last executing test programs:

5m1.125187439s ago: executing program 0 (id=1507):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x5, 0x0)
openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim0/ports/1/pp_hold\x00', 0x610003, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28c40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
open(0x0, 0x66641, 0x154)
open(0x0, 0x22240, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0xfffffffe, 0x8000000000000000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty60\x00', 0x161203, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0)
io_uring_setup$auto(0xb, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
socketpair$auto(0x4004, 0x2, 0xfff, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
write$auto(r0, 0x0, 0x1)
setfsgid$auto(0x9)

5m0.899578991s ago: executing program 0 (id=1509):
mmap$auto(0x2000000000000000, 0x20009, 0x4000000001df, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x1, 0x106)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = socket(0x11, 0x3, 0x9)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x28, 0x5, 0x0)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x4000004)
msgctl$auto(0x0, 0x0, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0x8, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x400, 0x5d8, 0x1000000000000009, 0x7, 0x6]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x4, 0xe05a, 0x4]}, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r1)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x805, 0x0)
sysfs$auto(0x2, 0x15, 0x0)
fsopen$auto(0x0, 0x1)
read$auto(0x3, 0x0, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, 0x0, 0x40000)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
getpid()
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)

4m59.741995031s ago: executing program 0 (id=1514):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/sleep_millisecs\x00', 0x102800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x2000006)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
connect$auto(0x3, 0x0, 0x54)
r0 = prctl$auto_PR_SCHED_CORE_GET(0x2, 0x0, 0x0, 0x401, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r2)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x3, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x800, 0x1)
r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
write$auto(r3, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\xac\x9f*~\x9e\xf4\x14\xd2d2i\a*\x93\xda\xec\xfe\xb6HI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg2\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x03\x00\x00\x00\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85c\xf6\r^\xa2\b\x9c\xb9\xff\x89i\x04\xc8\r\x14p\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92', 0x808585)
select$auto(0xe, &(0x7f00000000c0)={[0xa, 0xffff, 0x4, 0x9, 0x1000000000800006, 0x20001ff, 0x6, 0x3, 0x3, 0x0, 0x3, 0x3fd, 0x6, 0x10009a8f, 0xeb, 0x1]}, 0x0, 0x0, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
ioctl$auto_TUNDETACHFILTER(r1, 0x401054d6, &(0x7f0000000180)={0x9, &(0x7f00000001c0)={0x7f, 0x37, 0x9}})
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x1, 0x4000000008, 0x5)
landlock_create_ruleset$auto(0x0, 0x100000000, 0x7)
write$auto(r3, 0x0, 0x5add)
pwrite64$auto(r0, 0x0, 0x34afd519, 0xfffffffffffffffa)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0)
write$auto(r4, &(0x7f0000000140)='0[.[\x00', 0xcd04)

4m58.97711263s ago: executing program 0 (id=1519):
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/snmp\x00', 0x40280, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
process_madvise$auto_MADV_NOHUGEPAGE(r0, &(0x7f00000000c0)={&(0x7f0000000040)="0c52a2bdd6a1c322a642be04cf3b1eba47c7565bab43b91b39e6a9a9d3b19273fd1009133d48a5510300139c165430", 0xd5}, 0x1, 0xf, 0xfffffff9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
rseq$auto(0x0, 0x20, 0x0, 0x8000006)
timerfd_settime$auto(0xffffffffffffffff, 0xfffffffc, &(0x7f0000000000)={{0x400012, 0x3ff}, {0x10, 0x6}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0x23, "000000000000fe8000"}, 0x1f)
shmdt$auto(0x0)

4m57.599884671s ago: executing program 0 (id=1522):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)
r1 = open(&(0x7f0000000140)='./cgroup\x00', 0x4242, 0x0)
fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/nvme-wq/affinity_scope\x00', 0x8400, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001b40)=""/4089, 0xfffffffffffffcfa)
lseek$auto(r1, 0x7f, 0x4)
write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000200)="4b6883fddc1f44aaa9b87917e5821a00987babd20ff06e79c38491b84cee69da96a492b3f81c2bb623e75cd45df75aee50d784895516e9d9", 0x38)
r3 = socket(0x2, 0x1, 0x0)
getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x200039)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0)
mlockall$auto(0x7)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x20, 0x0, 0x0}, 0x58)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy8/aql_pending\x00', 0xbb342, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mprotect$auto(0x0, 0x806121, 0x6)
r4 = open(&(0x7f0000000540)='./cgroup\x00', 0x80080, 0x81)
madvise$auto(0x4, 0x80d, 0x0)
process_madvise$auto_MADV_MERGEABLE(r4, &(0x7f0000000300)={&(0x7f0000000280)="b59153813a7c713775ebb91436d3433a992406094277819d0e4425e65b85ce4963b346e5165081642d0441e005644de72be533847e35a5ea0212b97d3802d963ecb5ed99692c58200d0ed708b0e07da7b40f010e2606820232f41b9d9b", 0x4}, 0x7, 0xc, 0xf75f)
fcntl$auto(r4, 0x402, 0x1)
madvise$auto(0x9, 0x40, 0x400)
r5 = set_tid_address$auto(&(0x7f0000000040)=0x800)
r6 = fcntl$auto(r4, 0x402, r5)
semctl$auto(0xa, 0x2, 0x13, 0xde)
r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r7, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000)

4m55.365884643s ago: executing program 0 (id=1530):
madvise$auto(0x7, 0x5, 0x40)
socket(0xf, 0x803, 0xfffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
setfsgid$auto(0x9)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0)
r0 = socket(0x11, 0x3, 0x2)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/active\x00', 0x800, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f00000002c0)=""/243, 0xf3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc)
readv$auto(r1, &(0x7f0000000180)={0x0, 0x10}, 0x9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0)

4m40.257009258s ago: executing program 32 (id=1530):
madvise$auto(0x7, 0x5, 0x40)
socket(0xf, 0x803, 0xfffffffc)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
setfsgid$auto(0x9)
mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4)
lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0)
socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0)
r0 = socket(0x11, 0x3, 0x2)
r1 = socket(0xa, 0x1, 0x84)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/active\x00', 0x800, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f00000002c0)=""/243, 0xf3)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc)
readv$auto(r1, &(0x7f0000000180)={0x0, 0x10}, 0x9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0)

8.720678361s ago: executing program 4 (id=2446):
close_range$auto(0x2, 0x8, 0x0)
socket(0x23, 0x4, 0x2)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0xe3c, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x25, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100f9020000fbdbdf250100000008000b00ac141420080001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0)
socket(0x2c, 0xa, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
socket(0xa, 0x2, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/sequencer2\x00', 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)

8.161830944s ago: executing program 4 (id=2447):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0xa, 0x801, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
mmap$auto(0x0, 0xe, 0xdf, 0xeb1, r0, 0x3)
fanotify_init$auto(0x5, 0x2000000000002)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a)
statmount$auto(0x0, &(0x7f00000006c0)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x30000000, 0x78, 0x8, 0x0, [0x2, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x402, 0x0, 0x0, 0x4, 0x3, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0xef, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2], "adf0e727cadfa22d2edb6f6b0210d37c518a01cdbf8482448270fa0744000000000000058878a8f079ab1c2d042165454a3033edd25a244b991601783eaf1852176ea975053efffe4b0ebf4f4a3557df98f8e2"}, 0x2001fb, 0x7f)
r5 = syz_genetlink_get_family_id$auto_nbd(0x0, r1)
sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' ', @ANYRES16=r5, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0)
unshare$auto(0x40000080)
setfsuid$auto(0x0)
r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5)
connect$auto(r2, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0x80000001)
r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000009c0)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"})
ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, 0x0)
socket(0x2, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

6.312281152s ago: executing program 2 (id=2453):
mmap$auto(0xe, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0xa0, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x6b, 0x3, 0x0, 0x1, [@generic="bb3f507d81bcb16b313b85c87b93adbe7be17e361c3ba5e4f6ed8217751564f56001915ba9287f494d3846fbd34db011e9b4f153eb04672a075ebf486b8d9026d080f14de411de7c0242dceb79bb251ebc5aeb1aea47ff5776d5e5f078951942783a06b871bc02"]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880)
r1 = memfd_create$auto(0x0, 0xe)
fchmod$auto(r1, 0x9d)

5.81935002s ago: executing program 2 (id=2454):
openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) (async)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) (async)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
lseek$auto(r0, 0xffffff7f, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x1e, 0x80002, 0x73)
socket(0xa, 0x1, 0x84) (async)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) (async)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket(0x2, 0x1, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000280), r3) (async)
shmctl$auto(0x8, 0x2, &(0x7f0000000500)={{0x1, 0x0, 0x0, 0x8, 0x6, 0x7, 0x1}, 0x6b10dced, 0x737, 0x80000001, 0x80, @raw=0xfff, @raw=0x3, 0x5, 0x0, &(0x7f0000000340)="72db8655f08a29db71124e41269d5d5862dabde91d7281cf0f0254ae6fee185a38c82f18175818f622ca0e597aa0f0399404b92be4aac991f4db068fd83e608a91fb04b652f262014496adc0d63d86ddbba6d059fd0eff0255a2bfa6fec3ab2495b0a7a3d4a246ae7c26e8a9770da60474dff72fb9ade1bbeef2c096e8c38bd756dd1c29057bc679025ae45ef47ad61f25915591a2a91574f9b675382b1ca4a46bb92f7938f5d693e9416415161b39804836741b5c995132269f93bd51ad9d3431bc3edd6ba1476de22750d2557decba859efff0781d92b3a1eab9dc74e40a77f9a2d442c7dcf36f562426", &(0x7f0000000440)="ed86ed1f7a8274ce017fe07c55808bf3bcebb435ff8a859f05952ee6c8c1745c98f19ee48737306002257edf7fc488ba633f304bc166bc8a49716483688356197917302d9fee81059bc566b1d538eec6ccbad8bd903a44"}) (async)
statx$auto(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8, 0xff, &(0x7f00000005c0)={0xe5e, 0x4, 0x9, 0xfffffff8, 0xee00, <r4=>0xee01, 0x80, 0x2e, 0x1, 0x6, 0xdf98d68, 0xc, {0xd4, 0x1}, {0xf0c9, 0x616}, {0xdfb, 0x39}, {0x800000, 0x10001}, 0x81, 0x5, 0x7539, 0x3, 0x5, 0x4, 0x0, 0x0, 0x9a8, 0x8, 0xe, 0x9, [0x81, 0x2, 0x9, 0x5, 0x7dc2, 0x1, 0x1, 0x2, 0x9]}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', <r7=>0x0}) (async)
close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async)
unshare$auto(0x6) (async)
socket(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket(0x18, 0x5, 0x1)
connect$auto(r8, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
r9 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), r6)
sendmsg$auto_NET_SHAPER_CMD_GET2(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2000080d0200", @ANYRES32=r7, @ANYBLOB='\b\x00\b\x00', @ANYRESDEC=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r3, @ANYBLOB='\b\x00\b\x00', @ANYRESHEX=r4, @ANYRESOCT=r0, @ANYRES32=r7, @ANYBLOB="b57bc8251b3b07216fded22162a00402aabb0df27446e60152248b679558742c156d2a6d37245f765dcc42fef165ee8eaed04935cdefe223e098770123aed84a11d96780c9deef10e1cc604e72b796", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20008080)

4.770880575s ago: executing program 1 (id=2457):
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x15, 0x4002)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$auto(r0, 0x400454ca, 0x38)
mremap$auto(0x4, 0x6, 0x5, 0x0, 0x401)
ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, 0x0)
r1 = epoll_create$auto(0x1)
epoll_ctl$auto(r1, 0x1, r0, 0x0)
ioctl$auto_TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0xb)
write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9)
r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2, 0x80802, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @multicast1}, 0x6a)
connect$auto(0x3, 0x0, 0x50)
read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001)
write$auto(0xffffffffffffffff, 0x0, 0xf)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000012c0), 0xffffffffffffffff)
r3 = socket(0xa, 0x3, 0x73)
setsockopt$auto(r3, 0x29, 0x2, 0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
write$auto(r2, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0)
accept4$auto(r4, &(0x7f0000000080)=@isdn={0x22, 0x8, 0x9, 0x87}, &(0x7f00000000c0)=0xfffff001, 0x0)
ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000000)={0x200, 0x7c0, 0x1, 0x5c03, 0x80000000, 0xffffffffffffffff})

4.770665969s ago: executing program 2 (id=2458):
mmap$auto(0x0, 0x2020002, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
timer_create$auto(0x9, 0x0, 0x0)
timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x0, 0x10007}, {0x400002000c}}, 0x0)
timer_gettime$auto(0x0, 0x0)
r0 = socket(0x1a, 0x6, 0x6)
syz_genetlink_get_family_id$auto_netdev(0x0, r0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0)
ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0)
bind$auto(r3, 0x0, 0x3)
r4 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r4, 0xb)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
r5 = socket$nl_generic(0x11, 0x3, 0x10)
bind$auto(r5, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80)
write$auto(r5, &(0x7f0000000080)='m\x00', 0xff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
socket(0xa, 0x2, 0x3a)
setfsuid$auto(0x0)
getuid()
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x10000}]}, 0x1c}}, 0x80)
getsockopt$auto_SO_TXTIME(r6, 0x1, 0x3d, &(0x7f00000006c0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000000700)=0x5)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x40000000008, 0xff, 0x10001, 0x6da, 0x3, 0x3e01, 0xfffffffffffffffe, 0x9, 0x7, 0xffffdfffffffff81, 0x4]}, 0x0)
socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000540)=0x5)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0xfe04)

4.766714089s ago: executing program 4 (id=2459):
close_range$auto(0xffffffffffffffff, 0x8, 0x400)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0xaf1)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0)
mq_open$auto(&(0x7f0000000040)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0xffff0000, 0xe2, &(0x7f0000000100)={0x1, 0xfffffffffffffffd, 0x5, 0x9})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x440000, 0x0)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
select$auto(0x8000000e, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x8, 0xfffffffffffffffb, 0x47ac5677, 0x6, 0x3, 0x3, 0x3, 0x2, 0x2000000008003, 0x80000000003fffff, 0x3, 0x0, 0x8000000002, 0x5, 0x5]}, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x4, 0xe983, 0x7fff, 0xeb3, 0x401, 0x10000003)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x7)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0)

3.582237594s ago: executing program 1 (id=2460):
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4)
open(&(0x7f0000000100)='./file0\x00', 0x161302, 0x17f)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
io_getevents$auto(0x80000001, 0xd, 0x5, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, 0xffffffffffffffff, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x608, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa9a5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x24000800)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003040)='/sys/devices/virtual/net/gre0/statistics/tx_heartbeat_errors\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000003080)=""/156, 0x9c)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x163340, 0x16e)
socket(0x2, 0x80802, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
sendmmsg$auto(r1, &(0x7f00000003c0)={{&(0x7f0000000180)="6c65f9b699279feacff9086a5252eb24661b7ca1c4b3cb639acc1ff8d36738667bdb7150200b751c943526b2cc8fbaa4afeb357fb03d7d5441cd3361b19effbf8d203f935f414f1000b49097f1a58b6c62118c81c0162d65c8d53398c305", 0x1, &(0x7f0000000280)={&(0x7f0000000200)="c94a2c750cbb7444620ea13bb22682a6ff751e4821ac2e2ba6f9adb83a2fc9bfdb11944d18a0925aefc0fde043a3aac276fc92e9ca93c97a95acace3e6b3d9c5970220f71b774146ea0ee460d5b4f9eb78a307ae94d8432497b301a29e15030c9643", 0x5}, 0x2, &(0x7f00000002c0)="49fc8279e66474102078ce1cf639d41099c75b7446027f17cdbf1034ba2cc55150d2b189754613d5a668b346b306f3048e181c7efb8f2faadbfb7ed8fe6fb441341ac32dd02dd80c1c5ea67b057d092e88779bfc4e81efe4eeef3f071c1870a54a754a9385be34099e2ba3e08930ce8aa039864ea10e41fba53ef299e06d1a45ce7dfd5e3848f1fa3068edc765507abfc4289dbf2acdafcb25e84f762907e722b9f004925c1211bef55e62003310264272b04dd492bcf26ff06b1207d25ea038bdc5454d29a1a980d8ca37fb691354bb6776efc6f4197facd86621cd211413db7707b10710113e468f4b7df858", 0xffffffffffffffff, 0x3}, 0x7}, 0x2, 0x39)

3.18592403s ago: executing program 2 (id=2462):
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x2, 0x801, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x6, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
close_range$auto(0x2, 0x8000, 0x2)
io_uring_setup$auto(0x6, 0x0)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x280040, 0x0)
timerfd_create$auto(0x0, 0x0)
timerfd_settime$auto(r0, 0x3, 0x0, 0x0)
read$auto(0x3, 0x0, 0x80)
settimeofday$auto(&(0x7f0000000180)={0x10000001f, 0x1}, 0x0)

3.174170453s ago: executing program 3 (id=2463):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0)
bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0)
modify_ldt$auto(0x11, 0x0, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r1)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, "1c11b753147d3f4bf365f6f66676508731aeed1d2c56c93b878f73058e2cf1085657d8cb00000001000000000000000000"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)
sendmsg$auto_IEEE802154_LIST_IFACE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7f72c4f6dcd9c6a5}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x7c, 0x0, 0x501, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x8000}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9e1b1c94c85831e73feb3fb0f6e2d9101697b25d49f1eeb047841533ee4f9dba"}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'nicvf0\x00'}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x10}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x80)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0)
stat$auto(0x0, 0x0)
sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0) (async)
bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async)
recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async)
modify_ldt$auto(0x11, 0x0, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000022fc0), r1) (async)
sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000023280)={0x0, 0x0, &(0x7f0000023240)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, "1c11b753147d3f4bf365f6f66676508731aeed1d2c56c93b878f73058e2cf1085657d8cb00000001000000000000000000"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) (async)
sendmsg$auto_IEEE802154_LIST_IFACE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7f72c4f6dcd9c6a5}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x7c, 0x0, 0x501, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x8000}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9e1b1c94c85831e73feb3fb0f6e2d9101697b25d49f1eeb047841533ee4f9dba"}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'nicvf0\x00'}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x10}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) (async)
ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) (async)
stat$auto(0x0, 0x0) (async)
sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) (async)

