last executing test programs:

1m48.320309383s ago: executing program 2 (id=1194):
r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0)
write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b80)="650c485c555f31434b1ddec85a8d90591b9839485097fe99c871c9b7875a682ac146e78071ed382552be8de60bfe1472c734f98696d4fe8dd71fa1a415cabad25e22bf38826c23ca27f0d3e63a957835d9d3868bd65fe970cbf18f8694927a38818081f1206e4241f2d61f4ae1b93311bfd8d968", 0x74)

1m48.1399041s ago: executing program 2 (id=1195):
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x100010, r0, 0x5)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/modalias\x00', 0x80500, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, r1, 0x308000000000)
move_pages$auto(0x0, 0x9, 0x0, 0x0, 0x0, 0x7)
r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0x0, 0x2})
read$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bpf$auto(0x24, 0x0, 0x8)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003ec, 0x14)
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/swaps\x00', 0xc0, 0x0)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x404, 0x4)
prctl$auto(0x44000026, 0xa, 0x0, 0x200, 0x3)
write$auto(0xffffffffffffffff, 0x0, 0xe43)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x81, 0x11, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x9, 0x40], {0x5, 0x10001, 0x7, 0x100002dc, 0xa, 0x4, 0x101, 0x6, 0x8}, {0xfff7ffff, 0x2, 0x3, 0x103, 0x9, 0x40, 0x76c5, 0x88, 0x8000000000040000}})
getpid()
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x8000, &(0x7f0000000500)={&(0x7f0000000080), 0xfffffffffffffe64}, 0x6, 0xfffffffffffffffe)
ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r4, 0xc2604110, 0x0)
mmap$auto(0x14417127, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
close_range$auto(r3, r1, 0xfffffffd)

1m46.521857236s ago: executing program 2 (id=1200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r2 = fanotify_init$auto(0x200, 0x1)
fanotify_mark$auto(0x0, 0x1, 0x7, r2, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45)
fanotify_mark$auto(0x0, 0x55, 0x9, r3, 0x0)
clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)

1m46.043655215s ago: executing program 2 (id=1202):
mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/events_async\x00', 0x141400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003e80)=""/238, 0xee)
r1 = socket(0xa, 0x2, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(r1, 0x2, 0x9, 0x6)
lsetxattr$auto(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='-\x00', &(0x7f0000003100), 0x7, 0xffffffff)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x2, 0x80000001, 0x4000000000df, 0xc59c, 0xffffffffffffffff, 0xf39c000000000)
close_range$auto(r2, 0xffffffffffffffff, 0x4242)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/srcutree/parameters/counter_wrap_check\x00', 0x40100, 0x0)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r3, r3, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa240, 0x0)
mmap$auto(0x5, 0x8, 0xdf, 0x9b72, r2, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(0x0, 0x0, 0x18)
getdents64$auto(0x0, 0x0, 0x41)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd0, 0xfffffffffffffffc, 0xfd72)
inotify_rm_watch$auto(0xffffffffffffffff, 0x1)
clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4)
r4 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
pread64$auto(r4, 0x0, 0x80, 0x6)
getsockopt$auto(r1, 0x29, 0x41, 0x0, 0x0)

1m45.86195941s ago: executing program 2 (id=1205):
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
socketpair$auto(0xfff, 0x5, 0x8000000000000000, 0x0)
statx$auto(r0, 0x0, 0x401016, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r1, 0x4, 0x7ff)
ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r1, 0x8, 0x6)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon16\x00', 0x40040, 0x0)
rename$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00')
ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r2 = epoll_create$auto(0x3e)
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)
r3 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
epoll_create$auto(0x20009)
epoll_create$auto(0x3e)
getsockopt$auto_SO_GET_FILTER(r3, 0x6, 0x1a, &(0x7f0000000000)='\x00', &(0x7f0000000040))
epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m44.36461889s ago: executing program 2 (id=1211):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r0, @ANYRESHEX], 0x2c}}, 0x80)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x101000000) (async)
mmap$auto(0x0, 0x400108, 0x100, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
sysfs$auto(0x2, 0x3, 0x0) (async)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async)
fsmount$auto(0x4, 0x0, 0x200003)
userfaultfd$auto(0x1)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
splice$auto(0xffffffffffffffff, &(0x7f00000000c0), r2, &(0x7f0000000140)=0x2, 0x4, 0x9) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18200000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x480c1}, 0x40000)
r4 = socket(0x29, 0x3, 0x190)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x5}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0xc5, 0x4008) (async, rerun: 32)
socket(0x1, 0x1, 0x1) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84) (async)
socket(0x1f, 0x801, 0x106) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxe\x00', 0x10200, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)

1m43.588657928s ago: executing program 32 (id=1211):
r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff)
sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00 \x00\x00', @ANYRES16=r0, @ANYRESHEX], 0x2c}}, 0x80)
r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0)
mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x101000000) (async)
mmap$auto(0x0, 0x400108, 0x100, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
sysfs$auto(0x2, 0x3, 0x0) (async)
r3 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async)
fsmount$auto(0x4, 0x0, 0x200003)
userfaultfd$auto(0x1)
socket(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
splice$auto(0xffffffffffffffff, &(0x7f00000000c0), r2, &(0x7f0000000140)=0x2, 0x4, 0x9) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18200000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x480c1}, 0x40000)
r4 = socket(0x29, 0x3, 0x190)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x5}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0xc5, 0x4008) (async, rerun: 32)
socket(0x1, 0x1, 0x1) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0xa, 0x801, 0x84) (async)
socket(0x1f, 0x801, 0x106) (async)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxe\x00', 0x10200, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x10, 0x2, 0x4) (async)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)

1m31.717020668s ago: executing program 1 (id=1235):
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r1, 0x2284, r0)

1m31.36237196s ago: executing program 1 (id=1236):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x22001, 0x0)
keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x2, 0xd76, 0x7, 0xc)
keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x2, 0x9, 0x7, 0x3)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x1e, 0x2, 0x0)
move_pages$auto(0x1, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000)
getsockopt$auto(r0, 0x10f, 0x7f, 0x0, 0x0)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0xfff, 0x3, 0x1, 0xfff)
read$auto(r1, 0x0, 0x1f40)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)="50a54f6ba2eabf1c3641084884", 0xfffffffffffffffe)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
keyctl$auto_KEYCTL_SET_REQKEY_KEYRING(0xe, 0x9, 0x6, 0x3, 0x6)
bpf$auto(0xa, &(0x7f00000000c0)=@query={@target_ifindex, 0x4, 0x0, 0x2, 0x3, @count=0x10000, 0x0, 0xd8, 0x0, 0x56a, 0x1}, 0x91)
write$auto(0x3, 0x0, 0x100082)

1m30.817666344s ago: executing program 1 (id=1237):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0xa, 0x2, 0x88)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyvf\x00', 0x40000, 0x0)
ioctl$auto_TIOCSWINSZ2(r3, 0x5414, &(0x7f0000000200)="4ae419f9503e0010c7bfb64139717fbb009377b2905934ce0c8bd886b5ae2c3156a602da680a4bc505c8f3f924ac6143798ca0b5aa68337689c21dad6e12130c51f67d7d2738d47ce7bd4fcec6013ba911711c85bea80bcd76dcc65cdef8354ff6cf3464d33d04ed40877107346f2a882f4dd6f0fa3b079ce86e00b7bccf768e97e041b3e672e5a93b21ce4147b6af983cec10112390a0ddacb437814dc1e5f3b3066ac4677a138da9bfab8d13d7db69122e63e8aefe2da0448b5f")
mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x7fee)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/sg/def_reserved_size\x00', 0x8000, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000100)="636a110bbe5c73a2d44209f61f6d3f071dc599fa2dc04bed15a059c4656de0caa0dde1454c3b92e142313e88083891591eecca3a4121cd637de7fdea70ee1613b1ad818f147fa916d04c1d467aafeffb3550127282dd158696685b1ccb9ea810410ba46a8b6496ae550a0413be255eeb7faac3f68ea332c96b9fe90671940fea08922d65105ebf31cfa11f7c84b6f3", 0x8f)
ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4001af84, &(0x7f0000000000)={0x6})
setsockopt$auto(r2, 0x1, 0xffffffff, &(0x7f0000000000)='!\x00', 0x4)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r6 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0)
r7 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r7, 0x1, r1, 0x0)

1m30.299493578s ago: executing program 1 (id=1241):
mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/events_async\x00', 0x141400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003e80)=""/238, 0xee)
r1 = socket(0xa, 0x2, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(r1, 0x2, 0x9, 0x6)
lsetxattr$auto(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='-\x00', &(0x7f0000003100), 0x7, 0xffffffff)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x2, 0x80000001, 0x4000000000df, 0xc59c, 0xffffffffffffffff, 0xf39c000000000)
close_range$auto(r2, 0xffffffffffffffff, 0x4242)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/srcutree/parameters/counter_wrap_check\x00', 0x40100, 0x0)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r3, r3, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa240, 0x0)
mmap$auto(0x5, 0x8, 0xdf, 0x9b72, r2, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(0x0, 0x0, 0x18)
getdents64$auto(0x0, 0x0, 0x41)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd0, 0xfffffffffffffffc, 0xfd72)
inotify_rm_watch$auto(0xffffffffffffffff, 0x1)
clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x80, 0x6)

1m30.165468386s ago: executing program 1 (id=1242):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
msgctl$auto_IPC_INFO(0xff, 0x3, &(0x7f0000000180)={{0x9, <r2=>0xffffffffffffffff, 0xee00, 0xda, 0x80000000, 0xf}, &(0x7f0000000040)=0xe, &(0x7f0000000140), 0x6, 0xffffffffffffa093, 0x0, 0x5, 0x7fffffff, 0x3, 0xa549, 0xce, @raw=0x101, @raw=0xc0e0})
ioprio_set$auto(0x0, r2, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x801, 0x84)
io_uring_setup$auto(0x4, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
ioctl$auto(r1, 0x2284, r0)

1m29.092574615s ago: executing program 1 (id=1244):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x50881, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x9, 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
getsockname$auto(r0, 0x0, 0x0)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x9)
r2 = socket(0x11, 0x2, 0x300)
sendfile$auto(0x1, r2, 0x0, 0x8fb5)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
r4 = setfsuid$auto(0xee00)
setreuid$auto(r4, 0x0)
sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04002f8008006b00", @ANYRES32, @ANYBLOB="5858606dc35d196156edd240403c455df677373ead5b474ddfcb767be4e648386d56a4f976a9ca7bccbbb4f3b0c5d390c2b5c5f2a960df9aebfd29b24329e7adc3de6c4d4699fe1132efc0e8dc1a2a208b4c5727efd0d94a1b700789d32742dbe6edad1617e263534609b0513cd9c41f40441337fb979636167b193ddaaef6ef432f93c3af7ff511ff674bfc7fdf56a9ea6dea4dd4129f335797d89aad464ea6c71bbb736b0bd2f9ce1f42ab49684f28de77ff9087e32c6c22eab57b71a034b7184a41602f44fc2f8bb5ac187af395d3301fceee4701aaec02422654e180000008003900", @ANYRES32=r4, @ANYBLOB="0c008b00000000004575000008000b00f1000000"], 0x278}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r5 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/usb/usbmon/13s\x00', 0x40040, 0x0)
r6 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0)
close_range$auto(r5, r6, 0x8000)
ioctl$auto__ctl_fops_dm_ioctl(r6, 0x1ff, 0x0)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_STOP_POLL(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r7, 0x800, 0x7f, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x40}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x6a62}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080)
sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4008000)
sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x71}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000890)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x6}, 0x3)

1m28.646152543s ago: executing program 33 (id=1244):
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x50881, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.3/driver_override\x00', 0xe2685, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x9, 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000)
getsockname$auto(r0, 0x0, 0x0)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x11, 0x3, 0x9)
r2 = socket(0x11, 0x2, 0x300)
sendfile$auto(0x1, r2, 0x0, 0x8fb5)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0)
write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef)
r4 = setfsuid$auto(0xee00)
setreuid$auto(r4, 0x0)
sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04002f8008006b00", @ANYRES32, @ANYBLOB="5858606dc35d196156edd240403c455df677373ead5b474ddfcb767be4e648386d56a4f976a9ca7bccbbb4f3b0c5d390c2b5c5f2a960df9aebfd29b24329e7adc3de6c4d4699fe1132efc0e8dc1a2a208b4c5727efd0d94a1b700789d32742dbe6edad1617e263534609b0513cd9c41f40441337fb979636167b193ddaaef6ef432f93c3af7ff511ff674bfc7fdf56a9ea6dea4dd4129f335797d89aad464ea6c71bbb736b0bd2f9ce1f42ab49684f28de77ff9087e32c6c22eab57b71a034b7184a41602f44fc2f8bb5ac187af395d3301fceee4701aaec02422654e180000008003900", @ANYRES32=r4, @ANYBLOB="0c008b00000000004575000008000b00f1000000"], 0x278}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r5 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/usb/usbmon/13s\x00', 0x40040, 0x0)
r6 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0)
close_range$auto(r5, r6, 0x8000)
ioctl$auto__ctl_fops_dm_ioctl(r6, 0x1ff, 0x0)
r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$auto_NFC_CMD_STOP_POLL(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r7, 0x800, 0x7f, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x40}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x6a62}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080)
sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4008000)
sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x71}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000890)
writev$auto(r0, &(0x7f0000000080)={0x0, 0x6}, 0x3)

1m28.131303621s ago: executing program 4 (id=1212):
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x361101, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0x5452, &(0x7f0000000080)={0x80, 0xbed0})
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = io_uring_setup$auto(0x401, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
ioctl$auto_MEMLOCK(r1, 0x40084d05, &(0x7f0000000000)={0xfffffffe, 0x8})
timer_gettime$auto(0x0, 0x0)
socket(0x2, 0x1, 0x106)
read$auto(0xffffffffffffffff, 0x0, 0x10)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0)
socket(0x1d, 0x2, 0x6)
socket(0xa, 0x3, 0x100)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})
syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x62a8, 0x9, 0x9, 0xfd, r0, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x2)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)

1m26.999293789s ago: executing program 4 (id=1248):
mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/events_async\x00', 0x141400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003e80)=""/238, 0xee)
r1 = socket(0xa, 0x2, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(r1, 0x2, 0x9, 0x6)
lsetxattr$auto(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='-\x00', &(0x7f0000003100), 0x7, 0xffffffff)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x2, 0x80000001, 0x4000000000df, 0xc59c, 0xffffffffffffffff, 0xf39c000000000)
close_range$auto(r2, 0xffffffffffffffff, 0x4242)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/srcutree/parameters/counter_wrap_check\x00', 0x40100, 0x0)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r3, r3, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa240, 0x0)
mmap$auto(0x5, 0x8, 0xdf, 0x9b72, r2, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(0x0, 0x0, 0x18)
getdents64$auto(0x0, 0x0, 0x41)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd0, 0xfffffffffffffffc, 0xfd72)
inotify_rm_watch$auto(0xffffffffffffffff, 0x1)
clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x80, 0x6)

1m26.836416914s ago: executing program 4 (id=1249):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80002, 0x73)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
timer_create$auto(0x3, 0x0, 0x0)
rt_sigprocmask$auto(0x7, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0)
mmap$auto(0x0, 0x200000000000005, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
socket(0xa, 0x1, 0x84)
socket(0x2a, 0x2, 0x8001)
syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x15, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x521201, 0x0)
r0 = gettid()
pidfd_open$auto(r0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/239, 0xef)
r2 = clone3$auto(&(0x7f0000000200)={0xdba, 0x4, 0x100000000, 0x0, 0x6, 0x3c17bc73, 0x4, 0x13c, 0xffff, 0x8000000000000001, 0x7fffffff}, 0x4)
prctl$auto(0x3e, 0x4, r2, 0xfffffffffffffffd, 0x9)
select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x990, 0x7219, 0x1, 0x948b, 0x4002a1, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x66, 0x80000001, 0x6, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x100010, r3, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/modalias\x00', 0x80500, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
read$auto(0x3, 0x0, 0x7fffffff)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0)

1m25.612960573s ago: executing program 4 (id=1254):
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv4\x00', 0x1, 0x0) (async, rerun: 64)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r1, 0x0) (async)
r3 = socket(0x10, 0x2, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4)
read$auto(r4, &(0x7f0000000000)='\x00', 0x91e2) (async)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon6\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r5 = socket(0x10, 0x2, 0xc)
r6 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000500)="64a2fbcf14f587f6169024632db571fa0ae3ac62f563318854bb33cec23dfa28381fb839da96d033e504e69f116ec53ce1a50a88968f8d74e9117c8e464077751edcf478c9d643fff05ac53cd725ab5aeccd2377b75d1d08c513977972ec9f6a95b957d808330f5d325f14243a8a5afbb945977f9dc4e2db0fe06ac49f0e8f8b037b18fe275c42f46a8534a945c2c4fb68d84a710d9745f3ecc93efbd5d9bac3afc46355956c38b747100e1e75ff25c365322264c42d2059c34ea00d7f0710207ac32e862f4f54f5a4e513395a2496e7b0ff38cef1f21fe1211c575b6975c9d3d2fd3597251f62302c61359e9c") (async)
write$auto(r3, &(0x7f0000000000)='\x04Y', 0xfdef)
setsockopt$auto_SO_WIFI_STATUS(r0, 0x800, 0x29, &(0x7f00000000c0)='nl80211\x00', 0xb)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000600)='\x00', 0x7) (async)
io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x2)
write$auto_seq_oss_f_ops_seq_oss(r7, &(0x7f0000000040)="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", 0xfe04) (async)
mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) (async)
r8 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000640)=0x5)
ioctl$auto_BTRFS_IOC_DEFRAG(r8, 0x50009402, &(0x7f0000000680)={@raw=0x2, "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"})

1m25.037336417s ago: executing program 34 (id=1254):
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv4\x00', 0x1, 0x0) (async, rerun: 64)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 64)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r1, 0x0) (async)
r3 = socket(0x10, 0x2, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4)
read$auto(r4, &(0x7f0000000000)='\x00', 0x91e2) (async)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon6\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
r5 = socket(0x10, 0x2, 0xc)
r6 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000500)="64a2fbcf14f587f6169024632db571fa0ae3ac62f563318854bb33cec23dfa28381fb839da96d033e504e69f116ec53ce1a50a88968f8d74e9117c8e464077751edcf478c9d643fff05ac53cd725ab5aeccd2377b75d1d08c513977972ec9f6a95b957d808330f5d325f14243a8a5afbb945977f9dc4e2db0fe06ac49f0e8f8b037b18fe275c42f46a8534a945c2c4fb68d84a710d9745f3ecc93efbd5d9bac3afc46355956c38b747100e1e75ff25c365322264c42d2059c34ea00d7f0710207ac32e862f4f54f5a4e513395a2496e7b0ff38cef1f21fe1211c575b6975c9d3d2fd3597251f62302c61359e9c") (async)
write$auto(r3, &(0x7f0000000000)='\x04Y', 0xfdef)
setsockopt$auto_SO_WIFI_STATUS(r0, 0x800, 0x29, &(0x7f00000000c0)='nl80211\x00', 0xb)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
write$auto(r5, &(0x7f0000000600)='\x00', 0x7) (async)
io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x2)
write$auto_seq_oss_f_ops_seq_oss(r7, &(0x7f0000000040)="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", 0xfe04) (async)
mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) (async)
r8 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000640)=0x5)
ioctl$auto_BTRFS_IOC_DEFRAG(r8, 0x50009402, &(0x7f0000000680)={@raw=0x2, "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"})

1m12.854431658s ago: executing program 6 (id=1255):
mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/events_async\x00', 0x141400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003e80)=""/238, 0xee)
r1 = socket(0xa, 0x2, 0x0)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(r1, 0x2, 0x9, 0x6)
lsetxattr$auto(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='-\x00', &(0x7f0000003100), 0x7, 0xffffffff)
ioperm$auto(0x7, 0x6, 0x2)
mmap$auto(0x2, 0x80000001, 0x4000000000df, 0xc59c, 0xffffffffffffffff, 0xf39c000000000)
close_range$auto(r2, 0xffffffffffffffff, 0x4242)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/srcutree/parameters/counter_wrap_check\x00', 0x40100, 0x0)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r3, r3, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa240, 0x0)
mmap$auto(0x5, 0x8, 0xdf, 0x9b72, r2, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(0x0, 0x0, 0x18)
getdents64$auto(0x0, 0x0, 0x41)
socket(0x2, 0x3, 0x2)
setsockopt$auto(0x3, 0x0, 0xd0, 0xfffffffffffffffc, 0xfd72)
inotify_rm_watch$auto(0xffffffffffffffff, 0x1)
clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4)
pread64$auto(0xffffffffffffffff, 0x0, 0x80, 0x6)

1m12.657548393s ago: executing program 6 (id=1281):
mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000)
socket(0x1d, 0x3, 0x1)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x400000, 0x0, 0x1]}, 0x1fe, 0x81)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media4\x00', 0xa200, 0x0)
ioctl$auto_media_devnode_fops_mc_devnode(r1, 0x9, &(0x7f0000000040)="d1c3cb92e61942c6e6a737093b55449cb978b290090861161da7363b76fee7b9b4ed1e09904c49f7664f9fb01bb467e384f26e2c9feb8151748eb91647357185")
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

