last executing test programs:

8m35.100125516s ago: executing program 3 (id=1352):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
write$auto(r0, 0x0, 0xfffffdf1)
linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
shmctl$auto(0x7fff, 0x5, &(0x7f0000000240)={{0x5, <r2=>0xee00, 0xee00, 0x5, 0xd, 0xf6, 0x7}, 0x4317, 0xfffffffffffffffe, 0x0, 0x5da2434e, @raw=0x2e, @inferred, 0x8, 0x0, &(0x7f0000000140)="f846f2988ef1dbebf2dc0bcf59751107e284861d61000e4b3a681af84fed6173997e5ae857f0a753212201941c7726eb10d1ddca7f48252f056dd2b10301caadff251ca66c", &(0x7f00000001c0)="ca5408394f8702ccd3d23319353c8943c938329c177d27f1974ee89cb970a3585015fe6b2c28c8752d3e1c3b38244e14f3a1309d52057267ec87d4a79eeebc18f7893eefc6955dcd98e22263731eaa51b6b0fb74eed31a0e8bdab59c698e2fd78e792434af6098c7943f41"})
poll$auto(&(0x7f00000002c0)={<r3=>r1, 0x9, 0x9}, 0x80000001, 0xb9)
sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000000300)={0x147c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x1467, 0x2e, 0x0, 0x1, [@typed={0x7, 0x14, 0x0, 0x0, @str='-/\x00'}, @typed={0x7, 0x8e, 0x0, 0x0, @str='({\x00'}, @generic="2794cb4e2dde60a40aaf96f289a786207f9b074ce9d1c1b372191550a4381b1136572139fb3894d50f2778ca1e2839a31f9edf5a2631c5235a028785f9b1e6bce3ae569448d65e6a85a9f73b13b4959d3cfb38a42b3a1f94e4be64867da5d815a6be32a6be4345846d04710182845f1e0dc404cc74395f6311fcfa65e5b133f1", @nested={0xfe, 0xb, 0x0, 0x1, [@generic="7f5f198c88a315fe", @typed={0x8, 0x53, 0x0, 0x0, @uid=r2}, @generic="8d7cd519f0c358ebacbee7b18b7b3a1007d656eada9bb6bf1186d5834bf696c3d800e183179810835c9026bdc7e9413fac3f09bcbee66a9f29d4aa325e6e194e5563d3466457dac73d07538e32f90386c9875a6d5b73a615d5703381f61afa2125c519a77555a2e79742c10dee5a9c04f2a027dbf8b675f0ca1ac3da9eda2b5f2315e9e5c6beb82411623d8525afcaf01bc80073f3463cfb785775bf0a834923481b8db81a325954f9c7e4846a67a36e42e1330a07ce78b8cd83a4055a751a048817807ccd00913e74745c722086a9c8b058151d239aa090a77287f915eddd1ae341764b8f0fb455c6d0"]}, @typed={0x5, 0x24, 0x0, 0x0, @str='\x00'}, @generic="5de29935dd3e9faae6003b3bb7f6c30d5891edd79c742277f971c3b426c4da9d2204d1", @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@empty}, @nested={0x127f, 0x84, 0x0, 0x1, [@generic="538643be1450ff25e9d16d92679b8048088aba29561679e765beef2511dd985c7a75254997d2e53a896fcb9b9454351b065a820519b0b6e5169eff21d13b4bc8", @generic="c8ce52b7585f836404d4038a222665ee0bcc93052d91a5d5cac3d0573ba21f3c922187393f82ed11e6669bf576252f187403c92114ddda1728e593b6a10c883b30206c7a68f612b5db95adad963c051d34f8a2b811631c3ef4a5974f8c169b625b17e7d09ac6ac4ddf7465e042e65333c8791762e1e76ffb0d434b30bae2bd4e22931b7e1d8bc5d02178650a7e", @nested={0x4, 0x34}, @nested={0x4, 0x137}, @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="0b59ac20878f484af5c791236e6d0bda359000be9a3777658836a357dbe43f67f2666745e5256bd5845fd4191a6e659324a6a1b18d17a96450cb0f233388a54c10444fe68aeaf8f4073b051db1c13942a7c4bce8bb7c8b74a6f44986b4bd5782342e9762421dd8788939356f236ecd6b99f963fdbdd4dd052a79a9ee952d4e15f22192dc8095169ceb49bfe9596c08ab209b24173f2fba94acb01629d6e16b3311d690796fd90cb951ee02fab65bdd23c559c419546240a7df9bd64f5d23cb121d220ce9f8ae038a01e1ebe2ab71b6dbae548078aaee9ffdc4f0592a619436ea0f6ad57bee7f0e070c0e06d8623d4af131", @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@mcast1}, @generic="756dab38315a0333283e3ebf35c2c56112a137af7eef61f178f21296228b0a9db927905ad548226c81957a8f25682da11f3ba933c3667237708e3ce65f04e85bc77568b5cb682288e0af01308ada8579287ed96bd1b20f9ce74ed65960b5368765e6fcd011b865089985daa728efc69533e38a256232b3904be80bd48b5abf0b41951a4e522a74117bd3d0b7bee08eb5e6", @generic="711ef16270a03e83a6ab416d60630796a421747f69e02f41ef9715aa930392ff71a75dbb9600e4ed83f8901d957190055fe372bd5e889da5b9240488a7df6fd433a376e4b503bf4f91f2d739132e4cfa2738f411c5a4ca8a49a0eaff832884bb13244107a99173a0663025e829949c100faba8d7b08a95a6c6f0481af655b0918c64227c4b8b1f252e31cf08ac435b196dcc12f40df6109e5cf3ac8303c4a686e85f5383188c123775458db7f1cad39dde6efdd376f9893305f7646829e5c38142b3015112491ef23ce386a501b7c624609944330a555ab18ff1b5f4219c5e6159485bbde47ec542998e560b7b584e5faac207ccaaba4e9ef832fb7098593f7e9f1e3a984404781cc702307440d10a90a2ad240e1431d9812a6b672a28ddee7c3d996afb342637b1751d2f78ecb0dc0b89abddccdf04cd50867c5b8ddb694e952fd88d60538bd7b298dab6e0093df60bbf7c62603d220c6b6f2c17ee7942e8e1a7d84e1ee7a610fe9b1f30646f5c353e0d02263bbe046e9666c0f43e3c8bd444efaa81f835d355a8c4e8fc3213a5593b936e500427bd42fbd482b147b39be258dd5d263c55a12cfbaec6c8277183d2ad93f7662be555d70368b7d7d3c8ea3e1bea9f36b7cf57122c9cab89dad6d41ef5db45e72a8f500954b50145994738674514c18bbd251dec7d3c998e6f1bb2f633a97bb4dd525f0debabc7307646248b11c61dfa775ae6a0ada3e08ec2e6000e0be6c2a61a48463403f74d7c58f31a3cdc43b2490c5deb8b3a3760f2cc1025ad0034a3a203810fcd60a03bb3625b77d63f3e3c3b28b5ead859aa45879d23f5b8a1bfa4ea09342343959326909df2a6d96729b0ded3007ca5b316b19a785280d98d021c58b7ff16e7ff96b1c9c467025ca7e56abdbd3ca2f1f28ef6de89b0cc9033286268df80d2790fcdc971a41182798cde09520608e70cd3eeabbbc47600960a91d26febe1202c759b98c64c50f63ee6d1d4ff0fbc58f63d338d9f016764fa4dc69377e74165fdd81de5c580308666ab5afec133b6af753785840af1dca352d41127b598b336bc4870e91d9233c138df93fdfecc6a64968230397f21401ac26a80c3f07070e41aa6a40849b7a8aa8150bfe813b864663970e77df37d10b93f9c7688e55462b79d1a2bec5413686f86074890608681465267eef7472ebaaad781024508e5e30389d18ba6b620f6627358bffa3c2f0dad400b98c39bd16efd377c144ebff304d9fed01e7edbc25540fd17266d178cdd37c75c1cc529b675440de552c2379dc109f2786eea83b9f3fe62c00cb5c2bb6b588412ea84a97be2088d39084169902814537b00059a34075ee13de3dff05691f11ec895ccfc36a885344ce8f710bd142bee5cfe27ccdc8c3ca9eaf8488badbb970ec2c11a18d82589c1fa19ab02e9f0f8aa49b936ccbe8cbffc2f3237640b39e0316a0f39118e15066ecbd7f928e4224168ff3a080c470b7e36ad0ab77ac0c78311b7512ee21f8cc69f5d95a612a2096dbaee722c173bb677fe545e01450b714e35dab4ba5c70c55fa33082fd6eb3e58f31fd2f1e6d8d5346bc9e9efcbc63cc84b02cb11a689c20046d5a1a6615847541b03759151c8eebabda7a2e5e5b1cde90143531104bece8034131bac970999caa976898d027852d4b844c218debed879a629dbef687a6afaba02264f7bef7dfaeee17387a219c21bb6fb7eae7146a0dcec76a2c9a7decb5e1ece45a3b96f06d79f1b4795e906438042c1ab7a6b54c5f051d7d52ddb17ca91d70d14c60270c7f34a6db8b32bf295b9e16a0036cb10ad1fccb98f575fb42be22c98d02a123452b6656cd02d585618554ec3f9fd608e53c187f9b8cda0974ac06cbfd41819ebc25c55b2e9d17ae12a5f272fa5b57dac9527fa540737c1df4de084c107b1499f9412d96a5c3d14d9031fd3e362d81c9d8187c116236ae40aea816b13c628f6d2d47e62a5535fad11146a2552d422d1f79ebaeb197b54c932d482b48500314b2bdd47baa40228524b35b6e0a89c21b4ff2dfee128660dfffe22f05cd86912a73cff0116cee4374177d082203601ca126cba41fba86dbd44b909a58378405a9db19440b9fe6e8075dd32db2f8135172c8742735d60e7aa31405a946ea7fddef437656527e8c67d597a47b0cde7d870f1c93640447905f35ada132e8d81fe16dfcda1f2477cc9e90aa02a1a060ad6cf3f8b4374a2eeb99ff0c2ee7b9a1d437b0931c112b747ec359b696b156f0c345cc2e595333881c48b5f0d39c67ec8ba55e41cac1fcc95f76403aaab3da377e48df1fd3d97398a6dfd4606296a0c816305666ec1a807b4b6a42f64c2cdec4bbf3dd4f35b0599d7c84171a5dd8e600ebd455d029e7a69d24c4cc8749a4477fa652481f230b09555ffb7ff5e913ff9f8d8730cf358111eb41a5ce6d5328eca36b824d8e3f53a13e1e08ac113782767d1ec732259b0d5556139cf863373b74d366e261c6b9a95841d0f633f345d66ee4b3dcc20b641fbe9e6edea12842512d930b0cc8dccb11b8ef3d83ee7b46501b2e43744606fb42531c800b81d2ce5ca19fc207f5d709a8e68ea4661c7d5fe38d84bae803e3652e28ffa74a2964443213d3587aecfcf3222ea8c65b75d660b421273d246dd9ae8ef90e144f07df4b72b307f0f7576912c68d95bed47183f9cc7d673a1f6c254b3930409b7b6435e5b682df68ec383ba304991c082574b7a352f8db053c929975fb0c873a93322ac0504ae15b42ae1e22a88de611a0e1c16651f058fabaeb426151a2af1930480f27e75236cc0f5108e7b1937321f0e57c1569da2805fbf07bd5257ef77319dabd58dad7a4bf4be6ab114abfec0b602f25ac6283c5d67a951e9b35539963551ae74fb4e1f8a6ce2bb5eb523144ff4edd8358471eb424367f97cddc7da733b29a6b8469547c4be49a11ab1afcd9f85457116c279426a56ce20e1b1547cc77acc3efaa12dca0d62cb1780a9b0436794b5f2f0d8b1d93b048be635245a1bb109cf21a516d929faf4d40003db2d58a6e49fca811334bd2e95ef43188363e59344e7e74249a2d2ad42d17215d96671cda9a87931c9f575617187f554cce7917e062dc0a68f943bc20d16bebeca88329d0ef8406c7283dd586b98379e01f71ec5d51db8b7441896fa1dadabf1cd5ea488eed91aaa5c7b0686622753d23682ddfde64e631a9f32d951ce24b252b2fc3fa7c8b3337963edac278151c0f93b7e8e3b0d8e878c9f4e12a171f9ab92aa48bb294e24b04fb4e536e80d79d6037fc3e73e9cdbb30ac45eb8a3772c4bfeb6f1b9bb0dfc3d2eefbe672437d0a361f00711076f0b88e4de1fafa0906329cb8745618c3ab9f09c619f78f7c98371597c83973151b74a1803b1f299f792489750b35de3efe18386a6d9cd613f5533b4391cf5695ef1ccb05b3d30dd9df36feda6ec5e3bf50cbde58b21fe713d8107d4f86950f6604feccc63072b0d1041572787b773f7355383dbf892181e18eaa197ae6b79878d7cfcf797a302dcdde2296406db530c0cfd4d558f2a8c38e0d0025f84c1685c4f323776128a718549f5e1842bc853505531b8984a2ce32d1ae7bc02037b6fe8eaeb5f388e020350526343fb8209df98492994ec9ba4ddce40361fc0acc53a4e3dcf273ec4d841f7ed1e08512ca706063cf4ad19a866df08527ed9ae469678eb58a9d1bacc59fa6be2a291b81deec7d70a51564f1d0a7d1759e25cdd10b0dba6ede93efbda7129e5da84d2368c90d38c1f39fcce99eef435f1f11f266f3b36990d96a9ca2beeae7baae07ff563f6bc7abec0088f29ad9797abcee5213223b3c8f834076f13453f514c4501b1953bd0f5ac6330c58e3c323f88f6867b81a3787dc656f8aaa5128d0ce218ee8cb507025e17580e003c44d198cc10faacc7ec6e97e3f43f96f851d7df0a62e5ebb6069f01f4c864016b97ebf30d4f4aae7bbd46597e25d8383c75eef043d9a6869a46086ee12b57d1bc5b6a7ef89a0145f290cfa4a5f1e0e8f5229eeb7bec27dd1f515e2927487983a9cb6ea42f30e03ed3faa4fc44900f3c5c81b8ad3d04c18c9a864e319e8c2335a868818bcda39bdd369c19d55591ddf59d3fabff00f574f725dbea29db9e38f3e11169275fb09851fa63cf6067c234b12d52826b623defd62818f634854ab589888312d65c5e426ffc750e1b7637b4e6aed95e37fac58a6c66a3afee82f8c068fe8c3d08e4cdae8e453c6d22bce68b347770c639d1d19de73eef87586f49edaf846283cc5225dd27a9ba60515fd418693d7d226f8c2c0e919916286394a1e9bac8e6d305601247ee45170cff41e194c71896a50c345476d265efa47bbd0201c0da448407daf56144e203cd95ebde22ef74bf28485121fe0811459cdca1f3576013815b8fcb7e4bbcae77adad6b6ebe9c0e2b40b89a00c50c07274afa2e0d3849693faed394f916d5080a6f292cfdc4a137abc8e3ff01af2de70624630efa7e69aa6afdfc2510c621cc601a17f8f2dcfddc331946355801b4f9006a0c6504ebed280c6ad4da3bec366c91044eee570571e382fef578fe06504ec44c086cdc86c1e11be0a81a47a29b1d424a8dd7c1e4aaea2872178db6f42b2f18c88c5ca9b515136bb6b83ae107fd12658894ff0914099e22ee2eacc21b411e56251f2158634206d504ce3e614d30c55cef10a7ac10fd0ff8481f5a61d3dd1a161cb96282a722f35ac63df2cad00875de6d7ad2b5aca6e367417610c982265bf461e4ede9de6f344657f4694bdec5f48fdd80d0d18a5fc1eb6065f2b15a01c33d89a275cf602a33fa1e5e07e4bf30b94d80c91ff63574cf583ff2bd4b7fa11b1079404474cf80fca21ac18df04791beb6bada64efe3739c495669e85cfdd5732a994160628676b93ae738872596e5afadfcbe9c6441386ee0a997e9abc886ccbad2a2db019cbdea650ebc9914db3cfc6899a19a3ad213f19d0af1ad9f3ed877077c162c00b5d5bc434fc1c81618ee9efe89205e916ad27795d718f61ab7301618aa0ddfa4929c9ca0f94a8cff2207b62c61ab46d63f021b650cff93b8ddb3d4653b720978151f893cf12cdcf8f019198748c99fedb72ea3c984981f80a21ef80d36ccb4b05521197723a39bfde12bd0bc55b1c8f6431bdc56b5e41067ed77ec1cf37232ba9c533694e0c0883a9faf18d03cdb840a9688b0d8f652b27ec715206dc93dcb11c71fb953501af81e9061b4d8a6552e7764444024ea7bf38bf868d75b835ccdbc5ff704f7c911e834199c5d10c7f4a02f0e8491f9f381494c319e1cfa981abbd4bdaa781dc44e910070d0812bd3ffa09fb2d459b358fdbe4832b24310dba89c18a47c7eff99300273b10b38912f6518f8fe8208c5997529d9db01ef08faee353a7e82ded27aa154e25123d12a578864e526762f9b966248834f70cbf234ce87cda8202dfc1d27473653fb062ef31333fe12ff37fb548ee3d1142f21d203a5635502ca9a5a81bf89178dc474709225d5d8c9e35407a5c065a73f0f7205db771a2c3859f0d124e4556d98a2c4db2dab1e43b79c4b8eb43b325c17b9b535899f5e3b3d99d38706f91d92773cf39de89be377c8ba770ac970d47a34ec6616bd943f0cd6a88a981943b7d241ecf8a4ec643e580c11d2656dbbd34235ecd9e6b33db41049327ea057fb65f88cfaeb9dc3b810f1497d02a800718a10b18be0fa7c28746010bf767484d6ee05d9f1690dfb30888f9c30b5c569718d00493425c1d28fc79f6fa7bceffe10aac0cf7abfdbb797528662ed73887a644", @typed={0x8, 0x5a, 0x0, 0x0, @fd=r3}]}, @typed={0x14, 0x16a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x147c}, 0x1, 0x0, 0x0, 0x44000}, 0x8800)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
mbind$auto(0x2000, 0x100000004, 0x1000000f0, 0x0, 0x6, 0x2)

8m34.006564856s ago: executing program 3 (id=1357):
mmap$auto(0xfffffffffffffffc, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0xc00, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyw0/dev\x00', 0x100, 0x0)
pwrite64$auto(r2, 0x0, 0xf4a, 0x100000001)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub4/hw_params\x00', 0x408201, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
syz_clone(0x50500, 0x0, 0x0, 0x0, 0x0, 0x0)
msgctl$auto_IPC_INFO(0x235d, 0x3, 0x0)
r3 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
ioctl$auto(r3, 0x6c, 0x91)
socket(0x1e, 0x805, 0x0)

8m32.818248971s ago: executing program 3 (id=1362):
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7ffffdff, 0xe, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0xfffffffc], {0xd74c, 0x10000, 0x4, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x300, 0x0)
r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2200c0, 0x0)
poll$auto(&(0x7f0000000040)={<r1=>r0, 0x1000, 0x1ca}, 0x2, 0x7)
r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x20882, 0x0)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x301e00, 0x0)
mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
mmap$auto(0xfffffffffffffffc, 0x40000d, 0x1ff, 0x4000000000009b72, 0xffffffffffffffff, 0x8004)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2, 0x3, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x54)
madvise$auto(0x110d230000, 0x1, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0)
ppoll$auto(&(0x7f00000002c0)={r1, 0x7, 0x7c3}, 0xffffffff, &(0x7f0000000380)={0x8000000000000001, 0x7}, &(0x7f00000003c0)={0x8}, 0x8)
sendfile$auto(r3, r2, 0x0, 0x3)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = socketcall$auto(0xa, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r4)

8m31.528974257s ago: executing program 3 (id=1367):
open(0x0, 0x0, 0x154)
pipe$auto(0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f46)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x2002, 0x0)
sendfile$auto(r0, r0, 0x0, 0x80000000003)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
getdents64$auto(r1, 0x0, 0x400)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)='+')
ioctl$auto(0x3, 0x40086200, 0x38)
socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
ioctl$auto_FS_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r3 = socket(0x2, 0x1, 0x0)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, r4, 0x0, 0x400000000006)

8m31.251184696s ago: executing program 3 (id=1369):
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001)
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0)
pwrite64$auto(r0, 0x0, 0x2, 0x0) (fail_nth: 2)

8m30.125667532s ago: executing program 3 (id=1374):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000000100df"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc)
read$auto(0x3, 0x0, 0x8080)
mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2)
read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62)
getpgid$auto(0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
syz_clone3(&(0x7f00000015c0)={0xd058e0688230dc90, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000440)=<r3=>0x0, {0x1d}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000001480)=""/255, &(0x7f0000001580)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58)
capget$auto(&(0x7f0000001640)={0x5941, r3}, &(0x7f0000001680)={0x2, 0x8, 0xb403})
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r0)

8m15.086871027s ago: executing program 32 (id=1374):
socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
r0 = socket(0x10, 0x2, 0xc)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d0000000100df"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc)
read$auto(0x3, 0x0, 0x8080)
mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2)
read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62)
getpgid$auto(0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
syz_clone3(&(0x7f00000015c0)={0xd058e0688230dc90, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000440)=<r3=>0x0, {0x1d}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000001480)=""/255, &(0x7f0000001580)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58)
capget$auto(&(0x7f0000001640)={0x5941, r3}, &(0x7f0000001680)={0x2, 0x8, 0xb403})
sendfile$auto(0x1, 0x3, 0x0, 0x7ff)
sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6)
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r0)

1m8.461818863s ago: executing program 1 (id=2895):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/netdev_group\x00', 0x102, 0x0)
mmap$auto(0x0, 0x40006, 0x22, 0x9b72, 0x7, 0x28000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(0x2, r0, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x40, 0x0)
r1 = open(0x0, 0x161340, 0x130)
statx$auto(r1, 0x0, 0xb003, 0xda97, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x2, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700ff97)
lstat$auto(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0xf8b, 0x4, 0x7, 0xd, 0xee01, 0x0, 0x0, 0x9, 0x7ff, 0x6, 0x400, 0x188, 0x2, 0x2, 0xb, 0x5})
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x27, 0x6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp6\x00', 0x60e401, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi7\x00', 0x40040, 0x0)
ioctl$auto(r2, 0xc0445624, r2)

1m7.295861685s ago: executing program 1 (id=2899):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31)
fallocate$auto(0x8000000000000003, 0x0, 0xa, 0x4cbd5d)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1)
unlink$auto(&(0x7f0000000000)='./file0\x00')
mmap$auto(0x0, 0x1, 0xfd5, 0x12, r1, 0x40000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_SURVEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x40c0)
r3 = socketpair$auto(0x3, 0x40, 0x5, &(0x7f0000003300)=0xfffffff7)
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000003440)={@raw=0x90, "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"})
r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000004640), r3)
sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r2, &(0x7f0000004740)={&(0x7f0000004600)={0x10, 0x0, 0xf0ff}, 0xc, &(0x7f0000004700)={&(0x7f0000004680)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x3}, @IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto(0xffffffffffffffff, 0x5602, 0xffffffffffffffff)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, 0x0)
r5 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7)
setrlimit$auto(0x1, &(0x7f0000000240)={0x0, 0x3})
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x207ffe)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0\x00', 0xaa002, 0x0)
mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x3, 0x1, 0x50, 0x0, 0x9)
read$auto(0x3, 0x0, 0xfffffdef)
r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r6, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r0)

1m6.660662115s ago: executing program 2 (id=2902):
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x45, 0xc5, "a1fb9356a71c7bc0d4d5ac6eaf23282130a440987aaad936d54064fcc04ca9148cf6dc60b133d7ecfc3667bbc498fccb499f74bcb01add59604e5718adb8c374d6"}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0xc000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)={0x4, 0x508f, 0x80, 0x3, 0xfa, 0xee, "89371963dfaecd13600b183f4746c8df2bbde40a3c8b1a77a3270c21a1fe63827384530e12ab7d763b9eca9dc8ffe2cc8193b81f6998ae495ea6cc9d85e26e00"})