2.853372942s ago: executing program 3 (id=2464):
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines\x00', 0x0, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x1e, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x1)
pipe2$auto(0x0, 0x80)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x898}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r4)
sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbf6, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0xd3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_RESULT={0x5, 0xa, 0xa9}, @BATADV_ATTR_BLA_VID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4)
sendmsg$auto_BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0700000014274a24c59cf3619543545f0d83c0c81e43abaeb2c4ee514eb833f43a2896e18b43e51aed868faea97c200dff959158d40fbc35d88abfbffe22fee76800f8aee446ebe30b4cb4df5b332c0f54e69dff9405e154277af6009ec12140b9a7279f1a34914999a1cf9de98d67f5026d004a31e40e1f5ce4da8a735034b378016773d674aa8c03506514", @ANYRES16=r6, @ANYBLOB="020028bd7000fcdbdf25120000000800260009000000"], 0x1c}}, 0x0)
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
open(&(0x7f0000000140)='./file0\x00', 0x432000, 0x7)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$auto(0x0, 0x5, 0xdf, 0x69e, 0xffffffffffffffff, 0x9)
move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000)
socket(0xa, 0x801, 0x84)

2.757732099s ago: executing program 4 (id=2465):
close_range$auto(0x2, 0x8, 0x0)
socket(0x23, 0x4, 0x2)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
io_getevents$auto(0x1, 0x401, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x200000000000001, 0x6})
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0xd, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8efe]}, 0xe3c, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r1 = socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio0/power/wakeup_active_count\x00', 0x40c00, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001240)=""/4145, 0x1031)

2.650640071s ago: executing program 2 (id=2466):
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80000, 0x100)
openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x2}, 0xe3c, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r1 = socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio0/power/wakeup_active_count\x00', 0x40c00, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001240)=""/4154, 0x103a)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptytc\x00', 0xd80, 0x0)
ioctl$auto_TIOCSETD2(r3, 0x5423, &(0x7f0000000300)="3698d3183ec4496cdcaca7242665ac83395d17df905a1d0ce7fd2340d0ed7b920ca104aa9e4ed91d95ad4dd1f3b2afebd60a7dd9d85064b01d9f3ea32098e977c8599b7515a406f8f5560ec27f5a2374edf8569c83cc8c64c94acd8716c6578fbeba8709a8b84691b217884d8f4bbdb6ecb2ee96dd3906eca7a93fa85120819b54fc2fa766b3dadd21d4972c5b11b9ed0ac05af2db9d978890ffd1")

2.6314659s ago: executing program 3 (id=2467):
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
ppoll$auto(&(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x3, 0xffff}, 0x8, &(0x7f0000000040)={0x80000001, 0xd}, &(0x7f0000000080)={0x3}, 0x8)
fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='\x90\xea*(.}(,\x00', &(0x7f0000000100)="ed0db5c5b3b75fe2fc3eac7fb7d859bfe7a963a2140217be9d72262bc114f1b4e4228417f41fd9cd2f9418775cd16e7ff3b17259ae06d6e11c125a3b41f64c3be6b555657c08168efbd4b7e244229dd4e71678391913e1c96087726d8e4f70947db3fb9cfaa500965bbdc0a42e88afb67b8c577f4da6d8b5568e7152a3b754a882952096606b67d98f017d1458bb817d278561065bb1ab5ee423f66ee41d1bd21b598620205378d5f19686ea9f77549806b9c97539f653b82d76d3793a8ebdf7794c47113f8f", 0x81)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sendmsg$auto_NFC_CMD_SE_IO(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x1bc, 0x13, 0x0, 0x1, [@generic="d7321a018f5a27fd14bc9b47c7057a8946b81f51a6a9c422bfdd7e531d21fe0817c958b251f0d84c7bdf93f92c4fb2cf5faa35bbb8160cb3189544681a8f473965745d70c66d97e4324040bcaf72f3dc82ad8b50aad264bb62a70c952efebf2c9a0ab43fc0631750590c0933f103ef1458dd0731401cdb9c7a4ff2e84f94a4a375a31b81fca334444a2089c411b59b5fbe3dee5051d0c6c38321d3a8ab3aa5a381d6ef7f64f1385a9f", @generic="d129c061fc683f6f369ba7b5da5d9bd619ad1db3cafa69ff27ae9f983f1874a5003ace8723a6402c336fc988513159f0c8a64c8737fb01c89e787990bfbd1c7e34e01853483d503a2e86c00eb6b7ffb7231630c628ca9a9cdae34fd9f0ced3e8af8b30accce2ecbc010bfacd76d44d245713371068f0790bb88e31241dc4e1c37397e9d531118c263f9ac6024185bb47b854e9e7a90983c54452019b4bed8a676d4f89aef37e86033cd433797e663c229a755f0192486142af8ccea268e15fe4eeede5698f3c1eb7567e008a7785ce1e25a6e711996fd1260b0e4b70b5f2acc356cf88", @nested={0xc, 0x97, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @u32=0xfffffff7}]}, @typed={0x8, 0x2c, 0x0, 0x0, @fd=r0}, @generic="5365a7735d9862e470ccf765767e8b2386d028a90b4a4710"]}]}, 0x1d0}}, 0x14)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', <r2=>0x0})
shmctl$auto_SHM_INFO(0x6, 0xe, &(0x7f0000000680)={{0xfffffff8, <r3=>0xee01, 0x0, 0x1c9a, 0x2, 0x6, 0x6}, 0x2, 0x80000001, 0xff, 0x8000, @raw=0x72fe, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540)="4ce953cf55b572d3060897dc1deaf56c2408a76865d90bcdc5913dfe486137c031d13f54fe404bd37b312c09740842bd35e2984e0ab159d8d7e32ae09f62eb4265ea98e0f1509db7273ccc1a5bf8a02084b2e73e6d1a5761975130d7fe2af314906511326625d7aed6384e2d0d2628f5ecdb43b0da3f13358fa4654877595436a2d55eadd7bbddd98c86f2fec6be5ba67f2032db8011b484a53705b30b1c1972edaf46c9e5b7c0d8c19f0b7274d65eaa2e593a12eab7103d2c0aec67d5dfbf0b9f5b06c729f185f6c06dff676e98a025edeb451f73d678d5a123e955307efae36dffaf95623cd84b11e29bacc8ed74b1c118be28805c", &(0x7f0000000640)="49fcacb9d913e566d9a015c2046c429ce6fd14c1583ed67639d4e5e7c35b623099d70248439568a039fa486485a8"})
sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x298, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x1}, @NL802154_ATTR_WPAN_PHY_NAME={0xd, 0x2, '\x90\xea*(.}(,\x00'}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x231, 0x19, 0x0, 0x1, [@generic="61e00d80165e63d1483619ad042715fea5b9b19907ec73ae8d7fe6357d06ecf6fc32e7ef70a82ecb7b6a0a7efa6dd77547bcce2b8a3d18c16405f95ac7539e09edc9723f198fefc2f286df4111f105291efe407465c9cb9c2d4388fb94f305acbdc6d1f9b067787eabccd63fbd1c437aff5064caa3014b6971b46967dbb82a739d4d27cb44b30b224e4e9355cce296087ba1970b587c5bd083ecd90f354f17e94ea8d9bdbca4ac57fcda501173635a68f8da1ad8943f5bba52b4307770232970e7e4f99d2b3e8f2b50dd210f099c742e2823340a55eb7760830ecb7e0acfe43efd7567e7fb4383fd854503d3135aeebce8d2334a267abdfbc4", @nested={0x1a, 0x14a, 0x0, 0x1, [@generic="2f3f713a4e34980db89cc643ccc981225930471c843e"]}, @nested={0x14, 0x14a, 0x0, 0x1, [@typed={0x4, 0x15b}, @nested={0x4, 0x169}, @typed={0x8, 0xce, 0x0, 0x0, @uid=r3}, @generic]}, @typed={0x8, 0xdf, 0x0, 0x0, @fd=r0}, @nested={0xe9, 0xb, 0x0, 0x1, [@generic="796eee835cfa336f2f3ff9ce30083aeb5f00f988be08509cfbd4c35ba2c782503bb129c51759e545c8c1dc81559096be92cfd5796b9c5279d20eea4c4d4e6e3c59c3afbb33eeb9d8456e54697dbcf9db4ef46eee4249bbe0ec83f346366fce9d57d8822b2ec917dd2da90ab083a9fd5b225ebc9f89a416d0e47d8dd320a353d781f8d46d892e10072723990bdf8818ec8cf32a51fd8c316c784f95ed346399a0e3603118619faf07e49250e7e4bafbf79d51760b8907a18103517a853f5ca8b19a9a7228a79c7c26bf9ca1f1485472fd02468038b3", @typed={0xd, 0xfc, 0x0, 0x0, @str='\x90\xea*(.}(,\x00'}]}, @typed={0x8, 0x8e, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x101, 0x0, 0x0, @u32=0x5}]}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffff}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x101}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x84}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5) (async)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
r4 = open$dir(&(0x7f0000000a40)='./file0\x00', 0x82000, 0x128)
open_tree$auto(r4, &(0x7f0000000a80)='./file0\x00', 0x1ff)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5)
sched_get_priority_min$auto_SCHED_IDLE(0x5)

2.269204169s ago: executing program 4 (id=2468):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop13\x00', 0x0, 0x0)
ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
r2 = socket(0x1, 0x3, 0x8)
getsockopt$auto(r2, 0x26, 0x7, 0x0, 0x0)
epoll_create$auto(0x15)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r3 = socket(0x2b, 0x1, 0x1)
sendmmsg$auto(r3, 0x0, 0x7, 0x20020000)
syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101681, 0x0)
poll$auto(&(0x7f0000000200)={r4, 0x1, 0xa}, 0x25, 0x109)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x2, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0)
getsockopt$auto(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)

1.861170001s ago: executing program 2 (id=2469):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r0 = socket(0x2, 0x1, 0x106)
unshare$auto(0x40000080)
getsockopt$auto(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
arch_prctl$auto_ARCH_MAP_VDSO_64(0x2003, 0x0)
mmap$auto(0x0, 0x202000a, 0x2, 0xeb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x28c40, 0x0)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$auto(0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyv8\x00', 0x480, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0)
bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)

1.803666867s ago: executing program 1 (id=2470):
socket(0xa, 0x801, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, 0xf)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/nlmon0/addr_gen_mode\x00', 0xa02, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x7, 0x40009, 0x9, 0x9b71, 0xffffffffffffffff, 0x4028000)
sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
pidfd_getfd$auto(r0, 0xffffffffffffffff, 0x2000007)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000040)="9bbf5f", 0x3)
r1 = socket(0x10, 0x7, 0xf)
syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff)
sendmsg$auto_NETDEV_CMD_NAPI_GET(r1, 0x0, 0x4000090)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa)
writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7e}, 0x40000000000009)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c00038008000c800400038012000100898771f1c19f17790485908286dd0000040002807b87b31b70933ca7c984adf8207ad53a13a65349961071152612f8a1f9a532d1568109d11fe0ea0fd3ba46f3df3427bc5b69c0cb0b8563e182fa3e4b9c82dfd1ee67584bf7125b0ceeb19b35cc5ce7aa145f3d7808ed"], 0x3c}, 0x1, 0x0, 0x0, 0x4094c57e429bf531}, 0xc800)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
bpf$auto_BPF_MAP_CREATE(0x0, 0x0, 0x4)
msync$auto(0x80000000, 0x2, 0x1c)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00')
read$auto(0xffffffffffffffff, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)

1.601925705s ago: executing program 3 (id=2471):
bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x7, 0x4, 0x200, 0x39, 0x8, 0xf, 0x1, 0x0, 0x2}, 0x6f4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r1, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)

1.501014745s ago: executing program 3 (id=2472):
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdd250100000004000a8008000200000e0000080003007ddbe3d0530ae3410d18feca295b0004f9689318db0a30cbe8b2fb0fd68adaea69530dbddd0a845d235f0fb8b4385ab6b4f8b8d5eb69d6297021a5a46e9bf6dc7a847dfdc8ec93c30b6b885bb6afda3acef221a7172fc23b6ff9d67fa1602f3510ca8380fe4a36f5bad7d396aee9982428cf0fe03bcb14ecf80241a8009545581206f1dd782d"], 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0xc0)
semctl$auto_GETPID(0x9, 0xe, 0xb, 0x429)
r1 = socket(0x10, 0x3, 0x2)
sendmsg$auto_NL80211_CMD_VENDOR(r1, 0x0, 0x4004)
close_range$auto(0x2, 0x8, 0x0)
openat2$dir(0xffffff9c, 0x0, &(0x7f0000000140)={0x20840, 0x80}, 0x18) (async)
openat2$dir(0xffffff9c, 0x0, &(0x7f0000000140)={0x20840, 0x80}, 0x18)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2c402, 0x0) (async)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2c402, 0x0)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80900, 0x0)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
madvise$auto(0x0, 0x2003f2, 0x15)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) (async)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7)
write$auto(0x3, 0x0, 0x100082) (async)
write$auto(0x3, 0x0, 0x100082)
sendfile$auto(r3, r2, 0x0, 0x10000) (async)
sendfile$auto(r3, r2, 0x0, 0x10000)
socket(0x2a, 0x2, 0x6)
socketpair$auto(0x1e, 0x5, 0x3, 0x0) (async)
socketpair$auto(0x1e, 0x5, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r4) (async)
r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'batadv0\x00', <r7=>0x0})
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="93ab2cbd70dc3ed439c207fc6e0008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0xc811}, 0x10)
r8 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$auto_KVM_GET_MSRS(r8, 0x4068aea3, &(0x7f0000000040)={0xdb})
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
open_tree_attr$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x7f, &(0x7f0000000100)={0x7, 0x3, 0x3, @raw=0x4}, 0xfffffffffffffffb)
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
read$auto(0x3, 0x0, 0x8080)

1.342051385s ago: executing program 3 (id=2473):
mount$auto(0x0, 0x0, 0x0, 0xf, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x13d800, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x40000080)
r0 = socket(0xa, 0x5, 0x0)
r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0)
close_range$auto(r1, r1, 0x8)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0)
r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$auto_SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, 0x0)
ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, <r5=>0x0})
r6 = wait4$auto(r5, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0x5, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0xa, 0x2, 0x9})
capget$auto(&(0x7f0000000440)={0x9, r6}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd})
prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r6, 0xc, 0x6)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff)
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r7, 0x560a, r8)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x80000, 0x0)

378.403456ms ago: executing program 1 (id=2474):
pidfd_open$auto(0x1, 0x0)
r0 = socket(0x1d, 0x3, 0x1)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/phonet\x00', 0x200, 0x0)
pread64$auto(r1, 0x0, 0x8, 0x75e8)
getsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x3, 0xe, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
mmap$auto(0x7, 0x3, 0x582, 0x10, r0, 0x3)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x84, 0x0, 0x6)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'})
socket(0x1d, 0x2, 0x6)
sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e381}, 0x20040080)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x1c5041, 0x0)
openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/free_buffer\x00', 0x40000, 0x0)
getsockopt$auto_SO_DEBUG(r4, 0x9, 0x1, 0x0, &(0x7f00000001c0)=0x8000)
setresuid$auto(0x0, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
setgroups$auto(0xe32, 0x0)

294.062017ms ago: executing program 1 (id=2475):
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r1 = socket(0x9, 0x3, 0xf)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0)
fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000003, 0x1, 0x9, 0x5d, 0x0, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]})
socket(0x2, 0x5, 0x106)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/20, 0xfffffcc4)
bind$auto(r1, &(0x7f0000000280)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x68)
connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010102}, 0x54)
write$auto(0x3, 0x0, 0x1)
open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x6)
mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='cifs\x00s \xfe\xcd\x94=\xbf\xfd\x02;\xffP\xf26\xea\x97\x95\xad\xb6\x1d\\\xd3\x89\xe0\n\x0f\xf7]\xafa\xcc\xbbgv7\x04\"\xb4\xe1\xc8#\x1b\xf0&\xc3\x15\xea\x1f\xcf0#e\x14\xe6\xf9\xc9\xec\x1d\x1d\xa7\xcd\x94\xae\x01\x00\x00\x00\x00\x00\x00\x000\xc3\xeem\x8e\xfb`\x1a[\x01\xf6Re\xad x\xbc\x00\x0f\x0f\xc6f\x82\x16\x8e\xab\xf6)^\xbe{=\xa3\xeb\xc44\f\r\xf6\x17\x87\xe8\xb0\xd9V\xfb\xc6U\xe9\xb7\xe6\xa2\xdb\xbbP\xf14S\xe6\xce|?\xa0\xf3\x8f^?5\x1bb^R\x11\xf6\xe8\xfc\v\xfa\x96\x89%\x02\xc0\xa9\xc9\xd2\xb0b\x86\xd1\x1c\xa2\xca\xc9\x90\xd7\xe1\xbf%\xdbzh\xfc\xaa4KhoD\xe7\xda\x12^\x8b\x81\xb3B5\xfd-\x83\x9f\xe7ZHh^9\x18z*\x02\xa8Fu\x80\xee\xc6\x98v\xf6\xa7\xdf\xd8\x9ans\x16\xa7\x03\xd9\xc2\xee\"\xa7\xefx\xd5,Q\xfe\xe6\va\x06\x00\x00\x00\x00\x00\x00\x00\xaa\x89!,m\x16M\x19no\x1e+ 1\xa7\x1c\x95\xa0\xd6`\xd1\xf8r\xea\x13sFn)\x05\xc8\x1e\xf8a\xf5H\x86\x9a\xc4\x81\xbf\xa1h`\xe0\xd8\xdd\xeb9k\xa4\x1fA}\x80\x9e\x8a\x031\\D@\a\x8b\xc7.\xc1\xe4Z\xd4C\x19g^\x06\x06\x82', 0x8002, &(0x7f00000001c0))
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
getpid()
r4 = fsopen$auto(&(0x7f00000000c0)='./cgroup/cgroup.stat\x00', 0x1)
setsockopt$auto_SO_MARK(r4, 0x2, 0x24, 0x0, 0xc8e)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0)
sendfile$auto(r5, r0, 0x0, 0x3)
write$auto(0x3, 0x0, 0x7fffffff)

