last executing test programs:

7m1.247028219s ago: executing program 1 (id=1469):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = socket(0x22, 0x2, 0x26)
fstat$auto(r0, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0)
ioctl$auto(r1, 0x3b8b, 0x38)

7m0.90762316s ago: executing program 1 (id=1470):
r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="150b29bd7000ffdbdf250300000005"], 0x18}, 0x1, 0x0, 0x0, 0x200400f0}, 0x8000)
mmap$auto(0x80000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xff7fffffffff0001, 0x15)
close_range$auto(r0, 0x8, 0x0)
brk$auto(0x40008000)
syslog$auto(0x10000, &(0x7f0000000180)='/dev/snapshot\x00', 0xc0)
r5 = fanotify_init$auto(0x5, 0x2000000000002)
r6 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409)
fanotify_mark$auto(r5, 0x9, 0x9, r6, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda)
move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2)
r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r7, 0x0, 0x800003, 0x270)
mlockall$auto(0x7)
r8 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0)
personality$auto(0xfffff032)
ppoll$auto(&(0x7f0000001ac0)={r8, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x408000000}, &(0x7f00000002c0)={0x10000}, 0x8)
mprotect$auto(0x110c230000, 0xa588, 0x6)
mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0)
move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x2)
msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9})
syz_open_procfs$namespace(0x0, &(0x7f0000000040))
syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0)

6m58.408996232s ago: executing program 1 (id=1477):
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
bpf$auto(0x0, 0x0, 0x6f4)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x141e42, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x60000040)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000005e00)={0x10, 0xf1, "82a0d48cb31f0af645c78a4a23b40e62"}, 0x80000001)

6m57.466450397s ago: executing program 1 (id=1479):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
clock_nanosleep$auto(0x2, 0x9, &(0x7f00000002c0)={0x0, 0xc025}, 0x0)
io_setup$auto(0x7ffe, &(0x7f0000000000))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))

6m56.747541815s ago: executing program 1 (id=1481):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
r4 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0)
r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4})
r6 = set_tid_address$auto(&(0x7f0000000500)=0x5)
r7 = getpgid$auto(0x0)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="57ba479ceef4e6818324b1e9f97fa97bbe3ce31a348cfecb7eec2ef684a20d2ea23398226e773ef1df8719e25ae127e2fcb014daabd30bea4e395f065bebc9c55ca74c7170fa16912b9b54004794ad5d85392503b27624cb7f4b83bbe614fb416f04813fa9a47f303a598ce4ec013c3187ad375eaf61b8e1e49010e1aa0609b7978b149b275524b056e248cc1fcefd092668aca115baa909239baa89e380df020526f0a0bab67ed14d5e55eacdcc09475ce8c32099979a6b51978b761469bfa1790de1824cb99352f038dd88beedd909dea608002900", @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYRES32=r6, @ANYBLOB="0800e300", @ANYRES32=r7, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
sched_setattr$auto(0x0, 0x0, 0x7b)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000)
r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r8, &(0x7f0000000100)="0a1b9a3c3e3e006e163bb154d7886d8ea5c2574c58e9867e", 0x18)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x22, 0x0, 0x10)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

6m55.052903764s ago: executing program 1 (id=1484):
r0 = open(&(0x7f0000000000)='./cgroup\x00', 0xbce73306d0ef8494, 0x64)
fchdir$auto(r0)
mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x385241, 0x0)
setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808)
mmap$auto(0x0, 0x2020009, 0x4e7cbf89, 0xeb1, 0xffffffffffffffff, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, 0x0)
write$auto(0x3, 0x0, 0xffd8)
write$auto(r1, 0x0, 0xa3)
io_getevents$auto(0x1, 0x7, 0x2, 0x0, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r2, &(0x7f0000000040)='//\xf2?', 0x80000000)
r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x100, 0x0)
read$auto_buffer_percent_fops_trace(r3, &(0x7f00000003c0)=""/93, 0x5d)
mmap$auto(0xfffffffffffffdfd, 0x400000, 0x4dc, 0xffffffffffffffff, 0x2, 0x46f4)
shmdt$auto(0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r4 = fspick$auto(r2, &(0x7f00000002c0)='./cgroup\x00', 0x8)
read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000240)=""/18, 0x12)
chdir$auto(0x0)
prctl$auto(0x14, 0x1, 0x0, 0x7, 0xfffffffffffffffe)

6m39.872057385s ago: executing program 32 (id=1484):
r0 = open(&(0x7f0000000000)='./cgroup\x00', 0xbce73306d0ef8494, 0x64)
fchdir$auto(r0)
mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x385241, 0x0)
setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808)
mmap$auto(0x0, 0x2020009, 0x4e7cbf89, 0xeb1, 0xffffffffffffffff, 0x8000)
get_robust_list$auto(0x0, 0x0, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0)
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, 0x0)
write$auto(0x3, 0x0, 0xffd8)
write$auto(r1, 0x0, 0xa3)
io_getevents$auto(0x1, 0x7, 0x2, 0x0, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r2, &(0x7f0000000040)='//\xf2?', 0x80000000)
r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x100, 0x0)
read$auto_buffer_percent_fops_trace(r3, &(0x7f00000003c0)=""/93, 0x5d)
mmap$auto(0xfffffffffffffdfd, 0x400000, 0x4dc, 0xffffffffffffffff, 0x2, 0x46f4)
shmdt$auto(0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
unshare$auto(0x40000080)
socket(0xa, 0x5, 0x0)
r4 = fspick$auto(r2, &(0x7f00000002c0)='./cgroup\x00', 0x8)
read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000240)=""/18, 0x12)
chdir$auto(0x0)
prctl$auto(0x14, 0x1, 0x0, 0x7, 0xfffffffffffffffe)

2m9.291589929s ago: executing program 2 (id=2141):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800)
unshare$auto(0x40000080)
r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x14, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x10)
ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0)
mlockall$auto(0x7)
bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa)

2m7.504133658s ago: executing program 2 (id=2147):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0)
socket(0x10, 0x2, 0x3)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

2m4.74749522s ago: executing program 2 (id=2152):
socket(0x22, 0xa, 0x6fffffff)
socket(0x2, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x20)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
socket(0x28, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0xfffff958)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18)
fremovexattr$auto(r0, &(0x7f0000000000)='system.posix_acl_access\x00')
truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6)

2m4.273007749s ago: executing program 2 (id=2155):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xbc})
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/neigh/wg2/base_reachable_time_ms\x00', 0x42a81, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
fallocate$auto(0xffffffffffffffff, 0x1, 0x2, 0x6657)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x2)
ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000040)={<r2=>0xffffffffffffffff, 0x0, 0x2, 0x5, 0x5, 0xc})
ioctl$auto_SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f00000000c0)="86904904248c077b1a0c807a64c4efe9ba9e0b23705ddef529afe5e577bbe1f3b97b5f5dd95059e501ccb698b6d6d1afa454960a476832c572e5b6e47e5e44d8a2f6cba944ab0b4c0600ed248c40d70daa4faae65a6f0457b77b5eddc17fa84d69cd91c89ec56cb5b48797c46b77086c9c6704978dc91c8460fbec1b50b8d6ec")
mmap$auto(0x4, 0x0, 0x8000d8, 0x9b7f, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0)
socket(0xa, 0x2, 0x3a)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0)

2m3.20095802s ago: executing program 2 (id=2160):
ioperm$auto(0x7, 0x6, 0x2)
syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
ioctl$auto(0x3, 0xc0104d03, 0x5)
r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_MPP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000df3123e9c9ae4043", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf256b00000015000d018223d208b7dd3463a3a936688073d724bb000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91)
read$auto(r4, 0x0, 0x1)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0)
sendfile$auto(r5, r6, 0x0, 0x2)
sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040004)
ioctl$auto_USB_RAW_IOCTL_EP0_READ(r1, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5})
ioctl$auto_HPET_DPI(0xffffffffffffffff, 0x6805, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
read$auto(r7, 0x0, 0x3)

2m2.02260588s ago: executing program 2 (id=2164):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x20000854)
timer_delete$auto(0x1)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20002020009, 0xc, 0xeb2, r2, 0x7)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r4, 0x2, 0x9)
ioctl$auto(r1, 0x400c4d07, r4)
ioctl$auto(0x3, 0x400c4d09, r4)
close_range$auto(0x2, 0xa, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x7})
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000240)="bc44eaba57834b8927c08cc630ad9b9fec20faf337bd0172b6fa33d23a2f4a3374648ee2bc03b0ac05b1869c97d8f5fba8d1ae126d0d455a7edc800c2993fe22502387fc63f329801868cd372b594994b4bba44950aa7344b7e2e8e2b7c43ae075a26fe8373ed69dc809ed428f92f0d6988e0554db25e83d6757551dc2ba0b47c097694ace64c984c7f194e6c2ab222b08c042f14cd814233d7df8a8f05658294bbea6f92d6f48abd7c6fd3b758ad57819aa4f045615b1f412a2b472d1eec95fa1f3dcb89a329be53b8d6aaf7eda56d84a")
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)

1m53.307303226s ago: executing program 3 (id=2194):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0)
read$auto(r0, 0x0, 0x4)
r1 = socket(0x1d, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFSD_CMD_THREADS_GET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x4000000)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r2)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2)
mmap$auto(0x0, 0x20009, 0x20df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(r1, 0x1, 0x2, 0x0, 0x9)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002080)={0x14, r3, 0x503, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
getsockopt$auto(r1, 0x65, 0x1, 0xffffffffffffffff, 0x0)

1m53.08317883s ago: executing program 3 (id=2197):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x3a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x2, 0x0)
r3 = socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0xf)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000340)=""/6, 0x6)
close_range$auto(0x2, 0x8, 0x0)

1m52.13075504s ago: executing program 3 (id=2203):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socketcall$auto(0x8000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto_TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)=0x8)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x3b, 0x400, 0x2}]})

1m51.969054562s ago: executing program 3 (id=2204):
mmap$auto(0x0, 0x200000008, 0x200000df, 0x9b72, 0xffffffffffffffff, 0x40008000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x44890)
timer_create$auto(0x9, 0x0, 0x0)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, <r1=>0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000080)="4f0d6995e94336e1a6e889b8759a9cfb3ac250420045b1012d24b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a"})
fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b)
process_mrelease$auto(0xffffffffffffffff, 0xa)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
socket(0x2, 0x1, 0x106)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xffffffffffffffff]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m50.787017916s ago: executing program 3 (id=2207):
msgctl$auto_IPC_STAT(0xd99, 0x2, &(0x7f0000000880)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2, 0x200, 0x2a}, 0x0, 0x0, 0x6a, 0x3701, 0x7c, 0x80, 0x60f, 0x1, 0x6d, 0xffff, @raw=0x7, @inferred=0xffffffffffffffff})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x8, 0x7)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r0 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x9, 0x0)
mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
socket(0x2a, 0x80002, 0x73)
r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
open(0x0, 0x0, 0x408)
open(0x0, 0x64842, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
mprotect$auto(0x20200000000000, 0x23, 0x5)
r3 = socket(0xa, 0x3, 0x3a)
ioctl$auto(r3, 0x8982, 0x1)
r4 = prctl$auto(0x3a, 0x2, r0, 0x5, 0x800007)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4)
prctl$auto(0x5, 0x1, r0, 0x9, 0x2000000000000200)
mmap$auto(0x0, 0x400008, 0x6, 0x18, r1, 0x0)
r5 = socket(0x2, 0x1, 0x0)
r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_RTC_IRQP_READ(r6, 0x8008700b, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
getsockopt$auto_SO_RCVTIMEO_OLD(r5, 0xffffffff, 0x14, &(0x7f0000000480)='\x80\x00+\xa2\x87\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x05\x008\xa3`\xad[UI\xf7\xc7\xcc\x13\x03\xba\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc1\xa9\xd8\xc5x\xe1\x00\f\x84\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81\x9d\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x01/\x80{\x9d\x12\xfb\x7f$\xcdNs:]<\xe7\xd4\xcc\xef\x1bq\xd7\x8cb\xea\xeeQ3\'i\xe1\xad\xc33)\xd12&i\xc5\x1e\x9e\x9b\xc4\x9aU\x9f+\x05\xablJ`\v\xb7\x97i\xad}\xf2`\x99@\xa3\xd4gG!%\xaem\xa8\x11\n\x01%K\x1c\xdc\xa6#\xf1i\xb9\xef\\\xfb\xfb.z\x90\a\a\"K\x05&\xde:r\xcf\x12\xb2+\'w/\xea\xe4\xfc2\x17\xa8M\\BG\x85w\x8a\xad]trI>F\xce\xe1y\xc6S\xb2\xf4a\xaa\x83\fo\xc6\x057*qc\xc4g\xfc\x01y|\xa8T\\\xb5\xcd/\xf3', &(0x7f0000000100)=0x4)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x40000012, 0x0, 0x0, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)

1m50.50986189s ago: executing program 3 (id=2208):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={"d2b3d13d0b0d7bef28df3d6f58852c7ed4ae4f259480b465df663b4ed86a9769", 0xc, 0x9, 0x2, 0xe199, 0x5, <r1=>0xffffffffffffffff})
prctl$auto(0x0, 0x1, r1, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0)
write$auto(r2, &(0x7f0000000040)='\\\x00', 0x2)
r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r3, 0x0, 0x80000001, 0x0)
prctl$auto(0x1000000003b, 0xffffffffffffffff, r3, 0x2, 0x6)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/ram5/integrity/device_is_integrity_capable\x00', 0x6142, 0x0)
sendfile$auto(r4, r4, 0x0, 0x7)
unshare$auto(0x40000080)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r5, 0x0, 0x7, 0x8)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4d, 0x0)
fsconfig$auto_EROFS_MOUNT_DAX_NEVER(0xffffffffffffffff, 0x4, &(0x7f00000001c0)='\x00\x14\x86\x12/\xdd\x1d\xd9iu\xd7_\xd8\xde\x89\xea|d\xac\x11\x06\x9f\t\x9f\x91\xeb\xaf\x8d\x8d$\x19\x13\xa1\x97\xaey\xf9\x1b_g\xb0\x8bN\xe1c[\x01\x10\x97\xcd\xdf\xc1^(\x9b\xd9EC\xb3R\xdfDC\xcdt\x17\xefS\xe1\x85\x8a\x87f\xa3]\xc0\xac\x86\xc8*;\nD\x92\x9f\xf3\x90\xb0\xd8Y\xbep\xb1\x14\x89\xb1\n!b\x10\xedS\xca\x8c&\xbf\xca\x1d\xccnw\xd9T\x044\xc6\x96\xfc\x02j!\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0xffffff9c)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0)
ioctl$auto(r6, 0x540a, 0xffffffffffffffff)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)

1m49.46288546s ago: executing program 4 (id=2210):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x614001, 0x91, 0xc}, 0x18)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000012440)='/dev/loop4\x00', 0x2, 0x0)
read$auto(r1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r0, 0x6, &(0x7f0000000000)='/dev/loop4\x00', &(0x7f0000000140)="a47ecad7023cff7fbb766d35701de8a427d7d436008aff5773853c33c357bbda9bb60b94473957b2c24861fbba70318bed53e8d0cc09771fc08919229d950689b3996b93f75ff6ee2e5ca9d60e74fbd6a04be87a06438bc6788ed7b9bf8bb7986e9158595c412141cf0128e990790bb880", 0x4)
ioctl$auto(r2, 0x92106405, r2)
acct$auto(&(0x7f0000000100)='/dev/dri/card0\x00')

1m48.185478166s ago: executing program 4 (id=2214):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0x6, 0x3, '*\x00'}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x2, 0x3a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', <r4=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000340)=""/6, 0x6)
close_range$auto(0x2, 0x8, 0x0)

1m47.232619993s ago: executing program 4 (id=2215):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000012440)='/dev/loop4\x00', 0x2, 0x0)
read$auto(r0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
r2 = socket(0x18, 0x5, 0x1)
connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
write$auto(0xffffffffffffffff, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r3, 0x92106405, r3)
acct$auto(&(0x7f0000000100)='/dev/dri/card0\x00')

1m46.920073684s ago: executing program 4 (id=2217):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x8ab46, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x8, @new_prog_fd=<r2=>0x4, 0x4, @old_map_fd=0x3ff}, 0xa3)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140), 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0)
write$auto(r5, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
close_range$auto(0x2, r2, 0xfffffffc)
ioctl$auto_TIOCGETD2(r3, 0x5424, &(0x7f00000000c0))
pwrite64$auto(r1, 0x0, 0x6, 0x6ee4)
r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r6, 0xffffffffffdffe00, &(0x7f0000000140))

1m46.864219067s ago: executing program 33 (id=2164):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/teql0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x88282, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x20000854)
timer_delete$auto(0x1)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20002020009, 0xc, 0xeb2, r2, 0x7)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0)
ioctl$auto(r4, 0x2, 0x9)
ioctl$auto(r1, 0x400c4d07, r4)
ioctl$auto(0x3, 0x400c4d09, r4)
close_range$auto(0x2, 0xa, 0x0)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x7})
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000240)="bc44eaba57834b8927c08cc630ad9b9fec20faf337bd0172b6fa33d23a2f4a3374648ee2bc03b0ac05b1869c97d8f5fba8d1ae126d0d455a7edc800c2993fe22502387fc63f329801868cd372b594994b4bba44950aa7344b7e2e8e2b7c43ae075a26fe8373ed69dc809ed428f92f0d6988e0554db25e83d6757551dc2ba0b47c097694ace64c984c7f194e6c2ab222b08c042f14cd814233d7df8a8f05658294bbea6f92d6f48abd7c6fd3b758ad57819aa4f045615b1f412a2b472d1eec95fa1f3dcb89a329be53b8d6aaf7eda56d84a")
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)

1m46.33733099s ago: executing program 4 (id=2220):
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103280, 0x0)
openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$auto(0x3, 0x80044940, 0x10000000000402)
ioctl$auto(r0, 0xc0305602, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0xd, 0x0)
r1 = fsopen$auto(0x0, 0x1)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1)
sendmsg$auto_NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x2ac, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xc8, 0x1a, "b1cb3d4f37fd3a9b59eeae51959039f82319d7eaf73566b59159d2b847d73ab9e596422e3654165a3d6b3dc2bdf89abe74b930ed9786afbf22a0a5be62a5a4931bb9e2570cbb023de5bda98aeaba54b43e6aa81760462029f5dde810a2ea8d550de6a564bac285c0620394af7bf9153aaf47e85fdc555e3a0ce0fed3a8d6ba1793700f1d5f3bea76605ba5b7f5dbdea1fb2486119b724d0a7a0d6038fc49d626bae50cdf1f50f9386e17935b56d1ff7905ee9c3de681d4a5bc31f3e14d659d72d23fc319"}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}, @NL80211_ATTR_TID_CONFIG={0x1c0, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x6f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd73}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xbd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x63a25e0b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x118}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x296}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x13}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xf}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x10}]}]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2ac}}, 0x80)
fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0)
fsconfig$auto_FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5)
read$auto_udf_dir_operations_udfdecl(r1, 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyzd\x00', 0x101e81, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)

1m45.641622364s ago: executing program 4 (id=2222):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
set_tid_address$auto(0x0)
mmap$auto(0x0, 0x40009, 0xe1, 0x10, 0x7, 0x28000)
madvise$auto(0x0, 0xfffffffffffeffff, 0x15)
prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x6, 0x203, 0xeb0, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
msgsnd$auto(0x10005, 0x0, 0x4, 0x1000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, 0x0, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, r1, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
io_uring_setup$auto(0x6, 0x0)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4)
ioctl$auto(0x3, 0x80004509, 0x10000000000402)
getrandom$auto(0x0, 0x6000000, 0x3)
r2 = socket(0x10, 0x3, 0x6)
getsockopt$auto(r2, 0x84, 0x6f, 0x0, 0x0)
getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x0)

1m35.469109073s ago: executing program 34 (id=2208):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={"d2b3d13d0b0d7bef28df3d6f58852c7ed4ae4f259480b465df663b4ed86a9769", 0xc, 0x9, 0x2, 0xe199, 0x5, <r1=>0xffffffffffffffff})
prctl$auto(0x0, 0x1, r1, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_usb_audio/parameters/quirk_flags\x00', 0x121102, 0x0)
write$auto(r2, &(0x7f0000000040)='\\\x00', 0x2)
r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(r3, 0x0, 0x80000001, 0x0)
prctl$auto(0x1000000003b, 0xffffffffffffffff, r3, 0x2, 0x6)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/ram5/integrity/device_is_integrity_capable\x00', 0x6142, 0x0)
sendfile$auto(r4, r4, 0x0, 0x7)
unshare$auto(0x40000080)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r5, 0x0, 0x7, 0x8)
set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0x4d, 0x0)
fsconfig$auto_EROFS_MOUNT_DAX_NEVER(0xffffffffffffffff, 0x4, &(0x7f00000001c0)='\x00\x14\x86\x12/\xdd\x1d\xd9iu\xd7_\xd8\xde\x89\xea|d\xac\x11\x06\x9f\t\x9f\x91\xeb\xaf\x8d\x8d$\x19\x13\xa1\x97\xaey\xf9\x1b_g\xb0\x8bN\xe1c[\x01\x10\x97\xcd\xdf\xc1^(\x9b\xd9EC\xb3R\xdfDC\xcdt\x17\xefS\xe1\x85\x8a\x87f\xa3]\xc0\xac\x86\xc8*;\nD\x92\x9f\xf3\x90\xb0\xd8Y\xbep\xb1\x14\x89\xb1\n!b\x10\xedS\xca\x8c&\xbf\xca\x1d\xccnw\xd9T\x044\xc6\x96\xfc\x02j!\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0xffffff9c)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x80, 0x0)
ioctl$auto(r6, 0x540a, 0xffffffffffffffff)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)

1m30.535322198s ago: executing program 35 (id=2222):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
set_tid_address$auto(0x0)
mmap$auto(0x0, 0x40009, 0xe1, 0x10, 0x7, 0x28000)
madvise$auto(0x0, 0xfffffffffffeffff, 0x15)
prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x6, 0x203, 0xeb0, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
msgsnd$auto(0x10005, 0x0, 0x4, 0x1000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000)
socket(0x2, 0x3, 0xa)
connect$auto(0x3, 0x0, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x6)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, r1, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
io_uring_setup$auto(0x6, 0x0)
kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4)
ioctl$auto(0x3, 0x80004509, 0x10000000000402)
getrandom$auto(0x0, 0x6000000, 0x3)
r2 = socket(0x10, 0x3, 0x6)
getsockopt$auto(r2, 0x84, 0x6f, 0x0, 0x0)
getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x1}}, 0x0)

1m23.288509255s ago: executing program 7 (id=2250):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0)
socketpair$auto(0x9e, 0x8e, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

1m22.149313291s ago: executing program 7 (id=2268):
mmap$auto(0x10000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8005)
timer_create$auto(0x9, 0x0, &(0x7f0000000040)=0x200)
timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x8, 0x10007}, {0x8, 0x10}}, 0x0)
timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x100, 0xd1}, {0x1000}}, &(0x7f0000000000)={{0xa04, 0x4}, {0x8ffc, 0x7ff}})
vmsplice$auto(0xffffffffffffffff, 0x0, 0x9347, 0xe1)
r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/features/oneway_spam_detection\x00', 0x2e19a7b5298fd175, 0x0)
r1 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x677cffdb9ccae213, 0x0)
set_mempolicy$auto(0x1, &(0x7f0000000000)=0x4, 0x21)
close_range$auto(r0, r1, 0x8001)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0)
read$auto(r2, 0x0, 0x4)
r3 = eventfd$auto(0x7f)
openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f00000002c0), 0x331500, 0x0)
read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000200)=""/36, 0x24) (fail_nth: 2)
read$auto_dev_fops_plock(r3, &(0x7f0000000100)=""/77, 0x4d)
timer_settime$auto(0x8, 0x3ff, &(0x7f0000000240)={{0x9, 0x4}, {0x9, 0xff}}, &(0x7f0000000280)={{0x5, 0x7}, {0x8, 0x8}})
openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r4 = socket(0x1d, 0x3, 0x1)
write$auto_bm_register_operations_binfmt_misc(r3, &(0x7f0000000300)="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", 0x1000)
getsockopt$auto(r4, 0x65, 0x1, 0xffffffffffffffff, 0x0)

