last executing test programs:

5m25.94639466s ago: executing program 2 (id=1131):
r0 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)=0x1)
mmap$auto(0x17e, 0x7, 0x8000000000000007, 0x10, r0, 0x7ffa)
r1 = socket(0x21, 0x3, 0x4)
sysfs$auto(0x2, 0x13, 0x0)
ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000080)="5e4270b374a1b0d03cd7ac")
mmap$auto(0x0, 0x9, 0xe0, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x3, 0x8, 0xdf, 0x9b72, 0x2, 0x7ffe)
r2 = socket(0xa, 0x5, 0x84)
getsockopt$auto(r2, 0x0, 0x19, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004)
open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fcntl$auto_F_GET_RW_HINT(r1, 0x40b, 0x2)
fallocate$auto(r0, 0x0, 0x4, 0x4cbd61)
rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00')
lstat$auto(&(0x7f0000000140)='./file1\x00', 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
rename$auto(&(0x7f0000000280)='./file1\x00', 0x0)
rename$auto(0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4c081, 0x0)
r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x80, 0x0)
read$auto_evdev_fops_evdev(r3, 0x0, 0x0)
mmap$auto(0x1000002000000, 0x2020009, 0x3, 0xeb1, r3, 0x8000)
madvise$auto(0x0, 0x8, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4)
madvise$auto(0x6000000000, 0x8, 0x7)
madvise$auto(0x0, 0x400053, 0x9)
shmdt$auto(0x0)

5m24.281289591s ago: executing program 2 (id=1135):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea02, 0x0)
mmap$auto(0x2, 0x810004, 0xb2c, 0x8000000008011, 0x3, 0x7fff)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r0, r0, 0x42)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x8804}, 0x8880)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000)
sendfile$auto(r1, r1, 0x0, 0x3)
read$auto(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
select$auto(0x9, 0x0, &(0x7f0000000100)={[0x20000000000e, 0x203, 0x0, 0xc, 0x8, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fd, 0x914, 0x4, 0xaab, 0x5, 0xf30000000000]}, 0x0, 0x0)
execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/nbd5/sched/owned_by_driver\x00', 0x2000, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000100)=""/169, 0xa9)
execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xdb,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5')

5m22.989177914s ago: executing program 2 (id=1142):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = socketcall$auto(0xa, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0xaeb7, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="e5b725bd7000fcdbdd251900000070ac48e4ffdbfb25ec5c5c9ac55de7ee928c831a3bca4479f5f09f32b40a243ee4e26509eaa0f61531b898cbb9217fc139cc02e4bab8"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800)
r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0)
ioctl$auto_CEC_S_MODE(r5, 0x40046109, &(0x7f0000002c40)=0x12)
close_range$auto(0x2, 0x8, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
r6 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x3, 0xb, 0x3130, r5, 0x0)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0xfffffffffffff000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r6)
mmap$auto(0x0, 0x400008, 0x1, 0x8b72, 0x2, 0x8000)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/usbmon10\x00', 0x2400, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0)

5m22.620434745s ago: executing program 2 (id=1146):
mmap$auto(0xfffffffffffffeff, 0x861, 0x100009000000004, 0xfa31, 0x400, 0x8004)
io_setup$auto(0x8000003, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x801, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x10001)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2)
r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0)
bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r2, 0x454f, 0x5f, 0x0, 0x0, r2, 0x80000001}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x2800, 0x0)
r3 = socket(0x2, 0x5, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x1)
socket(0x2, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311)
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

5m21.675675833s ago: executing program 2 (id=1150):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
unshare$auto(0x40000080)
ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
ioctl$auto(0x1, 0x5761, 0x4)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
fstat$auto(0x2, 0x0)
ioctl$auto(0xc8, 0x401054d5, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
unshare$auto(0x40000080) (async)
ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) (async)
ioctl$auto(0x1, 0x5761, 0x4) (async)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
fstat$auto(0x2, 0x0) (async)
ioctl$auto(0xc8, 0x401054d5, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) (async)

5m19.863742156s ago: executing program 2 (id=1155):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00a09c", @ANYRES16=r2, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e00000000000000000005000200060000000500050004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="04002cbd705e64f4e0ba80575477"], 0x14}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
memfd_create$auto(0x0, 0xe)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r5, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
mprotect$auto(0x8, 0xffffffff00000000, 0x4b6)
splice$auto(r0, &(0x7f0000000040)=0x2, r0, &(0x7f0000000080)=0x7, 0x1, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)

5m4.719918876s ago: executing program 32 (id=1155):
r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00a09c", @ANYRES16=r2, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e00000000000000000005000200060000000500050004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c840)
r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="04002cbd705e64f4e0ba80575477"], 0x14}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
memfd_create$auto(0x0, 0xe)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r5, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x7}, 0xa}, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
mprotect$auto(0x8, 0xffffffff00000000, 0x4b6)
splice$auto(r0, &(0x7f0000000040)=0x2, r0, &(0x7f0000000080)=0x7, 0x1, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0x400454ca, 0x38)

2m5.60570105s ago: executing program 4 (id=1770):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x29, 0x5, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000)
madvise$auto(0x110c230000, 0x1fffffe, 0x9)
name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x9)
openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0)
mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000)
unshare$auto(0x40000080)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x14ba83, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nullb0/rqos/wbt/unknown_cnt\x00', 0x800, 0x0)
openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x884e1, 0x0)
shmget$auto(0x3, 0x20000000000003, 0x79e56dc7)
openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x20000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/sctp/eps\x00', 0x181800, 0x0)
pread64$auto(r2, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xc70\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95P\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000240), 0x10c01, 0x0)
sysfs$auto(0x2, 0xd, 0x0)
statmount$auto(&(0x7f0000000040)={0x18, @inferred, 0x40000008000002b, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc844)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec4\x00', 0x10b703, 0x0)

2m3.71929706s ago: executing program 4 (id=1775):
syz_clone(0x82164011, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sysfs$auto(0x2, 0x49, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
msgget$auto(0x0, 0x5)

2m0.366656699s ago: executing program 4 (id=1789):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x6044c2, 0x0)
socket(0xa, 0x801, 0x84)
socket(0x80000000000000a, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/tunl0/addr_assign_type\x00', 0x40c00, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x10, 0x2, 0xc)
socket(0x10, 0x2, 0x0)
socket(0x15, 0x5, 0x0)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
pipe$auto(0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x6f)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, r0)

1m59.563521479s ago: executing program 4 (id=1791):
read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, 0x0, 0x0)

1m59.364019055s ago: executing program 4 (id=1792):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3)
mbind$auto(0x2000, 0x800000100000004, 0x1, 0x0, 0x1003, 0x2)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1)
write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1)
mmap$auto(0x100000, 0x2020009, 0x200003, 0xebe, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, r0, 0x2)
socketpair$auto(0x7fffffff, 0x1, 0x8000000000000000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x5, 0x9, 0x400005, 0x3, 0x8000007, 0x7fff, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x1f313cea, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x0, 0x82, 0x800000000002, 0x7, 0x0, 0xbec, 0xb01c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x4, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x240448c4}, 0x4004000)
r5 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap$auto(0x8, 0x3, 0xd3, 0xeb1, r6, 0x80)
close_range$auto(0x2, 0x8, 0x0)
r7 = socket(0xf, 0x2, 0xffffffff)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)

1m59.089787773s ago: executing program 4 (id=1793):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x7, 0x2, 0x1, 0xeb1, 0x405, 0xfffffffffffffff9)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="c5000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff46, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bdf00019dcdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x9, &(0x7f0000000500)={0x1, 0x18, 0x1, 0x2, 0x3, 0x4, r3, [0x80000000, 0x5, 0x1ff], {0x9, 0x9, 0x8, 0x6, 0x40, 0x4, 0x1, 0x3, 0x10001}, {0x6, 0x3, 0xaaa, 0x9, 0x101, 0x4, 0xb, 0x3, 0x2}})
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000)
sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf2505000000a24c57a99d6c6efa78c90a2d01e4190d27952a8288838cb52f472ac5ae14b2401c7d4dfbe3bff454cdbe02cec3c91569e61817a81e8812d7345d2b9e4f126200e10445b2d56285054aa42ea90f3a178f2addc7f06abc2e0a861994ff1b28ed3b323f4a8d885e4fed6ec5ec6117e8c00d254d0b900d0d81a44be8b900119a96f4c50ac3cec75b53f9ebdf263f7c94ba47dcf14eac59623f6e8570a569d8d39b1f0c9a6fb55cdc16eb440e7ab09995734c7fdc2eb9160acb23a25e93d0a4e045d974e7247db1d600"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x802, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_NEW(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x9)
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, &(0x7f0000000140)={{0x5, 0x6}, {0x0, 0xa}, 0x7607, 0x2, 0x0, 0x6, 0x3, 0x9, 0x3ff, 0x401, 0x24f0, 0x4, 0x6, 0x5, 0x4, 0x1ff})
setsockopt$auto(r6, 0x7, 0x5, &(0x7f0000000280)='nfsd\x00', 0x7)

1m43.638996363s ago: executing program 33 (id=1793):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x7, 0x2, 0x1, 0xeb1, 0x405, 0xfffffffffffffff9)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd)
r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)=ANY=[@ANYBLOB="c5000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050)
sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff46, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bdf00019dcdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x9, &(0x7f0000000500)={0x1, 0x18, 0x1, 0x2, 0x3, 0x4, r3, [0x80000000, 0x5, 0x1ff], {0x9, 0x9, 0x8, 0x6, 0x40, 0x4, 0x1, 0x3, 0x10001}, {0x6, 0x3, 0xaaa, 0x9, 0x101, 0x4, 0xb, 0x3, 0x2}})
r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000)
sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100a6bd7000fddbdf2505000000a24c57a99d6c6efa78c90a2d01e4190d27952a8288838cb52f472ac5ae14b2401c7d4dfbe3bff454cdbe02cec3c91569e61817a81e8812d7345d2b9e4f126200e10445b2d56285054aa42ea90f3a178f2addc7f06abc2e0a861994ff1b28ed3b323f4a8d885e4fed6ec5ec6117e8c00d254d0b900d0d81a44be8b900119a96f4c50ac3cec75b53f9ebdf263f7c94ba47dcf14eac59623f6e8570a569d8d39b1f0c9a6fb55cdc16eb440e7ab09995734c7fdc2eb9160acb23a25e93d0a4e045d974e7247db1d600"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r5, 0x0, 0x840003, 0x40000000002e72)
r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x802, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_OVS_FLOW_CMD_NEW(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x11, 0x3, 0x9)
waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x4, &(0x7f0000000140)={{0x5, 0x6}, {0x0, 0xa}, 0x7607, 0x2, 0x0, 0x6, 0x3, 0x9, 0x3ff, 0x401, 0x24f0, 0x4, 0x6, 0x5, 0x4, 0x1ff})
setsockopt$auto(r6, 0x7, 0x5, &(0x7f0000000280)='nfsd\x00', 0x7)

1m30.911683586s ago: executing program 1 (id=1868):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0)
r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x26040, 0x0)
poll$auto(&(0x7f0000000040)={r0, 0x1000, 0x1c9}, 0x2, 0x7)
r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0xc2, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6gretap0/log_martians\x00', 0x0, 0x0)
sendfile$auto(r2, r2, 0x0, 0x200)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0)
mmap$auto(0x0, 0x6, 0x2, 0xeb1, r3, 0x8000)
r4 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0)
mmap$auto(0x0, 0x1000000004020009, 0xdf, 0x100000000000eb1, r1, 0x1)
r5 = socket(0xa, 0x2, 0x73)
getsockname$auto(r5, 0x0, 0x0)
writev$auto(r4, &(0x7f0000000000)={0x0, 0x9}, 0x1)
mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80000, 0x2)
madvise$auto(0x5, 0x8031ca, 0x9)
madvise$auto(0x110d230000, 0x1, 0x9)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/zswap/parameters/compressor\x00', 0x179802, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0)
sendfile$auto(r6, r7, 0x0, 0x3)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/nr6/dev_id\x00', 0x40000, 0x0)
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r8 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0)
sendfile$auto(r8, r8, 0x0, 0x10000800000003)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)