1m10.809212352s ago: executing program 6 (id=1291):
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1e, 0xa, 0xffffffff)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8)
listen$auto(0x3, 0x83)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0xb2)
fanotify_mark$auto(0x0, 0x1, 0x3a, r0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x32280, 0x140)
close_range$auto(0x2, 0x8, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x77fc83, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
read$auto_uhid_fops_uhid(0xffffffffffffffff, 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sysfs$auto(0x2, 0x100000000000036, 0x0)
r2 = fsopen$auto(0x0, 0x1)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xa, 0x0)
epoll_create$auto(0x100008)
socket(0x2c, 0x3, 0x0)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = epoll_create$auto(0x1000)
epoll_ctl$auto(r3, 0x1, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1m10.27007046s ago: executing program 35 (id=1291):
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x1e, 0xa, 0xffffffff)
setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8)
listen$auto(0x3, 0x83)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0xb2)
fanotify_mark$auto(0x0, 0x1, 0x3a, r0, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x32280, 0x140)
close_range$auto(0x2, 0x8, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x77fc83, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
read$auto_uhid_fops_uhid(0xffffffffffffffff, 0x0, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sysfs$auto(0x2, 0x100000000000036, 0x0)
r2 = fsopen$auto(0x0, 0x1)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xa, 0x0)
epoll_create$auto(0x100008)
socket(0x2c, 0x3, 0x0)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = epoll_create$auto(0x1000)
epoll_ctl$auto(r3, 0x1, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5.413140065s ago: executing program 0 (id=1564):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0xc, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0)
read$auto(0x3, 0x0, 0x80)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x100000001)
io_uring_setup$auto(0x6, 0x0)
read$auto(0x3, 0x0, 0x80)
close_range$auto(0x2, 0xa, 0x0)
bpf$auto(0x2, &(0x7f00000001c0)=@query={@target_fd, 0x1, 0x183, 0x9, 0x63, @prog_cnt=0xfd, 0x0, 0x6, 0x5, 0x4000009, 0x9}, 0xc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ima/parameters/ahash_bufsize\x00', 0x62, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101300, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff)
open(0x0, 0x1e7d43, 0xa6)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa0340, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x801, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2202, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)

5.073157144s ago: executing program 7 (id=1568):
mmap$auto(0x0, 0x20009, 0xdf, 0x18, 0x401, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x10, 0x3, 0xa) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) (async)
sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4309b5d92c8ed70c}, 0xc, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="1cf6ef00", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf25380000000600f70007030000"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000000)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 32)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32)
ioctl$auto(0xffffffffffffffff, 0x402c542d, r1)
r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0)
ioctl$auto_FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) (async)
sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) (async)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4008100) (async)
sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x400c810) (async)
mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) (async)
rseq$auto(0x0, 0x1a, 0x5d7, 0x2)
mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x27ffc)
r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) (async, rerun: 64)
r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x800, 0x0) (rerun: 64)
read$auto_proc_single_file_operations_base(r4, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES8=r3, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8850) (async)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/scsi/drivers/st/fixed_buffer_size\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x3) (async, rerun: 32)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (rerun: 32)

4.356889185s ago: executing program 7 (id=1570):
r0 = eventfd$auto(0x7f)
read$auto_vhci_fops_hci_vhci(r0, &(0x7f00000003c0)=""/54, 0xfffffffffffffcb4)
fstat$auto(0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x801, 0x100)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x8000000000000001, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff25, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x1d6]}, 0x1fe, 0x9)
socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
setsockopt$auto(0x3, 0x114, 0x1, 0xffffffffffffffff, 0x3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000f908000c00018008000f08ac1e0001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

4.115981997s ago: executing program 0 (id=1571):
setrlimit$auto(0x0, &(0x7f0000000040)={0x3346, 0xffffffffffffffff})
mprotect$auto(0x110c230000, 0x1, 0x2)
mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0)
timer_create$auto(0x3, 0x0, 0x0)
timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x8}, {0x0, 0x87}}, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0xa, 0x2, 0x88)
bpf$auto(0x0, 0x0, 0x10)
r1 = openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
read$auto_supply_map_fops_(r1, &(0x7f0000000080)=""/78, 0x4e)
close_range$auto(0x2, 0x8, 0x0)
shmget$auto(0x8, 0x10565, 0x7ff)
shmat$auto(0xfffffffe, &(0x7f0000000580)='\x03\x01', 0xc6e)
sync_file_range$auto(r0, 0xfffffffffffffe95, 0x9, 0x9)
shmctl$auto(0x40010003, 0x83, 0xfffffffffffffffd)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x401001, 0x0)
mbind$auto(0xb, 0x1ff, 0x6, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x9)
ioctl$auto_dvb_demux_fops_dmxdev(r2, 0xc0106f32, 0x0)
mmap$auto(0x9, 0x6, 0x6, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x1, 0x20084)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$auto_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x7f, 0x0, 0xad4)

4.01283425s ago: executing program 5 (id=1572):
openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x10082, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x600000, 0x0)
open(0x0, 0x80400, 0xb5d1af1605322dd2)
openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x22000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040884)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x4da}, 0x6, 0x0, 0x7fffffffffffffff, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3.904297766s ago: executing program 7 (id=1573):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = fanotify_init$auto(0x5, 0x2000000000002)
socket$nl_generic(0x10, 0x3, 0x10)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(0x3, 0xff05, 0x0)
sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
io_uring_setup$auto(0xcb, 0x0)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
fanotify_init$auto(0x1, 0x2)
io_uring_register$auto(0x2, 0xe, 0x0, 0x20)
io_uring_setup$auto(0x7fff, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/devices\x00', 0x0, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/9, 0x9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/rcutree/parameters/rcu_resched_ns\x00', 0x20000, 0x0)
read$auto(r3, 0x0, 0x20)
bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@bpf_attr_5={@target_fd=r2, r1, 0x7, 0x9, r3, @relative_fd=r0, 0x7fffffffffffffff}, 0x95e)
clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4100, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x207, 0x4008)

3.722398133s ago: executing program 5 (id=1574):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xc004ae02, 0x88)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0xfffffffe, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0xfffffffc}, 0x3, 0x3, 0x4, @inferred, @integer={0x1, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada8dbdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"})
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae88, 0x88)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) (async)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r1, 0xc004ae02, 0x88) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0xfffffffe, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0xfffffffc}, 0x3, 0x3, 0x4, @inferred, @integer={0x1, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada8dbdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, r3) (async)
ioctl$auto_KVM_CREATE_VM(r0, 0xc008ae88, 0x88) (async)

3.360428947s ago: executing program 3 (id=1575):
r0 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0xea7)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000200)=0x9)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
ioctl$auto_BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0)
mmap$auto(0xfffffffffffffff9, 0x20009, 0xdf, 0xeb1, r0, 0x8000)
setsockopt$auto(0x3, 0x4, 0xffffffc0, 0x0, 0x2)
socket(0x25, 0x1, 0x84)
mincore$auto(0x4, 0x75, &(0x7f0000000000)='/dev/rtc0\x00')

3.324579281s ago: executing program 0 (id=1576):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async)
mmap$auto(0x2, 0x2030005, 0x807fffffff, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async)
sendmmsg$auto(0x3, 0x0, 0xe68, 0x7000000)
socket(0xa, 0x1, 0x6) (async)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async)
setsockopt$auto(0x3, 0x60, 0x0, 0x0, 0x5) (async)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) (async)
mmap$auto(0x2, 0x7, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
close_range$auto(r0, 0xffffffffffffffff, 0x6) (async)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = io_uring_setup$auto(0x59, 0x0)
open(0x0, 0x64842, 0x0)
io_uring_setup$auto(0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socketcall$auto(0x48000, 0x0)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$auto(0x3, 0xae41, 0xffffffffffffffff)
ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xc9}) (async)
timer_create$auto(0xfffffffd, 0x0, 0x0) (async)
timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0x10080c, 0x18007}, {0x8}}, 0x0)

2.799562395s ago: executing program 7 (id=1577):
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
r0 = socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080)
sendmsg$auto_NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2d0, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_PREV_BSSID={0xf8, 0x4f, "5c72bd9eacbf81415425130650843834b63dfa3626b53ca76eabd11f156f00eefbcf7eb3b476490f0a23da0059a527989317388c27bdd79abb72d161d7f1e357fe26ee6f3b40db3e1ddf25121283b463ab02495cabb23f8783ca9d3649ac6cbd2cc115a3209128918d210e0f8fab77f2b63a61814e8d1f0513ddb97d828d8ae0e05ae52a23c4807a4e4d3f21ba878dd7a4af5ed0a85cae6a0438f7bae36d19ac4717825aaec90f7839b1a60eec8a49b3ee6f2f12dc1547205355f890b1a8c9b5ba2ec43aff513a8354756e3dd4b470f8d226eb9d344d18d5181f96c5f2b8c618f204fc3b43836fd7056529278bcbf289e47fecde"}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x52, 0x2, "a6305a96174fce698ef009eda5fb3e664969108fbcd83aef03deb36af69233d4b3580eafeffa65bd7bf68ea7f7b0d4fc9de0119c39c03d375b4eca928af90796d55ec36e719f316191369b2a9c37"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0xcab0}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x35, 0xbb, "91e1a1c310d3a0b275819b9a813a3205fb444e52025716d30cc8accd6c68ed23ede16bf74c9345c45352b0666fe93753cc"}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_MNTR_FLAGS={0xf0, 0x17, "dce7bc2e4d268fb0f392c43676ba9a02b66e25fdffa115f5159016e4226da16b06d948101e8677d0cf2161e2b4829ef9909d06fe5808894b4056b2f7ced5841ab968f08c57ff0105b213ea538892a8d3505195320fde227651c5c5a4453673b1b95c7b6a21d42df272b6aa23e74f6eb9d004fa34db6f6bd88c406b07ad703d0ed663a35c574ad528282333b9a4ea3395930a54995391ad91b278a23f5b672299274b26472b37c1bca6578807c90df1bc31e6d31ea4b259235f772c78bbaaaaf50db27a6122c13af6d3d5f2a191d09d938e875428be91a5be5b3a8cab22dde2693ae43d91e46268403ec9c515"}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vcan0\x00'}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x1}, 0xc814)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
clock_gettime$auto(0x6, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)

2.440174551s ago: executing program 5 (id=1578):
pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb</\x93\xc9\xb8\xdaB\xcc\xc9\xaaQ\xees\xc7\xf4\x14H\x98')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700045000000180001801400240091797a5f74756e000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802)
msgctl$auto_IPC_SET(0x94de, 0x1, &(0x7f0000000400)={{0xc, 0x0, <r2=>0xffffffffffffffff, 0x1, 0x1, 0x6, 0xb8d}, &(0x7f0000000300)=0x70, &(0x7f00000003c0)=0x7f, 0xe, 0xb, 0x8, 0x100, 0x3, 0x7, 0x2, 0x1})
setresgid$auto(0x81, 0x800000a0, r2)
setgroups$auto(0x7, &(0x7f0000000540)=0xffff5687)
msgctl$auto_IPC_STAT(0x7, 0x2, &(0x7f0000000080)={{0xf, <r3=>0xee01, 0xee01, 0x200, 0x3ff, 0x1, 0x8}, &(0x7f0000000000)=0x89, &(0x7f0000000040)=0x1, 0x10001, 0xb, 0xcbd5, 0x1, 0x5, 0x8, 0xae3, 0x800, @inferred=0xffffffffffffffff, @raw=0x6})
setresuid$auto(r3, r3, 0x8080)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01032dbd70007f0000001100fffca6f8d455a672ddcf79bdd727cc29af9521efd62dfb771e6a9d75dd3817284c1d271569e835837c8f8d76ecf2ad37218cbf36f18ce5ce54c9bc5ee52ac075f1a58a1aa87e7fe384aa489dbce4c14f08166cf0"], 0x14}}, 0x400c0)
r4 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0xcc5, 0x0)
utimensat$auto(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38)
ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000740)={0x9, @raw, @inferred=r0, 0x101, 0xadc, '\x00', {0xffffffffffffffff, 0xa8, 0x6, 0xffffffffffffffff, r2, 0x7, 0x9, 0x2, {0x2, 0x1}, {0x9, 0x8}, {0x396, 0x3}, 0x4, 0x375c, 0x7, 0x8, 0x7, 0x14, 0x485, 0x9, 0xff80, 0x6, '\x00', 0x0, 0x6, 0x9, 0x7}})
setgroups$auto(0xfffffffd, &(0x7f0000000480)=0x6)
setfsuid$auto(0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0)

2.437535121s ago: executing program 3 (id=1579):
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
r0 = socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
setsockopt$auto(0x400000000000003, 0x4, 0xc8, 0x0, 0x563)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r1, r1, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi20\x00', 0x6aa01, 0x0)
ioctl$auto(r2, 0xc0585611, r2)
socket(0x18, 0xa, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000300)=""/251, 0xfb)
socket(0x2, 0x1, 0x0)
socket(0xa, 0x3, 0x3a)
ioctl$auto(0x1, 0x894c, 0x8)
eventfd$auto(0x0)
read$auto(0x4000000003, 0x0, 0x0)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, 0x0, 0x55)
getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x101, 0x38, &(0x7f0000000000)='nl80211\x00', &(0x7f0000000080)=0x401)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
msync$auto(0x0, 0x2000000005, 0x6)

2.272629149s ago: executing program 5 (id=1580):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x68742, 0x0)
write$auto(r0, 0x0, 0x80000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x40, 0x0, 0x800008a)
r1 = pidfd_open$auto(0x1, 0x0)
setns(r1, 0x20000000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2345c0, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x5a7c)
sync_file_range$auto(r2, 0x7, 0x3d, 0x2)
mmap$auto(0x101, 0x100000000400008, 0x40000000000005, 0x9b72, 0x2, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram7/queue/chunk_sectors\x00', 0x14800, 0x0)
close_range$auto(0x0, 0x5, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r3 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mmap$auto(0x0, 0xe983, 0x400000000000dc, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101401, 0x0)
mmap$auto(0x200000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x4, 0xffffffffffff0005, 0x17)
prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
madvise$auto(0x0, 0x200007, 0x8)

2.150423896s ago: executing program 0 (id=1581):
r0 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8)
mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x1, 0x2, 0x3)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r1 = prctl$auto(0x3e, 0x21, 0x0, 0x9, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto_UDF_GETEABLOCK(r0, 0x80086c41, &(0x7f00000000c0)=&(0x7f0000000200)="71c7d41ebf9652a8face04deb66d43777aef3a88d26764ccc5092f811f48c19fa55a1dcd16ae68e5d1d90070ba804a6f55b65e5bca9b5b5841b0894200d294590b22344ad27da95c6f830cc54421a2f96d2da7a66e457f4c488531f361da5161591f42252bd2db99a2ad0bd3f76d5018d42e34be97c5147dcbe4761067ef3f67b647f6e6cf5b319a8c6aec10f6bc5c6d6dc48a463fcaf48a910b67584e6e04cd443549be709a97992df757d86c809c8ff26b0b9dc757e78ff9b60c89fa2c66467d87f3f8488f7e5ae9130a03b2827dfe09732fffd5ebb796579ad8f2122a25")
getrlimit$auto(0x3, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
getresgid$auto(&(0x7f0000000040)=0x7f, &(0x7f0000000180)=0x1ff, 0xfffffffffffffffc)
lseek$auto(0x3, 0xffffffffff800002, 0x10)
close_range$auto(0xffffffffffffffff, 0x8, 0x7)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x23, 0x2, 0x0)
socket(0x2, 0x1, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0)
openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@llc={0x1a, 0xfcfb, 0x9, 0x6, 0x0, 0xa0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x6a)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55)
write$auto(0x3, 0x0, 0xfdef)

1.999632368s ago: executing program 3 (id=1582):
r0 = eventfd$auto(0x7f)
read$auto_vhci_fops_hci_vhci(r0, &(0x7f00000003c0)=""/54, 0xfffffffffffffcb4)
fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0xffc, 0x20000000007, 0x939f, 0x0, 0xee01, 0x0, 0x6, 0x3, 0x80000000000005, 0xc0f, 0x1, 0x7fd, 0x92b8, 0x7, 0x800, 0x7})
r1 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NFSD_CMD_THREADS_SET(r1, 0x0, 0x400c001)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x801, 0x100)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x8000000000000001, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff25, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x1d6]}, 0x1fe, 0x9)
socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a)
setsockopt$auto(0x3, 0x114, 0x1, 0xffffffffffffffff, 0x3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000f908000c00018008000f08ac1e0001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

1.487160397s ago: executing program 3 (id=1583):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7ffd)
mmap$auto(0x0, 0xe982, 0xdf, 0x20000000000eb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x4a4283, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x7f95)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x3, 0x0)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/snd/pcmC1D0p\x00', 0x6100, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
r3 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0)
write$auto_safesetid_uid_file_fops_securityfs(r3, &(0x7f0000000b80)="650c485c555f31434b1ddec85a8d90591b9839485097fe99c871c9b7875a682ac146e78071ed382552be8de60bfe1472c734f98696d4fe8dd71fa1a415cabad25e22bf38826c23ca27f0d3e63a957835d9d3868bd65fe970cbf18f8694927a38818081f1206e4241f2d61f4ae1b93311bfd8d968629c0653c857c953a7d1353d582ca80a", 0x84)

1.28128038s ago: executing program 5 (id=1584):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x628181, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, 0x0, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
kill$auto(0xffffffffffffffff, 0x6)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2)
shmctl$auto_SHM_UNLOCK(0x8, 0xc, &(0x7f0000000200)={{0x4, <r5=>0xee01, 0xee01, 0x5, 0x9, 0x200}, 0xb, 0x1, 0x1e, 0xfffffffffffffffb, @raw=0x8, @inferred=0xffffffffffffffff, 0xe, 0x0, &(0x7f0000000100)="a538b49ab2fc5dd9a1bd710cb76a1be888157c026974", &(0x7f0000000140)="a7627a0f490e973dc9318fbfb4fa9290eb48c105dd4ad7e3fa499b4e6013d11a75b37f6f657ad43962503d3a32acb44b1cc871e9d7b04330e56ed4ea18bc1c36ffa10498f37d8e0a494e66281d84ca74477cc812fcd8db423aa1dfd4506d0ea3f2c0c86ea855d2d646104d49ed51f162cb2d77bb0b6e56c81a68329a14566d3ca292af059554dceef9fc74bdac7738c64bcfad0904c3"})
r6 = getsid$auto(0x0)
sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x37c, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}, @NL80211_ATTR_BSSID={0x52, 0xf5, "55225d3e26bd9383aa6a5540c635806b0122da347c54070a47531a9d3ebc3d5a5b1a56fc5e9fcf2bc88dbd9f8abbede7d728692452b0434ae103b4c108714b98893e4d9060091607488acbb6413f"}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xe7}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x260, 0x75, 0x0, 0x1, [@nested={0x1f4, 0x105, 0x0, 0x1, [@generic="41fc007600b5d068f09a4051f857bf692355538881241ca1348b8946e3ec62dd49162944db102dad04cf49bf5fc41e8f7a92c0c53b9a0f568294186d756f3f30d07d9c173e006fd87aeea4d2e666328ab96936563c143b20e939c67452302f89068c49f63c6e8ed75f492c7ba64a3fb6829c98b4cbdaa8c2edc56a67d94be30a9fcca3cacdde63ce9a388e55185bbfa07db46428d5cbbf14f3213994bfbce92c1cf9e13f73a47492fc723ce0cd658e12ad1d998e39075b85900511ec92dec212ac21fc0c5d7be09033044a3ee754f5948b4c9b14ce91ac8765ddaa26c1a23e802ba53f9fdaccb98f3382de7522753e54358f2e", @generic="ab08b732bcddaed657e4339e8b164a12c991ef814c8878293b68b2938a245877a72d299de40934d77df16c39a52d0e3be03ea4d74dde19d4ba6700664f8d05a119058a893caa92f1308d46cc07a8b954dddd8a4f34e7bffa0ff562542dc2eaa37dbc87c96fdbdaab3217e81a108be9f41f5065b318885bcf2e229c07f39d", @typed={0x8, 0x13, 0x0, 0x0, @uid=r5}, @generic="e9fd62e9edafb4610d8092c0167389b3b236fe6ca2fd4ad013cd07a4de289f2da40b32fd0c544b1a3265acf9d7d33f6ff810c6cfcf0f2c8bcf74a3587f202bd1234386b9d31b8eb68ea515379fd22eb4f24bf97a207f5db10511a26bbd9474", @nested={0x4, 0x12f}, @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="97961ed262182c1e25501d8a6d4fe8d08d275e600c35ce26d32f5fff987e", @generic="a533cfbdf94f5feb591e703d8eee56a611136b43625bd6da6ebe2727ff6c7f6bc4a47d5314f9df50fb731bb30a9720e87736b9830b9aba3cd291ff98d71f5fbf3a88b1a0e47b8623a51e"]}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x14, 0x131, 0x0, 0x1, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, @NL80211_ATTR_FRAME_MATCH={0x7a, 0x5b, "a6b5040aa3428c92ec5cb5798011827f150763c056457b0658dc3de37f895ab716be1bbde600749c7fe57d3454a602620cff0463aa26ce35ba99547b22508f957246f69b5fdea67b2fe246198122b4e71647aff55519183c14d70963d8617f1637d681021270d15d072f11f88d2ec3e9ac5e018372ce"}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4}]}, 0x37c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x7d, 0x9, 0x0)
r7 = socket(0x10, 0x2, 0x0)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0xa, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4)
sendmmsg$auto(r7, 0x0, 0x7, 0x8)