1m21.595925882s ago: executing program 7 (id=2270):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0x2)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x189081, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x2000000000000, 0x2020009, 0x3, 0xde, r1, 0x100008000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/bond0/queues/tx-6/tx_timeout\x00', 0xa400, 0x0)
read$auto(r3, 0x0, 0x20)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0x6, 0x7, 0x40007fff, 0x948b, 0x8, 0x15f4da0a, 0x1, 0x20000800000003, 0x8000400, 0x3, 0x7, 0x934, 0x93, 0x400000001, 0x5060]}, 0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x3}, 0x7)
syz_genetlink_get_family_id$auto_nbd(0x0, r1)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
setsockopt$auto(0x3, 0x9, 0x79, 0x0, 0x4)
sendmsg$auto_NBD_CMD_DISCONNECT(r2, 0x0, 0x2000c800)
madvise$auto(0xffffffffffffffff, 0x200007, 0x19)
syslog$auto(0xffffffff, 0x0, 0x2)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
capset$auto(&(0x7f0000000100)={0x20080522}, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7f0)
chroot$auto(&(0x7f0000000080)='}[,&*}\x00')
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3)

1m18.41137424s ago: executing program 7 (id=2280):
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2c, 0x3, 0x3b)
syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa85c}, 0xc, &(0x7f00000011c0)={&(0x7f00000043c0)=ANY=[@ANYBLOB="0bffffff", @ANYRES16=r1, @ANYBLOB="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"], 0x1144}, 0x1, 0x0, 0x0, 0x40d0}, 0x4040800)
sysfs$auto(0x2, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0xe55, 0xffffffffffffffff, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18)
socket(0x1d, 0xa, 0xff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, 0x0, 0x22001, 0x0)
pread64$auto(r3, &(0x7f0000004380)='^{\x00', 0x3ff, 0x4c0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
getpgid$auto(0x0)
socket(0x1a, 0x5, 0xfffffff9)
mmap$auto(0x0, 0x1e983, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r4, 0xc0189436, 0x8000)

1m3.239401418s ago: executing program 36 (id=2280):
socket(0x2, 0x5, 0x0)
setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2c, 0x3, 0x3b)
syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa85c}, 0xc, &(0x7f00000011c0)={&(0x7f00000043c0)=ANY=[@ANYBLOB="0bffffff", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf251f00000006006d004abb000004102901e9835a65ee9af5e8e459bf7b52be5fe9c3dd55341bb246547b6310f4d039ff5e7bcdc88f2885dca82fd9c7004bd10a005a7845d647cf8a80cac4422d8f8de38031f95e83efa6f7e27441da217a3dc2381736473fa46b54aac8683227f6b198f16e2c6eda71d6adc465537eda45c0250920fb7c92164b67e9322627762b42cd12bb41611fb68e759b5fcb7702c3e3fb392c96be844bd1f6b7a590bf419793102bf41d1fa7836bf4d9aa05766953d801fca3af034fe1fb45f931d204fa83545e1e3a012fe55d36ed6e982e69c0c3ac07615c30b8fdb36367536644ec30ae070966696437ad504abad25c7a700fb8d54819fa92817c4f3acd41903a80243f3a6db9b486a5dd0ffee38ec35a4f110268c08c60e261842c1f0e9afe60c131f38674f0ac4e6121ecefcdbcfe5e40bd9df1997d7eb7ad938652669768d83833eef4e1d3aad0c25c0b22fa10ee4c64da16ef1897e929672e703fda86d5838bec84661b11ed8747cec8ebea22ee4e18df74813dec2edfc8265384514e6d2ffa7edfbbd27bf27996fe13557d8acab9edd987dc1f69e7910e4915ff56fa17ecd6ced496342698d19d2eb0821389586e512c0ded43528640fb0fce7e125831b897f5847ea96bdd4a5fefc698da82dd5661c1928bffd82603a4c632e05d184d82a2f46b6b2a8f57ab4f4a4e3c2bc38735fb0012253fb75ac546498d617d3e9496ee57dfbf68203474c8f5796d5e307b2b42c05edcfdd86d68176e855894117e8b6d29ede32e983f3718dd0d8ff1b350ef066eaf1866e1b6fa7fc63337d051a87e07064c0788d87a979278433729b65b32882c0a74a8c61bbe8f6918aa7909e75584c8b5dd46021a438f55c96528bfe095ffddabe450dfee42bb63810f3f6685ff43e81973e0b9baf66ff0ab2f2d8128352f4550eabc2df33850ddce9dd5474e0ce77c666b5d51634515fdf00de1cb3cf10d500b96cf4b5cdf10429a052ddcf18a9547dda6dfb17ef41b6de67c4378acb093dcb6a988ca675adc753a2e810da805cd8d04609ebb1a88235a55a87bbde4c58465d866a5562516309a1b45f4d15447769293235033d57a6dcab4813b28440a004130e1bb0bd038c3aaf1be668f038026c615bcfb38da9c4e74a472c72d3fe84c31d5f5458ac9f734cc4075e357f83d20b575b97ecf45eda7cf11ee092dcc198dc0db9420826afc13e1b21079b9f0db57c867782e5d4dc09b9f68fc393c64366686307669a6e57bc8bb75d8002620a1c6f26420d4fd2e4f64a8534ecb3dc5c6bde1dab2f05e70678af64312c7955960681d3932be66fdb6945b00c9aec394b3e7fd6c7f02467aca74863dca93b74ec7de92b727a7bcd3a4add92d85271b2b096a09c91b920d91461a6ef238cbb0a7a62f739889247a43fd59f0cab7b84cc795df546a23c9854d28d1395aaba292a9ba9359fb0c8d3d27c344e11d2fce4c3fa6748480d775d674d0893c49c7da6de1dbff84c0d94d99562f278a42cc4144e56541b8511595223b7e638054028a14afe1ddb89dff849c36184183096c396b8df43d32dab571d9958c3735318f2d9ec4ba716d7f44b555f733f28d4f1041f4e5339cb5a565509bc5652f21f8fc0db7c8d15f536a5f0ea8ddfe59d64b678b51162610760bca018bf7ae1698df23a073bbcccc09e8628b6bf502e0cd2d6cc822c8e28d7292e1f9d9248d20ad0579d29518187b9cdbb2821c8a0a203dec658a734c4ea58a77080795ff8e082fe86debad1b6ff2847da9d44d040137c69e1fb9f3e5d6ec805d54b618b394db288e9ffe0759ae1245bfc7752ccb6226c1463b76de84b70b9fefca58e91d3806dee74a0bbfd7d5ed512a6088f4cb8f3d6fb98c3f861d74b8b62e48a3b4f333a462b8c4dae94ab3f24619efd0afaa5fd8b829d0c06eda3446b51f4255aab266b35dc8fe3d8db20487d1562be946530357ebb66db771a8c4fca14f3b50858ebbdde34bb5a044740bf9b271a09d2a3714d9d393bf294d9f15033549afead8a012ca994b2ebf848e36dc86308a9a47799f7d2886e9516c8c498ca89d09e5f66709e492dea725b9fe1fabf4eac03f469ac02c88a93eb636cc7e9fac134458679852c59515ec8caa1512410aaa4b0535e563365b7db4aab173d850cd376e0745b48ef77ad965b513534ef426b21bbab3ce48efdbf13d6293ba40ac7ec4c20df0f73fe9638cd9f3c5a6624ac3c797872b8eca1233630f6637c942dfb66dbd6d1a3ae6fd2fa7843de72d4de7503f53c3e7b24d236e197110a17f29075d6ae2751dd87b983363cb6269296d8d42c2ac807d6ef748d08c974a7d33278907a8cb025d17dc3fa1b390da984da849bd7a9cd4a7b4b64620b08dfa86a9b6c44ac706c2d9a89b942ed51dd3d82e7ccea034cd4b20f0e296d40584994c78cb69b73ba16330d4b0d4afb7b4871527feb60cec525edd29599633a3209c0aec9bd4505a3b5c04abc9e12484b7f67f082cd2090c22ed3665f12910fda13da2d125894cd4acd7fde3fbfb167f1e28667d40e1392fc2d9fd47955c25e6a1877ef5e0c18608abf5df40eff5f555c3d37aac36dd873046de98fa177cd5c8164d3f144cedc1cbce2d86ba96fafba14fbc82a6bcc65c60420a721b71ac9b4f617723bd1acd45a5f56b767b8e75b20e18796950916fc724df0f4080fe3cde6fdaaae621340d7c0d1a959db674d52f1b985622522178b46831bfcdec554cf82ef217f70d055e77051e51c8da5818ffe58a7645399cfcde3a97b66c388153bdfe958cad0c7531ede38a78fe86a43f5fd243124c51ff9dbfe225e8b6332c9b8b1c6f2530d9249f05473dd7ec99073de2e843651016e54d46f0f8659319859c75e4ad0495950b611bb8f6fa8e49308a743fbc25ccd9adacb9d66ff4509c612482ffd08ab5af0ae97f4215b840062b273bcc0b5a869da0d5ac4747f28fa06d779f340bfa9ff94be3f0cb89ae76eac0ad91c254c063525556980dd10412eaf1f177af4b00305af789fdcb6787bf0013ec86000574cb71b2407f6060a93abf6b6966ef70ac34aafd10348932cf077f6a61c8b862a051496bf7d51494462368c9a8393e82cf206432d8e671d64bfab3ea85f47d6bda4545f4569dcac9050315fec73270f62cf66f41fa66c0afb58ee7d1b4b78961ffb51b99b8f3996307e6f5ce75ccf61dc04573da07458be483009372cd4f1cf70873d822e11aa21ce48ca2df28ed6fe3ca0ec7db2f144cb3d10e2fadb37292b886331263ac95e90416eb70df0490f9d8099e984264e85b3a9fc8007111db3687e5b2b36517d5d2a1f3e19a9d5eca5b6816462172f130e7a34c9d588292fc572a8b03cccc55ef12b9c0146814d1ab33fff79189dba22b44e4cee70ee6077096d7b17e713c31b9bfa464ce545d38d22788836aac3338482a5640ea29b460bf2ac2eb586a8884417a68cbc91ffb3f2ade06a1b49d362dc3a4421b00b962c44988fb0476dc2a8f38287c48676c6086d555f58f985f1239fb93364081928bb0d54ae95f7d87de081f46d0ef368c24af2391334721ea2916c50e2e00be5bcbfe90644d3f1367ec8e6f764bb27055e06bfb4134ee1578379ae738f3e4bee5bbde0d78e62803abc4b96aac02200a90826bb2081e6693a943508f1f62039d8fb03ed7d40c255a9d3502470d44f1d2f49cfd2e4b5cb7bed6526b5e13aa8e8ce9d77f470ec0792d2b6fb8e1284d376523f5f776aa5bc0200f2de80ee50d470944f388106758cbd03f3595799a38346b4932680741208c61885abb74ce78e56bf97c9805de820f210a81df7f8f1ce5e057a15495cb2462e5a44d7950cb29dfb689cd8d017f9f69f309f3ce3a95a85405f1abd97495892b5f6d66285a9faf3c497a58e687dbcac0014a9f919a5c3d71ffecfbf19f46f71d0a7a9812925215d76fa0eeec68863185918de2ff2b5a5552688704043c13346da4453fd20046c246655adad5e9671c79330acfd565b03ef7fabdaced4f03a5dc9844a62b7a1a619107db4439f51308d4812d6137e9f22748f96c047d34f494519835a57a8d2c90448445c2eb192553cf90e1b76c0d7bf736316b11c5ef2ad8cf41095b830495fa5c6612d7678a2e308fd284bbc3d213fbf8b8e8498482e970f76313a41df1b33a0134dd5b0e9f8e26d340c7a0308d15c15a7f085847f46ef5c93193fbb1c723dbba3d63ea9dabc056272eb1f93c8c098b3d47ca5a78c0017731f2cfac1f131e639063ebf91c6f4c47079c9b9f1fe7fe047e91a6b32b0e105f346d3482e7bcf09c279bb44dbb1b61314f8892fed98dfa1ddff66bdf19cb6e27e622c7baa5a36d75550cca4b4e8d3717aa4acfd477fb7d8e29b2c6e1b02bdef6b4d84644ca699bf1c089856d823838632264764dc5714a0a981d2c8b68cb285b2abeab44274618f3e5a4c56a95e28134a8b984c315f1d9de019965b1be2d4e146948c77c9fa50160b51bec4a1e3dd553dc7b05c2c63007b505ece87e8970a994c43816d44be334169987682620588e0ecb959916eb2b35a40df6d0db8959fb45e5a99232fe4337a44e4357889f56b4e822f5a04bddda155a40dd325b6047078077375b9a0721995194823a536bdf19cd4770286525b94c52cfda9654005d90d9a890f65713ee5fe470780e3eb909911f803fee140277d8d57d7f3c08e38640c317f3d50c4fa5b6d9d369c3f8e1986ad81bf01696f53a4bc27a47b8a4bfe316637618b0f72f17aab9d7a40bad688bf59ff7fe78d7de26a60df0ac85770cc82f566d9cfc88df17862279380c18f3eefdaeedb7a0aa6f819b6b5b6ca9c9a6a816efd8edf857c45bb41f445c743a9a2549c74874179de14fe4f85a72c8d99922e2b1eb2021303ce09298bde03122739d787d16f19a4ebe3e0b7d10058ce55b15ede0a7003a14a417bb792952b8bcf5aeadcbd6c661ff407a3a6ed5ba541c77ca2e84292b51245073d572c053b49ae58f789653fbf21f6d1a1d91097dcbbfd5545010305b144556d9f44d87ad35a4f38e8364196f3026e529afb96378d0553227fe5b50143ba0dc25529313e069dab4a3dd68f2c8ed12985830f4219dc43cb9e2109bcaeb9c35a9139edc266640d4140c2b1dff12b8d0de2e1c284b7d5736bb79ea290c2c816093cfc3cda8a4fa40926efa7ede009bd616da346518e41825e46216e3d0b572464dddf7f17725b8f757debfc139a7c2705241e9ded20a3d2565791cfda08eb8e2067d41a481e0e04b11d2850515626de6a187ea2ab6e96c9aee9cf9a33cc235c195d631f021d56f21c7dd4995992cc44f057df6bc138e0377e943c317139d4200a442daef8ac104735a4d1e0a002fee17545728da5ea9d23e0a8e243dcf6ad03e03a131b61972a4ec1764631ca5ca7100708b7e01435888befeefd4680daba22f691dcdfefdba0170abe7102150f05f187bf27f9370463bca22bb24549f4e63f43431aac5765cf02f1bd3af580cf350c2eff6666eb6bcba4031a5e5d3adf669ccbe3e128ca059bc10404d986b69fb4084d76ca5404ce4adddc6d2321172b40cea7bcdb307cfdcddf9be4f3a32d3e74b6781999f72382fc978db6d4136daea9ff187fdfbc183ddb8a6b05a1813fc18669709ac8a31510657ed134029f3a212eb4dfe28a96363c2026089eb4ae65adc6da54330418c5dca9f16c9decc2283928488abba9c3a1988c89e9c320a0b8b2a3a2450893a3562529b9e953dfe0a2b21602bf7e6efe5bb90cb45dc830c3a2e69b88e7c0e1e41bba657ff0104450b1ce0de15182c05a753fc147d6dacbbaa2f6fabe2a9a48ba3b8510600d4000000000008005d000100000008006100020000000600b300b10000000000800069388ad4c6561c4cfdfc5d892fcc2cc200db16ed2cc37ec26d30b1ed9a0ee42657e7062a5c457467d188b4a52dbc81246a0a6e7ea73a5c0bb64191fea86d1c71bb6adb9e2f4902a0fff61030cb3d4ff98396c0d95fb8f668005b5a6ec463118ec966b14ff69ae653b5ff406ebcb8078a9baf4d7f9082c4837de72f376ff3a56b893b39d537c139845a22180c584e4d8655c7b62bf6672447087e1b344483ad9bee8e4867736aa595df7dda7c6f1e486ce10e634d9aa1b4794c5b47a14f6dda183115cdf02fcfab18e34088eb8c671c16550054e6b5a835384feb249369a18692bc9dab7a65c62c7cd6e5aab1f8b3fa9083a66c1090b0def0b7bc52742102ef121fddafc4cae885d3ee5a12a3ef76090ca9e7582ffb0d96f660711cf90e540ca93bfa43e2665f99ca09588cc0aca202220f590e39b81f8def4fb84a547448584e47258da8a061ed72cdad361b9eae376374923471379e8f584d2d0dc96175d79406c43852061bce3906accc76b0d9cfaa97cb1993609c690e7e6ee1169504b56cb5e914fb7ed199f04a9dc479d04e2a879b6dce47bf50f790f857e349d02796bff6a5ec39bf0ccce10d3944741ab1ece8545795fd9236535efacb2d57559100693c5280a45677c69ca67f862f2ad917ff39da47e7d5b7154fc243dd2c0aa3110024dc6b1852abd93b19aac26df3627b654fd2acd438d5c588fcb80250a9d22739e57f7d5a81c7e174b3eb26de9b19fb5e442cc89053f76a178c24dd7b7d27aebb6b21a48a5fc2ae92e2b533d400fc758dab8b6050ee2c761cf316151be0de5f034b7228ea7316beb265f6ee4726164b4082ec7aaf55fa4a69006b116bdb189ea09bff67fbc753eb8d55abb63d968d38d8701cb1641585dd3c6ab79a678495ff27929ef575d9d4043b9633140fd3172920762368bb36dbdc5031dc9b6de7edbfe6f1770cfe91c1f0f6870888ae8620201a56b77e4bf2b674cc3c68a709d82b3fb64e06a78c97798a085e3b39e9105c1b9c188ad111271afa4483d5b6f523cf45a03b72b07fa80e3b6f72da50367a572a66c8da08627f76f2e1ba35df06f0a0fd6af4983a1f3fdd6ba506d635716ef23e084748cc17fc36402ecffb8d754b76322d73121cf85ffe0f4e58141069e3993e03bbc008593294fbfd7d07489c76868e312a5605c5161ba94d029dc80ecfdb6fe3aab883b99a5207756eb76b104a15296a1d31b04598dacd38c4120f00e2e4254788f32e62085e4a4cff72a5c492a33773d2b3fe18c3af4fe794f677470987b80e81a0d7ae9466c454f4e18788572c65714503cc081c244daafd67f73a1b1e51347826e8439d201a3e2394d2e9235db527de8f0a8466c0f07a7909de58e2a7d6d78168990728008709774052cfeec6c8d1852d864fe3c10a45e1474f87444d57e00e09ba6fcfa09f33c75523215d1117210bb414c76f4b58001affaaf9b7dd8952c28995cc55923c6570332e8a026f5c7b5ac8ed228ec2d3e7ae552ab74f63756b08bbf9f1af744ed19136411a0df49a63e027d85a040bd015a840743cfff1ebdd04d72b3e9bdba4a50504ed71e0f6145462271305807cc6bb619596062a46746d96e5c1033c03f25a5da18e8c28909f91692c7d8d24b6f02d013246a5c00731e2ff3303ed453acc42fdaa115826688b0481aa8a4ac55219294ae329ad9ea26ce75dbfb32203678d4e150ed3d252b9beec33df21b09789ad70e9dad168775c35254390f3200944fd5a32137062eee2cf687577de72dc2d3c1e3c8b4f25e618e63ef5eee9bd2abf113c217db43675033448571a084b31bf96263c4f03a9417d2b6ed88a00077ee3179468c2088224f793d85869162c46e09b9ba0aa1d3fe61e0b74062bda143d890757bd654b4e879404b1deb83aa200ebe3c0ace26cbb71375b623de88a57d1f7ec8a4b874765ddfd5be0753ef66a1c0681aa7c3a755c641eff5b9d2e3e0f3bc1ab96b6ee0be17c5c73e77fb3de21024c514a6f6d0b712667945b517185af221fb46d344acfbd2b4f385c3905f91a08ee88cee0c6b8e133954b35bc0463259dccc888e1b5f374c3c70d89190e054cfdd1a05161240eb5b7780147df61422a0ee2d5ace28f9f640caed008d942a8b7cf592b9150aa5b7ae9a6f151084d2572d9a08130ffc313a6514b8a2c42c2f606e1786a0fa419b7d055c637ad6f405ea56b4cfebaba0e382707f7a40afde30e66c86e5e909e461aeb2afacf1440f2713f2dcee912dbf27a0b05aef090a28c7bbdd548cee99e0ded8f9bde7512ba98280a429f1eab16cf03c9cd8958671752b0f9a229f70789f581fe43664f1d6a0b0b4cfd586cf1deabc578cbc09a59248a51cdd20fa959ebe1a55b45f2c77ba279a48d96511de380b0881866c0ca748229cc8abbf2355cada986ceae172c3c33644394f5ad948ed2ce3798d747eaae5cd00ae4a26387291e77bc1dba3735a46fda12414fef2bfdf3efb1374656096b735cef66e0fe10d7df29345f6b3d91cf3bdd2fedf19b9b293c620281e375aa73fb9398eac5f3cacb132970b249bd33e7ebf6e5fa6d6fc6801d78eb0a8a14b36b8d91f0f62e19bde8958c77af833d1ce89af00318abc5c891a40ea808cefa62458c1e654d6c69ec259e2a186024ebede67f8b49a67de684f06653446293d027cd2cc2e35acad9c65bfa19794547f9f731f117592eddb9be5fc99278a5f6d63ea8878037512c98f30d9cfbeaab97d635a085fe9e8e56d96666bf372f2cf049a3a534dd1ba5787a12cac5ed6cfa4fc223075d0d809e81a87c80e4f50f63cb0af7a27b29cf5f9b775710c9482a9cb7d6a387dc9bdf45a54df93e182959387a2e1eb5574dfc148da03a9b6bfe61d79edab15addf80c1186956c4521aee660aea499cbd434f738db7a6a7beff44335172faa67785eb935b78e7cab81079d347a57474cf5f142e2cc0ec127a52c0000b1004801cfb509fe42de1d4ef56ef8750471afef383ea8e97fa49b1ca92affb920b6bf6181a33a25da5fc7a543acc1d5a4931896dcceeb051d6f1cf57a2076c5d87804de84068b414892ba7e20a426473fda14731f9b8425407d78f967cc7932d64b46ea5c0ebf08f43ee80127328ec2477be7e6c29fce1b9bcc22bb823a21b9b215c2f6f4899f05ca4602d6ca95996e4556ad2e17b930aa9a440d40a1912dbb15439dac711b42146c990801b2e210a5cf0000000400470106006500000000008892afbf4b6b92b1913fedee9aece8b1d16aacae1730a875912a1ee7f62909"], 0x1144}, 0x1, 0x0, 0x0, 0x40d0}, 0x4040800)
sysfs$auto(0x2, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0xe55, 0xffffffffffffffff, 0x8000)
prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x20041, 0x9, 0x2}, 0x18)
socket(0x1d, 0xa, 0xff)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, 0x0, 0x22001, 0x0)
pread64$auto(r3, &(0x7f0000004380)='^{\x00', 0x3ff, 0x4c0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
set_mempolicy$auto(0x6, 0x0, 0x21)
unshare$auto(0x40000080)
getpgid$auto(0x0)
socket(0x1a, 0x5, 0xfffffff9)
mmap$auto(0x0, 0x1e983, 0xdf, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r4, 0x0, 0x20)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x4)
ioctl$auto_FIDEDUPERANGE(r4, 0xc0189436, 0x8000)