1m29.67673576s ago: executing program 1 (id=1874):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0)
ioctl$auto(r0, 0x80045430, r0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0)
writev$auto(r1, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa})
ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0)
writev$auto(r2, &(0x7f0000000340)={0x0, 0x500000}, 0x9)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b)
clone3$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x1fc00000000, 0x1, 0x81, 0x1, 0x1, 0x200, 0x9, 0x4, 0x100000001, 0x8}, 0x4)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x80e42, 0x0)
ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0))

1m28.210355689s ago: executing program 1 (id=1880):
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
setresuid$auto(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
r1 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x103, 0x9, 0x2000}, {0x1100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}})
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000)
sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0)
r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000180), 0x101001, 0x0)
write$auto_proc_coredump_filter_operations_base(r2, &(0x7f00000005c0)="052c21cac3bb37c584613d802db2c4d2c97c2d6f9f924f700225d23b486a3c46c01c6bd6fff34e8bda99bd6c69cf30e63569227b554e1d2613b966beb33475bc4c3bea02ee384661b8ec17f9ca3a8b73ecbf56d3966332d61048847dad28f042fa4b37a29b983915c688b8055a065a8ac7346851f2a8c3bda3b37463f3dabbc0edec12cab7f9bb6e6c9905dda3ae08464a7c95b49f371a9bca7d256ab57782c0f949d7f633403ac089696313980d70a09b1f2670d0dfb53a6790c0173b441deeef15dfb34c495e06c4d0e40e45522c5c570fc12e52995f9df8f02dee", 0xdc)
madvise$auto(0x0, 0x8000000000000000, 0x15)
brk$auto(0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326", @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='\"'], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3)

1m25.641534679s ago: executing program 1 (id=1890):
mmap$auto(0x0, 0x1000, 0x4000000000e3, 0x8000000000040eb2, 0xd, 0x300000000000)
prlimit64$auto(0x0, 0x7fd, 0x0, &(0x7f0000000140)={0x89, 0x8000000000000001})
mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6)
r2 = semctl$auto_GETPID(0x80000000, 0x2e4, 0xb, 0xf)
prctl$auto(0x35, 0x0, 0x8, 0x9, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000480)='ns/pid\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r5=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x89}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000000)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x68d, 0x1, 0x0, 0x1, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)

1m24.417845929s ago: executing program 1 (id=1894):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x2100000, 0x7fffffff, 0x1, 0x0, 0x0, 0x2000000000000e8, 0x8000000000, 0x4, 0xf7ffffffffffffb9, 0x8})
socket(0xa, 0x5, 0x84)
keyctl$auto(0x11, 0xdfffffffffffffff, 0x69c9, 0x0, 0xbcd)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
socketpair$auto(0x1, 0x5, 0x10, 0x0)
setsockopt$auto(0x3, 0x1, 0x3f, 0x0, 0x81)
write$auto(0x3, 0x0, 0x9)
read$auto(0x3, 0x0, 0x8080)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = socket(0xa, 0x2, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r2, 0xc080aebe, 0x0)
r4 = getpid()
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4)
bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0xca96, @next_key=0xfffffffffffffffb, 0x6}, 0x1)
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x9, 0x0)

1m24.099223512s ago: executing program 1 (id=1895):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/input/event0\x00', 0x200, 0x0)
ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000002f40)=0x7e)
mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000)
r2 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r2, 0x29, 0x44, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0xa, 0x801, 0x84)
connect$auto(0x3, 0x0, 0x54)
r4 = socket(0xa, 0x5, 0x84)
getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b)
setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x9c)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r5, &(0x7f0000000240)={0x0, 0x5}, 0xa)
rt_sigtimedwait$auto(&(0x7f00000000c0)={0x6b01}, &(0x7f0000000140)={@siginfo_0_0={0x6, 0x5, 0x0, @_sigpoll={0x3, r2}}}, &(0x7f00000001c0)={0x1, 0x8000000000000000}, 0x8)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0)
write$auto(r6, 0x0, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5})
ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4683, 0x0)
r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x10b402, 0x0)
pread64$auto(r8, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100)
read$auto_uinput_fops_uinput(r7, &(0x7f0000000080)=""/13, 0xd)

1m9.005062478s ago: executing program 34 (id=1895):
r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/input/event0\x00', 0x200, 0x0)
ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000002f40)=0x7e)
mmap$auto(0x0, 0x400008, 0x1000dd, 0x9b72, 0xffffffffffffffff, 0x8000)
r2 = socket(0xa, 0x3, 0x3b)
getsockopt$auto(r2, 0x29, 0x44, 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0xa, 0x801, 0x84)
connect$auto(0x3, 0x0, 0x54)
r4 = socket(0xa, 0x5, 0x84)
getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b)
setsockopt$auto(r3, 0x10000000084, 0x9, 0x0, 0x9c)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0)
writev$auto(r5, &(0x7f0000000240)={0x0, 0x5}, 0xa)
rt_sigtimedwait$auto(&(0x7f00000000c0)={0x6b01}, &(0x7f0000000140)={@siginfo_0_0={0x6, 0x5, 0x0, @_sigpoll={0x3, r2}}}, &(0x7f00000001c0)={0x1, 0x8000000000000000}, 0x8)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0)
write$auto(r6, 0x0, 0x0)
ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5})
ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0x0)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/dbroot\x00', 0x109103, 0x0)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82043, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4683, 0x0)
r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/misc\x00', 0x10b402, 0x0)
pread64$auto(r8, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100)
read$auto_uinput_fops_uinput(r7, &(0x7f0000000080)=""/13, 0xd)

1m8.987031067s ago: executing program 5 (id=1952):
r0 = socket(0xa, 0x801, 0x106)
recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64})
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
listen$auto(r1, 0x0)
r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x2, 0x11)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1e000000", @ANYBLOB="12", @ANYBLOB=']'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0)
pread64$auto(r5, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]})
mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x40008000)
r7 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r7, 0x107, 0x12, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x5)

1m5.31597761s ago: executing program 5 (id=1958):
r0 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/ports/0/udp_ports_table0\x00', 0x6d2101, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) (async)
socket(0xa, 0x801, 0x100) (async)
prctl$auto(0x7ef, 0x376, 0x0, 0x0, 0x9) (async)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async)
getsockopt$auto(0xffffffffffffffff, 0x69, 0x30, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)
r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
setsockopt$auto(0x3, 0x1, 0x3, 0x0, 0x5) (async)
io_uring_setup$auto(0x8, 0x0)
connect$auto(0x3, 0x0, 0x58)
bind$auto(0x3, 0x0, 0x6a) (async)
ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) (async)
r2 = pidfd_open$auto(0x1, 0x0)
ftruncate$auto(r2, 0x2000000700) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='n', 0x1) (async, rerun: 32)
socket(0x23, 0x80805, 0x0) (async, rerun: 32)
write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) (rerun: 64)
ioctl$auto(r2, 0x89ed, 0xffffffffffffffff) (async, rerun: 64)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (rerun: 64)
ioctl$auto(r4, 0x5607, r4) (async)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m4.795360145s ago: executing program 5 (id=1960):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82002, 0x0)
write$auto(r0, 0x0, 0x40100000a3d5)
r1 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0xb)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x8, 0xb)
mmap$auto(0x9, 0x1, 0x100000001, 0x20eb1, r2, 0x8010)
r3 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0x1)
r4 = open_by_handle_at$auto(r3, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x6, 0x5, 0x0)
socket(0x2, 0x1, 0x0)
socketpair$auto(0x1e, 0x1, 0x0, 0x0)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x0, 0x5, 0x0)
sendfile$auto(r4, r3, 0x0, 0x2)
epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x400000000008, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x100)
read$auto(0x3, 0x0, 0x80)

1m2.571151927s ago: executing program 5 (id=1966):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x3, 0x0)
mprotect$auto(0x0, 0x8000000000000001, 0x8)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
madvise$auto(0x0, 0x81, 0x15)

1m2.052101337s ago: executing program 5 (id=1968):
openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async)
read$auto(0x3, 0x0, 0x8080) (async)
ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x56b) (async)
setsockopt$auto(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x10052b) (async)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) (async)
execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
read$auto(r0, 0x0, 0x80000000) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) (async)
socket(0x22, 0xa, 0x6) (async)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000)
mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) (async)
unshare$auto(0x40000080)
mmap$auto(0xfffffffffffffffe, 0x81c0000000, 0xa, 0x9b72, r0, 0x5) (async)
sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x6, 0x0) (async)
openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) (async)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async)
setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) (async)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
lseek$auto(r1, 0x2, 0x0)

1m0.82384066s ago: executing program 5 (id=1972):
r0 = socket(0xa, 0x3, 0x3b)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4044061)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x500, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000004c0)={0x6, "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"})
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x2)
read$auto_ftrace_formats_fops_trace_printk(r3, &(0x7f0000001200)=""/4096, 0x1000)

45.54204546s ago: executing program 35 (id=1972):
r0 = socket(0xa, 0x3, 0x3b)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4044061)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x500, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r2)
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
ioctl$auto_USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000004c0)={0x6, "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"})
close_range$auto(0x2, 0x8, 0x0)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x2)
read$auto_ftrace_formats_fops_trace_printk(r3, &(0x7f0000001200)=""/4096, 0x1000)

14.422689523s ago: executing program 7 (id=2128):
mmap$auto(0x7ffffffffffffffd, 0xb3b7, 0x4000000000e1, 0x2000000001a, 0x401, 0x7ffe)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, 0xfffffffffffffffd)
semctl$auto_SETALL(0x0, 0xc, 0x11, 0x81)
unshare$auto(0x40000080)
umount2$auto(0x0, 0x4)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xc81, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1302, 0x0)
sendfile$auto(r1, r1, 0x0, 0x43)
mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1007ffc)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x400, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
r2 = gettid()
rt_sigqueueinfo$auto_SIGCONT(r2, 0x12, 0x0)
writev$auto(0x3, 0x0, 0x8)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1c/sub4/info\x00', 0x2200, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0xc)
mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r3, 0x0)
semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0)
r5 = getpid()
process_vm_readv$auto(r5, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x103, 0x0)
openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
mmap$auto(0x0, 0x2020009, 0x80000003, 0xeb1, 0xfffffffffffffffa, 0x8000)

11.191060219s ago: executing program 0 (id=2136):
r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0)
pread64$auto(r0, 0x0, 0xffffff7f, 0x8000000000009)
read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0)
mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
signalfd$auto(r1, 0x0, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000600), r2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r3=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010026bd7000fedbdf250a00000008000200", @ANYRES32=r3, @ANYBLOB="08000300000000000800010000040000cb376f52617722eaf83f8a655d33081a6c5a1dea743174312b0d9758883a4fb8914dc9e4110846365477cc3ca3e78f67540abfcac8c96134a412c28b075768391724060ffc28278509e67bd23476ed5f8f9f1d30a33f533ff8d7de7fcecd2c6326072e2d674f792db70f12825919145c4ce162119d254bd1c2cde5ed260ee7af2b96cec1457cc89c6025b1eb9a2e"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810)
getpid()
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0)
ioctl$auto_BLKROGET(r1, 0x125e, 0x0)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty11\x00', 0x100, 0x0)
write$auto_tty_fops_tty_io(r5, &(0x7f0000000180)="976f29bd689a850edbe36136c8d35f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cda1b9fb10900c752544c11d1640e59f86de019c613761b5d384219a3f53e519954888ce5cf54846c8e07", 0xa0)
listen$auto(r4, 0x5)
r6 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={<r7=>0xa, @new_prog_fd=r6, 0x7fff, @old_prog_fd=0x13b}, 0xa3)
io_uring_setup$auto(0xfffff001, &(0x7f0000000040)={0xc1f, 0x1, 0x0, 0x8, 0x9, 0x24e6, r7, [0x4], {0x9d4, 0x100, 0x7, 0x1ac, 0x9a0, 0x6, 0xb37, 0x0, 0x7fff}, {0xf, 0x7, 0x4, 0x81, 0x3, 0x4, 0x8, 0xeb04, 0x7}})