1m6.356606863s ago: executing program 2 (id=2904):
statx$auto(0xffffffffffffffff, 0x0, 0xb003, 0xda97, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D3\x00', 0x2941, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x12, 0x0, 0x40})
socket(0x2, 0x2, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24000, 0x0)
ioctl$auto(0xffffffffffffffff, 0x6, 0xffffffffffffffff)
fcntl$auto(0x3, 0x400, 0x9ec0000000000000)
close_range$auto(0x2, 0x8, 0xffff0000)

1m6.170177354s ago: executing program 2 (id=2907):
futex$auto(0xfffffffffffffffd, 0x1, 0x5, 0x0, 0x0, 0x8)

1m5.972209461s ago: executing program 2 (id=2908):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129400, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x9)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0)
read$auto_proc_oom_adj_operations_base(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r3=>0x0})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
ioprio_get$auto(0x3, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="26effd8e", @ANYBLOB="130026bd7000fcdbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0c0002000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000001240)={{0xfff, 0xffffffffffffffff, 0xee01, 0xc6, 0xa, 0x7, 0x7}, 0x5, 0xad61, 0x219c, 0x2, @raw=0x4, @raw=0x5, 0x644, 0x0, &(0x7f00000001c0)="93dd9832761d7efb958d40cf71852aa9f850dd4ee013533facda51cc23668897ca66e0805fc9b3a5e003a943b3347c31cca6b8dc0899b486c12b21f4d978784a212e7910651b5825bc765b9fae99f38b96c0dbc29a24845941", &(0x7f0000000240)="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"})
socket(0x2, 0x80002, 0x73)
r4 = socket(0x2, 0x801, 0x106)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.max.depth\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)='7', 0x7)
capset$auto(&(0x7f0000000280)={0x2, 0xffffffffffffffff}, &(0x7f00000002c0)={0x69, 0x7})
r6 = setfsuid$auto(0xee00)
shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r6, 0xee00, 0x9, 0x7, 0x7, 0x1}, 0x6, 0x4, 0x7, 0x2, @raw, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000002800)="98184e760a0f452eb11ea06b99ff21207e3b8c3b220044babfe4265728b83289334ad0fe741aa5ca55a08562caac2a4250362d60e4fa7c638f6df5ce567f74be13b83c270559872f67c6a2b22bf7734c63c04d9ee81bc615e00b15ccc53a5b6ed9157d27379564431ff2b3f0b4fda06486a9c5a82249d257871870a1070a15c7beaadf0dc4213674015e96a424cd97bb46607a111c53e42e0b"})
sendmsg$auto_IPVS_CMD_GET_DEST(r4, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x40)
r7 = getegid()
fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r7)

1m5.799507434s ago: executing program 1 (id=2909):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ptyb8/power/runtime_suspended_time\x00', 0x800000, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$auto_BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000000c0)=[{0x8, 0x6, 0x3ff}, {0xffff, 0x4, 0x1ff}])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x800)
close_range$auto(0x2, 0xa, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000012c0)=""/4128, 0x1020)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0xcc082, 0x0)

1m5.353540331s ago: executing program 1 (id=2910):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socketcall$auto(0x5, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r1)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f0000000600)={0xdd, 0x0, [{0x1, 0xe2f, 0x4}, {0xe, 0x5, 0x80000001}]})
socket(0x21, 0x2, 0xa)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
write$auto(0x3, 0x0, 0x100082)
socket(0x2, 0x3, 0xa)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, 0x0)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0)
preadv2$auto(r5, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0)

1m5.17731754s ago: executing program 2 (id=2911):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x1e, 0x2, 0x1)
r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/nbd2/sched/write2_fifo_list\x00', 0x2aa00, 0x0)
read$auto(r0, 0x0, 0x3)
getcwd$auto(0x0, 0xffffffffffffffff)
r1 = inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(r1, 0x0, 0x20000e6e)
open(0x0, 0x0, 0x57e)
r2 = fanotify_init$auto(0x5, 0x0)
fanotify_mark$auto(r2, 0x205, 0xa, 0x4, 0x0)
dup2$auto(0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0xffffffffffffffff, 0x10000)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000100)="8c60a22225d34219c27df105dc0e30c9335ae8", 0x40000000001243}, 0x4, 0x9)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0x14, 0x3fd, 0x8000)
r4 = socket(0x21, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fd5330825e73d2509af99cd5877be6088a9bc895ab865028652fd47b9f79db295899f5c8f8c7a12bba7f186cfaf633", @ANYRES32=r6, @ANYBLOB="010025bd7000f7dbdf250100003f06000200010000000500070058000000080009000500000008000a000800000014001f00fe8000000000000000000000000000aa1400200000000000000000000000ffffffffffff"], 0x5c}, 0x1, 0x0, 0x0, 0x240cc001}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x40000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x1, 0x0)

1m4.90479724s ago: executing program 2 (id=2913):
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x45, 0xc5, "a1fb9356a71c7bc0d4d5ac6eaf23282130a440987aaad936d54064fcc04ca9148cf6dc60b133d7ecfc3667bbc498fccb499f74bcb01add59604e5718adb8c374d6"}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0xc000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)={0x4, 0x508f, 0x80, 0x3, 0xfa, 0xee, "89371963dfaecd13600b183f4746c8df2bbde40a3c8b1a77a3270c21a1fe63827384530e12ab7d763b9eca9dc8ffe2cc8193b81f6998ae495ea6cc9d85e26e00"})

1m3.423232229s ago: executing program 1 (id=2916):
mmap$auto(0x2000000000000, 0x7, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0xc0603d06, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r1)
sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x2404c010}, 0x810)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0)
r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001040)='/dev/binderfs/binder1\x00', 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x242080, 0x0)
socket(0x27, 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0)
socket(0x9, 0x2, 0x15)
socket(0xa, 0x1, 0x1873)
capset$auto(0x0, 0x0)
open(0x0, 0x5ada41, 0x1d6)
r3 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r4 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r4, &(0x7f0000000280)="432f9a5ddb911f1577e16dd0af82e41b0ce7639a28a971c4f2e87067829f83f711b7802c2690c3a23fcc34735658e675f6d028bea6a7bb71bac615c7b663e09b16d9a630963038149cef6415caf5a46fe3fe7cfc87d6e4c324208eb79d3414c5e9c69781a44e766d7efefd4d576438952dcfd631b912fad29b6c6de26acded80830d4a0bf1bfdad7d322e390bde6c4a47934a6d1921b68ce29dde5590473f1deea8f810a44f742ae9b919a71f18760ce2a29907b9ea34888a303e8985e0962253db4e484a40806595595956035905a572d8b6c364f2c5fbfb411be49eee09fac24e6bb9ef30a1e055134175d10539c1f1d", 0xf1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop2/stat\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x400008, 0x63, 0x9b72, r3, 0x8000)
close_range$auto(r2, 0x8, 0x0)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)

1m1.459789451s ago: executing program 1 (id=2921):
r0 = socket(0x2, 0x3, 0xa)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1)
write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r5, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0xa0, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x800000000000000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r6 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r7 = socket(0xf, 0x2, 0xffffffff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
getsockopt$auto(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb)

46.346453349s ago: executing program 33 (id=2921):
r0 = socket(0x2, 0x3, 0xa)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1)
write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r5, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0xa0, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x800000000000000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r6 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r7 = socket(0xf, 0x2, 0xffffffff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
getsockopt$auto(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb)

7.05763212s ago: executing program 0 (id=3129):
r0 = bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x0, 0x8, 0xffffffffffffffff, @relative_fd=<r1=>0xffffffffffffffff, 0x7}, 0xf)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x7ffffffd, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/id\x00', 0x80, 0x0)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0)
r3 = socket(0xa, 0x1, 0x84)
setsockopt$auto(r3, 0x0, 0x40, 0x0, 0x6f7250c4)
setreuid$auto(0x9, 0x1)
getpriority$auto(0x2, 0x9)
socket(0x2, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0)
sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r4, @ANYBLOB="000029bd7000fcdbdf259c0000000500c200000000000e00f9007cf5b4b99ab277f7943800000600950000000000ab0036016fa942ecbd4c938c849f73e59a1546bab2cabce42cbd88cc34de13ff7215757e8379fdc50ebdb0fbb1ca465c4f1ddae99884b9c13e6dcb76e7ae3b1fc0c9e6f4d74a65d3b9282d979874284c6afc92eed4f671471c6794f6f52d47232e50e694f4b183a721d39c19a23e27893faf8e65c488e89301e4bcb37ef2a2c69ae05dce13455b7b0d70608bdc000029ff73243d0975eeaad16142d084ed5ae0db1bdff635567fecc533e90006001800bc72000005001900040000000600b4000700000005003e002e000000c13a7bf1da90f3dda509bf2aaa7674fa6e372599d23ebba671a8cb7b60f2d20b2abf84d2dee7620953d5b9619c4448f921a55c2cd4fccd352332836958b9a895c3820861ad38706085f87e8d2e9dc998e503bc182141f44f59b9b851dcacf6eb8a11fd1519c8f04f5dc790f011373eced7bafaa740abe7b7e511cc32f09aa59769155107b6413a2c4d66063a20ed42fac0b8b8fac951afe668333b28af39d672d77aef0161a52e33232ce0e0ebc4c3b87a59d3add2435616a1754aee05b386f638"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
mmap$auto(0x1000000, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0)
write$auto(0x3, 0x0, 0xfdef)
mlockall$auto(0x7)
setresuid$auto(0x8, 0x8, 0x0)
r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0x6, 0x10000})
mlock$auto(0xcecc, 0xd325)

6.217918802s ago: executing program 4 (id=3133):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129400, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x9)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0)
read$auto_proc_oom_adj_operations_base(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r4=>0x0})
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
ioprio_get$auto(0x3, 0x0)
sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="26effd8e", @ANYRES16=r1, @ANYBLOB="130026bd7000fcdbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="0c0002000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000001240)={{0xfff, 0xffffffffffffffff, 0xee01, 0xc6, 0xa, 0x7, 0x7}, 0x5, 0xad61, 0x219c, 0x2, @raw=0x4, @raw=0x5, 0x644, 0x0, &(0x7f00000001c0), &(0x7f0000000240)="bc9ed678fe332e6255d647957efcd3c0b44853ceb7bc9404e742ff5e87c3b42e7604d2f8f211e798a125d93cfa6698cf27b2db6c29a9e2f3cdb99cf0844a36ed5d61ce5f5c3d4971f227467a02bcfe293f25571ab2a3296a4056be7f9d5451a5a4bcf40fd73193e90131d0330418851b3017b06c4bb830d67a06d6742913d067ec674ef3a55250c761efaf6ed07f8a464bef37d811cbce0b039c39123067318203cdb91bd2aed9c279f936e583101a95955ca917a048cd4d614267f8aa7540ff26e803b2d04b34677566bd7f3a7f814eb3a4ed44876ea25bb1c0f0a82444160d283ec4edb54a5cfd19b108ddc9502d60cea1640ec1ee4dd1e47481450017c3b8c200a891becaaa0d52c319507daf37fb15193662de346a0511ee1eed907ec21cc424bd6050dbc7b77ef049622bf15afe8126cda7edf9d3ed5b4080dd9227e5ce929ab2b6b4f181e307e4df11edd685fd9c252163b497ca2f96417329488d0f6ddb5c4d212affdccd192619384175d1c7b694abc131212c076f0f3bcee97efd4e12b39968214628dda981fd781027f88c85dbff27b4232001a2bd7b8845a88ddc5714baacdab639e1650414ed5485f68edc95f10f2b8165435e16306977da49f5335b9194422ee578bd6a5e3b42a366682f3f3993ee5bf336385f5f55679c4652c2aace2b679a8fff7e00bb06d3d9872e756fdbfcf380c361da71dc122657caa6f5932abda29e86804801f37cdb8e57922a482a528a0ea8f8ed651759fc5701031f7ba1ce2c4414ea64daa1c4cd932705d0f9a0ef2cf694a4c018a5d02356124fd8fa9f18c91b73e3537799a6990982857d2b8e3d4d74cc447e2c6839536b2c419b729d2096e3f91f06ded6f2261c4ec4b52e2b04ddbf03c30f1885a1fbf5a348cb898d9dd319bace2c494b3634814e2401ee20c3110439f597457182c2471555ee543b5b65fe951229e8377d4544d2cd01af2e6c5004217a382484b141a52a9a4bd1a5c840bf6a66752e493582fdf67a0de4c8dc4d7304607f94df884e120b52cf7d33dee53f235425e8cd30d4f2e39142f983dff735a6939bb712eb6e045b8afc2f8baeaacc433c5a11575f2241ed5f029eabcb056fece7c3b0fa9df21c8d7e7a2efbfb9dbf761e5eabe451d87ea6b4a80cc0293dcfa0c6ab5583c609e4a14f4494e6563989f4ae56c8f56e2050b7e1f13c08600617ed5758d4bc99bd5dc2458625bd4c08f7821f08987ce6e98a66425bd1d57c5401e80a0d24cb6771e83812e8738f7be0a57682b4597ab09256f4256f99317a97a707160eac26de5e1a50e0bfb3a4d4b493e841da77575f584744b17a0fb8eff32f2d2b549c12800b54b1ad294fd1586b2cd13aa1525cc627136ce12ff792d7ea6dc6d976b1fd32b37f4c082da74ce9227650aee17c0cefaf469f912ecfa5e8020541c512a17013d961ce3ba6fca55e9631170b98b0a4677164933720ed3eb72f1010a1528a7acf3a6b3720bb9333edf9ebe8aa5121eb3d415984bcbdb4c1e95791f5af7dbe004cee1fd0685f773828c3cdce1ec6665c569f901217bf2090d9d6fceace2032db1cc6ebf6ac751bfaaaff8d9736594b51982714efec8db177485bb1f070841ff1783eeb8e86bdfd9f02c069eb4de5afe899fb99ee090b8962bb717449369a5a2a9d07a5a6cc1f0eb1fb960a8a5a8da852c0e8e19fcd0b4df1f24881d7666d42b0aaca8489df24182f4ed3ec4f340a2a8f389c591867dc5454ae186ff0e15326f357bbcb5c376bbd9466f0a43bf323c2e731b401a34df74d6a5ded5b6be8f353fecf36c59c8de5692b0ae697186aae491eb557ab2fd0ead468f662b7ab502f1d61e50c9bffde08c5b57f76997685d09cbffccc31e64404846f8161fe4c673e31a93a4f4cab5439f193a7297ae61b974beed43ed1b11361e2572f5e69606ad5d952ca5bfb1b0e464ace3ba61a3845e07792fd5db44bf94b20e7001aec755ae653e944b4b4926a1b88ad1508d1cf4f1b6971caf7e59f36927e26ddd1602f97a36876f17d9ce8339df2df9b456523a0ff90c94beebe879709286fb7128461e32f49410f1daa2626f3c99afae9cba0dffee9299a3431c7e4b1f994834fbbf65d58d5920121d56b01da6ccf35548ef1a43bced686aeb0f0cbd09d372c0df7ba4a9f4aa0464b05e263019c211ef1d59c465f4ab356177b76179d9d581e3914c36d07c0c92a0a09595820bc2dd42234f24ca28ce388f9797d2fd69b9c9fec3d73ed36cdcf737b183913eb506d92f7b1ac2ee44b205981efddd923ded996ad6a40f8bd075fc7360d0c570f0740ed607575f81a7940c32fee323bfb8501fd4bb6bb8bd05a47cd6995d4078c7f0ee0ec0396c77cd2902a9d3871501fdc7204a6fe804d0e1cb55fe9c84dfeadcaa6eaaaa07ff6feffbe16818fb4a8532eccb6982f3443d3dbac8f36e46bfcb204d36f45aababa2e80e169240d97b4d76a11f6abda3b25fff0626885c2b784e151fb55ed3b09dc0c416f8d9a10de778a3d2741aa9ec58bfe656cde2c547d10da8298ce36985248f2f20b8827ebd3eeb0f28e6a9fc83c0a8810f57ddba05b9b2fccec2c0a8948cd9897f96684227035ad746a45431316467395e49f5355b0e8ec6a028d44283196af1efe84751f65316056ae5bed639aa081e31b571e1d7dc3424ee9c02dc6d4ee41dbbdb77365def72b78fda3a50cc5a5167c5f4d5f2fcd3b01b1047896c23b8b28905713fe4fdad88bfc016fdf386bd5f8260ce077498cab41b3849b7e8c191898fdf0f4309adbafe104fa05530a0a54d050c919119c9efbf2216972d0d07514bb65d80a4382deb71c9905ee5cba04a00e17c5961eb678b23d84801ac77a2a578e70ba594d25f94a03082ecdb61dd3ac448332ec2a83447c696ad86ca6cd3ec51bc7b15a9cb3eb86384a3aab52987b8192340228334d11c7b74bed783640a73bf4b2aa2aafa2850c95c4503ce801e6a1a32a981b3bf0234ba17da9bfd434b752144a1c924f4420818524970f85ff72d1e150644a8a578266cd82749f318aa9f9eb353a32d295341a619b6d23d4f033dbaf0b06c7c0ccbefeb3594c20d897596831f90558c6dc5ea3d79d51f1b609af7259f703d22c3863c629f98ef8218c664f21197f8ed05522b08a1b493206bf84d61ff8c427023df1eab722f25b7ac90325cd1114f90844d89a80f41fb4288c5c456e0232429f18896b372b7af1f1f28181739f4262ce8f06978faf89261848c7387344d0a3219b23a714aaf2d86d3513d1ab0299b47cde2b98aa3520719cdb1011a0c757e83f08b09e8b0bba7f550c53aa02739d2636ca02e931c94198527165a62b561a30ec6627665e901a3d78f1ddf3e212b7322c1967ae88c9bf535d9ac0b5b7802848e7cc54fb041ef2cea8d74764c3ecd98b365d4533595bed14686d95320ae0b316d22d3064e74ec877ac1dbecc72a9718aea31026c721e9e9033eeddccfe159959ad77c54b0ed92b9619e7a05e90577b79f29269c41cd8557c5cbb2ce8333c709eab4e1865ff73db76f9daadc6b2ddaf388ce0341d63b5c59767406e19a22c5e7328d67fd94c846cb576641884d5c515309279f11567389a5a2a5cc879a78080baab5b3a484b144b08b2326160356338013efd4a05ab0faf46e37889e422751cab501bd91dba13a8f14111efcb7779d29b6a1dbfcd3890f916395aad62c1c70abcddae7d3f6eb1e309137cc8f417e5b06755e6b12b6f8d5ed05a4b9d217615fee1b57195d118613665209c5fdb7d69dac5fcd3538d453ec944662359d999c6150cd94824fd7e46d323550fa889e4b40a62b8583ac629378bb07892bf61f60bc5ad7b0e7ca4e91cdd73c5eb40f1161aa8e99dcdf94b6fa6e8b1958bb882aff5a205d175f836479178860705b4181d6d6e4334e0687a016c96b0672db65cd2b9a470044bdfe876b0d69d2ec0a99f13a7852450877956779d7522bf26d6717bd9984168f53f1b0ef630bbe690acea92270e510fce0cc463944651c737088159fa8a3b3e30e801279d6a2a0fe79d57f5366f24ef28b55911d9c8d07d9e575ecda9bb72b3f488f7f8b382eb09bbdb2001042ad84ce3460ceff7d8fb52dab53b39e789d202798dc5d56166cb066e1c492410c97bc0e0093f0739d2d24131ad00a3d45119cdac72df99ffbd1f50bacd5b4d36ed4bd7dc3156c7c0df2695bbb6d3e0ffe5f7c9e0be9956437503a15685a173ad3df2c6e2bc056da8703b0d85a1f8723f628fb5f2c9fd6a61749089ddf07c6e8880d86316a8529235a6e0f39c37bef8d0834171644550c8c9e342ce25f9290644448fa106b7520615400a8c0c8da7b5ad00329c16d2882fa2348e09608467c9f7538bd3d2b95cf463738c761379df2603c5ba9f27340b383f0a402c74fdbb5e0832171b734d4bb7ed35d16b7d013f8454aa97fa6f0101de7e8e3e3595222c24e3da4eeca509f02f930eac48d13582a082bed534872b91203b008a2db33bea9f72e8c8d04d7e39d585a74a438f523ebe41bb199699fec353af2a14e430fc2479756fbb378d79aa6f9315f779fe1c8f2257f3caf9541ba008aac9f2a25eb0cdb991673ade7a0c2d26b514cf4f3f77fcb6728ff2635cb4d567a30e91d76d601e614c045e63097f0e3b34a6dbb4e2b7894283945a20881427996558fbf09c261c7303333c99ac2a6f8753795cd58d86ef34cbf1bf9d1eaaa16ee48805f5ccfea4c15d969e009562422e1854c91ac2e2335c6bfd2400cc0900ed6ce97a922b2b964d9547f99b08a23577ceef726de3d1d07503783762fa5bc4fb8d8b6392141d15e70978fa1f74c6789f53a04e640c069e06bd2443432cc017e7604ef53cf4bbc8a9afd3cda4414c8e25678dc7c2363494e52aad27f8b84fa6d73fb0b631e1e747752e65ab424cf3109c1b80a7b33b8fcace35e823afbf84715ef17e1eb3541f1e944d303fad40610b98e0a61bcd5899e9b5436469b36b40e28f8c801a3d6c889c0c7fed50d36d9bbb0e3a7650c2856d04f2b266d20bd5e8180ef953f795813d05c030ce6c3652dedbe8788beeb6a770061c58fbfc1d584581b3fc571bb25b2ffa9d72bdb8a25a23184ade1f968a96c570e324ed4c90c992cca4a2a9dda70b3e51bcdd43613ba91f9b35934ddd17caea2467d0d7b85ee0586aff5b11bd97670cd814b9921a3e1a4c62d93c97177020bbd2c2e73b1511f1fdf61bd3e2aaaee973cf965948f815fd88b47b5aedc508b6d4e2cb6f6972f5d84c84cd30a7ba3cbff2929d1741c99b450306930c111b3432216b9b1fc5601a444ed18e2b5ab53dd568b3ada883d4c8b8b0b4046c9dc6f0e8d7bfa0522365c6d9d18147986bd4ce0942395b9e0b34b732a4156736d7c4aa90ab47ddc89984e9d230ef6a384e5b80bfaae77a626e9e5f848058ac24f1ccf5b111605cb4fac8c052f2e786b16b2e4c677529988393d97629866b36c7cca65a2a57e56c2d65211456308bbc5870f704ebb426bde88350550fd8ce004a7d5dbf5e9481d4503764e94fd1b9018e8f3e793de65e289a0c7164894fe0be78b8e74b1e5741a306793038e9bbbb4762418ce46ec47d2f58853caa73332b0e6f9dfd6c911dcf3b937e48c51efe762165d47ff1344d21781368047a980ec453bda2159d0e906895154fa4c3f709ff931e70a32f51470875141ae4d5e0bdee252f7abfc143746e70d2ecc70089d097145361dabbacb1816f7320c7a61268f7e9d45f2d0b029d276308c603ec06d87b5418ed08a591d720754373dcd0dde2cd0aebe001960f89781c62861d5ee4f6de"})
socket(0x2, 0x80002, 0x73)
r5 = socket(0x2, 0x801, 0x106)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.max.depth\x00', 0x20681, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000100)='7', 0x7)
capset$auto(&(0x7f0000000280)={0x2, 0xffffffffffffffff}, &(0x7f00000002c0)={0x69, 0x7})
r7 = setfsuid$auto(0xee00)
shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r7, 0xee00, 0x9, 0x7, 0x7, 0x1}, 0x6, 0x4, 0x7, 0x2, @raw, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000002800)="98184e760a0f452eb11ea06b99ff21207e3b8c3b220044babfe4265728b83289334ad0fe741aa5ca55a08562caac2a4250362d60e4fa7c638f6df5ce567f74be13b83c270559872f67c6a2b22bf7734c63c04d9ee81bc615e00b15ccc53a5b6ed9157d27379564431ff2b3f0b4fda06486a9c5a82249d257871870a1070a15c7beaadf0dc4213674015e96a424cd97bb46607a111c53e42e0b"})
sendmsg$auto_IPVS_CMD_GET_DEST(r5, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x40)
r8 = getegid()
fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r8)