25.430022439s ago: executing program 5 (id=2431):
ioperm$auto(0x7, 0x6, 0x2)
openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000dd, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) (async)
select$auto(0x17988, &(0x7f0000000080)={[0x3, 0x4, 0xffffffff, 0xbe, 0x7, 0x8, 0x9b, 0x8000, 0x0, 0x4, 0x2, 0xd, 0x4, 0xb885, 0x3, 0x9]}, &(0x7f0000000380)={[0x8000, 0x6, 0x9, 0x8000000000000003, 0xf1e3, 0x8, 0x4, 0x401, 0x9, 0x7b0, 0x1, 0x0, 0x5, 0x0, 0x6, 0x62]}, &(0x7f0000000400)={[0x10001, 0x9, 0x5, 0x3, 0x400, 0x0, 0x7b5a4050, 0x5, 0x8000, 0x9, 0xe, 0x9, 0x5, 0x4, 0xc, 0xfffffffffffffffe]}, &(0x7f0000000140)={0x6, 0x8}) (async, rerun: 64)
read$auto(0x3, 0x0, 0xf34) (rerun: 64)
mmap$auto(0x0, 0x557, 0xde9, 0x14, r0, 0x4)
r1 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r1, 0x6, 0x17, 0x0, 0x2) (async)
getsockopt$auto(r1, 0x6, 0x9, 0x0, 0x0)
semtimedop$auto(0x1, 0x0, 0xfd, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) (async, rerun: 32)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$auto(0x1, 0x1, 0x43, &(0x7f0000000000)='\x00', 0xbb)
read$auto(r2, 0x0, 0x1f40) (async, rerun: 64)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 64)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0)
ioctl$auto(r4, 0xab09, r4)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
close_range$auto(0x2, 0x8000, 0x0) (rerun: 32)
socket(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)

24.993119808s ago: executing program 5 (id=2433):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0)
socket(0x10, 0x2, 0x3)
socketpair$auto(0x9e, 0x8e, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

22.067984854s ago: executing program 5 (id=2438):
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0)
r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r0, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x80140, 0x0)
r2 = syz_clone(0xb38c55771d9fbf45, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x7, 0x4)
read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv6/neigh/dummy0/delay_first_probe_time\x00', 0x240001, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xfffffffffffffffc, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x3ab23c46, 0x1, 0x4, 0x5, 0x7)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="48fa91bae9bc9e800f809e4bbbf39bffafb81a22b97b302f52d95569669e6f84b608fa1789e417bcc141ee95d0691c8dc52a175ccc6f33a167a0f934c1c0c086b66ece29b47edfd6c78fe9be3f90bc14b0d06c02dd11d690a6533f2b544343c047d60cd03e01fcf8afc97e72369c370fd4184a58481c960813be0337b3c0b6541534ca9ebfa265ff1a4964bf94cecb982c97fcb05d72e473fe9aaf4ceadb8ca7694010c813ec121d2ef6fd7f477da4d322ce4528b7b736a7e1fe8b"], 0x1c}}, 0x4000000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
request_key$auto_KEY_SPEC_GROUP_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffffa)
ioctl$auto(0x3, 0x8905, 0x38)

20.926767996s ago: executing program 5 (id=2447):
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x8, @new_prog_fd=<r0=>0x4, 0x4, @old_map_fd=0x3ff}, 0xa3)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140), 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}})
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lseek$auto(0x3, 0x7fffffffffffffff, 0x0)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x3f00)
write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
close_range$auto(0x2, r0, 0xfffffffc)
ioctl$auto_TIOCGETD2(r1, 0x5424, &(0x7f00000000c0))
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2)
r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)

18.357976852s ago: executing program 5 (id=2450):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0)
socket(0x10, 0x2, 0x3)
socketpair$auto(0x9e, 0x8e, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

16.353652655s ago: executing program 5 (id=2455):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0xa0f82, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84)
ioctl$auto_FS_IOC_GETFLAGS(r2, 0x80086601, 0x7fffffffbfffffff)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x40000080)
getsockopt$auto(r1, 0x1, 0x2, &(0x7f0000000040)='/dev/cec27\x00', 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0)
sendfile$auto(r3, r3, 0x0, 0x1)
r4 = socket(0xf, 0x80000, 0x2)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r4)

4.458972028s ago: executing program 6 (id=2491):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0xe, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setreuid$auto(0x9, 0x1)
r2 = geteuid()
keyctl$auto(0x1f, r2, r2, 0x5, 0x8)
r3 = setfsuid$auto(0xee00)
setreuid$auto(r3, 0x0)
read$auto_stats_seq_fops_netdebug(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000)
keyctl$auto_KEY_REQKEY_DEFL_GROUP_KEYRING(0x8, 0x6, r3, 0xffffffffffffffff, 0xcf8)
waitid$auto_P_ALL(0x0, 0xf, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xa7, 0x0, @_timer={<r4=>0x0, 0x8, @sival_ptr=&(0x7f0000000000)="fb07ef40e7a61f01394899b21ede90f3b62fe349c3c7531037ba8afffa0068d631a7549d89e652b6eb2db4fc3121f5b5ce1c09bfb0b51e80e450c3a3a4fb0677a133fbbf6ed94c1808f92f09d65c8a25ebdf53ccff5a5806ca60c979ab2065404b7fda17dde08b26ec0c6f281c1d12f8f959a274784980d3f8bd661977320f1447372395c242a7b7cf334d69f755bdff276c0deea193476b387de8570378b2ce15eb75a1bc12597c16531fe5894184713e9c443107c2b111bc8aa512e06699803aaf202491786e97a0b6a4025629705fff581fe0f9daed872051aba2eb8db22c1295d1161f02a3", 0x3}}}, 0x2, &(0x7f0000000200)={{0x7fffffffffffffff, 0x7}, {0x7fffffffffffffff, 0x8000000000000000}, 0x1, 0x0, 0x7, 0xffffffffffffffff, 0xff, 0x2, 0x59, 0xd, 0x9, 0x8, 0x7fffffffffffffff, 0x3, 0xaed, 0x4})
sched_setaffinity$auto(r4, 0x1fb10554, &(0x7f0000000180)=0x2)
getsockopt$auto(r1, 0x114, 0x5, 0xfffffffffffffffc, 0x0)

4.239088743s ago: executing program 6 (id=2492):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f00000001c0)="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", 0x342)

4.219185628s ago: executing program 8 (id=2493):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0)
socket(0x10, 0x2, 0x3)
socketpair$auto(0x9e, 0x8e, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

4.066967941s ago: executing program 6 (id=2494):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0)
socket(0x10, 0x2, 0x3)
socketpair$auto(0x9e, 0x8e, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

3.71805604s ago: executing program 0 (id=2495):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000012440)='/dev/loop4\x00', 0x2, 0x0)
read$auto(r0, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x8, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
write$auto(0x3, 0x0, 0xfdef)

3.462084654s ago: executing program 0 (id=2496):
unshare$auto(0x40000080)
socket(0x8, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1\x1c\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7\x98\xab\r\x8ab#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1b[\xd1\x05Q\x9b\x0e\xf8\x8aD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x9a\xca]\x97m\x89o\x8f\xd8}P>I\xd0', 0x100000a3dc)
ioctl$auto(0xffffffffffffffff, 0x540a, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5809ff07", @ANYRES16=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x800)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
socket(0x2, 0x3, 0xa)
openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000200), 0x10b400, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x3, 0xa)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/use-gss-proxy\x00', 0x2a00c0, 0x0)
mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0)
acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00')
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a37, 0x0, 0x4, 0x0, 0x3, 0x5}, 0x8}, 0xb, 0xdb22, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'})
r4 = socket(0x2, 0xa, 0x0)
sendmmsg$auto(r4, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d)
read$auto(r3, 0x0, 0x7f)
read$auto(r2, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0xffd8)

2.726794855s ago: executing program 8 (id=2497):
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
bpf$auto(0x0, 0x0, 0x6f4)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x60000040)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000005e00)={0x10, 0xf1, "82a0d48cb31f0af645c78a4a23b40e62"}, 0x80000001)

2.391928515s ago: executing program 0 (id=2498):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x8)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8002)
mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000)
close_range$auto(0x2, 0x8, 0x0)
sysfs$auto(0x2, 0x100000000000027, 0x0)
fsopen$auto(0x0, 0x5)
statmount$auto(0x0, &(0x7f0000000180)={0x208, 0x8, 0x1, 0x8, 0xd, 0x4e13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x6, 0x0, 0xeeffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x101, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0x27, 0x0, 0x0, 0x0, 0x3, 0x1, 0x100000000, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x2]}, 0x9, 0x7f)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
setsockopt$auto(r1, 0x1, 0x9, 0x0, 0xeb66)
shutdown$auto(0x200000003, 0x2)
sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x4000)
fadvise64$auto(0xffffffffffffffff, 0x4, 0x6, 0x0)
setfsuid$auto(0xee01)
capget$auto(&(0x7f0000000240)={0x8}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

2.381033523s ago: executing program 8 (id=2499):
mmap$auto(0x0, 0x200000008, 0x200000df, 0x9b72, 0xffffffffffffffff, 0x40008000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0)
sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x44890)
timer_create$auto(0x9, 0x0, 0x0)
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
unshare$auto(0x40000080)
shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, <r1=>0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000080)="4f0d6995e94336e1a6e889b8759a9cfb3ac250420045b1012d24b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"})
fsconfig$auto(r0, 0x800, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, r1)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce21", 0x1c)
process_mrelease$auto(0xffffffffffffffff, 0xa)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
socket(0x2, 0x1, 0x106)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xffffffffffffffff]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)

2.151786568s ago: executing program 0 (id=2500):
openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
bpf$auto(0x0, 0x0, 0x6f4)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1)
sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f0000004b00)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x60000040) (fail_nth: 3)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000005e00)={0x10, 0xf1, "82a0d48cb31f0af645c78a4a23b40e62"}, 0x80000001)

2.116785234s ago: executing program 6 (id=2501):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001)
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
pwrite64$auto(r0, 0x0, 0x2, 0x0)

1.996504801s ago: executing program 0 (id=2502):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x2)
socket(0x10, 0x2, 0x3)
socketpair$auto(0x9e, 0x8e, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0)

1.995283313s ago: executing program 6 (id=2503):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.9/usb28/removable\x00', 0x6c01c0, 0x0)
madvise$auto(0x0, 0x2000040080000004, 0x2)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x189081, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4)
mmap$auto(0x2000000000000, 0x2020009, 0x3, 0xde, r2, 0x100008000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x2, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/bond0/queues/tx-6/tx_timeout\x00', 0x2440, 0x0)
read$auto(r4, 0x0, 0x20)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0x6, 0x3, 0x9, 0x948b, 0x8, 0x15f4da0a, 0x1, 0x20000800000006, 0x0, 0x0, 0x7, 0x934, 0x93, 0x400000001, 0x2]}, 0x0)
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
syz_genetlink_get_family_id$auto_nbd(0x0, r2)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, r2, 0x8000)
setsockopt$auto(r0, 0x9, 0x79, 0x0, 0x8)
sendmsg$auto_NBD_CMD_DISCONNECT(r3, 0x0, 0x2000c800)
madvise$auto(0xffffffffffffffff, 0x200007, 0x19)
syslog$auto(0xffffffff, 0x0, 0x2)
poll$auto(0x0, 0x7f, 0x9)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r6, r3, 0x0, 0x3)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)="34aeede8", 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/fail\x00', 0x808882, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)

1.079604149s ago: executing program 37 (id=2455):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0xa0f82, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84)
ioctl$auto_FS_IOC_GETFLAGS(r2, 0x80086601, 0x7fffffffbfffffff)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x40000080)
getsockopt$auto(r1, 0x1, 0x2, &(0x7f0000000040)='/dev/cec27\x00', 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0)
sendfile$auto(r3, r3, 0x0, 0x1)
r4 = socket(0xf, 0x80000, 0x2)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r4)

782.314598ms ago: executing program 8 (id=2505):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0)
ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000000))
ioctl$auto(r0, 0x93, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
clock_adjtime$auto(0x0, 0x0)
openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x721c00, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002511bc168aab3aaabd700000dcdf25120000001800018014000200766574821507ce1e4ae9783f33e182fba7"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4000904)
ioctl$auto(0x3, 0x40086200, 0x38)
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001)
socket(0x2a, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x2, 0x73)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x1, 0xc650)
bind$auto(0x3, 0x0, 0x6b)
listen$auto(0x3, 0x81)
r3 = accept$auto(0x3, 0x0, 0x0)
ioctl$auto(0x3, 0x800005411, 0x38)
r4 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x3, 0x6, 0x7, 0xb, r3, [], {0x6, 0xd88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x5, 0x52, 0x5, 0x20000011, 0x101, 0x876c5, 0xcd, 0x3}})
io_uring_register$auto(r4, 0x15, 0x0, 0x9)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
mmap$auto(0x0, 0xffffffffffffffff, 0xa, 0x40eb2, 0x401, 0x300000000000)
madvise$auto(0x0, 0x10, 0x4)

499.778435ms ago: executing program 6 (id=2506):
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0xe8)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.pressure\x00', 0x42802, 0x0)
write$auto(r2, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92<e\x8b?#a\xa3 \xaa\x19\xde}\x10\xa4\x95\x02\x12\xbb\x13\xeb<\xc8x\x86\xc6\x12w2u\xe5\xb0\x8f\xda\x88R\xf4 @\xdc\x8e\xaa\xf0{\xa8,\xa3\xc7\x01\\\x03(\xc0\xb3\xf3\xf80eqo\x1a\xe0\xc6\xd9\xcf\xab\xf4_\xf2\xedY\xff\xe0\xbe\x82cX_&o\xc4S\x87\x9a\'w\x18\x91]\xcf\x179?Ag%\v\x12\x86\xf0\xe2d\xdc\xaa\x0f\xa8v\xc3\x83\x89\xbe\x1c^\r\xfb\xdb\x14\x8cC\xe9>\xfc\xf3\x1a/\x99dcA\xf4B\xf3\xba\x17\xea', 0xe)
r3 = openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
write$auto(0xca, &(0x7f0000000000)='\x04\x01\x00\x01\x00\x00\x00\x00\x00_\x9e\x99:R\xcc\x98\b\'\x02\xb0\x92l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f)
sendfile$auto(r3, r3, 0x0, 0x1)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptys6/power/runtime_active_time\x00', 0x400000, 0x0)
write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0)
ioctl$auto(r5, 0x540a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x11, 0x80003, 0x300)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4)
r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r6, 0xffffffffffdffe00, &(0x7f0000000140))
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
unshare$auto(0x40000080)

458.09528ms ago: executing program 8 (id=2507):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x20)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2a, 0x2, 0x1)
connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
mlock$auto(0xfbe8, 0x4)
mlock$auto(0x5, 0x10)
mlock$auto(0x7c88, 0x7fff)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1)
close_range$auto(0x2, 0xa, 0x0)

160.000691ms ago: executing program 8 (id=2508):
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0xfffffffa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4004885}, 0x40)
r3 = io_uring_setup$auto(0x6, 0x0)
sendfile$auto(r0, r3, &(0x7f0000000100)=0x7, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xce, 0x7, 0xe08}]})
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)

0s ago: executing program 0 (id=2509):
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0xa001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x2, 0x88)
setsockopt$auto(r0, 0x11, 0xb, 0x0, 0x8)
msgctl$auto_IPC_STAT(0xd99, 0x2, &(0x7f0000000880)={{0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2, 0x202, 0x2a}, 0x0, 0x0, 0x6a, 0x3701, 0x7c, 0x80, 0x60f, 0x3, 0x6d, 0xffff, @raw=0x7, @inferred=0xffffffffffffffff})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x0)
r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6b)
getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', &(0x7f0000000100)=0x9)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd)
fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
read$auto(0x3, 0x0, 0x80)
socket(0x22, 0x2, 0x4)
ioctl$auto(0x3, 0x80044944, 0x10000000000402)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d)
mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x4a, 0x0)
r3 = socket(0x2, 0x5, 0x0)
getsockopt$auto(r3, 0x84, 0x75, 0x0, 0x0)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)')
rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00')

kernel console output (not intermixed with test programs):