11.019445488s ago: executing program 7 (id=2138):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x6)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0)
pread64$auto(r1, 0x0, 0x100006, 0xc982)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$auto(0x3, 0x0, 0x4b34)
sendmsg$auto_TIPC_NL_MEDIA_GET(r2, 0x0, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r0)
sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@nested={0x64, 0x79, 0x0, 0x1, [@nested={0x4, 0x93}, @typed={0x5b, 0x32, 0x0, 0x0, @binary="839e1f322feb6267945f09065c7a281ff06b41684796de1aef9ca5bc9d172b4bcfbe7a7cc9e8c8c53fd8eb91ec3a6521f54cbbe859dc73a4fc04107ea74247d36e8bfca8bf5819f865a440c580c40859f376c54fde7e64"}]}, @typed={0xc, 0xc, 0x0, 0x0, @u64=0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x41, 0x3, 0x0, 0x1, [@generic="bc6a1b969d6a0ab6e47fb2154e624ab1b6ae9435750f07d81fa32c4384da184fad32b59c2e58421ef883c87b8a035aaf01ac9e197d0197b9ce75751671"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xf4}}, 0x80)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
shmctl$auto_IPC_INFO(0x1, 0x3, 0x0)
openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/error_log\x00', 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r0)
socket(0x2, 0x1, 0x106)
fcntl$auto(0x3, 0x4, 0xa553)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
kill$auto(0x0, 0x11)
sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r2, 0x0, 0x4000090)
shutdown$auto(0x200000003, 0x2)

9.709041682s ago: executing program 0 (id=2139):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
clock_nanosleep$auto(0x1, 0x200, 0x0, 0x0)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000)
ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x2)
mprotect$auto(0x1000, 0x401000, 0x4)
mmap$auto(0x0, 0x202000a, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa, 0x2)
mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000)
ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0)
rt_sigsuspend$auto(0x0, 0x8)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x11, 0x3, 0x9)
mmap$auto(0x0, 0x2020005, 0x3, 0x1e, r2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4)
fallocate$auto(r3, 0x0, 0x9, 0x4cbd5d)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x8)
madvise$auto(0x0, 0x1010001, 0x100000003)

8.915308574s ago: executing program 7 (id=2142):
r0 = socket(0xa, 0x801, 0x106)
recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64})
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
listen$auto(r1, 0x0)
r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x2, 0x11)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1e000000", @ANYBLOB="12", @ANYBLOB=']'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64$auto(r5, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]})
mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x40008000)
r7 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r7, 0x107, 0x12, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x5)

6.60409961s ago: executing program 6 (id=2144):
open(&(0x7f0000000040)='./file0\x00', 0x1c3080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0)
close_range$auto(0x0, 0x5, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0)
r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7)
write$auto(r1, 0x0, 0xe)
mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, 0x0)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f00000000c0)={&(0x7f0000000180)="07ec83b4e7e072a4066b2308d17f3e0f214acca4a481cc257b740d5f74b170c824c8d2b50400000000000000d08d67f801561fe4171758f31b49f8e6833a0724b1b5490a1b32c00d878fa4aa394a445f4d3ccd2038972cf2ed5c539b83be01000000000000050087b6116e46858af23c7a75fd2e33975cde6eac5639f8ad43e63e7200"/141, 0x12}, 0xa, 0x5, 0x0)

6.377884852s ago: executing program 6 (id=2146):
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42200, 0x0)
capset$auto(0x0, 0x0)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff00c}})
r1 = openat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10001, 0x10)
write$auto(r1, &(0x7f0000000100)='/dev/mixer\x00', 0xfffffffffffffffe)
mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/ip_vti0/arp_announce\x00', 0xa0202, 0x0)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
ioctl$auto(r3, 0x80004508, r2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0)
readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0)
listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x2400, 0x0)
setuid$auto(0xe)
ioctl$auto_BLKSECDISCARD(r4, 0xc01070ce, 0x0)
r5 = fanotify_init$auto(0x5, 0x2000000000002)
fanotify_mark$auto(r5, 0x1, 0x803a, r5, 0x0)
madvise$auto(0x110c230000, 0x1, 0x9)
futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4)
read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)

6.308330407s ago: executing program 0 (id=2147):
write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a", 0x9c)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0)
sendfile$auto(r0, 0x3, 0x0, 0x7ffff000)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x801, 0x84)
getpid()
setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28)
r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x1, 0x0, 0x0, 0x0, 0x42)
syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="16d475d82478850033795ac8cd392b101783d6281e8e85eae94f3726141a9ab83a71307ffca0688d868d05c9d5a60f1d10000430565586fc7dcb643ac1bef9ad9d38d4adfaf574b12cadb3d16b", @ANYRES16=r1, @ANYBLOB="01032cb57000fbdbdf250a000000050002000000000006000100400200000600010003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd)
fanotify_init$auto(0x65, 0x2)

5.889959386s ago: executing program 3 (id=2148):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffff7, 0x16, r0, 0x2)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@ethernet={0x1, @remote}, 0x58)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0)
read$auto(0xffffffffffffffff, &(0x7f0000000000)='veth1\x00', 0x20000000000)
r1 = socket(0x10, 0x3, 0x6)
bind$auto(r1, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0x6a)
madvise$auto(0x0, 0xffffffffffff0005, 0x1b)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000003)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd70622b415d9e85a2900008000600810000000800100008000000080004001e0a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r2)
mmap$auto(0x0, 0x6, 0x4, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x84}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}})
io_uring_enter$auto(r4, 0x9, 0x820e, 0x8b, 0x0, 0x18)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r5=>0x0})
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810)

5.706004456s ago: executing program 6 (id=2149):
mmap$auto(0x9, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x84)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0)
r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r2, 0x2272, r1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close$auto(0xffffffffffffffff)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
open(0x0, 0x0, 0x48a)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x100000000000000, 0x400053, 0x9)
ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0xc)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008012, 0x3, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
timer_create$auto(0x9, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000e80)=""/206, 0xce)
madvise$auto(0x0, 0x2003f0, 0x17)

5.444694652s ago: executing program 7 (id=2150):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0xc0000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
socket(0x11, 0x3, 0x9)
ioctl$auto(0xffffffffffffffff, 0x6f41, 0x38)
mmap$auto(0x0, 0x5, 0x3, 0xffffffffffff6f3e, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x8001, 0x0)
mmap$auto(0x0, 0x4000b, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r2, 0x541c, 0xffffffffffffffff)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000)
socket(0x2, 0x5, 0x0)
bind$auto(0x3, 0x0, 0x6a)
sendmmsg$auto(r0, 0x0, 0xb, 0x9)

5.220480237s ago: executing program 0 (id=2151):
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async)
mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000)
mmap$auto(0x200000000, 0x200, 0x8, 0x40009b72, 0x2, 0x200000000008000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ptrace$auto(0x10, 0x0, 0x1, 0x7ff) (async)
ptrace$auto(0x10, 0x0, 0x1, 0x7ff)
ptrace$auto(0xc, 0x0, 0x9, 0xfffffffffffff6de)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)="158f4a2b") (async)
ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)="158f4a2b")
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r1, 0x0, 0x7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b) (async)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff00"}, 0x58)
prctl$auto(0xbe, 0x1, 0x0, 0x800000000000001, 0x7) (async)
prctl$auto(0xbe, 0x1, 0x0, 0x800000000000001, 0x7)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa)

4.788251943s ago: executing program 3 (id=2152):
truncate$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6)
listxattr$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x5)

4.621872301s ago: executing program 3 (id=2153):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
bpf$auto(0xe, &(0x7f000000f400)=@bpf_attr_3={0xa8, 0x40, 0x8, 0x0, 0x93, 0x8, 0x400, 0xd59, 0x0, "234609151bc4e66f54a7396fbd7fcaa2", 0x0, 0xb6d, 0xffffffffffffffff, 0x9, 0x6, 0x7, 0x81, 0x9, 0x8000, 0xe, @attach_prog_fd, 0x2, 0x2, 0xc, 0xc937, 0x51014626}, 0x9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000)
recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0)
r1 = socket(0xa, 0x5, 0x0)
getsockopt$auto(r1, 0x84, 0x7f, 0x0, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0)
unshare$auto(0x40000080)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0)
pread64$auto(r5, 0x0, 0x8100000041, 0x413e)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim7/ports/2/udp_ports_table0\x00', 0x224000, 0x0)
waitid$auto_P_PIDFD(0x3, r4, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x82}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x9, 0xc, 0xfffffffffffffffa})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)

3.236042054s ago: executing program 0 (id=2154):
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0)
r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r0, 0x560a, r1)
setreuid$auto(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x3, 0x3b)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x0, 0x5, 0x0)
ioctl$auto_SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0)
read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/40, 0x28)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x80000, 0x0)
connect$auto(0x3, 0x0, 0x54)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
mmap$auto(0x0, 0x203000b, 0x4, 0xeb1, 0x8, 0x8000)
r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0)
lseek$auto(r3, 0x3, 0xf)
pread64$auto(r3, 0x0, 0x101, 0x103)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0)
unshare$auto(0x40000080)
clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c800)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)

2.925268783s ago: executing program 3 (id=2155):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff)
r2 = setfsuid$auto(0xffffffffffffffff)
setresuid$auto(r2, r2, 0x200)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x124, r1, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x110, 0x3, 0x0, 0x1, [@nested={0x18, 0x5, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @uid=r2}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x9}]}, @generic="7aa10d75f941d778170c4543b50cb562fde2db61f01fec894f136b4a5c726157c9dac8e3323181410c8f8f1f9da9a969addb959f71402aab4ed5ef54d08f739b6ea6d2c8bae54090d17e704f2e04432ddc4d10e60898eb54871a7daff30f71695718ad3e1b8b34cbe9faceb752ee45ee29dca6a0f6d9fb872f58c4fdc8da2284a51e3a18bf2d24fca68fbdab07e1d67340ea2743c574cf482f63d38c9f8b9af6b704de899c7ca8133c673d4abde02c1f796e4cb33ee07e1b15483304cdb27e46aef5c73b5442ec8e2863c97407e1cf0f42bf9db4", @nested={0xc, 0xbc, 0x0, 0x1, [@typed={0x4, 0x88}, @nested={0x4, 0x85}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0)
rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0x8000006)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1)
futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2)
r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
write$auto_uinput_fops_uinput(r3, &(0x7f0000000280)="df67df350bfdd3ca5dcd1610c40d662a6e2428e4b36d16c63504a8451ecd68a37406d60f0e9e4edbc33e88882770411dbe8184db0910c0d609d55ccfa9f235db16ec14293b818a9a5a28f48e9003d31491aff6d237ada4c5e43bfb7a4568e0edc81f77bd39cc7f7efe2bf27d030e8408b59bd1cbd98a5bf381b0181a0c95909cae310bc63a488089dec279c4eea71e271d20b14ae5d1fdb2793bb237673894dce7b147d9c22d11b8e5176eb8204b0b2ebea7334eeb28d5f6b6580b916f672076906f77c6613821442249fc4c7184b44a80129518f3724a1dbc91bb6bba7c", 0xde)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000240)=""/213, 0xd5)
setsockopt$auto_SO_SNDTIMEO_NEW(r4, 0x3, 0x43, &(0x7f00000000c0)='$^t\xb8\x00=d}(\xad% ', 0x60)
process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0xa, 0x8, 0x0)

