
[  270.522564][ T8004] stack backtrace:
[  270.528486][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.3.299 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) 
[  270.528516][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  270.528529][ T8004] Call Trace:
[  270.528539][ T8004]  <TASK>
[  270.528549][ T8004]  dump_stack_lvl+0x116/0x1f0
[  270.528580][ T8004]  print_circular_bug+0x275/0x350
[  270.528612][ T8004]  check_noncircular+0x14c/0x170
[  270.528644][ T8004]  __lock_acquire+0x12a6/0x1ce0
[  270.528679][ T8004]  lock_acquire+0x179/0x350
[  270.528708][ T8004]  ? queue_requests_store+0x1c7/0x310
[  270.528747][ T8004]  ? __pfx___might_resched+0x10/0x10
[  270.528773][ T8004]  ? queue_requests_store+0x1c7/0x310
[  270.528802][ T8004]  __mutex_lock+0x193/0x10b0
[  270.528828][ T8004]  ? queue_requests_store+0x1c7/0x310
[  270.528859][ T8004]  ? mark_held_locks+0x49/0x80
[  270.528888][ T8004]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  270.528912][ T8004]  ? lockdep_hardirqs_on+0x7c/0x110
[  270.528940][ T8004]  ? __pfx___mutex_lock+0x10/0x10
[  270.528968][ T8004]  ? __pfx_autoremove_wake_function+0x10/0x10
[  270.528999][ T8004]  ? queue_requests_store+0x1c7/0x310
[  270.529028][ T8004]  queue_requests_store+0x1c7/0x310
[  270.529059][ T8004]  ? __pfx_queue_requests_store+0x10/0x10
[  270.529091][ T8004]  ? __mutex_trylock_common+0xe9/0x250
[  270.529123][ T8004]  ? __pfx_queue_requests_store+0x10/0x10
[  270.529153][ T8004]  queue_attr_store+0x26b/0x310
[  270.529182][ T8004]  ? __pfx_queue_attr_store+0x10/0x10
[  270.529216][ T8004]  ? find_held_lock+0x2b/0x80
[  270.529238][ T8004]  ? sysfs_file_kobj+0xe4/0x290
[  270.529265][ T8004]  ? __pfx_queue_attr_store+0x10/0x10
[  270.529293][ T8004]  sysfs_kf_write+0xf2/0x150
[  270.529318][ T8004]  kernfs_fop_write_iter+0x354/0x510
[  270.529340][ T8004]  ? __pfx_sysfs_kf_write+0x10/0x10
[  270.529366][ T8004]  vfs_write+0x6c4/0x1150
[  270.529393][ T8004]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  270.529416][ T8004]  ? __pfx___mutex_lock+0x10/0x10
[  270.529441][ T8004]  ? __pfx_vfs_write+0x10/0x10
[  270.529475][ T8004]  ksys_write+0x12a/0x250
[  270.529501][ T8004]  ? __pfx_ksys_write+0x10/0x10
[  270.529530][ T8004]  do_syscall_64+0xcd/0x490
[  270.529557][ T8004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.529580][ T8004] RIP: 0033:0x7fdf3418ebe9
[  270.529599][ T8004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.529621][ T8004] RSP: 002b:00007fdf35098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  270.529645][ T8004] RAX: ffffffffffffffda RBX: 00007fdf343b5fa0 RCX: 00007fdf3418ebe9
[  270.529661][ T8004] RDX: 0000000000000081 RSI: 0000200000000140 RDI: 0000000000000003
[  270.529675][ T8004] RBP: 00007fdf34211e19 R08: 0000000000000000 R09: 0000000000000000
[  270.529688][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.529702][ T8004] R13: 00007fdf343b6038 R14: 00007fdf343b5fa0 R15: 00007ffd31a190f8
[  270.529731][ T8004]  </TASK>