SYSCALL_64_after_hwframe+0x77/0x7f
[  905.063503][T14593] RIP: 0033:0x7f370e79acb9
[  905.063529][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  905.063562][T14593] RSP: 002b:00007f370f742028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  905.063595][T14593] RAX: ffffffffffffffda RBX: 00007f370ea15fa0 RCX: 00007f370e79acb9
[  905.063616][T14593] RDX: 0000000000000003 RSI: 0000000000000005 RDI: 00002000000003c0
[  905.063642][T14593] RBP: 00007f370f742090 R08: 0000200000000080 R09: 00000000fffffffb
[  905.063663][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  905.063682][T14593] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[  905.063725][T14593]  </TASK>
[  905.744582][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1755'.
[  906.437096][T14607] zswap: compressor  not available
[  909.747084][T14676] hub 8-0:1.0: USB hub found
[  909.752406][T14676] hub 8-0:1.0: 1 port detected
[  909.995602][T14682] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  910.004716][T14682] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  910.184722][T14682] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  910.209405][T14682] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  910.535236][T14690] device-mapper: ioctl: name not supplied when creating device
[  912.060239][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  912.060253][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  912.214556][ T5841] Bluetooth: hci3: command 0x0406 tx timeout
[  912.294576][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  912.924579][T14701] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  912.974975][T14701] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  913.101213][T14701] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  913.120265][T14701] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  914.142889][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  915.014599][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  915.174453][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  915.174571][ T5841] Bluetooth: hci3: command 0x0406 tx timeout
[  915.769252][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'.
[  916.087043][T14740] 0x000200000001-0xa29656a63616329 : ""
[  916.123236][T14740] mtd: partition "" is out of reach -- disabled
[  916.173401][T14740] ftl_cs: FTL header not found.
[  917.784991][T14769] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  917.824864][T14769] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  917.831225][T14769] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  917.853950][T14769] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  919.190615][T14786] FAULT_INJECTION: forcing a failure.
[  919.190615][T14786] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  919.334738][T14786] CPU: 1 UID: 0 PID: 14786 Comm: syz.2.1789 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  919.334800][T14786] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  919.334813][T14786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  919.334830][T14786] Call Trace:
[  919.334840][T14786]  <TASK>
[  919.334853][T14786]  dump_stack_lvl+0x100/0x190
[  919.334903][T14786]  should_fail_ex.cold+0x5/0xa
[  919.334954][T14786]  ? prepare_alloc_pages+0x16d/0x5f0
[  919.335011][T14786]  should_fail_alloc_page+0xeb/0x140
[  919.335062][T14786]  prepare_alloc_pages+0x1f0/0x5f0
[  919.335185][T14786]  __alloc_frozen_pages_noprof+0x193/0x2410
[  919.335229][T14786]  ? mark_held_locks+0x40/0x70
[  919.335275][T14786]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  919.335313][T14786]  ? lockdep_hardirqs_on+0x78/0x100
[  919.335352][T14786]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  919.335388][T14786]  ? stack_depot_save_flags+0x3f8/0x9c0
[  919.335450][T14786]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  919.335490][T14786]  ? kasan_save_track+0x14/0x30
[  919.335531][T14786]  ? alloc_ldt_struct+0x5d/0x1b0
[  919.335566][T14786]  ? __x64_sys_modify_ldt+0xb1/0x170
[  919.335603][T14786]  ? do_syscall_64+0xc9/0xf80
[  919.335641][T14786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.335695][T14786]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  919.335734][T14786]  ? policy_nodemask+0xed/0x4f0
[  919.335795][T14786]  alloc_pages_mpol+0x1fb/0x550
[  919.335846][T14786]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  919.335909][T14786]  alloc_pages_noprof+0x131/0x390
[  919.335961][T14786]  get_zeroed_page_noprof+0x18/0xb0
[  919.336013][T14786]  alloc_ldt_struct+0x9f/0x1b0
[  919.336049][T14786]  write_ldt+0x62b/0xd40
[  919.336103][T14786]  ? __pfx_write_ldt+0x10/0x10
[  919.336145][T14786]  ? xfd_validate_state+0x129/0x190
[  919.336212][T14786]  __x64_sys_modify_ldt+0xb1/0x170
[  919.336254][T14786]  do_syscall_64+0xc9/0xf80
[  919.336296][T14786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.336330][T14786] RIP: 0033:0x7f370e79acb9
[  919.336358][T14786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  919.336394][T14786] RSP: 002b:00007f370f6df028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  919.336429][T14786] RAX: ffffffffffffffda RBX: 00007f370ea16270 RCX: 00007f370e79acb9
[  919.336453][T14786] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000001
[  919.336474][T14786] RBP: 00007f370e808bf7 R08: 0000000000000000 R09: 0000000000000000
[  919.336495][T14786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  919.336516][T14786] R13: 00007f370ea16308 R14: 00007f370ea16270 R15: 00007ffc660468c8
[  919.336563][T14786]  </TASK>
[  919.902836][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  919.909005][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  919.916913][T12554] Bluetooth: hci3: command 0x0406 tx timeout
[  919.923068][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  922.134488][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  922.349997][T14821] netlink: zone id is out of range
[  922.364137][T14821] netlink: zone id is out of range
[  923.132250][T14828] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  923.204710][T14828] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  923.271153][T14828] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  923.299761][T14828] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  925.186214][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  925.264908][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  925.338050][T12554] Bluetooth: hci3: command 0x0406 tx timeout
[  925.345459][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  927.300840][T14873] 0x000200000001-0xa29656a63616329 : ""
[  927.317351][T14873] mtd: partition "" is out of reach -- disabled
[  927.397458][T14873] ftl_cs: FTL header not found.
[  928.137262][T14878] FAULT_INJECTION: forcing a failure.
[  928.137262][T14878] name failslab, interval 1, probability 0, space 0, times 0
[  928.214653][T14878] CPU: 1 UID: 0 PID: 14878 Comm: syz.2.1808 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  928.214705][T14878] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  928.214714][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  928.214729][T14878] Call Trace:
[  928.214738][T14878]  <TASK>
[  928.214747][T14878]  dump_stack_lvl+0x100/0x190
[  928.214782][T14878]  should_fail_ex.cold+0x5/0xa
[  928.214824][T14878]  should_failslab+0xc2/0x120
[  928.214859][T14878]  __kmalloc_cache_noprof+0x80/0x810
[  928.214885][T14878]  ? lockdep_hardirqs_on+0x78/0x100
[  928.214913][T14878]  ? sctp_endpoint_new+0xfc/0xb20
[  928.214954][T14878]  ? sctp_endpoint_new+0xfc/0xb20
[  928.214988][T14878]  sctp_endpoint_new+0xfc/0xb20
[  928.215026][T14878]  ? __pfx_sctp_endpoint_new+0x10/0x10
[  928.215063][T14878]  ? lockdep_init_map_type+0x5c/0x250
[  928.215100][T14878]  ? lockdep_init_map_type+0x5c/0x250
[  928.215131][T14878]  ? lockdep_init_map_type+0x5c/0x250
[  928.215169][T14878]  sctp_init_sock+0xe2b/0x1300
[  928.215209][T14878]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  928.215247][T14878]  sctp_v6_init_sock+0x16/0x70
[  928.215280][T14878]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  928.215314][T14878]  inet6_create+0xb2f/0x12c0
[  928.215354][T14878]  ? inet6_create+0x7f/0x12c0
[  928.215392][T14878]  __sock_create+0x339/0x860
[  928.215426][T14878]  inet_ctl_sock_create+0x94/0x230
[  928.215457][T14878]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  928.215485][T14878]  ? timer_init_key+0x14c/0x2c0
[  928.215520][T14878]  ? __pfx_sctp_ctrlsock_init+0x10/0x10
[  928.215551][T14878]  sctp_ctrlsock_init+0x40/0xd0
[  928.215583][T14878]  ops_init+0x1e2/0x5f0
[  928.215623][T14878]  setup_net+0x118/0x3a0
[  928.215662][T14878]  ? __pfx_setup_net+0x10/0x10
[  928.215698][T14878]  ? lockdep_init_map_type+0x5c/0x250
[  928.215732][T14878]  ? mutex_init_lockep+0x110/0x150
[  928.215773][T14878]  copy_net_ns+0x46f/0x7c0
[  928.215800][T14878]  create_new_namespaces+0x3ea/0xab0
[  928.215834][T14878]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  928.215866][T14878]  ksys_unshare+0x455/0xab0
[  928.215903][T14878]  ? __pfx_ksys_unshare+0x10/0x10
[  928.215937][T14878]  ? xfd_validate_state+0x129/0x190
[  928.215985][T14878]  __x64_sys_unshare+0x31/0x40
[  928.216019][T14878]  do_syscall_64+0xc9/0xf80
[  928.216050][T14878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.216075][T14878] RIP: 0033:0x7f370e79acb9
[  928.216094][T14878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  928.216118][T14878] RSP: 002b:00007f370f742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  928.216141][T14878] RAX: ffffffffffffffda RBX: 00007f370ea15fa0 RCX: 00007f370e79acb9
[  928.216157][T14878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  928.216172][T14878] RBP: 00007f370e808bf7 R08: 0000000000000000 R09: 0000000000000000
[  928.216187][T14878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  928.216201][T14878] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[  928.216241][T14878]  </TASK>
[  934.080828][T14944] 0x000200000001-0xa29656a63616329 : ""
[  934.087033][T14944] mtd: partition "" is out of reach -- disabled
[  934.107987][T14944] ftl_cs: FTL header not found.
[  939.129538][T15002] kexec: Could not allocate control_code_buffer
[  942.543591][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  942.550145][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  946.649200][T15108] zswap: compressor  not available
[  950.647772][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'.
[  953.362872][T15194] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  953.369473][T15194] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  953.414767][T15194] FAULT_INJECTION: forcing a failure.
[  953.414767][T15194] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  953.515567][T15194] CPU: 0 UID: 0 PID: 15194 Comm: syz.3.1880 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  953.515628][T15194] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  953.515642][T15194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  953.515662][T15194] Call Trace:
[  953.515673][T15194]  <TASK>
[  953.515693][T15194]  dump_stack_lvl+0x100/0x190
[  953.515748][T15194]  should_fail_ex.cold+0x5/0xa
[  953.515788][T15194]  _copy_to_user+0x32/0xd0
[  953.515826][T15194]  simple_read_from_buffer+0xcb/0x170
[  953.515853][T15194]  proc_fail_nth_read+0x1af/0x230
[  953.515883][T15194]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  953.515912][T15194]  ? rw_verify_area+0xce/0x6d0
[  953.515934][T15194]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  953.515962][T15194]  vfs_read+0x1e4/0xb30
[  953.515990][T15194]  ? __pfx_vfs_read+0x10/0x10
[  953.516013][T15194]  ? find_held_lock+0x2b/0x80
[  953.516037][T15194]  ? __fget_files+0x215/0x3d0
[  953.516067][T15194]  ? __fget_files+0x21f/0x3d0
[  953.516099][T15194]  ksys_read+0x12a/0x250
[  953.516125][T15194]  ? __pfx_ksys_read+0x10/0x10
[  953.516158][T15194]  do_syscall_64+0xc9/0xf80
[  953.516195][T15194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.516219][T15194] RIP: 0033:0x7fe98655b58e
[  953.516238][T15194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  953.516261][T15194] RSP: 002b:00007fe9873e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  953.516284][T15194] RAX: ffffffffffffffda RBX: 00007fe9873e86c0 RCX: 00007fe98655b58e
[  953.516300][T15194] RDX: 000000000000000f RSI: 00007fe9873e80a0 RDI: 0000000000000004
[  953.516314][T15194] RBP: 00007fe9873e8090 R08: 0000000000000000 R09: 0000000000000000
[  953.516328][T15194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  953.516341][T15194] R13: 00007fe986816038 R14: 00007fe986815fa0 R15: 00007ffe110879b8
[  953.516371][T15194]  </TASK>
[  954.765248][T15203] warning: `syz.2.1881' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  956.016725][T15211] 0x000200000001-0xa29656a63616329 : ""
[  956.022388][T15211] mtd: partition "" is out of reach -- disabled
[  956.076321][T15211] ftl_cs: FTL header not found.
[  959.004449][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1889'.
[  963.784663][T15269] Invalid ELF header magic: != ELF
[  964.500798][T15262] 0x000200000001-0xa29656a63616329 : ""
[  964.535679][T15262] mtd: partition "" is out of reach -- disabled
[  964.616177][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  964.675584][T15262] ftl_cs: FTL header not found.
[  967.875450][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1900'.
[  967.881744][T15307] ovs_: entered promiscuous mode
[  968.033837][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'.
[  971.548458][T15349] 0x000200000001-0xa29656a63616329 : ""
[  971.580708][T15349] mtd: partition "" is out of reach -- disabled
[  971.640114][T15349] ftl_cs: FTL header not found.
[  972.044973][T15364] ovs_: entered promiscuous mode
[  972.149843][T15369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1912'.
[  972.705963][ T5915] Process accounting resumed
[  972.754622][ T5915] Process accounting resumed
[  972.784577][ T5915] Process accounting resumed
[  972.797336][ T5915] Process accounting resumed
[  972.814016][ T5915] Process accounting resumed
[  972.821306][ T5915] Process accounting resumed
[  972.828196][ T5915] Process accounting resumed
[  972.834301][ T5915] Process accounting resumed
[  972.840813][ T5915] Process accounting resumed
[  972.894489][ T5915] Process accounting resumed
[  972.918112][ T5915] Process accounting resumed
[  972.964838][ T5915] Process accounting resumed
[  972.983188][ T5915] Process accounting resumed
[  973.011172][ T5915] Process accounting resumed
[  973.031777][ T5915] Process accounting resumed
[  973.054155][ T5915] Process accounting resumed
[  973.072431][ T5915] Process accounting resumed
[  973.105517][ T5915] Process accounting resumed
[  973.144005][ T5915] Process accounting resumed
[  973.165459][ T5915] Process accounting resumed
[  973.186161][ T5915] Process accounting resumed
[  973.221781][ T5915] Process accounting resumed
[  973.265486][ T5915] Process accounting resumed
[  973.277348][ T5915] Process accounting resumed
[  973.305150][ T5915] Process accounting resumed
[  973.336193][ T5915] Process accounting resumed
[  974.647800][T15382] Process accounting resumed
[  976.190468][T15417] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  976.959235][T15426] Format for deleting device is "id" (uint).
[  977.095994][T15427] Invalid ELF header magic: != ELF
[  980.269403][T15463] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1930'.
[  980.867610][T15473] Invalid ELF header magic: != ELF
[  983.284665][T15495] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  983.387093][T15495] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  983.457631][T15495] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  983.554723][T15495] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  984.878425][T15520] 0x000200000001-0xa29656a63616329 : ""
[  984.899912][T15520] mtd: partition "" is out of reach -- disabled
[  984.932382][T15520] ftl_cs: FTL header not found.
[  985.347793][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  985.414835][ T5841] Bluetooth: hci3: command 0x0406 tx timeout
[  985.420959][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  985.553063][T15535] Invalid ELF header magic: != ELF
[  985.576003][T12554] Bluetooth: hci4: command 0x0c1a tx timeout
[  985.633291][T15537] Invalid ELF header magic: != ELF
[  993.603914][T15615] 0x000200000001-0xa29656a63616329 : ""
[  993.628019][T15615] mtd: partition "" is out of reach -- disabled
[  993.688261][T15615] ftl_cs: FTL header not found.
[  994.388253][T15621] 0x000200000001-0xa29656a63616329 : ""
[  994.394043][T15621] mtd: partition "" is out of reach -- disabled
[  994.418821][T15621] ftl_cs: FTL header not found.
[  996.836077][T15654] 0x000200000001-0xa29656a63616329 : ""
[  996.844984][T15654] mtd: partition "" is out of reach -- disabled
[  996.898037][T15654] ftl_cs: FTL header not found.
[  997.702299][T15676] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  998.805776][T15688] Invalid ELF header magic: != ELF
[  999.609226][T15689] Invalid ELF header magic: != ELF
[ 1003.978162][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1003.985923][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1004.079359][T15748] ovs_: entered promiscuous mode
[ 1004.164712][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1987'.
[ 1004.725632][T15743] Process accounting paused
[ 1007.526919][T15775] ovs_: entered promiscuous mode
[ 1007.547307][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1991'.
[ 1008.251081][T15786] FAULT_INJECTION: forcing a failure.
[ 1008.251081][T15786] name failslab, interval 1, probability 0, space 0, times 0
[ 1008.304279][T15786] CPU: 0 UID: 0 PID: 15786 Comm: syz.2.1993 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1008.304344][T15786] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1008.304357][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1008.304377][T15786] Call Trace:
[ 1008.304388][T15786]  <TASK>
[ 1008.304400][T15786]  dump_stack_lvl+0x100/0x190
[ 1008.304445][T15786]  should_fail_ex.cold+0x5/0xa
[ 1008.304499][T15786]  should_failslab+0xc2/0x120
[ 1008.304544][T15786]  ? tomoyo_encode2+0xfb/0x3c0
[ 1008.304573][T15786]  __kmalloc_noprof+0xf6/0x9c0
[ 1008.304606][T15786]  ? __pfx_tomoyo_get_local_path+0x10/0x10
[ 1008.304639][T15786]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1008.304680][T15786]  ? tomoyo_encode2+0xfb/0x3c0
[ 1008.304709][T15786]  tomoyo_encode2+0xfb/0x3c0
[ 1008.304747][T15786]  tomoyo_encode+0x29/0x50
[ 1008.304776][T15786]  tomoyo_realpath_from_path+0x18c/0x690
[ 1008.304819][T15786]  tomoyo_check_open_permission+0x2af/0x3c0
[ 1008.304869][T15786]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1008.304957][T15786]  ? lock_acquire+0x17c/0x330
[ 1008.305000][T15786]  ? find_held_lock+0x2b/0x80
[ 1008.305042][T15786]  tomoyo_file_open+0x6b/0x90
[ 1008.305082][T15786]  security_file_open+0xb5/0x1e0
[ 1008.305114][T15786]  do_dentry_open+0x58c/0x1570
[ 1008.305155][T15786]  ? security_inode_permission+0xbf/0x250
[ 1008.305212][T15786]  vfs_open+0x82/0x3f0
[ 1008.305264][T15786]  path_openat+0x21dc/0x3120
[ 1008.305324][T15786]  ? __pfx_path_openat+0x10/0x10
[ 1008.305381][T15786]  do_filp_open+0x1f7/0x420
[ 1008.305423][T15786]  ? __pfx_do_filp_open+0x10/0x10
[ 1008.305476][T15786]  ? __pfx_kfree_link+0x10/0x10
[ 1008.305537][T15786]  ? _raw_spin_unlock+0x28/0x50
[ 1008.305568][T15786]  ? alloc_fd+0x476/0x790
[ 1008.305618][T15786]  do_sys_openat2+0x12e/0x220
[ 1008.305667][T15786]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1008.305717][T15786]  ? __fget_files+0x21f/0x3d0
[ 1008.305760][T15786]  __x64_sys_openat+0x12d/0x210
[ 1008.305811][T15786]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1008.305859][T15786]  ? xfd_validate_state+0x129/0x190
[ 1008.305922][T15786]  do_syscall_64+0xc9/0xf80
[ 1008.305965][T15786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.305997][T15786] RIP: 0033:0x7f370e75b58e
[ 1008.306023][T15786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1008.306055][T15786] RSP: 002b:00007f370f741f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1008.306086][T15786] RAX: ffffffffffffffda RBX: 00007f370f7426c0 RCX: 00007f370e75b58e
[ 1008.306107][T15786] RDX: 0000000000000002 RSI: 00007f370e8057c5 RDI: ffffffffffffff9c
[ 1008.306127][T15786] RBP: 00007f370e808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1008.306147][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 1008.306166][T15786] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[ 1008.306210][T15786]  </TASK>
[ 1008.767375][T15786] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1008.944737][T15771] 0x000200000001-0xa29656a63616329 : ""
[ 1008.951132][T15771] mtd: partition "" is out of reach -- disabled
[ 1008.963567][T15786] FAULT_INJECTION: forcing a failure.
[ 1008.963567][T15786] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1009.029290][T15786] CPU: 1 UID: 0 PID: 15786 Comm: syz.2.1993 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1009.029331][T15786] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1009.029340][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1009.029355][T15786] Call Trace:
[ 1009.029362][T15786]  <TASK>
[ 1009.029371][T15786]  dump_stack_lvl+0x100/0x190
[ 1009.029403][T15786]  should_fail_ex.cold+0x5/0xa
[ 1009.029437][T15786]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1009.029477][T15786]  should_fail_alloc_page+0xeb/0x140
[ 1009.029519][T15786]  prepare_alloc_pages+0x1f0/0x5f0
[ 1009.029555][T15786]  ? stack_trace_save+0x8e/0xc0
[ 1009.029583][T15786]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 1009.029618][T15786]  ? kasan_save_stack+0x3f/0x50
[ 1009.029650][T15786]  ? __lock_acquire+0x4a5/0x2630
[ 1009.029680][T15786]  ? __get_user_pages+0xf9c/0x34d0
[ 1009.029717][T15786]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1009.029746][T15786]  ? __lock_acquire+0x4a5/0x2630
[ 1009.029784][T15786]  ? __lock_acquire+0x4a5/0x2630
[ 1009.029819][T15786]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1009.029846][T15786]  ? policy_nodemask+0xed/0x4f0
[ 1009.029882][T15786]  alloc_pages_mpol+0x1fb/0x550
[ 1009.029916][T15786]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1009.029949][T15786]  ? __anon_vma_prepare+0x2db/0x5e0
[ 1009.029973][T15786]  ? __anon_vma_prepare+0x2db/0x5e0
[ 1009.030002][T15786]  folio_alloc_mpol_noprof+0x36/0x340
[ 1009.030042][T15786]  vma_alloc_folio_noprof+0xed/0x1d0
[ 1009.030080][T15786]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1009.030117][T15786]  ? __anon_vma_prepare+0x2e2/0x5e0
[ 1009.030150][T15786]  do_anonymous_page+0xb10/0x1f40
[ 1009.030204][T15786]  __handle_mm_fault+0x1d3a/0x2b50
[ 1009.030238][T15786]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1009.030266][T15786]  ? __pte_offset_map_lock+0x174/0x320
[ 1009.030315][T15786]  ? find_held_lock+0x2b/0x80
[ 1009.030347][T15786]  ? follow_page_pte+0x5b4/0x1410
[ 1009.030387][T15786]  handle_mm_fault+0x36d/0xa20
[ 1009.030418][T15786]  __get_user_pages+0xf9c/0x34d0
[ 1009.030465][T15786]  ? __pfx___get_user_pages+0x10/0x10
[ 1009.030513][T15786]  populate_vma_page_range+0x267/0x3f0
[ 1009.030552][T15786]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1009.030589][T15786]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1009.030624][T15786]  ? do_mmap+0x93f/0x12f0
[ 1009.030662][T15786]  __mm_populate+0x107/0x3a0
[ 1009.030700][T15786]  ? __pfx___mm_populate+0x10/0x10
[ 1009.030739][T15786]  ? up_write+0x290/0x4f0
[ 1009.030776][T15786]  vm_mmap_pgoff+0x37f/0x470
[ 1009.030815][T15786]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1009.030853][T15786]  ? __fget_files+0x21f/0x3d0
[ 1009.030886][T15786]  ksys_mmap_pgoff+0x7d/0x5b0
[ 1009.030919][T15786]  ? __pfx_ksys_write+0x10/0x10
[ 1009.030949][T15786]  __x64_sys_mmap+0x125/0x190
[ 1009.030975][T15786]  do_syscall_64+0xc9/0xf80
[ 1009.031005][T15786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1009.031029][T15786] RIP: 0033:0x7f370e79acb9
[ 1009.031046][T15786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1009.031070][T15786] RSP: 002b:00007f370f742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1009.031092][T15786] RAX: ffffffffffffffda RBX: 00007f370ea15fa0 RCX: 00007f370e79acb9
[ 1009.031108][T15786] RDX: 0000000000000072 RSI: 0000000000000009 RDI: 0000000000000000
[ 1009.031122][T15786] RBP: 00007f370f742090 R08: 0000000000000002 R09: 0000000000008000
[ 1009.031136][T15786] R10: 0000000000008b72 R11: 0000000000000246 R12: 0000000000000001
[ 1009.031150][T15786] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[ 1009.031180][T15786]  </TASK>
[ 1009.461556][T15795] binder: 15787:15795 ioctl 400c620e 0 returned -22
[ 1009.469053][T15771] ftl_cs: FTL header not found.
[ 1011.014500][T12554] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1011.423023][T15805] 0x000200000001-0xa29656a63616329 : ""
[ 1011.464480][T15805] mtd: partition "" is out of reach -- disabled
[ 1011.566748][T15805] ftl_cs: FTL header not found.
[ 1011.716683][T15826] openvswitch: ovs_: Dropping previously announced user features
[ 1011.745947][T15828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2000'.
[ 1012.908756][T15847] random: crng reseeded on system resumption
[ 1014.951949][T15875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'.
[ 1015.499763][T15885] Invalid ELF header magic: != ELF
[ 1017.106548][T15907] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2017'.
[ 1017.220944][T15907] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2017'.
[ 1017.453262][T15903] 0x000200000001-0xa29656a63616329 : ""
[ 1017.459155][T15903] mtd: partition "" is out of reach -- disabled
[ 1017.504138][T15903] ftl_cs: FTL header not found.
[ 1017.945539][T15915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2018'.
[ 1017.946371][T15916] Invalid ELF header magic: != ELF
[ 1018.242847][T15922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'.
[ 1018.911200][T15926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1018.921687][T15926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.658823][T15943] 0x000200000001-0xa29656a63616329 : ""
[ 1020.664836][T15943] mtd: partition "" is out of reach -- disabled
[ 1020.685472][T15943] ftl_cs: FTL header not found.
[ 1020.976743][T15941] kexec: Could not allocate control_code_buffer
[ 1021.699161][T15975] sctp: [Deprecated]: syz.4.2033 (pid 15975) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1021.699161][T15975] Use struct sctp_sack_info instead
[ 1022.519595][T15982] Invalid ELF header magic: != ELF
[ 1022.920013][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'.
[ 1023.938375][T16001] 0x000200000001-0xa29656a63616329 : ""
[ 1023.950904][T16001] mtd: partition "" is out of reach -- disabled