6.170871198s ago: executing program 0 (id=3134):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
r1 = getpgid(r0)
socket(0x10, 0x800, 0x80000040)
r2 = prctl$auto_PR_SET_MM_START_DATA(0x40005, 0x3, r1, 0x8000a, 0xffffffffffffffff)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_gtp(0x0, r2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000200)=@raw_tracepoint={0x6, 0xffffffffffffffff, 0x0, 0x81}, 0x9)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
madvise$auto(0x0, 0x2003f2, 0x15)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0)
write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0)
syslog$auto(0x3, 0x0, 0x5)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x11, 0x80003, 0x300)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)

5.784814023s ago: executing program 4 (id=3135):
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$auto(0x3, 0x40605346, 0x38)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x800000000000000, 0x200007, 0x19)
ioctl$auto_TIOCGDEV2(r2, 0x80045432, &(0x7f00000000c0)=0x2)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, &(0x7f0000000280)={0x0, 0x10, 0x8})
bpf$auto(0x1, &(0x7f0000000340)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf)

4.975828508s ago: executing program 4 (id=3136):
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000000), r1)
sendmsg$auto_OVS_VPORT_CMD_SET(r1, 0x0, 0x24040080)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f)
mkdir$auto(0x0, 0xffff)
unshare$auto(0x40000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100", @ANYRES8, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0)
mmap$auto(0x0, 0x8d40, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)
sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x40050)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r5 = socket(0x2, 0x1, 0x0)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
epoll_create$auto(0x5)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0)

4.767714506s ago: executing program 0 (id=3137):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
splice$auto(r0, 0x0, r0, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
r2 = io_uring_setup$auto(0x1000, 0x0)
ioctl$auto(0x3, 0x5420, 0x38)
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3)
r3 = open_tree_attr$auto(r2, &(0x7f0000000000)='./file0\x00', 0x9, &(0x7f00000000c0)={0x2d, 0xfffffffffffffffb, 0x100000000, @inferred=r1}, 0x1)
ioctl$auto_PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000100)=0x6a5de236)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x3, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
io_uring_setup$auto(0xe, &(0x7f0000000100)={0xffffffff, 0x1, 0x0, 0xa4c, 0x7, 0x10, r4, [0x0, 0x1, 0xa], {0x4, 0x6f4, 0x0, 0xff, 0xa, 0x5, 0x130, 0x1ff, 0x3}, {0xd5, 0x0, 0xff, 0x4, 0x4f54, 0x80002, 0x4, 0x6, 0x99a}})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r4)
sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="94612eaa73595fcc019a1cc8d6192076747d0cc2e5a92b77492273d07ecd115274c46b95a45b9b3ec1c6f1481c4c3ec2c18d8ef6d892f1d178c796fd6356025f1e04ea7159b9bf4bd7bd6cb9da05fd9bd6489904d0636fb9ab12247c181a2ee951a7487ec8e60006d3d09b", @ANYRES16=r6, @ANYBLOB="21032cbd7000754361f07fb974df"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x8)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0xa001, 0x0)
write$auto(r7, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x1)
r8 = seccomp$auto(0xfffffffc, 0x3ff, &(0x7f0000000200)="0964dc1702105d7334d1b6b7f5177116fee586174043a38a49c93dbb0ac3b5a59dd24b5311b2ddcc13783ead557599f434e19ef586ea")
bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000280)=@link_create={@prog_fd=r1, @target_fd=r8, 0x1, 0xece7, @netkit={@relative_id=0x9, 0x6}}, 0x6)
lsetxattr$auto(0x0, &(0x7f00000003c0)='security.capabili\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\xb6\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4x\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@R\xc5\xb6\x16\xfa\xe7\x13\x00\xe3\xf3\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4s2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7b*\x94=#G2\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,\x80\x0e\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\x809Y,\xd8\xe1C}GI\x87\x147\xe9\x98M\xffl,z{@\xc5\x89q\xdc3,\x95VWFT\xde7\xba\x11g\x10\xe6t\n\'\xbfB\x1c\x97\xd9R6aU\xd6\x87h\xe7\xa8ww\xd7\xc8\x9b\xdc\xba\x10\xab\x17p\nI\xd5\x94!\x82\xcd\x98\xf9\xb6\xa4\x1fs\xbb\xa6<\xac\befj\x00h\xcb\xf9\xf3Z\x84ca\xa4B\xe6\xa9\xf6k\xe5\x96}\xf6#2\x84b\xca\x0e\x1bj4\xce\xc6U\x95\xb2\xe5\xb1\r\xb7\x8e\xeb6\'\x1f\xca.|7Q\xa8\xc7\xd0!\x16\xd7\x13\xeby/\xa0\xbd\xf41n\x95R\x17\xb3X+\xac\xa2a\"D\x89\xefx\xe8\xf6P*\x84\xc33\xe7\x9e7\x15\xb1', &(0x7f0000001340), 0x54, 0x2)
ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5408, 0x0)
r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(r9, 0x4b4d, 0x1)

4.04807958s ago: executing program 4 (id=3138):
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
sendfile$auto(r0, r1, 0x0, 0x1000200)
r2 = socket(0x11, 0x80003, 0x300)
sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
recvmmsg$auto(r2, 0x0, 0x10001, 0x0, 0x0)
mount$auto(0x0, 0x0, 0x0, 0xf, 0x0)
getdents64$auto(r0, &(0x7f00000000c0)={0x8b7, 0x10001, 0xf, 0x93, "98926d09103960d20df0ba9d16ae893e3741690ae4481076201fa4bb8b303e86fa9a71398cdbf8d199433c6fb654c503820757f8ef95685067a283853b1f19944e9c9c2097c83d869e74f55c5d73680cacbc7dd3f4a914610eb6d726118c6a6bed8695427da3d7"}, 0xa224)
madvise$auto(0x0, 0x2003f2, 0x15)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000480), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'geneve1\x00', <r4=>0x0})
sendmsg$auto_NL802154_CMD_STOP_BEACONS(r2, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000500)={0x368, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}, @NL802154_ATTR_SEC_DEVKEY={0x2fc, 0x2f, 0x0, 0x1, [@typed={0x4, 0x60}, @typed={0xa, 0x5f, 0x0, 0x0, @str='4\x93\x03\x00\x04\x00'}, @generic="b000bdf54c0715de966c249c861bf3b12ae7eedb86e5392564574d88ca", @nested={0x89, 0x20, 0x0, 0x1, [@generic="2e4cdddd60cd88b98477226438a2f8f9a91d1fb69d52478af7817d957a4b0aae2501437aa9c738ae86db1088e41dcf3443787c72b27732a0ffb828a8d52a70b3d3bdc34cf47cb23d9222127538fcb95646664b8b60d370f37fccb3bd52", @nested={0x4, 0xca}, @typed={0x14, 0x121, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0xa9}, @typed={0x4, 0x31}, @typed={0x8, 0x9a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="9fbf3759886f51987d5fef294c7e78559fa7cd8bc250b9db080b0f327acaa3ef4aeabddf50242bf9170a9b7a312f4dc2fec897a97eaabe31754123f3a9609b511b73244bef3667901bc1f1f3a52d6d2bb7dfed49a7c7e052e1b40a7fa314dbad445fa0c3c538d14922e2bb2264e24978479ddab20ea90798e03d95964a24ee84630b1f39cc5334db0ee97283c1cc50270815698fb5201e4c0fc97b153d5df4a310ec0db5a7aef6aaa7500b97c9b18bf5099ff723a33ffad844d138ba2db469d9c6b552a610b3c7fa4d42b7b2a023dbe8686e7b9a648162eb2f440ee15b2e3b55117b8c9b5928cf85278a758dd0c46f4690", @generic="08071413d3e0bd6fccace9fbe21c3134501920b5f3275ef9914da6ab45def312db0f7bbb7dffa9566376f70dcd9f5071669ce927943317cd0bbb7a1b9d835138ef272a598ca8d674296ae8fcd58f3578e12793eee2455375966c4760bcae109120d530a1362e628decbe252e79498381b6dc3f9afae8cdbe208cb17ab29175de177e3faa0ddd59b83bf7e7ebcaf045", @generic="aac58e2d44ab75e0911321e92612eaf73b23b794cfaba825239eb0d23509988ab25800839b9df79cba23f0edca6e8330687a22c9b4433ac1aa341229559475ebcaf159c266b30538628fdb0a2ffc6e48624ed55dcb9bd070581f60e5e12d11972262a358ede40ccce10f12d5c781180c6661a73affad8a891ab6acdcc8b56279fb94e0869e1042943b33e24524d5e1e58e1ec349c64a837e45f5f450d100d935f0809dc71e42113342d86f358d6de45317a5b3d79612a9ff674bb2da5afc94"]}, @NL802154_ATTR_WPAN_PHY_CAPS={0x20, 0x18, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}, @nested={0xc, 0x138, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @fd}]}, @typed={0x8, 0xa7, 0x0, 0x0, @ipv4=@local}]}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffff273}]}, 0x368}, 0x1, 0x0, 0x0, 0x40000}, 0x240488d5)
sysfs$auto(0x2, 0x100000000000039, 0x0)
r5 = fsopen$auto(0x0, 0x1)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x800, 0x0)
fsconfig$auto(r5, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, <r6=>0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve1\x00', <r7=>0x0})
bpf$auto(0x1a, &(0x7f0000000280)=@link_create={@map_fd, @target_ifindex=r7, 0x3, 0x85, @uprobe_multi={0x81, 0x8001, 0x3d7e, 0x3, 0x1, 0x4}}, 0x92)

4.047109121s ago: executing program 0 (id=3144):
unshare$auto(0x40000080)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000000), r1)
sendmsg$auto_OVS_VPORT_CMD_SET(r1, 0x0, 0x24040080)
preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f)
mkdir$auto(0x0, 0xffff)
unshare$auto(0x40000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100", @ANYRES8, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0)
mmap$auto(0x0, 0x8d40, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)
sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x40050)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r5 = socket(0x2, 0x1, 0x0)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
epoll_create$auto(0x5)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0)

3.150848253s ago: executing program 4 (id=3139):
r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x201, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x44, 0xc5, "a1fb9356a71c7bc0d4d5ac6eaf23282130a440987aaad936d54064fcc04ca9148cf6dc60b133d7ecfc3667bbc498fccb499f74bcb01add59604e5718adb8c374"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0xc000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)={0x4, 0x508f, 0x80, 0x3, 0xfa, 0xee, "89371963dfaecd13600b183f4746c8df2bbde40a3c8b1a77a3270c21a1fe63827384530e12ab7d763b9eca9dc8ffe2cc8193b81f6998ae495ea6cc9d85e26e00"})

3.105993779s ago: executing program 0 (id=3140):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x1, 0x43, &(0x7f00000000c0)='gtp\x00', &(0x7f0000000180)=0x7)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/bsg/0:0:0:0/uevent\x00', 0x218803, 0x0)
write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00)
mq_open$auto(&(0x7f0000000080)='/dev/nullb0\x00', 0x1, 0x2, &(0x7f0000000100)={0xfffffffffffffff9, 0x1, 0x2})
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/irq/9/effective_affinity_list\x00', 0x0, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa)
mmap$auto(0x5, 0x2020009, 0xb, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c)

631.577µs ago: executing program 0 (id=3141):
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd3/queue/discard_granularity\x00', 0x48000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/253, 0xfd)
r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim5/trap_flow_action_cookie\x00', 0x800000, 0x0)
write$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000480)="b8ac45f755aba04b472dedbfc808d09fe5b8dc094e9e1be3a4e8d0ca0548bb4ff74addc81aba5857e28c645e4743f9a19e3f9ca071169e577db31bdab8521f8f3ef113b0186512c8dd8c4aaa9b8ebe21952e85399c552a5af863602cf7a0b50ff1f493f5ebb7ff55be3b6226b7d3578c75840273eef99f", 0x77)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/mac80211/parameters/ieee80211_default_rc_algo\x00', 0x189002, 0x0)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0)
write$auto_tty_fops_tty_io(r4, &(0x7f00000009c0)="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", 0xe2f)
close_range$auto(r4, r3, 0x1000)
sendfile$auto(r4, r2, 0x0, 0x400000009206)
r5 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x101001, 0x0)
write$auto_trace_clock_fops_trace(r5, 0x0, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/module/psmouse/parameters/proto\x00', 0x20a42, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000001080)=""/4060, 0xfdc)
io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x20000006, 0x9, 0x8a, 0xfffffff7, <r7=>0xffffffffffffffff, [0x104, 0x9, 0x7f], {0x2, 0xb, 0x3034, 0xe, 0x4, 0x5, 0x2, 0xfffffff9, 0xf08a2b5}, {0x4000, 0x8, 0x9, 0x0, 0x0, 0xeca8, 0xd5, 0x836, 0x8}})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r7)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r9, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_FILS_NONCES={0x93, 0xf3, "b073a2eba4f4b47b257ab70b1a291cc9ee918b54f28073fd7fab325a6e94f311ad99d5804bd76eebcca2e83dbd5088c60613f1554589c412ac72dd9b1095abd8694900c43e1d01bae40d371849fec033224f5b221db52285488cf546c11f273263a0f53cd0398eda183827f20e9e7b5599d2a4f70aeba78b4fd34413b80bedd55f5720efc8f8f68d23b87d708eb701"}]}, 0xac}}, 0x200000c0)

0s ago: executing program 4 (id=3142):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$auto_VHOST_RESET_OWNER(r1, 0xaf02, 0x3)
ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de)
r2 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000300), 0x2c0100, 0x0)
bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)=@token_create={0x3, r2}, 0x4)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
r3 = socket(0x2, 0x1, 0x84)
r4 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000400)=@batch={0x1, 0x4, 0x400, 0x5, 0x1, r1, 0x5089, 0x4}, 0x92)
r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000500), r3)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_RESPONSE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x400c880)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x13, @dev={0xac, 0x14, 0x14, 0x10}}, 0x55)
setsockopt$auto(0x3, 0x9, 0x71, 0x0, 0x46)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r1, 0x8000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)={0x100, 0x0, 0x2f}, 0x18)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
sysfs$auto(0x2, 0xd, 0x0)
r7 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0)
fsconfig$auto_FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000000c0)='[\x99}/:H\x00', 0x0, 0x0)
ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000040)="158f4a2b")
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r8, 0x0, 0x866)

kernel console output (not intermixed with test programs):