1.28055426s ago: executing program 3 (id=1585):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
msgctl$auto_IPC_INFO(0xff, 0x3, &(0x7f0000000180)={{0x9, <r2=>0xffffffffffffffff, 0xee00, 0xda, 0x80000000, 0xf}, &(0x7f0000000040)=0xe, &(0x7f0000000140), 0x6, 0xffffffffffffa093, 0x0, 0x5, 0x7fffffff, 0x3, 0xa549, 0xce, @raw=0x101, @raw=0xc0e0})
ioprio_set$auto(0x0, r2, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0)
write$auto(0x3, 0x0, 0xffd8)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
vmsplice$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1ff}, 0x8, 0x1)
ioctl$auto(r1, 0x2284, r0)

1.067776798s ago: executing program 3 (id=1586):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80)
socket(0x2a, 0xa, 0x9)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0)
ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, 0x0)
r4 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/bpf_offloaded_id\x00', 0x20082, 0x0)
writev$auto(r4, 0x0, 0x7)
r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0)
r6 = dup$auto(r5)
ioctl$auto_SCSI_IOCTL_DOORLOCK(r6, 0x5380, &(0x7f00000000c0)="33ca7089746618741c87ea79940a4243b98519a4b10cb3dc6438e684d3f8d726b013887e3581765d0d9919985a43f562f5f6b865333efb08fb4f5ed16c768f07ba9fd68be404ff55d20b69ab47271f62ea469ba032d3daadc6d540ddd0eb0e2a2dc661e8ce7bf6a11c064af53cc5f1a0b85a976f9e64c735be31fa5f37a5fc631694a7d84ee34e89cf5265a69cfe8d94bf8a5feaf619db22d8ab56298b685046b9a622d9")
sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, 0x0, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000280)=""/222, 0xde)
capset$auto(&(0x7f0000000180)={0x19980330}, 0x0)
r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r7, 0x401070cd, 0x5)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
r8 = socket(0x2, 0x80002, 0x73)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r8)
sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r9, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r10, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004850}, 0x20000400)
sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x110, r10, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe9, 0x2f, 0x0, 0x1, [@generic="b6b6c17c4b88f55610985aacf4eb06a607381739ecd4ea64048e261d1012ca7931422b5d06300677865dfee383718f811e481f95c0b1208ad5408df5cff01332ed894479a63cb59e795ab61a2c067d1ad90ca2c172a4961a5d97443556fecad0ab866dd59aff7be924f32b47cf3e80d80d7e0c3ac15159a860f97875b57e4bda9a02597e1d12a0b4929fa8e62988538c84f5b1d621d88495772692e5b8720551674228c2c89b470b2c621b6b7208a4fd7459b8f13b0410e870e03779684ab4ad00cc1873b01b2f8810718869dee437b40055da7673555c93ec6ea063f1e9fb1cb2d7c2195d"]}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x85}, @NL802154_ATTR_SCAN_DONE_REASON={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x4000)
ioctl$auto_BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)

863.768364ms ago: executing program 0 (id=1587):
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x1, &(0x7f00000000c0)={0xc41, 0x1, 0x4, @raw=0x3}})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, r0, 0x2)
socket(0x22, 0x2, 0x1)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x405, 0x8000)
connect$auto(0x3, 0x0, 0x55)
ioprio_set$auto(0x1, 0x0, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x800, 0x18)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
sendto$auto(r1, 0x0, 0xff, 0x8, 0x0, 0xe)
close_range$auto(0x2, 0x8, 0x0)
ioprio_get$auto(0x3, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xaece, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
listen$auto(0x3, 0x81)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40014)
kexec_load$auto(0xffffffff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x0, 0x8000, 0x403000}, 0x4)

625.196249ms ago: executing program 7 (id=1588):
pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb</\x93\xc9\xb8\xdaB\xcc\xc9\xaaQ\xees\xc7\xf4\x14H\x98')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700045000000180001801400240091797a5f74756e000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802)
msgctl$auto_IPC_SET(0x94de, 0x1, &(0x7f0000000400)={{0xc, 0x0, <r2=>0xffffffffffffffff, 0x1, 0x1, 0x6, 0xb8d}, &(0x7f0000000300)=0x70, &(0x7f00000003c0)=0x7f, 0xe, 0xb, 0x8, 0x100, 0x3, 0x7, 0x2, 0x1})
setresgid$auto(0x81, 0x800000a0, r2)
setgroups$auto(0x7, &(0x7f0000000540)=0xffff5687)
msgctl$auto_IPC_STAT(0x7, 0x2, &(0x7f0000000080)={{0xf, <r3=>0xee01, 0xee01, 0x200, 0x3ff, 0x1, 0x8}, &(0x7f0000000000)=0x89, &(0x7f0000000040)=0x1, 0x10001, 0xb, 0xcbd5, 0x1, 0x5, 0x8, 0xae3, 0x800, @inferred=0xffffffffffffffff, @raw=0x6})
setresuid$auto(r3, r3, 0x8080)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01032dbd70007f0000001100fffca6f8d455a672ddcf79bdd727cc29af9521efd62dfb771e6a9d75dd3817284c1d271569e835837c8f8d76ecf2ad37218cbf36f18ce5ce54c9bc5ee52ac075f1a58a1aa87e7fe384aa489dbce4c14f08166cf0"], 0x14}}, 0x400c0)
r4 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
r5 = prctl$auto(0x3e, 0x1, 0x0, 0xcc5, 0x0)
utimensat$auto(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4000000006, 0x40}, 0x38)
ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000740)={0x9, @raw, @inferred=r0, 0x101, 0xadc, '\x00', {0xffffffffffffffff, 0xa8, 0x6, 0xffffffffffffffff, r2, 0x7, 0x9, 0x2, {0x2, 0x1}, {0x9, 0x8}, {0x396, 0x3}, 0x4, 0x375c, 0x7, 0x8, 0x7, 0x14, 0x485, 0x9, 0xff80, 0x6, '\x00', 0x0, 0x6, 0x9, 0x7}})
setgroups$auto(0xfffffffd, &(0x7f0000000480)=0x6)
setfsuid$auto(0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0)

329.662384ms ago: executing program 0 (id=1589):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) (async)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
read$auto(r1, 0x0, 0x20) (async, rerun: 64)
mmap$auto(0x0, 0x80, 0x3, 0xeb1, r1, 0x10000000008000) (async, rerun: 64)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
mmap$auto(0x400000, 0x20009, 0x4000000000df, 0x10000000eb1, 0x401, 0x8000) (async)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x81, 0x8000) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async, rerun: 32)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0)
write$auto(r2, &(0x7f0000000700)='!dev_vhc&\x00', 0x9) (async)
mmap$auto(0x0, 0x3b, 0x3, 0xebd, 0xfffffffffffffffa, 0x80000001) (async)
getrandom$auto(0x0, 0x6000000, 0x3) (async)
r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
lsm_list_modules$auto(&(0x7f0000000080)=0x7ff, &(0x7f0000000100)=0x18000000, 0x9) (async)
ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) (async)
r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
poll$auto(&(0x7f0000002940)={r4, 0x100, 0x8}, 0x4, 0x8) (async, rerun: 64)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async)
r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r5, 0x4b72, r6) (async)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0)

269.373275ms ago: executing program 7 (id=1590):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
msgctl$auto_IPC_INFO(0xff, 0x3, &(0x7f0000000180)={{0x9, <r2=>0xffffffffffffffff, 0xee00, 0xda, 0x80000000, 0xf}, &(0x7f0000000040)=0xe, &(0x7f0000000140), 0x6, 0xffffffffffffa093, 0x0, 0x5, 0x7fffffff, 0x3, 0xa549, 0xce, @raw=0x101, @raw=0xc0e0})
ioprio_set$auto(0x0, r2, 0x81)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
vmsplice$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1ff}, 0x8, 0x1)
ioctl$auto(r1, 0x2284, r0)

0s ago: executing program 5 (id=1591):
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.0/status.15\x00', 0x20000, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = io_uring_setup$auto(0x89, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040))
read$auto_snd_ctl_f_ops_control(r1, &(0x7f0000000140)=""/172, 0xac)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0)
fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(r0, 0x16, &(0x7f0000000040)='/sys/kernel/tracing/dynamic_events\x00', &(0x7f0000000080)="37a49c785121197fc6753390650d9579c1959c3f35fcdafa92d8c4eb33475f31fa6ad1003ed2e78658bb561e7f4eb628cbff3b41674779aed0b8b4cc2e8e7c5710f9ae186b0bf57869e0148fb7964363473742b25e", 0x5)
ftruncate$auto(0x3, 0x700)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