[ 1024.014703][T16001] ftl_cs: FTL header not found.
[ 1024.728965][T16022] Invalid ELF header magic: != ELF
[ 1025.343068][T16016] 0x000200000001-0xa29656a63616329 : ""
[ 1025.396457][T16016] mtd: partition "" is out of reach -- disabled
[ 1025.447228][T16016] ftl_cs: FTL header not found.
[ 1027.718192][T16066] 0x000200000001-0xa29656a63616329 : ""
[ 1027.723900][T16066] mtd: partition "" is out of reach -- disabled
[ 1027.781483][T16066] ftl_cs: FTL header not found.
[ 1028.067731][T16080] FAULT_INJECTION: forcing a failure.
[ 1028.067731][T16080] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1028.097111][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.2.2056 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1028.097172][T16080] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1028.097184][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1028.097204][T16080] Call Trace:
[ 1028.097215][T16080]  <TASK>
[ 1028.097227][T16080]  dump_stack_lvl+0x100/0x190
[ 1028.097274][T16080]  should_fail_ex.cold+0x5/0xa
[ 1028.097328][T16080]  get_futex_key+0x295/0x1620
[ 1028.097376][T16080]  ? __pfx_get_futex_key+0x10/0x10
[ 1028.097432][T16080]  futex_wake_op+0x16a/0xdc0
[ 1028.097480][T16080]  ? get_pid_task+0xfc/0x250
[ 1028.097533][T16080]  ? __pfx_futex_wake_op+0x10/0x10
[ 1028.097582][T16080]  ? proc_fail_nth_write+0x9f/0x220
[ 1028.097621][T16080]  ? find_held_lock+0x2b/0x80
[ 1028.097674][T16080]  ? ksys_write+0x190/0x250
[ 1028.097710][T16080]  ? ksys_write+0x190/0x250
[ 1028.097752][T16080]  do_futex+0x2f1/0x350
[ 1028.097798][T16080]  ? __pfx_do_futex+0x10/0x10
[ 1028.097851][T16080]  __x64_sys_futex+0x34f/0x4d0
[ 1028.097899][T16080]  ? fput+0x79/0x100
[ 1028.097942][T16080]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1028.097985][T16080]  ? ksys_write+0x1ac/0x250
[ 1028.098020][T16080]  ? __pfx_ksys_write+0x10/0x10
[ 1028.098068][T16080]  do_syscall_64+0xc9/0xf80
[ 1028.098111][T16080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.098145][T16080] RIP: 0033:0x7f370e79acb9
[ 1028.098170][T16080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1028.098201][T16080] RSP: 002b:00007f370f742028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1028.098232][T16080] RAX: ffffffffffffffda RBX: 00007f370ea15fa0 RCX: 00007f370e79acb9
[ 1028.098254][T16080] RDX: 0000000000000003 RSI: 0000000000000005 RDI: 00002000000003c0
[ 1028.098272][T16080] RBP: 00007f370f742090 R08: 0000200000000080 R09: 00000000fffffffb
[ 1028.098291][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1028.098310][T16080] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[ 1028.098349][T16080]  </TASK>
[ 1028.596559][T16084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2055'.
[ 1028.875401][T16089] Invalid ELF header magic: != ELF
[ 1029.870916][T16094] Invalid ELF header magic: != ELF
[ 1032.955668][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2068'.
[ 1033.298303][T16124] 0x000200000001-0xa29656a63616329 : ""
[ 1033.349222][T16124] mtd: partition "" is out of reach -- disabled
[ 1033.442643][T16124] ftl_cs: FTL header not found.
[ 1034.692834][T16158] FAULT_INJECTION: forcing a failure.
[ 1034.692834][T16158] name failslab, interval 1, probability 0, space 0, times 0
[ 1034.727815][T16158] CPU: 0 UID: 0 PID: 16158 Comm: syz.2.2072 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1034.727883][T16158] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1034.727897][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1034.727919][T16158] Call Trace:
[ 1034.727932][T16158]  <TASK>
[ 1034.727946][T16158]  dump_stack_lvl+0x100/0x190
[ 1034.728000][T16158]  should_fail_ex.cold+0x5/0xa
[ 1034.728061][T16158]  should_failslab+0xc2/0x120
[ 1034.728122][T16158]  __kmalloc_cache_noprof+0x80/0x810
[ 1034.728161][T16158]  ? single_open+0x4d/0x1d0
[ 1034.728224][T16158]  ? __pfx_show_smaps_rollup+0x10/0x10
[ 1034.728270][T16158]  ? single_open+0x4d/0x1d0
[ 1034.728317][T16158]  ? kasan_save_track+0x14/0x30
[ 1034.728360][T16158]  single_open+0x4d/0x1d0
[ 1034.728411][T16158]  smaps_rollup_open+0x6f/0x170
[ 1034.728454][T16158]  do_dentry_open+0x73e/0x1570
[ 1034.728494][T16158]  ? __pfx_smaps_rollup_open+0x10/0x10
[ 1034.728535][T16158]  ? security_inode_permission+0xbf/0x250
[ 1034.728594][T16158]  vfs_open+0x82/0x3f0
[ 1034.728653][T16158]  path_openat+0x21dc/0x3120
[ 1034.728711][T16158]  ? __pfx_path_openat+0x10/0x10
[ 1034.728767][T16158]  do_filp_open+0x1f7/0x420
[ 1034.728811][T16158]  ? __pfx_do_filp_open+0x10/0x10
[ 1034.728867][T16158]  ? __pfx_kfree_link+0x10/0x10
[ 1034.728931][T16158]  ? _raw_spin_unlock+0x28/0x50
[ 1034.728966][T16158]  ? alloc_fd+0x476/0x790
[ 1034.729016][T16158]  do_sys_openat2+0x12e/0x220
[ 1034.729069][T16158]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1034.729132][T16158]  ? __fget_files+0x21f/0x3d0
[ 1034.729182][T16158]  __x64_sys_openat+0x12d/0x210
[ 1034.729239][T16158]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1034.729293][T16158]  ? xfd_validate_state+0x129/0x190
[ 1034.729362][T16158]  do_syscall_64+0xc9/0xf80
[ 1034.729408][T16158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.729444][T16158] RIP: 0033:0x7f370e79acb9
[ 1034.729473][T16158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1034.729506][T16158] RSP: 002b:00007f370f742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1034.729541][T16158] RAX: ffffffffffffffda RBX: 00007f370ea15fa0 RCX: 00007f370e79acb9
[ 1034.729564][T16158] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c
[ 1034.729588][T16158] RBP: 00007f370e808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1034.729611][T16158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1034.729633][T16158] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[ 1034.729674][T16158]  </TASK>
[ 1035.028792][T16077] Process accounting resumed
[ 1036.001039][T16171] Invalid ELF header magic: != ELF
[ 1039.994783][T16227] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41
[ 1040.687462][T16240] FAULT_INJECTION: forcing a failure.
[ 1040.687462][T16240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1040.701314][T16240] CPU: 0 UID: 0 PID: 16240 Comm: syz.2.2089 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1040.701369][T16240] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1040.701382][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1040.701401][T16240] Call Trace:
[ 1040.701411][T16240]  <TASK>
[ 1040.701423][T16240]  dump_stack_lvl+0x100/0x190
[ 1040.701488][T16240]  should_fail_ex.cold+0x5/0xa
[ 1040.701543][T16240]  _copy_from_iter+0x1f4/0x1690
[ 1040.701602][T16240]  ? __pfx__copy_from_iter+0x10/0x10
[ 1040.701651][T16240]  ? rcu_is_watching+0x12/0xc0
[ 1040.701683][T16240]  ? kfree+0x2a9/0x690
[ 1040.701712][T16240]  ? __pfx__mutex_trylock_nest_lock+0x10/0x10
[ 1040.701755][T16240]  ? file_tty_write.isra.0+0x64e/0x890
[ 1040.701816][T16240]  file_tty_write.isra.0+0x45b/0x890
[ 1040.701875][T16240]  redirected_tty_write+0xd4/0x120
[ 1040.701924][T16240]  vfs_write+0x6ac/0x1070
[ 1040.701962][T16240]  ? __pfx_redirected_tty_write+0x10/0x10
[ 1040.702015][T16240]  ? __pfx_vfs_write+0x10/0x10
[ 1040.702047][T16240]  ? find_held_lock+0x2b/0x80
[ 1040.702107][T16240]  ksys_write+0x12a/0x250
[ 1040.702149][T16240]  ? __pfx_ksys_write+0x10/0x10
[ 1040.702196][T16240]  do_syscall_64+0xc9/0xf80
[ 1040.702238][T16240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.702270][T16240] RIP: 0033:0x7f370e79acb9
[ 1040.702295][T16240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1040.702327][T16240] RSP: 002b:00007f370f742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1040.702359][T16240] RAX: ffffffffffffffda RBX: 00007f370ea15fa0 RCX: 00007f370e79acb9
[ 1040.702381][T16240] RDX: 0000000000000342 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1040.702401][T16240] RBP: 00007f370f742090 R08: 0000000000000000 R09: 0000000000000000
[ 1040.702420][T16240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1040.702440][T16240] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[ 1040.702491][T16240]  </TASK>
[ 1041.594842][T16248] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1041.601214][T16248] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1041.674879][T16248] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1041.691411][T16248] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1042.968926][T15866] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260
[ 1042.968974][T15866] Bluetooth: hci3: unexpected subevent 0x0c length: 727 > 5
[ 1043.179215][T16289] tipc: Can't bind to reserved service type 0
[ 1043.655288][T15866] Bluetooth: hci2: command 0x0406 tx timeout
[ 1043.661434][T15866] Bluetooth: hci1: command 0x0406 tx timeout
[ 1043.735168][T15881] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1043.741386][T15881] Bluetooth: hci3: command 0x0406 tx timeout
[ 1044.072604][T16299] zswap: compressor  not available
[ 1044.084879][T16301] FAULT_INJECTION: forcing a failure.
[ 1044.084879][T16301] name failslab, interval 1, probability 0, space 0, times 0
[ 1044.124733][T16301] CPU: 0 UID: 0 PID: 16301 Comm: syz.4.2104 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1044.124788][T16301] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1044.124801][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1044.124820][T16301] Call Trace:
[ 1044.124831][T16301]  <TASK>
[ 1044.124850][T16301]  dump_stack_lvl+0x100/0x190
[ 1044.124895][T16301]  should_fail_ex.cold+0x5/0xa
[ 1044.124947][T16301]  should_failslab+0xc2/0x120
[ 1044.124992][T16301]  kmem_cache_alloc_noprof+0x83/0x780
[ 1044.125051][T16301]  ? __pmd_alloc+0xbf/0x9c0
[ 1044.125108][T16301]  ? __pmd_alloc+0xbf/0x9c0
[ 1044.125157][T16301]  __pmd_alloc+0xbf/0x9c0
[ 1044.125220][T16301]  __handle_mm_fault+0xa99/0x2b50
[ 1044.125263][T16301]  ? mt_find+0x45e/0x8e0
[ 1044.125306][T16301]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1044.125339][T16301]  ? __pfx_mt_find+0x10/0x10
[ 1044.125402][T16301]  ? find_vma+0xbf/0x140
[ 1044.125445][T16301]  ? __pfx_find_vma+0x10/0x10
[ 1044.125494][T16301]  handle_mm_fault+0x36d/0xa20
[ 1044.125538][T16301]  do_user_addr_fault+0x74c/0x12f0
[ 1044.125589][T16301]  exc_page_fault+0x6f/0xd0
[ 1044.125628][T16301]  asm_exc_page_fault+0x26/0x30
[ 1044.125660][T16301] RIP: 0010:rep_movs_alternative+0x11/0x90
[ 1044.125707][T16301] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 7d 04 00 66 66 2e 0f
[ 1044.125743][T16301] RSP: 0018:ffffc9000b87faf0 EFLAGS: 00050202
[ 1044.125768][T16301] RAX: 0000000000000030 RBX: 0000000000000000 RCX: 0000000000000002
[ 1044.125789][T16301] RDX: 0000000000000001 RSI: ffff888034ff4000 RDI: 0000000000000000
[ 1044.125809][T16301] RBP: ffffc9000b87fd88 R08: 0000000000000000 R09: ffffed10069fe800
[ 1044.125830][T16301] R10: ffff888034ff4001 R11: 0000000000000000 R12: 0000000000000002
[ 1044.125850][T16301] R13: 00007ffffffff000 R14: ffff888034ff4000 R15: 0000000000000002
[ 1044.125891][T16301]  _copy_to_iter+0x391/0x1720
[ 1044.125950][T16301]  ? __pfx__copy_to_iter+0x10/0x10
[ 1044.125998][T16301]  ? kernfs_seq_stop+0xcd/0x120
[ 1044.126039][T16301]  ? kernfs_put_active+0x93/0xe0
[ 1044.126094][T16301]  seq_read_iter+0xdab/0x1270
[ 1044.126147][T16301]  kernfs_fop_read_iter+0x46c/0x610
[ 1044.126182][T16301]  ? rw_verify_area+0xce/0x6d0
[ 1044.126220][T16301]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 1044.126257][T16301]  vfs_read+0x825/0xb30
[ 1044.126295][T16301]  ? __pfx_vfs_read+0x10/0x10
[ 1044.126325][T16301]  ? find_held_lock+0x2b/0x80
[ 1044.126384][T16301]  ksys_read+0x12a/0x250
[ 1044.126418][T16301]  ? __pfx_ksys_read+0x10/0x10
[ 1044.126467][T16301]  do_syscall_64+0xc9/0xf80
[ 1044.126510][T16301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1044.126542][T16301] RIP: 0033:0x7f6be6f9acb9
[ 1044.126567][T16301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1044.126598][T16301] RSP: 002b:00007f6be7e21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1044.126628][T16301] RAX: ffffffffffffffda RBX: 00007f6be7216090 RCX: 00007f6be6f9acb9
[ 1044.126649][T16301] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005
[ 1044.126668][T16301] RBP: 00007f6be7e21090 R08: 0000000000000000 R09: 0000000000000000
[ 1044.126688][T16301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1044.126707][T16301] R13: 00007f6be7216128 R14: 00007f6be7216090 R15: 00007ffd43c2b778
[ 1044.126752][T16301]  </TASK>
[ 1046.862766][T16354] Format for deleting device is "id" (uint).
[ 1047.421285][T16367] Format for deleting device is "id" (uint).
[ 1049.017265][T16385] Format for deleting device is "id" (uint).
[ 1054.383947][T16446] 0x000200000001-0xa29656a63616329 : ""
[ 1054.389692][T16446] mtd: partition "" is out of reach -- disabled
[ 1054.402072][T16446] ftl_cs: FTL header not found.
[ 1055.159624][T16463] overlayfs: missing 'lowerdir'
[ 1055.513906][T15881] Bluetooth: hci4: unexpected event 0x23 length: 127 > 13
[ 1055.551447][T16459] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1055.565894][T16459] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1055.572032][T16459] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1055.607802][T16459] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1055.645328][T16470] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2136'.
[ 1055.685383][T16470] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2136'.
[ 1056.705436][T16486] FAULT_INJECTION: forcing a failure.
[ 1056.705436][T16486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1056.761737][T16486] CPU: 1 UID: 0 PID: 16486 Comm: syz.2.2140 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1056.761795][T16486] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1056.761808][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1056.761828][T16486] Call Trace:
[ 1056.761838][T16486]  <TASK>
[ 1056.761852][T16486]  dump_stack_lvl+0x100/0x190
[ 1056.761897][T16486]  should_fail_ex.cold+0x5/0xa
[ 1056.761953][T16486]  strncpy_from_user+0x3b/0x2d0
[ 1056.762006][T16486]  getname_flags.part.0+0x8f/0x540
[ 1056.762056][T16486]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1056.762102][T16486]  user_path_at+0x9b/0x100
[ 1056.762139][T16486]  __x64_sys_utime+0x1c0/0x2c0
[ 1056.762188][T16486]  ? __pfx___x64_sys_utime+0x10/0x10
[ 1056.762248][T16486]  ? rcu_is_watching+0x12/0xc0
[ 1056.762290][T16486]  do_syscall_64+0xc9/0xf80
[ 1056.762330][T16486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1056.762360][T16486] RIP: 0033:0x7f370e79acb9
[ 1056.762383][T16486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1056.762414][T16486] RSP: 002b:00007f370f742028 EFLAGS: 00000246 ORIG_RAX: 0000000000000084
[ 1056.762444][T16486] RAX: ffffffffffffffda RBX: 00007f370ea15fa0 RCX: 00007f370e79acb9
[ 1056.762464][T16486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[ 1056.762482][T16486] RBP: 00007f370f742090 R08: 0000000000000000 R09: 0000000000000000
[ 1056.762500][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1056.762518][T16486] R13: 00007f370ea16038 R14: 00007f370ea15fa0 R15: 00007ffc660468c8
[ 1056.762561][T16486]  </TASK>
[ 1056.944374][T16297] Bluetooth: hci1: command 0x0406 tx timeout
[ 1057.655193][T16297] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1057.661545][T15881] Bluetooth: hci3: command 0x0406 tx timeout
[ 1057.667812][T15881] Bluetooth: hci2: command 0x0406 tx timeout
[ 1058.790753][T16523] Invalid ELF header magic: != ELF
[ 1058.902450][T16526] Invalid ELF header magic: != ELF
[ 1059.087201][T16529] Invalid ELF header magic: != ELF
[ 1060.164597][T16548] blktrace: Concurrent blktraces are not allowed on loop2
[ 1060.986125][T16556] FAULT_INJECTION: forcing a failure.
[ 1060.986125][T16556] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1060.999705][T16556] CPU: 0 UID: 0 PID: 16556 Comm: syz.3.2151 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1060.999762][T16556] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1060.999774][T16556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1060.999794][T16556] Call Trace:
[ 1060.999805][T16556]  <TASK>
[ 1060.999817][T16556]  dump_stack_lvl+0x100/0x190
[ 1060.999865][T16556]  should_fail_ex.cold+0x5/0xa
[ 1060.999913][T16556]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1060.999968][T16556]  should_fail_alloc_page+0xeb/0x140
[ 1061.000018][T16556]  prepare_alloc_pages+0x1f0/0x5f0
[ 1061.000068][T16556]  ? rcu_is_watching+0x12/0xc0
[ 1061.000106][T16556]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 1061.000159][T16556]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1061.000201][T16556]  ? is_bpf_text_address+0x94/0x1a0
[ 1061.000256][T16556]  ? kernel_text_address+0x8d/0x100
[ 1061.000309][T16556]  ? is_bpf_text_address+0x94/0x1a0
[ 1061.000358][T16556]  ? __kernel_text_address+0xd/0x30
[ 1061.000416][T16556]  ? unwind_get_return_address+0x59/0xa0
[ 1061.000458][T16556]  ? arch_stack_walk+0xa6/0xf0
[ 1061.000498][T16556]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1061.000553][T16556]  ? __pfx_stack_trace_save+0x10/0x10
[ 1061.000589][T16556]  ? stack_trace_save+0x8e/0xc0
[ 1061.000625][T16556]  ? stack_depot_save_flags+0x27/0x9c0
[ 1061.000678][T16556]  ? stack_depot_save_flags+0x27/0x9c0
[ 1061.000729][T16556]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1061.000768][T16556]  ? policy_nodemask+0xed/0x4f0
[ 1061.000817][T16556]  alloc_pages_mpol+0x1fb/0x550
[ 1061.000866][T16556]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1061.000923][T16556]  alloc_pages_noprof+0x131/0x390
[ 1061.000972][T16556]  kimage_alloc_pages+0x72/0x380
[ 1061.001013][T16556]  kimage_alloc_control_pages+0x157/0xa20
[ 1061.001061][T16556]  ? __pfx_kimage_alloc_control_pages+0x10/0x10
[ 1061.001111][T16556]  do_kexec_load+0x275/0x810
[ 1061.001161][T16556]  ? __pfx_do_kexec_load+0x10/0x10
[ 1061.001204][T16556]  ? _copy_from_user+0x59/0xd0
[ 1061.001257][T16556]  __x64_sys_kexec_load+0x1bf/0x230
[ 1061.001301][T16556]  do_syscall_64+0xc9/0xf80
[ 1061.001345][T16556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1061.001378][T16556] RIP: 0033:0x7fe98659acb9
[ 1061.001405][T16556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1061.001436][T16556] RSP: 002b:00007fe9873c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[ 1061.001469][T16556] RAX: ffffffffffffffda RBX: 00007fe986816090 RCX: 00007fe98659acb9
[ 1061.001490][T16556] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005
[ 1061.001511][T16556] RBP: 00007fe9873c7090 R08: 0000000000000000 R09: 0000000000000000
[ 1061.001530][T16556] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 1061.001550][T16556] R13: 00007fe986816128 R14: 00007fe986816090 R15: 00007ffe110879b8
[ 1061.001590][T16556]  </TASK>
[ 1061.002447][T16556] kexec: Could not allocate control_code_buffer
[ 1061.774183][T16562] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2153'.
[ 1061.838942][T16564] Invalid ELF header magic: != ELF
[ 1063.155564][T16584] FAULT_INJECTION: forcing a failure.
[ 1063.155564][T16584] name failslab, interval 1, probability 0, space 0, times 0
[ 1063.181663][T16584] CPU: 1 UID: 0 PID: 16584 Comm: syz.3.2159 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1063.181717][T16584] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1063.181729][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1063.181749][T16584] Call Trace:
[ 1063.181759][T16584]  <TASK>
[ 1063.181770][T16584]  dump_stack_lvl+0x100/0x190
[ 1063.181814][T16584]  should_fail_ex.cold+0x5/0xa
[ 1063.181870][T16584]  should_failslab+0xc2/0x120
[ 1063.181916][T16584]  ? i2cdev_read+0xe4/0x2b0
[ 1063.181958][T16584]  __kmalloc_noprof+0xf6/0x9c0
[ 1063.181988][T16584]  ? common_file_perm+0x1ab/0x4f0
[ 1063.182049][T16584]  ? i2cdev_read+0xe4/0x2b0
[ 1063.182089][T16584]  i2cdev_read+0xe4/0x2b0
[ 1063.182132][T16584]  ? __pfx_i2cdev_read+0x10/0x10
[ 1063.182181][T16584]  vfs_readv+0x5d8/0x8d0
[ 1063.182211][T16584]  ? get_pid_task+0x106/0x250
[ 1063.182266][T16584]  ? __pfx_vfs_readv+0x10/0x10
[ 1063.182301][T16584]  ? find_held_lock+0x2b/0x80
[ 1063.182357][T16584]  ? __fget_files+0x21f/0x3d0
[ 1063.182405][T16584]  ? do_readv+0x13e/0x340
[ 1063.182434][T16584]  do_readv+0x13e/0x340
[ 1063.182467][T16584]  ? __pfx_do_readv+0x10/0x10
[ 1063.182510][T16584]  do_syscall_64+0xc9/0xf80
[ 1063.182560][T16584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.182593][T16584] RIP: 0033:0x7fe98659acb9
[ 1063.182618][T16584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.182650][T16584] RSP: 002b:00007fe9873e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 1063.182681][T16584] RAX: ffffffffffffffda RBX: 00007fe986815fa0 RCX: 00007fe98659acb9
[ 1063.182702][T16584] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1063.182722][T16584] RBP: 00007fe9873e8090 R08: 0000000000000000 R09: 0000000000000000
[ 1063.182741][T16584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1063.182760][T16584] R13: 00007fe986816038 R14: 00007fe986815fa0 R15: 00007ffe110879b8
[ 1063.182803][T16584]  </TASK>
[ 1065.475141][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1065.481480][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1067.020307][T16649] FAULT_INJECTION: forcing a failure.
[ 1067.020307][T16649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1067.056378][T16601] Process accounting paused
[ 1067.088781][T16649] CPU: 1 UID: 0 PID: 16649 Comm: syz.0.2170 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1067.088825][T16649] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1067.088834][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1067.088849][T16649] Call Trace:
[ 1067.088857][T16649]  <TASK>
[ 1067.088866][T16649]  dump_stack_lvl+0x100/0x190
[ 1067.088902][T16649]  should_fail_ex.cold+0x5/0xa
[ 1067.088941][T16649]  _copy_from_iter+0x1f4/0x1690
[ 1067.088982][T16649]  ? __alloc_skb+0x220/0x410
[ 1067.089012][T16649]  ? __alloc_skb+0x35d/0x410
[ 1067.089043][T16649]  ? __pfx__copy_from_iter+0x10/0x10
[ 1067.089078][T16649]  ? netlink_autobind.isra.0+0x90/0x370
[ 1067.089157][T16649]  netlink_sendmsg+0x808/0xda0
[ 1067.089213][T16649]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1067.089259][T16649]  ? __import_iovec+0x1d2/0x640
[ 1067.089311][T16649]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1067.089365][T16649]  ____sys_sendmsg+0xa54/0xc30
[ 1067.089403][T16649]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1067.089455][T16649]  ___sys_sendmsg+0x190/0x1e0
[ 1067.089494][T16649]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1067.089549][T16649]  ? find_held_lock+0x2b/0x80
[ 1067.089601][T16649]  __sys_sendmsg+0x170/0x220
[ 1067.089649][T16649]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1067.089720][T16649]  do_syscall_64+0xc9/0xf80
[ 1067.089763][T16649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.089796][T16649] RIP: 0033:0x7fb36099acb9
[ 1067.089831][T16649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1067.089861][T16649] RSP: 002b:00007fb3618bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1067.089892][T16649] RAX: ffffffffffffffda RBX: 00007fb360c15fa0 RCX: 00007fb36099acb9
[ 1067.089914][T16649] RDX: 0000000004048800 RSI: 0000200000000000 RDI: 0000000000000003
[ 1067.089939][T16649] RBP: 00007fb3618bf090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.089954][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1067.089967][T16649] R13: 00007fb360c16038 R14: 00007fb360c15fa0 R15: 00007ffca9e2d3a8
[ 1067.089997][T16649]  </TASK>
[ 1067.551933][T16656] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43
[ 1067.902398][T16661] Invalid ELF header magic: != ELF
[ 1071.299433][T16714] Invalid ELF header magic: != ELF
[ 1073.401007][T16752] random: crng reseeded on system resumption
[ 1073.426606][T16752] Restarting kernel threads ...
[ 1073.432173][T16752] Done restarting kernel threads.
[ 1077.664674][T16812] Invalid ELF header magic: != ELF
[ 1079.230837][T16823] vmstat_refresh: nr_hugetlb -2048
[ 1079.835265][T16830] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1079.862773][T16830] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1079.885389][T16830] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1079.919610][T16830] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1080.069999][T15866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1080.084154][T15866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1080.100646][T15866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1080.154715][T15866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1080.165252][T15866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1081.017991][T16833] chnl_net:caif_netlink_parms(): no params data found
[ 1081.459926][T16833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1081.524658][T16833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1081.550630][T16833] bridge_slave_0: entered allmulticast mode
[ 1081.587372][T16833] bridge_slave_0: entered promiscuous mode
[ 1081.625577][T16833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1081.644521][T16833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1081.652672][T16833] bridge_slave_1: entered allmulticast mode
[ 1081.676659][T16833] bridge_slave_1: entered promiscuous mode
[ 1081.857822][T16833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1081.894593][T15866] Bluetooth: hci3: command 0x0406 tx timeout
[ 1081.900801][T16297] Bluetooth: hci2: command 0x0406 tx timeout
[ 1081.907533][T16297] Bluetooth: hci1: command 0x0406 tx timeout
[ 1081.974390][T16861] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1082.228328][T16861] Bluetooth: hci0: command tx timeout
[ 1082.288403][T16833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1082.391917][T16833] team0: Port device team_slave_0 added
[ 1082.442475][T16833] team0: Port device team_slave_1 added
[ 1082.682288][T16833] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1082.713646][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1082.773824][T16857] kexec: Could not allocate control_code_buffer
[ 1082.834518][T16833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1083.258416][T16833] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1083.284523][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.374421][T16833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1083.682336][T16833] hsr_slave_0: entered promiscuous mode
[ 1083.689877][T16833] hsr_slave_1: entered promiscuous mode
[ 1083.705966][T16833] debugfs: 'hsr0' already exists in 'hsr'
[ 1083.711892][T16833] Cannot create hsr debugfs directory
[ 1084.303927][T16861] Bluetooth: hci0: command tx timeout
[ 1084.560678][T16833] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1084.636874][T16833] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1084.665880][T16833] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1084.772198][T16833] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1085.096279][T16833] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1085.138340][T16833] 8021q: adding VLAN 0 to HW filter on device team0