90
[  810.845477][T16039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.845495][T16039] RIP: 0033:0x7f03bed9ce59
[  810.845511][T16039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  810.845530][T16039] RSP: 002b:00007f03bfd3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  810.845548][T16039] RAX: ffffffffffffffda RBX: 00007f03bf015fa0 RCX: 00007f03bed9ce59
[  810.845560][T16039] RDX: 0000000000000007 RSI: 0000000002020009 RDI: 0000000000000000
[  810.845571][T16039] RBP: 00007f03bee32d6f R08: fffffffffffffffa R09: 0000000000008000
[  810.845582][T16039] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  810.845592][T16039] R13: 00007f03bf016038 R14: 00007f03bf015fa0 R15: 00007ffd15f980d8
[  810.845620][T16039]  </TASK>
[  811.213623][T16043] vivid-008: =================  START STATUS  =================
[  811.221348][T16043] vivid-008: ==================  END STATUS  ==================
[  811.996866][T16060] ptrace attach of ""[16062] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16060]
[  812.063786][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'.
[  813.480174][T16090] Invalid ELF header magic: != ELF
[  815.111934][T16084] kexec: Could not allocate control_code_buffer
[  817.186022][T16127] Process accounting paused
[  818.867876][T16160] Invalid ELF header magic: != ELF
[  819.036260][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2302'.
[  819.077545][T16166] nbd: must specify a size in bytes for the device
[  820.077807][T16175] device-mapper: ioctl: Invalid ioctl structure: name ��������d, dev 3000000000
[  821.537115][   T30] audit: type=1804 audit(1843104573.180:33): pid=16186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2308" name="/newroot/576/file0" dev="tmpfs" ino=3084 res=1 errno=0
[  822.173390][T16204] FAULT_INJECTION: forcing a failure.
[  822.173390][T16204] name failslab, interval 1, probability 0, space 0, times 0
[  822.264823][T16204] CPU: 0 UID: 0 PID: 16204 Comm: syz.2.2312 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  822.264857][T16204] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  822.264864][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  822.264875][T16204] Call Trace:
[  822.264881][T16204]  <TASK>
[  822.264888][T16204]  dump_stack_lvl+0x100/0x190
[  822.264924][T16204]  should_fail_ex.cold+0x5/0xa
[  822.264946][T16204]  should_failslab+0xc2/0x120
[  822.264968][T16204]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  822.264996][T16204]  ? sk_prot_alloc+0x60/0x2a0
[  822.265022][T16204]  sk_prot_alloc+0x60/0x2a0
[  822.265046][T16204]  sk_alloc+0x36/0xe80
[  822.265074][T16204]  inet_create+0x3a0/0x1060
[  822.265102][T16204]  ? inet_create+0x94/0x1060
[  822.265132][T16204]  __sock_create+0x339/0x860
[  822.265166][T16204]  __sys_socket+0x14d/0x260
[  822.265191][T16204]  ? __pfx___sys_socket+0x10/0x10
[  822.265214][T16204]  ? ksys_write+0x1ac/0x250
[  822.265240][T16204]  __x64_sys_socket+0x72/0xb0
[  822.265263][T16204]  ? lockdep_hardirqs_on+0x78/0x100
[  822.265288][T16204]  do_syscall_64+0x115/0x840
[  822.265311][T16204]  ? clear_bhb_loop+0x40/0x90
[  822.265333][T16204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.265351][T16204] RIP: 0033:0x7f5b7599ce59
[  822.265366][T16204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  822.265383][T16204] RSP: 002b:00007f5b767f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  822.265402][T16204] RAX: ffffffffffffffda RBX: 00007f5b75c15fa0 RCX: 00007f5b7599ce59
[  822.265413][T16204] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002
[  822.265423][T16204] RBP: 00007f5b75a32d6f R08: 0000000000000000 R09: 0000000000000000
[  822.265434][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  822.265445][T16204] R13: 00007f5b75c16038 R14: 00007f5b75c15fa0 R15: 00007fff6fb3ddd8
[  822.265467][T16204]  </TASK>
[  822.678812][T16202] Invalid ELF header magic: != ELF
[  824.253344][T16233] FAULT_INJECTION: forcing a failure.
[  824.253344][T16233] name failslab, interval 1, probability 0, space 0, times 0
[  824.322951][T16233] CPU: 0 UID: 0 PID: 16233 Comm: syz.2.2318 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  824.322984][T16233] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  824.322991][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  824.323002][T16233] Call Trace:
[  824.323008][T16233]  <TASK>
[  824.323016][T16233]  dump_stack_lvl+0x100/0x190
[  824.323053][T16233]  should_fail_ex.cold+0x5/0xa
[  824.323076][T16233]  should_failslab+0xc2/0x120
[  824.323098][T16233]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  824.323125][T16233]  ? __kernfs_new_node+0xd2/0x9f0
[  824.323149][T16233]  __kernfs_new_node+0xd2/0x9f0
[  824.323168][T16233]  ? kernfs_add_one+0x583/0x850
[  824.323191][T16233]  ? __pfx___kernfs_new_node+0x10/0x10
[  824.323221][T16233]  ? find_held_lock+0x2b/0x80
[  824.323242][T16233]  ? kernfs_root+0xee/0x2a0
[  824.323260][T16233]  ? kernfs_root+0xee/0x2a0
[  824.323284][T16233]  kernfs_new_node+0x11b/0x1a0
[  824.323310][T16233]  __kernfs_create_file+0x53/0x350
[  824.323340][T16233]  sysfs_add_file_mode_ns+0x207/0x3c0
[  824.323365][T16233]  sysfs_create_file_ns+0x145/0x1e0
[  824.323383][T16233]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  824.323402][T16233]  ? __pfx___up_read+0x10/0x10
[  824.323420][T16233]  ? acpi_device_notify+0x464/0x500
[  824.323448][T16233]  ? kobject_put+0xb9/0x640
[  824.323478][T16233]  device_create_file+0xf2/0x1d0
[  824.323503][T16233]  device_add+0x2cb/0x1950
[  824.323524][T16233]  ? __pfx_dev_set_name+0x10/0x10
[  824.323545][T16233]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  824.323570][T16233]  ? __pfx_device_add+0x10/0x10
[  824.323589][T16233]  ? lockdep_init_map_type+0x5c/0x250
[  824.323617][T16233]  ? __init_waitqueue_head+0xca/0x150
[  824.323642][T16233]  netdev_register_kobject+0x1a9/0x3d0
[  824.323669][T16233]  register_netdevice+0x151c/0x24b0
[  824.323705][T16233]  ? __pfx_register_netdevice+0x10/0x10
[  824.323723][T16233]  ? net_generic+0xea/0x2a0
[  824.323747][T16233]  ppp_dev_configure+0x986/0xcb0
[  824.323772][T16233]  ppp_ioctl+0x9d7/0x27c0
[  824.323793][T16233]  ? find_held_lock+0x2b/0x80
[  824.323814][T16233]  ? __pfx_ppp_ioctl+0x10/0x10
[  824.323837][T16233]  ? __fget_files+0x21f/0x3d0
[  824.323861][T16233]  ? __pfx_ppp_ioctl+0x10/0x10
[  824.323880][T16233]  __x64_sys_ioctl+0x18e/0x210
[  824.323901][T16233]  do_syscall_64+0x115/0x840
[  824.323925][T16233]  ? clear_bhb_loop+0x40/0x90
[  824.323946][T16233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  824.323965][T16233] RIP: 0033:0x7f5b7599ce59
[  824.323980][T16233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  824.323997][T16233] RSP: 002b:00007f5b767f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  824.324015][T16233] RAX: ffffffffffffffda RBX: 00007f5b75c15fa0 RCX: 00007f5b7599ce59
[  824.324027][T16233] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 000000000000000f
[  824.324038][T16233] RBP: 00007f5b75a32d6f R08: 0000000000000000 R09: 0000000000000000
[  824.324048][T16233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  824.324059][T16233] R13: 00007f5b75c16038 R14: 00007f5b75c15fa0 R15: 00007fff6fb3ddd8
[  824.324082][T16233]  </TASK>
[  825.130833][T16250] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input60
[  826.379809][T16263] Invalid ELF header magic: != ELF
[  826.886450][T16274] FAULT_INJECTION: forcing a failure.
[  826.886450][T16274] name failslab, interval 1, probability 0, space 0, times 0
[  826.947680][T16274] CPU: 0 UID: 0 PID: 16274 Comm: syz.1.2329 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  826.947713][T16274] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  826.947719][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  826.947729][T16274] Call Trace:
[  826.947735][T16274]  <TASK>
[  826.947742][T16274]  dump_stack_lvl+0x100/0x190
[  826.947780][T16274]  should_fail_ex.cold+0x5/0xa
[  826.947803][T16274]  should_failslab+0xc2/0x120
[  826.947824][T16274]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  826.947851][T16274]  ? skb_clone+0x190/0x400
[  826.947874][T16274]  skb_clone+0x190/0x400
[  826.947892][T16274]  netlink_deliver_tap+0xaed/0xcc0
[  826.947920][T16274]  netlink_unicast+0x62b/0x850
[  826.947947][T16274]  ? __pfx_netlink_unicast+0x10/0x10
[  826.947976][T16274]  netlink_sendmsg+0x8b0/0xda0
[  826.948003][T16274]  ? __pfx_netlink_sendmsg+0x10/0x10
[  826.948025][T16274]  ? __import_iovec+0x1d2/0x640
[  826.948052][T16274]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  826.948074][T16274]  ____sys_sendmsg+0x9e1/0xb70
[  826.948096][T16274]  ? __pfx_netlink_sendmsg+0x10/0x10
[  826.948120][T16274]  ? __pfx_____sys_sendmsg+0x10/0x10
[  826.948153][T16274]  ___sys_sendmsg+0x190/0x1e0
[  826.948178][T16274]  ? __pfx____sys_sendmsg+0x10/0x10
[  826.948236][T16274]  __sys_sendmsg+0x170/0x220
[  826.948255][T16274]  ? __pfx___sys_sendmsg+0x10/0x10
[  826.948283][T16274]  ? rcu_is_watching+0x12/0xc0
[  826.948306][T16274]  do_syscall_64+0x115/0x840
[  826.948330][T16274]  ? clear_bhb_loop+0x40/0x90
[  826.948351][T16274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.948369][T16274] RIP: 0033:0x7fc19d99ce59
[  826.948384][T16274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.948401][T16274] RSP: 002b:00007fc19bbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  826.948418][T16274] RAX: ffffffffffffffda RBX: 00007fc19dc15fa0 RCX: 00007fc19d99ce59
[  826.948429][T16274] RDX: 0000000000008092 RSI: 0000200000000100 RDI: 0000000000000005
[  826.948440][T16274] RBP: 00007fc19bbf6090 R08: 0000000000000000 R09: 0000000000000000
[  826.948449][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  826.948459][T16274] R13: 00007fc19dc16038 R14: 00007fc19dc15fa0 R15: 00007fff6a45ade8
[  826.948482][T16274]  </TASK>
[  828.476482][T16295] nbd: socks must be embedded in a SOCK_ITEM attr
[  828.542609][T16295] block nbd0: shutting down sockets
[  828.918362][T16294] bond0: invalid ARP target specified
[  829.299137][T16303] bond0: invalid ARP target specified
[  829.389293][T16303] nbd: socks must be embedded in a SOCK_ITEM attr
[  829.411379][T16303] block nbd0: shutting down sockets
[  829.621505][T16311] FAULT_INJECTION: forcing a failure.
[  829.621505][T16311] name failslab, interval 1, probability 0, space 0, times 0
[  829.689410][T16311] CPU: 0 UID: 0 PID: 16311 Comm: syz.0.2340 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  829.689445][T16311] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  829.689453][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  829.689463][T16311] Call Trace:
[  829.689470][T16311]  <TASK>
[  829.689477][T16311]  dump_stack_lvl+0x100/0x190
[  829.689513][T16311]  should_fail_ex.cold+0x5/0xa
[  829.689536][T16311]  should_failslab+0xc2/0x120
[  829.689560][T16311]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  829.689588][T16311]  ? sock_alloc_inode+0x26/0x290
[  829.689611][T16311]  ? __pfx_sock_alloc_inode+0x10/0x10
[  829.689635][T16311]  sock_alloc_inode+0x26/0x290
[  829.689655][T16311]  ? __pfx_sock_alloc_inode+0x10/0x10
[  829.689675][T16311]  alloc_inode+0x68/0x250
[  829.689703][T16311]  sock_alloc+0x44/0x280
[  829.689728][T16311]  ? security_socket_create+0x7f/0x250
[  829.689749][T16311]  __sock_create+0xc2/0x860
[  829.689776][T16311]  __sys_socket+0x14d/0x260
[  829.689802][T16311]  ? __pfx___sys_socket+0x10/0x10
[  829.689832][T16311]  __x64_sys_socket+0x72/0xb0
[  829.689856][T16311]  ? lockdep_hardirqs_on+0x78/0x100
[  829.689882][T16311]  do_syscall_64+0x115/0x840
[  829.689906][T16311]  ? clear_bhb_loop+0x40/0x90
[  829.689927][T16311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.689945][T16311] RIP: 0033:0x7fd70a39ce59
[  829.689960][T16311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  829.689977][T16311] RSP: 002b:00007fd70b30d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  829.689995][T16311] RAX: ffffffffffffffda RBX: 00007fd70a615fa0 RCX: 00007fd70a39ce59
[  829.690006][T16311] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  829.690016][T16311] RBP: 00007fd70a432d6f R08: 0000000000000000 R09: 0000000000000000
[  829.690026][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  829.690036][T16311] R13: 00007fd70a616038 R14: 00007fd70a615fa0 R15: 00007ffd5b04fdc8
[  829.690058][T16311]  </TASK>
[  829.690067][T16311] socket: no more sockets
[  830.596380][T16311] FAULT_INJECTION: forcing a failure.
[  830.596380][T16311] name failslab, interval 1, probability 0, space 0, times 0
[  830.699025][T16311] CPU: 0 UID: 0 PID: 16311 Comm: syz.0.2340 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  830.699059][T16311] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  830.699066][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  830.699077][T16311] Call Trace:
[  830.699084][T16311]  <TASK>
[  830.699091][T16311]  dump_stack_lvl+0x100/0x190
[  830.699134][T16311]  should_fail_ex.cold+0x5/0xa
[  830.699157][T16311]  ? lsm_blob_alloc+0x68/0x90
[  830.699183][T16311]  should_failslab+0xc2/0x120
[  830.699205][T16311]  __kmalloc_noprof+0xe0/0x850
[  830.699233][T16311]  ? trace_kmem_cache_alloc+0xd5/0x100
[  830.699258][T16311]  lsm_blob_alloc+0x68/0x90
[  830.699284][T16311]  security_prepare_creds+0x2d/0x290
[  830.699311][T16311]  prepare_creds+0x5d6/0x950
[  830.699331][T16311]  copy_creds+0xa7/0xa50
[  830.699352][T16311]  copy_process+0x1347/0x7ed0
[  830.699374][T16311]  ? __futex_wait+0x256/0x300
[  830.699398][T16311]  ? __pfx___futex_wait+0x10/0x10
[  830.699419][T16311]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  830.699450][T16311]  ? __pfx_copy_process+0x10/0x10
[  830.699473][T16311]  ? find_held_lock+0x2b/0x80
[  830.699503][T16311]  kernel_clone+0x176/0x9e0
[  830.699525][T16311]  ? __pfx_futex_wait+0x10/0x10
[  830.699548][T16311]  ? __pfx_kernel_clone+0x10/0x10
[  830.699581][T16311]  __do_sys_clone+0xd9/0x120
[  830.699606][T16311]  ? __pfx___do_sys_clone+0x10/0x10
[  830.699641][T16311]  ? rcu_is_watching+0x12/0xc0
[  830.699664][T16311]  do_syscall_64+0x115/0x840
[  830.699687][T16311]  ? clear_bhb_loop+0x40/0x90
[  830.699708][T16311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.699726][T16311] RIP: 0033:0x7fd70a39ce59
[  830.699742][T16311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  830.699759][T16311] RSP: 002b:00007fd70b30cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  830.699780][T16311] RAX: ffffffffffffffda RBX: 00007fd70a615fa0 RCX: 00007fd70a39ce59
[  830.699792][T16311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  830.699802][T16311] RBP: 00007fd70a432d6f R08: 0000000000000000 R09: 0000000000000000
[  830.699812][T16311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  830.699822][T16311] R13: 00007fd70a616038 R14: 00007fd70a615fa0 R15: 00007ffd5b04fdc8
[  830.699845][T16311]  </TASK>
[  831.226794][T16338] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input61
[  831.576107][T16343] FAULT_INJECTION: forcing a failure.
[  831.576107][T16343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  831.621298][T16343] CPU: 0 UID: 0 PID: 16343 Comm: syz.2.2346 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  831.621330][T16343] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  831.621337][T16343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  831.621347][T16343] Call Trace:
[  831.621353][T16343]  <TASK>
[  831.621360][T16343]  dump_stack_lvl+0x100/0x190
[  831.621395][T16343]  should_fail_ex.cold+0x5/0xa
[  831.621417][T16343]  _copy_from_iter+0x1f4/0x1690
[  831.621445][T16343]  ? __asan_memset+0x23/0x50
[  831.621473][T16343]  ? __pfx__copy_from_iter+0x10/0x10
[  831.621497][T16343]  ? __pfx___alloc_skb+0x10/0x10
[  831.621522][T16343]  netlink_sendmsg+0x808/0xda0
[  831.621549][T16343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  831.621571][T16343]  ? __import_iovec+0x1d2/0x640
[  831.621597][T16343]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  831.621619][T16343]  ____sys_sendmsg+0x9e1/0xb70
[  831.621640][T16343]  ? __pfx_netlink_sendmsg+0x10/0x10
[  831.621664][T16343]  ? __pfx_____sys_sendmsg+0x10/0x10
[  831.621701][T16343]  ___sys_sendmsg+0x190/0x1e0
[  831.621727][T16343]  ? __pfx____sys_sendmsg+0x10/0x10
[  831.621780][T16343]  __sys_sendmsg+0x170/0x220
[  831.621799][T16343]  ? __pfx___sys_sendmsg+0x10/0x10
[  831.621825][T16343]  ? rcu_is_watching+0x12/0xc0
[  831.621848][T16343]  do_syscall_64+0x115/0x840
[  831.621873][T16343]  ? clear_bhb_loop+0x40/0x90
[  831.621894][T16343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.621912][T16343] RIP: 0033:0x7f5b7599ce59
[  831.621927][T16343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  831.621944][T16343] RSP: 002b:00007f5b767f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  831.621962][T16343] RAX: ffffffffffffffda RBX: 00007f5b75c15fa0 RCX: 00007f5b7599ce59
[  831.621973][T16343] RDX: 0000000000048050 RSI: 0000200000000080 RDI: 0000000000000003
[  831.621984][T16343] RBP: 00007f5b767f8090 R08: 0000000000000000 R09: 0000000000000000
[  831.621994][T16343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  831.622004][T16343] R13: 00007f5b75c16038 R14: 00007f5b75c15fa0 R15: 00007fff6fb3ddd8
[  831.622033][T16343]  </TASK>
[  833.063202][T16366] FAULT_INJECTION: forcing a failure.
[  833.063202][T16366] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  833.113553][T16366] CPU: 0 UID: 0 PID: 16366 Comm: syz.4.2352 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  833.113586][T16366] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  833.113593][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  833.113603][T16366] Call Trace:
[  833.113609][T16366]  <TASK>
[  833.113616][T16366]  dump_stack_lvl+0x100/0x190
[  833.113651][T16366]  should_fail_ex.cold+0x5/0xa
[  833.113674][T16366]  _copy_to_user+0x32/0xd0
[  833.113700][T16366]  simple_read_from_buffer+0xcb/0x170
[  833.113723][T16366]  proc_fail_nth_read+0x1af/0x230
[  833.113751][T16366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  833.113780][T16366]  ? rw_verify_area+0xce/0x6d0
[  833.113797][T16366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  833.113824][T16366]  vfs_read+0x1e4/0xb30
[  833.113847][T16366]  ? __pfx_vfs_read+0x10/0x10
[  833.113867][T16366]  ? __fget_files+0x215/0x3d0
[  833.113892][T16366]  ? __fget_files+0x21f/0x3d0
[  833.113919][T16366]  ksys_read+0x12a/0x250
[  833.113939][T16366]  ? __pfx_ksys_read+0x10/0x10
[  833.113969][T16366]  ? rcu_is_watching+0x12/0xc0
[  833.113993][T16366]  do_syscall_64+0x115/0x840
[  833.114018][T16366]  ? clear_bhb_loop+0x40/0x90
[  833.114040][T16366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.114058][T16366] RIP: 0033:0x7f03bed5d68e
[  833.114076][T16366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  833.114095][T16366] RSP: 002b:00007f03bfd3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  833.114112][T16366] RAX: ffffffffffffffda RBX: 00007f03bfd3c6c0 RCX: 00007f03bed5d68e
[  833.114124][T16366] RDX: 000000000000000f RSI: 00007f03bfd3c0a0 RDI: 0000000000000004
[  833.114134][T16366] RBP: 00007f03bfd3c090 R08: 0000000000000000 R09: 0000000000000000
[  833.114145][T16366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  833.114155][T16366] R13: 00007f03bf016038 R14: 00007f03bf015fa0 R15: 00007ffd15f980d8
[  833.114179][T16366]  </TASK>
[  836.398055][T16394] FAULT_INJECTION: forcing a failure.
[  836.398055][T16394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  836.471270][T16394] CPU: 0 UID: 0 PID: 16394 Comm: syz.2.2357 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  836.471305][T16394] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  836.471312][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  836.471323][T16394] Call Trace:
[  836.471330][T16394]  <TASK>
[  836.471337][T16394]  dump_stack_lvl+0x100/0x190
[  836.471374][T16394]  should_fail_ex.cold+0x5/0xa
[  836.471397][T16394]  _copy_from_user+0x2e/0xd0
[  836.471434][T16394]  copy_msghdr_from_user+0x9f/0x4f0
[  836.471462][T16394]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  836.471492][T16394]  ? rcu_is_watching+0x12/0xc0
[  836.471512][T16394]  ? ___sys_sendmsg+0x19d/0x1e0
[  836.471534][T16394]  ? kfree+0x1dd/0x6c0
[  836.471562][T16394]  ___sys_sendmsg+0x106/0x1e0
[  836.471588][T16394]  ? __pfx____sys_sendmsg+0x10/0x10
[  836.471631][T16394]  ? __pfx___might_resched+0x10/0x10
[  836.471655][T16394]  __sys_sendmmsg+0x205/0x430
[  836.471676][T16394]  ? __pfx___sys_sendmmsg+0x10/0x10
[  836.471703][T16394]  ? __pfx_do_futex+0x10/0x10
[  836.471734][T16394]  ? xfd_validate_state+0x129/0x190
[  836.471755][T16394]  ? exit_to_user_mode_loop+0xf3/0x670
[  836.471789][T16394]  __x64_sys_sendmmsg+0x9c/0x100
[  836.471808][T16394]  ? lockdep_hardirqs_on+0x78/0x100
[  836.471834][T16394]  do_syscall_64+0x115/0x840
[  836.471858][T16394]  ? clear_bhb_loop+0x40/0x90
[  836.471880][T16394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.471898][T16394] RIP: 0033:0x7f5b7599ce59
[  836.471914][T16394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  836.471932][T16394] RSP: 002b:00007f5b767f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  836.471951][T16394] RAX: ffffffffffffffda RBX: 00007f5b75c15fa0 RCX: 00007f5b7599ce59
[  836.471963][T16394] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000005
[  836.471974][T16394] RBP: 00007f5b75a32d6f R08: 0000000000000000 R09: 0000000000000000
[  836.471985][T16394] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000
[  836.471996][T16394] R13: 00007f5b75c16038 R14: 00007f5b75c15fa0 R15: 00007fff6fb3ddd8
[  836.472019][T16394]  </TASK>
[  837.024691][T16428] openvswitch: netlink: Flow key attribute not present in set flow.
[  837.040170][T16428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.050197][T16428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.073849][   T30] audit: type=1800 audit(1843104588.791:34): pid=16428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2365" name="dbroot" dev="configfs" ino=69815 res=0 errno=0
[  837.686512][T16435] Invalid ELF header magic: != ELF
[  838.584972][T16448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  838.598185][T16448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  838.607187][T16448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  838.618300][T16448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  838.640528][T16448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  839.871265][T11222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.395375][T11222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.720598][T16448] Bluetooth: hci3: command tx timeout
[  840.960719][T11222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.550523][T11222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.715631][T11222] bridge_slave_1: left allmulticast mode
[  842.748288][T11222] bridge_slave_1: left promiscuous mode
[  842.778438][T11222] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.801536][T16448] Bluetooth: hci3: command tx timeout
[  842.808317][T11222] bridge_slave_0: left allmulticast mode
[  842.808368][T11222] bridge_slave_0: left promiscuous mode
[  842.808523][T11222] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.978168][T16519] FAULT_INJECTION: forcing a failure.
[  842.978168][T16519] name failslab, interval 1, probability 0, space 0, times 0
[  842.978230][T16519] CPU: 0 UID: 0 PID: 16519 Comm: syz.4.2382 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  842.978261][T16519] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  842.978268][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  842.978279][T16519] Call Trace:
[  842.978286][T16519]  <TASK>
[  842.978293][T16519]  dump_stack_lvl+0x100/0x190
[  842.978327][T16519]  should_fail_ex.cold+0x5/0xa
[  842.978350][T16519]  ? constrain_params_by_rules+0x175/0xcc0
[  842.978461][T16519]  should_failslab+0xc2/0x120
[  842.978482][T16519]  __kmalloc_noprof+0xe0/0x850
[  842.978509][T16519]  ? unwind_get_return_address+0x59/0xa0
[  842.978537][T16519]  constrain_params_by_rules+0x175/0xcc0
[  842.978569][T16519]  ? stack_trace_save+0x8e/0xc0
[  842.978596][T16519]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  842.978629][T16519]  ? __kasan_kmalloc+0xaa/0xb0
[  842.978645][T16519]  ? snd_pcm_oss_change_params_locked+0x247/0x39f0
[  842.978705][T16519]  ? snd_pcm_oss_make_ready_locked+0xb7/0x130
[  842.978729][T16519]  ? snd_pcm_oss_read+0x3d4/0x730
[  842.978760][T16519]  ? rcu_is_watching+0x12/0xc0
[  842.978780][T16519]  ? snd_interval_refine+0x2d0/0x580
[  842.978803][T16519]  snd_pcm_hw_refine+0x7e7/0xad0
[  842.978834][T16519]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  842.978869][T16519]  ? __asan_memset+0x23/0x50
[  842.978903][T16519]  ? _snd_pcm_hw_param_min+0x1ea/0x670
[  842.978930][T16519]  snd_pcm_oss_change_params_locked+0x2594/0x39f0
[  842.978963][T16519]  ? snd_pcm_oss_read+0x3b2/0x730
[  842.978989][T16519]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  842.979017][T16519]  ? __pfx___mutex_lock+0x10/0x10
[  842.979058][T16519]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[  842.979092][T16519]  snd_pcm_oss_read+0x3d4/0x730
[  842.979120][T16519]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  842.979147][T16519]  vfs_read+0x1e4/0xb30
[  842.979169][T16519]  ? __pfx_vfs_read+0x10/0x10
[  842.979189][T16519]  ? do_sys_openat2+0x157/0x1e0
[  842.979215][T16519]  ? __pfx_do_sys_openat2+0x10/0x10
[  842.979252][T16519]  ksys_read+0x12a/0x250
[  842.979272][T16519]  ? __pfx_ksys_read+0x10/0x10
[  842.979294][T16519]  ? rcu_is_watching+0x12/0xc0
[  842.979316][T16519]  do_syscall_64+0x115/0x840
[  842.979340][T16519]  ? clear_bhb_loop+0x40/0x90
[  842.979362][T16519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.979380][T16519] RIP: 0033:0x7f03bed9ce59
[  842.979395][T16519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  842.979413][T16519] RSP: 002b:00007f03bfd3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  842.979431][T16519] RAX: ffffffffffffffda RBX: 00007f03bf015fa0 RCX: 00007f03bed9ce59
[  842.979443][T16519] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003
[  842.979453][T16519] RBP: 00007f03bfd3c090 R08: 0000000000000000 R09: 0000000000000000
[  842.979464][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  842.979474][T16519] R13: 00007f03bf016038 R14: 00007f03bf015fa0 R15: 00007ffd15f980d8
[  842.979497][T16519]  </TASK>
[  843.418498][T11222] ovs_: left promiscuous mode
[  844.068969][T16447] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.069044][T16447] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.069143][T16447] bridge_slave_0: entered allmulticast mode