c_noprof+0xca/0x910
[  327.919649][T10931]  should_failslab+0xc2/0x120
[  327.919672][T10931]  __kmalloc_noprof+0xeb/0x910
[  327.919688][T10931]  ? __pfx_aa_file_perm+0x10/0x10
[  327.919708][T10931]  ? kernfs_fop_write_iter+0x237/0x570
[  327.919733][T10931]  ? kernfs_fop_write_iter+0x237/0x570
[  327.919754][T10931]  ? __lock_acquire+0x436/0x2890
[  327.919767][T10931]  kernfs_fop_write_iter+0x237/0x570
[  327.919791][T10931]  do_iter_readv_writev+0x662/0x9e0
[  327.919813][T10931]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  327.919841][T10931]  vfs_writev+0x35f/0xde0
[  327.919860][T10931]  ? rcu_is_watching+0x12/0xc0
[  327.919885][T10931]  ? __pfx_vfs_writev+0x10/0x10
[  327.919903][T10931]  ? fdget_pos+0x2a2/0x370
[  327.919938][T10931]  ? __fget_files+0x20e/0x3c0
[  327.919963][T10931]  ? do_writev+0x132/0x340
[  327.919980][T10931]  do_writev+0x132/0x340
[  327.919999][T10931]  ? __pfx_do_writev+0x10/0x10
[  327.920028][T10931]  do_syscall_64+0xcd/0xf80
[  327.920044][T10931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.920060][T10931] RIP: 0033:0x7f2d3bf8f7c9
[  327.920074][T10931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.920088][T10931] RSP: 002b:00007f2d3ceb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  327.920103][T10931] RAX: ffffffffffffffda RBX: 00007f2d3c1e5fa0 RCX: 00007f2d3bf8f7c9
[  327.920114][T10931] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  327.920122][T10931] RBP: 00007f2d3c013f91 R08: 0000000000000000 R09: 0000000000000000
[  327.920131][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.920139][T10931] R13: 00007f2d3c1e6038 R14: 00007f2d3c1e5fa0 R15: 00007ffe92c1a198
[  327.920159][T10931]  </TASK>
[  330.467697][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1068'.
[  330.564065][ T5154] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13
[  330.705175][T11001] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1068'.
[  330.727678][T10997] bond0: (slave bond_slave_1): Releasing backup interface
[  331.604034][T11017] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1073'.
[  331.691004][T11019] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1073'.
[  333.308935][T11065] Invalid ELF header magic: != ELF
[  333.325642][T11066] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1080'.
[  335.676238][T11151] FAULT_INJECTION: forcing a failure.
[  335.676238][T11151] name failslab, interval 1, probability 0, space 0, times 0
[  335.709366][T11151] CPU: 0 UID: 0 PID: 11151 Comm: syz.1.1097 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  335.709406][T11151] Tainted: [L]=SOFTLOCKUP
[  335.709415][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  335.709429][T11151] Call Trace:
[  335.709443][T11151]  <TASK>
[  335.709453][T11151]  dump_stack_lvl+0x16c/0x1f0
[  335.709498][T11151]  should_fail_ex+0x512/0x640
[  335.709527][T11151]  ? kmem_cache_alloc_noprof+0x62/0x770
[  335.709562][T11151]  should_failslab+0xc2/0x120
[  335.709597][T11151]  kmem_cache_alloc_noprof+0x83/0x770
[  335.709625][T11151]  ? alloc_empty_file+0x55/0x1e0
[  335.709657][T11151]  ? alloc_empty_file+0x55/0x1e0
[  335.709681][T11151]  alloc_empty_file+0x55/0x1e0
[  335.709707][T11151]  alloc_file_pseudo+0x13a/0x230
[  335.709737][T11151]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  335.709763][T11151]  ? alloc_fd+0x471/0x7d0
[  335.709803][T11151]  sock_alloc_file+0x50/0x210
[  335.709841][T11151]  __sys_socket+0x1c0/0x260
[  335.709865][T11151]  ? fput+0x70/0xf0
[  335.709887][T11151]  ? __pfx___sys_socket+0x10/0x10
[  335.709913][T11151]  ? xfd_validate_state+0x61/0x180
[  335.709935][T11151]  ? __pfx_ksys_write+0x10/0x10
[  335.709975][T11151]  __x64_sys_socket+0x72/0xb0
[  335.710000][T11151]  ? lockdep_hardirqs_on+0x7c/0x110
[  335.710024][T11151]  do_syscall_64+0xcd/0xf80
[  335.710050][T11151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.710075][T11151] RIP: 0033:0x7f8f0938f7c9
[  335.710097][T11151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.710119][T11151] RSP: 002b:00007f8f0a2c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  335.710142][T11151] RAX: ffffffffffffffda RBX: 00007f8f095e5fa0 RCX: 00007f8f0938f7c9
[  335.710159][T11151] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  335.710174][T11151] RBP: 00007f8f09413f91 R08: 0000000000000000 R09: 0000000000000000
[  335.710188][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.710202][T11151] R13: 00007f8f095e6038 R14: 00007f8f095e5fa0 R15: 00007ffd1c66a838
[  335.710237][T11151]  </TASK>
[  336.103181][ T5154] Bluetooth: hci0: unexpected event 0x33 length: 136 > 10
[  336.216405][T11151] zswap: compressor 000 not available
[  341.931617][T11308] FAULT_INJECTION: forcing a failure.
[  341.931617][T11308] name failslab, interval 1, probability 0, space 0, times 0
[  341.969268][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.3.1122 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  341.969306][T11308] Tainted: [L]=SOFTLOCKUP
[  341.969315][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  341.969328][T11308] Call Trace:
[  341.969336][T11308]  <TASK>
[  341.969346][T11308]  dump_stack_lvl+0x16c/0x1f0
[  341.969387][T11308]  should_fail_ex+0x512/0x640
[  341.969415][T11308]  ? fs_reclaim_acquire+0xae/0x150
[  341.969439][T11308]  should_failslab+0xc2/0x120
[  341.969460][T11308]  __kmalloc_noprof+0xeb/0x910
[  341.969475][T11308]  ? tomoyo_encode2+0x100/0x3e0
[  341.969497][T11308]  ? tomoyo_encode2+0x100/0x3e0
[  341.969514][T11308]  tomoyo_encode2+0x100/0x3e0
[  341.969534][T11308]  tomoyo_encode+0x29/0x50
[  341.969551][T11308]  tomoyo_realpath_from_path+0x18f/0x6e0
[  341.969575][T11308]  tomoyo_check_open_permission+0x2ab/0x3c0
[  341.969593][T11308]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  341.969637][T11308]  ? do_raw_spin_lock+0x12c/0x2b0
[  341.969660][T11308]  tomoyo_file_open+0x6b/0x90
[  341.969673][T11308]  security_file_open+0x84/0x1e0
[  341.969692][T11308]  do_dentry_open+0x597/0x1590
[  341.969713][T11308]  ? security_inode_permission+0xbf/0x260
[  341.969732][T11308]  vfs_open+0x82/0x3f0
[  341.969749][T11308]  path_openat+0x2078/0x3140
[  341.969775][T11308]  ? __pfx_path_openat+0x10/0x10
[  341.969792][T11308]  ? getname_kernel+0x52/0x370
[  341.969807][T11308]  ? __asan_memcpy+0x3c/0x60
[  341.969826][T11308]  do_file_open_root+0x322/0x610
[  341.969847][T11308]  ? __pfx_do_file_open_root+0x10/0x10
[  341.969883][T11308]  ? __lock_acquire+0x436/0x2890
[  341.969898][T11308]  ? vsnprintf+0x331/0x11e0
[  341.969919][T11308]  file_open_root+0x2a7/0x450
[  341.969940][T11308]  ? __pfx_file_open_root+0x10/0x10
[  341.969958][T11308]  ? find_held_lock+0x2b/0x80
[  341.969976][T11308]  ? kernel_read_file_from_path_initns+0x17a/0x260
[  341.969998][T11308]  kernel_read_file_from_path_initns+0x189/0x260
[  341.970018][T11308]  ? __pfx_kernel_read_file_from_path_initns+0x10/0x10
[  341.970041][T11308]  _request_firmware+0x737/0x14e0
[  341.970063][T11308]  ? __pfx__request_firmware+0x10/0x10
[  341.970079][T11308]  ? _request_firmware+0x126/0x14e0
[  341.970097][T11308]  request_firmware+0x35/0x50
[  341.970112][T11308]  valid_regdb+0x184/0x590
[  341.970128][T11308]  ? __pfx_valid_regdb+0x10/0x10
[  341.970145][T11308]  reg_reload_regdb+0x11a/0x460
[  341.970161][T11308]  ? __pfx_reg_reload_regdb+0x10/0x10
[  341.970176][T11308]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  341.970193][T11308]  ? nl80211_pre_doit+0x1b0/0xb10
[  341.970213][T11308]  genl_family_rcv_msg_doit+0x209/0x2f0
[  341.970230][T11308]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  341.970244][T11308]  ? genl_get_cmd+0x194/0x580
[  341.970261][T11308]  ? bpf_lsm_capable+0x9/0x10
[  341.970278][T11308]  ? security_capable+0x7e/0x260
[  341.970294][T11308]  genl_rcv_msg+0x55c/0x800
[  341.970310][T11308]  ? __pfx_genl_rcv_msg+0x10/0x10
[  341.970324][T11308]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  341.970341][T11308]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[  341.970354][T11308]  ? __pfx_nl80211_post_doit+0x10/0x10
[  341.970379][T11308]  netlink_rcv_skb+0x158/0x420
[  341.970400][T11308]  ? __pfx_genl_rcv_msg+0x10/0x10
[  341.970414][T11308]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  341.970442][T11308]  ? netlink_deliver_tap+0x1ae/0xd30
[  341.970463][T11308]  genl_rcv+0x28/0x40
[  341.970475][T11308]  netlink_unicast+0x5aa/0x870
[  341.970498][T11308]  ? __pfx_netlink_unicast+0x10/0x10
[  341.970524][T11308]  netlink_sendmsg+0x8c8/0xdd0
[  341.970559][T11308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  341.970584][T11308]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  341.970606][T11308]  ____sys_sendmsg+0xa5d/0xc30
[  341.970622][T11308]  ? copy_msghdr_from_user+0x10a/0x160
[  341.970641][T11308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  341.970653][T11308]  ? preempt_schedule_thunk+0x16/0x30
[  341.970670][T11308]  ? try_to_wake_up+0xa67/0x1860
[  341.970691][T11308]  ___sys_sendmsg+0x134/0x1d0
[  341.970711][T11308]  ? __pfx____sys_sendmsg+0x10/0x10
[  341.970729][T11308]  ? futex_private_hash_put+0x160/0x1b0
[  341.970765][T11308]  __sys_sendmsg+0x16d/0x220
[  341.970783][T11308]  ? __pfx___sys_sendmsg+0x10/0x10
[  341.970800][T11308]  ? __x64_sys_futex+0x1e0/0x4c0
[  341.970827][T11308]  do_syscall_64+0xcd/0xf80
[  341.970841][T11308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.970857][T11308] RIP: 0033:0x7f5ad1b8f7c9
[  341.970870][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.970884][T11308] RSP: 002b:00007f5ad29f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  341.970897][T11308] RAX: ffffffffffffffda RBX: 00007f5ad1de5fa0 RCX: 00007f5ad1b8f7c9
[  341.970906][T11308] RDX: 00000000000000d0 RSI: 0000200000000580 RDI: 0000000000000004
[  341.970915][T11308] RBP: 00007f5ad1c13f91 R08: 0000000000000000 R09: 0000000000000000
[  341.970924][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  341.970932][T11308] R13: 00007f5ad1de6038 R14: 00007f5ad1de5fa0 R15: 00007ffd12aaa148
[  341.970951][T11308]  </TASK>
[  342.821450][T11308] ERROR: Out of memory at tomoyo_realpath_from_path.
[  342.929910][T11312] FAULT_INJECTION: forcing a failure.
[  342.929910][T11312] name failslab, interval 1, probability 0, space 0, times 0
[  342.930206][T11308] syz.3.1122 (11308) used greatest stack depth: 19688 bytes left
[  342.981463][T11312] CPU: 0 UID: 0 PID: 11312 Comm: syz.3.1122 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  342.981499][T11312] Tainted: [L]=SOFTLOCKUP
[  342.981507][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  342.981520][T11312] Call Trace:
[  342.981527][T11312]  <TASK>
[  342.981536][T11312]  dump_stack_lvl+0x16c/0x1f0
[  342.981576][T11312]  should_fail_ex+0x512/0x640
[  342.981603][T11312]  ? kmem_cache_alloc_noprof+0x62/0x770
[  342.981635][T11312]  should_failslab+0xc2/0x120
[  342.981666][T11312]  kmem_cache_alloc_noprof+0x83/0x770
[  342.981692][T11312]  ? __pfx_acct_collect+0x10/0x10
[  342.981720][T11312]  ? taskstats_exit+0x654/0xbe0
[  342.981756][T11312]  ? taskstats_exit+0x654/0xbe0
[  342.981783][T11312]  taskstats_exit+0x654/0xbe0
[  342.981817][T11312]  ? __pfx_taskstats_exit+0x10/0x10
[  342.981850][T11312]  ? exit_signals+0x388/0xb00
[  342.981881][T11312]  do_exit+0x5e4/0x2bd0
[  342.981910][T11312]  ? __pfx_do_exit+0x10/0x10
[  342.981931][T11312]  ? do_raw_spin_lock+0x12c/0x2b0
[  342.981956][T11312]  ? find_held_lock+0x2b/0x80
[  342.981988][T11312]  do_group_exit+0xd3/0x2a0
[  342.982012][T11312]  get_signal+0x2671/0x26d0
[  342.982053][T11312]  ? __pfx_get_signal+0x10/0x10
[  342.982084][T11312]  ? do_futex+0x122/0x350
[  342.982112][T11312]  arch_do_signal_or_restart+0x8f/0x7a0
[  342.982145][T11312]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  342.982184][T11312]  ? __pfx___x64_sys_futex+0x10/0x10
[  342.982217][T11312]  exit_to_user_mode_loop+0x8c/0x540
[  342.982248][T11312]  do_syscall_64+0x4ee/0xf80
[  342.982272][T11312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.982294][T11312] RIP: 0033:0x7f5ad1b8f7c9
[  342.982313][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.982334][T11312] RSP: 002b:00007f5ad29d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  342.982356][T11312] RAX: fffffffffffffe00 RBX: 00007f5ad1de6098 RCX: 00007f5ad1b8f7c9
[  342.982369][T11312] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ad1de6098
[  342.982384][T11312] RBP: 00007f5ad1de6090 R08: 0000000000000000 R09: 0000000000000000
[  342.982395][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.982407][T11312] R13: 00007f5ad1de6128 R14: 00007ffd12aaa060 R15: 00007ffd12aaa148
[  342.982437][T11312]  </TASK>
[  343.753693][ T5154] Bluetooth: hci2: ACL packet too small
[  344.426774][T11332] FAULT_INJECTION: forcing a failure.
[  344.426774][T11332] name failslab, interval 1, probability 0, space 0, times 0
[  344.440864][T11332] CPU: 1 UID: 0 PID: 11332 Comm: syz.0.1126 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.440903][T11332] Tainted: [L]=SOFTLOCKUP
[  344.440912][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  344.440927][T11332] Call Trace:
[  344.440935][T11332]  <TASK>
[  344.440944][T11332]  dump_stack_lvl+0x16c/0x1f0
[  344.440988][T11332]  should_fail_ex+0x512/0x640
[  344.441014][T11332]  ? __kmalloc_noprof+0xca/0x910
[  344.441044][T11332]  should_failslab+0xc2/0x120
[  344.441081][T11332]  __kmalloc_noprof+0xeb/0x910
[  344.441106][T11332]  ? lsm_blob_alloc+0x68/0x90
[  344.441146][T11332]  ? lsm_blob_alloc+0x68/0x90
[  344.441178][T11332]  lsm_blob_alloc+0x68/0x90
[  344.441213][T11332]  security_prepare_creds+0x2f/0x270
[  344.441249][T11332]  prepare_creds+0x5d6/0x940
[  344.441279][T11332]  set_current_groups+0x15/0xd0
[  344.441306][T11332]  __do_sys_setgroups+0x3e0/0x4f0
[  344.441348][T11332]  do_syscall_64+0xcd/0xf80
[  344.441375][T11332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.441400][T11332] RIP: 0033:0x7f46f738f7c9
[  344.441419][T11332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.441441][T11332] RSP: 002b:00007f46f8166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[  344.441464][T11332] RAX: ffffffffffffffda RBX: 00007f46f75e5fa0 RCX: 00007f46f738f7c9
[  344.441481][T11332] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  344.441495][T11332] RBP: 00007f46f7413f91 R08: 0000000000000000 R09: 0000000000000000
[  344.441511][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.441525][T11332] R13: 00007f46f75e6038 R14: 00007f46f75e5fa0 R15: 00007fffec974088
[  344.441560][T11332]  </TASK>
[  344.753689][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1128'.
[  345.095501][ T5154] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260
[  345.095526][ T5154] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260
[  345.110679][ T5154] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  345.110717][ T5154] Bluetooth: hci2: adv larger than maximum supported
[  345.117839][ T5154] Bluetooth: hci2: adv larger than maximum supported
[  345.124607][ T5154] Bluetooth: hci2: Malformed LE Event: 0x0d
[  346.823831][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'.
[  347.026538][T11396] FAULT_INJECTION: forcing a failure.
[  347.026538][T11396] name failslab, interval 1, probability 0, space 0, times 0
[  347.066610][T11396] CPU: 1 UID: 0 PID: 11396 Comm: syz.2.1142 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  347.066650][T11396] Tainted: [L]=SOFTLOCKUP
[  347.066660][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  347.066675][T11396] Call Trace:
[  347.066683][T11396]  <TASK>
[  347.066693][T11396]  dump_stack_lvl+0x16c/0x1f0
[  347.066739][T11396]  should_fail_ex+0x512/0x640
[  347.066768][T11396]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  347.066805][T11396]  should_failslab+0xc2/0x120
[  347.066842][T11396]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  347.066872][T11396]  ? stack_depot_save_flags+0x29/0x9b0
[  347.066903][T11396]  ? __d_alloc+0x35/0xa80
[  347.066932][T11396]  ? __d_alloc+0x35/0xa80
[  347.066952][T11396]  __d_alloc+0x35/0xa80
[  347.066979][T11396]  d_alloc_parallel+0x111/0x1510
[  347.067019][T11396]  ? find_held_lock+0x2b/0x80
[  347.067063][T11396]  ? __pfx_d_alloc_parallel+0x10/0x10
[  347.067101][T11396]  ? __d_lookup+0x266/0x4a0
[  347.067141][T11396]  lookup_open.isra.0+0x66c/0x1780
[  347.067183][T11396]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  347.067221][T11396]  ? trace_event_raw_event_drv_tdls_recv_channel_switch+0x420/0xc90
[  347.067265][T11396]  ? trace_event_raw_event_drv_tdls_recv_channel_switch+0x420/0xc90
[  347.067300][T11396]  ? dput+0x1f/0x30
[  347.067323][T11396]  ? lookup_fast+0x156/0x610
[  347.067358][T11396]  path_openat+0x12bb/0x3140
[  347.067405][T11396]  ? __pfx_path_openat+0x10/0x10
[  347.067454][T11396]  do_filp_open+0x20b/0x470
[  347.067492][T11396]  ? __pfx_do_filp_open+0x10/0x10
[  347.067554][T11396]  ? alloc_fd+0x471/0x7d0
[  347.067599][T11396]  do_sys_openat2+0x121/0x290
[  347.067627][T11396]  ? __pfx_do_sys_openat2+0x10/0x10
[  347.067670][T11396]  __x64_sys_openat+0x174/0x210
[  347.067699][T11396]  ? __pfx___x64_sys_openat+0x10/0x10
[  347.067743][T11396]  do_syscall_64+0xcd/0xf80
[  347.067769][T11396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.067794][T11396] RIP: 0033:0x7f2d3bf8f7c9
[  347.067814][T11396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  347.067837][T11396] RSP: 002b:00007f2d3ceb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  347.067860][T11396] RAX: ffffffffffffffda RBX: 00007f2d3c1e5fa0 RCX: 00007f2d3bf8f7c9
[  347.067877][T11396] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  347.067892][T11396] RBP: 00007f2d3c013f91 R08: 0000000000000000 R09: 0000000000000000
[  347.067908][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  347.067922][T11396] R13: 00007f2d3c1e6038 R14: 00007f2d3c1e5fa0 R15: 00007ffe92c1a198
[  347.067958][T11396]  </TASK>
[  347.375625][T11400] sg_write: data in/out 81/90 bytes for SCSI command 0x0-- guessing data in;
[  347.375625][T11400]    program syz.1.1144 not setting count and/or reply_len properly
[  347.415799][T11406] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE�r��҄y�*�"�l-���y–��
[  348.141616][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1151'.
[  348.490672][T11453] FAULT_INJECTION: forcing a failure.
[  348.490672][T11453] name failslab, interval 1, probability 0, space 0, times 0
[  348.540407][T11453] CPU: 0 UID: 0 PID: 11453 Comm: syz.0.1156 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  348.540432][T11453] Tainted: [L]=SOFTLOCKUP
[  348.540437][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  348.540446][T11453] Call Trace:
[  348.540451][T11453]  <TASK>
[  348.540457][T11453]  dump_stack_lvl+0x16c/0x1f0
[  348.540483][T11453]  should_fail_ex+0x512/0x640
[  348.540500][T11453]  ? kmem_cache_alloc_noprof+0x62/0x770
[  348.540520][T11453]  should_failslab+0xc2/0x120
[  348.540540][T11453]  kmem_cache_alloc_noprof+0x83/0x770
[  348.540556][T11453]  ? mas_alloc_nodes+0x27b/0x380
[  348.540578][T11453]  ? mas_alloc_nodes+0x27b/0x380
[  348.540595][T11453]  mas_alloc_nodes+0x27b/0x380
[  348.540627][T11453]  mas_preallocate+0x5e3/0xee0
[  348.540656][T11453]  ? __pfx_mas_preallocate+0x10/0x10
[  348.540677][T11453]  ? __pfx_mt_find+0x10/0x10
[  348.540693][T11453]  vma_link+0x12a/0x7a0
[  348.540710][T11453]  ? __pfx_vma_link+0x10/0x10
[  348.540729][T11453]  ? cap_capable+0x31/0x3f0
[  348.540747][T11453]  insert_vm_struct+0xf4/0x2d0
[  348.540765][T11453]  create_init_stack_vma+0x2e1/0x700
[  348.540786][T11453]  alloc_bprm+0x420/0x710
[  348.540805][T11453]  do_execveat_common.isra.0+0x1ce/0x610
[  348.540827][T11453]  __x64_sys_execve+0x8e/0xb0
[  348.540845][T11453]  do_syscall_64+0xcd/0xf80
[  348.540860][T11453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.540873][T11453] RIP: 0033:0x7f46f738f7c9
[  348.540885][T11453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  348.540914][T11453] RSP: 002b:00007f46f8166038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  348.540938][T11453] RAX: ffffffffffffffda RBX: 00007f46f75e5fa0 RCX: 00007f46f738f7c9
[  348.540954][T11453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  348.540967][T11453] RBP: 00007f46f7413f91 R08: 0000000000000000 R09: 0000000000000000
[  348.540980][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  348.540987][T11453] R13: 00007f46f75e6038 R14: 00007f46f75e5fa0 R15: 00007fffec974088
[  348.541006][T11453]  </TASK>
[  349.170719][T11466] sg_write: data in/out 220/90 bytes for SCSI command 0x0-- guessing data in;
[  349.170719][T11466]    program syz.1.1158 not setting count and/or reply_len properly
[  349.553103][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1162'.
[  350.697329][T11500] FAULT_INJECTION: forcing a failure.
[  350.697329][T11500] name failslab, interval 1, probability 0, space 0, times 0
[  350.779454][T11500] CPU: 0 UID: 0 PID: 11500 Comm: syz.1.1167 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  350.779496][T11500] Tainted: [L]=SOFTLOCKUP
[  350.779506][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  350.779521][T11500] Call Trace:
[  350.779530][T11500]  <TASK>
[  350.779540][T11500]  dump_stack_lvl+0x16c/0x1f0
[  350.779586][T11500]  should_fail_ex+0x512/0x640
[  350.779616][T11500]  ? __kmalloc_noprof+0xca/0x910
[  350.779648][T11500]  should_failslab+0xc2/0x120
[  350.779686][T11500]  __kmalloc_noprof+0xeb/0x910
[  350.779714][T11500]  ? sk_prot_alloc+0x1a8/0x2a0
[  350.779744][T11500]  ? sk_prot_alloc+0x1a8/0x2a0
[  350.779765][T11500]  sk_prot_alloc+0x1a8/0x2a0
[  350.779792][T11500]  sk_alloc+0x36/0xe30
[  350.779825][T11500]  __netlink_create+0x5e/0x2c0
[  350.779855][T11500]  ? __wake_up+0x3f/0x60
[  350.779891][T11500]  netlink_create+0x39e/0x620
[  350.779923][T11500]  ? __pfx_genl_bind+0x10/0x10
[  350.779953][T11500]  ? __pfx_genl_unbind+0x10/0x10
[  350.779975][T11500]  ? __pfx_genl_release+0x10/0x10
[  350.780004][T11500]  __sock_create+0x339/0x8a0
[  350.780037][T11500]  __sys_socket+0x14d/0x260
[  350.780063][T11500]  ? fput+0x70/0xf0
[  350.780086][T11500]  ? __pfx___sys_socket+0x10/0x10
[  350.780113][T11500]  ? xfd_validate_state+0x61/0x180
[  350.780135][T11500]  ? __pfx_ksys_write+0x10/0x10
[  350.780176][T11500]  __x64_sys_socket+0x72/0xb0
[  350.780201][T11500]  ? lockdep_hardirqs_on+0x7c/0x110
[  350.780225][T11500]  do_syscall_64+0xcd/0xf80
[  350.780251][T11500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.780276][T11500] RIP: 0033:0x7f8f0938f7c9
[  350.780296][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.780321][T11500] RSP: 002b:00007f8f0a2c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  350.780345][T11500] RAX: ffffffffffffffda RBX: 00007f8f095e5fa0 RCX: 00007f8f0938f7c9
[  350.780362][T11500] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  350.780377][T11500] RBP: 00007f8f09413f91 R08: 0000000000000000 R09: 0000000000000000
[  350.780393][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.780407][T11500] R13: 00007f8f095e6038 R14: 00007f8f095e5fa0 R15: 00007ffd1c66a838
[  350.780444][T11500]  </TASK>
[  351.282594][T11509] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1169'.
[  352.546175][T11540] vivid-007: =================  START STATUS  =================
[  352.594353][T11540] vivid-007: Enable Output Cropping: true
[  352.597314][T11530] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input12
[  352.714121][T11540] vivid-007: Enable Output Composing: true
[  352.731689][T11535] sd 0:0:1:0: PR command failed: 1026
[  352.803455][T11540] vivid-007: Enable Output Scaler: true
[  352.809023][T11540] vivid-007: Tx RGB Quantization Range: Automatic
[  352.935854][T11535] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  352.960133][T11535] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  352.973437][T11540] vivid-007: Transmit Mode: HDMI
[  352.983979][T11540] vivid-007: Hotplug Present: 0x00000000
[  352.990286][T11540] vivid-007: RxSense Present: 0x00000000
[  352.996225][T11540] vivid-007: EDID Present: 0x00000000
[  353.002861][T11540] vivid-007: ==================  END STATUS  ==================