[ 1085.176522][T15868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.183735][T15868] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1085.209309][T15868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.216646][T15868] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1085.607919][T16833] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1086.086242][T16833] veth0_vlan: entered promiscuous mode
[ 1086.100726][T16833] veth1_vlan: entered promiscuous mode
[ 1086.155679][T16833] veth0_macvtap: entered promiscuous mode
[ 1086.170683][T16833] veth1_macvtap: entered promiscuous mode
[ 1086.206948][T16833] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1086.250150][T16833] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1086.279727][T15997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.292623][T15997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.316095][T15997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.330722][T15997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1086.375357][T16861] Bluetooth: hci0: command tx timeout
[ 1086.479299][T15865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1086.490841][T15865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1086.579093][T15868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1086.607849][T15868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1087.898073][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2228'.
[ 1087.941200][T16916] Invalid ELF header magic: != ELF
[ 1088.454549][T16861] Bluetooth: hci0: command tx timeout
[ 1090.996269][T16949] futex_wake_op: syz.0.2236 tries to shift op by -1; fix this program
[ 1091.072736][T15866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1091.086614][T15866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1091.096751][T15866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1091.105213][T15866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1091.115593][T15866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1091.460237][T16952] chnl_net:caif_netlink_parms(): no params data found
[ 1091.487354][T16961] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1091.659674][T16952] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.669257][T16952] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.678677][T16952] bridge_slave_0: entered allmulticast mode
[ 1091.688169][T16952] bridge_slave_0: entered promiscuous mode
[ 1091.698005][T16952] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.725533][T16952] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.737257][T16952] bridge_slave_1: entered allmulticast mode
[ 1091.746093][T16952] bridge_slave_1: entered promiscuous mode
[ 1091.798769][T16952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1091.824248][T16952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.883342][T16952] team0: Port device team_slave_0 added
[ 1091.893863][T16952] team0: Port device team_slave_1 added
[ 1092.030579][T16952] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1092.044461][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.114753][T16952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1092.139198][T16952] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1092.164752][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.194826][T16952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.401722][T16952] hsr_slave_0: entered promiscuous mode
[ 1092.419704][T16952] hsr_slave_1: entered promiscuous mode
[ 1092.442248][T16952] debugfs: 'hsr0' already exists in 'hsr'
[ 1092.451822][T16952] Cannot create hsr debugfs directory
[ 1092.620712][T16978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 1092.656474][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2242'.
[ 1092.678589][T16978] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1092.720009][T16978] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1092.737349][T16978] page_type: f5(slab)
[ 1092.741436][T16978] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[ 1092.789098][T16978] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 1092.822992][T16978] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[ 1092.867359][T16978] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 1092.876991][T16978] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 1092.885887][T16978] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1092.896987][T16978] page dumped because: unmovable page
[ 1092.910984][T16978] page_owner tracks the page as allocated
[ 1092.919769][T16978] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15968, tgid 15968 (kworker/u11:4), ts 1064397202316, free_ts 1064296940606
[ 1092.949607][T16978]  post_alloc_hook+0x1e1/0x250
[ 1092.957228][T16978]  get_page_from_freelist+0xe3d/0x2e10
[ 1092.973467][T16978]  __alloc_frozen_pages_noprof+0x26c/0x2410
[ 1092.990385][T16978]  alloc_pages_mpol+0x1fb/0x550
[ 1093.008103][T16978]  new_slab+0x2c4/0x440
[ 1093.026594][T16978]  ___slab_alloc+0xda3/0x1ca0
[ 1093.034470][T16978]  __slab_alloc.isra.0+0x63/0x110
[ 1093.049355][T16978]  __kmalloc_node_track_caller_noprof+0x629/0x9d0
[ 1093.067764][T16978]  kmalloc_reserve+0xef/0x2c0
[ 1093.090044][T16978]  __alloc_skb+0x186/0x410
[ 1093.114526][T16978]  nsim_dev_trap_report_work+0x2af/0xd10
[ 1093.121528][T16978]  process_one_work+0x9c2/0x1840
[ 1093.134100][T16978]  worker_thread+0x5da/0xe40
[ 1093.145683][T16978]  kthread+0x3b3/0x730
[ 1093.159220][T16978]  ret_from_fork+0x754/0xaf0
[ 1093.176531][T15866] Bluetooth: hci5: command tx timeout
[ 1093.189667][T16978]  ret_from_fork_asm+0x1a/0x30
[ 1093.199509][T16978] page last free pid 0 tgid 0 stack trace:
[ 1093.208061][T16978]  __free_frozen_pages+0x822/0x1130
[ 1093.213556][T16978]  __folio_put+0x3b4/0x540
[ 1093.222296][T16978]  put_netmem+0x294/0x320
[ 1093.231679][T16978]  skb_release_data+0x4b2/0x700
[ 1093.246647][T16978]  napi_consume_skb+0x2be/0x320
[ 1093.251716][T16978]  __free_old_xmit+0x182/0x650
[ 1093.268218][T16978]  free_old_xmit+0xc0/0x1d0
[ 1093.272857][T16978]  virtnet_poll_tx+0x98e/0x14c0
[ 1093.286360][T16978]  __napi_poll.constprop.0+0xaf/0x450
[ 1093.302456][T16978]  net_rx_action+0xa40/0xf20
[ 1093.322796][T16978]  handle_softirqs+0x1ea/0x910
[ 1093.332942][T16978]  __irq_exit_rcu+0xef/0x150
[ 1093.352453][T16978]  irq_exit_rcu+0x9/0x30
[ 1093.369252][T16978]  common_interrupt+0xbe/0xe0
[ 1093.374082][T16978]  asm_common_interrupt+0x26/0x40
[ 1093.431825][T16952] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1093.461846][T16980] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 1093.483100][T16952] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1093.493807][T16980] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1093.503748][T16980] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1093.520719][T16952] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1093.528700][T16980] page_type: f5(slab)
[ 1093.540457][T16952] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1093.566673][T16980] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[ 1093.589247][T16980] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 1093.614555][T16980] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122
[ 1093.623334][T16980] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 1093.680819][T16980] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 1093.704460][T16980] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1093.734763][T16980] page dumped because: unmovable page
[ 1093.740203][T16980] page_owner tracks the page as allocated
[ 1093.763109][T16980] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15968, tgid 15968 (kworker/u11:4), ts 1064397202316, free_ts 1064296940606
[ 1093.791430][T16952] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1093.820751][T16980]  post_alloc_hook+0x1e1/0x250
[ 1093.829792][T16980]  get_page_from_freelist+0xe3d/0x2e10
[ 1093.836427][T16980]  __alloc_frozen_pages_noprof+0x26c/0x2410
[ 1093.848087][T16952] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.855166][T16980]  alloc_pages_mpol+0x1fb/0x550
[ 1093.860109][T16980]  new_slab+0x2c4/0x440
[ 1093.876992][T16980]  ___slab_alloc+0xda3/0x1ca0
[ 1093.881857][T16980]  __slab_alloc.isra.0+0x63/0x110
[ 1093.889582][T15868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.896948][T15868] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1093.904968][T16980]  __kmalloc_node_track_caller_noprof+0x629/0x9d0
[ 1093.911579][T16980]  kmalloc_reserve+0xef/0x2c0
[ 1093.919238][T16980]  __alloc_skb+0x186/0x410
[ 1093.931647][T15968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1093.934636][T16980]  nsim_dev_trap_report_work+0x2af/0xd10
[ 1093.939212][T15968] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1093.954471][T16980]  process_one_work+0x9c2/0x1840
[ 1093.959609][T16980]  worker_thread+0x5da/0xe40
[ 1093.975492][T16980]  kthread+0x3b3/0x730
[ 1093.979700][T16980]  ret_from_fork+0x754/0xaf0
[ 1094.012388][T16980]  ret_from_fork_asm+0x1a/0x30
[ 1094.028001][T16980] page last free pid 0 tgid 0 stack trace:
[ 1094.033944][T16980]  __free_frozen_pages+0x822/0x1130
[ 1094.059475][T16980]  __folio_put+0x3b4/0x540
[ 1094.064901][T16980]  put_netmem+0x294/0x320
[ 1094.070931][T16980]  skb_release_data+0x4b2/0x700
[ 1094.084500][T16980]  napi_consume_skb+0x2be/0x320
[ 1094.092284][T16980]  __free_old_xmit+0x182/0x650
[ 1094.097994][T16980]  free_old_xmit+0xc0/0x1d0
[ 1094.102708][T16980]  virtnet_poll_tx+0x98e/0x14c0
[ 1094.108371][T16980]  __napi_poll.constprop.0+0xaf/0x450
[ 1094.114646][T16980]  net_rx_action+0xa40/0xf20
[ 1094.123770][T16980]  handle_softirqs+0x1ea/0x910
[ 1094.150479][T16980]  __irq_exit_rcu+0xef/0x150
[ 1094.161832][T16980]  irq_exit_rcu+0x9/0x30
[ 1094.166655][T16980]  common_interrupt+0xbe/0xe0
[ 1094.176604][T16980]  asm_common_interrupt+0x26/0x40
[ 1094.620971][T16952] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1095.174250][T16952] veth0_vlan: entered promiscuous mode
[ 1095.201214][T16952] veth1_vlan: entered promiscuous mode
[ 1095.254898][T15866] Bluetooth: hci5: command tx timeout
[ 1095.284214][T16952] veth0_macvtap: entered promiscuous mode
[ 1095.313629][T16952] veth1_macvtap: entered promiscuous mode
[ 1095.437801][T16952] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1095.475681][T16952] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1095.507803][T15868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.530288][T15868] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.578464][T15868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.610995][T15868] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.914142][T15868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1095.971070][T15868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1096.110470][T15997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1096.142410][T15997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1096.306542][T16861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1096.319376][T16861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1096.328013][T16861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1096.349237][T16861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1096.364862][T16861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1096.882997][T17042] chnl_net:caif_netlink_parms(): no params data found
[ 1097.334818][T15866] Bluetooth: hci5: command tx timeout
[ 1097.390673][T17042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1097.423486][T17042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1097.438325][T17042] bridge_slave_0: entered allmulticast mode
[ 1097.456937][T17042] bridge_slave_0: entered promiscuous mode
[ 1097.473990][T17042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1097.492735][T17042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1097.511472][T17042] bridge_slave_1: entered allmulticast mode
[ 1097.520063][T17042] bridge_slave_1: entered promiscuous mode
[ 1097.786245][T17042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1097.812029][T17042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1097.922348][T17042] team0: Port device team_slave_0 added
[ 1097.947884][T17042] team0: Port device team_slave_1 added
[ 1097.963351][T17067] Invalid ELF header magic: != ELF
[ 1098.054104][T17042] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1098.064760][T17042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1098.111539][T17042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1098.167180][T17042] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1098.192555][T17042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1098.274589][T17042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1098.429917][T17042] hsr_slave_0: entered promiscuous mode
[ 1098.454788][T15866] Bluetooth: hci6: command tx timeout
[ 1098.476271][T17042] hsr_slave_1: entered promiscuous mode
[ 1098.482883][T17042] debugfs: 'hsr0' already exists in 'hsr'
[ 1098.514254][T17042] Cannot create hsr debugfs directory
[ 1099.393122][T17042] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1099.415733][T15866] Bluetooth: hci5: command tx timeout
[ 1099.430813][T17042] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1099.483202][T17042] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1099.539321][T17042] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1099.918198][T17042] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1100.011900][T17042] 8021q: adding VLAN 0 to HW filter on device team0
[ 1100.029055][T15868] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.036458][T15868] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1100.118255][T15868] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1100.125598][T15868] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1100.535323][T15866] Bluetooth: hci6: command tx timeout
[ 1101.106230][T17042] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1102.047758][T17042] veth0_vlan: entered promiscuous mode
[ 1102.104850][T17042] veth1_vlan: entered promiscuous mode
[ 1102.226348][T17042] veth0_macvtap: entered promiscuous mode
[ 1102.259054][T17042] veth1_macvtap: entered promiscuous mode
[ 1102.293255][T17042] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1102.332458][T17042] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1102.406068][T17003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.476526][T17003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.510571][T17003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.554463][T17003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.614874][T15866] Bluetooth: hci6: command tx timeout
[ 1102.739696][T17003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1102.778013][T17003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1102.854972][T15865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1102.872685][T15865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1103.241418][T17137] Invalid ELF header magic: != ELF
[ 1103.367223][T17141] FAULT_INJECTION: forcing a failure.
[ 1103.367223][T17141] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1103.424533][T17141] CPU: 1 UID: 0 PID: 17141 Comm: syz.5.2263 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1103.424588][T17141] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1103.424600][T17141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1103.424619][T17141] Call Trace:
[ 1103.424630][T17141]  <TASK>
[ 1103.424642][T17141]  dump_stack_lvl+0x100/0x190
[ 1103.424686][T17141]  should_fail_ex.cold+0x5/0xa
[ 1103.424738][T17141]  _copy_to_user+0x32/0xd0
[ 1103.424791][T17141]  simple_read_from_buffer+0xcb/0x170
[ 1103.424829][T17141]  proc_fail_nth_read+0x1af/0x230
[ 1103.424869][T17141]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1103.424910][T17141]  ? rw_verify_area+0xce/0x6d0
[ 1103.424941][T17141]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1103.424980][T17141]  vfs_read+0x1e4/0xb30
[ 1103.425020][T17141]  ? __pfx_vfs_read+0x10/0x10
[ 1103.425053][T17141]  ? find_held_lock+0x2b/0x80
[ 1103.425087][T17141]  ? __fget_files+0x215/0x3d0
[ 1103.425141][T17141]  ? __fget_files+0x21f/0x3d0
[ 1103.425189][T17141]  ksys_read+0x12a/0x250
[ 1103.425223][T17141]  ? __pfx_ksys_read+0x10/0x10
[ 1103.425271][T17141]  do_syscall_64+0xc9/0xf80
[ 1103.425314][T17141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.425347][T17141] RIP: 0033:0x7fe641d5b58e
[ 1103.425373][T17141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1103.425405][T17141] RSP: 002b:00007fe642cf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1103.425437][T17141] RAX: ffffffffffffffda RBX: 00007fe642cf56c0 RCX: 00007fe641d5b58e
[ 1103.425458][T17141] RDX: 000000000000000f RSI: 00007fe642cf50a0 RDI: 0000000000000003
[ 1103.425477][T17141] RBP: 00007fe642cf5090 R08: 0000000000000000 R09: 0000000000000000
[ 1103.425497][T17141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1103.425521][T17141] R13: 00007fe642016038 R14: 00007fe642015fa0 R15: 00007ffdb09a74e8
[ 1103.425564][T17141]  </TASK>
[ 1104.401006][T17157] FAULT_INJECTION: forcing a failure.
[ 1104.401006][T17157] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1104.462657][T17157] CPU: 1 UID: 0 PID: 17157 Comm: syz.7.2268 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1104.462712][T17157] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1104.462724][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1104.462742][T17157] Call Trace:
[ 1104.462753][T17157]  <TASK>
[ 1104.462764][T17157]  dump_stack_lvl+0x100/0x190
[ 1104.462808][T17157]  should_fail_ex.cold+0x5/0xa
[ 1104.462861][T17157]  _copy_to_user+0x32/0xd0
[ 1104.462912][T17157]  simple_read_from_buffer+0xcb/0x170
[ 1104.462962][T17157]  proc_fail_nth_read+0x1af/0x230
[ 1104.463003][T17157]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1104.463044][T17157]  ? rw_verify_area+0xce/0x6d0
[ 1104.463074][T17157]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1104.463112][T17157]  vfs_read+0x1e4/0xb30
[ 1104.463152][T17157]  ? __pfx_vfs_read+0x10/0x10
[ 1104.463185][T17157]  ? find_held_lock+0x2b/0x80
[ 1104.463218][T17157]  ? __fget_files+0x215/0x3d0
[ 1104.463260][T17157]  ? __fget_files+0x21f/0x3d0
[ 1104.463307][T17157]  ksys_read+0x12a/0x250
[ 1104.463342][T17157]  ? __pfx_ksys_read+0x10/0x10
[ 1104.463388][T17157]  do_syscall_64+0xc9/0xf80
[ 1104.463426][T17157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.463458][T17157] RIP: 0033:0x7f26f0d5b58e
[ 1104.463483][T17157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1104.463516][T17157] RSP: 002b:00007f26eeff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1104.463547][T17157] RAX: ffffffffffffffda RBX: 00007f26eeff66c0 RCX: 00007f26f0d5b58e
[ 1104.463567][T17157] RDX: 000000000000000f RSI: 00007f26eeff60a0 RDI: 0000000000000005
[ 1104.463586][T17157] RBP: 00007f26eeff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1104.463607][T17157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1104.463631][T17157] R13: 00007f26f1016038 R14: 00007f26f1015fa0 R15: 00007ffe292a09f8
[ 1104.463674][T17157]  </TASK>
[ 1104.699561][T15866] Bluetooth: hci6: command tx timeout
[ 1105.203840][T17167] Invalid ELF header magic: != ELF
[ 1105.227584][T17170] bond0: no command found in slaves file - use +ifname or -ifname
[ 1106.102981][T17179] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44
[ 1107.295359][T17191] netlink: 334 bytes leftover after parsing attributes in process `syz.6.2276'.
[ 1107.324784][T17193] FAULT_INJECTION: forcing a failure.
[ 1107.324784][T17193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1107.372475][T17193] CPU: 0 UID: 0 PID: 17193 Comm: syz.0.2277 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1107.372530][T17193] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1107.372543][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1107.372563][T17193] Call Trace:
[ 1107.372574][T17193]  <TASK>
[ 1107.372586][T17193]  dump_stack_lvl+0x100/0x190
[ 1107.372629][T17193]  should_fail_ex.cold+0x5/0xa
[ 1107.372683][T17193]  _copy_to_user+0x32/0xd0
[ 1107.372735][T17193]  i2cdev_read+0x142/0x2b0
[ 1107.372794][T17193]  ? __pfx_i2cdev_read+0x10/0x10
[ 1107.372836][T17193]  vfs_readv+0x5d8/0x8d0
[ 1107.372867][T17193]  ? get_pid_task+0x106/0x250
[ 1107.372924][T17193]  ? __pfx_vfs_readv+0x10/0x10
[ 1107.372959][T17193]  ? find_held_lock+0x2b/0x80
[ 1107.373015][T17193]  ? __fget_files+0x21f/0x3d0
[ 1107.373063][T17193]  ? do_readv+0x13e/0x340
[ 1107.373093][T17193]  do_readv+0x13e/0x340
[ 1107.373125][T17193]  ? __pfx_do_readv+0x10/0x10
[ 1107.373171][T17193]  do_syscall_64+0xc9/0xf80
[ 1107.373214][T17193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.373246][T17193] RIP: 0033:0x7fb36099acb9
[ 1107.373272][T17193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1107.373304][T17193] RSP: 002b:00007fb3618bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[ 1107.373336][T17193] RAX: ffffffffffffffda RBX: 00007fb360c15fa0 RCX: 00007fb36099acb9
[ 1107.373359][T17193] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1107.373380][T17193] RBP: 00007fb3618bf090 R08: 0000000000000000 R09: 0000000000000000
[ 1107.373399][T17193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1107.373418][T17193] R13: 00007fb360c16038 R14: 00007fb360c15fa0 R15: 00007ffca9e2d3a8
[ 1107.373461][T17193]  </TASK>
[ 1107.737455][T17189] netlink: 302 bytes leftover after parsing attributes in process `syz.6.2276'.
[ 1112.953955][T16861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1112.966146][T16861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1112.976345][T16861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1112.984692][T16861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1112.992717][T16861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1113.262424][T17273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3383192691 (6766385382 ns) > initial count (131074 ns). Using initial count to start timer.
[ 1113.713421][T17267] chnl_net:caif_netlink_parms(): no params data found
[ 1114.184093][T17267] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1114.191902][T17267] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1114.232756][T17267] bridge_slave_0: entered allmulticast mode
[ 1114.264671][T17267] bridge_slave_0: entered promiscuous mode
[ 1114.275617][T17267] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1114.283001][T17267] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1114.325684][T17267] bridge_slave_1: entered allmulticast mode
[ 1114.337406][T17267] bridge_slave_1: entered promiscuous mode
[ 1114.442079][T17267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1114.473504][T17267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1114.527084][T17267] team0: Port device team_slave_0 added
[ 1114.537462][T17267] team0: Port device team_slave_1 added
[ 1114.608288][T17267] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1114.615786][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1114.642376][T17267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1114.656362][T17267] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1114.665045][T17267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1114.692465][T17267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1114.822473][T17267] hsr_slave_0: entered promiscuous mode
[ 1114.829802][T17267] hsr_slave_1: entered promiscuous mode
[ 1114.839891][T17267] debugfs: 'hsr0' already exists in 'hsr'
[ 1114.859434][T17267] Cannot create hsr debugfs directory
[ 1115.094576][T16861] Bluetooth: hci7: command tx timeout
[ 1115.899326][T17267] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1115.917670][T17267] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1115.961432][T17267] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1116.022625][T17267] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1116.529302][T17267] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1116.607729][T17267] 8021q: adding VLAN 0 to HW filter on device team0
[ 1116.778192][T15865] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.785498][T15865] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1116.911153][T15865] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1116.918427][T15865] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1117.176027][T16861] Bluetooth: hci7: command tx timeout
[ 1117.739581][T17267] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1117.848348][T17267] veth0_vlan: entered promiscuous mode
[ 1117.869772][T17267] veth1_vlan: entered promiscuous mode
[ 1117.916791][T17267] veth0_macvtap: entered promiscuous mode
[ 1117.929451][T17267] veth1_macvtap: entered promiscuous mode
[ 1117.957876][T17267] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1117.991423][T17267] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.011366][T15968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.048027][T15968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.066387][T15968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.077694][T15968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.383733][T15872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1118.411793][T15872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1118.546583][T15865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1118.583934][T15865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.156511][T17366] FAULT_INJECTION: forcing a failure.
[ 1119.156511][T17366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1119.186679][T17366] CPU: 1 UID: 0 PID: 17366 Comm: syz.0.2308 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1119.186736][T17366] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1119.186750][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1119.186771][T17366] Call Trace:
[ 1119.186782][T17366]  <TASK>
[ 1119.186795][T17366]  dump_stack_lvl+0x100/0x190
[ 1119.186845][T17366]  should_fail_ex.cold+0x5/0xa
[ 1119.186900][T17366]  _copy_to_user+0x32/0xd0
[ 1119.186952][T17366]  snd_timer_user_status32.isra.0+0x219/0x2f0
[ 1119.186995][T17366]  ? __pfx_snd_timer_user_status32.isra.0+0x10/0x10
[ 1119.187059][T17366]  ? __lock_acquire+0x4a5/0x2630
[ 1119.187103][T17366]  ? tomoyo_path_number_perm+0x28f/0x580
[ 1119.187156][T17366]  __snd_timer_user_ioctl.isra.0+0xe57/0x27c0
[ 1119.187210][T17366]  ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10
[ 1119.187255][T17366]  ? lock_acquire+0x17c/0x330
[ 1119.187301][T17366]  ? __pfx___might_resched+0x10/0x10
[ 1119.187354][T17366]  ? rcu_is_watching+0x12/0xc0
[ 1119.187388][T17366]  ? trace_contention_end+0xd6/0x110
[ 1119.187436][T17366]  ? __mutex_lock+0x26a/0x1b90
[ 1119.187480][T17366]  ? do_vfs_ioctl+0x226/0x13e0