18.973892ms ago: executing program 1 (id=2476):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2502cff3291849be3657003c80080019"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14fa02, 0x0)
getsockopt$auto(r1, 0xffff, 0x17, 0x0, 0x0)
mmap$auto(0x0, 0x1, 0x400020000fff, 0x10, r1, 0x2000004)
r2 = socket(0xa, 0x3, 0x3a)
close$auto(r2)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x80540, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82480, 0x0)
pread64$auto(r4, &(0x7f0000000100)='/sy\x00\x88\x00ce/\x00\x00\x00_\x98q\x05\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff', 0x100000000d, 0x1)
unshare$auto(0x40000080)
fsconfig$auto_SHMEM_HUGE_DENY(r3, 0x9, &(0x7f0000000140)='\x00', &(0x7f0000000180)="f54f07e7fc5271bd2d206acf46f392fbfd768b405d9a62deb248d81bbcd71f19e703bf4efbc48303395edff9f1fb1395540d963ca783eda52f8e21d43105d6c3072db755cb8e97ab290f7235a7f42a112bf23e2fcee9aaf8901d95e7f497", 0xffffffffffffffff)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
mknodat$auto(0xffffffffffffffff, 0x0, 0x300, 0xfffffff4)
write$auto(r5, 0x0, 0x10007c)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/wlan0/max_desync_factor\x00', 0x42402, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
unshare$auto(0x40000080)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mbind$auto(0x0, 0x800000002091d2, 0x9c, 0x0, 0x2000000006, 0x20002)
write$auto(0x3, 0x0, 0xfffffdef)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00", @ANYRES16=r6], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

0s ago: executing program 4 (id=2477):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x50000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000)
r1 = socket(0x1d, 0x3, 0x1)
mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0)
listen$auto(0x3, 0x83)
setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9)
getsockname$auto(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000240)=ANY=[@ANYBLOB="010026bd7000ffdbdf25020000002c00048027000a80aa37d9c0ce63ce"], 0x40}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000)
sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="4f08af5d06c76a12a81cd14c5574ede048c690f283da78b70b1426820f172e27cf8935aead0350fae93ae94c60e55749e751bffb554ee3d936e68e05320e7a5f85719a7fa8517a119f4cc86b63d2d4fbfcf8e398df5b6354156d77fe395311c848d4b609dc518faecca5d7fa68a4b54351cbdb1ce7880f5cda7719", @ANYBLOB="01002bbd7000fcdbdf251b000000750021006d6e84a9905f0dffdcf2b0944b698e79da0eba57e5eaf234844de46646d0a3655acf6ecdf95da0f81c6887c83ceac2288173187445cee40f4face5dddfd46c50c9fd75ecc91d"], 0xf0}, 0x1, 0x0, 0x0, 0xc84}, 0x40040d4)
r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0)
write$auto(r3, &(0x7f0000008d40)='($}-)#@\x00', 0x40)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(r4, 0x0, 0x7, 0x4cbd5d)
madvise$auto(0x2001, 0x5, 0x4)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
lseek$auto(0x3, 0x2, 0x4)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)

kernel console output (not intermixed with test programs):