2.898085776s ago: executing program 6 (id=2156):
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0x203000d, 0x3, 0x3d, 0xfffffffffffffffa, 0x7fff)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x160240, 0x0)
read$auto(r1, 0x0, 0x85)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a)
r3 = socket(0xa, 0xa, 0x3)
setsockopt$auto_SO_WIFI_STATUS(r3, 0x0, 0x30, 0x0, 0x8f)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0)
sendfile$auto(r2, r4, 0x0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0)
r5 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0)
mmap$auto(0x0, 0x400008, 0xdd, 0x40000000000fff, 0x2, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
write$auto(r6, 0x0, 0xfffffdef)
mseal$auto(0x0, 0x7dda, 0x0)
mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000)
write$auto(r5, &(0x7f000000ac80)='\x00', 0xd)
mmap$auto(0x8, 0x7, 0x2, 0xeb1, 0x401, 0x8000)

2.650751314s ago: executing program 3 (id=2157):
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="0800cc9c97180000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000400), r1)
sendmsg$auto_ETHTOOL_MSG_MM_SET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_MM_VERIFY_ENABLED={0x5}, @ETHTOOL_A_MM_PMAC_ENABLED={0x5, 0x2, 0x1}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xfffeffff}, @ETHTOOL_A_MM_TX_ENABLED={0x5}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x6}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xfffffeff}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1)
sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf4}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xa}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x640c5}, 0x20040000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000bd1222a096de8ec96bd159f85414150a089c71ead1dad2326ec10cec544757b4c5a76625ba38b408dd8754a21ad170", @ANYRES16=r4, @ANYBLOB="00012cbd7000fcdbdf251100000008002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40000, 0x84)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/eql/ifalias\x00', 0xb02, 0x0)
write$auto(r5, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0x6)
write$auto_proc_clear_refs_operations_internal(0xffffffffffffffff, &(0x7f0000000280)="20056e823adee8a5e350c13bf4491ef375b91e644326f5ffc7cc83860dad119d80f3347b454248bf7f89a33ca43b41b079767a671b1a055fc51818d9c83ccf97c0e36277608c8f0955d6ed35cf4c5aaaaa0dec6be2054519d65eaa8ce553d7f69307bbaed6339ae1252c614f61186bdda715016f965293e9db6f1f273994b7ca195592a5355e1998cc8fc2b4e5ebd8b904ae10e519c7fa5ffe3feeab611ebf9faaebef662bb7f78c37e5d8a28c4537", 0xaf)
madvise$auto(0x0, 0x2003f2, 0x15)
ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
madvise$auto(0x0, 0x1010001, 0x100000003)
madvise$auto(0x1000, 0x400050, 0x9)
openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0)
r6 = setfsgid$auto(0xffffffffffffffff)
statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, r6, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x40, 0x6, 0x0, 0x9, [0x3, 0x10, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]})
statx$auto(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x80, 0x5, 0xee00, r6, 0xa267, 0xf801, 0x3, 0x4, 0x401, 0x0, {0x4, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x1, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x2]})
waitid$auto(0x2, 0xffffffffffffffff, &(0x7f0000000700)={@_si_pad}, 0x2, &(0x7f0000000780)={{0x200, 0x4}, {0x2, 0x81}, 0xfffffffe00000000, 0x3, 0xf1af, 0x2, 0xd, 0x5, 0x5, 0x7, 0x1, 0x2c, 0x56d, 0x6, 0xd3bf, 0xffffffffffffffff})
msgctl$auto_IPC_SET(0x76947c8f, 0x1, &(0x7f0000000840)={{0x5, 0x0, r6, 0x1ff, 0x6, 0x7, 0x10}, &(0x7f0000000680)=0x1, &(0x7f00000006c0)=0xc0, 0x8, 0x4, 0x8, 0x7b2, 0x239c, 0x1, 0x7e3, 0x9, @raw=0x200})
write$auto(0x1, 0x0, 0x80000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
munmap$auto(0x8000, 0xffffffff)

1.888153476s ago: executing program 3 (id=2158):
r0 = socket(0xa, 0x801, 0x106)
recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64})
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
listen$auto(r1, 0x0)
r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0)
preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x8, 0xe637, 0x6)
r3 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r4 = socket(0x10, 0x2, 0x11)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1e000000", @ANYBLOB="12", @ANYBLOB=']'], 0x1ac}}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0)
pread64$auto(r5, 0x0, 0x3ff, 0x9)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x6e, 0x0, [{0x0, 0x2, 0x8}, {0x8, 0x771f, 0x59be}, {0x81, 0x1, 0x9}, {0x0, 0x2, 0x3}, {0x5, 0xc0000}, {0xcac6, 0x43, 0x1}]})
mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x40008000)
r7 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r7, 0x107, 0x12, 0x0, 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r8 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r8, 0xaf01, 0x5)

1.546978808s ago: executing program 0 (id=2159):
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_LINK_GET(r1, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fbfc15b1", @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf25080000000800048004000180"], 0x1c}}, 0x8040)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040)
mmap$auto(0x0, 0x400008, 0x46, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40942, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x6, 0xffffffffffffffff, 0x200000000040eb2, 0xffffffffffffffff, 0x308000000000)
r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000000), 0x181041, 0x0)
write$auto_ucma_fops_ucma(r3, &(0x7f0000000040)="92df7c05cc7f3ca8", 0x8)
syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vgem/gem_names\x00', 0x400000, 0x0)

1.336387774s ago: executing program 7 (id=2160):
mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000)
timer_create$auto(0xfffffffc, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, r0, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x83}}, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa)
close_range$auto(0x2, 0x8, 0x0)

1.079589316s ago: executing program 6 (id=2161):
socket(0x5, 0x1, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sg1\x00', 0x10440, 0x0)
ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f00000011c0)={"8ea04fb36df5554bed21642e5fb6d0061e4aedbc2a1a536dae8b259ab9b62cdc", 0x0, 0x5, 0xffffffce, 0x3, 0x8}) (async)
ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f00000011c0)={"8ea04fb36df5554bed21642e5fb6d0061e4aedbc2a1a536dae8b259ab9b62cdc", 0x0, 0x5, 0xffffffce, 0x3, 0x8, <r1=>0x0})
ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f00000010c0)={"c6f0e7200d89a5b21b80b919cb5599dd0b8c3c4c42c16065b807aa63f5167307", 0x424, 0x80000001, 0xffff8001, 0xf, 0x6, r1}) (async)
ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f00000010c0)={"c6f0e7200d89a5b21b80b919cb5599dd0b8c3c4c42c16065b807aa63f5167307", 0x424, 0x80000001, 0xffff8001, 0xf, 0x6, <r2=>r1})
syz_open_procfs$namespace(r2, &(0x7f0000001140)='ns/uts\x00') (async)
syz_open_procfs$namespace(r2, &(0x7f0000001140)='ns/uts\x00')
mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) (async)
mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bus/usb/033/001\x00', 0xa801, 0x0)
ioctl$auto_USBDEVFS_SUBMITURB32(r3, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"])
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x100, 0x0)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) (async)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$auto(0x3, 0x80005520, 0x7f)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) (async)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
socket(0x28, 0x5, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)

794.43425ms ago: executing program 7 (id=2162):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0xc0000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
socket(0x11, 0x3, 0x9)
r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$auto(r1, 0x6f41, 0x38)
mmap$auto(0x0, 0x5, 0x3, 0xffffffffffff6f3e, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x80801, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r2, 0x6, 0xffffffffffffffff)

0s ago: executing program 6 (id=2164):
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
r0 = socket(0xa, 0x1, 0x84)
r1 = io_uring_setup$auto(0x401, 0x0)
ioctl$auto_I2C_SLAVE(r1, 0x703, &(0x7f0000000000)="cb2ba75f6e89179b196e6dddabc1ac046bb989470d90fdb62cab00a095f71e77be2315e8f69f63044b8960f9275f18cbe9ae55729396ac770fe0f63d9eab239a878f7bda6783bdeb387b7d96ec8a51d40604a47de29e2fcdf1637c3b51581bfb9eba68bb185080feb75fde01c9cf3104fedb1376bcb93954f6a58d136f65619402aab16b34dbbc4ad20dc326b51e9465a0c90446f639f84bd87b4bc65d4466017941e50dc5d07252ec8f296542dfe22af89fd23310f6e6be8397bbb9c7f19e2aadb238e06b8e25579406be27900b")
set_mempolicy$auto(0x1, 0x0, 0x21)
unshare$auto(0x40000080)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x82, 0x0, 0x0)

kernel console output (not intermixed with test programs):

.075964][T11018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.075985][T11018] RIP: 0033:0x7fc71e19ce59
[  372.076002][T11018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.076023][T11018] RSP: 002b:00007fc71ef9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  372.076044][T11018] RAX: ffffffffffffffda RBX: 00007fc71e416090 RCX: 00007fc71e19ce59
[  372.076057][T11018] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003
[  372.076070][T11018] RBP: 00007fc71e232d6f R08: 0000000000000000 R09: 0000000000000000
[  372.076083][T11018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.076095][T11018] R13: 00007fc71e416128 R14: 00007fc71e416090 R15: 00007fffbccbe6f8
[  372.076121][T11018]  </TASK>
[  372.825712][T11030] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1009'.