[ 1119.187536][T17366]  ? snd_timer_user_ioctl+0x4a/0xd0
[ 1119.187580][T17366]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1119.187635][T17366]  ? __pfx___mutex_lock+0x10/0x10
[ 1119.187682][T17366]  ? hook_file_ioctl_common+0x146/0x410
[ 1119.187742][T17366]  ? __fget_files+0x21f/0x3d0
[ 1119.187784][T17366]  snd_timer_user_ioctl+0x76/0xd0
[ 1119.187827][T17366]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[ 1119.187875][T17366]  __x64_sys_ioctl+0x18e/0x210
[ 1119.187930][T17366]  do_syscall_64+0xc9/0xf80
[ 1119.187974][T17366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1119.188010][T17366] RIP: 0033:0x7f41dff9acb9
[ 1119.188043][T17366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1119.188077][T17366] RSP: 002b:00007f41e0e7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1119.188112][T17366] RAX: ffffffffffffffda RBX: 00007f41e0215fa0 RCX: 00007f41dff9acb9
[ 1119.188135][T17366] RDX: 0000200000000040 RSI: 0000000080585414 RDI: 0000000000000007
[ 1119.188155][T17366] RBP: 00007f41e0e7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1119.188173][T17366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1119.188192][T17366] R13: 00007f41e0216038 R14: 00007f41e0215fa0 R15: 00007fff6431a878
[ 1119.188232][T17366]  </TASK>
[ 1119.456998][T16861] Bluetooth: hci7: command tx timeout
[ 1119.593083][T17371] Invalid ELF header magic: != ELF
[ 1119.808195][T17374] Invalid ELF header magic: != ELF
[ 1121.222870][T17395] futex_wake_op: syz.6.2316 tries to shift op by -1; fix this program
[ 1121.504921][T16861] Bluetooth: hci7: command tx timeout
[ 1122.028845][T17406] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1122.323321][T17421] FAULT_INJECTION: forcing a failure.
[ 1122.323321][T17421] name failslab, interval 1, probability 0, space 0, times 0
[ 1122.356416][T17421] CPU: 1 UID: 0 PID: 17421 Comm: syz.0.2323 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1122.356471][T17421] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1122.356484][T17421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1122.356503][T17421] Call Trace:
[ 1122.356515][T17421]  <TASK>
[ 1122.356527][T17421]  dump_stack_lvl+0x100/0x190
[ 1122.356571][T17421]  should_fail_ex.cold+0x5/0xa
[ 1122.356617][T17421]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1122.356650][T17421]  should_failslab+0xc2/0x120
[ 1122.356693][T17421]  kmem_cache_alloc_noprof+0x83/0x780
[ 1122.356733][T17421]  ? skb_clone+0x190/0x400
[ 1122.356782][T17421]  ? skb_clone+0x190/0x400
[ 1122.356823][T17421]  skb_clone+0x190/0x400
[ 1122.356867][T17421]  netlink_deliver_tap+0xaed/0xcc0
[ 1122.356920][T17421]  netlink_unicast+0x650/0x870
[ 1122.356971][T17421]  ? __pfx_netlink_unicast+0x10/0x10
[ 1122.357015][T17421]  ? __pfx___might_resched+0x10/0x10
[ 1122.357062][T17421]  ? __lock_acquire+0x4a5/0x2630
[ 1122.357111][T17421]  netlink_sendmsg+0x8b0/0xda0
[ 1122.357163][T17421]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1122.357207][T17421]  ? __import_iovec+0x1d2/0x640
[ 1122.357257][T17421]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1122.357301][T17421]  ____sys_sendmsg+0xa54/0xc30
[ 1122.357337][T17421]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1122.357373][T17421]  ? _kstrtoull+0x13c/0x1f0
[ 1122.357412][T17421]  ? __pfx__kstrtoull+0x10/0x10
[ 1122.357451][T17421]  ___sys_sendmsg+0x190/0x1e0
[ 1122.357487][T17421]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1122.357554][T17421]  ? __pfx___might_resched+0x10/0x10
[ 1122.357606][T17421]  __sys_sendmmsg+0x205/0x430
[ 1122.357656][T17421]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1122.357709][T17421]  ? __fget_files+0x215/0x3d0
[ 1122.357741][T17421]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1122.357793][T17421]  ? fput+0x79/0x100
[ 1122.357831][T17421]  ? ksys_write+0x1ac/0x250
[ 1122.357864][T17421]  ? __pfx_ksys_write+0x10/0x10
[ 1122.357902][T17421]  __x64_sys_sendmmsg+0x9c/0x100
[ 1122.357946][T17421]  ? lockdep_hardirqs_on+0x78/0x100
[ 1122.357982][T17421]  do_syscall_64+0xc9/0xf80
[ 1122.358024][T17421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1122.358056][T17421] RIP: 0033:0x7f41dff9acb9
[ 1122.358080][T17421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1122.358110][T17421] RSP: 002b:00007f41e0e7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1122.358139][T17421] RAX: ffffffffffffffda RBX: 00007f41e0215fa0 RCX: 00007f41dff9acb9
[ 1122.358160][T17421] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[ 1122.358178][T17421] RBP: 00007f41e0e7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1122.358197][T17421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1122.358215][T17421] R13: 00007f41e0216038 R14: 00007f41e0215fa0 R15: 00007fff6431a878
[ 1122.358253][T17421]  </TASK>
[ 1122.358307][T17421] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2323'.
[ 1123.579417][T17434] FAULT_INJECTION: forcing a failure.
[ 1123.579417][T17434] name failslab, interval 1, probability 0, space 0, times 0
[ 1123.592704][T17434] CPU: 1 UID: 0 PID: 17434 Comm: syz.5.2327 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1123.592748][T17434] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1123.592759][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1123.592776][T17434] Call Trace:
[ 1123.592787][T17434]  <TASK>
[ 1123.592800][T17434]  dump_stack_lvl+0x100/0x190
[ 1123.592837][T17434]  should_fail_ex.cold+0x5/0xa
[ 1123.592881][T17434]  should_failslab+0xc2/0x120
[ 1123.592917][T17434]  kmem_cache_alloc_node_noprof+0x8c/0x880
[ 1123.592954][T17434]  ? __alloc_skb+0x156/0x410
[ 1123.592993][T17434]  ? __alloc_skb+0x156/0x410
[ 1123.593025][T17434]  __alloc_skb+0x156/0x410
[ 1123.593059][T17434]  ? __pfx___alloc_skb+0x10/0x10
[ 1123.593097][T17434]  ? lock_acquire+0x17c/0x330
[ 1123.593134][T17434]  tipc_buf_acquire+0x26/0xe0
[ 1123.593163][T17434]  tipc_msg_create+0x39/0x1d0
[ 1123.593193][T17434]  tipc_group_create_event+0x25f/0x6b0
[ 1123.593232][T17434]  ? __pfx_tipc_group_create_event+0x10/0x10
[ 1123.593286][T17434]  tipc_group_proto_rcv+0xf3e/0x1e20
[ 1123.593327][T17434]  tipc_sk_filter_rcv+0x1861/0x3110
[ 1123.593365][T17434]  ? __pfx_tipc_sk_filter_rcv+0x10/0x10
[ 1123.593390][T17434]  ? tipc_sk_lookup+0x474/0xa00
[ 1123.593452][T17434]  tipc_sk_rcv+0xea6/0x1c80
[ 1123.593485][T17434]  ? __kernel_text_address+0xd/0x30
[ 1123.593532][T17434]  ? __pfx_tipc_sk_rcv+0x10/0x10
[ 1123.593564][T17434]  ? stack_trace_save+0x8e/0xc0
[ 1123.593603][T17434]  ? find_held_lock+0x2b/0x80
[ 1123.593626][T17434]  ? tipc_node_xmit+0x1f6/0xfb0
[ 1123.593656][T17434]  ? lockdep_init_map_type+0x5c/0x250
[ 1123.593695][T17434]  tipc_node_xmit+0x23e/0xfb0
[ 1123.593724][T17434]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1123.593754][T17434]  ? __pfx_tipc_node_xmit+0x10/0x10
[ 1123.593802][T17434]  ? tipc_node_distr_xmit+0x177/0x3c0
[ 1123.593833][T17434]  tipc_node_distr_xmit+0x177/0x3c0
[ 1123.593868][T17434]  ? __pfx_tipc_node_distr_xmit+0x10/0x10
[ 1123.593907][T17434]  ? kfree+0x1c7/0x690
[ 1123.593931][T17434]  ? tipc_group_delete+0x2c3/0x4a0
[ 1123.593967][T17434]  tipc_group_delete+0x2eb/0x4a0
[ 1123.593997][T17434]  ? do_syscall_64+0x4ea/0xf80
[ 1123.594025][T17434]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1123.594055][T17434]  ? __pfx_tipc_group_delete+0x10/0x10
[ 1123.594084][T17434]  ? tipc_sk_push_backlog+0x334/0xa00
[ 1123.594125][T17434]  ? __lock_acquire+0x405/0x2630
[ 1123.594166][T17434]  tipc_sk_leave+0x10e/0x1c0
[ 1123.594201][T17434]  ? __pfx_tipc_sk_leave+0x10/0x10
[ 1123.594234][T17434]  ? __pfx_woken_wake_function+0x10/0x10
[ 1123.594337][T17434]  ? tipc_sk_filtering+0x47d/0x590
[ 1123.594394][T17434]  tipc_release+0x11f/0x1640
[ 1123.594423][T17434]  ? down_write+0x146/0x1f0
[ 1123.594473][T17434]  ? __pfx_down_write+0x10/0x10
[ 1123.594521][T17434]  ? __pfx_locks_remove_file+0x10/0x10
[ 1123.594564][T17434]  __sock_release+0xb3/0x260
[ 1123.594619][T17434]  ? __pfx_sock_close+0x10/0x10
[ 1123.594657][T17434]  sock_close+0x1c/0x30
[ 1123.594695][T17434]  __fput+0x3ff/0xb40
[ 1123.594737][T17434]  task_work_run+0x150/0x240
[ 1123.594778][T17434]  ? __pfx_task_work_run+0x10/0x10
[ 1123.594825][T17434]  exit_to_user_mode_loop+0x100/0x4b0
[ 1123.594862][T17434]  ? rcu_is_watching+0x12/0xc0
[ 1123.594888][T17434]  do_syscall_64+0x4ea/0xf80
[ 1123.594920][T17434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1123.594946][T17434] RIP: 0033:0x7fe641d9acb9
[ 1123.594968][T17434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1123.594994][T17434] RSP: 002b:00007fe642cf5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1123.595020][T17434] RAX: 0000000000000000 RBX: 00007fe642015fa0 RCX: 00007fe641d9acb9
[ 1123.595036][T17434] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002
[ 1123.595051][T17434] RBP: 00007fe641e08bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1123.595066][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1123.595081][T17434] R13: 00007fe642016038 R14: 00007fe642015fa0 R15: 00007ffdb09a74e8
[ 1123.595113][T17434]  </TASK>
[ 1124.455375][T15866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1124.479078][T15866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1124.498088][T15866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1124.508674][T15866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1124.517068][T15866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1124.937785][T17438] chnl_net:caif_netlink_parms(): no params data found
[ 1124.972335][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2331'.
[ 1125.251726][T17438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1125.281342][T17438] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1125.291859][T17438] bridge_slave_0: entered allmulticast mode
[ 1125.315798][T17438] bridge_slave_0: entered promiscuous mode
[ 1125.341504][T17438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1125.359346][T17438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.379115][T17438] bridge_slave_1: entered allmulticast mode
[ 1125.486222][T17438] bridge_slave_1: entered promiscuous mode
[ 1125.787848][T17438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1125.917014][T17438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1126.104840][T17438] team0: Port device team_slave_0 added
[ 1126.125284][T17438] team0: Port device team_slave_1 added
[ 1126.194608][T17438] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1126.201653][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1126.326096][T17438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1126.375418][T17438] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1126.383746][T17438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1126.478450][T17438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1126.615584][T15866] Bluetooth: hci1: command tx timeout
[ 1126.660244][T17438] hsr_slave_0: entered promiscuous mode
[ 1126.685643][T17438] hsr_slave_1: entered promiscuous mode
[ 1126.712916][T17438] debugfs: 'hsr0' already exists in 'hsr'
[ 1126.746603][T17438] Cannot create hsr debugfs directory
[ 1126.864626][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1126.871038][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1127.483967][T17438] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1127.543034][T17438] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1127.590868][T17438] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1127.636695][T17438] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1127.653028][T17485] Invalid ELF header magic: != ELF
[ 1127.870950][T17438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1127.916211][T17438] 8021q: adding VLAN 0 to HW filter on device team0
[ 1127.939515][T15872] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.946877][T15872] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1128.006704][T15872] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1128.014189][T15872] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1128.449055][T17438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1128.694547][T15866] Bluetooth: hci1: command tx timeout
[ 1129.109583][T17438] veth0_vlan: entered promiscuous mode
[ 1129.147820][T17438] veth1_vlan: entered promiscuous mode
[ 1129.217277][T17438] veth0_macvtap: entered promiscuous mode
[ 1129.230750][T17438] veth1_macvtap: entered promiscuous mode
[ 1129.269701][T17438] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1129.320549][T17438] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1129.372528][T15872] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.399428][T15872] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.451325][T15872] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.488555][T15872] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.643288][T17003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.662167][T17003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1129.766263][T15872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1129.775920][T15872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.095356][T17524] Invalid ELF header magic: != ELF
[ 1130.774933][T15866] Bluetooth: hci1: command tx timeout
[ 1131.687359][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2347'.
[ 1132.176525][T17551] netlink: 146 bytes leftover after parsing attributes in process `syz.6.2348'.
[ 1132.855508][T16861] Bluetooth: hci1: command tx timeout
[ 1133.841642][T17567] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2350'.
[ 1133.885910][T17567] veth1_macvtap: left promiscuous mode
[ 1134.455497][T15866] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[ 1135.542205][T17580] zswap: compressor Ì not available
[ 1135.829199][T17583] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1135.855912][T17583] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1135.862271][T17583] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1135.884681][T17583] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1135.941268][T17583] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1136.228011][T17583] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1136.304701][T17583] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1136.316542][T17583] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1136.359382][T17583] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1136.399328][T17583] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1136.425258][T17583] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1136.457298][T17592] Invalid ELF header magic: != ELF
[ 1136.503068][T17583] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1136.550507][T17583] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1136.576847][T17583] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 1136.667469][T17583] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 1136.708230][T17583] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1136.746157][T17583] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1136.826015][T17583] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1137.147360][T17607] Invalid ELF header magic: != ELF
[ 1137.700643][T17613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.894958][T16861] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1137.901072][T15866] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1137.907564][T15881] Bluetooth: hci3: command 0x0406 tx timeout
[ 1137.918258][T16861] Bluetooth: hci2: command 0x0406 tx timeout
[ 1138.292415][T17619] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1138.305230][T17619] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1138.355156][T17619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1138.394492][T16861] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1138.454441][T16861] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1138.614791][T16861] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1138.774365][T16861] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1139.159160][T17613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1139.978543][T16861] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1140.454888][T16861] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1140.505344][T17613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1140.534614][T16861] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1140.666148][T17613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1140.694521][T16861] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1140.856585][T16861] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1141.210721][T17647] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1141.340556][T17647] FAULT_INJECTION: forcing a failure.
[ 1141.340556][T17647] name failslab, interval 1, probability 0, space 0, times 0
[ 1141.420574][T17647] CPU: 0 UID: 0 PID: 17647 Comm: syz.8.2366 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1141.420633][T17647] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1141.420643][T17647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1141.420659][T17647] Call Trace:
[ 1141.420668][T17647]  <TASK>
[ 1141.420678][T17647]  dump_stack_lvl+0x100/0x190
[ 1141.420714][T17647]  should_fail_ex.cold+0x5/0xa
[ 1141.420756][T17647]  should_failslab+0xc2/0x120
[ 1141.420799][T17647]  ? lsm_blob_alloc+0x68/0x90
[ 1141.420826][T17647]  __kmalloc_noprof+0xf6/0x9c0
[ 1141.420860][T17647]  ? lsm_blob_alloc+0x68/0x90
[ 1141.420885][T17647]  lsm_blob_alloc+0x68/0x90
[ 1141.420913][T17647]  security_sk_alloc+0x2d/0x290
[ 1141.420947][T17647]  sk_prot_alloc+0x1d1/0x2a0
[ 1141.420977][T17647]  sk_alloc+0x36/0xe80
[ 1141.421013][T17647]  inet6_create+0x381/0x12c0
[ 1141.421054][T17647]  ? inet6_create+0x7f/0x12c0
[ 1141.421093][T17647]  __sock_create+0x339/0x860
[ 1141.421127][T17647]  __sys_socket+0x14d/0x260
[ 1141.421156][T17647]  ? __pfx___sys_socket+0x10/0x10
[ 1141.421191][T17647]  ? xfd_validate_state+0x129/0x190
[ 1141.421243][T17647]  __x64_sys_socket+0x72/0xb0
[ 1141.421272][T17647]  ? lockdep_hardirqs_on+0x78/0x100
[ 1141.421301][T17647]  do_syscall_64+0xc9/0xf80
[ 1141.421333][T17647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.421359][T17647] RIP: 0033:0x7f84abf9acb9
[ 1141.421379][T17647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1141.421405][T17647] RSP: 002b:00007f84acd75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1141.421429][T17647] RAX: ffffffffffffffda RBX: 00007f84ac215fa0 RCX: 00007f84abf9acb9
[ 1141.421446][T17647] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a
[ 1141.421461][T17647] RBP: 00007f84ac008bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1141.421476][T17647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1141.421491][T17647] R13: 00007f84ac216038 R14: 00007f84ac215fa0 R15: 00007ffcca9f0ef8
[ 1141.421523][T17647]  </TASK>
[ 1141.811300][T17657] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1142.057306][T16861] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1142.535182][T16861] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1142.615098][T16861] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1142.788334][T16861] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1142.944998][T16861] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1152.078267][T17820] FAULT_INJECTION: forcing a failure.
[ 1152.078267][T17820] name failslab, interval 1, probability 0, space 0, times 0
[ 1152.091835][T17820] CPU: 1 UID: 0 PID: 17820 Comm: syz.0.2405 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1152.091877][T17820] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1152.091888][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1152.091903][T17820] Call Trace:
[ 1152.091912][T17820]  <TASK>
[ 1152.091921][T17820]  dump_stack_lvl+0x100/0x190
[ 1152.091956][T17820]  should_fail_ex.cold+0x5/0xa
[ 1152.091996][T17820]  should_failslab+0xc2/0x120
[ 1152.092068][T17820]  __kmalloc_cache_noprof+0x80/0x810
[ 1152.092094][T17820]  ? genl_start+0x1e8/0x970
[ 1152.092124][T17820]  ? genl_start+0x1e8/0x970
[ 1152.092145][T17820]  genl_start+0x1e8/0x970
[ 1152.092173][T17820]  __netlink_dump_start+0x60e/0x990
[ 1152.092214][T17820]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[ 1152.092243][T17820]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 1152.092277][T17820]  ? __pfx_genl_get_cmd+0x10/0x10
[ 1152.092298][T17820]  ? __pfx_genl_start+0x10/0x10
[ 1152.092320][T17820]  ? __pfx_genl_dumpit+0x10/0x10
[ 1152.092342][T17820]  ? __pfx_genl_done+0x10/0x10
[ 1152.092369][T17820]  ? __dev_queue_xmit+0x7fd/0x46f0
[ 1152.092398][T17820]  ? __radix_tree_lookup+0x217/0x2b0
[ 1152.092428][T17820]  genl_rcv_msg+0x471/0x800
[ 1152.092456][T17820]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1152.092482][T17820]  ? __pfx_ethnl_tsinfo_start+0x10/0x10
[ 1152.092514][T17820]  ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10
[ 1152.092546][T17820]  ? __pfx_ethnl_tsinfo_done+0x10/0x10
[ 1152.092589][T17820]  netlink_rcv_skb+0x159/0x420
[ 1152.092626][T17820]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1152.092652][T17820]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1152.092702][T17820]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1152.092742][T17820]  genl_rcv+0x28/0x40
[ 1152.092763][T17820]  netlink_unicast+0x5aa/0x870
[ 1152.092804][T17820]  ? __pfx_netlink_unicast+0x10/0x10
[ 1152.092852][T17820]  netlink_sendmsg+0x8b0/0xda0
[ 1152.092895][T17820]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1152.092930][T17820]  ? __import_iovec+0x1d2/0x640
[ 1152.092971][T17820]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[ 1152.093012][T17820]  ____sys_sendmsg+0xa54/0xc30
[ 1152.093042][T17820]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1152.093081][T17820]  ___sys_sendmsg+0x190/0x1e0
[ 1152.093110][T17820]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1152.093151][T17820]  ? find_held_lock+0x2b/0x80
[ 1152.093194][T17820]  __sys_sendmsg+0x170/0x220
[ 1152.093230][T17820]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1152.093284][T17820]  do_syscall_64+0xc9/0xf80
[ 1152.093314][T17820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.093340][T17820] RIP: 0033:0x7f41dff9acb9
[ 1152.093360][T17820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1152.093386][T17820] RSP: 002b:00007f41e0e7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1152.093410][T17820] RAX: ffffffffffffffda RBX: 00007f41e0215fa0 RCX: 00007f41dff9acb9
[ 1152.093427][T17820] RDX: 0000000004048800 RSI: 0000200000000000 RDI: 0000000000000003
[ 1152.093442][T17820] RBP: 00007f41e0e7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1152.093457][T17820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1152.093471][T17820] R13: 00007f41e0216038 R14: 00007f41e0215fa0 R15: 00007fff6431a878
[ 1152.093502][T17820]  </TASK>
[ 1152.791585][T17823] FAULT_INJECTION: forcing a failure.
[ 1152.791585][T17823] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1152.818991][T17823] CPU: 1 UID: 0 PID: 17823 Comm: syz.6.2407 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1152.819050][T17823] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1152.819063][T17823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1152.819083][T17823] Call Trace:
[ 1152.819095][T17823]  <TASK>
[ 1152.819108][T17823]  dump_stack_lvl+0x100/0x190
[ 1152.819157][T17823]  should_fail_ex.cold+0x5/0xa
[ 1152.819205][T17823]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1152.819261][T17823]  should_fail_alloc_page+0xeb/0x140
[ 1152.819311][T17823]  prepare_alloc_pages+0x1f0/0x5f0
[ 1152.819369][T17823]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 1152.819413][T17823]  ? folio_lock_anon_vma_read+0x348/0xe30
[ 1152.819454][T17823]  ? folio_lock_anon_vma_read+0x348/0xe30
[ 1152.819492][T17823]  ? __up_read+0x2c5/0x700
[ 1152.819537][T17823]  ? __pfx___up_read+0x10/0x10
[ 1152.819578][T17823]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1152.819642][T17823]  __folio_alloc_noprof+0x13/0x2f0
[ 1152.819677][T17823]  alloc_migration_target+0x1d7/0x640
[ 1152.819723][T17823]  migrate_pages_batch+0x4f2/0x4530
[ 1152.819769][T17823]  ? __pfx_alloc_migration_target+0x10/0x10
[ 1152.819823][T17823]  ? walk_pgd_range+0x1115/0x1eb0
[ 1152.819859][T17823]  ? __pfx_migrate_pages_batch+0x10/0x10
[ 1152.819933][T17823]  migrate_pages_sync+0x12c/0x880
[ 1152.819979][T17823]  ? __pfx_alloc_migration_target+0x10/0x10
[ 1152.820030][T17823]  ? __pfx_migrate_pages_sync+0x10/0x10
[ 1152.820072][T17823]  ? __pfx_queue_pages_test_walk+0x10/0x10
[ 1152.820123][T17823]  ? walk_page_range_mm_unsafe+0x32c/0xad0
[ 1152.820168][T17823]  migrate_pages+0x1a5b/0x2810
[ 1152.820217][T17823]  ? __pfx_alloc_migration_target+0x10/0x10
[ 1152.820268][T17823]  ? __pfx_migrate_pages+0x10/0x10
[ 1152.820312][T17823]  ? queue_pages_range+0x11e/0x180
[ 1152.820350][T17823]  ? __up_read+0x2c5/0x700
[ 1152.820392][T17823]  ? __pfx___up_read+0x10/0x10
[ 1152.820432][T17823]  ? do_migrate_pages+0x451/0x740
[ 1152.820472][T17823]  ? do_migrate_pages+0x451/0x740
[ 1152.820519][T17823]  do_migrate_pages+0x488/0x740
[ 1152.820568][T17823]  ? __pfx_do_migrate_pages+0x10/0x10
[ 1152.820615][T17823]  ? rcu_is_watching+0x12/0xc0
[ 1152.820645][T17823]  ? get_task_mm+0xc2/0xf0
[ 1152.820680][T17823]  ? security_capable+0xbd/0x260
[ 1152.820720][T17823]  kernel_migrate_pages+0x560/0x700
[ 1152.820761][T17823]  ? __pfx_kernel_migrate_pages+0x10/0x10
[ 1152.820805][T17823]  ? __pfx_ksys_write+0x10/0x10
[ 1152.820843][T17823]  __x64_sys_migrate_pages+0x96/0x100
[ 1152.820885][T17823]  ? lockdep_hardirqs_on+0x78/0x100
[ 1152.820925][T17823]  do_syscall_64+0xc9/0xf80
[ 1152.820961][T17823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.820989][T17823] RIP: 0033:0x7fb24a59acb9
[ 1152.821013][T17823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1152.821040][T17823] RSP: 002b:00007fb24b39d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[ 1152.821068][T17823] RAX: ffffffffffffffda RBX: 00007fb24a815fa0 RCX: 00007fb24a59acb9
[ 1152.821087][T17823] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000
[ 1152.821104][T17823] RBP: 00007fb24b39d090 R08: 0000000000000000 R09: 0000000000000000
[ 1152.821122][T17823] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002
[ 1152.821139][T17823] R13: 00007fb24a816038 R14: 00007fb24a815fa0 R15: 00007fffa23f2938
[ 1152.821175][T17823]  </TASK>
[ 1155.362313][T17863] Invalid ELF header magic: != ELF
[ 1156.374766][T16861] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[ 1157.391965][T17897] random: crng reseeded on system resumption
[ 1157.429666][T17897] Restarting kernel threads ...
[ 1157.452219][T17897] Done restarting kernel threads.
[ 1161.506376][T17960] FAULT_INJECTION: forcing a failure.
[ 1161.506376][T17960] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1161.524781][T17956] Invalid ELF header magic: != ELF