00007ffe93998d58
[  480.676967][T13926]  </TASK>
[  481.720059][T13926] ERROR: Out of memory at tomoyo_realpath_from_path.
[  483.887923][T13989] sd 0:0:1:0: PR command failed: 1026
[  483.919740][T13989] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  483.964472][T13989] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  485.440099][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1692'.
[  488.740738][T14078] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1699'.
[  488.862052][T14078] mac80211_hwsim hwsim4 �: renamed from wlan0 (while UP)
[  489.159382][T14058] Process accounting resumed
[  489.304445][T14057] Process accounting paused
[  491.138253][T14089] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1702'.
[  493.361869][T14167] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1710'.
[  493.436419][T14167] mac80211_hwsim hwsim2 �: renamed from wlan0 (while UP)
[  494.256642][   T30] audit: type=1800 audit(4294967345.930:18): pid=14183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1714" name="features" dev="configfs" ino=55826 res=0 errno=0
[  494.294498][T14185] vivid-007: =================  START STATUS  =================
[  494.334743][T14185] vivid-007: Enable Output Cropping: true
[  494.359898][T14185] vivid-007: Enable Output Composing: true
[  494.406490][T14185] vivid-007: Enable Output Scaler: true
[  494.464265][T14185] vivid-007: Tx RGB Quantization Range: Automatic
[  494.522140][T14185] vivid-007: Transmit Mode: HDMI
[  494.564367][T14185] vivid-007: Hotplug Present: 0x00000000
[  494.626243][T14185] vivid-007: RxSense Present: 0x00000000
[  494.680561][T14185] vivid-007: EDID Present: 0x00000000
[  494.726251][T14185] vivid-007: ==================  END STATUS  ==================
[  495.468954][T14197] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1717'.
[  496.046425][T14216] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1720'.
[  496.476480][T12959] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1341 with max blocks 4 with error 117
[  496.541385][T12959] EXT4-fs (sda1): This should not happen!! Data will be lost
[  496.541385][T12959] 
[  499.041098][T14272] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1731'.
[  499.093188][T14272] mac80211_hwsim hwsim6 �: renamed from wlan0 (while UP)
[  501.272124][T14317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1742'.
[  501.419543][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  501.426264][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  501.977528][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'.
[  502.615480][T14345] netlink: 'syz.4.1750': attribute type 10 has an invalid length.
[  502.734912][T14345] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1750'.
[  502.848943][T14349] vivid-007: =================  START STATUS  =================
[  502.920433][T14349] vivid-007: Generate PTS: true
[  502.969318][T14349] vivid-007: Generate SCR: true
[  503.020247][T14349] tpg source WxH: 320x240 (Y'CbCr)
[  503.066182][T14349] tpg field: 1
[  503.124143][T14349] tpg crop: (0,0)/320x240
[  503.170670][T14349] tpg compose: (0,0)/320x240
[  503.237383][T14349] tpg colorspace: 8
[  503.311770][T14349] tpg transfer function: 0/0
[  503.363249][T14349] tpg Y'CbCr encoding: 0/0
[  503.437174][T14349] tpg quantization: 0/0
[  503.521153][T14349] tpg RGB range: 0/2
[  503.564176][T14349] vivid-007: ==================  END STATUS  ==================
[  504.541983][T14373] FAULT_INJECTION: forcing a failure.
[  504.541983][T14373] name failslab, interval 1, probability 0, space 0, times 0
[  504.610069][T14373] CPU: 0 UID: 0 PID: 14373 Comm: syz.1.1757 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  504.610097][T14373] Tainted: [L]=SOFTLOCKUP
[  504.610103][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  504.610113][T14373] Call Trace:
[  504.610119][T14373]  <TASK>
[  504.610126][T14373]  dump_stack_lvl+0x100/0x190
[  504.610204][T14373]  should_fail_ex.cold+0x5/0xa
[  504.610232][T14373]  should_failslab+0xc2/0x120
[  504.610266][T14373]  kmem_cache_alloc_noprof+0x91/0x6a0
[  504.610288][T14373]  ? __pfx_map_id_range_down+0x10/0x10
[  504.610318][T14373]  ? security_inode_alloc+0x3b/0x2c0
[  504.610355][T14373]  security_inode_alloc+0x3b/0x2c0
[  504.610370][T14373]  inode_init_always_gfp+0xc77/0xfb0
[  504.610404][T14373]  alloc_inode+0x8e/0x250
[  504.610422][T14373]  new_inode+0x22/0x1c0
[  504.610441][T14373]  hugetlbfs_get_inode+0x39a/0x700
[  504.610573][T14373]  hugetlb_file_setup+0x15b/0x5b0
[  504.610593][T14373]  ksys_mmap_pgoff+0x242/0x610
[  504.610616][T14373]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  504.610634][T14373]  ? xfd_validate_state+0x129/0x190
[  504.610663][T14373]  __x64_sys_mmap+0x125/0x190
[  504.610690][T14373]  do_syscall_64+0x115/0x840
[  504.610735][T14373]  ? clear_bhb_loop+0x40/0x90
[  504.610761][T14373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.610777][T14373] RIP: 0033:0x7f7d59d9de59
[  504.610792][T14373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  504.610807][T14373] RSP: 002b:00007f7d5ac80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  504.610823][T14373] RAX: ffffffffffffffda RBX: 00007f7d5a025fa0 RCX: 00007f7d59d9de59
[  504.610834][T14373] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000000
[  504.610844][T14373] RBP: 00007f7d59e33e6f R08: 0000000000000401 R09: 0000300000000000
[  504.610854][T14373] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000
[  504.610863][T14373] R13: 00007f7d5a026038 R14: 00007f7d5a025fa0 R15: 00007ffcd6b28e18
[  504.610884][T14373]  </TASK>
[  505.949633][T14401] FAULT_INJECTION: forcing a failure.
[  505.949633][T14401] name failslab, interval 1, probability 0, space 0, times 0
[  506.026057][T14401] CPU: 0 UID: 0 PID: 14401 Comm: syz.4.1765 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  506.026105][T14401] Tainted: [L]=SOFTLOCKUP
[  506.026110][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  506.026120][T14401] Call Trace:
[  506.026126][T14401]  <TASK>
[  506.026132][T14401]  dump_stack_lvl+0x100/0x190
[  506.026155][T14401]  should_fail_ex.cold+0x5/0xa
[  506.026173][T14401]  should_failslab+0xc2/0x120
[  506.026193][T14401]  kmem_cache_alloc_noprof+0x91/0x6a0
[  506.026209][T14401]  ? __pud_alloc+0x4f6/0x690
[  506.026229][T14401]  ? __pmd_alloc+0xbf/0x950
[  506.026251][T14401]  __pmd_alloc+0xbf/0x950
[  506.026269][T14401]  ? __pud_alloc+0x4fb/0x690
[  506.026288][T14401]  copy_page_range+0x41a8/0x5b20
[  506.026318][T14401]  ? rcu_read_unlock+0x17/0x60
[  506.026349][T14401]  ? mas_wr_store_entry+0xa1/0x1e80
[  506.026367][T14401]  ? __pfx_copy_page_range+0x10/0x10
[  506.026393][T14401]  ? mas_store+0x666/0xac0
[  506.026412][T14401]  ? __pfx_mas_store+0x10/0x10
[  506.026432][T14401]  ? __pfx___vma_start_write+0x10/0x10
[  506.026471][T14401]  dup_mmap+0xd44/0x21b0
[  506.026500][T14401]  ? __pfx_dup_mmap+0x10/0x10
[  506.026519][T14401]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  506.026610][T14401]  ? __lock_acquire+0x49f/0x1a40
[  506.026642][T14401]  ? find_held_lock+0x2b/0x80
[  506.026658][T14401]  ? __percpu_counter_init_many+0x2bc/0x3b0
[  506.026734][T14401]  copy_process+0x4588/0x8030
[  506.026771][T14401]  ? __pfx_copy_process+0x10/0x10
[  506.026793][T14401]  ? _copy_from_user+0x59/0xd0
[  506.026869][T14401]  kernel_clone+0x176/0x9d0
[  506.026887][T14401]  ? __pfx_kernel_clone+0x10/0x10
[  506.026903][T14401]  ? futex_private_hash_put+0x115/0x1c0
[  506.026935][T14401]  ? __pfx_futex_wake+0x10/0x10
[  506.026956][T14401]  __do_sys_clone3+0x214/0x290
[  506.026972][T14401]  ? __pfx___do_sys_clone3+0x10/0x10
[  506.026997][T14401]  ? fput+0x79/0x100
[  506.027027][T14401]  do_syscall_64+0x115/0x840
[  506.027056][T14401]  ? clear_bhb_loop+0x40/0x90
[  506.027076][T14401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.027092][T14401] RIP: 0033:0x7f9a1499de59
[  506.027106][T14401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  506.027121][T14401] RSP: 002b:00007f9a12bf5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  506.027137][T14401] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9a1499de59
[  506.027147][T14401] RDX: 00007f9a12bf5f10 RSI: 0000000000000058 RDI: 00007f9a12bf5f10
[  506.027156][T14401] RBP: 00007f9a14a33e6f R08: 0000000000000000 R09: 0000000000000058
[  506.027166][T14401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  506.027175][T14401] R13: 00007f9a14c26038 R14: 00007f9a14c25fa0 R15: 00007ffe93998d58
[  506.027196][T14401]  </TASK>
[  507.496302][T14445] random: crng reseeded on system resumption
[  507.649498][T14456] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1778'.
[  507.981079][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.066368][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.115253][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.170336][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.214957][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.260818][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.305425][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.365352][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.419472][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.456801][T14463] netlink: 'syz.4.1780': attribute type 153 has an invalid length.
[  508.813174][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1785'.
[  509.555137][T14518] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1789'.
[  510.123415][T14500] kexec: Could not allocate control_code_buffer
[  510.295895][T14530] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1793'.
[  510.840297][T14547] bridge0: port 4(veth1) entered blocking state
[  510.891374][T14547] bridge0: port 4(veth1) entered disabled state
[  510.940433][T14547] veth1: entered allmulticast mode
[  510.980078][T14547] veth1: entered promiscuous mode
[  511.002390][T14547] bridge0: port 4(veth1) entered blocking state
[  511.010320][T14547] bridge0: port 4(veth1) entered forwarding state
[  511.345039][T12959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.869261][T13414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  511.885573][T13414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  511.893858][T13414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  511.901638][T13414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  511.912236][T13414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  512.007687][T12959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.285403][T12959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.459239][T12959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.193310][T12959] bridge_slave_1: left allmulticast mode
[  513.241297][T12959] bridge_slave_1: left promiscuous mode
[  513.279269][T12959] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.334694][T12959] bridge_slave_0: left allmulticast mode
[  513.371590][T12959] bridge_slave_0: left promiscuous mode
[  513.399160][T12959] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.988814][T13414] Bluetooth: hci2: command tx timeout
[  514.220697][T12959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.277335][T12959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  514.314940][T12959] bond0 (unregistering): Released all slaves
[  514.864837][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  515.063360][T12959] hsr_slave_0: left promiscuous mode
[  515.079337][T12959] hsr_slave_1: left promiscuous mode
[  515.095466][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  515.124839][T12959] batman_adv: batadv0: Removing interface: batadv_slave_0
[  515.152390][T12959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  515.175217][T12959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  515.248798][T12959] veth1_macvtap: left promiscuous mode
[  515.260326][T12959] veth0_macvtap: left promiscuous mode
[  515.602726][T12959] team0 (unregistering): Port device team_slave_1 removed
[  515.636505][T12959] team0 (unregistering): Port device team_slave_0 removed
[  516.060214][T13414] Bluetooth: hci2: command tx timeout
[  517.310739][T14570] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.368013][T14570] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.415559][T14570] bridge_slave_0: entered allmulticast mode
[  517.455515][T14570] bridge_slave_0: entered promiscuous mode
[  517.510749][T14570] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.553126][T14570] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.595945][T14570] bridge_slave_1: entered allmulticast mode
[  517.641357][T14570] bridge_slave_1: entered promiscuous mode
[  517.799875][T14570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.846717][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  517.872126][T14570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.991219][T14570] team0: Port device team_slave_0 added
[  518.031500][T14570] team0: Port device team_slave_1 added
[  518.137849][T13414] Bluetooth: hci2: command tx timeout
[  518.145244][T14570] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.190771][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.299664][T14570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.365741][T14570] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.397960][T14570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.512720][T14570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.811253][T14570] hsr_slave_0: entered promiscuous mode
[  518.845757][T14570] hsr_slave_1: entered promiscuous mode
[  518.870910][T14570] debugfs: 'hsr0' already exists in 'hsr'
[  518.911743][T14570] Cannot create hsr debugfs directory
[  519.700880][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7
[  520.218114][T13414] Bluetooth: hci2: command tx timeout
[  520.284984][T14744] zswap: compressor  not available
[  520.358410][T14764] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1835'.
[  521.542222][T14743] Process accounting resumed
[  522.752000][T14570] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  522.810989][T14570] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  522.853021][T14570] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  522.909378][T14570] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  522.953353][T14570] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  523.039382][T14570] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.081027][T14570] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  523.182754][T14570] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  523.280658][T13414] Bluetooth: hci1: unexpected subevent 0x05 length: 123 > 12
[  523.416457][T14830] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1845'.
[  523.622688][T14570] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.854484][T14843] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1847'.
[  524.054711][T14570] 8021q: adding VLAN 0 to HW filter on device team0
[  524.260289][T12961] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.267545][T12961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.363862][T14862] vivid-011: =================  START STATUS  =================
[  524.399063][T14862] vivid-011: Radio HW Seek Mode: Bounded
[  524.433082][T14862] vivid-011: Radio Programmable HW Seek: false
[  524.465092][T14862] vivid-011: RDS Rx I/O Mode: Block I/O
[  524.493145][T14862] vivid-011: Generate RBDS Instead of RDS: false
[  524.544241][T14862] vivid-011: RDS Reception: true
[  524.573500][T14862] vivid-011: RDS Program Type: 0 inactive
[  524.651620][T14862] vivid-011: RDS PS Name:  inactive
[  524.687855][T14862] vivid-011: RDS Radio Text:  inactive
[  524.718419][T14862] vivid-011: RDS Traffic Announcement: false inactive
[  524.752665][T14862] vivid-011: RDS Traffic Program: false inactive
[  524.783627][T14862] vivid-011: RDS Music: false inactive
[  524.814435][T14862] vivid-011: ==================  END STATUS  ==================
[  524.839260][T12963] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.846439][T12963] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.337820][T13414] Bluetooth: hci1: command 0x0c1a tx timeout
[  527.098806][T12963] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 4 with max blocks 3 with error 117
[  527.202021][T12963] EXT4-fs (sda1): This should not happen!! Data will be lost
[  527.202021][T12963] 
[  527.887465][T14570] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.195022][T14570] veth0_vlan: entered promiscuous mode
[  529.308662][T14570] veth1_vlan: entered promiscuous mode
[  529.468504][T14570] veth0_macvtap: entered promiscuous mode
[  529.533590][T14570] veth1_macvtap: entered promiscuous mode
[  529.618190][T14570] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.913225][T12960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.078233][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  530.100116][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  530.108447][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  530.116707][T14570] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.133126][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  530.142025][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  530.216244][T14982] FAULT_INJECTION: forcing a failure.
[  530.216244][T14982] name failslab, interval 1, probability 0, space 0, times 0
[  530.314292][T14982] CPU: 0 UID: 0 PID: 14982 Comm: syz.3.1863 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  530.314320][T14982] Tainted: [L]=SOFTLOCKUP
[  530.314325][T14982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  530.314334][T14982] Call Trace:
[  530.314340][T14982]  <TASK>
[  530.314346][T14982]  dump_stack_lvl+0x100/0x190
[  530.314371][T14982]  should_fail_ex.cold+0x5/0xa
[  530.314391][T14982]  should_failslab+0xc2/0x120
[  530.314411][T14982]  kmem_cache_alloc_noprof+0x91/0x6a0
[  530.314430][T14982]  ? __kernfs_new_node+0xd2/0xa10
[  530.314561][T14982]  __kernfs_new_node+0xd2/0xa10
[  530.314586][T14982]  ? __pfx___kernfs_new_node+0x10/0x10
[  530.314613][T14982]  ? find_held_lock+0x2b/0x80
[  530.314631][T14982]  ? kernfs_root+0xee/0x2a0
[  530.314649][T14982]  ? kernfs_root+0xee/0x2a0
[  530.314676][T14982]  kernfs_new_node+0x117/0x150
[  530.314701][T14982]  __kernfs_create_file+0x53/0x350
[  530.314719][T14982]  sysfs_add_file_mode_ns+0x207/0x3c0
[  530.314765][T14982]  internal_create_group+0x593/0xfb0
[  530.314790][T14982]  ? kobject_init_and_add+0x129/0x180
[  530.314820][T14982]  ? __pfx_internal_create_group+0x10/0x10
[  530.314840][T14982]  ? __pfx_kobject_init_and_add+0x10/0x10
[  530.314857][T14982]  ? __x64_sys_ioctl+0x18e/0x210
[  530.314882][T14982]  internal_create_groups+0x9d/0x150
[  530.314910][T14982]  net_rx_queue_update_kobjects+0xc7/0x760
[  530.315004][T14982]  ? kset_register+0x1bb/0x290
[  530.315023][T14982]  netdev_register_kobject+0x290/0x3d0
[  530.315047][T14982]  register_netdevice+0x15b6/0x25a0
[  530.315107][T14982]  ? __pfx_register_netdevice+0x10/0x10
[  530.315124][T14982]  ? net_generic+0xea/0x2a0
[  530.315202][T14982]  ppp_dev_configure+0x986/0xcb0
[  530.315230][T14982]  ppp_ioctl+0x9d7/0x27c0
[  530.315246][T14982]  ? find_held_lock+0x2b/0x80
[  530.315263][T14982]  ? __pfx_ppp_ioctl+0x10/0x10
[  530.315281][T14982]  ? __fget_files+0x21f/0x3d0
[  530.315304][T14982]  ? __pfx_ppp_ioctl+0x10/0x10
[  530.315319][T14982]  __x64_sys_ioctl+0x18e/0x210
[  530.315339][T14982]  do_syscall_64+0x115/0x840
[  530.315360][T14982]  ? clear_bhb_loop+0x40/0x90
[  530.315379][T14982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.315394][T14982] RIP: 0033:0x7f12e419de59
[  530.315408][T14982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.315423][T14982] RSP: 002b:00007f12e23d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  530.315439][T14982] RAX: ffffffffffffffda RBX: 00007f12e4426090 RCX: 00007f12e419de59
[  530.315449][T14982] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005
[  530.315458][T14982] RBP: 00007f12e4233e6f R08: 0000000000000000 R09: 0000000000000000
[  530.315467][T14982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  530.315476][T14982] R13: 00007f12e4426128 R14: 00007f12e4426090 R15: 00007ffc1307d848
[  530.315497][T14982]  </TASK>
[  530.919139][  T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.930260][  T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  530.976421][  T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  530.995647][  T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.164095][T12960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.464687][T12960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.579575][T12959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.599213][T12959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.717968][T12960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.829008][T12959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.862035][T12959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.005269][T14570] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  532.218108][ T5635] Bluetooth: hci3: command tx timeout
[  532.588724][T12960] team0: left allmulticast mode
[  532.623667][T12960] team_slave_0: left allmulticast mode
[  532.653125][T12960] team_slave_1: left allmulticast mode
[  532.703963][T12960] team0: left promiscuous mode
[  532.719167][T12960] team_slave_0: left promiscuous mode
[  532.737592][T12960] team_slave_1: left promiscuous mode
[  532.755691][T12960] bridge0: port 3(team0) entered disabled state
[  532.787544][T12960] bridge_slave_1: left allmulticast mode
[  532.806824][T12960] bridge_slave_1: left promiscuous mode
[  532.828100][T12960] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.853212][T12960] bridge_slave_0: left allmulticast mode
[  532.871075][T12960] bridge_slave_0: left promiscuous mode
[  532.892707][T12960] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.206233][T12960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.221144][T12960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.230983][T12960] bond0 (unregistering): Released all slaves
[  533.355253][T12960] HfR: left promiscuous mode
[  533.854047][T15039] zswap: compressor � not available
[  534.218896][T14984] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.251048][T14984] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.274418][T14984] bridge_slave_0: entered allmulticast mode
[  534.299102][ T5635] Bluetooth: hci3: command tx timeout
[  534.309876][T14984] bridge_slave_0: entered promiscuous mode
[  534.423367][T14984] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.461545][T14984] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.489712][T14984] bridge_slave_1: entered allmulticast mode
[  534.511272][T14984] bridge_slave_1: entered promiscuous mode
[  534.823299][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  534.873949][T14984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.946818][T14984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.076432][T12960] hsr_slave_0: left promiscuous mode
[  535.093786][T12960] hsr_slave_1: left promiscuous mode
[  535.114031][T12960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.141954][T12960] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.167880][T12960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  535.194367][T12960] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.241094][T12960] veth1_macvtap: left promiscuous mode
[  535.263537][T12960] veth0_macvtap: left allmulticast mode
[  535.286375][T12960] veth0_macvtap: left promiscuous mode
[  535.854287][T12960] team0 (unregistering): Port device team_slave_1 removed
[  535.883984][T12960] team0 (unregistering): Port device team_slave_0 removed
[  536.138753][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  536.223469][T14984] team0: Port device team_slave_0 added
[  536.260567][T14984] team0: Port device team_slave_1 added
[  536.378937][ T5635] Bluetooth: hci3: command tx timeout