syzkaller
syzkaller login: [  373.676441][T11016] Process accounting resumed
[  374.192064][T11052] sd 0:0:1:0: PR command failed: 1026
[  374.215332][T11052] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  374.253658][T11052] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  375.589813][T11071] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1017'.
[  378.528098][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  378.534527][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  379.282713][T11078] Process accounting paused
[  379.963320][T11151] vhci_hcd: not connected 4
[  383.627178][T11146] Process accounting paused
[  386.370361][T11241] random: crng reseeded on system resumption
[  387.654733][T11242] bond0: option packets_per_slave: invalid value (X�n�p�)
[  387.739453][T11242] bond0: option packets_per_slave: allowed values 0 - 65535
[  388.470673][T11272] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1051'.
[  388.531932][T11274] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1051'.
[  388.939679][T11285] FAULT_INJECTION: forcing a failure.
[  388.939679][T11285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  388.965947][T11286] program syz.0.1052 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  389.027301][T11285] CPU: 0 UID: 0 PID: 11285 Comm: syz.1.1054 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  389.027342][T11285] Tainted: [L]=SOFTLOCKUP
[  389.027350][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  389.027362][T11285] Call Trace:
[  389.027368][T11285]  <TASK>
[  389.027376][T11285]  dump_stack_lvl+0x100/0x190
[  389.027416][T11285]  should_fail_ex.cold+0x5/0xa
[  389.027443][T11285]  _copy_from_user+0x2e/0xd0
[  389.027532][T11285]  move_addr_to_kernel+0x65/0x170
[  389.027563][T11285]  __sys_sendto+0x1c9/0x4b0
[  389.027598][T11285]  ? __pfx___sys_sendto+0x10/0x10
[  389.027637][T11285]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  389.027662][T11285]  ? count_memcg_events_mm.constprop.0+0xfa/0x2a0
[  389.027702][T11285]  __x64_sys_sendto+0xe0/0x1c0
[  389.027734][T11285]  ? do_syscall_64+0x90/0x840
[  389.027764][T11285]  ? lockdep_hardirqs_on+0x78/0x100
[  389.027793][T11285]  do_syscall_64+0x115/0x840
[  389.027821][T11285]  ? clear_bhb_loop+0x40/0x90
[  389.027846][T11285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.027867][T11285] RIP: 0033:0x7fc71e15d68e
[  389.027886][T11285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  389.027906][T11285] RSP: 002b:00007fc71ef99e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  389.027926][T11285] RAX: ffffffffffffffda RBX: 00007fc71ef9b6c0 RCX: 00007fc71e15d68e
[  389.027939][T11285] RDX: 000000000000001c RSI: 00007fc71ef9a000 RDI: 0000000000000006
[  389.027952][T11285] RBP: 0000000000000000 R08: 00007fc71ef99f04 R09: 000000000000000c
[  389.027965][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  389.027977][T11285] R13: 00007fc71ef99f58 R14: 00007fc71ef9a000 R15: 0000000000000000
[  389.028002][T11285]  </TASK>
[  390.262893][T11299] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  390.954369][T11318] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1062'.
[  391.087694][T11323] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1062'.
[  391.589484][T11311] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  391.680012][T11311] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  391.882954][T11311] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  391.912685][T11311] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  391.952278][T11311] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  391.987306][T11311] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  392.039712][T11311] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  392.081650][T11311] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  392.109432][T11311] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  393.084786][ T9214] Bluetooth: hci0: command 0x2016 tx timeout
[  393.353035][ T9214] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  393.886777][ T9214] Bluetooth: hci2: command 0x0406 tx timeout
[  394.124934][ T9214] Bluetooth: hci3: command 0x0406 tx timeout
[  395.164841][ T9740] Bluetooth: hci0: command 0x2016 tx timeout
[  395.964880][ T9214] Bluetooth: hci2: command 0x0406 tx timeout
[  396.204633][ T9214] Bluetooth: hci3: command 0x0406 tx timeout
[  399.686763][T11476] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1094'.
[  399.716852][T11479] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  399.789938][T11479] netlink: 5184 bytes leftover after parsing attributes in process `syz.1.1095'.
[  399.883674][T11479] can0: slcan on pty155.
[  400.031738][T11481] can0 (unregistered): slcan off pty155.
[  400.392959][T11496] Line length is too long: Should be less than 4094
[  400.882530][   T30] audit: type=1800 audit(4294976350.194:17): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1098" name="file0" dev="tmpfs" ino=1363 res=0 errno=0
[  401.400401][T11512] random: crng reseeded on system resumption
[  403.081299][T11527] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.1102: bg 1: bad block bitmap checksum
[  403.135537][T11527] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6679: Filesystem failed CRC
[  403.415975][T11535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'.
[  403.949631][T11545] misc userio: No port type given on /dev/userio
[  404.096345][T11538] Process accounting paused
[  405.747477][   T30] audit: type=1800 audit(4294976355.051:18): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1119" name="dbroot" dev="configfs" ino=44012 res=0 errno=0
[  409.356275][T11669] FAULT_INJECTION: forcing a failure.
[  409.356275][T11669] name failslab, interval 1, probability 0, space 0, times 0
[  409.443536][T11669] CPU: 0 UID: 0 PID: 11669 Comm: syz.1.1129 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  409.443570][T11669] Tainted: [L]=SOFTLOCKUP
[  409.443578][T11669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  409.443590][T11669] Call Trace:
[  409.443596][T11669]  <TASK>
[  409.443604][T11669]  dump_stack_lvl+0x100/0x190
[  409.443644][T11669]  should_fail_ex.cold+0x5/0xa
[  409.443670][T11669]  should_failslab+0xc2/0x120
[  409.443696][T11669]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  409.443731][T11669]  ? do_timer_create+0x209/0x1480
[  409.443760][T11669]  do_timer_create+0x209/0x1480
[  409.443785][T11669]  ? do_futex+0x192/0x350
[  409.443830][T11669]  ? __pfx_do_timer_create+0x10/0x10
[  409.443852][T11669]  ? __pfx_do_futex+0x10/0x10
[  409.443875][T11669]  ? __do_sys_capset+0xfb/0x460
[  409.443903][T11669]  __x64_sys_timer_create+0x199/0x1d0
[  409.443927][T11669]  ? __pfx___x64_sys_timer_create+0x10/0x10
[  409.443953][T11669]  ? xfd_validate_state+0x129/0x190
[  409.443982][T11669]  ? ksys_write+0x1ac/0x250
[  409.444009][T11669]  ? rcu_is_watching+0x12/0xc0
[  409.444036][T11669]  do_syscall_64+0x115/0x840
[  409.444066][T11669]  ? clear_bhb_loop+0x40/0x90
[  409.444097][T11669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.444118][T11669] RIP: 0033:0x7fc71e19ce59
[  409.444135][T11669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.444155][T11669] RSP: 002b:00007fc71ef9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de
[  409.444175][T11669] RAX: ffffffffffffffda RBX: 00007fc71e416090 RCX: 00007fc71e19ce59
[  409.444189][T11669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  409.444200][T11669] RBP: 00007fc71e232d6f R08: 0000000000000000 R09: 0000000000000000
[  409.444213][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.444225][T11669] R13: 00007fc71e416128 R14: 00007fc71e416090 R15: 00007fffbccbe6f8
[  409.444251][T11669]  </TASK>
[  410.228773][T11644] Process accounting resumed
[  411.541753][T11675] kexec: Could not allocate control_code_buffer