[  353.203784][T11541] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  353.292121][T11541] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  353.299060][T11556] FAULT_INJECTION: forcing a failure.
[  353.299060][T11556] name failslab, interval 1, probability 0, space 0, times 0
[  353.308481][T11541] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  353.325886][T11541] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  353.329412][T11556] CPU: 1 UID: 0 PID: 11556 Comm: syz.3.1181 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.329464][T11556] Tainted: [L]=SOFTLOCKUP
[  353.329473][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.329488][T11556] Call Trace:
[  353.329497][T11556]  <TASK>
[  353.329507][T11556]  dump_stack_lvl+0x16c/0x1f0
[  353.329551][T11556]  should_fail_ex+0x512/0x640
[  353.329579][T11556]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  353.329614][T11556]  should_failslab+0xc2/0x120
[  353.329649][T11556]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  353.329681][T11556]  ? shmem_alloc_inode+0x25/0x50
[  353.329723][T11556]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  353.329754][T11556]  ? shmem_alloc_inode+0x25/0x50
[  353.329786][T11556]  shmem_alloc_inode+0x25/0x50
[  353.329818][T11556]  alloc_inode+0x64/0x240
[  353.329847][T11556]  new_inode+0x22/0x1c0
[  353.329876][T11556]  shmem_get_inode+0x19a/0xfb0
[  353.329913][T11556]  ? __vm_enough_memory+0x184/0x3f0
[  353.329949][T11556]  __shmem_file_setup+0x290/0x350
[  353.329989][T11556]  shmem_zero_setup+0x93/0x1b0
[  353.330020][T11556]  __mmap_region+0x2277/0x2a00
[  353.330054][T11556]  ? __pfx___mmap_region+0x10/0x10
[  353.330078][T11556]  ? __lock_acquire+0x436/0x2890
[  353.330127][T11556]  ? finish_task_switch.isra.0+0x207/0xbd0
[  353.330158][T11556]  ? lockdep_hardirqs_on+0x7c/0x110
[  353.330181][T11556]  ? finish_task_switch.isra.0+0x207/0xbd0
[  353.330280][T11556]  ? rcu_is_watching+0x12/0xc0
[  353.330322][T11556]  mmap_region+0x1ab/0x3f0
[  353.330349][T11556]  ? __get_unmapped_area+0x267/0x3f0
[  353.330387][T11556]  do_mmap+0xa3e/0x1210
[  353.330427][T11556]  ? __pfx_do_mmap+0x10/0x10
[  353.330461][T11556]  ? __pfx_down_write_killable+0x10/0x10
[  353.330496][T11556]  vm_mmap_pgoff+0x29e/0x470
[  353.330534][T11556]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  353.330574][T11556]  ? __x64_sys_futex+0x1e0/0x4c0
[  353.330600][T11556]  ? __x64_sys_futex+0x1e9/0x4c0
[  353.330632][T11556]  ksys_mmap_pgoff+0x7d/0x5c0
[  353.330663][T11556]  ? xfd_validate_state+0x61/0x180
[  353.330695][T11556]  __x64_sys_mmap+0x125/0x190
[  353.330726][T11556]  do_syscall_64+0xcd/0xf80
[  353.330752][T11556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.330776][T11556] RIP: 0033:0x7f5ad1b8f7c9
[  353.330797][T11556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.330820][T11556] RSP: 002b:00007f5ad29f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  353.330842][T11556] RAX: ffffffffffffffda RBX: 00007f5ad1de5fa0 RCX: 00007f5ad1b8f7c9
[  353.330858][T11556] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000
[  353.330872][T11556] RBP: 00007f5ad1c13f91 R08: 0000000000000401 R09: 0000000000008000
[  353.330887][T11556] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  353.330901][T11556] R13: 00007f5ad1de6038 R14: 00007f5ad1de5fa0 R15: 00007ffd12aaa148
[  353.330936][T11556]  </TASK>
[  354.789508][ T5154] Bluetooth: hci1: command 0x0406 tx timeout
[  354.794552][T11594] FAULT_INJECTION: forcing a failure.
[  354.794552][T11594] name failslab, interval 1, probability 0, space 0, times 0
[  354.852959][T11594] CPU: 1 UID: 0 PID: 11594 Comm: syz.0.1189 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  354.852984][T11594] Tainted: [L]=SOFTLOCKUP
[  354.852989][T11594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  354.852998][T11594] Call Trace:
[  354.853003][T11594]  <TASK>
[  354.853009][T11594]  dump_stack_lvl+0x16c/0x1f0
[  354.853036][T11594]  should_fail_ex+0x512/0x640
[  354.853053][T11594]  ? __kmalloc_noprof+0xca/0x910
[  354.853071][T11594]  should_failslab+0xc2/0x120
[  354.853092][T11594]  __kmalloc_noprof+0xeb/0x910
[  354.853106][T11594]  ? sk_prot_alloc+0x1a8/0x2a0
[  354.853122][T11594]  ? sk_prot_alloc+0x1a8/0x2a0
[  354.853133][T11594]  sk_prot_alloc+0x1a8/0x2a0
[  354.853146][T11594]  sk_alloc+0x36/0xe30
[  354.853164][T11594]  __netlink_create+0x5e/0x2c0
[  354.853181][T11594]  ? __wake_up+0x3f/0x60
[  354.853200][T11594]  netlink_create+0x39e/0x620
[  354.853217][T11594]  ? __pfx_genl_bind+0x10/0x10
[  354.853228][T11594]  ? __pfx_genl_unbind+0x10/0x10
[  354.853239][T11594]  ? __pfx_genl_release+0x10/0x10
[  354.853254][T11594]  __sock_create+0x339/0x8a0
[  354.853271][T11594]  __sys_socket+0x14d/0x260
[  354.853291][T11594]  ? fput+0x70/0xf0
[  354.853305][T11594]  ? __pfx___sys_socket+0x10/0x10
[  354.853319][T11594]  ? xfd_validate_state+0x61/0x180
[  354.853332][T11594]  ? __pfx_ksys_write+0x10/0x10
[  354.853353][T11594]  __x64_sys_socket+0x72/0xb0
[  354.853367][T11594]  ? lockdep_hardirqs_on+0x7c/0x110
[  354.853380][T11594]  do_syscall_64+0xcd/0xf80
[  354.853393][T11594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.853407][T11594] RIP: 0033:0x7f46f738f7c9
[  354.853419][T11594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.853432][T11594] RSP: 002b:00007f46f8166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  354.853445][T11594] RAX: ffffffffffffffda RBX: 00007f46f75e5fa0 RCX: 00007f46f738f7c9
[  354.853454][T11594] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  354.853462][T11594] RBP: 00007f46f7413f91 R08: 0000000000000000 R09: 0000000000000000
[  354.853471][T11594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.853479][T11594] R13: 00007f46f75e6038 R14: 00007f46f75e5fa0 R15: 00007fffec974088
[  354.853498][T11594]  </TASK>
[  355.360350][ T5154] Bluetooth: hci2: command 0x0c1a tx timeout
[  355.360377][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  355.372403][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  356.684368][T11622] zswap: compressor  not available
[  357.191202][T11639] zswap: compressor  not available
[  358.083113][T11652] FAULT_INJECTION: forcing a failure.
[  358.083113][T11652] name fail_futex, interval 1, probability 0, space 0, times 0
[  358.096441][T11652] CPU: 1 UID: 0 PID: 11652 Comm: syz.0.1199 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  358.096485][T11652] Tainted: [L]=SOFTLOCKUP
[  358.096494][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  358.096514][T11652] Call Trace:
[  358.096523][T11652]  <TASK>
[  358.096532][T11652]  dump_stack_lvl+0x16c/0x1f0
[  358.096579][T11652]  should_fail_ex+0x512/0x640
[  358.096615][T11652]  get_futex_key+0x1d0/0x15f0
[  358.096652][T11652]  ? __pfx_get_futex_key+0x10/0x10
[  358.096678][T11652]  ? find_held_lock+0x2b/0x80
[  358.096724][T11652]  futex_wake+0xea/0x530
[  358.096760][T11652]  ? __pfx_futex_wake+0x10/0x10
[  358.096791][T11652]  ? __pfx_vfs_statx+0x10/0x10
[  358.096833][T11652]  do_futex+0x1e3/0x350
[  358.096861][T11652]  ? __pfx_do_futex+0x10/0x10
[  358.096898][T11652]  __x64_sys_futex+0x1e0/0x4c0
[  358.096928][T11652]  ? __pfx___x64_sys_futex+0x10/0x10
[  358.096956][T11652]  ? xfd_validate_state+0x61/0x180
[  358.097026][T11652]  do_syscall_64+0xcd/0xf80
[  358.097055][T11652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.097081][T11652] RIP: 0033:0x7f46f738f7c9
[  358.097105][T11652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.097130][T11652] RSP: 002b:00007f46f81660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  358.097152][T11652] RAX: ffffffffffffffda RBX: 00007f46f75e5fa8 RCX: 00007f46f738f7c9
[  358.097167][T11652] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f46f75e5fac
[  358.097181][T11652] RBP: 00007f46f75e5fa0 R08: 00007f46f8167000 R09: 0000000000000000
[  358.097195][T11652] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  358.097210][T11652] R13: 00007f46f75e6038 R14: 00007fffec973fa0 R15: 00007fffec974088
[  358.097248][T11652]  </TASK>
[  358.883572][T11671] nbd: must specify at least one socket
[  359.628561][T11674] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  359.646876][T11674] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  359.670310][T11674] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  359.911869][T11682] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1208'.
[  360.448029][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.676162][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.883150][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.155991][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.166070][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.174006][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.182294][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.190401][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  361.194159][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.200411][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.570422][   T49] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.669384][ T5154] Bluetooth: hci0: command 0x0406 tx timeout
[  361.753821][ T5154] Bluetooth: hci3: command 0x0406 tx timeout
[  361.823325][   T49] bridge_slave_1: left allmulticast mode
[  361.829004][   T49] bridge_slave_1: left promiscuous mode
[  361.850679][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.892520][   T49] bridge_slave_0: left allmulticast mode
[  361.898208][   T49] bridge_slave_0: left promiscuous mode
[  361.909807][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.557974][T11717] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  362.564383][T11717] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  362.586716][T11717] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  362.597663][T11717] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  362.618462][T11717] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  362.648051][T11717] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  362.753914][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.953296][   T49] bond0 (unregistering): Released all slaves
[  363.195172][T11701] chnl_net:caif_netlink_parms(): no params data found
[  363.440961][   T49] ovs_����: left promiscuous mode
[  363.829483][ T5154] Bluetooth: hci1: command 0x0406 tx timeout
[  363.933737][T11701] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.972917][T11701] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.985634][T11701] bridge_slave_0: entered allmulticast mode
[  364.003487][T11701] bridge_slave_0: entered promiscuous mode
[  364.217195][T11701] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.227323][T11701] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.235981][T11701] bridge_slave_1: entered allmulticast mode
[  364.245456][T11701] bridge_slave_1: entered promiscuous mode
[  364.546558][T11701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.586445][T11701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.629450][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  364.629640][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  364.635601][ T5154] Bluetooth: hci2: command 0x041b tx timeout
[  364.903383][T11701] team0: Port device team_slave_0 added
[  364.942865][T11701] team0: Port device team_slave_1 added
[  365.030487][   T49] hsr_slave_0: left promiscuous mode
[  365.052313][   T49] hsr_slave_1: left promiscuous mode
[  365.072859][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.090138][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.119160][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.141325][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.180347][   T49] veth1_macvtap: left promiscuous mode
[  365.185855][   T49] veth0_macvtap: left promiscuous mode
[  365.196391][   T49] veth1_vlan: left promiscuous mode
[  365.201860][   T49] veth0_vlan: left promiscuous mode
[  366.155344][   T49] team0 (unregistering): Port device team_slave_0 removed
[  366.709372][ T5154] Bluetooth: hci2: command 0x041b tx timeout
[  366.910424][T11701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.930347][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  366.963540][T11701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.159125][T11701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.170021][T11701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.202293][T11701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.432177][T11701] hsr_slave_0: entered promiscuous mode
[  367.457262][T11701] hsr_slave_1: entered promiscuous mode
[  367.481942][T11701] debugfs: 'hsr0' already exists in 'hsr'
[  367.487716][T11701] Cannot create hsr debugfs directory
[  367.636493][T11785] nbd: must specify at least one socket
[  367.702026][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.836579][T11785] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  367.869713][T11785] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  367.887320][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.898970][T11785] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  367.936376][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  367.948305][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  367.964284][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  367.983143][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  367.993377][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  368.074287][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.364898][T11701] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  368.474319][T11701] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  368.535088][T11701] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  368.575389][T11701] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  368.648708][   T49] bond0: left allmulticast mode
[  368.660595][   T49] bond_slave_1: left allmulticast mode
[  368.669533][   T49] bond0: left promiscuous mode
[  368.679482][   T49] bond_slave_0: left promiscuous mode
[  368.684996][   T49] bond_slave_1: left promiscuous mode
[  368.699921][   T49] bridge0: port 3(bond0) entered disabled state
[  368.712873][   T49] bridge_slave_1: left allmulticast mode
[  368.721648][   T49] bridge_slave_1: left promiscuous mode
[  368.727869][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.741725][   T49] bridge_slave_0: left allmulticast mode
[  368.747493][   T49] bridge_slave_0: left promiscuous mode
[  368.754705][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.144165][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.154640][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.164640][   T49] bond0 (unregistering): Released all slaves
[  369.617421][T11789] chnl_net:caif_netlink_parms(): no params data found
[  369.656730][   T49] hsr_slave_0: left promiscuous mode
[  369.665352][   T49] hsr_slave_1: left promiscuous mode
[  369.671893][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.682267][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.691508][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.698908][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.725234][   T49] veth1_macvtap: left promiscuous mode
[  369.731177][   T49] veth0_macvtap: left promiscuous mode
[  369.737191][   T49] veth1_vlan: left promiscuous mode
[  369.743169][   T49] veth0_vlan: left promiscuous mode
[  369.909768][ T5154] Bluetooth: hci2: command 0x041b tx timeout
[  369.909788][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  369.909801][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  370.069752][ T5837] Bluetooth: hci1: command tx timeout
[  370.243586][   T49] team0 (unregistering): Port device team_slave_0 removed
[  370.651315][T11789] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.662484][T11789] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.669830][T11789] bridge_slave_0: entered allmulticast mode
[  370.677508][T11789] bridge_slave_0: entered promiscuous mode
[  370.691536][T11789] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.698729][T11789] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.706178][T11789] bridge_slave_1: entered allmulticast mode
[  370.713928][T11789] bridge_slave_1: entered promiscuous mode
[  370.784779][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.798156][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.858103][T11789] team0: Port device team_slave_0 added
[  370.875453][T11701] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.902705][T11789] team0: Port device team_slave_1 added
[  371.011476][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.038687][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.090006][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.142580][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.159591][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.213755][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.309940][T11701] 8021q: adding VLAN 0 to HW filter on device team0
[  371.360841][T11853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1231'.
[  371.381418][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.388500][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.478170][T10710] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.485284][T10710] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.535801][T11789] hsr_slave_0: entered promiscuous mode
[  371.553178][T11789] hsr_slave_1: entered promiscuous mode
[  371.565466][T11789] debugfs: 'hsr0' already exists in 'hsr'
[  371.577483][T11789] Cannot create hsr debugfs directory
[  371.989693][ T5837] Bluetooth: hci2: command 0x041b tx timeout
[  372.153350][ T5837] Bluetooth: hci1: command tx timeout
[  372.840338][T11701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.285518][T11789] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  373.380650][T11789] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  373.425995][T11789] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  373.528710][T11789] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  374.056693][T11789] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.080398][ T5837] Bluetooth: hci2: command 0x041b tx timeout
[  374.147129][T11701] veth0_vlan: entered promiscuous mode
[  374.174504][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1240'.
[  374.202177][T11789] 8021q: adding VLAN 0 to HW filter on device team0
[  374.225012][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.232136][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.242589][ T5837] Bluetooth: hci1: command tx timeout
[  374.265928][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.273050][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.323129][T11701] veth1_vlan: entered promiscuous mode
[  374.474716][T11701] veth0_macvtap: entered promiscuous mode
[  374.512677][T11701] veth1_macvtap: entered promiscuous mode
[  374.564194][T11701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.644596][T11701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.745261][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.789485][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.798239][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.000656][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.316527][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  375.567854][T10710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.611588][T10710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.656057][T11789] veth0_vlan: entered promiscuous mode
[  375.763388][   T72] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.830946][T10710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.831630][T11789] veth1_vlan: entered promiscuous mode
[  375.838784][T10710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.943051][   T72] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.142126][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.149984][   T52] Bluetooth: hci2: command 0x041b tx timeout
[  376.153910][   T72] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.170694][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.178734][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.197328][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.205935][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.316080][ T5837] Bluetooth: hci1: command tx timeout
[  376.321866][T11789] veth0_macvtap: entered promiscuous mode
[  376.423333][   T72] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.448746][T11789] veth1_macvtap: entered promiscuous mode
[  376.494572][T11964] netlink: 'syz.3.1246': attribute type 1 has an invalid length.
[  376.612920][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.679348][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.826013][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.851994][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.900393][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.925396][   T72] bridge_slave_0: left allmulticast mode
[  376.939005][   T72] bridge_slave_0: left promiscuous mode
[  376.951584][   T72] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.443653][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.900450][T11968] chnl_net:caif_netlink_parms(): no params data found
[  377.937908][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.969860][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.084217][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1250'.
[  378.197492][ T8044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.219838][ T8044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.268997][T12006] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1251'.
[  378.335918][ T5837] Bluetooth: hci0: command tx timeout
[  378.485291][T12012] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1233'.
[  378.564764][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.571242][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  378.829591][T11968] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.836822][T11968] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.862453][T11968] bridge_slave_0: entered allmulticast mode
[  378.887580][T11968] bridge_slave_0: entered promiscuous mode
[  379.017959][T11968] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.031102][T11968] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.064348][T11968] bridge_slave_1: entered allmulticast mode
[  379.097097][T11968] bridge_slave_1: entered promiscuous mode
[  379.187594][   T72] hsr_slave_0: left promiscuous mode
[  379.203127][   T72] hsr_slave_1: left promiscuous mode
[  379.222017][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.248707][   T72] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.267992][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.283746][   T72] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.332161][   T72] veth1_macvtap: left promiscuous mode
[  379.367177][   T72] veth0_macvtap: left promiscuous mode
[  379.388156][   T72] veth1_vlan: left promiscuous mode
[  379.414111][   T72] veth0_vlan: left promiscuous mode
[  379.684478][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.701052][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.708854][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.719218][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.727347][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.888400][T12006] kexec: Could not allocate control_code_buffer
[  380.188217][   T72] team0 (unregistering): Port device team_slave_0 removed
[  380.399620][ T5154] Bluetooth: hci0: command tx timeout
[  380.464763][T12034] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  380.500126][T12034] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  380.706285][T11968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  380.757597][T11968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  380.860621][T11968] team0: Port device team_slave_0 added
[  380.875913][T11968] team0: Port device team_slave_1 added