[  536.455205][T14984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.496624][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.668997][T14984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.770607][T14984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.820140][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  536.979955][T14984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.083836][T15105] zswap: compressor  not available
[  537.313620][T14984] hsr_slave_0: entered promiscuous mode
[  537.339136][T14984] hsr_slave_1: entered promiscuous mode
[  537.378982][T14984] debugfs: 'hsr0' already exists in 'hsr'
[  537.402675][T14984] Cannot create hsr debugfs directory
[  538.149275][T15147] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1884'.
[  538.204971][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7
[  538.267853][T15147] Zero length message leads to an empty skb
[  538.457109][ T5635] Bluetooth: hci3: command tx timeout
[  540.989882][T14984] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  541.046472][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  541.103909][T14984] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  541.164922][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  541.212388][T14984] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  541.282564][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  541.571750][T14984] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  541.666685][T14984] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  542.584397][T14984] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.890668][T14984] 8021q: adding VLAN 0 to HW filter on device team0
[  543.026766][T12963] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.034016][T12963] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.159827][T12959] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.167038][T12959] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.291786][T15261] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1900'.
[  543.646729][T15270] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  545.109949][T14984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.499763][T14984] veth0_vlan: entered promiscuous mode
[  545.603598][T14984] veth1_vlan: entered promiscuous mode
[  545.769981][T14984] veth0_macvtap: entered promiscuous mode
[  545.820542][T14984] veth1_macvtap: entered promiscuous mode
[  545.908669][T14984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.973358][T14984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.053488][T12961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.109953][T12961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.162855][T12961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.265445][T12961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.598258][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.650741][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.734876][T15350] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1911'.
[  546.765570][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.819116][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.986632][T15391] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  548.619935][T15399] capability: warning: `syz.1.1917' uses 32-bit capabilities (legacy support in use)
[  550.843255][T15444] random: crng reseeded on system resumption
[  551.552457][T15462] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1930'.
[  551.950548][T12961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.171177][T13414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  552.183766][T13414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  552.195864][T13414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  552.208926][T13414] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  552.222994][T13414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  552.381564][T12961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.690906][T12961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.938136][T12961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.066248][T15449] Process accounting paused
[  553.975462][T12961] bridge_slave_1: left allmulticast mode
[  554.002836][T12961] bridge_slave_1: left promiscuous mode
[  554.029313][T12961] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.080840][T12961] bridge_slave_0: left allmulticast mode
[  554.108174][T12961] bridge_slave_0: left promiscuous mode
[  554.127795][T12961] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.302861][ T5635] Bluetooth: hci3: command tx timeout
[  554.453664][ T5635] Bluetooth: hci0: unexpected event 0x0f length: 7 > 4
[  554.453696][ T5635] Bluetooth: hci0: unexpected event for opcode 0x647c
[  554.631823][T12961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  554.673473][T12961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.719336][T12961] bond0 (unregistering): Released all slaves
[  554.984356][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  555.307682][T12961] hsr_slave_0: left promiscuous mode
[  555.330046][T12961] hsr_slave_1: left promiscuous mode
[  555.359109][T12961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  555.400883][T12961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.464957][T12961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.494461][T12961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.565961][T12961] veth1_macvtap: left promiscuous mode
[  555.594379][T12961] veth0_macvtap: left promiscuous mode
[  555.627033][T12961] veth1_vlan: left promiscuous mode
[  555.645510][T12961] veth0_vlan: left promiscuous mode
[  556.377136][ T5635] Bluetooth: hci3: command tx timeout
[  556.467534][T12961] team0 (unregistering): Port device team_slave_1 removed
[  556.549039][T12961] team0 (unregistering): Port device team_slave_0 removed
[  557.447048][T15554] mmap: syz.2.1945 (15554) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  557.670790][T12946] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 5 with max blocks 4 with error 117
[  557.780252][T12946] EXT4-fs (sda1): This should not happen!! Data will be lost
[  557.780252][T12946] 
[  558.411531][T15596] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1952'.
[  558.458014][ T5635] Bluetooth: hci3: command tx timeout
[  558.577240][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  558.851206][T15466] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.885432][T15466] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.910047][T15466] bridge_slave_0: entered allmulticast mode
[  558.942329][T15466] bridge_slave_0: entered promiscuous mode
[  559.135301][T15466] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.167809][T15466] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.195411][T15466] bridge_slave_1: entered allmulticast mode
[  559.219198][T15466] bridge_slave_1: entered promiscuous mode
[  559.575173][T15466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.694786][T15466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  560.001516][T15466] team0: Port device team_slave_0 added
[  560.072203][T15466] team0: Port device team_slave_1 added
[  560.284631][T15466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  560.313943][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.443304][T15466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  560.490578][T15466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  560.522018][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.560162][ T5635] Bluetooth: hci3: command tx timeout
[  560.690044][T15466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.934667][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7
[  561.036694][T15466] hsr_slave_0: entered promiscuous mode
[  561.070319][T15466] hsr_slave_1: entered promiscuous mode
[  561.099636][T15466] debugfs: 'hsr0' already exists in 'hsr'
[  561.126593][T15466] Cannot create hsr debugfs directory
[  562.863272][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  562.873981][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  564.806259][T15466] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  564.858125][T15466] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  564.903170][T15466] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  564.996298][T15466] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  565.044684][T15466] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  565.098870][T15466] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  565.143818][T15466] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  565.214723][T15466] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  565.590140][T15767] zswap: compressor � not available
[  566.852352][T15466] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.038096][T15466] 8021q: adding VLAN 0 to HW filter on device team0
[  567.173639][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.180835][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.323872][T12964] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.331057][T12964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.102437][T15822] process 'syz.2.1980' launched './file0' with NULL argv: empty string added
[  568.592506][T15842] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1983'.
[  569.532716][T15466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.611780][T15861] zswap: compressor � not available
[  569.758742][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'.
[  570.062287][T15466] veth0_vlan: entered promiscuous mode
[  570.301069][T15887] busy
[  570.342084][T15466] veth1_vlan: entered promiscuous mode
[  570.482275][T15466] veth0_macvtap: entered promiscuous mode
[  570.533256][T15466] veth1_macvtap: entered promiscuous mode
[  571.003539][T15466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.201742][T15466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.300703][  T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.374071][  T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.414291][  T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.520341][  T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.853893][T15900] Process accounting resumed
[  572.012877][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.077998][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.332412][  T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.373279][  T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.963221][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'.
[  573.075413][T15907] veth1_macvtap: left promiscuous mode
[  573.774981][T15921] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1994'.
[  573.946653][T15929] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1995'.
[  575.501084][T15952] zswap: compressor  not available
[  576.827394][  T141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.183344][  T141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.205809][T15983] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2007'.
[  577.292276][T13414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  577.306093][T13414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  577.315889][T13414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  577.325508][T13414] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  577.335384][T13414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  577.680684][  T141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.743898][T15992] FAULT_INJECTION: forcing a failure.
[  577.743898][T15992] name failslab, interval 1, probability 0, space 0, times 0
[  577.801557][T15992] CPU: 0 UID: 0 PID: 15992 Comm: syz.4.2008 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  577.801584][T15992] Tainted: [L]=SOFTLOCKUP
[  577.801589][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  577.801599][T15992] Call Trace:
[  577.801605][T15992]  <TASK>
[  577.801611][T15992]  dump_stack_lvl+0x100/0x190
[  577.801633][T15992]  should_fail_ex.cold+0x5/0xa
[  577.801658][T15992]  should_failslab+0xc2/0x120
[  577.801678][T15992]  kmem_cache_alloc_noprof+0x91/0x6a0
[  577.801693][T15992]  ? __proc_create+0xc1/0x8f0
[  577.801795][T15992]  ? __proc_create+0xc1/0x8f0
[  577.801816][T15992]  ? __proc_create+0x247/0x8f0
[  577.801842][T15992]  __proc_create+0x247/0x8f0
[  577.801864][T15992]  ? __pfx___proc_create+0x10/0x10
[  577.801897][T15992]  ? _raw_spin_unlock+0x28/0x50
[  577.801921][T15992]  proc_create_reg+0x75/0x170
[  577.801937][T15992]  proc_create_net_data+0x8e/0x1c0
[  577.801960][T15992]  ? __pfx_proc_create_net_data+0x10/0x10
[  577.801988][T15992]  ? __pfx_arp_net_init+0x10/0x10
[  577.802047][T15992]  arp_net_init+0x53/0x80
[  577.802062][T15992]  ops_init+0x1e2/0x5f0
[  577.802116][T15992]  setup_net+0x118/0x3a0
[  577.802134][T15992]  ? __pfx_setup_net+0x10/0x10
[  577.802152][T15992]  ? mutex_init_lockdep+0xf1/0x120
[  577.802178][T15992]  copy_net_ns+0x46f/0x7c0
[  577.802198][T15992]  create_new_namespaces+0x3ea/0xac0
[  577.802229][T15992]  unshare_nsproxy_namespaces+0xf2/0x220
[  577.802254][T15992]  ksys_unshare+0x438/0xab0
[  577.802273][T15992]  ? __pfx_ksys_unshare+0x10/0x10
[  577.802296][T15992]  __x64_sys_unshare+0x31/0x40
[  577.802313][T15992]  do_syscall_64+0x115/0x840
[  577.802334][T15992]  ? clear_bhb_loop+0x40/0x90
[  577.802352][T15992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.802368][T15992] RIP: 0033:0x7fac87f9de59
[  577.802381][T15992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.802396][T15992] RSP: 002b:00007fac88d9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  577.802412][T15992] RAX: ffffffffffffffda RBX: 00007fac88226180 RCX: 00007fac87f9de59
[  577.802422][T15992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  577.802431][T15992] RBP: 00007fac88033e6f R08: 0000000000000000 R09: 0000000000000000
[  577.802440][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  577.802449][T15992] R13: 00007fac88226218 R14: 00007fac88226180 R15: 00007ffc33736738
[  577.802469][T15992]  </TASK>
[  578.575175][T16007] validate_nla: 55 callbacks suppressed
[  578.575193][T16007] netlink: 'syz.4.2010': attribute type 1 has an invalid length.
[  578.592469][  T141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.617803][T16007] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2010'.
[  579.417064][ T5635] Bluetooth: hci3: command tx timeout
[  579.557131][  T141] bridge_slave_1: left allmulticast mode
[  579.584911][  T141] bridge_slave_1: left promiscuous mode
[  579.620143][  T141] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.666113][T16034] ecryptfs_miscdev_write: memdup_user returned error [-14]
[  579.704840][  T141] bridge_slave_0: left allmulticast mode
[  579.731380][  T141] bridge_slave_0: left promiscuous mode
[  579.754527][  T141] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.419327][  T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.466435][  T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.526768][  T141] bond0 (unregistering): Released all slaves
[  580.933151][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  581.078140][  T141] hsr_slave_0: left promiscuous mode
[  581.084127][  T141] hsr_slave_1: left promiscuous mode
[  581.092320][  T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  581.100184][  T141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  581.109634][  T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  581.117518][  T141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  581.132635][  T141] veth1_macvtap: left promiscuous mode
[  581.138432][  T141] veth0_macvtap: left promiscuous mode
[  581.144123][  T141] veth1_vlan: left promiscuous mode
[  581.150031][  T141] veth0_vlan: left promiscuous mode
[  581.353892][  T141] team0 (unregistering): Port device team_slave_1 removed
[  581.371791][  T141] team0 (unregistering): Port device team_slave_0 removed
[  581.497093][ T5635] Bluetooth: hci3: command tx timeout
[  581.810958][T15984] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.872865][T15984] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.921793][T15984] bridge_slave_0: entered allmulticast mode
[  581.955011][T15984] bridge_slave_0: entered promiscuous mode
[  581.970917][T16063] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2017'.
[  582.016465][T15984] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.067075][T15984] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.101865][T15984] bridge_slave_1: entered allmulticast mode
[  582.147476][T15984] bridge_slave_1: entered promiscuous mode
[  582.185213][T16063] mac80211_hwsim hwsim35 �: renamed from wlan0 (while UP)
[  582.909176][T15984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.013665][T15984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.355746][T16105] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2022'.
[  583.566421][T15984] team0: Port device team_slave_0 added
[  583.577013][ T5635] Bluetooth: hci3: command tx timeout
[  583.624096][T15984] team0: Port device team_slave_1 added
[  583.663268][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  583.801630][T15984] batman_adv: batadv0: Adding interface: batadv_slave_0
[  583.814063][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.845225][T15984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  583.884900][T15984] batman_adv: batadv0: Adding interface: batadv_slave_1
[  583.906616][T15984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  583.988347][T15984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.227831][T15984] hsr_slave_0: entered promiscuous mode
[  584.251280][T16075] Process accounting resumed
[  584.258302][T15984] hsr_slave_1: entered promiscuous mode
[  584.289963][T15984] debugfs: 'hsr0' already exists in 'hsr'
[  584.314137][T15984] Cannot create hsr debugfs directory
[  585.392809][T16138] zswap: compressor � not available
[  585.562372][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7
[  585.657503][ T5635] Bluetooth: hci3: command tx timeout
[  585.923521][T16154] futex_wake_op: syz.2.2029 tries to shift op by -2048; fix this program
[  586.063475][T16154] futex_wake_op: syz.2.2029 tries to shift op by -2048; fix this program
[  588.480978][T12960] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 5 with max blocks 2 with error 117
[  588.535640][T12960] EXT4-fs (sda1): This should not happen!! Data will be lost
[  588.535640][T12960] 
[  588.609303][T15984] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  588.664894][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  588.708971][T15984] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  588.769898][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  588.851516][T15984] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  588.892836][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  588.925102][T15984] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  588.976773][T15984] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  589.754730][T15984] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.838594][T15984] 8021q: adding VLAN 0 to HW filter on device team0
[  590.100172][T12960] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.107340][T12960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.181698][T12960] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.188869][T12960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.776518][T16246] zswap: compressor � not available
[  590.863407][T16257] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2039'.
[  591.374300][T16265] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2040'.
[  592.172866][T16292] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2041'.
[  592.466794][T16290] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input22
[  592.564313][T15984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.780961][T15984] veth0_vlan: entered promiscuous mode
[  592.864514][T15984] veth1_vlan: entered promiscuous mode
[  592.977070][T15984] veth0_macvtap: entered promiscuous mode
[  593.051090][T15984] veth1_macvtap: entered promiscuous mode
[  593.161364][T15984] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.205076][T15984] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.266667][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.320544][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.375062][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.426660][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.125776][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.171503][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.329784][T16315] netlink: 'syz.3.2046': attribute type 1 has an invalid length.
[  594.371763][T16315] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2046'.
[  594.570308][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.633080][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.016728][T16327] can: request_module (can-proto-0) failed.
[  595.028407][T16321] FAULT_INJECTION: forcing a failure.
[  595.028407][T16321] name failslab, interval 1, probability 0, space 0, times 0
[  595.074601][ T5635] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  595.108324][T16321] CPU: 0 UID: 0 PID: 16321 Comm: syz.3.2048 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  595.108352][T16321] Tainted: [L]=SOFTLOCKUP
[  595.108357][T16321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  595.108367][T16321] Call Trace:
[  595.108372][T16321]  <TASK>
[  595.108378][T16321]  dump_stack_lvl+0x100/0x190
[  595.108401][T16321]  should_fail_ex.cold+0x5/0xa
[  595.108418][T16321]  should_failslab+0xc2/0x120
[  595.108438][T16321]  __kmalloc_cache_noprof+0x91/0x6c0
[  595.108461][T16321]  ? find_held_lock+0x2b/0x80
[  595.108477][T16321]  ? snd_seq_port_connect+0x61/0x540
[  595.108577][T16321]  snd_seq_port_connect+0x61/0x540
[  595.108595][T16321]  ? _raw_read_unlock+0x28/0x50
[  595.108616][T16321]  ? check_subscription_permission.isra.0+0x146/0x240
[  595.108664][T16321]  snd_seq_ioctl_subscribe_port+0x219/0x490
[  595.108689][T16321]  ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10
[  595.108718][T16321]  call_seq_client_ctl+0xa3/0x130
[  595.108738][T16321]  snd_seq_kernel_client_ctl+0x77/0xd0
[  595.108757][T16321]  snd_seq_oss_midi_open+0x465/0x680
[  595.108801][T16321]  ? __pfx_snd_seq_oss_midi_open+0x10/0x10
[  595.108824][T16321]  ? snd_seq_oss_midi_reset+0x11a/0x4c0
[  595.108854][T16321]  ? __mutex_lock+0x26d/0x1bd0
[  595.108880][T16321]  snd_seq_oss_synth_reset+0x439/0x890
[  595.108903][T16321]  ? __pfx___mutex_lock+0x10/0x10
[  595.108924][T16321]  ? __pfx_snd_seq_oss_synth_reset+0x10/0x10
[  595.108948][T16321]  ? __pfx___fsnotify_parent+0x10/0x10
[  595.108975][T16321]  snd_seq_oss_reset+0x73/0x290
[  595.108994][T16321]  ? __pfx_odev_release+0x10/0x10
[  595.109013][T16321]  snd_seq_oss_release+0x7c/0x180
[  595.109033][T16321]  ? __pfx_odev_release+0x10/0x10
[  595.109050][T16321]  odev_release+0x4c/0x70
[  595.109067][T16321]  __fput+0x3ff/0xb50
[  595.109088][T16321]  task_work_run+0x150/0x240
[  595.109109][T16321]  ? __pfx_task_work_run+0x10/0x10
[  595.109134][T16321]  exit_to_user_mode_loop+0x1d8/0x6f0
[  595.109160][T16321]  ? rcu_is_watching+0x12/0xc0
[  595.109178][T16321]  do_syscall_64+0x652/0x840
[  595.109198][T16321]  ? clear_bhb_loop+0x40/0x90
[  595.109217][T16321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.109232][T16321] RIP: 0033:0x7f12e419de59
[  595.109253][T16321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.109269][T16321] RSP: 002b:00007f12e23f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  595.109285][T16321] RAX: 0000000000000000 RBX: 00007f12e4425fa0 RCX: 00007f12e419de59
[  595.109295][T16321] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[  595.109304][T16321] RBP: 00007f12e4233e6f R08: 0000000000000000 R09: 0000000000000000
[  595.109313][T16321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.109322][T16321] R13: 00007f12e4426038 R14: 00007f12e4425fa0 R15: 00007ffc1307d848
[  595.109342][T16321]  </TASK>
[  595.665644][T16347] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2051'.
[  595.777172][T16353] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2052'.
[  597.097523][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout
[  597.224816][T16394] vivid-011: =================  START STATUS  =================
[  597.255148][T16394] vivid-011: Radio HW Seek Mode: Bounded
[  597.278086][T16394] vivid-011: Radio Programmable HW Seek: false
[  597.298065][T16394] vivid-011: RDS Rx I/O Mode: Block I/O
[  597.318699][T16394] vivid-011: Generate RBDS Instead of RDS: false
[  597.343717][T16394] vivid-011: RDS Reception: true
[  597.364261][T16394] vivid-011: RDS Program Type: 0 inactive
[  597.388598][T16394] vivid-011: RDS PS Name:  inactive
[  597.406713][T16394] vivid-011: RDS Radio Text:  inactive
[  597.427323][T16394] vivid-011: RDS Traffic Announcement: false inactive
[  597.450311][T16394] vivid-011: RDS Traffic Program: false inactive
[  597.472325][T16394] vivid-011: RDS Music: false inactive
[  597.492401][T16394] vivid-011: ==================  END STATUS  ==================
[  598.001007][T16418] sctp: [Deprecated]: syz.4.2066 (pid 16418) Use of struct sctp_assoc_value in delayed_ack socket option.
[  598.001007][T16418] Use struct sctp_sack_info instead
[  598.517205][T16423] random: crng reseeded on system resumption
[  598.656717][T16426] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  598.989576][T16436] vivid-011: =================  START STATUS  =================
[  599.029157][T16436] vivid-011: Radio HW Seek Mode: Bounded
[  599.066956][T16436] vivid-011: Radio Programmable HW Seek: false
[  599.120348][T16436] vivid-011: RDS Rx I/O Mode: Block I/O
[  599.159529][T16436] vivid-011: Generate RBDS Instead of RDS: false
[  599.177483][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout
[  599.212376][T16436] vivid-011: RDS Reception: true
[  599.241178][T16436] vivid-011: RDS Program Type: 0 inactive
[  599.274473][T16436] vivid-011: RDS PS Name:  inactive
[  599.305383][T16436] vivid-011: RDS Radio Text:  inactive
[  599.326561][T16436] vivid-011: RDS Traffic Announcement: false inactive
[  599.352874][T16436] vivid-011: RDS Traffic Program: false inactive
[  599.381435][T16436] vivid-011: RDS Music: false inactive
[  599.401579][T16436] vivid-011: ==================  END STATUS  ==================
[  600.192641][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'.
[  600.972553][T16466] ima: policy update failed
[  600.995321][   T30] audit: type=1802 audit(4294967331.670:19): pid=16466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2077" res=0 errno=0
[  602.714003][T16505] zswap: compressor � not available
[  602.791614][T16512] bridge0: port 3(syz_tun) entered blocking state
[  602.805898][T16512] bridge0: port 3(syz_tun) entered disabled state
[  602.823978][T16512] syz_tun: entered allmulticast mode
[  602.851285][T16512] syz_tun: entered promiscuous mode
[  602.879279][T16512] bridge0: port 3(syz_tun) entered blocking state
[  602.885927][T16512] bridge0: port 3(syz_tun) entered forwarding state
[  603.503473][T16526] vivid-011: =================  START STATUS  =================
[  603.533204][T16526] vivid-011: Radio HW Seek Mode: Bounded
[  603.584946][T16526] vivid-011: Radio Programmable HW Seek: false
[  603.596339][T16530] FAULT_INJECTION: forcing a failure.
[  603.596339][T16530] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  603.622945][T16526] vivid-011: RDS Rx I/O Mode: Block I/O
[  603.669555][T16526] vivid-011: Generate RBDS Instead of RDS: false
[  603.686476][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.4.2092 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  603.686503][T16530] Tainted: [L]=SOFTLOCKUP
[  603.686508][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  603.686518][T16530] Call Trace:
[  603.686523][T16530]  <TASK>
[  603.686529][T16530]  dump_stack_lvl+0x100/0x190
[  603.686552][T16530]  should_fail_ex.cold+0x5/0xa
[  603.686567][T16530]  ? prepare_alloc_pages+0x16d/0x5f0
[  603.686588][T16530]  should_fail_alloc_page+0xeb/0x140
[  603.686610][T16530]  prepare_alloc_pages+0x1f0/0x5f0
[  603.686632][T16530]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  603.686648][T16530]  ? folio_batch_move_lru+0x37c/0xc00
[  603.686672][T16530]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  603.686695][T16530]  ? folio_batch_move_lru+0x3a9/0xc00
[  603.686716][T16530]  ? __pfx_lru_add+0x10/0x10
[  603.686739][T16530]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  603.686761][T16530]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  603.686783][T16530]  ? __lock_acquire+0x49f/0x1a40
[  603.686805][T16530]  ? __lock_acquire+0x49f/0x1a40
[  603.686833][T16530]  ? lock_acquire+0x1b9/0x370
[  603.686853][T16530]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  603.686886][T16530]  ? policy_nodemask+0xed/0x4f0
[  603.686908][T16530]  alloc_pages_mpol+0x1fb/0x540
[  603.686929][T16530]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  603.686953][T16530]  folio_alloc_mpol_noprof+0x36/0x260
[  603.686976][T16530]  vma_alloc_folio_noprof+0xed/0x1d0
[  603.686997][T16530]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  603.687024][T16530]  do_anonymous_page+0xb2b/0x2080
[  603.687046][T16530]  ? rcu_read_unlock+0x2d/0xb0
[  603.687073][T16530]  __handle_mm_fault+0x1d2c/0x2a00
[  603.687096][T16530]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  603.687114][T16530]  ? __pfx___handle_mm_fault+0x10/0x10
[  603.687136][T16530]  ? pte_offset_map_lock+0x174/0x320
[  603.687153][T16530]  ? find_held_lock+0x2b/0x80
[  603.687175][T16530]  ? follow_page_pte+0x4d0/0x13f0
[  603.687197][T16530]  handle_mm_fault+0x37b/0xa30
[  603.687222][T16530]  __get_user_pages+0x1178/0x32a0
[  603.687247][T16530]  ? __pfx___get_user_pages+0x10/0x10
[  603.687271][T16530]  populate_vma_page_range+0x267/0x3f0
[  603.687291][T16530]  ? __pfx_populate_vma_page_range+0x10/0x10
[  603.687310][T16530]  ? __pfx_find_vma_intersection+0x10/0x10
[  603.687329][T16530]  ? do_mmap+0x93f/0x12f0
[  603.687349][T16530]  __mm_populate+0x107/0x3a0
[  603.687368][T16530]  ? __pfx___mm_populate+0x10/0x10
[  603.687389][T16530]  ? up_write+0x2e5/0x5c0
[  603.687413][T16530]  vm_mmap_pgoff+0x37f/0x470
[  603.687433][T16530]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  603.687456][T16530]  ? __pfx_do_futex+0x10/0x10
[  603.687475][T16530]  ksys_mmap_pgoff+0xe4/0x610
[  603.687494][T16530]  ? __x64_sys_futex+0x358/0x4d0
[  603.687509][T16530]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  603.687527][T16530]  ? xfd_validate_state+0x129/0x190
[  603.687547][T16530]  __x64_sys_mmap+0x125/0x190
[  603.687566][T16530]  do_syscall_64+0x115/0x840
[  603.687587][T16530]  ? clear_bhb_loop+0x40/0x90
[  603.687606][T16530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.687623][T16530] RIP: 0033:0x7fac87f9de59
[  603.687638][T16530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.687654][T16530] RSP: 002b:00007fac88dbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  603.687669][T16530] RAX: ffffffffffffffda RBX: 00007fac88226090 RCX: 00007fac87f9de59
[  603.687683][T16530] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  603.687692][T16530] RBP: 00007fac88033e6f R08: ffffffffffffffff R09: 0000040000008000
[  603.687701][T16530] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  603.687710][T16530] R13: 00007fac88226128 R14: 00007fac88226090 R15: 00007ffc33736738
[  603.687729][T16530]  </TASK>
[  604.097724][T16526] vivid-011: RDS Reception: true
[  604.102763][T16526] vivid-011: RDS Program Type: 0 inactive
[  604.109272][T16526] vivid-011: RDS PS Name:  inactive
[  604.114532][T16526] vivid-011: RDS Radio Text:  inactive
[  604.120111][T16526] vivid-011: RDS Traffic Announcement: false inactive
[  604.126976][T16526] vivid-011: RDS Traffic Program: false inactive
[  604.133400][T16526] vivid-011: RDS Music: false inactive
[  604.139074][T16526] vivid-011: ==================  END STATUS  ==================
[  604.484000][T16543] can0: slcan on ttyS2.
[  604.819994][T16538] can0 (unregistered): slcan off ttyS2.
[  606.977987][T16597] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2107'.
[  607.159421][T16585] Process accounting resumed
[  607.592303][T16603] zswap: compressor � not available
[  608.835953][   T30] audit: type=1804 audit(4294967332.680:20): pid=16628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2114" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  609.401016][T13414] Bluetooth: hci1: ACL packet for unknown connection handle 2
[  609.935136][T16656] random: crng reseeded on system resumption
[  610.686325][T16678] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.2.2125: Error -117 reading block bitmap for 2
[  613.139071][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  613.155249][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  613.167811][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  613.183676][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  613.193384][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  614.392242][ T8544] bridge0: port 3(syz_tun) entered disabled state
[  614.498882][ T8544] syz_tun (unregistering): left allmulticast mode
[  614.531511][ T8544] syz_tun (unregistering): left promiscuous mode
[  614.571332][ T8544] bridge0: port 3(syz_tun) entered disabled state
[  615.256942][ T5635] Bluetooth: hci4: command tx timeout
[  616.241998][T16727] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.293599][T16727] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.328127][T16727] bridge_slave_0: entered allmulticast mode
[  616.365411][T16727] bridge_slave_0: entered promiscuous mode
[  616.409381][T16727] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.462441][T16727] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.496776][T16727] bridge_slave_1: entered allmulticast mode
[  616.533620][T16727] bridge_slave_1: entered promiscuous mode
[  616.731751][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  616.797433][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  616.926273][T16727] team0: Port device team_slave_0 added
[  616.963586][T16727] team0: Port device team_slave_1 added
[  617.245117][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.300347][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.350277][ T5635] Bluetooth: hci4: command tx timeout
[  617.466672][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.517712][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.548595][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.633802][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.846820][T16727] hsr_slave_0: entered promiscuous mode
[  617.861141][T16727] hsr_slave_1: entered promiscuous mode
[  617.874889][T16727] debugfs: 'hsr0' already exists in 'hsr'
[  617.889573][T16727] Cannot create hsr debugfs directory
[  618.143263][T16822] FAULT_INJECTION: forcing a failure.
[  618.143263][T16822] name failslab, interval 1, probability 0, space 0, times 0
[  618.181240][T16822] CPU: 0 UID: 0 PID: 16822 Comm: syz.3.2155 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  618.181268][T16822] Tainted: [L]=SOFTLOCKUP
[  618.181273][T16822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  618.181283][T16822] Call Trace:
[  618.181289][T16822]  <TASK>
[  618.181295][T16822]  dump_stack_lvl+0x100/0x190
[  618.181318][T16822]  should_fail_ex.cold+0x5/0xa
[  618.181337][T16822]  should_failslab+0xc2/0x120
[  618.181356][T16822]  kmem_cache_alloc_noprof+0x91/0x6a0
[  618.181372][T16822]  ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[  618.181493][T16822]  ? acpi_ut_create_generic_state+0x61/0xc0
[  618.181555][T16822]  acpi_ut_create_generic_state+0x61/0xc0
[  618.181577][T16822]  acpi_ps_push_scope+0x42/0x280
[  618.181623][T16822]  acpi_ps_parse_loop+0x330/0x26e0
[  618.181650][T16822]  ? __pfx_acpi_ps_parse_loop+0x10/0x10
[  618.181672][T16822]  ? acpi_ut_status_exit+0x111/0x1c0
[  618.181697][T16822]  ? acpi_ds_call_control_method+0x435/0xab0
[  618.181742][T16822]  acpi_ps_parse_aml+0x81e/0x1120
[  618.181768][T16822]  acpi_ps_execute_method+0x5c4/0xe90
[  618.181789][T16822]  acpi_ns_evaluate+0x640/0x1670
[  618.181810][T16822]  acpi_evaluate_object+0x420/0xe00
[  618.181830][T16822]  ? __kvmalloc_node_noprof+0x34f/0x970
[  618.181846][T16822]  ? seq_read_iter+0x819/0x1270
[  618.181870][T16822]  ? vfs_read+0x82e/0xb40
[  618.181892][T16822]  ? __pfx_acpi_evaluate_object+0x10/0x10
[  618.181911][T16822]  ? lock_acquire+0x1b9/0x370
[  618.181937][T16822]  acpi_evaluate_integer+0xdf/0x220
[  618.181984][T16822]  ? __pfx_acpi_evaluate_integer+0x10/0x10
[  618.182002][T16822]  ? __lock_acquire+0x49f/0x1a40
[  618.182030][T16822]  ? __pfx_status_show+0x10/0x10
[  618.182070][T16822]  status_show+0xa0/0x120
[  618.182090][T16822]  ? __pfx_status_show+0x10/0x10
[  618.182114][T16822]  dev_attr_show+0x52/0xa0
[  618.182196][T16822]  ? __pfx_dev_attr_show+0x10/0x10
[  618.182216][T16822]  sysfs_kf_seq_show+0x217/0x3f0
[  618.182239][T16822]  seq_read_iter+0x32f/0x1270
[  618.182258][T16822]  ? lock_acquire+0x1b9/0x370
[  618.182286][T16822]  kernfs_fop_read_iter+0x46c/0x610
[  618.182302][T16822]  ? rw_verify_area+0xce/0x6d0
[  618.182321][T16822]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  618.182337][T16822]  vfs_read+0x82e/0xb40
[  618.182360][T16822]  ? __pfx_vfs_read+0x10/0x10
[  618.182393][T16822]  ksys_read+0x12a/0x250
[  618.182413][T16822]  ? __pfx_ksys_read+0x10/0x10
[  618.182441][T16822]  do_syscall_64+0x115/0x840
[  618.182464][T16822]  ? clear_bhb_loop+0x40/0x90
[  618.182483][T16822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.182498][T16822] RIP: 0033:0x7f12e419de59
[  618.182512][T16822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  618.182527][T16822] RSP: 002b:00007f12e23f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  618.182542][T16822] RAX: ffffffffffffffda RBX: 00007f12e4425fa0 RCX: 00007f12e419de59
[  618.182552][T16822] RDX: 000000000000002e RSI: 0000200000000000 RDI: 000000000000000a
[  618.182561][T16822] RBP: 00007f12e4233e6f R08: 0000000000000000 R09: 0000000000000000
[  618.182570][T16822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  618.182579][T16822] R13: 00007f12e4426038 R14: 00007f12e4425fa0 R15: 00007ffc1307d848
[  618.182601][T16822]  </TASK>
[  618.184769][T16822] ACPI Error: 
[  619.066033][T16727] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.185042][T16822] Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20260408/psparse-543)
[  619.237493][T16822] ACPI Error: Aborting method \_SB.LNKB._STA due to previous error (AE_NO_MEMORY) (20260408/psparse-543)
[  619.421392][ T5635] Bluetooth: hci4: command tx timeout
[  619.464825][T16833] ubi0: attaching mtd0
[  619.513584][T16833] ubi0: scanning is finished
[  619.559541][T16833] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  619.677572][T16727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.934934][T16833] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  619.947517][T16727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.271002][T16727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.299574][T16848] FAULT_INJECTION: forcing a failure.
[  620.299574][T16848] name failslab, interval 1, probability 0, space 0, times 0
[  620.393135][T16848] CPU: 0 UID: 0 PID: 16848 Comm: syz.1.2162 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  620.393160][T16848] Tainted: [L]=SOFTLOCKUP
[  620.393166][T16848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  620.393174][T16848] Call Trace:
[  620.393180][T16848]  <TASK>
[  620.393186][T16848]  dump_stack_lvl+0x100/0x190
[  620.393207][T16848]  should_fail_ex.cold+0x5/0xa
[  620.393224][T16848]  should_failslab+0xc2/0x120
[  620.393242][T16848]  __kmalloc_noprof+0xfc/0x820
[  620.393258][T16848]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  620.393277][T16848]  kernfs_fop_write_iter+0x26a/0x5f0
[  620.393294][T16848]  vfs_write+0x6ac/0x1050
[  620.393314][T16848]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  620.393331][T16848]  ? __pfx_vfs_write+0x10/0x10
[  620.393362][T16848]  ksys_write+0x12a/0x250
[  620.393381][T16848]  ? __pfx_ksys_write+0x10/0x10
[  620.393405][T16848]  do_syscall_64+0x115/0x840
[  620.393426][T16848]  ? clear_bhb_loop+0x40/0x90
[  620.393444][T16848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  620.393458][T16848] RIP: 0033:0x7fada299de59
[  620.393471][T16848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.393485][T16848] RSP: 002b:00007fada37ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  620.393499][T16848] RAX: ffffffffffffffda RBX: 00007fada2c25fa0 RCX: 00007fada299de59
[  620.393508][T16848] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000003
[  620.393516][T16848] RBP: 00007fada37ee090 R08: 0000000000000000 R09: 0000000000000000
[  620.393525][T16848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.393532][T16848] R13: 00007fada2c26038 R14: 00007fada2c25fa0 R15: 00007fff68b27258
[  620.393551][T16848]  </TASK>
[  621.497490][ T5635] Bluetooth: hci4: command tx timeout
[  621.513337][T16727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.880684][T16870] zswap: compressor  not available
[  622.790170][T16727] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  622.839604][T16727] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  622.872440][T16727] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  622.916567][T16727] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  622.957082][T16727] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  623.013861][T16727] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  623.163006][T16727] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  623.186936][T16727] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  623.412436][T16727] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.518426][T16727] 8021q: adding VLAN 0 to HW filter on device team0
[  623.673550][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.680723][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  623.784877][T16910] FAULT_INJECTION: forcing a failure.
[  623.784877][T16910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  623.819361][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.826533][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  623.899434][T16910] CPU: 0 UID: 0 PID: 16910 Comm: syz.1.2174 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  623.899459][T16910] Tainted: [L]=SOFTLOCKUP
[  623.899464][T16910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  623.899472][T16910] Call Trace:
[  623.899478][T16910]  <TASK>
[  623.899484][T16910]  dump_stack_lvl+0x100/0x190
[  623.899506][T16910]  should_fail_ex.cold+0x5/0xa
[  623.899523][T16910]  _copy_from_iter+0x1f4/0x1690
[  623.899554][T16910]  ? __pfx__copy_from_iter+0x10/0x10
[  623.899572][T16910]  ? trace_kmalloc+0xeb/0x110
[  623.899589][T16910]  ? __kasan_kmalloc+0xaa/0xb0
[  623.899605][T16910]  ? __kmalloc_noprof+0x343/0x820
[  623.899621][T16910]  ? kernfs_fop_write_iter+0x26a/0x5f0
[  623.899639][T16910]  kernfs_fop_write_iter+0x186/0x5f0
[  623.899656][T16910]  vfs_write+0x6ac/0x1050
[  623.899677][T16910]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  623.899693][T16910]  ? __pfx_vfs_write+0x10/0x10
[  623.899723][T16910]  ksys_write+0x12a/0x250
[  623.899742][T16910]  ? __pfx_ksys_write+0x10/0x10
[  623.899767][T16910]  do_syscall_64+0x115/0x840
[  623.899788][T16910]  ? clear_bhb_loop+0x40/0x90
[  623.899805][T16910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.899820][T16910] RIP: 0033:0x7fada299de59
[  623.899833][T16910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.899846][T16910] RSP: 002b:00007fada37ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  623.899860][T16910] RAX: ffffffffffffffda RBX: 00007fada2c25fa0 RCX: 00007fada299de59
[  623.899869][T16910] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000003
[  623.899878][T16910] RBP: 00007fada37ee090 R08: 0000000000000000 R09: 0000000000000000
[  623.899886][T16910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.899894][T16910] R13: 00007fada2c26038 R14: 00007fada2c25fa0 R15: 00007fff68b27258
[  623.899913][T16910]  </TASK>
[  624.323199][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  624.329750][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  624.666217][T16727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  624.697684][T16727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  625.713294][T16935] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2178'.
[  626.000148][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  626.215513][T16727] veth0_vlan: entered promiscuous mode
[  626.266460][T16727] veth1_vlan: entered promiscuous mode
[  626.418140][T16727] veth0_macvtap: entered promiscuous mode
[  626.463196][T16727] veth1_macvtap: entered promiscuous mode
[  626.548244][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0
[  626.615670][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1
[  626.724477][T12939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  626.773443][T12939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  626.873882][T12939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  626.927228][T12939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.638954][T12961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.680732][T12961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  627.829414][T12962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.862782][T12962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.270591][T16982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2138'.
[  628.689007][T16974] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  628.719420][T16974] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  628.755070][T16974] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  628.824794][T16974] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  628.891211][T16974] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  628.914208][T16974] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  628.962331][T16974] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  629.007070][T16974] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  629.038451][T16974] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  629.150446][T16974] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  629.555120][T17004] zram0: detected capacity change from 16 to 0
[  629.624160][T17004] zram: Removed device: zram0
[  629.981276][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout
[  630.781455][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout
[  630.808650][T17018] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  630.941640][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout
[  631.021389][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout
[  631.781117][T17030] zswap: compressor  not available
[  632.862437][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout
[  633.022530][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout
[  633.103627][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout
[  634.067722][T17075] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2205'.
[  634.943380][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout
[  635.103726][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout
[  635.187221][T13414] Bluetooth: hci4: command 0x0c1a tx timeout
[  637.459969][ T5635] Bluetooth: hci4: unexpected event for opcode 0x7c89
[  637.662584][T17110] Process accounting paused
[  637.927223][T12939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.576752][T17145] zswap: compressor  not available
[  639.551986][T17159] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2222'.
[  640.804504][   T30] audit: type=1807 audit(4294968387.632:21): UNKNOWN=0"�]$|�1j�0B|d���ӉO��+��/��x����WӦ��^��gq%Ḧr�O� res=0
[  640.899861][   T30] audit: type=1802 audit(4294968387.672:22): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2230" res=0 errno=0
[  641.759277][T17203] FAULT_INJECTION: forcing a failure.
[  641.759277][T17203] name failslab, interval 1, probability 0, space 0, times 0
[  641.872174][T17203] CPU: 0 UID: 0 PID: 17203 Comm: syz.4.2231 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  641.872202][T17203] Tainted: [L]=SOFTLOCKUP
[  641.872207][T17203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  641.872217][T17203] Call Trace:
[  641.872222][T17203]  <TASK>
[  641.872229][T17203]  dump_stack_lvl+0x100/0x190
[  641.872250][T17203]  should_fail_ex.cold+0x5/0xa
[  641.872268][T17203]  should_failslab+0xc2/0x120
[  641.872287][T17203]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  641.872306][T17203]  ? __d_alloc+0x35/0xa50
[  641.872323][T17203]  __d_alloc+0x35/0xa50
[  641.872341][T17203]  d_alloc_pseudo+0x1c/0xc0
[  641.872376][T17203]  alloc_file_pseudo+0x118/0x290
[  641.872395][T17203]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  641.872412][T17203]  ? alloc_fd+0x471/0x7a0
[  641.872436][T17203]  sock_alloc_file+0x50/0x210
[  641.872455][T17203]  __sys_socket+0x1c0/0x260
[  641.872476][T17203]  ? __pfx___sys_socket+0x10/0x10
[  641.872502][T17203]  __x64_sys_socket+0x72/0xb0
[  641.872522][T17203]  ? lockdep_hardirqs_on+0x78/0x100
[  641.872544][T17203]  do_syscall_64+0x115/0x840
[  641.872564][T17203]  ? clear_bhb_loop+0x40/0x90
[  641.872583][T17203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.872598][T17203] RIP: 0033:0x7fac87f9de59
[  641.872612][T17203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.872633][T17203] RSP: 002b:00007fac88dbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  641.872649][T17203] RAX: ffffffffffffffda RBX: 00007fac88226090 RCX: 00007fac87f9de59
[  641.872659][T17203] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015
[  641.872668][T17203] RBP: 00007fac88033e6f R08: 0000000000000000 R09: 0000000000000000
[  641.872677][T17203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  641.872686][T17203] R13: 00007fac88226128 R14: 00007fac88226090 R15: 00007ffc33736738
[  641.872705][T17203]  </TASK>
[  642.847767][T17212] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2232'.
[  643.144875][T17181] ima: policy update failed
[  643.175612][   T30] audit: type=1802 audit(4294968390.011:23): pid=17181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2230" res=0 errno=0
[  646.917112][T17273] random: crng reseeded on system resumption
[  648.398167][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2249'.
[  648.499151][T17292] veth0_macvtap: left allmulticast mode
[  648.508986][T17292] veth0_macvtap: left promiscuous mode
[  650.865747][T17318] can: request_module (can-proto-4) failed.
[  651.655251][T12962] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.199410][T17324] Process accounting resumed
[  652.229236][T12962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.287743][T13414] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  652.303540][T13414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  652.313835][T13414] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  652.324144][T13414] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  652.333199][T13414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  652.780284][T12962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.038170][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'.
[  653.070494][T12962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.184549][T17367] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2265'.
[  653.364206][T12962] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.891792][T17380] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2267'.
[  654.395731][ T5635] Bluetooth: hci0: command tx timeout
[  654.613772][T12962] bridge_slave_1: left allmulticast mode
[  654.651666][T12962] bridge_slave_1: left promiscuous mode
[  654.696308][T12962] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.760366][T12962] bridge_slave_0: left allmulticast mode
[  654.803878][T12962] bridge_slave_0: left promiscuous mode
[  654.840561][T12962] bridge0: port 1(bridge_slave_0) entered disabled state
[  655.702442][T12962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  655.749688][T12962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  655.779908][T12962] bond0 (unregistering): Released all slaves
[  655.837493][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  656.241861][T12962] hsr_slave_0: left promiscuous mode
[  656.270456][T12962] hsr_slave_1: left promiscuous mode
[  656.302730][T12962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  656.362078][T12962] batman_adv: batadv0: Removing interface: batadv_slave_0
[  656.401816][T12962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  656.418223][T12962] batman_adv: batadv0: Removing interface: batadv_slave_1
[  656.451035][T12962] veth1_macvtap: left promiscuous mode
[  656.471756][T12962] veth0_macvtap: left promiscuous mode
[  656.477750][T13414] Bluetooth: hci0: command tx timeout
[  656.507015][T12962] veth1_vlan: left promiscuous mode
[  656.522797][T12962] veth0_vlan: left promiscuous mode
[  656.589124][T17428] vivid-007: =================  START STATUS  =================
[  656.622871][T17428] vivid-007: Enable Output Cropping: true grabbed
[  656.667848][T17428] vivid-007: Enable Output Composing: true grabbed
[  656.701095][T17428] vivid-007: Enable Output Scaler: true grabbed
[  656.747986][T17428] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  656.776443][T17428] vivid-007: Transmit Mode: HDMI grabbed
[  656.812265][T17428] vivid-007: Hotplug Present: 0x00000000
[  656.832972][T17428] vivid-007: RxSense Present: 0x00000000
[  656.856645][T17428] vivid-007: EDID Present: 0x00000000
[  656.882887][T17428] vivid-007: ==================  END STATUS  ==================
[  657.117851][T12962] team0 (unregistering): Port device team_slave_1 removed
[  657.152590][T12962] team0 (unregistering): Port device team_slave_0 removed
[  657.327548][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  658.555162][T13414] Bluetooth: hci0: command tx timeout
[  659.083450][T17342] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.108753][T17342] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.141515][T17342] bridge_slave_0: entered allmulticast mode
[  659.156983][T17342] bridge_slave_0: entered promiscuous mode
[  659.219859][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7
[  659.236299][T17342] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.253100][T17342] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.261056][T17342] bridge_slave_1: entered allmulticast mode
[  659.279645][T17342] bridge_slave_1: entered promiscuous mode
[  659.373531][T17342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.441037][T17342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  659.586754][T17342] team0: Port device team_slave_0 added
[  659.618789][T17342] team0: Port device team_slave_1 added
[  659.759355][T17490] vivid-011: =================  START STATUS  =================
[  659.791165][T17342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.804241][T17490] vivid-011: Radio HW Seek Mode: Bounded
[  659.820128][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.853314][T17490] vivid-011: Radio Programmable HW Seek: false
[  659.873271][T17490] vivid-011: RDS Rx I/O Mode: Block I/O
[  659.887963][T17490] vivid-011: Generate RBDS Instead of RDS: false
[  659.901336][T17490] vivid-011: RDS Reception: true
[  659.909273][T17342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.921639][T17490] vivid-011: RDS Program Type: 0 inactive
[  659.943752][T17490] vivid-011: RDS PS Name:  inactive
[  659.968828][T17342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.990936][T17490] vivid-011: RDS Radio Text:  inactive
[  659.998450][T17342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  660.048894][T17490] vivid-011: RDS Traffic Announcement: false inactive
[  660.079993][T17342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  660.095086][T17490] vivid-011: RDS Traffic Program: false inactive
[  660.148820][T17490] vivid-011: RDS Music: false inactive
[  660.202515][T17490] vivid-011: ==================  END STATUS  ==================
[  660.279952][T17342] hsr_slave_0: entered promiscuous mode
[  660.308377][T17342] hsr_slave_1: entered promiscuous mode
[  660.335119][T17342] debugfs: 'hsr0' already exists in 'hsr'
[  660.374436][T17342] Cannot create hsr debugfs directory
[  660.643026][T13414] Bluetooth: hci0: command tx timeout
[  660.833346][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8
[  662.292194][T17532] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2286'.
[  662.779751][T17543] zswap: compressor � not available
[  663.069112][T17552] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2288'.
[  663.434771][T17565] vivid-011: =================  START STATUS  =================
[  663.491260][T17565] vivid-011: Radio HW Seek Mode: Bounded
[  663.504014][T17342] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  663.534097][T17565] vivid-011: Radio Programmable HW Seek: false
[  663.586662][T17342] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  663.596678][T17565] vivid-011: RDS Rx I/O Mode: Block I/O
[  663.617441][T17569] random: crng reseeded on system resumption
[  663.627415][T17565] vivid-011: Generate RBDS Instead of RDS: false
[  663.640118][T17342] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  663.664880][T17565] vivid-011: RDS Reception: true
[  663.688657][T17342] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  663.700076][T17565] vivid-011: RDS Program Type: 0 inactive
[  663.719352][T17565] vivid-011: RDS PS Name:  inactive
[  663.739216][T17342] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  663.755556][T17565] vivid-011: RDS Radio Text:  inactive
[  663.787331][T17565] vivid-011: RDS Traffic Announcement: false inactive
[  663.807292][T17342] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  663.833126][T17565] vivid-011: RDS Traffic Program: false inactive
[  663.854892][T17342] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  663.877215][T17565] vivid-011: RDS Music: false inactive
[  663.905746][T17342] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  663.915646][T17565] vivid-011: ==================  END STATUS  ==================
[  664.155072][   T30] audit: type=1804 audit(4294967332.557:24): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2293" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  665.295787][T17342] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.385356][T17342] 8021q: adding VLAN 0 to HW filter on device team0
[  665.452795][T12939] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.459954][T12939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.550535][T12939] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.557664][T12939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.600054][T17641] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2299'.
[  668.059619][T17342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.001631][T17342] veth0_vlan: entered promiscuous mode
[  669.253795][T17342] veth1_vlan: entered promiscuous mode
[  669.455350][T17342] veth0_macvtap: entered promiscuous mode
[  669.515501][T17342] veth1_macvtap: entered promiscuous mode
[  669.804279][T17342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  669.896294][T17342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  669.987337][T12946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  670.035734][T12946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  670.093172][T12946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  670.139056][T12946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  670.775142][T12940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  670.827862][T12940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  670.999930][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  671.050314][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.496351][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  672.507635][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  672.520516][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  672.538952][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  672.555984][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  672.689297][T17797] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  674.253853][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.601506][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.643511][ T5635] Bluetooth: hci4: command tx timeout
[  674.733802][T13414] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  674.750121][T13414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  674.758966][T13414] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  674.767317][T13414] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  674.775584][T13414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  674.946290][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.970529][T17828] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 4 with max blocks 1 with error 117
[  675.129863][T17828] EXT4-fs (sda1): This should not happen!! Data will be lost
[  675.129863][T17828] 
[  675.209320][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.204861][   T12] bridge_slave_1: left allmulticast mode
[  676.221641][   T12] bridge_slave_1: left promiscuous mode
[  676.232111][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.251554][   T12] bridge_slave_0: left allmulticast mode
[  676.263809][   T12] bridge_slave_0: left promiscuous mode
[  676.280894][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.586510][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  676.613572][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  676.634000][   T12] bond0 (unregistering): Released all slaves
[  676.726345][T13414] Bluetooth: hci4: command tx timeout
[  676.808303][T13414] Bluetooth: hci0: command tx timeout
[  676.943294][T17793] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.969310][T17793] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.996093][T17793] bridge_slave_0: entered allmulticast mode
[  677.022893][T17793] bridge_slave_0: entered promiscuous mode
[  677.133662][T17793] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.162154][T17793] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.194263][T17793] bridge_slave_1: entered allmulticast mode
[  677.247683][T17793] bridge_slave_1: entered promiscuous mode
[  677.612146][   T12] hsr_slave_0: left promiscuous mode
[  677.645678][   T12] hsr_slave_1: left promiscuous mode
[  677.677103][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  677.718558][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.751267][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  677.799509][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  677.888016][   T12] veth1_macvtap: left promiscuous mode
[  677.913440][   T12] veth0_macvtap: left promiscuous mode
[  677.940188][   T12] veth1_vlan: left promiscuous mode
[  677.963087][   T12] veth0_vlan: left promiscuous mode
[  678.457258][   T12] team0 (unregistering): Port device team_slave_1 removed
[  678.473508][   T12] team0 (unregistering): Port device team_slave_0 removed
[  678.606634][T17793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.620111][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  678.657402][T17793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.806220][T13414] Bluetooth: hci4: command tx timeout
[  678.839234][T17793] team0: Port device team_slave_0 added
[  678.888831][T13414] Bluetooth: hci0: command tx timeout
[  678.916508][T17793] team0: Port device team_slave_1 added
[  679.066571][T17793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  679.100286][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.216629][T17793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  679.435130][T12946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.590657][T17793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  679.621670][T17793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.716965][T17793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  679.965014][T12946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.135039][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  680.169682][T17793] hsr_slave_0: entered promiscuous mode
[  680.186429][T17793] hsr_slave_1: entered promiscuous mode
[  680.202468][T17793] debugfs: 'hsr0' already exists in 'hsr'
[  680.216531][T17793] Cannot create hsr debugfs directory
[  680.287453][T12946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.552823][T12946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.641567][T17829] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.682039][T17829] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.712264][T17829] bridge_slave_0: entered allmulticast mode
[  680.740722][T17829] bridge_slave_0: entered promiscuous mode
[  680.814373][T17829] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.842042][T17829] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.865178][T17829] bridge_slave_1: entered allmulticast mode
[  680.886743][T13414] Bluetooth: hci4: command tx timeout
[  680.898757][T17829] bridge_slave_1: entered promiscuous mode
[  680.967006][T13414] Bluetooth: hci0: command tx timeout
[  681.088446][T17829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  681.131130][T17829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  681.547909][T17829] team0: Port device team_slave_0 added
[  681.583034][T17829] team0: Port device team_slave_1 added
[  681.638461][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7
[  681.765904][T17829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.792289][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.863485][T17829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.893230][T17829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.907747][T17829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  681.970065][T17829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  682.142516][T12946] veth1: left allmulticast mode
[  682.161805][T12946] veth1: left promiscuous mode
[  682.178358][T12946] bridge0: port 4(veth1) entered disabled state
[  682.230451][T12946] team0: left allmulticast mode
[  682.244799][T12946] team_slave_0: left allmulticast mode
[  682.263422][T12946] team_slave_1: left allmulticast mode
[  682.280562][T12946] team0: left promiscuous mode
[  682.298013][T12946] team_slave_0: left promiscuous mode
[  682.315542][T12946] team_slave_1: left promiscuous mode
[  682.333876][T12946] bridge0: port 3(team0) entered disabled state
[  682.373440][T12946] bridge_slave_1: left allmulticast mode
[  682.390217][T12946] bridge_slave_1: left promiscuous mode
[  682.412210][T12946] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.449285][T12946] bridge_slave_0: left allmulticast mode
[  682.469784][T12946] bridge_slave_0: left promiscuous mode
[  682.485022][T12946] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.013864][T12946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  683.046213][T12946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  683.055517][T13414] Bluetooth: hci0: command tx timeout
[  683.081240][T12946] bond0 (unregistering): Released all slaves
[  683.236727][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8
[  683.316606][T17829] hsr_slave_0: entered promiscuous mode
[  683.344927][T17829] hsr_slave_1: entered promiscuous mode
[  683.363378][T17829] debugfs: 'hsr0' already exists in 'hsr'
[  683.397847][T17829] Cannot create hsr debugfs directory
[  683.509204][T12946] tipc: Left network mode
[  683.896461][   T30] audit: type=1326 audit(4294967341.612:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17980 comm="syz.4.2345" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac87f9de59 code=0x0
[  684.365129][T17991] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2346'.
[  684.483749][T17991] mac80211_hwsim hwsim43 �: renamed from wlan0 (while UP)
[  684.904544][T12946] hsr_slave_0: left promiscuous mode
[  684.943295][T12946] hsr_slave_1: left promiscuous mode
[  684.959515][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  684.989023][T12946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  685.003128][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  685.016820][T12946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  685.264947][T12946] team0 (unregistering): Port device team_slave_1 removed
[  685.280824][T12946] team0 (unregistering): Port device team_slave_0 removed
[  685.701384][T17793] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  685.732292][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  685.773756][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  685.782918][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  685.896917][T17793] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  685.922441][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  686.015366][T17793] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  686.026260][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  686.055440][T17793] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  686.080482][T17793] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  686.875469][T18027] zswap: compressor � not available
[  687.151867][T17793] 8021q: adding VLAN 0 to HW filter on device bond0
[  687.261581][T17793] 8021q: adding VLAN 0 to HW filter on device team0
[  687.319321][T12939] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.326482][T12939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  687.615871][T12939] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.623032][T12939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  687.902443][T17829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  687.954942][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  687.994326][T17829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  688.036879][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  688.083091][T17829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  688.123987][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  688.191898][T17829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  688.257040][T17829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  689.058391][T17829] 8021q: adding VLAN 0 to HW filter on device bond0
[  689.153184][T17829] 8021q: adding VLAN 0 to HW filter on device team0
[  689.487011][T12961] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.494161][T12961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  689.623796][T12961] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.630979][T12961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  689.858591][T17829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  689.934463][T17793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  690.118906][T17793] veth0_vlan: entered promiscuous mode
[  690.209735][T17793] veth1_vlan: entered promiscuous mode
[  690.472921][T17793] veth0_macvtap: entered promiscuous mode
[  690.580413][T17793] veth1_macvtap: entered promiscuous mode
[  691.010648][T17793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  691.145844][T17793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  691.315754][T12965] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  691.384782][T12965] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.425665][T12965] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.502939][T12965] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  691.757238][T18161] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2362'.
[  691.856368][T12947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  691.920634][T12947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.006964][T17829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  692.152285][T12940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  692.225921][T12940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  692.327645][T17829] veth0_vlan: entered promiscuous mode
[  692.389068][T17829] veth1_vlan: entered promiscuous mode
[  692.509569][T18179] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  692.523597][T17829] veth0_macvtap: entered promiscuous mode
[  692.581316][T17829] veth1_macvtap: entered promiscuous mode