[  844.072094][T16447] bridge_slave_0: entered promiscuous mode
[  844.155169][T16447] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.155242][T16447] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.155380][T16447] bridge_slave_1: entered allmulticast mode
[  844.159641][T16447] bridge_slave_1: entered promiscuous mode
[  844.243810][T16544] nbd: socks must be embedded in a SOCK_ITEM attr
[  844.244016][T16544] block nbd0: shutting down sockets
[  844.271574][T16544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2384'.
[  844.298577][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5
[  844.300819][T16543] bond0: invalid ARP target specified
[  844.313918][T16447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  844.340259][T16447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  844.378949][T11222] hsr_slave_0: left promiscuous mode
[  844.379407][T11222] hsr_slave_1: left promiscuous mode
[  844.379873][T11222] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  844.379890][T11222] batman_adv: batadv0: Removing interface: batadv_slave_0
[  844.385564][T11222] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  844.385586][T11222] batman_adv: batadv0: Removing interface: batadv_slave_1
[  844.413221][T11222] veth1_macvtap: left promiscuous mode
[  844.413287][T11222] veth0_macvtap: left promiscuous mode
[  844.413346][T11222] veth1_vlan: left allmulticast mode
[  844.413509][T11222] veth1_vlan: left promiscuous mode
[  844.413554][T11222] veth0_vlan: left promiscuous mode
[  844.806869][T11222] team0 (unregistering): Port device team_slave_1 removed
[  844.830672][T11222] team0 (unregistering): Port device team_slave_0 removed
[  844.860631][T16448] Bluetooth: hci3: command tx timeout
[  845.100173][T16447] team0: Port device team_slave_0 added
[  845.171601][T16447] team0: Port device team_slave_1 added
[  845.330430][T16447] batman_adv: batadv0: Adding interface: batadv_slave_0
[  845.371277][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  845.509681][T16447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  845.624604][T16447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  845.671451][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  845.783731][T16447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  846.314318][T16447] hsr_slave_0: entered promiscuous mode
[  846.354130][T16447] hsr_slave_1: entered promiscuous mode
[  846.928195][T16448] Bluetooth: hci3: command tx timeout
[  847.040179][T16586] MTRR 1 not used
[  847.054846][T16588] FAULT_INJECTION: forcing a failure.
[  847.054846][T16588] name failslab, interval 1, probability 0, space 0, times 0
[  847.113866][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.4.2391 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  847.113902][T16588] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  847.113909][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  847.113920][T16588] Call Trace:
[  847.113928][T16588]  <TASK>
[  847.113936][T16588]  dump_stack_lvl+0x100/0x190
[  847.113971][T16588]  should_fail_ex.cold+0x5/0xa
[  847.113995][T16588]  should_failslab+0xc2/0x120
[  847.114017][T16588]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  847.114047][T16588]  ? sock_alloc_inode+0x26/0x290
[  847.114071][T16588]  ? __pfx_sock_alloc_inode+0x10/0x10
[  847.114094][T16588]  sock_alloc_inode+0x26/0x290
[  847.114115][T16588]  ? __pfx_sock_alloc_inode+0x10/0x10
[  847.114136][T16588]  alloc_inode+0x68/0x250
[  847.114164][T16588]  sock_alloc+0x44/0x280
[  847.114183][T16588]  ? security_socket_create+0x7f/0x250
[  847.114203][T16588]  __sock_create+0xc2/0x860
[  847.114230][T16588]  __sys_socket+0x14d/0x260
[  847.114255][T16588]  ? __pfx___sys_socket+0x10/0x10
[  847.114285][T16588]  __x64_sys_socket+0x72/0xb0
[  847.114309][T16588]  ? lockdep_hardirqs_on+0x78/0x100
[  847.114335][T16588]  do_syscall_64+0x115/0x840
[  847.114359][T16588]  ? clear_bhb_loop+0x40/0x90
[  847.114381][T16588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.114399][T16588] RIP: 0033:0x7f03bed9ce59
[  847.114415][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  847.114433][T16588] RSP: 002b:00007f03bfd3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  847.114452][T16588] RAX: ffffffffffffffda RBX: 00007f03bf015fa0 RCX: 00007f03bed9ce59
[  847.114464][T16588] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[  847.114475][T16588] RBP: 00007f03bee32d6f R08: 0000000000000000 R09: 0000000000000000
[  847.114486][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  847.114497][T16588] R13: 00007f03bf016038 R14: 00007f03bf015fa0 R15: 00007ffd15f980d8
[  847.114519][T16588]  </TASK>
[  847.114528][T16588] socket: no more sockets
[  847.603449][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6
[  848.040596][T16588] FAULT_INJECTION: forcing a failure.
[  848.040596][T16588] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  848.110318][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.4.2391 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  848.110353][T16588] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  848.110361][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  848.110372][T16588] Call Trace:
[  848.110379][T16588]  <TASK>
[  848.110386][T16588]  dump_stack_lvl+0x100/0x190
[  848.110422][T16588]  should_fail_ex.cold+0x5/0xa
[  848.110441][T16588]  ? prepare_alloc_pages+0x16d/0x5f0
[  848.110468][T16588]  should_fail_alloc_page+0xeb/0x140
[  848.110492][T16588]  prepare_alloc_pages+0x1f0/0x5f0
[  848.110514][T16588]  ? __lock_acquire+0x4a5/0x2630
[  848.110544][T16588]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  848.110582][T16588]  ? find_held_lock+0x2b/0x80
[  848.110604][T16588]  ? is_bpf_text_address+0x8a/0x1a0
[  848.110628][T16588]  ? is_bpf_text_address+0x8a/0x1a0
[  848.110651][T16588]  ? bpf_ksym_find+0x124/0x1c0
[  848.110670][T16588]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  848.110698][T16588]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  848.110723][T16588]  ? is_bpf_text_address+0x94/0x1a0
[  848.110753][T16588]  ? kernel_text_address+0x8d/0x100
[  848.110771][T16588]  ? __kernel_text_address+0xd/0x30
[  848.110788][T16588]  ? unwind_get_return_address+0x59/0xa0
[  848.110820][T16588]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  848.110846][T16588]  ? policy_nodemask+0xed/0x4f0
[  848.110870][T16588]  alloc_pages_mpol+0x1fb/0x540
[  848.110892][T16588]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  848.110912][T16588]  ? kasan_save_stack+0x30/0x50
[  848.110934][T16588]  ? __kasan_kmalloc+0xaa/0xb0
[  848.110950][T16588]  ? __get_vm_area_node+0x101/0x330
[  848.110971][T16588]  ? __vmalloc_node_range_noprof+0x228/0x1630
[  848.110999][T16588]  alloc_pages_noprof+0x1a/0x160
[  848.111025][T16588]  get_free_pages_noprof+0x10/0xb0
[  848.111045][T16588]  __kasan_populate_vmalloc+0xa0/0x210
[  848.111079][T16588]  alloc_vmap_area+0x95d/0x2b70
[  848.111109][T16588]  ? __pfx_alloc_vmap_area+0x10/0x10
[  848.111136][T16588]  __get_vm_area_node+0x1ca/0x330
[  848.111163][T16588]  __vmalloc_node_range_noprof+0x228/0x1630
[  848.111188][T16588]  ? kernel_clone+0x176/0x9e0
[  848.111212][T16588]  ? lock_acquire+0x1b1/0x370
[  848.111243][T16588]  ? kernel_clone+0x176/0x9e0
[  848.111273][T16588]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  848.111303][T16588]  ? rcu_is_watching+0x12/0xc0
[  848.111323][T16588]  ? trace_kmem_cache_alloc+0xd5/0x100
[  848.111347][T16588]  ? kernel_clone+0x176/0x9e0
[  848.111369][T16588]  __vmalloc_node_noprof+0xad/0xf0
[  848.111393][T16588]  ? kernel_clone+0x176/0x9e0
[  848.111419][T16588]  copy_process+0x7fb/0x7ed0
[  848.111441][T16588]  ? __futex_wait+0x256/0x300
[  848.111465][T16588]  ? __pfx___futex_wait+0x10/0x10
[  848.111487][T16588]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  848.111520][T16588]  ? __pfx_copy_process+0x10/0x10
[  848.111544][T16588]  ? find_held_lock+0x2b/0x80
[  848.111574][T16588]  kernel_clone+0x176/0x9e0
[  848.111597][T16588]  ? __pfx_futex_wait+0x10/0x10
[  848.111620][T16588]  ? __pfx_kernel_clone+0x10/0x10
[  848.111656][T16588]  __do_sys_clone+0xd9/0x120
[  848.111680][T16588]  ? __pfx___do_sys_clone+0x10/0x10
[  848.111723][T16588]  ? rcu_is_watching+0x12/0xc0
[  848.111754][T16588]  do_syscall_64+0x115/0x840
[  848.111779][T16588]  ? clear_bhb_loop+0x40/0x90
[  848.111803][T16588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.111822][T16588] RIP: 0033:0x7f03bed9ce59
[  848.111839][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  848.111857][T16588] RSP: 002b:00007f03bfd3bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  848.111876][T16588] RAX: ffffffffffffffda RBX: 00007f03bf015fa0 RCX: 00007f03bed9ce59
[  848.111888][T16588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  848.111898][T16588] RBP: 00007f03bee32d6f R08: 0000000000000000 R09: 0000000000000000
[  848.111909][T16588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  848.111920][T16588] R13: 00007f03bf016038 R14: 00007f03bf015fa0 R15: 00007ffd15f980d8
[  848.111944][T16588]  </TASK>
[  849.473524][T16603] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2392'.
[  849.592027][T16568] Process accounting resumed
[  849.811129][T16588] syz.4.2391: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  849.987589][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.4.2391 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  849.987624][T16588] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  849.987631][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  849.987642][T16588] Call Trace:
[  849.987649][T16588]  <TASK>
[  849.987657][T16588]  dump_stack_lvl+0x100/0x190
[  849.987691][T16588]  warn_alloc.cold+0x95/0x1c1
[  849.987711][T16588]  ? __pfx_warn_alloc+0x10/0x10
[  849.987739][T16588]  ? lockdep_hardirqs_on+0x78/0x100
[  849.987767][T16588]  ? __get_vm_area_node+0x2cd/0x330
[  849.987793][T16588]  ? __get_vm_area_node+0x208/0x330
[  849.987827][T16588]  __vmalloc_node_range_noprof+0xccd/0x1630
[  849.987853][T16588]  ? lock_acquire+0x1b1/0x370
[  849.987889][T16588]  ? kernel_clone+0x176/0x9e0
[  849.987920][T16588]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  849.987950][T16588]  ? rcu_is_watching+0x12/0xc0
[  849.987971][T16588]  ? trace_kmem_cache_alloc+0xd5/0x100
[  849.987994][T16588]  ? kernel_clone+0x176/0x9e0
[  849.988018][T16588]  __vmalloc_node_noprof+0xad/0xf0
[  849.988042][T16588]  ? kernel_clone+0x176/0x9e0
[  849.988068][T16588]  copy_process+0x7fb/0x7ed0
[  849.988091][T16588]  ? __futex_wait+0x256/0x300
[  849.988115][T16588]  ? __pfx___futex_wait+0x10/0x10
[  849.988136][T16588]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  849.988167][T16588]  ? __pfx_copy_process+0x10/0x10
[  849.988191][T16588]  ? find_held_lock+0x2b/0x80
[  849.988221][T16588]  kernel_clone+0x176/0x9e0
[  849.988244][T16588]  ? __pfx_futex_wait+0x10/0x10
[  849.988267][T16588]  ? __pfx_kernel_clone+0x10/0x10
[  849.988302][T16588]  __do_sys_clone+0xd9/0x120
[  849.988326][T16588]  ? __pfx___do_sys_clone+0x10/0x10
[  849.988364][T16588]  ? rcu_is_watching+0x12/0xc0
[  849.988387][T16588]  do_syscall_64+0x115/0x840
[  849.988411][T16588]  ? clear_bhb_loop+0x40/0x90
[  849.988432][T16588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.988451][T16588] RIP: 0033:0x7f03bed9ce59
[  849.988467][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.988484][T16588] RSP: 002b:00007f03bfd3bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  849.988503][T16588] RAX: ffffffffffffffda RBX: 00007f03bf015fa0 RCX: 00007f03bed9ce59
[  849.988515][T16588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[  849.988526][T16588] RBP: 00007f03bee32d6f R08: 0000000000000000 R09: 0000000000000000
[  849.988537][T16588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  849.988547][T16588] R13: 00007f03bf016038 R14: 00007f03bf015fa0 R15: 00007ffd15f980d8
[  849.988570][T16588]  </TASK>
[  849.988587][T16588] Mem-Info:
[  851.208033][T16588] active_anon:25593 inactive_anon:1 isolated_anon:0
[  851.208033][T16588]  active_file:9371 inactive_file:54062 isolated_file:0
[  851.208033][T16588]  unevictable:1563 dirty:595 writeback:0
[  851.208033][T16588]  slab_reclaimable:12088 slab_unreclaimable:93259
[  851.208033][T16588]  mapped:27087 shmem:15270 pagetables:1266
[  851.208033][T16588]  sec_pagetables:0 bounce:0
[  851.208033][T16588]  kernel_misc_reclaimable:0
[  851.208033][T16588]  free:1299986 free_pcp:6803 free_cma:0
[  851.208086][T16588] Node 0 active_anon:102372kB inactive_anon:4kB active_file:37484kB inactive_file:216056kB unevictable:4716kB isolated(anon):0kB isolated(file):0kB mapped:108348kB dirty:2376kB writeback:0kB shmem:59544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12160kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  851.208135][T16588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  851.208181][T16588] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  851.208232][T16588] lowmem_reserve[]: 0 2478 2479 2479 2479
[  851.208268][T16588] Node 0 DMA32 free:1240708kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102372kB inactive_anon:4kB active_file:37484kB inactive_file:216056kB unevictable:4716kB writepending:2376kB zspages:12kB present:3129332kB managed:2537496kB mlocked:3180kB bounce:0kB free_pcp:27212kB local_pcp:27212kB free_cma:0kB
[  851.208320][T16588] lowmem_reserve[]: 0 0 1 1 1
[  851.208354][T16588] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  851.208402][T16588] lowmem_reserve[]: 0 0 0 0 0
[  851.208436][T16588] Node 1 Normal free:3943868kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  851.208486][T16588] lowmem_reserve[]: 0 0 0 0 0
[  851.208519][T16588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  851.208630][T16588] Node 0 DMA32: 5541*4kB (UE) 3650*8kB (UME) 2350*16kB (U) 2536*32kB (UME) 1436*64kB (UME) 1004*128kB (UME) 529*256kB (UME) 254*512kB (UM) 91*1024kB (UME) 4*2048kB (UME) 118*4096kB (UM) = 1240708kB
[  851.208792][T16588] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  851.265229][T16588] Node 1 Normal: 3*4kB (UM) 12*8kB (UM) 11*16kB (UM) 9*32kB (UM) 4*64kB (UM) 5*128kB (UM) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 961*4096kB (M) = 3943868kB
[  851.265470][T16588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  851.265485][T16588] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  851.265500][T16588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  851.265514][T16588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  851.265529][T16588] 79040 total pagecache pages
[  851.265536][T16588] 0 pages in swap cache
[  851.265543][T16588] Free swap  = 124992kB
[  851.265550][T16588] Total swap = 124996kB
[  851.265558][T16588] 2097051 pages RAM
[  851.265565][T16588] 0 pages HighMem/MovableOnly
[  851.265571][T16588] 430784 pages reserved
[  851.265578][T16588] 0 pages cma reserved
[  851.343299][T16447] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  851.361378][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  851.362022][T16447] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  851.379375][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  851.381701][T16447] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  851.392257][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  851.392920][T16447] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  851.418350][T16447] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  851.477369][T16636] bond0: invalid ARP target specified
[  851.556883][T16636] nbd: socks must be embedded in a SOCK_ITEM attr
[  851.569937][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2397'.
[  851.641878][T16636] block nbd0: shutting down sockets
[  851.788196][T16447] 8021q: adding VLAN 0 to HW filter on device bond0
[  851.843808][T16447] 8021q: adding VLAN 0 to HW filter on device team0
[  851.859765][T11234] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.859855][T11234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  851.881983][T11222] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.882058][T11222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  854.227287][T16447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  854.375365][T16447] veth0_vlan: entered promiscuous mode
[  854.408167][T16447] veth1_vlan: entered promiscuous mode
[  854.516675][T16447] veth0_macvtap: entered promiscuous mode
[  854.541164][T16447] veth1_macvtap: entered promiscuous mode
[  854.579723][T16696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2403'.
[  854.597011][T16696] virt_wifi0: entered allmulticast mode
[  854.621503][T16447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  854.641466][T16447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  854.705943][T14651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  854.706012][T14651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  854.706042][T14651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  854.706071][T14651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  854.982691][T14651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  854.982720][T14651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.098098][T10609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  855.098120][T10609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.147686][T16698] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input63
[  857.856824][T16756] ubi: mtd0 is already attached to ubi0
[  857.896668][T16756] ubi0: detaching mtd0
[  857.917166][T16751] openvswitch: ovs_: Dropping previously announced user features
[  857.931257][T16756] ubi0: mtd0 is detached
[  860.000656][   T30] audit: type=1804 audit(1843104611.850:35): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2415" name="/newroot/478/file0" dev="tmpfs" ino=2538 res=1 errno=0
[  860.495364][T16779] zswap: compressor  not available
[  860.573217][T16733] kexec: Could not allocate control_code_buffer
[  860.818821][T16787] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input64
[  861.324148][T16794] FAULT_INJECTION: forcing a failure.
[  861.324148][T16794] name failslab, interval 1, probability 0, space 0, times 0
[  861.370021][T16794] CPU: 0 UID: 0 PID: 16794 Comm: syz.1.2419 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  861.370054][T16794] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  861.370061][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  861.370072][T16794] Call Trace:
[  861.370079][T16794]  <TASK>
[  861.370086][T16794]  dump_stack_lvl+0x100/0x190
[  861.370121][T16794]  should_fail_ex.cold+0x5/0xa
[  861.370144][T16794]  should_failslab+0xc2/0x120
[  861.370166][T16794]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  861.370194][T16794]  ? skb_clone+0x190/0x400
[  861.370217][T16794]  skb_clone+0x190/0x400
[  861.370236][T16794]  netlink_deliver_tap+0xaed/0xcc0
[  861.370263][T16794]  netlink_dump+0x909/0xd00
[  861.370287][T16794]  ? __pfx_netlink_dump+0x10/0x10
[  861.370307][T16794]  ? __netlink_lookup+0x65c/0x900
[  861.370342][T16794]  __netlink_dump_start+0x6d6/0x990
[  861.370367][T16794]  ? __pfx_inet6_dump_ifacaddr+0x10/0x10
[  861.370465][T16794]  rtnetlink_rcv_msg+0xb3e/0xe90
[  861.370502][T16794]  ? __pfx_inet6_dump_ifacaddr+0x10/0x10
[  861.370530][T16794]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  861.370550][T16794]  ? __pfx_inet6_dump_ifacaddr+0x10/0x10
[  861.370582][T16794]  ? ref_tracker_free+0x37e/0x6c0
[  861.370603][T16794]  netlink_rcv_skb+0x159/0x420
[  861.370626][T16794]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  861.370655][T16794]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  861.370686][T16794]  ? netlink_deliver_tap+0x1ae/0xcc0
[  861.370713][T16794]  netlink_unicast+0x585/0x850
[  861.370739][T16794]  ? __pfx_netlink_unicast+0x10/0x10
[  861.370769][T16794]  netlink_sendmsg+0x8b0/0xda0
[  861.370797][T16794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  861.370819][T16794]  ? __import_iovec+0x1d2/0x640
[  861.370846][T16794]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  861.370869][T16794]  ____sys_sendmsg+0x9e1/0xb70
[  861.370891][T16794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  861.370916][T16794]  ? __pfx_____sys_sendmsg+0x10/0x10
[  861.370948][T16794]  ___sys_sendmsg+0x190/0x1e0
[  861.370974][T16794]  ? __pfx____sys_sendmsg+0x10/0x10
[  861.371024][T16794]  __sys_sendmsg+0x170/0x220
[  861.371043][T16794]  ? __pfx___sys_sendmsg+0x10/0x10
[  861.371070][T16794]  ? rcu_is_watching+0x12/0xc0
[  861.371094][T16794]  do_syscall_64+0x115/0x840
[  861.371119][T16794]  ? clear_bhb_loop+0x40/0x90
[  861.371141][T16794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.371159][T16794] RIP: 0033:0x7f1bfa19ce59
[  861.371175][T16794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  861.371192][T16794] RSP: 002b:00007f1bf83ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  861.371211][T16794] RAX: ffffffffffffffda RBX: 00007f1bfa415fa0 RCX: 00007f1bfa19ce59
[  861.371225][T16794] RDX: 0000000000008092 RSI: 0000200000000100 RDI: 0000000000000005
[  861.371236][T16794] RBP: 00007f1bf83ee090 R08: 0000000000000000 R09: 0000000000000000
[  861.371247][T16794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  861.371258][T16794] R13: 00007f1bfa416038 R14: 00007f1bfa415fa0 R15: 00007ffd403db678
[  861.371281][T16794]  </TASK>
[  861.963119][T16800] Invalid ELF header magic: != ELF
[  862.249953][T10590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  862.268281][T10590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  862.283922][T10590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  862.298566][T10590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  862.306635][T10590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  863.507353][T16821] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0
[  863.999702][T10591] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.233947][T10591] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.357371][T10590] Bluetooth: hci1: command tx timeout
[  864.518012][T10591] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.766891][T16835] ubi0: attaching mtd0
[  864.822902][T16835] ubi0: scanning is finished
[  864.880596][T16835] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  865.248252][T16831] kexec: Could not allocate control_code_buffer
[  865.461252][T16835] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  865.847851][T10591] bridge_slave_1: left allmulticast mode
[  865.880671][T10591] bridge_slave_1: left promiscuous mode
[  865.907476][T10591] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.942801][T10591] bridge_slave_0: left allmulticast mode
[  865.977924][T10591] bridge_slave_0: left promiscuous mode
[  866.017589][T10591] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.427711][T10590] Bluetooth: hci1: command tx timeout
[  866.589911][T10591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.643874][T10591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.683428][T10591] bond0 (unregistering): Released all slaves
[  866.992993][T10591] ovs_: left promiscuous mode
[  867.079423][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5
[  867.146677][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  867.153182][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  867.228281][T16803] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.241849][T16803] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.269218][T16803] bridge_slave_0: entered allmulticast mode
[  867.299070][T16803] bridge_slave_0: entered promiscuous mode
[  867.513984][T16803] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.547749][T16803] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.577038][T16803] bridge_slave_1: entered allmulticast mode
[  867.612785][T16803] bridge_slave_1: entered promiscuous mode
[  867.962650][T16803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  868.032203][T16803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.495950][T10590] Bluetooth: hci1: command tx timeout
[  868.681126][T16803] team0: Port device team_slave_0 added
[  868.714343][T16803] team0: Port device team_slave_1 added
[  868.941747][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6
[  868.967130][T10591] hsr_slave_1: left promiscuous mode
[  868.979024][T10591] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  868.997348][T10591] batman_adv: batadv0: Removing interface: batadv_slave_0
[  869.017754][T10591] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  869.036935][T10591] batman_adv: batadv0: Removing interface: batadv_slave_1
[  869.067954][T10591] veth1_macvtap: left promiscuous mode
[  869.081365][T10591] veth0_macvtap: left promiscuous mode
[  869.095491][T10591] veth1_vlan: left promiscuous mode
[  869.109482][T10591] veth0_vlan: left promiscuous mode
[  869.479497][T10591] team0 (unregistering): Port device team_slave_1 removed
[  869.499588][T10591] team0 (unregistering): Port device team_slave_0 removed
[  869.825118][T16803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  869.847955][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  869.905695][T16803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.019186][T16803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.059687][T16803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.124997][T16803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  870.462815][T16803] hsr_slave_0: entered promiscuous mode
[  870.484355][T16803] hsr_slave_1: entered promiscuous mode
[  870.508801][T16803] debugfs: 'hsr0' already exists in 'hsr'
[  870.520458][T16803] Cannot create hsr debugfs directory
[  870.565695][T10590] Bluetooth: hci1: command tx timeout
[  871.961418][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7
[  874.373897][T16803] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  874.445598][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  874.492978][T16803] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  874.550896][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  874.595968][T16803] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  874.673056][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  874.721455][T16803] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  874.799512][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  874.875832][T16974] Invalid ELF header magic: != ELF
[  875.273069][T16803] 8021q: adding VLAN 0 to HW filter on device bond0
[  875.371101][T16803] 8021q: adding VLAN 0 to HW filter on device team0