[  380.997213][T11968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.005403][T11968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.034982][T11968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.083342][T11968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.091004][T11968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.131019][T11968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.541820][T11968] hsr_slave_0: entered promiscuous mode
[  381.558909][T11968] hsr_slave_1: entered promiscuous mode
[  381.710612][   T72] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.801152][T12027] chnl_net:caif_netlink_parms(): no params data found
[  381.839412][ T5154] Bluetooth: hci2: command tx timeout
[  381.988418][   T72] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.163372][T12027] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.182185][T12027] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.210428][T12027] bridge_slave_0: entered allmulticast mode
[  382.231858][T12027] bridge_slave_0: entered promiscuous mode
[  382.314290][   T72] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.348683][T12027] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.399932][T12027] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.439775][T12027] bridge_slave_1: entered allmulticast mode
[  382.446726][T12027] bridge_slave_1: entered promiscuous mode
[  382.470224][ T5154] Bluetooth: hci0: command tx timeout
[  382.506480][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1263'.
[  382.593396][   T72] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.736310][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.772835][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.121797][T12027] team0: Port device team_slave_0 added
[  383.143447][T12027] team0: Port device team_slave_1 added
[  383.258589][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.279454][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.324368][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.412205][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.436612][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  383.473823][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.754851][T11968] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  383.785222][   T72] bridge_slave_1: left allmulticast mode
[  383.793294][   T72] bridge_slave_1: left promiscuous mode
[  383.799026][   T72] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.830751][   T72] bridge_slave_0: left allmulticast mode
[  383.841786][   T72] bridge_slave_0: left promiscuous mode
[  383.848445][   T72] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.909524][ T5154] Bluetooth: hci2: command tx timeout
[  384.385655][   T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.408432][   T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.427690][   T72] bond0 (unregistering): Released all slaves
[  384.500796][T11968] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  384.527031][T11968] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  384.559944][ T5154] Bluetooth: hci0: command tx timeout
[  384.598467][T12027] hsr_slave_0: entered promiscuous mode
[  384.636268][T12027] hsr_slave_1: entered promiscuous mode
[  384.657861][T12027] debugfs: 'hsr0' already exists in 'hsr'
[  384.679582][T12027] Cannot create hsr debugfs directory
[  384.697336][T11968] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  385.161519][   T72] hsr_slave_0: left promiscuous mode
[  385.167525][   T72] hsr_slave_1: left promiscuous mode
[  385.173509][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.189357][   T72] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.217142][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.249427][   T72] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.271034][T12121] FAULT_INJECTION: forcing a failure.
[  385.271034][T12121] name failslab, interval 1, probability 0, space 0, times 0
[  385.284908][T12121] CPU: 1 UID: 0 PID: 12121 Comm: syz.0.1268 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  385.284939][T12121] Tainted: [L]=SOFTLOCKUP
[  385.284946][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  385.284958][T12121] Call Trace:
[  385.284966][T12121]  <TASK>
[  385.284975][T12121]  dump_stack_lvl+0x16c/0x1f0
[  385.285013][T12121]  should_fail_ex+0x512/0x640
[  385.285037][T12121]  ? __kmalloc_cache_noprof+0x5f/0x800
[  385.285064][T12121]  should_failslab+0xc2/0x120
[  385.285097][T12121]  __kmalloc_cache_noprof+0x80/0x800
[  385.285120][T12121]  ? __pfx_aa_file_perm+0x10/0x10
[  385.285149][T12121]  ? __lock_acquire+0x436/0x2890
[  385.285168][T12121]  ? handle_policy_update+0xd0/0x1230
[  385.285205][T12121]  ? handle_policy_update+0xd0/0x1230
[  385.285234][T12121]  handle_policy_update+0xd0/0x1230
[  385.285283][T12121]  ? __pfx_handle_policy_update+0x10/0x10
[  385.285314][T12121]  ? apparmor_capable+0x1d7/0x4e0
[  385.285340][T12121]  ? bpf_lsm_capable+0x9/0x10
[  385.285366][T12121]  ? security_capable+0x7e/0x260
[  385.285391][T12121]  safesetid_uid_file_write+0x84/0xc0
[  385.285425][T12121]  ? __pfx_safesetid_uid_file_write+0x10/0x10
[  385.285456][T12121]  vfs_write+0x2a0/0x11d0
[  385.285489][T12121]  ? __pfx___mutex_lock+0x10/0x10
[  385.285514][T12121]  ? __pfx_vfs_write+0x10/0x10
[  385.285551][T12121]  ? __fget_files+0x20e/0x3c0
[  385.285591][T12121]  ksys_write+0x12a/0x250
[  385.285619][T12121]  ? __pfx_ksys_write+0x10/0x10
[  385.285656][T12121]  do_syscall_64+0xcd/0xf80
[  385.285680][T12121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.285703][T12121] RIP: 0033:0x7fad9b58f7c9
[  385.285722][T12121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.285741][T12121] RSP: 002b:00007fad9c4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  385.285762][T12121] RAX: ffffffffffffffda RBX: 00007fad9b7e5fa0 RCX: 00007fad9b58f7c9
[  385.285777][T12121] RDX: 0000000000000084 RSI: 0000200000000b80 RDI: 0000000000000003
[  385.285790][T12121] RBP: 00007fad9c4b0090 R08: 0000000000000000 R09: 0000000000000000
[  385.285803][T12121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.285816][T12121] R13: 00007fad9b7e6038 R14: 00007fad9b7e5fa0 R15: 00007ffce8dae4e8
[  385.285849][T12121]  </TASK>
[  385.297526][   T72] veth1_macvtap: left promiscuous mode
[  385.529159][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1267'.
[  385.537655][T12125] FAULT_INJECTION: forcing a failure.
[  385.537655][T12125] name failslab, interval 1, probability 0, space 0, times 0
[  385.538797][   T72] veth0_macvtap: left promiscuous mode
[  385.552353][T12125] CPU: 1 UID: 0 PID: 12125 Comm: syz.0.1269 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  385.552390][T12125] Tainted: [L]=SOFTLOCKUP
[  385.552399][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  385.552414][T12125] Call Trace:
[  385.552422][T12125]  <TASK>
[  385.552431][T12125]  dump_stack_lvl+0x16c/0x1f0
[  385.552474][T12125]  should_fail_ex+0x512/0x640
[  385.552501][T12125]  ? kmem_cache_alloc_noprof+0x62/0x770
[  385.552535][T12125]  should_failslab+0xc2/0x120
[  385.552573][T12125]  kmem_cache_alloc_noprof+0x83/0x770
[  385.552603][T12125]  ? __kernfs_new_node+0xd2/0x9b0
[  385.552637][T12125]  ? __kernfs_new_node+0xd2/0x9b0
[  385.552662][T12125]  __kernfs_new_node+0xd2/0x9b0
[  385.552694][T12125]  ? __pfx___kernfs_new_node+0x10/0x10
[  385.552731][T12125]  ? find_held_lock+0x2b/0x80
[  385.552762][T12125]  ? kernfs_root+0xee/0x2a0
[  385.552798][T12125]  kernfs_new_node+0x13c/0x1e0
[  385.552835][T12125]  __kernfs_create_file+0x53/0x350
[  385.552875][T12125]  sysfs_add_file_mode_ns+0x207/0x3c0
[  385.552911][T12125]  internal_create_group+0x597/0xf70
[  385.552949][T12125]  ? __pfx_internal_create_group+0x10/0x10
[  385.552984][T12125]  ? kernfs_create_link+0x1bd/0x240
[  385.553012][T12125]  internal_create_groups+0x9d/0x150
[  385.553043][T12125]  device_add+0x7a5/0x1980
[  385.553081][T12125]  ? __pfx_device_add+0x10/0x10
[  385.553129][T12125]  __add_disk+0x457/0xf00
[  385.553163][T12125]  ? find_held_lock+0x2b/0x80
[  385.553197][T12125]  add_disk_fwnode+0x3f8/0x5d0
[  385.553235][T12125]  zram_add+0x4bf/0x6f0
[  385.553267][T12125]  ? __pfx_zram_add+0x10/0x10
[  385.553315][T12125]  ? find_held_lock+0x2b/0x80
[  385.553352][T12125]  ? __pfx_hot_add_show+0x10/0x10
[  385.553375][T12125]  ? __pfx_class_attr_show+0x10/0x10
[  385.553407][T12125]  hot_add_show+0x21/0x80
[  385.553431][T12125]  class_attr_show+0x72/0xa0
[  385.553465][T12125]  sysfs_kf_seq_show+0x216/0x3e0
[  385.553496][T12125]  seq_read_iter+0x50e/0x12d0
[  385.553544][T12125]  kernfs_fop_read_iter+0x46c/0x610
[  385.553579][T12125]  ? rw_verify_area+0xcf/0x6c0
[  385.553613][T12125]  vfs_read+0x8bf/0xcf0
[  385.553653][T12125]  ? __pfx_vfs_read+0x10/0x10
[  385.553709][T12125]  ksys_read+0x12a/0x250
[  385.553740][T12125]  ? __pfx_ksys_read+0x10/0x10
[  385.553783][T12125]  do_syscall_64+0xcd/0xf80
[  385.553809][T12125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.553832][T12125] RIP: 0033:0x7fad9b58f7c9
[  385.553852][T12125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.553875][T12125] RSP: 002b:00007fad9c4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  385.553896][T12125] RAX: ffffffffffffffda RBX: 00007fad9b7e5fa0 RCX: 00007fad9b58f7c9
[  385.553912][T12125] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007
[  385.553926][T12125] RBP: 00007fad9b613f91 R08: 0000000000000000 R09: 0000000000000000
[  385.553940][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.553954][T12125] R13: 00007fad9b7e6038 R14: 00007fad9b7e5fa0 R15: 00007ffce8dae4e8
[  385.553991][T12125]  </TASK>
[  385.862257][   T72] veth1_vlan: left promiscuous mode
[  385.867731][   T72] veth0_vlan: left promiscuous mode
[  385.991352][ T5154] Bluetooth: hci2: command tx timeout
[  386.248254][   T72] team0 (unregistering): Port device team_slave_1 removed
[  386.283671][   T72] team0 (unregistering): Port device team_slave_0 removed
[  387.071232][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'.
[  387.174272][T12027] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  387.241475][T12027] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  387.290269][T12027] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  387.346399][T12027] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  387.403730][T11968] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.504289][T11968] 8021q: adding VLAN 0 to HW filter on device team0
[  387.578957][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.586177][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.642751][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.649954][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.080629][T12027] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.088426][ T5154] Bluetooth: hci2: command tx timeout
[  388.221441][T12027] 8021q: adding VLAN 0 to HW filter on device team0
[  388.397051][   T72] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.404306][   T72] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.516583][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.523897][ T8049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.012329][T12027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.135640][T11968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.345015][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1279'.
[  389.639068][T12027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.971137][T11968] veth0_vlan: entered promiscuous mode
[  390.035860][T11968] veth1_vlan: entered promiscuous mode
[  390.144599][T11968] veth0_macvtap: entered promiscuous mode
[  390.183557][T11968] veth1_macvtap: entered promiscuous mode
[  390.234485][T11968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.318343][T11968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.374792][   T72] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.397901][   T72] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.418113][   T72] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.443297][   T72] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.628861][T12027] veth0_vlan: entered promiscuous mode
[  390.658863][   T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.672877][T12027] veth1_vlan: entered promiscuous mode
[  390.678817][   T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.760957][T12027] veth0_macvtap: entered promiscuous mode
[  390.774513][T10712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.777119][T12027] veth1_macvtap: entered promiscuous mode
[  390.799445][T10712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.825031][T12027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.858720][T12027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.896228][ T3446] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.909697][ T3446] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.952117][ T3446] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.969486][ T3446] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.156864][T10712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.194724][T10712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.239200][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.270140][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.888310][T12274] random: crng reseeded on system resumption
[  392.541174][ T5154] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11
[  394.267531][T10712] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.311277][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1293'.
[  394.565836][T12326] team0: Port device team_slave_1 removed
[  394.578910][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  394.595237][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  394.604200][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  394.612288][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  394.620564][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  394.898208][T10712] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.107658][T10712] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.275732][T10712] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.887808][T12362] hub 3-0:1.0: USB hub found
[  395.922370][T12362] hub 3-0:1.0: 1 port detected
[  395.969551][T10712] bridge_slave_1: left allmulticast mode
[  395.980353][T10712] bridge_slave_1: left promiscuous mode
[  395.997808][T12362] usb usb3: authorized to connect
[  396.013821][T10712] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.262161][T10712] bridge_slave_0: left allmulticast mode
[  396.267833][T10712] bridge_slave_0: left promiscuous mode
[  396.284085][T12373] random: crng reseeded on system resumption
[  396.291350][T10712] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.713086][ T5154] Bluetooth: hci2: command tx timeout
[  397.471688][T10712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.500128][T10712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.515742][T10712] bond0 (unregistering): Released all slaves
[  398.363317][T12421] syz.0.1307 (12421): attempted to duplicate a private mapping with mremap.  This is not supported.
[  398.418410][T12330] chnl_net:caif_netlink_parms(): no params data found
[  398.609433][T10712] hsr_slave_0: left promiscuous mode
[  398.625358][T10712] hsr_slave_1: left promiscuous mode
[  398.635808][T10712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.649372][T10712] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.678847][T10712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.686491][T10712] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.716616][T10712] veth1_macvtap: left promiscuous mode
[  398.722806][T10712] veth0_macvtap: left promiscuous mode
[  398.730426][T10712] veth1_vlan: left promiscuous mode
[  398.739459][T10712] veth0_vlan: left promiscuous mode
[  398.790105][ T5154] Bluetooth: hci2: command tx timeout
[  399.150410][T12449] zswap: compressor �W���;�0����?u=8�}���L��(�E���ֹ�jj�8+��xp���Ȝ��NkR����uo��o���<�S�H��}�Ed	}���P��8a<v not available
[  399.242326][T12443] zram0: detected capacity change from 16 to 0
[  399.774525][T10712] team0 (unregistering): Port device team_slave_1 removed
[  399.827372][T10712] team0 (unregistering): Port device team_slave_0 removed
[  400.290546][T12441] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  400.331605][T12441] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  400.360685][T12441] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  400.445666][T12330] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.454461][T12330] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.462100][T12330] bridge_slave_0: entered allmulticast mode
[  400.470070][T12330] bridge_slave_0: entered promiscuous mode
[  400.489009][T12330] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.496380][T12330] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.504689][T12330] bridge_slave_1: entered allmulticast mode
[  400.520738][T12330] bridge_slave_1: entered promiscuous mode
[  400.521082][T12441] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  400.576279][T12330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.600789][T12330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.654919][T12330] team0: Port device team_slave_0 added
[  400.682410][T12330] team0: Port device team_slave_1 added
[  400.722429][T12462] futex_wake_op: syz.5.1315 tries to shift op by -2048; fix this program
[  400.735469][T12441] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  400.740935][T12462] futex_wake_op: syz.5.1315 tries to shift op by -2048; fix this program
[  400.769510][T12441] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  400.786295][T12462] 0x000000000001-0x000000020000 : ""
[  400.819235][T12330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.827753][T12441] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  400.833762][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  400.863240][T12330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.864237][T12462] ftl_cs: FTL header corrupt!
[  400.874919][ T5154] Bluetooth: hci2: command tx timeout
[  400.886792][T12441] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  400.893213][T12441] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  400.901552][T12441] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  400.910839][T12330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.928018][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  401.045056][T12330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.429794][T12481] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  401.440445][T12330] hsr_slave_0: entered promiscuous mode
[  401.460743][T12330] hsr_slave_1: entered promiscuous mode
[  401.473773][T12330] debugfs: 'hsr0' already exists in 'hsr'
[  401.487256][T12330] Cannot create hsr debugfs directory
[  402.309408][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  402.391114][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  402.799391][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  402.949562][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  403.322294][T12330] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  403.457897][T12330] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  403.531787][T12330] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  403.619598][T12330] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  404.174854][T12539] random: crng reseeded on system resumption
[  404.354823][T12330] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.452018][T12330] 8021q: adding VLAN 0 to HW filter on device team0
[  404.489463][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  404.514826][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.522023][ T8038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.554556][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.561709][ T8038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.871566][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  404.931673][T12330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  404.942831][T12330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  405.029477][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  405.585154][T12330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.770192][T12571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1330'.
[  406.608181][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  406.617404][T12330] veth0_vlan: entered promiscuous mode
[  406.638069][T12330] veth1_vlan: entered promiscuous mode
[  406.712886][T12330] veth0_macvtap: entered promiscuous mode
[  406.731089][T12330] veth1_macvtap: entered promiscuous mode
[  406.733895][T12600] futex_wake_op: syz.0.1333 tries to shift op by -2048; fix this program
[  406.783948][T12600] futex_wake_op: syz.0.1333 tries to shift op by -2048; fix this program
[  406.807254][T12330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.928952][T12600] 0x000000000001-0x000000020000 : ""
[  406.943955][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1334'.
[  406.959355][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  406.993337][T12330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.074163][T12600] ftl_cs: FTL header corrupt!
[  407.083786][   T72] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.110469][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  407.115649][   T72] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.200938][   T72] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.249749][   T72] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.660439][T10712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.680164][T10712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.795950][T12629] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  407.871952][ T8049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.946767][ T8049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.328270][T12643] FAULT_INJECTION: forcing a failure.
[  408.328270][T12643] name failslab, interval 1, probability 0, space 0, times 0
[  408.342742][T12643] CPU: 1 UID: 0 PID: 12643 Comm: syz.5.1341 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.342778][T12643] Tainted: [L]=SOFTLOCKUP
[  408.342785][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  408.342799][T12643] Call Trace:
[  408.342806][T12643]  <TASK>
[  408.342816][T12643]  dump_stack_lvl+0x16c/0x1f0
[  408.342859][T12643]  should_fail_ex+0x512/0x640
[  408.342886][T12643]  ? kmem_cache_alloc_noprof+0x62/0x770
[  408.342921][T12643]  should_failslab+0xc2/0x120
[  408.342957][T12643]  kmem_cache_alloc_noprof+0x83/0x770
[  408.342995][T12643]  ? security_file_alloc+0x34/0x2b0
[  408.343036][T12643]  ? security_file_alloc+0x34/0x2b0
[  408.343063][T12643]  security_file_alloc+0x34/0x2b0
[  408.343093][T12643]  init_file+0x93/0x4c0
[  408.343119][T12643]  alloc_empty_file+0x73/0x1e0
[  408.343145][T12643]  alloc_file_pseudo+0x13a/0x230
[  408.343176][T12643]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  408.343213][T12643]  __shmem_file_setup+0x1a8/0x350
[  408.343255][T12643]  shmem_zero_setup+0x93/0x1b0
[  408.343288][T12643]  __mmap_region+0x2277/0x2a00
[  408.343320][T12643]  ? __pfx___mmap_region+0x10/0x10
[  408.343373][T12643]  ? finish_task_switch.isra.0+0x202/0xbd0
[  408.343409][T12643]  ? rcu_is_watching+0x12/0xc0
[  408.343507][T12643]  ? rcu_is_watching+0x12/0xc0
[  408.343550][T12643]  mmap_region+0x1ab/0x3f0
[  408.343579][T12643]  ? __get_unmapped_area+0x267/0x3f0
[  408.343618][T12643]  do_mmap+0xa3e/0x1210
[  408.343658][T12643]  ? __pfx_do_mmap+0x10/0x10
[  408.343691][T12643]  ? __pfx_down_write_killable+0x10/0x10
[  408.343726][T12643]  vm_mmap_pgoff+0x29e/0x470
[  408.343768][T12643]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  408.343811][T12643]  ? __x64_sys_futex+0x1e0/0x4c0
[  408.343837][T12643]  ? __x64_sys_futex+0x1e9/0x4c0
[  408.343869][T12643]  ksys_mmap_pgoff+0x7d/0x5c0
[  408.343898][T12643]  ? xfd_validate_state+0x61/0x180
[  408.343919][T12643]  ? __pfx_do_writev+0x10/0x10