getty: ttyS0: read error: Resource temporarily unavailable
[  413.487955][T11733] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  413.680470][T11735] FAULT_INJECTION: forcing a failure.
[  413.680470][T11735] name fail_futex, interval 1, probability 0, space 0, times 0
[  413.738320][T11735] CPU: 0 UID: 0 PID: 11735 Comm: syz.2.1146 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.738354][T11735] Tainted: [L]=SOFTLOCKUP
[  413.738361][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  413.738374][T11735] Call Trace:
[  413.738380][T11735]  <TASK>
[  413.738388][T11735]  dump_stack_lvl+0x100/0x190
[  413.738428][T11735]  should_fail_ex.cold+0x5/0xa
[  413.738454][T11735]  get_futex_key+0x1d2/0x1510
[  413.738491][T11735]  ? __pfx_get_futex_key+0x10/0x10
[  413.738533][T11735]  futex_wake+0xea/0x530
[  413.738560][T11735]  ? __pfx_futex_wake+0x10/0x10
[  413.738585][T11735]  ? lockdep_hardirqs_on+0x78/0x100
[  413.738630][T11735]  do_futex+0x32b/0x350
[  413.738652][T11735]  ? __pfx_do_futex+0x10/0x10
[  413.738672][T11735]  ? __pfx___might_resched+0x10/0x10
[  413.738695][T11735]  ? blkcg_maybe_throttle_current+0x5e8/0xeb0
[  413.738818][T11735]  ? _raw_spin_unlock_irq+0x23/0x50
[  413.738848][T11735]  __x64_sys_futex+0x34f/0x4d0
[  413.738873][T11735]  ? __pfx___x64_sys_futex+0x10/0x10
[  413.738894][T11735]  ? exit_to_user_mode_loop+0xf3/0x670
[  413.738932][T11735]  ? rcu_is_watching+0x12/0xc0
[  413.738961][T11735]  do_syscall_64+0x115/0x840
[  413.738989][T11735]  ? clear_bhb_loop+0x40/0x90
[  413.739014][T11735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.739035][T11735] RIP: 0033:0x7f110bd9ce59
[  413.739051][T11735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.739072][T11735] RSP: 002b:00007f110cc090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  413.739091][T11735] RAX: ffffffffffffffda RBX: 00007f110c015fa8 RCX: 00007f110bd9ce59
[  413.739105][T11735] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f110c015fac
[  413.739118][T11735] RBP: 00007f110c015fa0 R08: 0000000000000001 R09: 0000000000000000
[  413.739131][T11735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.739143][T11735] R13: 00007f110c016038 R14: 00007ffc7e569000 R15: 00007ffc7e5690e8
[  413.739169][T11735]  </TASK>
[  414.197743][T11753] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1148'.
[  414.551114][T11739] wlan1: mtu less than device minimum
[  414.658589][T11739] Process accounting resumed
[  414.675968][T11763] ubi0: attaching mtd0
[  414.710210][T11763] ubi0: scanning is finished
[  414.732859][T11761] FAULT_INJECTION: forcing a failure.
[  414.732859][T11761] name failslab, interval 1, probability 0, space 0, times 0
[  414.748851][T11763] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  414.855621][T11761] CPU: 0 UID: 0 PID: 11761 Comm: syz.2.1150 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.855658][T11761] Tainted: [L]=SOFTLOCKUP
[  414.855666][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  414.855680][T11761] Call Trace:
[  414.855687][T11761]  <TASK>
[  414.855696][T11761]  dump_stack_lvl+0x100/0x190
[  414.855740][T11761]  should_fail_ex.cold+0x5/0xa
[  414.855770][T11761]  should_failslab+0xc2/0x120
[  414.855802][T11761]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  414.855839][T11761]  ? security_inode_alloc+0x3b/0x2c0
[  414.855865][T11761]  ? lockdep_init_map_type+0x5c/0x250
[  414.855907][T11761]  security_inode_alloc+0x3b/0x2c0
[  414.855934][T11761]  inode_init_always_gfp+0xc77/0xfb0
[  414.855968][T11761]  alloc_inode+0x8e/0x250
[  414.856004][T11761]  new_inode+0x22/0x1c0
[  414.856042][T11761]  __debugfs_create_file+0x105/0x4f0
[  414.856154][T11761]  debugfs_create_file_full+0x41/0x60
[  414.856182][T11761]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  414.856228][T11761]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  414.856250][T11761]  ? ida_alloc_range+0x70d/0x830
[  414.856350][T11761]  ? lockdep_init_map_type+0x5c/0x250
[  414.856392][T11761]  preinit_net.part.0+0x252/0x920
[  414.856442][T11761]  copy_net_ns+0x339/0x7c0
[  414.856473][T11761]  create_new_namespaces+0x3ea/0xac0
[  414.856515][T11761]  unshare_nsproxy_namespaces+0xf2/0x220
[  414.856547][T11761]  ksys_unshare+0x438/0xab0
[  414.856587][T11761]  ? __pfx_ksys_unshare+0x10/0x10
[  414.856619][T11761]  ? xfd_validate_state+0x129/0x190
[  414.856652][T11761]  __x64_sys_unshare+0x31/0x40
[  414.856685][T11761]  do_syscall_64+0x115/0x840
[  414.856717][T11761]  ? clear_bhb_loop+0x40/0x90
[  414.856758][T11761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.856791][T11761] RIP: 0033:0x7f110bd9ce59
[  414.856807][T11761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.856826][T11761] RSP: 002b:00007f110cbe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  414.856845][T11761] RAX: ffffffffffffffda RBX: 00007f110c016090 RCX: 00007f110bd9ce59
[  414.856858][T11761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  414.856870][T11761] RBP: 00007f110be32d6f R08: 0000000000000000 R09: 0000000000000000
[  414.856882][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.856893][T11761] R13: 00007f110c016128 R14: 00007f110c016090 R15: 00007ffc7e5690e8
[  414.856919][T11761]  </TASK>
[  415.369565][T11761] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880348ea940'
[  415.529648][T11763] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  415.760630][T11786] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  418.552252][T11812] bridge0: port 3(bond0) entered blocking state
[  418.602815][T11812] bridge0: port 3(bond0) entered disabled state
[  418.660638][T11812] bond0: entered allmulticast mode
[  418.699857][T11812] bond_slave_0: entered allmulticast mode
[  418.740421][T11812] bond_slave_1: entered allmulticast mode
[  418.800992][T11812] bond0: entered promiscuous mode
[  418.832298][T11812] bond_slave_0: entered promiscuous mode
[  418.868305][T11812] bond_slave_1: entered promiscuous mode
[  418.914475][T11812] bridge0: port 3(bond0) entered blocking state
[  418.920933][T11812] bridge0: port 3(bond0) entered forwarding state
[  422.711126][T11855] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  424.434931][T11874] random: crng reseeded on system resumption
[  424.850219][T11875] FAULT_INJECTION: forcing a failure.
[  424.850219][T11875] name failslab, interval 1, probability 0, space 0, times 0
[  425.032084][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.0.1174 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.032116][T11875] Tainted: [L]=SOFTLOCKUP
[  425.032123][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  425.032136][T11875] Call Trace:
[  425.032143][T11875]  <TASK>
[  425.032151][T11875]  dump_stack_lvl+0x100/0x190
[  425.032191][T11875]  should_fail_ex.cold+0x5/0xa
[  425.032217][T11875]  should_failslab+0xc2/0x120
[  425.032242][T11875]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  425.032277][T11875]  ? __d_alloc+0x34/0xa40
[  425.032311][T11875]  __d_alloc+0x34/0xa40
[  425.032342][T11875]  d_alloc+0x4a/0x1e0
[  425.032377][T11875]  lookup_one_qstr_excl+0x171/0x250
[  425.032413][T11875]  start_dirop+0x59/0xb0
[  425.032437][T11875]  simple_start_creating+0xf9/0x110
[  425.032487][T11875]  ? __pfx_simple_start_creating+0x10/0x10
[  425.032512][T11875]  ? mntput+0x70/0xa0
[  425.032534][T11875]  ? simple_pin_fs+0xa3/0x190
[  425.032557][T11875]  debugfs_start_creating.part.0+0x82/0x170
[  425.032581][T11875]  __debugfs_create_file+0xb3/0x4f0
[  425.032605][T11875]  debugfs_create_file_full+0x41/0x60
[  425.032629][T11875]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  425.032651][T11875]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  425.032670][T11875]  ? ida_alloc_range+0x70d/0x830
[  425.032720][T11875]  ? lockdep_init_map_type+0x5c/0x250
[  425.032758][T11875]  preinit_net.part.0+0x252/0x920
[  425.032783][T11875]  copy_net_ns+0x339/0x7c0
[  425.032811][T11875]  create_new_namespaces+0x3ea/0xac0
[  425.032842][T11875]  unshare_nsproxy_namespaces+0xf2/0x220
[  425.032871][T11875]  ksys_unshare+0x438/0xab0
[  425.032901][T11875]  ? __pfx_ksys_unshare+0x10/0x10
[  425.032930][T11875]  ? xfd_validate_state+0x129/0x190
[  425.032949][T11875]  ? ksys_write+0x1ac/0x250
[  425.032980][T11875]  __x64_sys_unshare+0x31/0x40
[  425.033009][T11875]  do_syscall_64+0x115/0x840
[  425.033038][T11875]  ? clear_bhb_loop+0x40/0x90
[  425.033063][T11875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.033084][T11875] RIP: 0033:0x7fe97039ce59
[  425.033100][T11875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.033121][T11875] RSP: 002b:00007fe971259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  425.033140][T11875] RAX: ffffffffffffffda RBX: 00007fe970615fa0 RCX: 00007fe97039ce59
[  425.033154][T11875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  425.033166][T11875] RBP: 00007fe970432d6f R08: 0000000000000000 R09: 0000000000000000
[  425.033179][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.033191][T11875] R13: 00007fe970616038 R14: 00007fe970615fa0 R15: 00007fff4ce7dd58
[  425.033217][T11875]  </TASK>
[  429.411602][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'.
[  429.566625][ T9214] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260
[  429.566652][ T9214] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260
[  429.581826][ T9214] Bluetooth: hci2: Dropping invalid advertising data
[  429.590204][ T9214] Bluetooth: hci2: unknown advertising packet type: 0xe9
[  429.590223][ T9214] Bluetooth: hci2: unknown advertising packet type: 0x70
[  429.597420][ T9214] Bluetooth: hci2: unknown advertising packet type: 0x08
[  429.605330][ T9214] Bluetooth: hci2: unknown advertising packet type: 0x0f
[  429.615348][ T9214] Bluetooth: hci2: unknown advertising packet type: 0xf6
[  429.623214][ T9214] Bluetooth: hci2: unknown advertising packet type: 0x07
[  429.630447][ T9214] Bluetooth: hci2: unknown advertising packet type: 0x80
[  429.638350][ T9214] Bluetooth: hci2: Dropping invalid advertising data
[  431.349925][T11939] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  431.466640][T11939] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  431.559350][   T30] audit: type=1800 audit(4294976380.848:19): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1183" name="dbroot" dev="configfs" ino=45993 res=0 errno=0
[  431.618455][T11939] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  432.337550][ T9740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  432.351422][ T9740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  432.363493][ T9740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  432.372808][ T9740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  432.381851][ T9740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  432.782530][T11962] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  432.799781][T11962] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  432.831911][T11962] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  432.859960][T11962] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  432.892042][T11962] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  432.919206][T11962] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  432.989347][T11962] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  433.798761][ T9740] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  433.900151][ T9740] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5
[  434.458389][T11972] Process accounting resumed
[  434.863849][ T9740] Bluetooth: hci3: command 0x0406 tx timeout
[  434.870801][ T9740] Bluetooth: hci1: command 0x0406 tx timeout
[  434.876924][ T9214] Bluetooth: hci2: command 0x0406 tx timeout
[  434.882993][ T9214] Bluetooth: hci0: command 0x2016 tx timeout
[  434.943418][T11999] Bluetooth: hci4: command 0x041b tx timeout
[  435.127170][T12000] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  435.409526][T12002] smpboot: CPU 1 is now offline
[  435.468939][T11950] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.518973][T11950] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.563445][T11950] bridge_slave_0: entered allmulticast mode
[  435.590354][T11950] bridge_slave_0: entered promiscuous mode
[  435.870953][T11950] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.906667][T11950] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.937164][T11950] bridge_slave_1: entered allmulticast mode
[  435.970683][T11950] bridge_slave_1: entered promiscuous mode
[  436.680788][T11950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.736970][T11950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.943376][ T9171] Bluetooth: hci3: command 0x0406 tx timeout
[  436.952120][T11999] Bluetooth: hci1: command 0x0406 tx timeout
[  437.023412][T11999] Bluetooth: hci4: command 0x041b tx timeout
[  437.241996][T11950] team0: Port device team_slave_0 added
[  437.263200][T11950] team0: Port device team_slave_1 added
[  437.384026][T11950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.433302][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.549820][T11950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.598554][T11950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.621803][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  437.720460][T11950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.873202][T12035] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  438.000159][ T9169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.273415][T11950] hsr_slave_0: entered promiscuous mode
[  438.295135][T11950] hsr_slave_1: entered promiscuous mode
[  438.315355][T11950] debugfs: 'hsr0' already exists in 'hsr'
[  438.337282][T11950] Cannot create hsr debugfs directory
[  438.462771][ T9169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.676845][ T9169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.856116][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'.
[  439.006919][ T9169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.024329][ T9214] Bluetooth: hci3: command 0x0406 tx timeout
[  439.105537][ T9214] Bluetooth: hci4: command 0x041b tx timeout
[  439.987847][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  439.997246][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  440.039081][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'.
[  440.275327][ T9169] bridge_slave_1: left allmulticast mode
[  440.314108][ T9169] bridge_slave_1: left promiscuous mode
[  440.358681][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.438317][ T9169] bridge_slave_0: left allmulticast mode
[  440.474059][ T9169] bridge_slave_0: left promiscuous mode
[  440.505636][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.003466][T12054] kexec: Could not allocate control_code_buffer
[  441.131994][T12054] Process accounting paused
[  441.186569][ T9214] Bluetooth: hci4: command 0x041b tx timeout
[  441.624204][ T9169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.652009][ T9169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.682104][ T9169] bond0 (unregistering): Released all slaves
[  441.731256][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1
[  441.770557][T11950] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  441.852110][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  441.903454][T11950] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  441.959969][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  442.083286][T11950] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  442.119647][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  442.146413][T11950] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  442.163921][T11950] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  443.239789][ T9169] hsr_slave_0: left promiscuous mode
[  443.266415][ T9214] Bluetooth: hci4: command 0x041b tx timeout
[  443.276542][ T9169] hsr_slave_1: left promiscuous mode
[  443.308088][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.353621][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.410841][ T9169] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.449741][ T9169] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.592377][ T9169] veth1_macvtap: left promiscuous mode
[  443.632015][ T9169] veth0_macvtap: left promiscuous mode
[  443.661432][ T9169] veth1_vlan: left promiscuous mode