[ 1161.536216][T17959] Invalid ELF header magic: != ELF
[ 1161.597853][T17960] CPU: 1 UID: 0 PID: 17960 Comm: syz.0.2432 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1161.597905][T17960] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1161.597917][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1161.597935][T17960] Call Trace:
[ 1161.597945][T17960]  <TASK>
[ 1161.597958][T17960]  dump_stack_lvl+0x100/0x190
[ 1161.598001][T17960]  should_fail_ex.cold+0x5/0xa
[ 1161.598048][T17960]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1161.598098][T17960]  should_fail_alloc_page+0xeb/0x140
[ 1161.598143][T17960]  prepare_alloc_pages+0x1f0/0x5f0
[ 1161.598187][T17960]  ? rcu_is_watching+0x12/0xc0
[ 1161.598221][T17960]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 1161.598258][T17960]  ? kasan_save_track+0x14/0x30
[ 1161.598307][T17960]  ? kasan_save_stack+0x3f/0x50
[ 1161.598351][T17960]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1161.598391][T17960]  ? look_up_lock_class+0x64/0x120
[ 1161.598465][T17960]  ? lock_acquire+0x17c/0x330
[ 1161.598505][T17960]  ? find_held_lock+0x2b/0x80
[ 1161.598540][T17960]  ? page_table_check_set+0x49a/0xa10
[ 1161.598575][T17960]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1161.598610][T17960]  ? policy_nodemask+0xed/0x4f0
[ 1161.598654][T17960]  alloc_pages_mpol+0x1fb/0x550
[ 1161.598697][T17960]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1161.598738][T17960]  ? __page_table_check_ptes_set+0x1b5/0x4e0
[ 1161.598784][T17960]  folio_alloc_mpol_noprof+0x36/0x340
[ 1161.598833][T17960]  vma_alloc_folio_noprof+0xed/0x1d0
[ 1161.598879][T17960]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1161.598937][T17960]  do_anonymous_page+0xb10/0x1f40
[ 1161.598981][T17960]  __handle_mm_fault+0x1d3a/0x2b50
[ 1161.599023][T17960]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1161.599059][T17960]  ? __pte_offset_map_lock+0x174/0x320
[ 1161.599102][T17960]  ? find_held_lock+0x2b/0x80
[ 1161.599142][T17960]  ? follow_page_pte+0x5b4/0x1410
[ 1161.599192][T17960]  handle_mm_fault+0x36d/0xa20
[ 1161.599230][T17960]  __get_user_pages+0xf9c/0x34d0
[ 1161.599294][T17960]  ? __pfx___get_user_pages+0x10/0x10
[ 1161.599348][T17960]  populate_vma_page_range+0x267/0x3f0
[ 1161.599397][T17960]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1161.599443][T17960]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1161.599487][T17960]  ? do_mmap+0x93f/0x12f0
[ 1161.599537][T17960]  __mm_populate+0x107/0x3a0
[ 1161.599585][T17960]  ? __pfx___mm_populate+0x10/0x10
[ 1161.599634][T17960]  ? up_write+0x290/0x4f0
[ 1161.599681][T17960]  vm_mmap_pgoff+0x37f/0x470
[ 1161.599730][T17960]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1161.599777][T17960]  ? __fget_files+0x21f/0x3d0
[ 1161.599820][T17960]  ksys_mmap_pgoff+0x7d/0x5b0
[ 1161.599861][T17960]  ? __pfx_ksys_write+0x10/0x10
[ 1161.599898][T17960]  __x64_sys_mmap+0x125/0x190
[ 1161.599931][T17960]  do_syscall_64+0xc9/0xf80
[ 1161.599968][T17960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1161.599999][T17960] RIP: 0033:0x7f41dff9acb9
[ 1161.600023][T17960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1161.600053][T17960] RSP: 002b:00007f41e0e5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1161.600083][T17960] RAX: ffffffffffffffda RBX: 00007f41e0216090 RCX: 00007f41dff9acb9
[ 1161.600103][T17960] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[ 1161.600121][T17960] RBP: 00007f41e0e5a090 R08: 0000000000000007 R09: 0000000000028000
[ 1161.600140][T17960] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002
[ 1161.600159][T17960] R13: 00007f41e0216128 R14: 00007f41e0216090 R15: 00007fff6431a878
[ 1161.600197][T17960]  </TASK>
[ 1161.966083][T17963] sctp: [Deprecated]: syz.0.2432 (pid 17963) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1161.966083][T17963] Use struct sctp_sack_info instead
[ 1162.496298][T17969] Invalid ELF header magic: != ELF
[ 1164.723288][T17999] random: crng reseeded on system resumption
[ 1164.757774][T17999] Restarting kernel threads ...
[ 1164.764036][T17999] Done restarting kernel threads.
[ 1165.510326][T18011] Invalid ELF header magic: != ELF
[ 1165.794539][T18015] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1165.811283][T18015] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1166.281450][T18015] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1166.302501][T18015] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1166.325997][T18015] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1166.342262][T18015] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1166.354748][T18015] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1166.373673][T18015] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1166.418963][T18022] FAULT_INJECTION: forcing a failure.
[ 1166.418963][T18022] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1166.471268][T18022] CPU: 1 UID: 0 PID: 18022 Comm: syz.0.2448 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1166.471327][T18022] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1166.471341][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1166.471363][T18022] Call Trace:
[ 1166.471375][T18022]  <TASK>
[ 1166.471389][T18022]  dump_stack_lvl+0x100/0x190
[ 1166.471441][T18022]  should_fail_ex.cold+0x5/0xa
[ 1166.471494][T18022]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1166.471542][T18022]  get_futex_key+0x1d2/0x1620
[ 1166.471594][T18022]  ? __pfx_get_futex_key+0x10/0x10
[ 1166.471641][T18022]  ? _raw_write_unlock+0x28/0x50
[ 1166.471678][T18022]  ? keyring_instantiate+0x101/0x300
[ 1166.471724][T18022]  futex_wake+0xea/0x530
[ 1166.471782][T18022]  ? __pfx_futex_wake+0x10/0x10
[ 1166.471856][T18022]  ? keyring_free_preparse+0x9/0x10
[ 1166.471889][T18022]  ? key_instantiate_and_link+0x39d/0x4b0
[ 1166.471950][T18022]  ? key_alloc+0xbb4/0x1310
[ 1166.472013][T18022]  do_futex+0x32b/0x350
[ 1166.472066][T18022]  ? __pfx_do_futex+0x10/0x10
[ 1166.472124][T18022]  __x64_sys_futex+0x34f/0x4d0
[ 1166.472177][T18022]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1166.472232][T18022]  ? keyctl_set_reqkey_keyring+0x11b/0x1c0
[ 1166.472286][T18022]  do_syscall_64+0xc9/0xf80
[ 1166.472329][T18022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.472363][T18022] RIP: 0033:0x7f41dff9acb9
[ 1166.472390][T18022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1166.472428][T18022] RSP: 002b:00007f41e0e5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1166.472462][T18022] RAX: ffffffffffffffda RBX: 00007f41e0216098 RCX: 00007f41dff9acb9
[ 1166.472486][T18022] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f41e021609c
[ 1166.472507][T18022] RBP: 00007f41e0216090 R08: 0000000000000000 R09: 0000000000000000
[ 1166.472529][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1166.472549][T18022] R13: 00007f41e0216128 R14: 00007fff6431a790 R15: 00007fff6431a878
[ 1166.472592][T18022]  </TASK>
[ 1167.156990][T18025] vmstat_refresh: nr_hugetlb -2560
[ 1167.824577][T16861] Bluetooth: hci3: command 0x0406 tx timeout
[ 1167.830681][T16861] Bluetooth: hci2: command 0x0406 tx timeout
[ 1168.300183][T16861] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1168.376038][T16861] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1168.382135][T16861] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1168.388347][T16297] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1168.395957][T15866] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1168.404093][T15866] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1168.673173][T18038] Invalid ELF header magic: != ELF
[ 1172.563420][T18093] FAULT_INJECTION: forcing a failure.
[ 1172.563420][T18093] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1172.588067][T18093] CPU: 0 UID: 0 PID: 18093 Comm: syz.6.2462 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1172.588124][T18093] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1172.588137][T18093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1172.588157][T18093] Call Trace:
[ 1172.588169][T18093]  <TASK>
[ 1172.588181][T18093]  dump_stack_lvl+0x100/0x190
[ 1172.588229][T18093]  should_fail_ex.cold+0x5/0xa
[ 1172.588284][T18093]  _copy_to_user+0x32/0xd0
[ 1172.588340][T18093]  simple_read_from_buffer+0xcb/0x170
[ 1172.588368][T18093]  proc_fail_nth_read+0x1af/0x230
[ 1172.588398][T18093]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1172.588428][T18093]  ? rw_verify_area+0xce/0x6d0
[ 1172.588453][T18093]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1172.588488][T18093]  vfs_read+0x1e4/0xb30
[ 1172.588518][T18093]  ? __pfx_vfs_read+0x10/0x10
[ 1172.588542][T18093]  ? find_held_lock+0x2b/0x80
[ 1172.588567][T18093]  ? __fget_files+0x215/0x3d0
[ 1172.588598][T18093]  ? __fget_files+0x21f/0x3d0
[ 1172.588632][T18093]  ksys_read+0x12a/0x250
[ 1172.588658][T18093]  ? __pfx_ksys_read+0x10/0x10
[ 1172.588684][T18093]  ? do_user_addr_fault+0x8d6/0x12f0
[ 1172.588719][T18093]  do_syscall_64+0xc9/0xf80
[ 1172.588751][T18093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1172.588776][T18093] RIP: 0033:0x7fb24a55b58e
[ 1172.588796][T18093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1172.588821][T18093] RSP: 002b:00007fb24b37bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1172.588845][T18093] RAX: ffffffffffffffda RBX: 00007fb24b37c6c0 RCX: 00007fb24a55b58e
[ 1172.588862][T18093] RDX: 000000000000000f RSI: 00007fb24b37c0a0 RDI: 0000000000000005
[ 1172.588878][T18093] RBP: 00007fb24b37c090 R08: 0000000000000000 R09: 0000000000000000
[ 1172.588893][T18093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1172.588908][T18093] R13: 00007fb24a816128 R14: 00007fb24a816090 R15: 00007fffa23f2938
[ 1172.588939][T18093]  </TASK>
[ 1173.154862][T18096] tc_dump_action: action bad kind
[ 1173.163858][T18098] Invalid ELF header magic: != ELF
[ 1174.225944][T18114] Invalid ELF header magic: != ELF
[ 1176.371558][T18132] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1176.378391][T18132] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1176.385646][T18132] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1176.404555][T18132] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1176.416544][T18132] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1176.448317][T18132] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1176.474630][T18132] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1176.494496][T18132] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1177.814730][T16861] Bluetooth: hci2: command 0x0406 tx timeout
[ 1178.467085][T16861] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1178.480852][T18036] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1178.487179][T15881] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1178.493365][T15866] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1178.501066][T16297] Bluetooth: hci3: command 0x0406 tx timeout
[ 1178.535603][T15881] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1178.544168][T18036] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1178.965401][T18173] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1178.990918][T18173] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1178.997251][T18173] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1179.024553][T18173] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1179.031790][T18173] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1179.063264][T18173] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1179.083475][T18173] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1179.195601][T18173] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1180.008691][T18183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2484'.
[ 1180.164564][T18184] blktrace: Concurrent blktraces are not allowed on loop2
[ 1180.547057][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2487'.
[ 1181.023139][T15881] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1181.029513][T18036] Bluetooth: hci3: command 0x0406 tx timeout
[ 1181.035837][T15866] Bluetooth: hci2: command 0x0406 tx timeout
[ 1181.094576][T15881] Bluetooth: hci7: command 0x0c1a tx timeout
[ 1181.102794][T15866] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1181.109057][T18036] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1181.115516][T18170] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1181.176127][T15881] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1181.451558][T18207] Invalid ELF header magic: != ELF
[ 1182.286473][T18220] Invalid ELF header magic: != ELF
[ 1182.380843][T18223] Invalid ELF header magic: != ELF
[ 1184.379753][T18252] Invalid ELF header magic: != ELF
[ 1185.787332][T15866] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1185.798770][T15866] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1185.814166][T15866] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1185.823953][T15866] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1185.836309][T15866] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1186.015303][T15866] Bluetooth: hci5: unexpected event 0x01 length: 124 > 1
[ 1186.336350][T18268] chnl_net:caif_netlink_parms(): no params data found
[ 1186.377522][   T31] INFO: task kworker/u8:27:11644 blocked for more than 163 seconds.
[ 1186.397439][   T31]       Tainted: G     U       L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1186.427685][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1186.479560][   T31] task:kworker/u8:27   state:D stack:23016 pid:11644 tgid:11644 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1186.529094][   T31] Workqueue: netns cleanup_net
[ 1186.534015][   T31] Call Trace:
[ 1186.574550][   T31]  <TASK>
[ 1186.577611][   T31]  ? __schedule+0xf65/0x5e10
[ 1186.582334][   T31]  __schedule+0xfe4/0x5e10
[ 1186.644310][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1186.649523][   T31]  ? __pfx___schedule+0x10/0x10
[ 1186.672650][   T31]  ? find_held_lock+0x2b/0x80
[ 1186.714343][   T31]  ? schedule+0x2bf/0x390
[ 1186.744734][   T31]  schedule+0xdd/0x390
[ 1186.749020][   T31]  schedule_timeout+0x1b2/0x280
[ 1186.753952][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1186.764133][T18268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1186.824480][T18268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1186.832333][T18268] bridge_slave_0: entered allmulticast mode
[ 1186.838808][   T31]  ? mark_held_locks+0x40/0x70
[ 1186.843670][   T31]  __wait_for_common+0x2e7/0x4c0
[ 1186.864315][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1186.869834][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1186.887353][T18268] bridge_slave_0: entered promiscuous mode
[ 1186.908647][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1186.913967][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[ 1186.964316][   T31]  __flush_workqueue+0x3f7/0x1200
[ 1186.969479][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1186.991144][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1187.004315][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[ 1187.009907][   T31]  ? reacquire_held_locks+0xce/0x1e0
[ 1187.024649][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[ 1187.030328][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[ 1187.045002][   T31]  rds_tcp_listen_stop+0x104/0x160
[ 1187.050249][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[ 1187.064328][   T31]  rds_tcp_exit_net+0xcb/0x810
[ 1187.069319][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[ 1187.084730][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1187.090388][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[ 1187.114716][   T31]  ops_undo_list+0x2ee/0xab0
[ 1187.119521][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 1187.134459][   T31]  ? cleanup_net+0x345/0x830
[ 1187.139597][   T31]  ? idr_destroy+0x62/0x2e0
[ 1187.144196][   T31]  cleanup_net+0x419/0x830
[ 1187.158829][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1187.163842][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1187.169084][   T31]  process_one_work+0x9c2/0x1840
[ 1187.178351][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1187.183859][   T31]  ? assign_work+0x19c/0x250
[ 1187.189326][   T31]  worker_thread+0x5da/0xe40
[ 1187.194021][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1187.199852][   T31]  ? kthread+0x17d/0x730
[ 1187.205770][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1187.210991][   T31]  kthread+0x3b3/0x730
[ 1187.215724][   T31]  ? __pfx_kthread+0x10/0x10
[ 1187.220399][   T31]  ? ret_from_fork+0x79/0xaf0
[ 1187.225219][   T31]  ? ret_from_fork+0x79/0xaf0
[ 1187.229949][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1187.235049][   T31]  ? __pfx_kthread+0x10/0x10
[ 1187.239720][   T31]  ret_from_fork+0x754/0xaf0
[ 1187.244929][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1187.250241][   T31]  ? __switch_to+0x7b9/0x10c0
[ 1187.255693][   T31]  ? __pfx_kthread+0x10/0x10
[ 1187.260377][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1187.265726][   T31]  </TASK>
[ 1187.269005][   T31] 
[ 1187.269005][   T31] Showing all locks held in the system:
[ 1187.323309][   T31] 1 lock held by khungtaskd/31:
[ 1187.364898][   T31]  #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1187.394371][   T31] 2 locks held by getty/5582:
[ 1187.399139][   T31]  #0: ffff8880361590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1187.444374][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1187.474401][   T31] 3 locks held by kworker/0:4/5883:
[ 1187.479869][   T31] 3 locks held by kworker/u8:27/11644:
[ 1187.507666][   T31]  #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 1187.544353][   T31]  #1: ffffc900037cfc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 1187.584407][   T31]  #2: ffffffff903dd110 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830
[ 1187.593881][   T31] 3 locks held by kworker/1:3/12152:
[ 1187.624372][   T31]  #0: ffff88813fe15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840
[ 1187.654830][   T31]  #1: ffffc90003dffc98 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840
[ 1187.694401][   T31]  #2: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1187.724362][   T31] 1 lock held by syz.2.2164/16607:
[ 1187.729828][   T31]  #0: ffffffff903dd110 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1187.764347][   T31] 1 lock held by syz.3.2208/16794:
[ 1187.769640][   T31]  #0: ffffffff903dd110 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1187.814460][   T31] 1 lock held by syz.4.2222/16849:
[ 1187.827244][   T31]  #0: ffffffff903dd110 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1187.854366][   T31] 1 lock held by syz.7.2280/17207:
[ 1187.859565][   T31]  #0: ffffffff903dd110 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1187.896176][T15866] Bluetooth: hci8: command tx timeout
[ 1187.904315][   T31] 1 lock held by syz.5.2455/18060:
[ 1187.909979][   T31]  #0: ffffffff903dd110 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1187.944392][   T31] 1 lock held by syz-executor/18268:
[ 1187.949765][   T31] 1 lock held by syz.6.2506/18270:
[ 1187.974757][   T31]  #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[ 1188.004321][   T31] 1 lock held by syz.8.2508/18280:
[ 1188.009765][   T31]  #0: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1188.026529][   T31] 1 lock held by syz.0.2509/18287:
[ 1188.034191][   T31]  #0: ffffffff903f5a68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1188.045843][   T31] 
[ 1188.048326][   T31] =============================================
[ 1188.048326][   T31] 
[ 1188.106587][   T31] NMI backtrace for cpu 1
[ 1188.106613][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1188.106650][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1188.106659][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1188.106674][   T31] Call Trace:
[ 1188.106682][   T31]  <TASK>
[ 1188.106691][   T31]  dump_stack_lvl+0x100/0x190
[ 1188.106727][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1188.106761][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1188.106801][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1188.106842][   T31]  sys_info+0x141/0x190
[ 1188.106873][   T31]  watchdog+0xcc3/0xfe0
[ 1188.106906][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1188.106931][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1188.106961][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1188.106994][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1188.107017][   T31]  kthread+0x3b3/0x730
[ 1188.107051][   T31]  ? __pfx_kthread+0x10/0x10
[ 1188.107083][   T31]  ? ret_from_fork+0x79/0xaf0
[ 1188.107105][   T31]  ? ret_from_fork+0x79/0xaf0
[ 1188.107127][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1188.107150][   T31]  ? __pfx_kthread+0x10/0x10
[ 1188.107185][   T31]  ret_from_fork+0x754/0xaf0
[ 1188.107210][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1188.107235][   T31]  ? __switch_to+0x7b9/0x10c0
[ 1188.107267][   T31]  ? __pfx_kthread+0x10/0x10
[ 1188.107302][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1188.107351][   T31]  </TASK>
[ 1188.107360][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1188.259483][    C0] NMI backtrace for cpu 0
[ 1188.259510][    C0] CPU: 0 UID: 0 PID: 18280 Comm: syz.8.2508 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1188.259551][    C0] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1188.259562][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1188.259578][    C0] RIP: 0010:__free_frozen_pages+0x72c/0x1130
[ 1188.259611][    C0] Code: 49 8d 6f 34 be 04 00 00 00 4d 8b 6f 18 48 89 ef e8 e9 b3 0e 00 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 <48> 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 8c 09 00 00 49
[ 1188.259639][    C0] RSP: 0018:ffffc9000b0af960 EFLAGS: 00000a07
[ 1188.259660][    C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8260f307
[ 1188.259695][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea000539a034
[ 1188.259719][    C0] RBP: ffffea000539a034 R08: 0000000000000000 R09: fffff94000a73406
[ 1188.259737][    C0] R10: ffffea000539a037 R11: 0000000000000000 R12: ffffea000539a008
[ 1188.259755][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffea000539a000
[ 1188.259772][    C0] FS:  0000000000000000(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000
[ 1188.259798][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1188.259816][    C0] CR2: 00007fb24a8120b8 CR3: 0000000036134000 CR4: 00000000003526f0
[ 1188.259833][    C0] Call Trace:
[ 1188.259842][    C0]  <TASK>
[ 1188.259857][    C0]  vfree.part.0+0x12b/0x9d0
[ 1188.259899][    C0]  ? __pfx___might_resched+0x10/0x10
[ 1188.259940][    C0]  ? kcov_close+0x2b/0x60
[ 1188.259966][    C0]  ? __pfx_kcov_close+0x10/0x10
[ 1188.259991][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1188.260017][    C0]  ? __pfx_kcov_close+0x10/0x10
[ 1188.260042][    C0]  vfree+0x55/0x80
[ 1188.260080][    C0]  kcov_close+0x34/0x60
[ 1188.260104][    C0]  __fput+0x3ff/0xb40
[ 1188.260140][    C0]  ? cleanup_mnt+0x263/0x450
[ 1188.260168][    C0]  task_work_run+0x150/0x240
[ 1188.260209][    C0]  ? __pfx_task_work_run+0x10/0x10
[ 1188.260254][    C0]  do_exit+0x829/0x2a30
[ 1188.260296][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1188.260334][    C0]  ? do_raw_spin_lock+0x128/0x260
[ 1188.260374][    C0]  ? find_held_lock+0x2b/0x80
[ 1188.260399][    C0]  ? get_signal+0x7e0/0x21e0
[ 1188.260431][    C0]  do_group_exit+0xd5/0x2a0
[ 1188.260471][    C0]  get_signal+0x1ec7/0x21e0
[ 1188.260500][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1188.260524][    C0]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[ 1188.260562][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[ 1188.260598][    C0]  ? __pfx_get_signal+0x10/0x10
[ 1188.260634][    C0]  arch_do_signal_or_restart+0x91/0x770
[ 1188.260669][    C0]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 1188.260704][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1188.260757][    C0]  exit_to_user_mode_loop+0x86/0x4b0
[ 1188.260796][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1188.260822][    C0]  do_syscall_64+0x4ea/0xf80
[ 1188.260854][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.260881][    C0] RIP: 0033:0x7f84abf9acb9
[ 1188.260900][    C0] Code: Unable to access opcode bytes at 0x7f84abf9ac8f.
[ 1188.260913][    C0] RSP: 002b:00007f84acd75028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1188.260937][    C0] RAX: 0000000000000000 RBX: 00007f84ac215fa0 RCX: 00007f84abf9acb9
[ 1188.260954][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[ 1188.260971][    C0] RBP: 00007f84ac008bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1188.260988][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1188.261005][    C0] R13: 00007f84ac216038 R14: 00007f84ac215fa0 R15: 00007ffcca9f0ef8
[ 1188.261032][    C0]  </TASK>
[ 1188.313943][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1188.321799][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1188.321890][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1188.322024][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1188.322060][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1188.322114][   T31] Call Trace:
[ 1188.322152][   T31]  <TASK>
[ 1188.322186][   T31]  dump_stack_lvl+0x100/0x190
[ 1188.322312][   T31]  vpanic+0x20d/0x630
[ 1188.322405][   T31]  panic+0xd1/0xd1
[ 1188.322480][   T31]  ? __pfx_panic+0x10/0x10
[ 1188.322580][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1188.322709][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1188.322901][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1188.323036][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1188.323129][   T31]  ? watchdog+0xcd3/0xfe0
[ 1188.323224][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1188.323342][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1188.323436][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1188.323543][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1188.323638][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1188.323725][   T31]  kthread+0x3b3/0x730
[ 1188.323875][   T31]  ? __pfx_kthread+0x10/0x10
[ 1188.324002][   T31]  ? ret_from_fork+0x79/0xaf0
[ 1188.324092][   T31]  ? ret_from_fork+0x79/0xaf0
[ 1188.324176][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1188.324266][   T31]  ? __pfx_kthread+0x10/0x10
[ 1188.324392][   T31]  ret_from_fork+0x754/0xaf0
[ 1188.324476][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1188.324550][   T31]  ? __switch_to+0x7b9/0x10c0
[ 1188.763264][   T31]  ? __pfx_kthread+0x10/0x10
[ 1188.767982][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1188.773019][   T31]  </TASK>
[ 1188.776704][   T31] Kernel Offset: disabled
[ 1188.781067][   T31] Rebooting in 86400 seconds..