[  408.343977][T12643]  __x64_sys_mmap+0x125/0x190
[  408.344014][T12643]  do_syscall_64+0xcd/0xf80
[  408.344041][T12643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.344066][T12643] RIP: 0033:0x7f62bb98f7c9
[  408.344088][T12643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.344112][T12643] RSP: 002b:00007f62bc8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  408.344133][T12643] RAX: ffffffffffffffda RBX: 00007f62bbbe5fa0 RCX: 00007f62bb98f7c9
[  408.344148][T12643] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000
[  408.344163][T12643] RBP: 00007f62bba13f91 R08: 0000000000000401 R09: 0000000000008000
[  408.344178][T12643] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  408.344192][T12643] R13: 00007f62bbbe6038 R14: 00007f62bbbe5fa0 R15: 00007ffc834e0b48
[  408.344228][T12643]  </TASK>
[  408.973450][T12651] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1343'.
[  409.984669][T12681] random: crng reseeded on system resumption
[  410.941999][T12703] nvme_fcloop: unknown parameter or missing value '7'
[  411.872871][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1355'.
[  412.125327][T12732] team0: Port device team_slave_1 removed
[  412.278517][T12729] NFSD: Failed to start, no listeners configured.
[  412.657971][T12751] futex_wake_op: syz.7.1359 tries to shift op by -2048; fix this program
[  412.693484][T12751] futex_wake_op: syz.7.1359 tries to shift op by -2048; fix this program
[  412.729944][T12751] 0x000000000001-0x000000020000 : ""
[  412.779427][T12751] ftl_cs: FTL header corrupt!
[  413.430413][ T5837] Bluetooth: hci0: Malformed Event: 0x02
[  413.971578][T12774] zswap: compressor  not available
[  415.143900][T12820] netlink: 'syz.7.1369': attribute type 1 has an invalid length.
[  416.263607][T12839] FAULT_INJECTION: forcing a failure.
[  416.263607][T12839] name failslab, interval 1, probability 0, space 0, times 0
[  416.303660][T12839] CPU: 0 UID: 0 PID: 12839 Comm: syz.7.1373 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  416.303699][T12839] Tainted: [L]=SOFTLOCKUP
[  416.303707][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  416.303719][T12839] Call Trace:
[  416.303727][T12839]  <TASK>
[  416.303736][T12839]  dump_stack_lvl+0x16c/0x1f0
[  416.303776][T12839]  should_fail_ex+0x512/0x640
[  416.303803][T12839]  ? __kmalloc_noprof+0xca/0x910
[  416.303830][T12839]  should_failslab+0xc2/0x120
[  416.303862][T12839]  __kmalloc_noprof+0xeb/0x910
[  416.303886][T12839]  ? __register_sysctl_table+0xea2/0x1900
[  416.303922][T12839]  ? __register_sysctl_table+0xea2/0x1900
[  416.303951][T12839]  __register_sysctl_table+0xea2/0x1900
[  416.303990][T12839]  ? __pfx___register_sysctl_table+0x10/0x10
[  416.304017][T12839]  ? is_module_address+0x69/0xf0
[  416.304042][T12839]  ? register_net_sysctl_sz+0x222/0x450
[  416.304077][T12839]  __devinet_sysctl_register+0x1b9/0x360
[  416.304108][T12839]  ? rcu_is_watching+0x12/0xc0
[  416.304137][T12839]  ? __pfx___devinet_sysctl_register+0x10/0x10
[  416.304160][T12839]  ? __kmalloc_node_track_caller_noprof+0x370/0x930
[  416.304196][T12839]  ? __asan_memcpy+0x3c/0x60
[  416.304225][T12839]  devinet_init_net+0x315/0x910
[  416.304252][T12839]  ? __pfx_devinet_init_net+0x10/0x10
[  416.304277][T12839]  ops_init+0x1e2/0x5f0
[  416.304314][T12839]  setup_net+0x11d/0x3a0
[  416.304348][T12839]  ? __pfx_setup_net+0x10/0x10
[  416.304376][T12839]  ? lockdep_init_map_type+0x5c/0x270
[  416.304400][T12839]  ? mutex_init_lockep+0x110/0x150
[  416.304437][T12839]  copy_net_ns+0x351/0x7c0
[  416.304463][T12839]  create_new_namespaces+0x3ea/0xab0
[  416.304500][T12839]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  416.304533][T12839]  ksys_unshare+0x45b/0xa40
[  416.304555][T12839]  ? __pfx_ksys_unshare+0x10/0x10
[  416.304577][T12839]  ? xfd_validate_state+0x61/0x180
[  416.304611][T12839]  __x64_sys_unshare+0x31/0x40
[  416.304632][T12839]  do_syscall_64+0xcd/0xf80
[  416.304658][T12839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.304682][T12839] RIP: 0033:0x7f076998f7c9
[  416.304702][T12839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.304726][T12839] RSP: 002b:00007f076a7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  416.304748][T12839] RAX: ffffffffffffffda RBX: 00007f0769be5fa0 RCX: 00007f076998f7c9
[  416.304763][T12839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  416.304777][T12839] RBP: 00007f0769a13f91 R08: 0000000000000000 R09: 0000000000000000
[  416.304791][T12839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.304805][T12839] R13: 00007f0769be6038 R14: 00007f0769be5fa0 R15: 00007ffc6e5a5b08
[  416.304839][T12839]  </TASK>
[  416.305455][T12839] sysctl could not get directory: /net/ipv4/conf/all -12
[  417.068621][T12851] FAULT_INJECTION: forcing a failure.
[  417.068621][T12851] name failslab, interval 1, probability 0, space 0, times 0
[  417.129384][T12851] CPU: 0 UID: 0 PID: 12851 Comm: syz.0.1383 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  417.129423][T12851] Tainted: [L]=SOFTLOCKUP
[  417.129432][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  417.129445][T12851] Call Trace:
[  417.129454][T12851]  <TASK>
[  417.129464][T12851]  dump_stack_lvl+0x16c/0x1f0
[  417.129509][T12851]  should_fail_ex+0x512/0x640
[  417.129536][T12851]  ? kmem_cache_alloc_noprof+0x62/0x770
[  417.129570][T12851]  should_failslab+0xc2/0x120
[  417.129609][T12851]  kmem_cache_alloc_noprof+0x83/0x770
[  417.129640][T12851]  ? vm_area_dup+0x27/0x8d0
[  417.129672][T12851]  ? vm_area_dup+0x27/0x8d0
[  417.129694][T12851]  vm_area_dup+0x27/0x8d0
[  417.129722][T12851]  dup_mmap+0x6a4/0x20e0
[  417.129759][T12851]  ? __pfx_dup_mmap+0x10/0x10
[  417.129806][T12851]  copy_process+0x3b9f/0x7430
[  417.129843][T12851]  ? __pfx___futex_wait+0x10/0x10
[  417.129874][T12851]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  417.129924][T12851]  ? __pfx_copy_process+0x10/0x10
[  417.129958][T12851]  ? find_held_lock+0x2b/0x80
[  417.129996][T12851]  ? futex_private_hash_put+0x160/0x1b0
[  417.130029][T12851]  kernel_clone+0xfc/0x910
[  417.130067][T12851]  ? __pfx_kernel_clone+0x10/0x10
[  417.130123][T12851]  __do_sys_clone+0xce/0x120
[  417.130158][T12851]  ? __pfx___do_sys_clone+0x10/0x10
[  417.130211][T12851]  ? xfd_validate_state+0x61/0x180
[  417.130233][T12851]  ? __pfx_do_writev+0x10/0x10
[  417.130273][T12851]  do_syscall_64+0xcd/0xf80
[  417.130299][T12851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.130324][T12851] RIP: 0033:0x7fad9b58f7c9
[  417.130352][T12851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.130378][T12851] RSP: 002b:00007fad9c4affe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  417.130402][T12851] RAX: ffffffffffffffda RBX: 00007fad9b7e5fa0 RCX: 00007fad9b58f7c9
[  417.130419][T12851] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 00000000a8100400
[  417.130434][T12851] RBP: 00007fad9b613f91 R08: 0000000000000000 R09: 0000000000000000
[  417.130448][T12851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  417.130460][T12851] R13: 00007fad9b7e6038 R14: 00007fad9b7e5fa0 R15: 00007ffce8dae4e8
[  417.130497][T12851]  </TASK>
[  417.543576][T12860] netlink: 302 bytes leftover after parsing attributes in process `syz.5.1376'.
[  419.175211][T12920] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  421.820253][T12976] netlink: 'syz.5.1398': attribute type 1 has an invalid length.
[  421.896127][T12982] __vm_enough_memory: pid: 12982, comm: syz.7.1400, bytes: 4398046511104 not enough memory for the allocation
[  422.136149][T12982] coredump: 79(syz.7.1400): Core dump to core aborted: cannot preserve file permissions
[  422.150449][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1401'.
[  422.254184][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1402'.
[  422.571736][T12995] zswap: compressor  not available
[  422.575991][T13008] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  423.700313][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'.
[  423.920997][T13044] FAULT_INJECTION: forcing a failure.
[  423.920997][T13044] name failslab, interval 1, probability 0, space 0, times 0
[  423.947046][T13044] CPU: 1 UID: 0 PID: 13044 Comm: syz.5.1413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  423.947086][T13044] Tainted: [L]=SOFTLOCKUP
[  423.947095][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  423.947110][T13044] Call Trace:
[  423.947119][T13044]  <TASK>
[  423.947129][T13044]  dump_stack_lvl+0x16c/0x1f0
[  423.947172][T13044]  should_fail_ex+0x512/0x640
[  423.947200][T13044]  ? fs_reclaim_acquire+0xae/0x150
[  423.947243][T13044]  should_failslab+0xc2/0x120
[  423.947278][T13044]  kmem_cache_alloc_noprof+0x83/0x770
[  423.947307][T13044]  ? __pfx_map_id_range_down+0x10/0x10
[  423.947341][T13044]  ? security_inode_alloc+0x3b/0x2b0
[  423.947373][T13044]  ? security_inode_alloc+0x3b/0x2b0
[  423.947399][T13044]  security_inode_alloc+0x3b/0x2b0
[  423.947428][T13044]  inode_init_always_gfp+0xced/0x1040
[  423.947469][T13044]  alloc_inode+0x86/0x240
[  423.947507][T13044]  sock_alloc+0x40/0x280
[  423.947545][T13044]  __sock_create+0xc2/0x8a0
[  423.947577][T13044]  __sys_socket+0x14d/0x260
[  423.947604][T13044]  ? __pfx___sys_socket+0x10/0x10
[  423.947629][T13044]  ? xfd_validate_state+0x61/0x180
[  423.947660][T13044]  __x64_sys_socket+0x72/0xb0
[  423.947684][T13044]  ? lockdep_hardirqs_on+0x7c/0x110
[  423.947706][T13044]  do_syscall_64+0xcd/0xf80
[  423.947732][T13044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.947756][T13044] RIP: 0033:0x7f62bb98f7c9
[  423.947778][T13044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.947800][T13044] RSP: 002b:00007f62bc8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  423.947824][T13044] RAX: ffffffffffffffda RBX: 00007f62bbbe5fa0 RCX: 00007f62bb98f7c9
[  423.947842][T13044] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  423.947857][T13044] RBP: 00007f62bba13f91 R08: 0000000000000000 R09: 0000000000000000
[  423.947872][T13044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  423.947888][T13044] R13: 00007f62bbbe6038 R14: 00007f62bbbe5fa0 R15: 00007ffc834e0b48
[  423.947923][T13044]  </TASK>
[  423.947952][T13044] socket: no more sockets
[  424.427021][T13044] random: crng reseeded on system resumption
[  424.861154][T13058] futex_wake_op: syz.7.1416 tries to shift op by -2048; fix this program
[  424.981822][T13056] zswap: compressor  not available
[  425.472522][T13073] serio: Serial port ttyS0
[  425.575222][T13077] FAULT_INJECTION: forcing a failure.
[  425.575222][T13077] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  425.632632][T13077] CPU: 0 UID: 0 PID: 13077 Comm: syz.7.1422 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.632669][T13077] Tainted: [L]=SOFTLOCKUP
[  425.632677][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  425.632685][T13077] Call Trace:
[  425.632690][T13077]  <TASK>
[  425.632696][T13077]  dump_stack_lvl+0x16c/0x1f0
[  425.632722][T13077]  should_fail_ex+0x512/0x640
[  425.632741][T13077]  should_fail_alloc_page+0xe7/0x130
[  425.632764][T13077]  prepare_alloc_pages+0x401/0x670
[  425.632784][T13077]  ? rcu_is_watching+0x12/0xc0
[  425.632805][T13077]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  425.632825][T13077]  ? lockdep_hardirqs_on+0x7c/0x110
[  425.632838][T13077]  ? finish_task_switch.isra.0+0x207/0xbd0
[  425.632861][T13077]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  425.632879][T13077]  ? __might_fault+0xe3/0x190
[  425.632893][T13077]  ? __might_fault+0xe3/0x190
[  425.632906][T13077]  ? __might_fault+0x13b/0x190
[  425.632926][T13077]  ? _copy_from_iter+0x161/0x16c0
[  425.632942][T13077]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  425.632964][T13077]  ? policy_nodemask+0xea/0x4e0
[  425.632985][T13077]  alloc_pages_mpol+0x1fb/0x550
[  425.633006][T13077]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  425.633030][T13077]  alloc_pages_noprof+0x131/0x390
[  425.633050][T13077]  anon_pipe_write+0xeb0/0x1bd0
[  425.633075][T13077]  ? __pfx_find_held_lock+0x1/0x10
[  425.633096][T13077]  ? __pfx_anon_pipe_write+0x10/0x10
[  425.633115][T13077]  ? common_file_perm+0x1b1/0x500
[  425.633134][T13077]  ? bpf_lsm_file_permission+0x9/0x10
[  425.633150][T13077]  ? security_file_permission+0x71/0x210
[  425.633169][T13077]  ? rw_verify_area+0xcf/0x6c0
[  425.633187][T13077]  vfs_write+0x7d3/0x11d0
[  425.633206][T13077]  ? __pfx_anon_pipe_write+0x10/0x10
[  425.633234][T13077]  ? __pfx_vfs_write+0x10/0x10
[  425.633252][T13077]  ? find_held_lock+0x2b/0x80
[  425.633281][T13077]  ksys_write+0x1f8/0x250
[  425.633300][T13077]  ? __pfx_ksys_write+0x10/0x10
[  425.633318][T13077]  ? syscall_user_dispatch+0x78/0x140
[  425.633342][T13077]  do_syscall_64+0xcd/0xf80
[  425.633356][T13077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.633369][T13077] RIP: 0033:0x7f076998f7c9
[  425.633381][T13077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.633394][T13077] RSP: 002b:00007f076a793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  425.633407][T13077] RAX: ffffffffffffffda RBX: 00007f0769be6090 RCX: 00007f076998f7c9
[  425.633416][T13077] RDX: 0000000004000000 RSI: 0000200000000380 RDI: 0000000000000000
[  425.633424][T13077] RBP: 00007f0769a13f91 R08: 0000000000000000 R09: 0000000000000000
[  425.633433][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.633440][T13077] R13: 00007f0769be6128 R14: 00007f0769be6090 R15: 00007ffc6e5a5b08
[  425.633460][T13077]  </TASK>
[  426.037138][T13081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'.
[  426.783020][T13101] zswap: compressor  not available
[  427.396749][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1432'.
[  429.548439][T13202] FAULT_INJECTION: forcing a failure.
[  429.548439][T13202] name failslab, interval 1, probability 0, space 0, times 0
[  429.596705][T13202] CPU: 1 UID: 0 PID: 13202 Comm: syz.0.1440 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  429.596750][T13202] Tainted: [L]=SOFTLOCKUP
[  429.596758][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  429.596772][T13202] Call Trace:
[  429.596780][T13202]  <TASK>
[  429.596791][T13202]  dump_stack_lvl+0x16c/0x1f0
[  429.596830][T13202]  should_fail_ex+0x512/0x640
[  429.596859][T13202]  ? kmem_cache_alloc_noprof+0x62/0x770
[  429.596891][T13202]  should_failslab+0xc2/0x120
[  429.596926][T13202]  kmem_cache_alloc_noprof+0x83/0x770
[  429.596954][T13202]  ? __kernfs_new_node+0xd2/0x9b0
[  429.596987][T13202]  ? __kernfs_new_node+0xd2/0x9b0
[  429.597014][T13202]  __kernfs_new_node+0xd2/0x9b0
[  429.597045][T13202]  ? __pfx___kernfs_new_node+0x10/0x10
[  429.597082][T13202]  ? find_held_lock+0x2b/0x80
[  429.597114][T13202]  ? kernfs_root+0xee/0x2a0
[  429.597157][T13202]  kernfs_new_node+0x13c/0x1e0
[  429.597198][T13202]  __kernfs_create_file+0x53/0x350
[  429.597236][T13202]  cgroup_addrm_files+0x546/0xc20
[  429.597283][T13202]  ? __xa_store+0x1dc/0x2e0
[  429.597309][T13202]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  429.597344][T13202]  ? __pfx___xa_store+0x10/0x10
[  429.597381][T13202]  ? do_raw_spin_unlock+0x172/0x230
[  429.597416][T13202]  css_populate_dir+0x169/0x570
[  429.597451][T13202]  cgroup_apply_control_enable+0x3f3/0xbb0
[  429.597499][T13202]  cgroup_mkdir+0x5d9/0x12d0
[  429.597537][T13202]  ? __pfx_cgroup_mkdir+0x10/0x10
[  429.597573][T13202]  kernfs_iop_mkdir+0x111/0x190
[  429.597603][T13202]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  429.597631][T13202]  vfs_mkdir+0x731/0xb60
[  429.597666][T13202]  do_mkdirat+0x442/0x5e0
[  429.597705][T13202]  ? __pfx_do_mkdirat+0x10/0x10
[  429.597741][T13202]  ? strncpy_from_user+0x203/0x2e0
[  429.597771][T13202]  ? getname_flags.part.0+0x1c5/0x550
[  429.597803][T13202]  __x64_sys_mkdir+0xef/0x140
[  429.597840][T13202]  do_syscall_64+0xcd/0xf80
[  429.597865][T13202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.597888][T13202] RIP: 0033:0x7fad9b58f7c9
[  429.597908][T13202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.597933][T13202] RSP: 002b:00007fad9c48f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  429.597958][T13202] RAX: ffffffffffffffda RBX: 00007fad9b7e6090 RCX: 00007fad9b58f7c9
[  429.597975][T13202] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000
[  429.597991][T13202] RBP: 00007fad9b613f91 R08: 0000000000000000 R09: 0000000000000000
[  429.598006][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.598022][T13202] R13: 00007fad9b7e6128 R14: 00007fad9b7e6090 R15: 00007ffce8dae4e8
[  429.598061][T13202]  </TASK>
[  429.950957][T13202] cgroup: cgroup_addrm_files: failed to add swappiness, err=-12
[  430.457496][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1444'.
[  431.276752][T13254] random: crng reseeded on system resumption
[  431.482327][T13254] can: request_module (can-proto-0) failed.
[  432.592733][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1458'.
[  432.995623][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'.
[  433.013879][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1460'.
[  433.079622][T13323] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1461'.
[  433.590334][T13340] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1463'.
[  434.219797][T13359] FAULT_INJECTION: forcing a failure.
[  434.219797][T13359] name fail_futex, interval 1, probability 0, space 0, times 0
[  434.260148][T13359] CPU: 0 UID: 0 PID: 13359 Comm: syz.3.1467 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  434.260186][T13359] Tainted: [L]=SOFTLOCKUP
[  434.260194][T13359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  434.260208][T13359] Call Trace:
[  434.260215][T13359]  <TASK>
[  434.260224][T13359]  dump_stack_lvl+0x16c/0x1f0
[  434.260266][T13359]  should_fail_ex+0x512/0x640
[  434.260298][T13359]  get_futex_key+0x293/0x15f0
[  434.260326][T13359]  ? __pfx_get_futex_key+0x10/0x10
[  434.260361][T13359]  futex_wake+0xea/0x530
[  434.260394][T13359]  ? __pfx_futex_wake+0x10/0x10
[  434.260435][T13359]  do_futex+0x1e3/0x350
[  434.260460][T13359]  ? __pfx_do_futex+0x10/0x10
[  434.260482][T13359]  ? __might_fault+0xe3/0x190
[  434.260519][T13359]  mm_release+0x24e/0x300
[  434.260550][T13359]  do_exit+0x69e/0x2bd0
[  434.260580][T13359]  ? __pfx_do_exit+0x10/0x10
[  434.260602][T13359]  ? do_raw_spin_lock+0x12c/0x2b0
[  434.260635][T13359]  ? find_held_lock+0x2b/0x80
[  434.260670][T13359]  do_group_exit+0xd3/0x2a0
[  434.260696][T13359]  get_signal+0x2671/0x26d0
[  434.260740][T13359]  ? __pfx_get_signal+0x10/0x10
[  434.260774][T13359]  ? do_futex+0x122/0x350
[  434.260803][T13359]  arch_do_signal_or_restart+0x8f/0x7a0
[  434.260837][T13359]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  434.260879][T13359]  ? fput+0x70/0xf0
[  434.260901][T13359]  ? __pfx___x64_sys_futex+0x10/0x10
[  434.260934][T13359]  exit_to_user_mode_loop+0x8c/0x540
[  434.260967][T13359]  do_syscall_64+0x4ee/0xf80
[  434.260993][T13359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.261016][T13359] RIP: 0033:0x7f5ad1b8f7c9
[  434.261035][T13359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  434.261057][T13359] RSP: 002b:00007f5ad29f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  434.261080][T13359] RAX: fffffffffffffe00 RBX: 00007f5ad1de5fa8 RCX: 00007f5ad1b8f7c9
[  434.261096][T13359] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ad1de5fa8
[  434.261110][T13359] RBP: 00007f5ad1de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  434.261125][T13359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.261138][T13359] R13: 00007f5ad1de6038 R14: 00007ffd12aaa060 R15: 00007ffd12aaa148
[  434.261173][T13359]  </TASK>
[  434.787689][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1469'.
[  436.928498][   T30] audit: type=1800 audit(1768839306.980:11): pid=13419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1476" name="dbroot" dev="configfs" ino=53863 res=0 errno=0
[  437.633756][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1479'.
[  438.793068][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  440.004035][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.010428][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.316128][T13412] kexec: Could not allocate control_code_buffer
[  441.551154][T13537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1491'.
[  442.328358][T13573] FAULT_INJECTION: forcing a failure.
[  442.328358][T13573] name failslab, interval 1, probability 0, space 0, times 0
[  442.567065][T13573] CPU: 0 UID: 0 PID: 13573 Comm: syz.3.1494 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  442.567089][T13573] Tainted: [L]=SOFTLOCKUP
[  442.567094][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  442.567102][T13573] Call Trace:
[  442.567107][T13573]  <TASK>
[  442.567112][T13573]  dump_stack_lvl+0x16c/0x1f0
[  442.567139][T13573]  should_fail_ex+0x512/0x640
[  442.567155][T13573]  ? kmem_cache_alloc_lru_noprof+0x66/0x770
[  442.567175][T13573]  should_failslab+0xc2/0x120
[  442.567195][T13573]  kmem_cache_alloc_lru_noprof+0x87/0x770
[  442.567212][T13573]  ? stack_trace_save+0x8e/0xc0
[  442.567232][T13573]  ? __d_alloc+0x35/0xa80
[  442.567248][T13573]  ? __d_alloc+0x35/0xa80
[  442.567258][T13573]  __d_alloc+0x35/0xa80
[  442.567272][T13573]  d_alloc_parallel+0x111/0x1510
[  442.567294][T13573]  ? find_held_lock+0x2b/0x80
[  442.567313][T13573]  ? __pfx_d_alloc_parallel+0x10/0x10
[  442.567332][T13573]  ? __d_lookup+0x266/0x4a0
[  442.567352][T13573]  lookup_open.isra.0+0x66c/0x1780
[  442.567375][T13573]  ? __pfx_lookup_open.isra.0+0x10/0x10
[  442.567403][T13573]  ? mnt_get_write_access+0x1e9/0x2f0
[  442.567421][T13573]  path_openat+0x12bb/0x3140
[  442.567447][T13573]  ? __pfx_path_openat+0x10/0x10
[  442.567465][T13573]  ? kasan_save_stack+0x42/0x60
[  442.567483][T13573]  ? kasan_save_track+0x14/0x30
[  442.567499][T13573]  ? __kasan_slab_alloc+0x89/0x90
[  442.567517][T13573]  ? kmem_cache_alloc_noprof+0x25e/0x770
[  442.567531][T13573]  ? getname_flags.part.0+0x4c/0x550
[  442.567545][T13573]  ? getname_flags+0x93/0xf0
[  442.567562][T13573]  ? acct_on+0x82/0xa00
[  442.567579][T13573]  ? __x64_sys_acct+0x81/0x1e0
[  442.567595][T13573]  ? do_syscall_64+0xcd/0xf80
[  442.567606][T13573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.567623][T13573]  do_filp_open+0x20b/0x470
[  442.567644][T13573]  ? __pfx_do_filp_open+0x10/0x10
[  442.567678][T13573]  ? find_held_lock+0x2b/0x80
[  442.567694][T13573]  ? __might_fault+0xe3/0x190
[  442.567709][T13573]  ? __might_fault+0xe3/0x190
[  442.567723][T13573]  ? __might_fault+0x13b/0x190
[  442.567741][T13573]  file_open_name+0x2a3/0x450
[  442.567758][T13573]  ? __pfx_file_open_name+0x10/0x10
[  442.567775][T13573]  ? getname_flags.part.0+0x1c5/0x550
[  442.567794][T13573]  acct_on+0xc7/0xa00
[  442.567817][T13573]  ? __pfx_acct_on+0x10/0x10
[  442.567835][T13573]  ? bpf_lsm_capable+0x9/0x10
[  442.567857][T13573]  __x64_sys_acct+0x81/0x1e0
[  442.567874][T13573]  ? lockdep_hardirqs_on+0x7c/0x110
[  442.567887][T13573]  do_syscall_64+0xcd/0xf80
[  442.567900][T13573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.567913][T13573] RIP: 0033:0x7f5ad1b8f7c9
[  442.567925][T13573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.567938][T13573] RSP: 002b:00007f5ad29d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  442.567951][T13573] RAX: ffffffffffffffda RBX: 00007f5ad1de6090 RCX: 00007f5ad1b8f7c9
[  442.567960][T13573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  442.567967][T13573] RBP: 00007f5ad1c13f91 R08: 0000000000000000 R09: 0000000000000000
[  442.567975][T13573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  442.567983][T13573] R13: 00007f5ad1de6128 R14: 00007f5ad1de6090 R15: 00007ffd12aaa148
[  442.568002][T13573]  </TASK>
[  443.567506][T13585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1498'.
[  443.747317][T13585] team0: Port device team_slave_1 removed
[  443.833457][T13592] FAULT_INJECTION: forcing a failure.
[  443.833457][T13592] name failslab, interval 1, probability 0, space 0, times 0
[  443.860917][T13592] CPU: 1 UID: 0 PID: 13592 Comm: syz.3.1496 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  443.860960][T13592] Tainted: [L]=SOFTLOCKUP