[  875.441324][T11223] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.448486][T11223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.555826][T11222] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.563013][T11222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  875.604092][T16999] program syz.1.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  876.028959][T16987] ubi9: attaching mtd2
[  876.129456][T16987] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74)
[  877.454589][T17036] openvswitch: netlink: Flow key attribute not present in set flow.
[  877.503493][T16803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  877.544779][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  877.620334][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  877.632655][   T30] audit: type=1800 audit(1843104629.561:36): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2451" name="dbroot" dev="configfs" ino=73697 res=0 errno=0
[  877.980861][T16803] veth0_vlan: entered promiscuous mode
[  878.042184][T16803] veth1_vlan: entered promiscuous mode
[  878.160120][T16803] veth0_macvtap: entered promiscuous mode
[  878.207309][T16803] veth1_macvtap: entered promiscuous mode
[  878.304451][T16803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  878.389262][T16803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  878.462279][T11234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.515686][T11234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.596998][T11234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.650824][T11234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  879.031007][T11223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.089895][T11223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.229670][T14651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.279152][T14651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  881.432209][T17075] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  882.096550][T17064] Process accounting paused
[  883.917593][T17114] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input66
[  885.179625][T17143] ima: policy update failed
[  885.223573][   T30] audit: type=1802 audit(1843104637.201:37): pid=17143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2467" res=0 errno=0
[  887.234383][T17163] nbd: socks must be embedded in a SOCK_ITEM attr
[  887.286603][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2470'.
[  887.351920][T17162] bond0: invalid ARP target specified
[  887.424644][T17163] block nbd0: shutting down sockets
[  888.490580][T17182] device-mapper: ioctl: Invalid ioctl structure: name ��������d, dev 3000000000
[  889.625243][T17196] ovs_: entered promiscuous mode
[  890.989957][   T30] audit: type=1804 audit(1843104642.991:38): pid=17223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2483" name="/newroot/12/file0" dev="tmpfs" ino=80 res=1 errno=0
[  891.222751][T17229] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2484'.
[  891.361938][T17228] openvswitch: ovs_: Dropping previously announced user features
[  891.903885][T17233] bond0: invalid ARP target specified
[  891.977618][T17233] nbd: socks must be embedded in a SOCK_ITEM attr
[  892.007098][T17233] block nbd0: shutting down sockets
[  892.049636][T17239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2485'.
[  892.786140][T17180] kexec: Could not allocate control_code_buffer
[  892.997229][T17250] Invalid ELF header magic: != ELF
[  894.966585][T17267] 
[  895.638100][T17284] Invalid ELF header magic: != ELF
[  895.855621][T17287] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2499'.
[  896.188134][T17295] FAULT_INJECTION: forcing a failure.
[  896.188134][T17295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  896.257512][T17295] CPU: 0 UID: 0 PID: 17295 Comm: syz.0.2503 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  896.257544][T17295] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  896.257551][T17295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  896.257562][T17295] Call Trace:
[  896.257569][T17295]  <TASK>
[  896.257577][T17295]  dump_stack_lvl+0x100/0x190
[  896.257616][T17295]  should_fail_ex.cold+0x5/0xa
[  896.257640][T17295]  _copy_to_user+0x32/0xd0
[  896.257670][T17295]  simple_read_from_buffer+0xcb/0x170
[  896.257694][T17295]  proc_fail_nth_read+0x1af/0x230
[  896.257724][T17295]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  896.257754][T17295]  ? rw_verify_area+0xce/0x6d0
[  896.257772][T17295]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  896.257799][T17295]  vfs_read+0x1e4/0xb30
[  896.257822][T17295]  ? __pfx_vfs_read+0x10/0x10
[  896.257841][T17295]  ? __fget_files+0x215/0x3d0
[  896.257867][T17295]  ? __fget_files+0x21f/0x3d0
[  896.257893][T17295]  ksys_read+0x12a/0x250
[  896.257913][T17295]  ? __pfx_ksys_read+0x10/0x10
[  896.257934][T17295]  ? rcu_is_watching+0x12/0xc0
[  896.257960][T17295]  do_syscall_64+0x115/0x840
[  896.257988][T17295]  ? clear_bhb_loop+0x40/0x90
[  896.258010][T17295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.258030][T17295] RIP: 0033:0x7f15c535d68e
[  896.258045][T17295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  896.258064][T17295] RSP: 002b:00007f15c35edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  896.258083][T17295] RAX: ffffffffffffffda RBX: 00007f15c35ee6c0 RCX: 00007f15c535d68e
[  896.258095][T17295] RDX: 000000000000000f RSI: 00007f15c35ee0a0 RDI: 0000000000000006
[  896.258107][T17295] RBP: 00007f15c35ee090 R08: 0000000000000000 R09: 0000000000000000
[  896.258118][T17295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  896.258129][T17295] R13: 00007f15c5616038 R14: 00007f15c5615fa0 R15: 00007ffea5d91768
[  896.258153][T17295]  </TASK>
[  896.520098][T17298] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  897.699267][T17332] FAULT_INJECTION: forcing a failure.
[  897.699267][T17332] name failslab, interval 1, probability 0, space 0, times 0
[  897.774568][T17332] CPU: 0 UID: 0 PID: 17332 Comm: syz.2.2514 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  897.774603][T17332] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  897.774611][T17332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  897.774622][T17332] Call Trace:
[  897.774629][T17332]  <TASK>
[  897.774637][T17332]  dump_stack_lvl+0x100/0x190
[  897.774674][T17332]  should_fail_ex.cold+0x5/0xa
[  897.774698][T17332]  should_failslab+0xc2/0x120
[  897.774721][T17332]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  897.774751][T17332]  ? __anon_vma_prepare+0x344/0x5e0
[  897.774781][T17332]  __anon_vma_prepare+0x344/0x5e0
[  897.774807][T17332]  ? __filemap_get_folio_mpol+0x3ba/0xe70
[  897.774826][T17332]  ? __pmd_alloc+0x3f6/0x950
[  897.774854][T17332]  __vmf_anon_prepare+0x11f/0x250
[  897.774879][T17332]  hugetlb_no_page+0xf6f/0x1b00
[  897.774907][T17332]  ? huge_pte_alloc+0x4ce/0x730
[  897.774934][T17332]  hugetlb_fault+0x5e5/0x1410
[  897.774963][T17332]  ? __pfx_hugetlb_fault+0x10/0x10
[  897.774997][T17332]  ? find_vma+0xbf/0x140
[  897.775016][T17332]  ? __pfx_find_vma+0x10/0x10
[  897.775038][T17332]  handle_mm_fault+0x5ff/0xa30
[  897.775070][T17332]  do_user_addr_fault+0x74c/0x12f0
[  897.775095][T17332]  ? trace_page_fault_kernel+0x7a/0x200
[  897.775118][T17332]  exc_page_fault+0x6f/0xd0
[  897.775151][T17332]  asm_exc_page_fault+0x26/0x30
[  897.775170][T17332] RIP: 0010:rep_movs_alternative+0x30/0x90
[  897.775190][T17332] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  897.775208][T17332] RSP: 0018:ffffc900034efd90 EFLAGS: 00050216
[  897.775223][T17332] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000020
[  897.775235][T17332] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900034efe30
[  897.775246][T17332] RBP: 0000000000000020 R08: 0000000000000001 R09: fffff5200069dfc9
[  897.775258][T17332] R10: ffffc900034efe4f R11: 0000000000000000 R12: 0000000000000000
[  897.775269][T17332] R13: ffffc900034efe30 R14: ffffc900034efe30 R15: dffffc0000000000
[  897.775293][T17332]  _copy_from_user+0x98/0xd0
[  897.775320][T17332]  do_fcntl+0xf0c/0x1670
[  897.775347][T17332]  ? __pfx_do_fcntl+0x10/0x10
[  897.775372][T17332]  ? __fget_files+0x215/0x3d0
[  897.775401][T17332]  ? tomoyo_file_fcntl+0x6c/0xc0
[  897.775424][T17332]  __x64_sys_fcntl+0x163/0x200
[  897.775454][T17332]  do_syscall_64+0x115/0x840
[  897.775479][T17332]  ? clear_bhb_loop+0x40/0x90
[  897.775501][T17332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.775519][T17332] RIP: 0033:0x7f5b7599ce59
[  897.775535][T17332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.775553][T17332] RSP: 002b:00007f5b767d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  897.775569][T17332] RAX: ffffffffffffffda RBX: 00007f5b75c16090 RCX: 00007f5b7599ce59
[  897.775581][T17332] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000001
[  897.775591][T17332] RBP: 00007f5b75a32d6f R08: 0000000000000000 R09: 0000000000000000
[  897.775602][T17332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.775613][T17332] R13: 00007f5b75c16128 R14: 00007f5b75c16090 R15: 00007fff6fb3ddd8
[  897.775637][T17332]  </TASK>
[  903.514436][T17438] Invalid ELF header magic: != ELF
[  904.772383][T17455] bond0: invalid ARP target specified
[  904.909709][T17459] nbd: socks must be embedded in a SOCK_ITEM attr
[  904.979796][T17459] block nbd0: shutting down sockets
[  905.171725][T17455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2545'.
[  906.205708][T17471] nbd: socks must be embedded in a SOCK_ITEM attr
[  906.335245][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2550'.
[  906.576234][T17471] block nbd0: shutting down sockets
[  908.198003][T17488] Process accounting resumed
[  909.239701][T17527] bond0: Unable to set down delay as MII monitoring is disabled
[  909.954278][T17542] ovs_: entered promiscuous mode
[  911.882397][T17575] nbd: socks must be embedded in a SOCK_ITEM attr
[  911.909349][T17575] block nbd0: shutting down sockets
[  912.471968][T17525] kexec: Could not allocate control_code_buffer
[  913.068016][T17577] Process accounting resumed
[  913.680246][T17601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2580'.
[  914.930192][T17628] Invalid ELF header magic: != ELF
[  916.333121][T17660] Invalid ELF header magic: != ELF
[  916.780775][T17672] smc: net device dummy0 applied user defined pnetid DUMMY0
[  917.708305][T17681] bond0: invalid ARP target specified
[  917.790810][T17681] nbd: socks must be embedded in a SOCK_ITEM attr
[  917.841432][T17681] block nbd0: shutting down sockets
[  918.313679][   T30] audit: type=1804 audit(1843104670.453:39): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2602" name="/newroot/56/file0" dev="tmpfs" ino=313 res=1 errno=0
[  918.472759][T17696] openvswitch: ovs_: Dropping previously announced user features
[  918.617033][T17699] Invalid ELF header magic: != ELF
[  919.993302][T17685] kexec: Could not allocate control_code_buffer
[  920.582709][T17736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.656885][T17736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  920.713620][   T30] audit: type=1800 audit(1843104672.865:40): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2615" name="dbroot" dev="configfs" ino=78044 res=0 errno=0
[  921.118052][T17744] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input68
[  921.352521][T17747] nbd: socks must be embedded in a SOCK_ITEM attr
[  921.434072][T17747] block nbd0: shutting down sockets
[  923.295069][T17788] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input69
[  923.317816][T17789] nbd: socks must be embedded in a SOCK_ITEM attr
[  923.359579][T17786] bond0: invalid ARP target specified
[  923.421899][T17789] block nbd0: shutting down sockets
[  924.788630][T17813] 
[  925.989103][T17826] nbd: socks must be embedded in a SOCK_ITEM attr
[  926.134286][T17826] block nbd0: shutting down sockets
[  926.526508][T17837] nbd: socks must be embedded in a SOCK_ITEM attr
[  926.586519][T17837] block nbd0: shutting down sockets
[  926.761370][T17841] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input70
[  928.267475][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  928.273887][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  928.730866][T17877] bond0: invalid ARP target specified
[  928.823051][T17877] nbd: socks must be embedded in a SOCK_ITEM attr
[  928.882788][T17877] block nbd0: shutting down sockets
[  928.904273][   T30] audit: type=1326 audit(1843104681.108:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17882 comm="syz.4.2653" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03bed9ce59 code=0x0
[  929.093889][T17888] 
[  929.520417][T17901] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input71
[  930.092126][T17890] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  930.421992][T17918] FAULT_INJECTION: forcing a failure.
[  930.421992][T17918] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  930.497743][T17918] CPU: 0 UID: 0 PID: 17918 Comm: syz.1.2662 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  930.497776][T17918] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  930.497783][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  930.497793][T17918] Call Trace:
[  930.497800][T17918]  <TASK>
[  930.497807][T17918]  dump_stack_lvl+0x100/0x190
[  930.497842][T17918]  should_fail_ex.cold+0x5/0xa
[  930.497865][T17918]  _copy_from_user+0x2e/0xd0
[  930.497891][T17918]  memdup_user+0x6b/0xe0
[  930.497910][T17918]  nvram_misc_write+0x92/0xf0
[  930.497940][T17918]  vfs_write+0x2aa/0x1070
[  930.497962][T17918]  ? __pfx_nvram_misc_write+0x10/0x10
[  930.497989][T17918]  ? __pfx_vfs_write+0x10/0x10
[  930.498008][T17918]  ? find_held_lock+0x2b/0x80
[  930.498030][T17918]  ? __fget_files+0x215/0x3d0
[  930.498050][T17918]  ? __fget_files+0x215/0x3d0
[  930.498073][T17918]  ? __fget_files+0x21f/0x3d0
[  930.498099][T17918]  ksys_write+0x12a/0x250
[  930.498119][T17918]  ? __pfx_ksys_write+0x10/0x10
[  930.498141][T17918]  ? rcu_is_watching+0x12/0xc0
[  930.498164][T17918]  do_syscall_64+0x115/0x840
[  930.498189][T17918]  ? clear_bhb_loop+0x40/0x90
[  930.498210][T17918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.498229][T17918] RIP: 0033:0x7f1bfa19ce59
[  930.498245][T17918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  930.498262][T17918] RSP: 002b:00007f1bf83ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  930.498280][T17918] RAX: ffffffffffffffda RBX: 00007f1bfa415fa0 RCX: 00007f1bfa19ce59
[  930.498292][T17918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  930.498302][T17918] RBP: 00007f1bf83ee090 R08: 0000000000000000 R09: 0000000000000000
[  930.498313][T17918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  930.498323][T17918] R13: 00007f1bfa416038 R14: 00007f1bfa415fa0 R15: 00007ffd403db678
[  930.498345][T17918]  </TASK>
[  930.850011][T17922] Invalid ELF header magic: != ELF
[  931.916588][T17947] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input72
[  932.919957][T17964] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2672'.
[  933.859865][T17974] Invalid ELF header magic: != ELF
[  935.076928][T17997] openvswitch: ovs_: Dropping previously announced user features
[  936.038228][T18011] nbd: socks must be embedded in a SOCK_ITEM attr
[  936.124445][T18011] block nbd0: shutting down sockets
[  937.177632][T17979] kexec: Could not allocate control_code_buffer
[  937.627396][T18036] nbd: socks must be embedded in a SOCK_ITEM attr
[  937.662947][T18036] block nbd0: shutting down sockets
[  938.109967][T18028] Process accounting paused
[  938.466879][T18051] nbd: socks must be embedded in a SOCK_ITEM attr
[  938.508408][T18050] bond0: invalid ARP target specified
[  938.548434][T18051] block nbd0: shutting down sockets
[  938.567480][T18055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2695'.
[  938.966710][T18058] kexec: Could not allocate control_code_buffer
[  940.573807][T18101] openvswitch: netlink: Flow key attribute not present in set flow.
[  941.839346][T18117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2708'.
[  942.482444][T18122] Invalid ELF header magic: != ELF
[  943.074837][T18129] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input73
[  943.185976][T18113] kexec: Could not allocate control_code_buffer
[  943.229255][T18120] Process accounting paused
[  944.373668][T18143] openvswitch: ovs_: Dropping previously announced user features
[  945.502982][T18135] kexec: Could not allocate control_code_buffer
[  945.548263][T18160] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2719'.
[  945.847495][T18166] Invalid ELF header magic: != ELF
[  945.960009][T18172] 
[  947.291762][T18197] kexec: Could not allocate control_code_buffer
[  947.790088][T18208] netlink: 322 bytes leftover after parsing attributes in process `syz.0.2731'.
[  948.668240][T18224] 
[  949.805556][T18239] Invalid ELF header magic: != ELF
[  950.878691][T18262] FAULT_INJECTION: forcing a failure.
[  950.878691][T18262] name failslab, interval 1, probability 0, space 0, times 0
[  950.931253][T18262] CPU: 0 UID: 0 PID: 18262 Comm: syz.0.2743 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  950.931297][T18262] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  950.931304][T18262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  950.931314][T18262] Call Trace:
[  950.931321][T18262]  <TASK>
[  950.931328][T18262]  dump_stack_lvl+0x100/0x190
[  950.931365][T18262]  should_fail_ex.cold+0x5/0xa
[  950.931388][T18262]  ? tomoyo_realpath_from_path+0xb6/0x690
[  950.931414][T18262]  should_failslab+0xc2/0x120
[  950.931436][T18262]  __kmalloc_noprof+0xe0/0x850
[  950.931463][T18262]  ? kfree+0x1dd/0x6c0
[  950.931491][T18262]  tomoyo_realpath_from_path+0xb6/0x690
[  950.931522][T18262]  tomoyo_path_number_perm+0x23c/0x580
[  950.931543][T18262]  ? tomoyo_path_number_perm+0x22e/0x580
[  950.931566][T18262]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  950.931611][T18262]  ? find_held_lock+0x2b/0x80
[  950.931632][T18262]  ? __fget_files+0x215/0x3d0
[  950.931652][T18262]  ? hook_file_ioctl_common+0x149/0x410
[  950.931673][T18262]  ? __fget_files+0x215/0x3d0
[  950.931697][T18262]  ? __fget_files+0x21f/0x3d0
[  950.931722][T18262]  security_file_ioctl+0xd3/0x230
[  950.931745][T18262]  __x64_sys_ioctl+0xb7/0x210
[  950.931771][T18262]  do_syscall_64+0x115/0x840
[  950.931796][T18262]  ? clear_bhb_loop+0x40/0x90
[  950.931818][T18262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  950.931836][T18262] RIP: 0033:0x7f15c539ce59
[  950.931852][T18262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  950.931869][T18262] RSP: 002b:00007f15c35ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  950.931888][T18262] RAX: ffffffffffffffda RBX: 00007f15c5615fa0 RCX: 00007f15c539ce59
[  950.931899][T18262] RDX: 0000200000000100 RSI: 0000000000005412 RDI: 0000000000000004
[  950.931910][T18262] RBP: 00007f15c35ee090 R08: 0000000000000000 R09: 0000000000000000
[  950.931921][T18262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  950.931931][T18262] R13: 00007f15c5616038 R14: 00007f15c5615fa0 R15: 00007ffea5d91768
[  950.931955][T18262]  </TASK>
[  950.935562][T18262] ERROR: Out of memory at tomoyo_realpath_from_path.
[  951.639299][T18271] futex_wake_op: syz.1.2744 tries to shift op by -2048; fix this program
[  951.679611][T18271] futex_wake_op: syz.1.2744 tries to shift op by -2048; fix this program
[  952.219819][T18281] 
[  953.124853][T18297] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input74
[  953.589650][T10590] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260
[  953.589680][T10590] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15
[  953.605094][T10590] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  954.422849][T18310] Invalid ELF header magic: != ELF
[  954.481369][T18310] ptrace attach of ""[18311] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[18310]
[  955.087694][T18315] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input75
[  955.183198][T18315] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers
[  955.481529][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2756'.
[  957.208426][T18336] 
[  958.759373][T18365] netlink: 'syz.2.2767': attribute type 19 has an invalid length.
[  958.840557][T18365] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2767'.
[  959.142530][T16448] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  959.177224][T18371] vivid-008: =================  START STATUS  =================
[  959.214019][T18371] vivid-008: ==================  END STATUS  ==================
[  959.471142][T18376] openvswitch: netlink: Flow key attribute not present in set flow.
[  959.986193][T18370] random: crng reseeded on system resumption
[  960.664006][T18405] FAULT_INJECTION: forcing a failure.
[  960.664006][T18405] name failslab, interval 1, probability 0, space 0, times 0
[  960.733417][T18405] CPU: 0 UID: 0 PID: 18405 Comm: syz.2.2776 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  960.733452][T18405] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  960.733460][T18405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  960.733472][T18405] Call Trace:
[  960.733479][T18405]  <TASK>
[  960.733486][T18405]  dump_stack_lvl+0x100/0x190
[  960.733523][T18405]  should_fail_ex.cold+0x5/0xa
[  960.733547][T18405]  should_failslab+0xc2/0x120
[  960.733570][T18405]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  960.733599][T18405]  ? mas_preallocate+0x1105/0x14a0
[  960.733622][T18405]  mas_preallocate+0x1105/0x14a0
[  960.733644][T18405]  ? __pfx_mas_preallocate+0x10/0x10
[  960.733667][T18405]  ? anon_vma_name+0x5a/0x250
[  960.733695][T18405]  __split_vma+0x33d/0xda0
[  960.733724][T18405]  ? __pfx___split_vma+0x10/0x10
[  960.733755][T18405]  ? __pfx_mas_prev+0x10/0x10
[  960.733786][T18405]  vms_gather_munmap_vmas+0x3a5/0x1720
[  960.733815][T18405]  ? validate_mm+0x392/0x4e0
[  960.733842][T18405]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  960.733871][T18405]  ? __pfx_validate_mm+0x10/0x10
[  960.733911][T18405]  do_vmi_align_munmap+0x287/0x5f0
[  960.733943][T18405]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  960.733971][T18405]  ? cap_mmap_addr+0x4b/0x120
[  960.734017][T18405]  do_vmi_munmap+0x1f8/0x3e0
[  960.734047][T18405]  __vm_munmap+0x196/0x390
[  960.734066][T18405]  ? __pfx___vm_munmap+0x10/0x10
[  960.734101][T18405]  __x64_sys_munmap+0x59/0x80
[  960.734124][T18405]  do_syscall_64+0x115/0x840
[  960.734148][T18405]  ? clear_bhb_loop+0x40/0x90
[  960.734179][T18405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.734198][T18405] RIP: 0033:0x7f5b7599cc87
[  960.734214][T18405] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.734232][T18405] RSP: 002b:00007f5b767f6d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[  960.734250][T18405] RAX: ffffffffffffffda RBX: 00007f5b6c000000 RCX: 00007f5b7599cc87
[  960.734263][T18405] RDX: 0000000000000000 RSI: 0000000000600000 RDI: 00007f5b6ba00000
[  960.734274][T18405] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  960.734285][T18405] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[  960.734296][T18405] R13: 0000000000001000 R14: 00007f5b70000000 R15: 0000000000600000
[  960.734321][T18405]  </TASK>
[  961.111503][T16448] Bluetooth: hci3: command 0x0406 tx timeout
[  963.030500][T18447] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input76
[  963.046826][T18448] bond0: invalid ARP target specified
[  963.315587][T18449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2786'.
[  963.362599][T16448] Bluetooth: hci3: command 0x0406 tx timeout
[  963.499732][T18448] nbd: socks must be embedded in a SOCK_ITEM attr
[  963.690499][T18448] block nbd0: shutting down sockets
[  965.431936][T16448] Bluetooth: hci3: command 0x0406 tx timeout
[  965.482468][T18496] Invalid ELF header magic: != ELF
[  966.047429][T18498] [U] 0�="�/�
[  966.088879][T18498] [U] 
[  966.119887][T18498] [U] E�e�Q��@�
[  966.313943][T18497] [U] 
[  966.847671][T18521] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input77
[  967.597494][T18537] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2806'.
[  968.088595][T18552] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2809'.
[  968.129525][T18530] Process accounting resumed
[  968.178040][T18551] Invalid ELF header magic: != ELF
[  968.260879][T18557] FAULT_INJECTION: forcing a failure.
[  968.260879][T18557] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  968.326328][T18557] CPU: 0 UID: 0 PID: 18557 Comm: syz.0.2811 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  968.326362][T18557] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  968.326369][T18557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  968.326379][T18557] Call Trace:
[  968.326386][T18557]  <TASK>
[  968.326394][T18557]  dump_stack_lvl+0x100/0x190
[  968.326429][T18557]  should_fail_ex.cold+0x5/0xa
[  968.326456][T18557]  _copy_to_user+0x32/0xd0
[  968.326482][T18557]  simple_read_from_buffer+0xcb/0x170
[  968.326505][T18557]  proc_fail_nth_read+0x1af/0x230
[  968.326535][T18557]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  968.326564][T18557]  ? rw_verify_area+0xce/0x6d0
[  968.326583][T18557]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  968.326610][T18557]  vfs_read+0x1e4/0xb30
[  968.326633][T18557]  ? __pfx_vfs_read+0x10/0x10
[  968.326652][T18557]  ? __fget_files+0x215/0x3d0
[  968.326678][T18557]  ? __fget_files+0x21f/0x3d0
[  968.326705][T18557]  ksys_read+0x12a/0x250
[  968.326725][T18557]  ? __pfx_ksys_read+0x10/0x10
[  968.326746][T18557]  ? rcu_is_watching+0x12/0xc0
[  968.326770][T18557]  do_syscall_64+0x115/0x840
[  968.326796][T18557]  ? clear_bhb_loop+0x40/0x90
[  968.326817][T18557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  968.326836][T18557] RIP: 0033:0x7f15c535d68e
[  968.326852][T18557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  968.326871][T18557] RSP: 002b:00007f15c35edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  968.326889][T18557] RAX: ffffffffffffffda RBX: 00007f15c35ee6c0 RCX: 00007f15c535d68e
[  968.326901][T18557] RDX: 000000000000000f RSI: 00007f15c35ee0a0 RDI: 0000000000000004
[  968.326911][T18557] RBP: 00007f15c35ee090 R08: 0000000000000000 R09: 0000000000000000
[  968.326921][T18557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  968.326932][T18557] R13: 00007f15c5616038 R14: 00007f15c5615fa0 R15: 00007ffea5d91768
[  968.326955][T18557]  </TASK>
[  968.685464][T18558] FAULT_INJECTION: forcing a failure.
[  968.685464][T18558] name failslab, interval 1, probability 0, space 0, times 0