[  443.704776][ T9169] veth0_vlan: left promiscuous mode
[  444.585482][ T9169] team0 (unregistering): Port device team_slave_1 removed
[  444.611200][ T9169] team0 (unregistering): Port device team_slave_0 removed
[  444.654565][T12170] : Can't lookup blockdev
[  444.847461][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2
[  445.347617][ T9214] Bluetooth: hci4: command 0x041b tx timeout
[  445.739290][T11950] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.073206][T11950] 8021q: adding VLAN 0 to HW filter on device team0
[  446.143547][T12168] Process accounting paused
[  446.156530][T11619] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.163657][T11619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.298385][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3
[  446.335194][T11619] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.342439][T11619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.615958][T12194] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  448.731103][T11950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.900992][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4
[  449.018711][T12263] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  449.761902][T11950] veth0_vlan: entered promiscuous mode
[  449.971251][T11950] veth1_vlan: entered promiscuous mode
[  450.396675][T11950] veth0_macvtap: entered promiscuous mode
[  450.610853][T11950] veth1_macvtap: entered promiscuous mode
[  450.772196][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1232'.
[  450.811875][T11950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.937891][T11950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.077355][T11623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.121370][ T9188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.168606][ T9188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.220887][ T9188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.436422][T12307] Line length is too long: Should be less than 4094
[  451.602959][T11619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.658135][T11619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.790299][ T9169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.824505][ T9169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.726604][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'.
[  453.245504][T12328] kexec: Could not allocate control_code_buffer
[  454.365596][ T9214] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9
[  454.373176][ T9214] Bluetooth: hci4: unexpected subevent 0x03 length: 253 > 9
[  454.416233][T12356] ecryptfs_miscdev_write: Invalid packet size [192]
[  454.463917][T12355] ecryptfs_miscdev_write: Invalid packet size [192]
[  455.786525][T12337] zram: Removed device: zram0
[  458.098176][T12413] FAULT_INJECTION: forcing a failure.
[  458.098176][T12413] name failslab, interval 1, probability 0, space 0, times 0
[  458.393675][T12413] CPU: 0 UID: 0 PID: 12413 Comm: syz.4.1250 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  458.393710][T12413] Tainted: [L]=SOFTLOCKUP
[  458.393717][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  458.393729][T12413] Call Trace:
[  458.393736][T12413]  <TASK>
[  458.393750][T12413]  dump_stack_lvl+0x100/0x190
[  458.393792][T12413]  should_fail_ex.cold+0x5/0xa
[  458.393821][T12413]  ? get_callchain_buffers+0x123/0x380
[  458.393849][T12413]  should_failslab+0xc2/0x120
[  458.393874][T12413]  __kmalloc_noprof+0xe0/0x850
[  458.393908][T12413]  ? __pfx_rcu_is_watching+0x10/0x10
[  458.393938][T12413]  get_callchain_buffers+0x123/0x380
[  458.393964][T12413]  ? bpf_lsm_capable+0x9/0x10
[  458.393986][T12413]  ? security_capable+0x80/0x260
[  458.394008][T12413]  stack_map_alloc+0x316/0x610
[  458.394033][T12413]  ? __pfx_stack_map_mem_usage+0x10/0x10
[  458.394057][T12413]  map_create+0x84e/0x2bc0
[  458.394116][T12413]  ? futex_unqueue+0x13d/0x2c0
[  458.394138][T12413]  ? __futex_wait+0x256/0x300
[  458.394173][T12413]  ? __pfx_map_create+0x10/0x10
[  458.394203][T12413]  ? __might_fault+0xc5/0x140
[  458.394235][T12413]  ? __might_fault+0xc5/0x140
[  458.394276][T12413]  __sys_bpf+0x2091/0x4b90
[  458.394299][T12413]  ? __pfx___sys_bpf+0x10/0x10
[  458.394321][T12413]  ? __pfx_futex_wait+0x10/0x10
[  458.394352][T12413]  ? ksys_write+0x190/0x250
[  458.394383][T12413]  ? do_futex+0x192/0x350
[  458.394416][T12413]  ? xfd_validate_state+0x129/0x190
[  458.394444][T12413]  __x64_sys_bpf+0x7b/0xc0
[  458.394464][T12413]  ? lockdep_hardirqs_on+0x78/0x100
[  458.394496][T12413]  do_syscall_64+0x115/0x840
[  458.394524][T12413]  ? clear_bhb_loop+0x40/0x90
[  458.394550][T12413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.394572][T12413] RIP: 0033:0x7f03eb39ce59
[  458.394589][T12413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.394609][T12413] RSP: 002b:00007f03ec2e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  458.394630][T12413] RAX: ffffffffffffffda RBX: 00007f03eb616090 RCX: 00007f03eb39ce59
[  458.394644][T12413] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000
[  458.394656][T12413] RBP: 00007f03eb432d6f R08: 0000000000000000 R09: 0000000000000000
[  458.394669][T12413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.394681][T12413] R13: 00007f03eb616128 R14: 00007f03eb616090 R15: 00007fff371200a8
[  458.394706][T12413]  </TASK>
[  460.321078][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'.
[  462.697405][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1256'.
[  463.327122][T12481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1257'.
[  465.832731][T12469] Process accounting paused
[  469.464389][T12597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'.
[  472.457435][T12594] Process accounting resumed
[  473.407513][T12625] bond0: invalid ARP target specified
[  476.615415][T12648] Process accounting resumed
[  478.179381][T12717] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer.
[  478.985892][T12691] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  480.467397][T12759] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  480.754384][T12759] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  481.448101][T12767] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input10
[  482.816415][ T9214] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  483.138874][T12800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3143549974 (100593599168 ns) > initial count (70706024576 ns). Using initial count to start timer.
[  484.505051][T12831] vhci_hcd: not connected 4
[  484.723908][T12807] kexec: Could not allocate control_code_buffer
[  485.748985][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'.
[  486.690764][T12880] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  487.586963][T12875] bond0: invalid ARP target specified
[  488.184194][T12900] ima: policy update failed
[  488.214701][   T30] audit: type=1802 audit(4294976437.480:20): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1334" res=0 errno=0
[  488.498673][T12907] FAULT_INJECTION: forcing a failure.
[  488.498673][T12907] name failslab, interval 1, probability 0, space 0, times 0
[  488.586903][T12907] CPU: 0 UID: 0 PID: 12907 Comm: syz.4.1335 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  488.586934][T12907] Tainted: [L]=SOFTLOCKUP
[  488.586941][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  488.586954][T12907] Call Trace:
[  488.586960][T12907]  <TASK>
[  488.586968][T12907]  dump_stack_lvl+0x100/0x190
[  488.587008][T12907]  should_fail_ex.cold+0x5/0xa
[  488.587034][T12907]  should_failslab+0xc2/0x120
[  488.587060][T12907]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  488.587094][T12907]  ? alloc_inode+0x68/0x250
[  488.587127][T12907]  ? simple_start_creating+0xb0/0x110
[  488.587152][T12907]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  488.587253][T12907]  alloc_inode+0x68/0x250
[  488.587285][T12907]  new_inode+0x22/0x1c0
[  488.587320][T12907]  __debugfs_create_file+0x105/0x4f0
[  488.587345][T12907]  debugfs_create_file_full+0x41/0x60
[  488.587369][T12907]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  488.587391][T12907]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  488.587443][T12907]  ? lockdep_init_map_type+0x5c/0x250
[  488.587488][T12907]  preinit_net.part.0+0x43b/0x920
[  488.587516][T12907]  copy_net_ns+0x339/0x7c0
[  488.587543][T12907]  create_new_namespaces+0x3ea/0xac0
[  488.587575][T12907]  unshare_nsproxy_namespaces+0xf2/0x220
[  488.587605][T12907]  ksys_unshare+0x438/0xab0
[  488.587637][T12907]  ? __pfx_ksys_unshare+0x10/0x10
[  488.587665][T12907]  ? xfd_validate_state+0x129/0x190
[  488.587684][T12907]  ? ksys_write+0x1ac/0x250
[  488.587715][T12907]  __x64_sys_unshare+0x31/0x40
[  488.587744][T12907]  do_syscall_64+0x115/0x840
[  488.587774][T12907]  ? clear_bhb_loop+0x40/0x90
[  488.587799][T12907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.587820][T12907] RIP: 0033:0x7f03eb39ce59
[  488.587836][T12907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.587857][T12907] RSP: 002b:00007f03ec305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  488.587877][T12907] RAX: ffffffffffffffda RBX: 00007f03eb615fa0 RCX: 00007f03eb39ce59
[  488.587890][T12907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  488.587902][T12907] RBP: 00007f03eb432d6f R08: 0000000000000000 R09: 0000000000000000
[  488.587915][T12907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  488.587927][T12907] R13: 00007f03eb616038 R14: 00007f03eb615fa0 R15: 00007fff371200a8
[  488.587953][T12907]  </TASK>
[  488.587971][T12907] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88804f82d078'
[  490.489466][T12936] i2c i2c-0: delete_device: Can't find device in list
[  490.565983][ T9214] block nbd0: Receive control failed (result -107)
[  490.619828][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'.
[  492.300735][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'.
[  492.326105][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'.
[  492.365151][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'.
[  495.048681][T13007] Process accounting resumed
[  495.891036][T13048] Process accounting resumed
[  496.346028][T13095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  496.481909][T13094] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  496.587411][T13094] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  496.622222][T13094] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  496.664991][T13094] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  498.062089][T13133] netlink: 318 bytes leftover after parsing attributes in process `syz.3.1370'.
[  498.334164][ T9214] Bluetooth: hci0: command 0x2016 tx timeout
[  498.659835][ T9214] Bluetooth: hci3: command 0x0406 tx timeout
[  498.666055][T11999] Bluetooth: hci2: command 0x0406 tx timeout
[  498.735208][ T9214] Bluetooth: hci4: command 0x041b tx timeout
[  498.960581][T13154] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  500.008072][T13157] Process accounting resumed
[  501.456674][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  501.463101][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  501.635395][T13225] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  503.085342][T13211] Process accounting paused
[  503.424999][T13262] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1386'.
[  504.944136][T13297] vivid-007: =================  START STATUS  =================
[  505.006531][T13297] vivid-007: Generate PTS: true
[  505.047628][T13297] vivid-007: Generate SCR: true
[  505.103096][T13297] tpg source WxH: 320x240 (Y'CbCr)
[  505.143134][T13297] tpg field: 1
[  505.193904][T13297] tpg crop: (0,0)/320x240
[  505.279296][T13297] tpg compose: (0,0)/320x240
[  505.341222][T13297] tpg colorspace: 8
[  505.385396][T13297] tpg transfer function: 0/0
[  505.434209][T13297] tpg Y'CbCr encoding: 0/0
[  505.434233][T13297] tpg quantization: 0/0
[  505.434243][T13297] tpg RGB range: 0/2
[  505.434253][T13297] vivid-007: ==================  END STATUS  ==================
[  505.632809][T13294] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  505.642235][T13294] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  505.642358][T13294] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  505.642460][T13294] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  505.891390][T13309] zswap: compressor  not available
[  506.572127][T13338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3504379554 (448560582912 ns) > initial count (299317746688 ns). Using initial count to start timer.
[  507.378976][ T9214] Bluetooth: hci0: command 0x2016 tx timeout
[  507.699415][T11999] Bluetooth: hci4: command 0x041b tx timeout
[  507.705929][ T9171] Bluetooth: hci2: command 0x0406 tx timeout
[  507.714420][ T9214] Bluetooth: hci3: command 0x0406 tx timeout
[  507.887785][T13370] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  509.048340][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'.
[  513.570263][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'.
[  513.607594][T13478] block2mtd: illegal erase size
[  514.202059][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1430'.
[  514.347600][T13497] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  514.417252][T13497] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  514.467105][T13497] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  517.336785][ T9171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  517.351628][ T9171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  517.368963][ T9171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  517.377497][ T9171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  517.387238][ T9171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  517.652978][T13581] sock: sock_set_timeout: `syz.0.1444' (pid 13581) tries to set negative timeout
[  517.730343][T13584] block2mtd: attempting to use an MTD device as a block device
[  517.758016][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1443'.
[  518.773977][T13601] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  519.461661][ T9214] Bluetooth: hci1: command tx timeout
[  519.929971][T13573] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.947420][T13573] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.961017][T13573] bridge_slave_0: entered allmulticast mode
[  519.977568][T13573] bridge_slave_0: entered promiscuous mode
[  520.010673][T13573] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.042091][T13573] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.077964][T13573] bridge_slave_1: entered allmulticast mode
[  520.112554][T13573] bridge_slave_1: entered promiscuous mode
[  520.417310][T13573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.479570][T13573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.654072][T13573] team0: Port device team_slave_0 added
[  520.698137][T13573] team0: Port device team_slave_1 added
[  520.860457][T13573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.927046][T13573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.007474][   T30] audit: type=1326 audit(4294977493.254:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.4.1455" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03eb39ce59 code=0x0
[  521.050362][T13573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.066971][T13573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.083969][T13573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.168226][T13573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.322868][T13573] hsr_slave_0: entered promiscuous mode
[  521.347586][T13573] hsr_slave_1: entered promiscuous mode
[  521.369799][T13573] debugfs: 'hsr0' already exists in 'hsr'
[  521.387332][T13573] Cannot create hsr debugfs directory
[  521.447011][T13660] random: crng reseeded on system resumption
[  521.541065][ T9214] Bluetooth: hci1: command tx timeout
[  522.010082][ T9214] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  522.469341][T13573] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.696686][T13573] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.839010][T13573] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.126069][T13573] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.621617][ T9214] Bluetooth: hci1: command tx timeout