[  443.860969][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  443.860983][T13592] Call Trace:
[  443.860990][T13592]  <TASK>
[  443.861000][T13592]  dump_stack_lvl+0x16c/0x1f0
[  443.861049][T13592]  should_fail_ex+0x512/0x640
[  443.861078][T13592]  ? kmem_cache_alloc_noprof+0x62/0x770
[  443.861112][T13592]  should_failslab+0xc2/0x120
[  443.861150][T13592]  kmem_cache_alloc_noprof+0x83/0x770
[  443.861180][T13592]  ? __kernfs_new_node+0xd2/0x9b0
[  443.861216][T13592]  ? __kernfs_new_node+0xd2/0x9b0
[  443.861242][T13592]  __kernfs_new_node+0xd2/0x9b0
[  443.861275][T13592]  ? __pfx___kernfs_new_node+0x10/0x10
[  443.861314][T13592]  ? find_held_lock+0x2b/0x80
[  443.861346][T13592]  ? kernfs_root+0xee/0x2a0
[  443.861381][T13592]  kernfs_new_node+0x13c/0x1e0
[  443.861418][T13592]  __kernfs_create_file+0x53/0x350
[  443.861459][T13592]  cgroup_addrm_files+0x546/0xc20
[  443.861513][T13592]  ? __xa_store+0x1dc/0x2e0
[  443.861539][T13592]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  443.861573][T13592]  ? __pfx___xa_store+0x10/0x10
[  443.861612][T13592]  ? do_raw_spin_unlock+0x172/0x230
[  443.861646][T13592]  css_populate_dir+0x169/0x570
[  443.861679][T13592]  cgroup_apply_control_enable+0x3f3/0xbb0
[  443.861726][T13592]  cgroup_mkdir+0x5d9/0x12d0
[  443.861762][T13592]  ? __pfx_cgroup_mkdir+0x10/0x10
[  443.861798][T13592]  kernfs_iop_mkdir+0x111/0x190
[  443.861829][T13592]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  443.861854][T13592]  vfs_mkdir+0x731/0xb60
[  443.861885][T13592]  do_mkdirat+0x442/0x5e0
[  443.861922][T13592]  ? __pfx_do_mkdirat+0x10/0x10
[  443.861956][T13592]  ? strncpy_from_user+0x203/0x2e0
[  443.861988][T13592]  ? getname_flags.part.0+0x1c5/0x550
[  443.862017][T13592]  __x64_sys_mkdir+0xef/0x140
[  443.862052][T13592]  do_syscall_64+0xcd/0xf80
[  443.862077][T13592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.862102][T13592] RIP: 0033:0x7f5ad1b8f7c9
[  443.862123][T13592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.862146][T13592] RSP: 002b:00007f5ad29d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  443.862169][T13592] RAX: ffffffffffffffda RBX: 00007f5ad1de6090 RCX: 00007f5ad1b8f7c9
[  443.862184][T13592] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000
[  443.862199][T13592] RBP: 00007f5ad1c13f91 R08: 0000000000000000 R09: 0000000000000000
[  443.862213][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  443.862227][T13592] R13: 00007f5ad1de6128 R14: 00007f5ad1de6090 R15: 00007ffd12aaa148
[  443.862263][T13592]  </TASK>
[  443.862403][T13592] cgroup: cgroup_addrm_files: failed to add cgroup.event_control, err=-12
[  444.227415][T13599] FAULT_INJECTION: forcing a failure.
[  444.227415][T13599] name fail_futex, interval 1, probability 0, space 0, times 0
[  444.227450][T13599] CPU: 1 UID: 0 PID: 13599 Comm: syz.0.1500 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  444.227469][T13599] Tainted: [L]=SOFTLOCKUP
[  444.227474][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  444.227481][T13599] Call Trace:
[  444.227486][T13599]  <TASK>
[  444.227491][T13599]  dump_stack_lvl+0x16c/0x1f0
[  444.227517][T13599]  should_fail_ex+0x512/0x640
[  444.227536][T13599]  get_futex_key+0x1d0/0x15f0
[  444.227554][T13599]  ? __pfx_get_futex_key+0x10/0x10
[  444.227570][T13599]  ? __asan_memset+0x23/0x50
[  444.227589][T13599]  futex_wake+0xea/0x530
[  444.227606][T13599]  ? futex_wait+0x120/0x380
[  444.227624][T13599]  ? __pfx_futex_wait+0x10/0x10
[  444.227641][T13599]  ? __pfx_futex_wake+0x10/0x10
[  444.227663][T13599]  ? kmem_cache_free+0x171/0x770
[  444.227682][T13599]  do_futex+0x1e3/0x350
[  444.227697][T13599]  ? __pfx_do_futex+0x10/0x10
[  444.227711][T13599]  ? __pfx___might_resched+0x10/0x10
[  444.227734][T13599]  __x64_sys_futex+0x1e0/0x4c0
[  444.227750][T13599]  ? __do_sys_close_range+0x278/0x730
[  444.227770][T13599]  ? __pfx___x64_sys_futex+0x10/0x10
[  444.227786][T13599]  ? xfd_validate_state+0x61/0x180
[  444.227804][T13599]  do_syscall_64+0xcd/0xf80
[  444.227818][T13599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.227832][T13599] RIP: 0033:0x7fad9b58f7c9
[  444.227843][T13599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.227855][T13599] RSP: 002b:00007fad9c4b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  444.227868][T13599] RAX: ffffffffffffffda RBX: 00007fad9b7e5fa8 RCX: 00007fad9b58f7c9
[  444.227876][T13599] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fad9b7e5fac
[  444.227884][T13599] RBP: 00007fad9b7e5fa0 R08: 00007fad9c4b1000 R09: 0000000000000000
[  444.227892][T13599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.227900][T13599] R13: 00007fad9b7e6038 R14: 00007ffce8dae400 R15: 00007ffce8dae4e8
[  444.227917][T13599]  </TASK>
[  444.730495][T13599] random: crng reseeded on system resumption
[  445.381149][T13609] binder: 13608:13609 ioctl c0306201 0 returned -14
[  445.563340][T13612] serio: Serial port ttyS0
[  447.103957][   T30] audit: type=1800 audit(1768839317.140:12): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1508" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  447.127375][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'.
[  448.485265][T13666] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  448.520131][T13667] FAULT_INJECTION: forcing a failure.
[  448.520131][T13667] name failslab, interval 1, probability 0, space 0, times 0
[  448.537080][T13666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1516'.
[  448.566173][T13667] CPU: 0 UID: 0 PID: 13667 Comm: syz.0.1515 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.566215][T13667] Tainted: [L]=SOFTLOCKUP
[  448.566223][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  448.566239][T13667] Call Trace:
[  448.566247][T13667]  <TASK>
[  448.566257][T13667]  dump_stack_lvl+0x16c/0x1f0
[  448.566310][T13667]  should_fail_ex+0x512/0x640
[  448.566338][T13667]  ? kmem_cache_alloc_noprof+0x62/0x770
[  448.566377][T13667]  should_failslab+0xc2/0x120
[  448.566415][T13667]  kmem_cache_alloc_noprof+0x83/0x770
[  448.566445][T13667]  ? alloc_empty_file+0x55/0x1e0
[  448.566478][T13667]  ? alloc_empty_file+0x55/0x1e0
[  448.566502][T13667]  alloc_empty_file+0x55/0x1e0
[  448.566530][T13667]  alloc_file_pseudo+0x13a/0x230
[  448.566559][T13667]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  448.566597][T13667]  __shmem_file_setup+0x1a8/0x350
[  448.566640][T13667]  shmem_zero_setup+0x93/0x1b0
[  448.566673][T13667]  __mmap_region+0x2277/0x2a00
[  448.566709][T13667]  ? __pfx___mmap_region+0x10/0x10
[  448.566748][T13667]  ? trace_ignore_this_task+0xbc/0x100
[  448.566801][T13667]  ? finish_task_switch.isra.0+0x202/0xbd0
[  448.566837][T13667]  ? rcu_is_watching+0x12/0xc0
[  448.566941][T13667]  ? rcu_is_watching+0x12/0xc0
[  448.566982][T13667]  mmap_region+0x1ab/0x3f0
[  448.567012][T13667]  ? __get_unmapped_area+0x267/0x3f0
[  448.567050][T13667]  do_mmap+0xa3e/0x1210
[  448.567091][T13667]  ? __pfx_do_mmap+0x10/0x10
[  448.567126][T13667]  ? __pfx_down_write_killable+0x10/0x10
[  448.567162][T13667]  vm_mmap_pgoff+0x29e/0x470
[  448.567202][T13667]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  448.567245][T13667]  ? __x64_sys_futex+0x1e0/0x4c0
[  448.567277][T13667]  ? __x64_sys_futex+0x1e9/0x4c0
[  448.567311][T13667]  ksys_mmap_pgoff+0x7d/0x5c0
[  448.567345][T13667]  ? xfd_validate_state+0x61/0x180
[  448.567368][T13667]  ? __pfx_ksys_write+0x10/0x10
[  448.567405][T13667]  __x64_sys_mmap+0x125/0x190
[  448.567435][T13667]  do_syscall_64+0xcd/0xf80
[  448.567463][T13667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.567488][T13667] RIP: 0033:0x7fad9b58f7c9
[  448.567510][T13667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.567535][T13667] RSP: 002b:00007fad9c4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  448.567559][T13667] RAX: ffffffffffffffda RBX: 00007fad9b7e5fa0 RCX: 00007fad9b58f7c9
[  448.567576][T13667] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000
[  448.567591][T13667] RBP: 00007fad9b613f91 R08: ffffffffffffffff R09: 0000000000008000
[  448.567608][T13667] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  448.567623][T13667] R13: 00007fad9b7e6038 R14: 00007fad9b7e5fa0 R15: 00007ffce8dae4e8
[  448.567661][T13667]  </TASK>
[  448.941790][T13670] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1510'.
[  448.992178][T13676] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1510'.
[  449.032201][T13669] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1510'.
[  449.052711][T13670] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:0:403:100:0, load rds_tcp or rds_rdma?
[  449.090029][T13669] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1510'.
[  449.299058][T13685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1520'.
[  449.763513][T13687] FAULT_INJECTION: forcing a failure.
[  449.763513][T13687] name failslab, interval 1, probability 0, space 0, times 0
[  449.859485][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.7.1522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.859527][T13687] Tainted: [L]=SOFTLOCKUP
[  449.859536][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  449.859552][T13687] Call Trace:
[  449.859561][T13687]  <TASK>
[  449.859571][T13687]  dump_stack_lvl+0x16c/0x1f0
[  449.859617][T13687]  should_fail_ex+0x512/0x640
[  449.859645][T13687]  ? fs_reclaim_acquire+0xae/0x150
[  449.859687][T13687]  should_failslab+0xc2/0x120
[  449.859724][T13687]  kmem_cache_alloc_noprof+0x83/0x770
[  449.859754][T13687]  ? __pfx_map_id_range_down+0x10/0x10
[  449.859788][T13687]  ? security_inode_alloc+0x3b/0x2b0
[  449.859838][T13687]  ? security_inode_alloc+0x3b/0x2b0
[  449.859866][T13687]  security_inode_alloc+0x3b/0x2b0
[  449.859896][T13687]  inode_init_always_gfp+0xced/0x1040
[  449.859938][T13687]  alloc_inode+0x86/0x240
[  449.859967][T13687]  new_inode+0x22/0x1c0
[  449.859997][T13687]  __debugfs_create_file+0x105/0x530
[  449.860028][T13687]  debugfs_create_file_full+0x41/0x60
[  449.860057][T13687]  drm_debugfs_clients_add+0xd9/0x200
[  449.860092][T13687]  drm_file_alloc+0x5c6/0xb40
[  449.860126][T13687]  drm_open_helper+0x204/0x550
[  449.860158][T13687]  drm_open+0x1a0/0x3e0
[  449.860185][T13687]  ? __pfx_drm_open+0x10/0x10
[  449.860212][T13687]  drm_stub_open+0x20f/0x380
[  449.860242][T13687]  ? __pfx_drm_stub_open+0x10/0x10
[  449.860269][T13687]  chrdev_open+0x234/0x6a0
[  449.860303][T13687]  ? __pfx_apparmor_file_open+0x10/0x10
[  449.860330][T13687]  ? __pfx_chrdev_open+0x10/0x10
[  449.860368][T13687]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  449.860415][T13687]  do_dentry_open+0x748/0x1590
[  449.860450][T13687]  ? __pfx_chrdev_open+0x10/0x10
[  449.860495][T13687]  vfs_open+0x82/0x3f0
[  449.860526][T13687]  path_openat+0x2078/0x3140
[  449.860574][T13687]  ? __pfx_path_openat+0x10/0x10
[  449.860623][T13687]  do_filp_open+0x20b/0x470
[  449.860661][T13687]  ? __pfx_do_filp_open+0x10/0x10
[  449.860723][T13687]  ? alloc_fd+0x471/0x7d0
[  449.860769][T13687]  do_sys_openat2+0x121/0x290
[  449.860796][T13687]  ? __pfx_do_sys_openat2+0x10/0x10
[  449.860837][T13687]  __x64_sys_openat+0x174/0x210
[  449.860865][T13687]  ? __pfx___x64_sys_openat+0x10/0x10
[  449.860908][T13687]  do_syscall_64+0xcd/0xf80
[  449.860936][T13687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.860961][T13687] RIP: 0033:0x7f076998f7c9
[  449.860982][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.861006][T13687] RSP: 002b:00007f076a7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  449.861031][T13687] RAX: ffffffffffffffda RBX: 00007f0769be5fa0 RCX: 00007f076998f7c9
[  449.861048][T13687] RDX: 0000000000080202 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  449.861065][T13687] RBP: 00007f0769a13f91 R08: 0000000000000000 R09: 0000000000000000
[  449.861088][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.861103][T13687] R13: 00007f0769be6038 R14: 00007f0769be5fa0 R15: 00007ffc6e5a5b08
[  449.861140][T13687]  </TASK>
[  449.861181][T13687] debugfs: out of free dentries, can not create file 'proc_info'
[  451.659918][T13731] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1532'.
[  452.683888][T13753] FAULT_INJECTION: forcing a failure.
[  452.683888][T13753] name failslab, interval 1, probability 0, space 0, times 0
[  452.732230][T13753] CPU: 0 UID: 0 PID: 13753 Comm: syz.0.1537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  452.732270][T13753] Tainted: [L]=SOFTLOCKUP
[  452.732279][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  452.732293][T13753] Call Trace:
[  452.732301][T13753]  <TASK>
[  452.732310][T13753]  dump_stack_lvl+0x16c/0x1f0
[  452.732353][T13753]  should_fail_ex+0x512/0x640
[  452.732379][T13753]  ? fs_reclaim_acquire+0xae/0x150
[  452.732417][T13753]  should_failslab+0xc2/0x120
[  452.732453][T13753]  kmem_cache_alloc_noprof+0x83/0x770
[  452.732482][T13753]  ? __pfx_map_id_range_down+0x10/0x10
[  452.732513][T13753]  ? security_inode_alloc+0x3b/0x2b0
[  452.732552][T13753]  ? security_inode_alloc+0x3b/0x2b0
[  452.732578][T13753]  security_inode_alloc+0x3b/0x2b0
[  452.732607][T13753]  inode_init_always_gfp+0xced/0x1040
[  452.732648][T13753]  alloc_inode+0x86/0x240
[  452.732675][T13753]  new_inode+0x22/0x1c0
[  452.732705][T13753]  __debugfs_create_file+0x105/0x530
[  452.732736][T13753]  debugfs_create_file_full+0x41/0x60
[  452.732764][T13753]  drm_debugfs_clients_add+0xd9/0x200
[  452.732792][T13753]  drm_file_alloc+0x5c6/0xb40
[  452.732825][T13753]  drm_open_helper+0x204/0x550
[  452.732856][T13753]  drm_open+0x1a0/0x3e0
[  452.732883][T13753]  ? __pfx_drm_open+0x10/0x10
[  452.732908][T13753]  drm_stub_open+0x20f/0x380
[  452.732936][T13753]  ? __pfx_drm_stub_open+0x10/0x10
[  452.732962][T13753]  chrdev_open+0x234/0x6a0
[  452.732994][T13753]  ? __pfx_apparmor_file_open+0x10/0x10
[  452.733018][T13753]  ? __pfx_chrdev_open+0x10/0x10
[  452.733053][T13753]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  452.733096][T13753]  do_dentry_open+0x748/0x1590
[  452.733128][T13753]  ? __pfx_chrdev_open+0x10/0x10
[  452.733171][T13753]  vfs_open+0x82/0x3f0
[  452.733208][T13753]  path_openat+0x2078/0x3140
[  452.733259][T13753]  ? __pfx_path_openat+0x10/0x10
[  452.733308][T13753]  do_filp_open+0x20b/0x470
[  452.733343][T13753]  ? __pfx_do_filp_open+0x10/0x10
[  452.733403][T13753]  ? alloc_fd+0x471/0x7d0
[  452.733445][T13753]  do_sys_openat2+0x121/0x290
[  452.733471][T13753]  ? __pfx_do_sys_openat2+0x10/0x10
[  452.733512][T13753]  __x64_sys_openat+0x174/0x210
[  452.733539][T13753]  ? __pfx___x64_sys_openat+0x10/0x10
[  452.733589][T13753]  do_syscall_64+0xcd/0xf80
[  452.733615][T13753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.733638][T13753] RIP: 0033:0x7fad9b58f7c9
[  452.733658][T13753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.733680][T13753] RSP: 002b:00007fad9c4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  452.733703][T13753] RAX: ffffffffffffffda RBX: 00007fad9b7e5fa0 RCX: 00007fad9b58f7c9
[  452.733719][T13753] RDX: 0000000000080202 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  452.733735][T13753] RBP: 00007fad9b613f91 R08: 0000000000000000 R09: 0000000000000000
[  452.733749][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.733764][T13753] R13: 00007fad9b7e6038 R14: 00007fad9b7e5fa0 R15: 00007ffce8dae4e8
[  452.733798][T13753]  </TASK>
[  453.037533][T13753] debugfs: out of free dentries, can not create file 'proc_info'
[  453.450995][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'.
[  454.235466][ T5837] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  454.244812][ T5837] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff
[  454.490847][T13782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1544'.
[  455.009498][T13793] random: crng reseeded on system resumption
[  458.418354][T13840] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  458.495968][T13844] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  458.569572][T13844] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  458.578876][T13844] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  458.758556][T13844] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  458.808729][T13844] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  458.869843][T13844] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  458.879065][T13844] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1559'.
[  459.399641][T13867] FAULT_INJECTION: forcing a failure.
[  459.399641][T13867] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  459.466956][T13867] CPU: 1 UID: 0 PID: 13867 Comm: syz.5.1567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  459.466996][T13867] Tainted: [L]=SOFTLOCKUP
[  459.467005][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  459.467020][T13867] Call Trace:
[  459.467030][T13867]  <TASK>
[  459.467039][T13867]  dump_stack_lvl+0x16c/0x1f0
[  459.467084][T13867]  should_fail_ex+0x512/0x640
[  459.467118][T13867]  should_fail_alloc_page+0xe7/0x130
[  459.467160][T13867]  prepare_alloc_pages+0x401/0x670
[  459.467200][T13867]  ? rcu_is_watching+0x12/0xc0
[  459.467236][T13867]  __alloc_frozen_pages_noprof+0x18b/0x2430
[  459.467271][T13867]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  459.467310][T13867]  ? is_bpf_text_address+0x94/0x1a0
[  459.467343][T13867]  ? kernel_text_address+0x8d/0x100
[  459.467371][T13867]  ? __kernel_text_address+0xd/0x40
[  459.467395][T13867]  ? unwind_get_return_address+0x59/0xa0
[  459.467427][T13867]  ? arch_stack_walk+0xa6/0x100
[  459.467459][T13867]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  459.467502][T13867]  ? stack_depot_save_flags+0x29/0x9b0
[  459.467528][T13867]  ? __pfx_stack_trace_save+0x10/0x10
[  459.467563][T13867]  ? interleave_nodes+0x164/0x410
[  459.467603][T13867]  ? policy_nodemask+0xea/0x4e0
[  459.467640][T13867]  alloc_pages_mpol+0x1fb/0x550
[  459.467678][T13867]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  459.467723][T13867]  alloc_pages_noprof+0x131/0x390
[  459.467761][T13867]  kimage_alloc_pages+0x74/0x350
[  459.467799][T13867]  kimage_alloc_control_pages+0x153/0xa00
[  459.467845][T13867]  ? __pfx_kimage_alloc_control_pages+0x10/0x10
[  459.467902][T13867]  do_kexec_load+0x439/0x860
[  459.467928][T13867]  ? __pfx_do_kexec_load+0x10/0x10
[  459.467956][T13867]  ? _copy_from_user+0x59/0xd0
[  459.467988][T13867]  __x64_sys_kexec_load+0x1bf/0x230
[  459.468016][T13867]  do_syscall_64+0xcd/0xf80
[  459.468041][T13867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.468066][T13867] RIP: 0033:0x7f62bb98f7c9
[  459.468087][T13867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.468111][T13867] RSP: 002b:00007f62bc8c2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  459.468135][T13867] RAX: ffffffffffffffda RBX: 00007f62bbbe5fa0 RCX: 00007f62bb98f7c9
[  459.468151][T13867] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000ff
[  459.468165][T13867] RBP: 00007f62bba13f91 R08: 0000000000000000 R09: 0000000000000000
[  459.468179][T13867] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  459.468194][T13867] R13: 00007f62bbbe6038 R14: 00007f62bbbe5fa0 R15: 00007ffc834e0b48
[  459.468228][T13867]  </TASK>
[  459.468370][T13867] kexec: Could not allocate control_code_buffer
[  460.215028][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1570'.
[  462.178670][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'.
[  462.563685][T13933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1582'.
[  463.639151][T13947] binder: 13946:13947 ioctl 5380 2000000000c0 returned -22
[  463.725071][T13947] sd 0:0:1:0: PR command failed: 1026
[  463.817272][T13947] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  463.907437][T13947] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  464.526380][T13960] zswap: compressor  not available
[  464.566293][T13969] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000081: 0000 [#1] SMP KASAN PTI
[  464.578231][T13969] KASAN: null-ptr-deref in range [0x0000000000000408-0x000000000000040f]
[  464.586661][T13969] CPU: 0 UID: 0 PID: 13969 Comm: syz.5.1591 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.597615][T13969] Tainted: [L]=SOFTLOCKUP
[  464.601951][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  464.612008][T13969] RIP: 0010:status_show+0x30f/0x5d0
[  464.617230][T13969] Code: 03 80 3c 02 00 0f 85 b3 02 00 00 48 8b 9b 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 08 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 94 02 00 00 4c 8b b3 08 04 00 00 c1 e5 04 41 bc
[  464.636853][T13969] RSP: 0018:ffffc9000bc97ac0 EFLAGS: 00010206
[  464.642932][T13969] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c1f9000
[  464.650912][T13969] RDX: 0000000000000081 RSI: ffffffff87860c6e RDI: 0000000000000408
[  464.658893][T13969] RBP: 000000000000000f R08: 0000000000000005 R09: 0000000000000000
[  464.666875][T13969] R10: 000000000000000f R11: 2020766564206470 R12: ffff88807cdee02d
[  464.674857][T13969] R13: ffffc9000bc97b10 R14: ffff88807cdee000 R15: ffff888059e7f708
[  464.682828][T13969] FS:  00007f62bc8c26c0(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000
[  464.691754][T13969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  464.698348][T13969] CR2: 0000001b3081eff8 CR3: 00000000292e6000 CR4: 00000000003526f0
[  464.706321][T13969] Call Trace:
[  464.709592][T13969]  <TASK>
[  464.712517][T13969]  ? __pfx_status_show+0x10/0x10
[  464.717459][T13969]  ? __pfx_status_show+0x10/0x10
[  464.722392][T13969]  dev_attr_show+0x56/0xe0
[  464.726813][T13969]  ? __pfx_dev_attr_show+0x10/0x10
[  464.731923][T13969]  sysfs_kf_seq_show+0x216/0x3e0
[  464.736861][T13969]  seq_read_iter+0x50e/0x12d0
[  464.741808][T13969]  kernfs_fop_read_iter+0x46c/0x610
[  464.747012][T13969]  ? rw_verify_area+0xcf/0x6c0
[  464.751778][T13969]  vfs_read+0x8bf/0xcf0
[  464.755943][T13969]  ? __pfx_vfs_read+0x10/0x10
[  464.760625][T13969]  ksys_read+0x12a/0x250
[  464.764872][T13969]  ? __pfx_ksys_read+0x10/0x10
[  464.769638][T13969]  do_syscall_64+0xcd/0xf80
[  464.774140][T13969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.780025][T13969] RIP: 0033:0x7f62bb98f7c9
[  464.784431][T13969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.804031][T13969] RSP: 002b:00007f62bc8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  464.812439][T13969] RAX: ffffffffffffffda RBX: 00007f62bbbe5fa0 RCX: 00007f62bb98f7c9
[  464.820404][T13969] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003
[  464.828364][T13969] RBP: 00007f62bba13f91 R08: 0000000000000000 R09: 0000000000000000
[  464.836322][T13969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.844280][T13969] R13: 00007f62bbbe6038 R14: 00007f62bbbe5fa0 R15: 00007ffc834e0b48
[  464.852249][T13969]  </TASK>
[  464.855254][T13969] Modules linked in:
[  464.860338][T13969] ---[ end trace 0000000000000000 ]---
[  464.993934][T13969] RIP: 0010:status_show+0x30f/0x5d0
[  465.029100][T13969] Code: 03 80 3c 02 00 0f 85 b3 02 00 00 48 8b 9b 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 08 04 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 94 02 00 00 4c 8b b3 08 04 00 00 c1 e5 04 41 bc
[  465.089442][T13969] RSP: 0018:ffffc9000bc97ac0 EFLAGS: 00010206
[  465.109677][T13969] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c1f9000
[  465.117690][T13969] RDX: 0000000000000081 RSI: ffffffff87860c6e RDI: 0000000000000408
[  465.128934][T13969] RBP: 000000000000000f R08: 0000000000000005 R09: 0000000000000000
[  465.146919][T13969] R10: 000000000000000f R11: 2020766564206470 R12: ffff88807cdee02d
[  465.179390][T13969] R13: ffffc9000bc97b10 R14: ffff88807cdee000 R15: ffff888059e7f708
[  465.187405][T13969] FS:  00007f62bc8c26c0(0000) GS:ffff8881249f8000(0000) knlGS:0000000000000000
[  465.219341][T13969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  465.226049][T13969] CR2: 0000001b3081bff8 CR3: 00000000292e6000 CR4: 00000000003526f0
[  465.242818][T13969] Kernel panic - not syncing: Fatal exception
[  465.249230][T13969] Kernel Offset: disabled
[  465.253543][T13969] Rebooting in 86400 seconds..