[  968.698227][T18558] CPU: 0 UID: 0 PID: 18558 Comm: syz.1.2807 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  968.698259][T18558] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  968.698267][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  968.698278][T18558] Call Trace:
[  968.698286][T18558]  <TASK>
[  968.698293][T18558]  dump_stack_lvl+0x100/0x190
[  968.698330][T18558]  should_fail_ex.cold+0x5/0xa
[  968.698354][T18558]  ? security_inode_init_security+0x113/0x370
[  968.698383][T18558]  should_failslab+0xc2/0x120
[  968.698405][T18558]  __kmalloc_noprof+0xe0/0x850
[  968.698439][T18558]  security_inode_init_security+0x113/0x370
[  968.698469][T18558]  ? __pfx_shmem_initxattrs+0x10/0x10
[  968.698493][T18558]  ? __pfx_security_inode_init_security+0x10/0x10
[  968.698526][T18558]  ? make_vfsgid+0xf1/0x140
[  968.698546][T18558]  shmem_mknod+0x2ce/0x480
[  968.698572][T18558]  ? __pfx_shmem_mknod+0x10/0x10
[  968.698603][T18558]  vfs_create+0x301/0x6c0
[  968.698622][T18558]  filename_mknodat+0x2de/0x7f0
[  968.698649][T18558]  ? __pfx_filename_mknodat+0x10/0x10
[  968.698673][T18558]  ? strncpy_from_user+0x19d/0x2d0
[  968.698702][T18558]  ? do_getname+0x191/0x390
[  968.698730][T18558]  __x64_sys_mknod+0x8f/0xc0
[  968.698754][T18558]  do_syscall_64+0x115/0x840
[  968.698780][T18558]  ? clear_bhb_loop+0x40/0x90
[  968.698802][T18558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  968.698821][T18558] RIP: 0033:0x7f1bfa19ce59
[  968.698837][T18558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  968.698855][T18558] RSP: 002b:00007f1bf7b66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  968.698873][T18558] RAX: ffffffffffffffda RBX: 00007f1bfa416360 RCX: 00007f1bfa19ce59
[  968.698886][T18558] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000
[  968.698897][T18558] RBP: 00007f1bfa232d6f R08: 0000000000000000 R09: 0000000000000000
[  968.698908][T18558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  968.698920][T18558] R13: 00007f1bfa4163f8 R14: 00007f1bfa416360 R15: 00007ffd403db678
[  968.698943][T18558]  </TASK>
[  970.868691][T18591] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input78
[  970.883607][T18590] bond0: invalid ARP target specified
[  970.939547][T18590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'.
[  971.439332][T18605] Invalid ELF header magic: != ELF
[  972.114177][T18618] block nbd0: Unsupported socket: should be TCP or UNIX.
[  972.171726][T18619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2824'.
[  972.738060][T18636] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2826'.
[  972.897669][T18634] can: request_module (can-proto-5) failed.
[  973.313479][T18654] Invalid ELF header magic: != ELF
[  973.784331][T18665] 
[  974.806660][T18683] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2838'.
[  976.960112][T18724] 
[  977.320997][T18728] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2849'.
[  978.668756][T18750] FAULT_INJECTION: forcing a failure.
[  978.668756][T18750] name failslab, interval 1, probability 0, space 0, times 0
[  978.762973][T18750] CPU: 0 UID: 0 PID: 18750 Comm: syz.1.2855 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  978.763012][T18750] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  978.763021][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  978.763032][T18750] Call Trace:
[  978.763039][T18750]  <TASK>
[  978.763048][T18750]  dump_stack_lvl+0x100/0x190
[  978.763084][T18750]  should_fail_ex.cold+0x5/0xa
[  978.763108][T18750]  should_failslab+0xc2/0x120
[  978.763129][T18750]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  978.763159][T18750]  ? __d_alloc+0x34/0xa40
[  978.763187][T18750]  __d_alloc+0x34/0xa40
[  978.763214][T18750]  d_alloc_pseudo+0x1c/0xc0
[  978.763232][T18750]  alloc_file_pseudo+0xcf/0x230
[  978.763261][T18750]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  978.763295][T18750]  __shmem_file_setup+0x205/0x460
[  978.763321][T18750]  ? __pfx___shmem_file_setup+0x10/0x10
[  978.763348][T18750]  ? vm_area_alloc+0x1f/0x160
[  978.763376][T18750]  shmem_zero_setup+0x96/0x1b0
[  978.763397][T18750]  __mmap_region+0x2509/0x2dd0
[  978.763428][T18750]  ? __pfx___mmap_region+0x10/0x10
[  978.763457][T18750]  ? __lock_acquire+0x4a5/0x2630
[  978.763486][T18750]  ? rcu_is_watching+0x12/0xc0
[  978.763507][T18750]  ? trace_pelt_se_tp+0x13b/0x190
[  978.763545][T18750]  ? __lock_acquire+0x4a5/0x2630
[  978.763573][T18750]  ? do_raw_spin_unlock+0x145/0x1e0
[  978.763597][T18750]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  978.763641][T18750]  ? rcu_is_watching+0x12/0xc0
[  978.763672][T18750]  ? rcu_is_watching+0x12/0xc0
[  978.763693][T18750]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  978.763716][T18750]  ? lockdep_hardirqs_on+0x78/0x100
[  978.763778][T18750]  mmap_region+0x35d/0x620
[  978.763798][T18750]  ? __pfx_mmap_region+0x10/0x10
[  978.763816][T18750]  ? shmem_get_unmapped_area+0x141/0x960
[  978.763851][T18750]  ? cap_mmap_addr+0x4b/0x120
[  978.763869][T18750]  ? bpf_lsm_mmap_addr+0x9/0x30
[  978.763886][T18750]  ? security_mmap_addr+0x71/0x1e0
[  978.763911][T18750]  ? __get_unmapped_area+0x255/0x3e0
[  978.763936][T18750]  do_mmap+0xc63/0x12f0
[  978.763964][T18750]  ? __pfx_do_mmap+0x10/0x10
[  978.763986][T18750]  ? __pfx_down_write_killable+0x10/0x10
[  978.764019][T18750]  vm_mmap_pgoff+0x29e/0x470
[  978.764046][T18750]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  978.764071][T18750]  ? do_futex+0x192/0x350
[  978.764092][T18750]  ? __pfx_do_futex+0x10/0x10
[  978.764115][T18750]  ksys_mmap_pgoff+0xe4/0x610
[  978.764136][T18750]  ? __x64_sys_futex+0x358/0x4d0
[  978.764156][T18750]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  978.764177][T18750]  ? xfd_validate_state+0x129/0x190
[  978.764196][T18750]  ? ksys_write+0x1ac/0x250
[  978.764221][T18750]  __x64_sys_mmap+0x125/0x190
[  978.764242][T18750]  do_syscall_64+0x115/0x840
[  978.764266][T18750]  ? clear_bhb_loop+0x40/0x90
[  978.764288][T18750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  978.764308][T18750] RIP: 0033:0x7f1bfa19ce59
[  978.764324][T18750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  978.764342][T18750] RSP: 002b:00007f1bf83ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  978.764360][T18750] RAX: ffffffffffffffda RBX: 00007f1bfa415fa0 RCX: 00007f1bfa19ce59
[  978.764372][T18750] RDX: 0000000000000007 RSI: 0000000002020009 RDI: 0000000002021000
[  978.764383][T18750] RBP: 00007f1bfa232d6f R08: fffffffffffffffa R09: 0000000000008000
[  978.764395][T18750] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  978.764405][T18750] R13: 00007f1bfa416038 R14: 00007f1bfa415fa0 R15: 00007ffd403db678
[  978.764429][T18750]  </TASK>
[  978.796825][T18753] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2857'.
[  980.537157][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'.
[  980.781167][T18790] netlink: 'syz.0.2863': attribute type 19 has an invalid length.
[  980.817339][T18790] netlink: 226 bytes leftover after parsing attributes in process `syz.0.2863'.
[  981.050964][T18792] ptrace attach of ""[18793] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[18792]
[  981.969634][T18776] kexec: Could not allocate control_code_buffer
[  984.276151][T18840] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input79
[  984.825606][T18852] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2879'.
[  984.910204][T10590] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260
[  984.910235][T10590] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15
[  984.926553][T10590] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  985.870272][T18868] kexec: Could not allocate control_code_buffer
[  986.191509][T18871] random: crng reseeded on system resumption
[  986.381095][T10590] Bluetooth: hci1: command 0x0406 tx timeout
[  987.026323][T18887] openvswitch: ovs_: Dropping previously announced user features
[  987.839059][T18906] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input80
[  988.689451][T18903] Invalid ELF header magic: != ELF
[  989.390556][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  989.397148][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  989.899898][   T30] audit: type=1804 audit(1843104742.415:42): pid=18937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2899" name="/newroot/128/file0" dev="tmpfs" ino=687 res=1 errno=0
[  989.945349][T18944] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2902'.
[  990.856567][T18965] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  991.413807][T18969] FAULT_INJECTION: forcing a failure.
[  991.413807][T18969] name failslab, interval 1, probability 0, space 0, times 0
[  991.641000][T18969] CPU: 0 UID: 0 PID: 18969 Comm: syz.1.2910 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  991.641034][T18969] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  991.641042][T18969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  991.641054][T18969] Call Trace:
[  991.641060][T18969]  <TASK>
[  991.641068][T18969]  dump_stack_lvl+0x100/0x190
[  991.641105][T18969]  should_fail_ex.cold+0x5/0xa
[  991.641128][T18969]  ? lsm_blob_alloc+0x68/0x90
[  991.641156][T18969]  should_failslab+0xc2/0x120
[  991.641178][T18969]  __kmalloc_noprof+0xe0/0x850
[  991.641205][T18969]  ? trace_kmem_cache_alloc+0xd5/0x100
[  991.641230][T18969]  lsm_blob_alloc+0x68/0x90
[  991.641257][T18969]  security_sk_alloc+0x2d/0x290
[  991.641279][T18969]  sk_prot_alloc+0x1d1/0x2a0
[  991.641305][T18969]  sk_alloc+0x36/0xe80
[  991.641333][T18969]  inet_create+0x3a0/0x1060
[  991.641363][T18969]  ? inet_create+0x94/0x1060
[  991.641393][T18969]  __sock_create+0x339/0x860
[  991.641421][T18969]  __sys_socket+0x14d/0x260
[  991.641445][T18969]  ? __pfx___sys_socket+0x10/0x10
[  991.641469][T18969]  ? ksys_write+0x1ac/0x250
[  991.641495][T18969]  __x64_sys_socket+0x72/0xb0
[  991.641518][T18969]  ? lockdep_hardirqs_on+0x78/0x100
[  991.641543][T18969]  do_syscall_64+0x115/0x840
[  991.641567][T18969]  ? clear_bhb_loop+0x40/0x90
[  991.641589][T18969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.641608][T18969] RIP: 0033:0x7f1bfa19ce59
[  991.641623][T18969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  991.641642][T18969] RSP: 002b:00007f1bf83ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  991.641669][T18969] RAX: ffffffffffffffda RBX: 00007f1bfa415fa0 RCX: 00007f1bfa19ce59
[  991.641681][T18969] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000002
[  991.641692][T18969] RBP: 00007f1bfa232d6f R08: 0000000000000000 R09: 0000000000000000
[  991.641703][T18969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.641713][T18969] R13: 00007f1bfa416038 R14: 00007f1bfa415fa0 R15: 00007ffd403db678
[  991.641736][T18969]  </TASK>
[  991.856494][T18978] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2913'.
[  992.835426][T10590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  992.848167][T10590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  992.856601][T10590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  992.871465][T10590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  992.892814][T10590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  994.544015][T14651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  994.958210][T10590] Bluetooth: hci0: command tx timeout
[  995.043950][T14651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  995.298260][T19024] block nbd0: Unsupported socket: should be TCP or UNIX.
[  995.327213][T19022] bond0: invalid ARP target specified
[  995.385439][T19022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2921'.
[  995.977969][T18990] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.004432][T18990] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.027494][T18990] bridge_slave_0: entered allmulticast mode
[  996.047337][T18990] bridge_slave_0: entered promiscuous mode
[  996.065324][T18990] bridge0: port 2(bridge_slave_1) entered blocking state
[  996.082373][T18990] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.100814][T18990] bridge_slave_1: entered allmulticast mode
[  996.111886][T18990] bridge_slave_1: entered promiscuous mode
[  996.171647][T18990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  996.198617][T18990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  996.239409][T18990] team0: Port device team_slave_0 added
[  996.249021][T18990] team0: Port device team_slave_1 added
[  996.277665][T18990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  996.284973][T18990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  996.317014][T18990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  996.330703][T18990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  996.338757][T18990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  996.367139][T18990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.413817][T18990] hsr_slave_0: entered promiscuous mode
[  996.420375][T18990] hsr_slave_1: entered promiscuous mode
[  996.428632][T18990] debugfs: 'hsr0' already exists in 'hsr'
[  996.436054][T18990] Cannot create hsr debugfs directory
[  996.608164][T14651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  996.695057][T19033] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input81
[  996.973510][T14651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  997.027628][T10590] Bluetooth: hci0: command tx timeout
[  997.705952][T19055] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input82
[  998.164385][T19054] Process accounting paused
[  998.320481][T19064] Invalid ELF header magic: != ELF
[  999.097709][T10590] Bluetooth: hci0: command tx timeout
[  999.570549][T19085] kexec: Could not allocate control_code_buffer
[  999.928012][T19095] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2937'.
[ 1000.717964][T19107] : Can't lookup blockdev
[ 1001.165905][T10590] Bluetooth: hci0: command tx timeout
[ 1007.619040][T19213] ubi9: attaching mtd2
[ 1007.624561][T19213] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74)
[ 1009.195580][T19246] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2985'.
[ 1010.402677][T16448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1010.413867][T16448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1010.431547][T16448] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1010.444389][T16448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1010.452591][T16448] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1012.546889][T16448] Bluetooth: hci2: command tx timeout
[ 1012.766966][T19261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1012.784329][T19261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1012.806955][T19261] bridge_slave_0: entered allmulticast mode
[ 1012.824368][T19261] bridge_slave_0: entered promiscuous mode
[ 1012.844778][T19261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1012.862322][T19261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.881664][T19261] bridge_slave_1: entered allmulticast mode
[ 1012.898333][T19261] bridge_slave_1: entered promiscuous mode
[ 1012.999211][T19261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.055355][T19261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.159080][T19261] team0: Port device team_slave_0 added
[ 1013.187502][T19261] team0: Port device team_slave_1 added
[ 1013.281108][T19261] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1013.308014][T19261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1013.366427][T19261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1013.407636][T19261] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1013.430477][T19261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1013.516303][T19261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1013.699055][T19261] hsr_slave_0: entered promiscuous mode
[ 1013.728246][T19261] hsr_slave_1: entered promiscuous mode
[ 1013.759157][T19261] debugfs: 'hsr0' already exists in 'hsr'
[ 1013.771926][T19261] Cannot create hsr debugfs directory
[ 1013.805829][T19309] ptrace attach of ""[19310] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[19309]
[ 1014.220931][T19320] 
[ 1014.615998][T16448] Bluetooth: hci2: command tx timeout
[ 1015.202180][T19338] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1016.685212][T16448] Bluetooth: hci2: command tx timeout
[ 1017.786425][T19355] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3003'.
[ 1018.581823][T19370] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3007'.
[ 1018.754444][T16448] Bluetooth: hci2: command tx timeout
[ 1019.735917][T19389] Invalid ELF header magic: != ELF
[ 1019.879071][T19394] 
[ 1020.019368][T19396] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3013'.
[ 1021.438477][T19419] Invalid ELF header magic: != ELF
[ 1022.006693][   T30] audit: type=1804 audit(1843104774.682:43): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3020" name="/newroot/155/file0" dev="tmpfs" ino=814 res=1 errno=0
[ 1022.516893][T19431] 
[ 1028.051008][T19515] Process accounting resumed
[ 1028.310481][T19522] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3046'.
[ 1028.477561][T19525] netlink: 186 bytes leftover after parsing attributes in process `syz.4.3047'.
[ 1028.799866][T19534] kexec: Could not allocate control_code_buffer
[ 1028.857199][T19540] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3050'.
[ 1029.387793][T19548] Invalid ELF header magic: != ELF
[ 1030.398191][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'.
[ 1030.513088][T19568] openvswitch: ovs_: Dropping previously announced user features
[ 1031.457780][T19558] kexec: Could not allocate control_code_buffer
[ 1032.159925][T16448] Bluetooth: hci1: unexpected event 0x18 length: 726 > 23
[ 1032.428838][T19581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1033.216706][T19578] kexec: Could not allocate control_code_buffer
[ 1034.885433][T19649] FAULT_INJECTION: forcing a failure.
[ 1034.885433][T19649] name failslab, interval 1, probability 0, space 0, times 0
[ 1034.898437][T19649] CPU: 0 UID: 0 PID: 19649 Comm: syz.0.3076 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1034.898469][T19649] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1034.898477][T19649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1034.898488][T19649] Call Trace:
[ 1034.898495][T19649]  <TASK>
[ 1034.898503][T19649]  dump_stack_lvl+0x100/0x190
[ 1034.898543][T19649]  should_fail_ex.cold+0x5/0xa
[ 1034.898567][T19649]  should_failslab+0xc2/0x120
[ 1034.898591][T19649]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[ 1034.898625][T19649]  ? __d_alloc+0x34/0xa40
[ 1034.898654][T19649]  __d_alloc+0x34/0xa40
[ 1034.898681][T19649]  d_alloc_pseudo+0x1c/0xc0
[ 1034.898699][T19649]  alloc_file_pseudo+0xcf/0x230
[ 1034.898728][T19649]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1034.898761][T19649]  __shmem_file_setup+0x205/0x460
[ 1034.898788][T19649]  ? __pfx___shmem_file_setup+0x10/0x10
[ 1034.898815][T19649]  ? vm_area_alloc+0x1f/0x160
[ 1034.898844][T19649]  shmem_zero_setup+0x96/0x1b0
[ 1034.898864][T19649]  __mmap_region+0x2509/0x2dd0
[ 1034.898895][T19649]  ? __pfx___mmap_region+0x10/0x10
[ 1034.898925][T19649]  ? __lock_acquire+0x4a5/0x2630
[ 1034.898956][T19649]  ? find_held_lock+0x2b/0x80
[ 1034.898977][T19649]  ? process_measurement+0x4c8/0x2350
[ 1034.899050][T19649]  ? process_measurement+0x4c8/0x2350
[ 1034.899079][T19649]  ? __lock_acquire+0x4a5/0x2630
[ 1034.899107][T19649]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1034.899129][T19649]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1034.899169][T19649]  ? rcu_is_watching+0x12/0xc0
[ 1034.899208][T19649]  ? rcu_is_watching+0x12/0xc0
[ 1034.899230][T19649]  ? finish_task_switch.isra.0+0x2cb/0x1010
[ 1034.899253][T19649]  ? lockdep_hardirqs_on+0x78/0x100
[ 1034.899315][T19649]  mmap_region+0x35d/0x620
[ 1034.899336][T19649]  ? __pfx_mmap_region+0x10/0x10
[ 1034.899354][T19649]  ? shmem_get_unmapped_area+0x141/0x960
[ 1034.899383][T19649]  ? cap_mmap_addr+0x4b/0x120
[ 1034.899401][T19649]  ? bpf_lsm_mmap_addr+0x9/0x30
[ 1034.899418][T19649]  ? security_mmap_addr+0x71/0x1e0
[ 1034.899442][T19649]  ? __get_unmapped_area+0x255/0x3e0
[ 1034.899467][T19649]  do_mmap+0xc63/0x12f0
[ 1034.899493][T19649]  ? __pfx_do_mmap+0x10/0x10
[ 1034.899515][T19649]  ? __pfx_down_write_killable+0x10/0x10
[ 1034.899548][T19649]  vm_mmap_pgoff+0x29e/0x470
[ 1034.899575][T19649]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1034.899600][T19649]  ? do_futex+0x192/0x350
[ 1034.899620][T19649]  ? __pfx_do_futex+0x10/0x10
[ 1034.899643][T19649]  ksys_mmap_pgoff+0xe4/0x610
[ 1034.899665][T19649]  ? __x64_sys_futex+0x358/0x4d0
[ 1034.899685][T19649]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 1034.899706][T19649]  ? xfd_validate_state+0x129/0x190
[ 1034.899724][T19649]  ? ksys_write+0x1ac/0x250
[ 1034.899749][T19649]  __x64_sys_mmap+0x125/0x190
[ 1034.899771][T19649]  do_syscall_64+0x115/0x840
[ 1034.899795][T19649]  ? clear_bhb_loop+0x40/0x90
[ 1034.899818][T19649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1034.899837][T19649] RIP: 0033:0x7f15c539ce59
[ 1034.899853][T19649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1034.899872][T19649] RSP: 002b:00007f15c35ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1034.899890][T19649] RAX: ffffffffffffffda RBX: 00007f15c5615fa0 RCX: 00007f15c539ce59
[ 1034.899902][T19649] RDX: 0000000000000007 RSI: 0000000002020009 RDI: 0000000004000000
[ 1034.899913][T19649] RBP: 00007f15c5432d6f R08: fffffffffffffffa R09: 0000000000008000
[ 1034.899924][T19649] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[ 1034.899935][T19649] R13: 00007f15c5616038 R14: 00007f15c5615fa0 R15: 00007ffea5d91768
[ 1034.899959][T19649]  </TASK>
[ 1035.462927][T19654] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3078'.
[ 1035.593135][T19663] 
[ 1036.579402][T19681] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3087'.
[ 1037.709700][T19713] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3095'.
[ 1038.025890][T19723] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3098'.
[ 1038.664046][T19741] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3103'.
[ 1041.250809][T19766] kexec: Could not allocate control_code_buffer
[ 1042.347347][T19792] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3114'.
[ 1042.529291][T19796] FAULT_INJECTION: forcing a failure.
[ 1042.529291][T19796] name failslab, interval 1, probability 0, space 0, times 0
[ 1042.567359][T19796] CPU: 0 UID: 0 PID: 19796 Comm: syz.0.3116 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1042.567393][T19796] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1042.567401][T19796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1042.567412][T19796] Call Trace:
[ 1042.567419][T19796]  <TASK>
[ 1042.567427][T19796]  dump_stack_lvl+0x100/0x190
[ 1042.567464][T19796]  should_fail_ex.cold+0x5/0xa
[ 1042.567488][T19796]  should_failslab+0xc2/0x120
[ 1042.567510][T19796]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1042.567539][T19796]  ? __kernfs_new_node+0xd2/0x9f0
[ 1042.567564][T19796]  __kernfs_new_node+0xd2/0x9f0
[ 1042.567586][T19796]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1042.567612][T19796]  ? find_held_lock+0x2b/0x80
[ 1042.567638][T19796]  ? kernfs_root+0xee/0x2a0
[ 1042.567656][T19796]  ? kernfs_root+0xee/0x2a0
[ 1042.567681][T19796]  kernfs_new_node+0x11b/0x1a0
[ 1042.567708][T19796]  __kernfs_create_file+0x53/0x350
[ 1042.567738][T19796]  sysfs_add_file_mode_ns+0x207/0x3c0
[ 1042.567763][T19796]  sysfs_merge_group+0x194/0x340
[ 1042.567785][T19796]  ? __pfx_sysfs_merge_group+0x10/0x10
[ 1042.567806][T19796]  ? bus_add_device+0x368/0x6b0
[ 1042.567892][T19796]  ? __pfx_bus_add_device+0x10/0x10
[ 1042.567917][T19796]  ? __pfx_dev_add_physical_location+0x10/0x10
[ 1042.567982][T19796]  dpm_sysfs_add+0x237/0x280
[ 1042.568018][T19796]  device_add+0x9ef/0x1950
[ 1042.568041][T19796]  ? __pfx_device_add+0x10/0x10
[ 1042.568060][T19796]  ? lockdep_init_map_type+0x5c/0x250
[ 1042.568090][T19796]  ? __init_waitqueue_head+0xca/0x150
[ 1042.568118][T19796]  rfkill_register+0x1ad/0xb30
[ 1042.568180][T19796]  nfc_register_device+0x11f/0x3e0
[ 1042.568242][T19796]  nci_register_device+0x7f1/0xb80
[ 1042.568285][T19796]  ? __pfx_nci_register_device+0x10/0x10
[ 1042.568310][T19796]  ? lockdep_init_map_type+0x5c/0x250
[ 1042.568343][T19796]  virtual_ncidev_open+0x141/0x220
[ 1042.568383][T19796]  ? __pfx_virtual_ncidev_open+0x10/0x10
[ 1042.568402][T19796]  misc_open+0x26d/0x450
[ 1042.568424][T19796]  ? __pfx_misc_open+0x10/0x10
[ 1042.568443][T19796]  chrdev_open+0x234/0x6a0
[ 1042.568468][T19796]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1042.568491][T19796]  ? __pfx_chrdev_open+0x10/0x10
[ 1042.568515][T19796]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1042.568552][T19796]  do_dentry_open+0x6ab/0x14d0
[ 1042.568575][T19796]  ? __pfx_chrdev_open+0x10/0x10
[ 1042.568603][T19796]  vfs_open+0x82/0x3f0
[ 1042.568634][T19796]  path_openat+0x208c/0x31a0
[ 1042.568666][T19796]  ? __pfx_path_openat+0x10/0x10
[ 1042.568700][T19796]  do_file_open+0x20e/0x430
[ 1042.568726][T19796]  ? __pfx_do_file_open+0x10/0x10
[ 1042.568766][T19796]  ? alloc_fd+0x476/0x790
[ 1042.568791][T19796]  ? do_getname+0x191/0x390
[ 1042.568820][T19796]  do_sys_openat2+0x10d/0x1e0
[ 1042.568847][T19796]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1042.568876][T19796]  ? __fget_files+0x21f/0x3d0
[ 1042.568902][T19796]  __x64_sys_openat+0x12d/0x210
[ 1042.568930][T19796]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1042.568967][T19796]  ? rcu_is_watching+0x12/0xc0
[ 1042.568991][T19796]  do_syscall_64+0x115/0x840
[ 1042.569015][T19796]  ? clear_bhb_loop+0x40/0x90
[ 1042.569037][T19796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1042.569056][T19796] RIP: 0033:0x7f15c539ce59
[ 1042.569073][T19796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1042.569091][T19796] RSP: 002b:00007f15c35ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1042.569109][T19796] RAX: ffffffffffffffda RBX: 00007f15c5615fa0 RCX: 00007f15c539ce59
[ 1042.569122][T19796] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1042.569133][T19796] RBP: 00007f15c5432d6f R08: 0000000000000000 R09: 0000000000000000
[ 1042.569144][T19796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1042.569155][T19796] R13: 00007f15c5616038 R14: 00007f15c5615fa0 R15: 00007ffea5d91768
[ 1042.569179][T19796]  </TASK>
[ 1045.205895][T16448] Bluetooth: hci4: unexpected event 0x18 length: 726 > 23