[  692.696485][T17829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  692.775320][T17829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  692.856073][T12950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  692.897187][T12950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  692.996970][T12950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  693.051694][T12950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  693.750583][T12950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.002668][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  694.057884][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.246984][T12950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.285596][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  694.300668][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  694.314340][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  694.322853][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  694.337263][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  694.505769][T18210] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2369'.
[  694.593629][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  694.645356][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  694.715985][T12950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.980092][T12950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.726186][T18248] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2371'.
[  696.414573][ T5635] Bluetooth: hci1: command tx timeout
[  696.672928][T12950] bridge_slave_1: left allmulticast mode
[  696.700429][T12950] bridge_slave_1: left promiscuous mode
[  696.729866][T12950] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.763022][T12950] bridge_slave_0: left allmulticast mode
[  696.780869][T12950] bridge_slave_0: left promiscuous mode
[  696.796114][T12950] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.138174][T12950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  697.160111][T12950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  697.180409][T12950] bond0 (unregistering): Released all slaves
[  697.877839][T12950] hsr_slave_0: left promiscuous mode
[  697.899317][T12950] hsr_slave_1: left promiscuous mode
[  697.922275][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  697.957605][T12950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.984405][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  698.007247][T12950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  698.042821][T12950] veth1_macvtap: left promiscuous mode
[  698.059884][T12950] veth0_macvtap: left promiscuous mode
[  698.071159][T12950] veth1_vlan: left promiscuous mode
[  698.085708][T12950] veth0_vlan: left promiscuous mode
[  698.371418][T12950] team0 (unregistering): Port device team_slave_1 removed
[  698.386078][T12950] team0 (unregistering): Port device team_slave_0 removed
[  698.497045][ T5635] Bluetooth: hci1: command tx timeout
[  699.359902][T18211] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.390402][T18330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2381'.
[  699.404372][T18211] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.443255][T18211] bridge_slave_0: entered allmulticast mode
[  699.479924][T18211] bridge_slave_0: entered promiscuous mode
[  699.854528][T18334] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2381'.
[  699.935632][T18211] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.970539][T18211] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.000245][T18211] bridge_slave_1: entered allmulticast mode
[  700.036388][T18211] bridge_slave_1: entered promiscuous mode
[  700.275618][T18211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  700.370227][T18211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  700.413089][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  700.478036][T18347] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2382'.
[  700.576722][ T5635] Bluetooth: hci1: command tx timeout
[  700.645562][T18211] team0: Port device team_slave_0 added
[  700.680490][T18211] team0: Port device team_slave_1 added
[  700.807045][T18211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.849584][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.986887][T18211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  701.043343][T18211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  701.088000][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  701.242442][T18211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  701.604679][T18211] hsr_slave_0: entered promiscuous mode
[  701.643303][T18211] hsr_slave_1: entered promiscuous mode
[  701.680355][T18211] debugfs: 'hsr0' already exists in 'hsr'
[  701.719950][T18211] Cannot create hsr debugfs directory
[  702.654021][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  702.661261][ T5635] Bluetooth: hci1: command tx timeout
[  703.604297][T18413] syz.2.2391 uses obsolete (PF_INET,SOCK_PACKET)
[  704.316991][T18423] FAULT_INJECTION: forcing a failure.
[  704.316991][T18423] name failslab, interval 1, probability 0, space 0, times 0
[  704.378380][T18433] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  704.653069][T18423] CPU: 0 UID: 0 PID: 18423 Comm: syz.4.2392 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  704.653095][T18423] Tainted: [L]=SOFTLOCKUP
[  704.653099][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  704.653109][T18423] Call Trace:
[  704.653114][T18423]  <TASK>
[  704.653120][T18423]  dump_stack_lvl+0x100/0x190
[  704.653144][T18423]  should_fail_ex.cold+0x5/0xa
[  704.653162][T18423]  should_failslab+0xc2/0x120
[  704.653180][T18423]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  704.653196][T18423]  ? find_held_lock+0x2b/0x80
[  704.653213][T18423]  ? __d_alloc+0x35/0xa50
[  704.653230][T18423]  __d_alloc+0x35/0xa50
[  704.653245][T18423]  d_alloc_pseudo+0x1c/0xc0
[  704.653261][T18423]  alloc_file_pseudo+0x118/0x290
[  704.653279][T18423]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  704.653295][T18423]  ? alloc_fd+0x471/0x7a0
[  704.653318][T18423]  sock_alloc_file+0x50/0x210
[  704.653338][T18423]  __sys_socket+0x1c0/0x260
[  704.653358][T18423]  ? __pfx___sys_socket+0x10/0x10
[  704.653383][T18423]  __x64_sys_socket+0x72/0xb0
[  704.653401][T18423]  ? lockdep_hardirqs_on+0x78/0x100
[  704.653424][T18423]  do_syscall_64+0x115/0x840
[  704.653443][T18423]  ? clear_bhb_loop+0x40/0x90
[  704.653461][T18423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.653483][T18423] RIP: 0033:0x7fac87f9de59
[  704.653496][T18423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  704.653510][T18423] RSP: 002b:00007fac861f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  704.653525][T18423] RAX: ffffffffffffffda RBX: 00007fac88226270 RCX: 00007fac87f9de59
[  704.653535][T18423] RDX: 0000000000000073 RSI: 0000000000080002 RDI: 0000000000000002
[  704.653543][T18423] RBP: 00007fac88033e6f R08: 0000000000000000 R09: 0000000000000000
[  704.653552][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  704.653560][T18423] R13: 00007fac88226308 R14: 00007fac88226270 R15: 00007ffc33736738
[  704.653578][T18423]  </TASK>
[  705.096012][T18439] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2394'.
[  706.098977][T18459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'.
[  706.302423][T18211] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  706.342166][T18211] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  706.374880][T18211] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  706.406390][T18211] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  706.428758][T18459] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  706.464194][T18459] batman_adv: batadv0: Removing interface: batadv_slave_0
[  706.504232][T18459] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  706.542618][T18459] batman_adv: batadv0: Removing interface: batadv_slave_1
[  706.644684][T18211] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  706.679673][T18211] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  706.913218][T18211] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  706.938440][T18474] ubi9: attaching mtd2
[  706.978448][T18474] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74)
[  707.031345][T18211] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  707.308816][   T30] audit: type=1804 audit(4294967365.010:26): pid=18485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2401" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  707.539356][T18211] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.637112][T18211] 8021q: adding VLAN 0 to HW filter on device team0
[  707.710763][T12960] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.717917][T12960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  707.823208][T18158] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.830412][T18158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.568655][ T5635] Bluetooth: hci3: unexpected event for opcode 0x7c89
[  709.616026][T18538] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2403'.
[  709.799759][T18211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  709.885158][T18548] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2403'.
[  710.035807][T18211] veth0_vlan: entered promiscuous mode
[  710.166043][T18211] veth1_vlan: entered promiscuous mode
[  710.563331][T18211] veth0_macvtap: entered promiscuous mode
[  710.602231][T18211] veth1_macvtap: entered promiscuous mode
[  710.685095][T18211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  710.757553][T18211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  710.848177][T12940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  710.910806][T12940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  710.966328][T12940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  711.023118][T12940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  711.573920][T12940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  711.617098][T12940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  711.791748][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  711.834823][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  713.837741][ T5635] Bluetooth: hci2: unexpected event for opcode 0x7c89
[  714.189223][T18639] zswap: compressor  not available
[  714.362700][T12940] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.794171][T18648] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2418'.
[  716.401923][T18676] random: crng reseeded on system resumption
[  717.121755][T18686] zswap: compressor  not available
[  717.502266][T18697] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2429'.
[  720.250168][T18744] zswap: compressor  not available
[  720.644563][T18757] random: crng reseeded on system resumption
[  722.031783][T12940] bridge_slave_1: left allmulticast mode
[  722.062178][T12940] bridge_slave_1: left promiscuous mode
[  722.086828][T12940] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.124630][T12940] bridge_slave_0: left allmulticast mode
[  722.148835][T12940] bridge_slave_0: left promiscuous mode
[  722.173071][T12940] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.298519][T18766] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  722.338996][T18766] vhci_hcd vhci_hcd.1: default hub control req: a060 v0000 i0000 l0
[  722.804720][T12940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.852646][T12940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.885336][T12940] bond0 (unregistering): Released all slaves
[  723.412342][T18779] zswap: compressor � not available
[  723.559631][T18779] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2442'.
[  724.008339][T18794] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  724.099213][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'.
[  724.860743][T18809] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2448'.
[  724.960342][T18811] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2449'.
[  725.852671][T12940] hsr_slave_0: left promiscuous mode
[  725.892715][T12940] hsr_slave_1: left promiscuous mode
[  725.934509][T12940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  725.990412][T12940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.077438][T12940] veth1_macvtap: left promiscuous mode
[  726.107814][T12940] veth0_macvtap: left allmulticast mode
[  726.152428][T12940] veth0_macvtap: left promiscuous mode
[  726.187280][T12940] veth1_vlan: left promiscuous mode
[  726.220784][T12940] veth0_vlan: left promiscuous mode
[  726.594411][ T5635] block nbd0: Receive control failed (result -32)
[  726.606379][   T30] audit: type=1326 audit(4294967384.291:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18821 comm="syz.1.2451" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fada299de59 code=0x0
[  727.025222][T12940] team0 (unregistering): Port device team_slave_1 removed
[  727.090954][T12940] team0 (unregistering): Port device team_slave_0 removed
[  727.434199][T18825] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2452'.
[  727.774598][T18846] ima: policy update failed
[  727.824250][   T30] audit: type=1802 audit(4294967385.510:28): pid=18846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2455" res=0 errno=0
[  728.017180][T18851] random: crng reseeded on system resumption
[  728.830874][T18853] NFSD: Failed to start, no listeners configured.
[  731.029360][T18915] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  731.497998][T18933] FAULT_INJECTION: forcing a failure.
[  731.497998][T18933] name failslab, interval 1, probability 0, space 0, times 0
[  731.620785][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.3.2473 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  731.620814][T18933] Tainted: [L]=SOFTLOCKUP
[  731.620819][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  731.620829][T18933] Call Trace:
[  731.620834][T18933]  <TASK>
[  731.620840][T18933]  dump_stack_lvl+0x100/0x190
[  731.620863][T18933]  should_fail_ex.cold+0x5/0xa
[  731.620889][T18933]  should_failslab+0xc2/0x120
[  731.620909][T18933]  __kmalloc_noprof+0xfc/0x820
[  731.620926][T18933]  ? tracepoint_add_func+0x3a8/0x1150
[  731.620950][T18933]  ? __pfx_blk_add_trace_bio_queue+0x10/0x10
[  731.620998][T18933]  tracepoint_add_func+0x3a8/0x1150
[  731.621018][T18933]  ? __pfx_blk_add_trace_bio_queue+0x10/0x10
[  731.621041][T18933]  ? __pfx_blk_add_trace_bio_queue+0x10/0x10
[  731.621060][T18933]  tracepoint_probe_register+0xc4/0x110
[  731.621080][T18933]  ? __pfx_tracepoint_probe_register+0x10/0x10
[  731.621101][T18933]  ? __pfx_blk_add_trace_bio_queue+0x10/0x10
[  731.621120][T18933]  ? relay_open+0x793/0xa00
[  731.621139][T18933]  blk_register_tracepoints+0x183/0x440
[  731.621162][T18933]  blk_trace_setup_finalize+0x320/0x3a0
[  731.621187][T18933]  blk_trace_setup+0x254/0x440
[  731.621206][T18933]  ? __pfx_blk_trace_setup+0x10/0x10
[  731.621222][T18933]  ? lockdep_hardirqs_on+0x16/0x100
[  731.621249][T18933]  ? __pfx_vsnprintf+0x10/0x10
[  731.621333][T18933]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  731.621355][T18933]  ? do_vfs_ioctl+0x226/0x13e0
[  731.621376][T18933]  blk_trace_ioctl+0x245/0x320
[  731.621396][T18933]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  731.621416][T18933]  ? find_held_lock+0x2b/0x80
[  731.621432][T18933]  ? __fget_files+0x215/0x3d0
[  731.621451][T18933]  ? hook_file_ioctl_common+0x140/0x440
[  731.621478][T18933]  blkdev_ioctl+0x17c/0x6f0
[  731.621554][T18933]  ? __pfx_blkdev_ioctl+0x10/0x10
[  731.621578][T18933]  ? __pfx_blkdev_ioctl+0x10/0x10
[  731.621601][T18933]  __x64_sys_ioctl+0x18e/0x210
[  731.621622][T18933]  do_syscall_64+0x115/0x840
[  731.621643][T18933]  ? clear_bhb_loop+0x40/0x90
[  731.621661][T18933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.621677][T18933] RIP: 0033:0x7f07b6f9de59
[  731.621691][T18933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.621706][T18933] RSP: 002b:00007f07b7f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  731.621721][T18933] RAX: ffffffffffffffda RBX: 00007f07b7226090 RCX: 00007f07b6f9de59
[  731.621731][T18933] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006
[  731.621741][T18933] RBP: 00007f07b7033e6f R08: 0000000000000000 R09: 0000000000000000
[  731.621750][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  731.621759][T18933] R13: 00007f07b7226128 R14: 00007f07b7226090 R15: 00007ffe15e83e68
[  731.621780][T18933]  </TASK>
[  732.428152][T18943] cifs: Unknown parameter 'no+ 1����`��r�sFn)��a�H��ā��h`����9k�A}���1\D@��.��Z�Cg^�'
[  732.851620][   T30] audit: type=1804 audit(4294967330.048:29): pid=18948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2477" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0
[  732.919690][T18933] ------------[ cut here ]------------
[  732.926308][T18933] ret
[  732.926330][T18933] WARNING: kernel/trace/blktrace.c:1348 at blk_register_tracepoints+0x3ac/0x440, CPU#0: syz.3.2473/18933
[  732.941064][T18933] Modules linked in:
[  732.945671][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.3.2473 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  732.956921][T18933] Tainted: [L]=SOFTLOCKUP
[  732.961239][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  732.971481][T18933] RIP: 0010:blk_register_tracepoints+0x3ac/0x440
[  732.978035][T18933] Code: 0f 0b 90 e9 85 fd ff ff e8 b1 8e f7 ff 90 0f 0b 90 e9 a4 fd ff ff e8 a3 8e f7 ff 90 0f 0b 90 e9 c3 fd ff ff e8 95 8e f7 ff 90 <0f> 0b 90 e9 e2 fd ff ff e8 87 8e f7 ff 90 0f 0b 90 e9 01 fe ff ff
[  732.998548][T18933] RSP: 0018:ffffc900039b7af8 EFLAGS: 00010283
[  733.004865][T18933] RAX: 000000000004985e RBX: 00000000fffffff4 RCX: ffffc9000fb6d000
[  733.013029][T18933] RDX: 0000000000080000 RSI: ffffffff82119dcb RDI: ffff88802e33be00
[  733.020991][T18933] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  733.029196][T18933] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d
[  733.037337][T18933] R13: ffff888027e02540 R14: ffffc900039b7d98 R15: 0000000000000001
[  733.046182][T18933] FS:  00007f07b7f266c0(0000) GS:ffff888123df5000(0000) knlGS:0000000000000000
[  733.055633][T18933] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  733.062228][T18933] CR2: 00007f07b6feb540 CR3: 0000000075314000 CR4: 00000000003526f0
[  733.070393][T18933] Call Trace:
[  733.073831][T18933]  <TASK>
[  733.076751][T18933]  blk_trace_setup_finalize+0x320/0x3a0
[  733.082535][T18933]  blk_trace_setup+0x254/0x440
[  733.087295][T18933]  ? __pfx_blk_trace_setup+0x10/0x10
[  733.092767][T18933]  ? lockdep_hardirqs_on+0x16/0x100
[  733.097966][T18933]  ? __pfx_vsnprintf+0x10/0x10
[  733.102935][T18933]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  733.108826][T18933]  ? do_vfs_ioctl+0x226/0x13e0
[  733.113756][T18933]  blk_trace_ioctl+0x245/0x320
[  733.118513][T18933]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  733.123957][T18933]  ? find_held_lock+0x2b/0x80
[  733.128625][T18933]  ? __fget_files+0x215/0x3d0
[  733.133448][T18933]  ? hook_file_ioctl_common+0x140/0x440
[  733.138986][T18933]  blkdev_ioctl+0x17c/0x6f0
[  733.143637][T18933]  ? __pfx_blkdev_ioctl+0x10/0x10
[  733.149453][T18933]  ? __pfx_blkdev_ioctl+0x10/0x10
[  733.155143][T18933]  __x64_sys_ioctl+0x18e/0x210
[  733.159909][T18933]  do_syscall_64+0x115/0x840
[  733.164539][T18933]  ? clear_bhb_loop+0x40/0x90
[  733.169260][T18933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.176605][T18933] RIP: 0033:0x7f07b6f9de59
[  733.181023][T18933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  733.200709][T18933] RSP: 002b:00007f07b7f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  733.209161][T18933] RAX: ffffffffffffffda RBX: 00007f07b7226090 RCX: 00007f07b6f9de59
[  733.217175][T18933] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006
[  733.225170][T18933] RBP: 00007f07b7033e6f R08: 0000000000000000 R09: 0000000000000000
[  733.233448][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  733.241425][T18933] R13: 00007f07b7226128 R14: 00007f07b7226090 R15: 00007ffe15e83e68
[  733.250112][T18933]  </TASK>
[  733.253463][T18933] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  733.260736][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.3.2473 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  733.271659][T18933] Tainted: [L]=SOFTLOCKUP
[  733.275965][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  733.286002][T18933] Call Trace:
[  733.289265][T18933]  <TASK>
[  733.292180][T18933]  dump_stack_lvl+0x100/0x190
[  733.296853][T18933]  vpanic+0x552/0x970
[  733.300826][T18933]  ? __pfx_vpanic+0x10/0x10
[  733.305319][T18933]  panic+0xd1/0xe0
[  733.309025][T18933]  ? __pfx_panic+0x10/0x10
[  733.313433][T18933]  check_panic_on_warn.cold+0x19/0x34
[  733.318790][T18933]  ? blk_register_tracepoints+0x3ac/0x440
[  733.324508][T18933]  __warn.cold+0x191/0x318
[  733.328912][T18933]  __report_bug+0x30f/0x440
[  733.333504][T18933]  ? blk_register_tracepoints+0x3ac/0x440
[  733.339220][T18933]  ? __pfx___report_bug+0x10/0x10
[  733.344237][T18933]  ? tracepoint_probe_register+0xd2/0x110
[  733.349965][T18933]  ? __kasan_kmalloc+0x8a/0xb0
[  733.354719][T18933]  ? __mutex_unlock_slowpath+0x35d/0x930
[  733.360347][T18933]  ? blk_register_tracepoints+0x3ac/0x440
[  733.366065][T18933]  report_bug+0xb2/0x220
[  733.370303][T18933]  ? blk_register_tracepoints+0x3ac/0x440
[  733.376027][T18933]  handle_bug+0x16a/0x2a0
[  733.380346][T18933]  exc_invalid_op+0x17/0x50
[  733.384837][T18933]  asm_exc_invalid_op+0x1a/0x20
[  733.389674][T18933] RIP: 0010:blk_register_tracepoints+0x3ac/0x440
[  733.395997][T18933] Code: 0f 0b 90 e9 85 fd ff ff e8 b1 8e f7 ff 90 0f 0b 90 e9 a4 fd ff ff e8 a3 8e f7 ff 90 0f 0b 90 e9 c3 fd ff ff e8 95 8e f7 ff 90 <0f> 0b 90 e9 e2 fd ff ff e8 87 8e f7 ff 90 0f 0b 90 e9 01 fe ff ff
[  733.415592][T18933] RSP: 0018:ffffc900039b7af8 EFLAGS: 00010283
[  733.421649][T18933] RAX: 000000000004985e RBX: 00000000fffffff4 RCX: ffffc9000fb6d000
[  733.429636][T18933] RDX: 0000000000080000 RSI: ffffffff82119dcb RDI: ffff88802e33be00
[  733.438097][T18933] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  733.446050][T18933] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d
[  733.454005][T18933] R13: ffff888027e02540 R14: ffffc900039b7d98 R15: 0000000000000001
[  733.461988][T18933]  ? blk_register_tracepoints+0x3ab/0x440
[  733.467711][T18933]  ? blk_register_tracepoints+0x3ab/0x440
[  733.473426][T18933]  blk_trace_setup_finalize+0x320/0x3a0
[  733.478969][T18933]  blk_trace_setup+0x254/0x440
[  733.483725][T18933]  ? __pfx_blk_trace_setup+0x10/0x10
[  733.488992][T18933]  ? lockdep_hardirqs_on+0x16/0x100
[  733.494189][T18933]  ? __pfx_vsnprintf+0x10/0x10
[  733.498954][T18933]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  733.504836][T18933]  ? do_vfs_ioctl+0x226/0x13e0
[  733.509592][T18933]  blk_trace_ioctl+0x245/0x320
[  733.514343][T18933]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  733.519615][T18933]  ? find_held_lock+0x2b/0x80
[  733.524296][T18933]  ? __fget_files+0x215/0x3d0
[  733.528962][T18933]  ? hook_file_ioctl_common+0x140/0x440
[  733.534497][T18933]  blkdev_ioctl+0x17c/0x6f0
[  733.538991][T18933]  ? __pfx_blkdev_ioctl+0x10/0x10
[  733.544007][T18933]  ? __pfx_blkdev_ioctl+0x10/0x10
[  733.549023][T18933]  __x64_sys_ioctl+0x18e/0x210
[  733.553776][T18933]  do_syscall_64+0x115/0x840
[  733.558361][T18933]  ? clear_bhb_loop+0x40/0x90
[  733.563025][T18933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.568902][T18933] RIP: 0033:0x7f07b6f9de59
[  733.573305][T18933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  733.592897][T18933] RSP: 002b:00007f07b7f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  733.601384][T18933] RAX: ffffffffffffffda RBX: 00007f07b7226090 RCX: 00007f07b6f9de59
[  733.609342][T18933] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006
[  733.617294][T18933] RBP: 00007f07b7033e6f R08: 0000000000000000 R09: 0000000000000000
[  733.625247][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  733.633199][T18933] R13: 00007f07b7226128 R14: 00007f07b7226090 R15: 00007ffe15e83e68
[  733.641166][T18933]  </TASK>
[  733.644234][T18933] Kernel Offset: disabled
[  733.648551][T18933] Rebooting in 86400 seconds..