[ 1045.241032][T19831] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1045.350269][T19831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1045.372154][T19831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1045.392933][   T30] audit: type=1800 audit(1843104798.194:44): pid=19831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3121" name="dbroot" dev="configfs" ino=91979 res=0 errno=0
[ 1046.203043][T19826] kexec: Could not allocate control_code_buffer
[ 1050.167097][T19865] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3132'.
[ 1050.513862][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1050.524217][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[ 1052.634456][T10590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1052.651692][T10590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1052.661889][T10590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1052.673816][T10590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1052.686518][T10590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1053.342157][T19923] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3139'.
[ 1053.525955][T19905] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.542190][T19905] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.556176][T19905] bridge_slave_0: entered allmulticast mode
[ 1053.573611][T19905] bridge_slave_0: entered promiscuous mode
[ 1053.590227][T19905] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.606322][T19905] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.623690][T19905] bridge_slave_1: entered allmulticast mode
[ 1053.637684][T19905] bridge_slave_1: entered promiscuous mode
[ 1053.709735][T19905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1053.737114][T19905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1053.769276][T19905] team0: Port device team_slave_0 added
[ 1053.778236][T19905] team0: Port device team_slave_1 added
[ 1053.807359][T19905] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1053.815476][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1053.842224][T19905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1053.855987][T19905] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1053.863439][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1053.890529][T19905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1053.939969][T19905] hsr_slave_0: entered promiscuous mode
[ 1053.946851][T19905] hsr_slave_1: entered promiscuous mode
[ 1053.954995][T19905] debugfs: 'hsr0' already exists in 'hsr'
[ 1053.960825][T19905] Cannot create hsr debugfs directory
[ 1054.727543][T10590] Bluetooth: hci5: command tx timeout
[ 1056.796760][T10590] Bluetooth: hci5: command tx timeout
[ 1058.865964][T10590] Bluetooth: hci5: command tx timeout
[ 1060.936520][T10590] Bluetooth: hci5: command tx timeout
[ 1070.356558][T16448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1070.372169][T16448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1070.381889][T16448] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1070.391112][T16448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1070.402893][T16448] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1070.909835][T19942] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1070.917144][T19942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1070.924962][T19942] bridge_slave_0: entered allmulticast mode
[ 1070.932483][T19942] bridge_slave_0: entered promiscuous mode
[ 1070.941133][T19942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1070.948571][T19942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1070.956421][T19942] bridge_slave_1: entered allmulticast mode
[ 1070.971176][T19942] bridge_slave_1: entered promiscuous mode
[ 1071.008404][T19942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1071.021205][T19942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1071.056088][T19942] team0: Port device team_slave_0 added
[ 1071.065723][T19942] team0: Port device team_slave_1 added
[ 1071.091631][T19942] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1071.099303][T19942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1071.129040][T19942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1071.141584][T19942] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1071.149094][T19942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1071.176589][T19942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1071.223264][T19942] hsr_slave_0: entered promiscuous mode
[ 1071.229888][T19942] hsr_slave_1: entered promiscuous mode
[ 1071.238877][T19942] debugfs: 'hsr0' already exists in 'hsr'
[ 1071.244859][T19942] Cannot create hsr debugfs directory
[ 1072.475330][T16448] Bluetooth: hci6: command tx timeout
[ 1074.545228][T16448] Bluetooth: hci6: command tx timeout
[ 1076.613861][T10590] Bluetooth: hci6: command tx timeout
[ 1078.682921][T10590] Bluetooth: hci6: command tx timeout
[ 1111.635084][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[ 1111.643028][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[ 1112.886059][T16448] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1112.901154][T16448] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1112.915996][T16448] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1112.925627][T16448] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1112.937227][T16448] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1113.455983][T19967] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1113.468418][T19967] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1113.477617][T19967] bridge_slave_0: entered allmulticast mode
[ 1113.486231][T19967] bridge_slave_0: entered promiscuous mode
[ 1113.495441][T19967] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1113.502927][T19967] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1113.510208][T19967] bridge_slave_1: entered allmulticast mode
[ 1113.518706][T19967] bridge_slave_1: entered promiscuous mode
[ 1113.555269][T19967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1113.568247][T19967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1113.600686][T19967] team0: Port device team_slave_0 added
[ 1113.609703][T19967] team0: Port device team_slave_1 added
[ 1113.637917][T19967] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1113.646208][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1113.673302][T19967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1113.685681][T19967] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1113.694562][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1113.721716][T19967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1113.767904][T19967] hsr_slave_0: entered promiscuous mode
[ 1113.774587][T19967] hsr_slave_1: entered promiscuous mode
[ 1113.782586][T19967] debugfs: 'hsr0' already exists in 'hsr'
[ 1113.788362][T19967] Cannot create hsr debugfs directory
[ 1114.974806][T10590] Bluetooth: hci7: command tx timeout
[ 1117.044087][T10590] Bluetooth: hci7: command tx timeout
[ 1118.798086][T10590] Bluetooth: hci0: command 0x0406 tx timeout
[ 1119.113280][T16448] Bluetooth: hci7: command tx timeout
[ 1121.182595][T10590] Bluetooth: hci7: command tx timeout
[ 1130.904114][T16448] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1130.920631][T16448] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1130.929107][T16448] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1130.939346][T16448] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1130.948665][T16448] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1131.630946][T19990] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1131.647546][T19990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1131.669083][T19990] bridge_slave_0: entered allmulticast mode
[ 1131.687403][T19990] bridge_slave_0: entered promiscuous mode
[ 1131.696291][T19990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1131.717102][T19990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1131.737646][T19990] bridge_slave_1: entered allmulticast mode
[ 1131.745069][T19990] bridge_slave_1: entered promiscuous mode
[ 1131.814811][T19990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1131.842656][T19990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1131.917667][T19990] team0: Port device team_slave_0 added
[ 1131.931237][T19990] team0: Port device team_slave_1 added
[ 1131.996519][T19990] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1132.003524][T19990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1132.075868][T19990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1132.108005][T19990] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1132.124955][T19990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1132.175210][T19990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1132.276585][T19990] hsr_slave_0: entered promiscuous mode
[ 1132.283672][T19990] hsr_slave_1: entered promiscuous mode
[ 1132.304693][T19990] debugfs: 'hsr0' already exists in 'hsr'
[ 1132.314129][T19990] Cannot create hsr debugfs directory
[ 1132.960698][T19969] Bluetooth: hci8: command tx timeout
[ 1134.093178][T19969] Bluetooth: hci2: command 0x0406 tx timeout
[ 1135.029982][T19969] Bluetooth: hci8: command tx timeout
[ 1137.100401][T19969] Bluetooth: hci8: command tx timeout
[ 1139.168384][T19969] Bluetooth: hci8: command tx timeout
[ 1154.290461][   T31] INFO: task kworker/u10:34:14651 blocked for more than 143 seconds.
[ 1154.299666][   T31]       Tainted: G     U       L      syzkaller #0
[ 1154.309200][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1154.320065][   T31] task:kworker/u10:34  state:D stack:24008 pid:14651 tgid:14651 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1154.332881][   T31] Workqueue: netns cleanup_net
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1154.338394][   T31] Call Trace:
[ 1154.350572][   T31]  <TASK>
[ 1154.353562][   T31]  __schedule+0x1295/0x67a0
[ 1154.358118][   T31]  ? __pfx___schedule+0x10/0x10
[ 1154.380061][   T31]  ? find_held_lock+0x2b/0x80
[ 1154.384816][   T31]  ? schedule+0x2bf/0x390
[ 1154.391120][   T31]  schedule+0xdd/0x390
[ 1154.409435][   T31]  schedule_timeout+0x1b2/0x280
[ 1154.414389][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1154.423594][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1154.497764][T16803] Process accounting paused
[ 1154.502629][   T31]  __wait_for_common+0x2e7/0x4c0
[ 1154.525190][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1154.549811][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1154.568737][   T31]  remove_one+0x312/0x420
[ 1154.584994][   T31]  ? find_next_child+0x18f/0x280
[ 1154.601579][   T31]  __simple_recursive_removal+0x148/0x5c0
[ 1154.621239][   T31]  ? __pfx_remove_one+0x10/0x10
[ 1154.633691][   T31]  debugfs_remove+0x5d/0x80
[ 1154.639790][   T31]  nsim_dev_health_exit+0x3b/0xe0
[ 1154.644956][   T31]  nsim_dev_reload_destroy+0x144/0x4a0
[ 1154.650828][   T31]  nsim_dev_reload_down+0x66/0xd0
[ 1154.655889][   T31]  devlink_reload+0x1ae/0x7a0
[ 1154.660965][   T31]  ? __pfx_devlink_reload+0x10/0x10
[ 1154.666247][   T31]  devlink_pernet_pre_exit+0x247/0x370
[ 1154.672114][   T31]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[ 1154.678909][   T31]  ? __local_bh_enable_ip+0x9e/0x120
[ 1154.684228][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[ 1154.690079][   T31]  ? xfrm_policy_flush+0x3a4/0x450
[ 1154.695272][   T31]  ? xfrm_policy_flush+0x3a4/0x450
[ 1154.701855][   T31]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[ 1154.708287][   T31]  ops_undo_list+0x187/0xab0
[ 1154.712981][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 1154.718950][   T31]  ? cleanup_net+0x332/0x920
[ 1154.723582][   T31]  ? cleanup_net+0x332/0x920
[ 1154.729445][   T31]  ? idr_destroy+0x62/0x2e0
[ 1154.734109][   T31]  cleanup_net+0x499/0x920
[ 1154.739317][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1154.745006][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1154.750726][   T31]  process_one_work+0xa0e/0x1980
[ 1154.755708][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1154.761672][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1154.766655][   T31]  worker_thread+0x5ef/0xe50
[ 1154.775637][   T31]  ? kthread+0x13a/0x450
[ 1154.780198][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1154.785334][   T31]  kthread+0x370/0x450
[ 1154.790373][   T31]  ? __pfx_kthread+0x10/0x10
[ 1154.795026][   T31]  ret_from_fork+0x72b/0xd50
[ 1154.801149][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1154.806333][   T31]  ? __switch_to+0x800/0x1100
[ 1154.811522][   T31]  ? __switch_to_asm+0x39/0x70
[ 1154.816328][   T31]  ? __pfx_kthread+0x10/0x10
[ 1154.821261][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1154.826083][   T31]  </TASK>
[ 1154.835058][   T31] INFO: task syz-executor:18990 blocked for more than 143 seconds.
[ 1154.884236][   T31]       Tainted: G     U       L      syzkaller #0
[ 1154.906445][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1154.935196][   T31] task:syz-executor    state:D stack:22688 pid:18990 tgid:18990 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1154.977519][   T31] Call Trace:
[ 1154.983978][   T31]  <TASK>
[ 1154.993429][   T31]  __schedule+0x1295/0x67a0
[ 1155.008586][   T31]  ? __pfx___schedule+0x10/0x10
[ 1155.025874][   T31]  ? find_held_lock+0x2b/0x80
[ 1155.039747][   T31]  ? schedule+0x2bf/0x390
[ 1155.065591][   T31]  schedule+0xdd/0x390
[ 1155.069730][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1155.075213][   T31]  __mutex_lock+0xced/0x1b10
[ 1155.099635][   T31]  ? device_del+0xa0/0x9b0
[ 1155.114267][   T31]  ? xas_create+0x1f4/0x14e0
[ 1155.130082][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1155.145801][   T31]  ? mark_held_locks+0x40/0x70
[ 1155.169573][   T31]  ? device_del+0xa0/0x9b0
[ 1155.189046][   T31]  device_del+0xa0/0x9b0
[ 1155.207038][   T31]  ? __pfx_ida_free+0x10/0x10
[ 1155.228665][   T31]  ? __pfx_device_del+0x10/0x10
[ 1155.246917][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1155.262982][   T31]  device_unregister+0x1d/0xe0
[ 1155.278373][   T31]  del_device_store+0x346/0x480
[ 1155.290244][   T31]  ? __pfx_del_device_store+0x10/0x10
[ 1155.304492][   T31]  ? find_held_lock+0x2b/0x80
[ 1155.315101][   T31]  ? sysfs_file_kobj+0xe4/0x290
[ 1155.327581][   T31]  ? sysfs_file_kobj+0xe4/0x290
[ 1155.337723][   T31]  ? __pfx_del_device_store+0x10/0x10
[ 1155.354592][   T31]  bus_attr_store+0x74/0xb0
[ 1155.359176][   T31]  ? __pfx_bus_attr_store+0x10/0x10
[ 1155.374004][   T31]  sysfs_kf_write+0xf2/0x150
[ 1155.380100][   T31]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1155.394118][   T31]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1155.400801][   T31]  vfs_write+0x6ac/0x1070
[ 1155.414144][   T31]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1155.433702][   T31]  ? __pfx_vfs_write+0x10/0x10
[ 1155.438527][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1155.454146][   T31]  ksys_write+0x12a/0x250
[ 1155.458541][   T31]  ? __pfx_ksys_write+0x10/0x10
[ 1155.473461][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1155.478287][   T31]  do_syscall_64+0x115/0x840
[ 1155.482889][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1155.512623][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1155.533164][   T31] RIP: 0033:0x7fd33b95d68e
[ 1155.539080][   T31] RSP: 002b:00007ffc13985038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1155.556030][   T31] RAX: ffffffffffffffda RBX: 00005555646f5500 RCX: 00007fd33b95d68e
[ 1155.574188][   T31] RDX: 0000000000000001 RSI: 00007ffc139850c0 RDI: 0000000000000005
[ 1155.582338][   T31] RBP: 00007fd33ba335f2 R08: 0000000000000000 R09: 0000000000000000
[ 1155.590691][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1155.598938][   T31] R13: 00007ffc139850c0 R14: 00007fd33c744620 R15: 0000000000000003
[ 1155.607118][   T31]  </TASK>
[ 1155.646904][   T31] INFO: task syz.1.2921:19023 blocked for more than 144 seconds.
[ 1155.674140][   T31]       Tainted: G     U       L      syzkaller #0
[ 1155.680697][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1155.689959][   T31] task:syz.1.2921      state:D stack:29032 pid:19023 tgid:19021 ppid:16447  task_flags:0x400040 flags:0x00080002
[ 1155.702331][   T31] Call Trace:
[ 1155.705638][   T31]  <TASK>
[ 1155.708589][   T31]  __schedule+0x1295/0x67a0
[ 1155.713555][   T31]  ? __pfx___schedule+0x10/0x10
[ 1155.719456][   T31]  ? find_held_lock+0x2b/0x80
[ 1155.724745][   T31]  ? schedule+0x2bf/0x390
[ 1155.729145][   T31]  schedule+0xdd/0x390
[ 1155.734114][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1155.739639][   T31]  __mutex_lock+0xced/0x1b10
[ 1155.746552][   T31]  ? devlink_health_report+0x66c/0xb20
[ 1155.752780][   T31]  ? __pfx_devlink_nl_notify_filter+0x10/0x10
[ 1155.758918][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1155.764986][   T31]  ? devlink_recover_notify.constprop.0+0x443/0x550
[ 1155.771710][   T31]  ? devlink_recover_notify.constprop.0+0x1e3/0x550
[ 1155.779322][   T31]  ? devlink_health_report+0x66c/0xb20
[ 1155.785056][   T31]  devlink_health_report+0x66c/0xb20
[ 1155.790424][   T31]  ? __pfx_devlink_health_report+0x10/0x10
[ 1155.796712][   T31]  ? _copy_from_user+0x59/0xd0
[ 1155.805842][   T31]  nsim_dev_health_break_write+0x166/0x210
[ 1155.812054][   T31]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[ 1155.818449][   T31]  full_proxy_write+0x135/0x1a0
[ 1155.825055][   T31]  vfs_write+0x2aa/0x1070
[ 1155.829450][   T31]  ? __pfx_full_proxy_write+0x10/0x10
[ 1155.835250][   T31]  ? __pfx_vfs_write+0x10/0x10
[ 1155.840047][   T31]  ? __fget_files+0x215/0x3d0
[ 1155.845123][   T31]  ? __fget_files+0x21f/0x3d0
[ 1155.849841][   T31]  ksys_write+0x12a/0x250
[ 1155.856110][   T31]  ? __pfx_ksys_write+0x10/0x10
[ 1155.862205][   T31]  ? kcov_ioctl+0x16a/0x720
[ 1155.866768][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1155.871948][   T31]  do_syscall_64+0x115/0x840
[ 1155.876594][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1155.885702][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1155.893419][   T31] RIP: 0033:0x7f1bfa19ce59
[ 1155.897880][   T31] RSP: 002b:00007f1bf83cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1155.906716][   T31] RAX: ffffffffffffffda RBX: 00007f1bfa416090 RCX: 00007f1bfa19ce59
[ 1155.914996][   T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005
[ 1155.924293][   T31] RBP: 00007f1bfa232d6f R08: 0000000000000000 R09: 0000000000000000
[ 1155.932593][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1155.940592][   T31] R13: 00007f1bfa416128 R14: 00007f1bfa416090 R15: 00007ffd403db678
[ 1155.948880][   T31]  </TASK>
[ 1155.976213][   T31] 
[ 1155.976213][   T31] Showing all locks held in the system:
[ 1155.997461][   T31] 1 lock held by khungtaskd/31:
[ 1156.005600][   T31]  #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1156.015881][   T31] 2 locks held by getty/5388:
[ 1156.020809][   T31]  #0: ffff888032f110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1156.031989][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[ 1156.044040][   T31] 3 locks held by kworker/u10:6/10942:
[ 1156.049535][   T31]  #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1156.061101][   T31]  #1: ffffc9000394fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1156.072332][   T31]  #2: ffffffff90606c20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 1156.083422][   T31] 6 locks held by kworker/u10:34/14651:
[ 1156.088991][   T31]  #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1156.100010][   T31]  #1: ffffc9000380fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1156.110880][   T31]  #2: ffffffff905edec8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[ 1156.121991][   T31]  #3: ffff888032400128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370
[ 1156.134055][   T31]  #4: ffff888033a0b258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370
[ 1156.145179][   T31]  #5: ffff888069f84610 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[ 1156.157193][   T31] 5 locks held by syz-executor/18990:
[ 1156.162974][   T31]  #0: ffff8880353f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1156.172894][   T31]  #1: ffff88805bb45480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1156.182992][   T31]  #2: ffff88802a60a0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1156.194895][   T31]  #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1156.208814][   T31]  #4: ffff888032400128 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0
[ 1156.218462][   T31] 3 locks held by syz.1.2921/19023:
[ 1156.223923][   T31]  #0: ffff88802ad29970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1156.234299][   T31]  #1: ffff8880202d8410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1156.243973][   T31]  #2: ffff888033a0b258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20
[ 1156.254842][   T31] 4 locks held by syz-executor/19261:
[ 1156.260481][   T31]  #0: ffff8880353f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1156.270265][   T31]  #1: ffff888068e7d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1156.280770][   T31]  #2: ffff88802a60a0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1156.291103][   T31]  #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1156.303847][   T31] 1 lock held by syz.0.3062/19591:
[ 1156.309545][   T31]  #0: ffffffff90606c20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1156.318682][   T31] 4 locks held by syz-executor/19905:
[ 1156.325032][   T31]  #0: ffff8880353f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1156.335307][   T31]  #1: ffff888082669480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1156.345487][   T31]  #2: ffff88802a60a0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1156.355752][   T31]  #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1156.367969][   T31] 2 locks held by syz.4.3142/19935:
[ 1156.374065][   T31]  #0: ffffffff90606c20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1156.383569][   T31]  #1: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1156.393998][   T31] 4 locks held by syz-executor/19942:
[ 1156.399725][   T31]  #0: ffff8880353f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1156.410598][   T31]  #1: ffff888082476c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1156.421001][   T31]  #2: ffff88802a60a0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1156.433036][   T31]  #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1156.444222][   T31] 4 locks held by syz-executor/19967:
[ 1156.449914][   T31]  #0: ffff8880353f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1156.459185][   T31]  #1: ffff88805813a080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1156.469181][   T31]  #2: ffff88802a60a0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1156.480127][   T31]  #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1156.490705][   T31] 4 locks held by syz-executor/19990:
[ 1156.496100][   T31]  #0: ffff8880353f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1156.505473][   T31]  #1: ffff888038299880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1156.515448][   T31]  #2: ffff88802a60a0f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1156.528361][   T31]  #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1156.574810][   T31] 
[ 1156.579298][   T31] =============================================
[ 1156.579298][   T31] 
[ 1156.603179][   T31] NMI backtrace for cpu 0
[ 1156.603198][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1156.603224][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1156.603232][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1156.603242][   T31] Call Trace:
[ 1156.603249][   T31]  <TASK>
[ 1156.603257][   T31]  dump_stack_lvl+0x100/0x190
[ 1156.603292][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1156.603312][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1156.603332][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1156.603355][   T31]  sys_info+0x141/0x190
[ 1156.603382][   T31]  watchdog+0xcb1/0x1030
[ 1156.603410][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1156.603434][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1156.603459][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1156.603490][   T31]  ? kthread+0x13a/0x450
[ 1156.603515][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1156.603537][   T31]  kthread+0x370/0x450
[ 1156.603563][   T31]  ? __pfx_kthread+0x10/0x10
[ 1156.603590][   T31]  ret_from_fork+0x72b/0xd50
[ 1156.603609][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1156.603629][   T31]  ? __switch_to+0x800/0x1100
[ 1156.603651][   T31]  ? __switch_to_asm+0x39/0x70
[ 1156.603673][   T31]  ? __pfx_kthread+0x10/0x10
[ 1156.603699][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1156.603730][   T31]  </TASK>
[ 1156.792228][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1156.799123][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1156.809820][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1156.815012][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1156.825081][   T31] Call Trace:
[ 1156.828359][   T31]  <TASK>
[ 1156.831300][   T31]  dump_stack_lvl+0x100/0x190
[ 1156.836006][   T31]  vpanic+0x552/0x970
[ 1156.839989][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1156.844503][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1156.850675][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1156.856832][   T31]  panic+0xd1/0xe0
[ 1156.860554][   T31]  ? __pfx_panic+0x10/0x10
[ 1156.864971][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1156.871127][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1156.877283][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1156.883468][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1156.888234][   T31]  ? watchdog+0xcc1/0x1030
[ 1156.892658][   T31]  watchdog.cold+0x1fd/0x234
[ 1156.897269][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1156.903096][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1156.907781][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1156.912820][   T31]  ? kthread+0x13a/0x450
[ 1156.917085][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1156.921767][   T31]  kthread+0x370/0x450
[ 1156.925844][   T31]  ? __pfx_kthread+0x10/0x10
[ 1156.930465][   T31]  ret_from_fork+0x72b/0xd50
[ 1156.935057][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1156.940170][   T31]  ? __switch_to+0x800/0x1100
[ 1156.944858][   T31]  ? __switch_to_asm+0x39/0x70
[ 1156.949625][   T31]  ? __pfx_kthread+0x10/0x10
[ 1156.954323][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1156.959168][   T31]  </TASK>
[ 1156.962243][   T31] Kernel Offset: disabled
[ 1156.966577][   T31] Rebooting in 86400 seconds..