[  524.141974][T13573] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  524.176089][T13573] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  524.201837][T13573] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  524.247128][T13573] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  524.280715][T13573] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  524.315882][T13573] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  524.330879][T13716] futex_wake_op: syz.0.1467 tries to shift op by -2048; fix this program
[  524.348327][T13573] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  524.374255][T13573] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.660100][T13573] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.772066][T13573] 8021q: adding VLAN 0 to HW filter on device team0
[  524.959706][T11623] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.966954][T11623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.135562][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.142805][ T9169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.700129][T13741] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  525.711199][ T9214] Bluetooth: hci1: command tx timeout
[  525.934925][T13723] Process accounting paused
[  527.771671][T13573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.988679][T13788] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  528.066977][T13573] veth0_vlan: entered promiscuous mode
[  528.103831][T13573] veth1_vlan: entered promiscuous mode
[  528.209272][T13573] veth0_macvtap: entered promiscuous mode
[  528.244808][T13573] veth1_macvtap: entered promiscuous mode
[  528.319430][T13573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  528.384277][T13573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.450019][T11613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.499904][T11613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.674795][T11613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.711625][T11613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.141612][T13801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1480'.
[  529.507733][T11613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.554067][T11613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.688244][T11619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.732913][T11619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.233871][T13809] Process accounting paused
[  530.422428][T13821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  530.813022][T13821] CIFS mount error: No usable UNC path provided in device string!
[  530.813022][T13821] 
[  530.971607][T13821] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  531.787355][T13842] tc_dump_action: action bad kind
[  531.952683][T13846] zswap: compressor  not available
[  532.376679][T13870] vhci_hcd vhci_hcd.3: invalid port number 108
[  532.606308][T13877] block nbd1: Unsupported socket: should be TCP or UNIX.
[  532.637695][T13879] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1497'.
[  532.864032][T13876] bond0: invalid ARP target specified
[  534.355276][T13915] : Can't lookup blockdev
[  535.055689][T13928] random: crng reseeded on system resumption
[  535.460127][T13944] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  536.428574][T13960] binder: 13959:13960 ioctl c0046209 38 returned -22
[  536.575870][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'.
[  536.628276][T13957] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1514'.
[  536.879029][ T9214] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  537.178218][T13975] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000
[  537.229868][T13975] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[  537.269258][T13975] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000
[  537.312049][T13975] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  537.369036][T13975] page dumped because: unmovable page
[  537.409230][T13975] page_owner info is not present (never set?)
[  538.036868][T14000] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  538.562972][T14015] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  538.603345][T14015] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  538.636714][T14015] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  538.668712][T14015] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  538.707139][T14015] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  538.762610][T14015] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  539.296885][T14029] zswap: compressor  not available
[  540.580980][ T9214] Bluetooth: hci0: command 0x2016 tx timeout
[  540.661287][ T9214] Bluetooth: hci4: command 0x041b tx timeout
[  540.667460][ T9171] Bluetooth: hci3: command 0x0406 tx timeout
[  540.741523][ T9171] Bluetooth: hci1: command 0x0c1a tx timeout
[  541.414355][T14067] random: crng reseeded on system resumption
[  542.820825][ T9171] Bluetooth: hci1: command 0x0c1a tx timeout
[  543.118104][T14083] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  543.202690][T14084] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  543.409727][   T30] audit: type=1800 audit(4294977515.664:22): pid=14086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1538" name="lu_gp_id" dev="configfs" ino=59535 res=0 errno=0
[  544.903182][ T9171] Bluetooth: hci1: command 0x0c1a tx timeout
[  544.971868][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'.
[  545.382132][T14117] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  547.753001][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'.
[  547.811526][T14148] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1547'.
[  551.262896][T14206] kexec: Could not allocate control_code_buffer
[  551.273779][T14229] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  551.821853][T14252] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  552.023640][T14257] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1570'.
[  552.057052][T14257] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1570'.
[  552.214951][T14261] kafs: addr_prefs: Invalid Command
[  553.219824][T14278] kAFS: Invalid Command on /proc/fs/afs/cells file
[  554.123424][T14285] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  554.165666][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'.
[  554.938729][T14300] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  554.970147][T14300] random: crng reseeded on system resumption
[  555.059759][T14312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'.
[  555.190321][T14312] bridge0: port 3(bond0) entered disabled state
[  555.244173][T14312] bond0 (unregistering): left allmulticast mode
[  555.291751][T14312] bond_slave_0: left allmulticast mode
[  555.335092][T14312] bond_slave_1: left allmulticast mode
[  555.385341][T14312] bond0 (unregistering): left promiscuous mode
[  555.418350][T14312] bond_slave_0: left promiscuous mode
[  555.456829][T14312] bond_slave_1: left promiscuous mode
[  555.488570][T14312] bridge0: port 3(bond0) entered disabled state
[  555.590610][T14312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.657111][T14312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.720600][T14315] FAULT_INJECTION: forcing a failure.
[  555.720600][T14315] name failslab, interval 1, probability 0, space 0, times 0
[  555.760302][T14312] bond0 (unregistering): Released all slaves
[  555.804186][T14315] CPU: 0 UID: 0 PID: 14315 Comm: syz.4.1580 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  555.804218][T14315] Tainted: [L]=SOFTLOCKUP
[  555.804225][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  555.804237][T14315] Call Trace:
[  555.804244][T14315]  <TASK>
[  555.804251][T14315]  dump_stack_lvl+0x100/0x190
[  555.804291][T14315]  should_fail_ex.cold+0x5/0xa
[  555.804317][T14315]  should_failslab+0xc2/0x120
[  555.804343][T14315]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  555.804376][T14315]  ? kcm_create+0x11e/0x6a0
[  555.804496][T14315]  kcm_create+0x11e/0x6a0
[  555.804525][T14315]  __sock_create+0x339/0x860
[  555.804558][T14315]  __sys_socket+0x14d/0x260
[  555.804590][T14315]  ? __pfx___sys_socket+0x10/0x10
[  555.804619][T14315]  ? ksys_write+0x1ac/0x250
[  555.804648][T14315]  __x64_sys_socket+0x72/0xb0
[  555.804676][T14315]  ? lockdep_hardirqs_on+0x78/0x100
[  555.804706][T14315]  do_syscall_64+0x115/0x840
[  555.804734][T14315]  ? clear_bhb_loop+0x40/0x90
[  555.804759][T14315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.804780][T14315] RIP: 0033:0x7f03eb39ce59
[  555.804796][T14315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.804816][T14315] RSP: 002b:00007f03ec305028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  555.804836][T14315] RAX: ffffffffffffffda RBX: 00007f03eb615fa0 RCX: 00007f03eb39ce59
[  555.804850][T14315] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029
[  555.804862][T14315] RBP: 00007f03eb432d6f R08: 0000000000000000 R09: 0000000000000000
[  555.804874][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  555.804886][T14315] R13: 00007f03eb616038 R14: 00007f03eb615fa0 R15: 00007fff371200a8
[  555.804911][T14315]  </TASK>
[  556.141519][T14323] Process accounting resumed
[  556.518286][T14333] capability: warning: `syz.0.1583' uses deprecated v2 capabilities in a way that may be insecure
[  558.250755][T14360] smc: net device dummy0 applied user defined pnetid DUMMY0
[  559.041439][T14395] block2mtd: illegal erase size
[  560.438357][T14412] Process accounting resumed
[  560.552658][T14420] random: crng reseeded on system resumption
[  562.179150][T14446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'.
[  562.401172][T14443] futex_wake_op: syz.4.1607 tries to shift op by -1; fix this program
[  562.920347][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  562.928654][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  563.150680][ T9171] Bluetooth: hci4: unexpected event 0x3e length: 0 < 1
[  563.372118][T14456] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1609'.
[  564.223823][T14469] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1611'.
[  564.840559][T14433] kexec: Could not allocate control_code_buffer
[  567.123780][T14523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1622'.
[  569.090010][ T9629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.274609][ T9629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.437174][ T9629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.470094][T14561] random: crng reseeded on system resumption
[  569.553335][T14561] RDS: rds_bind could not find a transport for fe80::736d:2f73:7461:626c, load rds_tcp or rds_rdma?
[  569.642003][ T9629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.745299][ T9214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  569.756648][ T9214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  569.765624][ T9214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  569.775845][ T9214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  569.789118][ T9214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  570.533810][T14584] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  570.574512][ T9629] bond0: left allmulticast mode
[  570.599068][ T9629] bond_slave_0: left allmulticast mode
[  570.638530][ T9629] bond_slave_1: left allmulticast mode
[  570.683726][ T9629] bridge0: port 3(bond0) entered disabled state
[  570.736503][ T9629] bridge_slave_1: left allmulticast mode
[  570.784273][ T9629] bridge_slave_1: left promiscuous mode
[  570.830578][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.906915][ T9629] bridge_slave_0: left allmulticast mode
[  570.945800][ T9629] bridge_slave_0: left promiscuous mode
[  570.979106][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.997857][T14596] nbd: socks must be embedded in a SOCK_ITEM attr
[  571.059509][T14596] block nbd1: shutting down sockets
[  571.137089][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'.
[  571.620110][ T9629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  571.669416][ T9629] bond_slave_0: left promiscuous mode
[  571.726263][ T9629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  571.793504][ T9629] bond_slave_1: left promiscuous mode
[  571.823032][ T9629] bond0 (unregistering): Released all slaves
[  571.864309][ T9214] Bluetooth: hci2: command tx timeout
[  572.000541][T14603] team0 (unregistering): Port device team_slave_0 removed
[  572.058397][T14603] team0 (unregistering): Port device team_slave_1 removed
[  572.136805][ T9629] ovs_: left promiscuous mode
[  572.266721][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5
[  573.309750][ T9629] hsr_slave_0: left promiscuous mode
[  573.352162][ T9629] hsr_slave_1: left promiscuous mode
[  573.389035][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.418824][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.458213][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  573.494135][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  573.535644][ T9629] veth1_macvtap: left promiscuous mode
[  573.557590][ T9629] veth0_macvtap: left promiscuous mode
[  573.584828][ T9629] veth1_vlan: left promiscuous mode
[  573.614598][ T9629] veth0_vlan: left promiscuous mode
[  573.945481][ T9214] Bluetooth: hci2: command tx timeout
[  573.986511][T14665] FAULT_INJECTION: forcing a failure.
[  573.986511][T14665] name fail_futex, interval 1, probability 0, space 0, times 0
[  574.044592][T14665] CPU: 0 UID: 0 PID: 14665 Comm: syz.3.1645 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  574.044625][T14665] Tainted: [L]=SOFTLOCKUP
[  574.044632][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  574.044644][T14665] Call Trace:
[  574.044650][T14665]  <TASK>
[  574.044657][T14665]  dump_stack_lvl+0x100/0x190
[  574.044697][T14665]  should_fail_ex.cold+0x5/0xa
[  574.044719][T14665]  ? rcu_is_watching+0x12/0xc0
[  574.044746][T14665]  get_futex_key+0x1d2/0x1510
[  574.044782][T14665]  ? __pfx_get_futex_key+0x10/0x10
[  574.044822][T14665]  futex_wait_setup+0x83/0x510
[  574.044854][T14665]  __futex_wait+0x19f/0x300
[  574.044880][T14665]  ? __pfx___futex_wait+0x10/0x10
[  574.044909][T14665]  ? __pfx_futex_wake_mark+0x10/0x10
[  574.044937][T14665]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  574.044957][T14665]  ? __hrtimer_setup+0x208/0x330
[  574.044980][T14665]  ? ktime_add_safe+0x60/0x70
[  574.045002][T14665]  futex_wait+0xe6/0x370
[  574.045027][T14665]  ? __pfx_futex_wait+0x10/0x10
[  574.045055][T14665]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  574.045083][T14665]  do_futex+0x1ef/0x350
[  574.045104][T14665]  ? __pfx_do_futex+0x10/0x10
[  574.045129][T14665]  ? ktime_get+0x22c/0x320
[  574.045156][T14665]  ? lockdep_hardirqs_on+0x78/0x100
[  574.045190][T14665]  __x64_sys_futex+0x34f/0x4d0
[  574.045213][T14665]  ? __pfx___x64_sys_futex+0x10/0x10
[  574.045238][T14665]  ? rcu_is_watching+0x12/0xc0
[  574.045263][T14665]  do_syscall_64+0x115/0x840
[  574.045289][T14665]  ? clear_bhb_loop+0x40/0x90
[  574.045314][T14665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.045334][T14665] RIP: 0033:0x7f4e4e39ce59
[  574.045350][T14665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  574.045369][T14665] RSP: 002b:00007fff2ef1dab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  574.045388][T14665] RAX: ffffffffffffffda RBX: 000000000008c1bd RCX: 00007f4e4e39ce59
[  574.045401][T14665] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4e4e615fac
[  574.045413][T14665] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000
[  574.045425][T14665] R10: 00007fff2ef1dbc0 R11: 0000000000000246 R12: 00007fff2ef1dbe0
[  574.045437][T14665] R13: 00007f4e4e615fac R14: 000000000008c1ef R15: 00007fff2ef1dbc0
[  574.045462][T14665]  </TASK>
[  574.825827][ T9629] team0 (unregistering): Port device team_slave_1 removed
[  574.846731][ T9629] team0 (unregistering): Port device team_slave_0 removed
[  574.986527][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6
[  575.733106][T14695] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  576.020944][ T9214] Bluetooth: hci2: command tx timeout
[  576.348541][T14569] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.372670][T14569] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.392444][T14569] bridge_slave_0: entered allmulticast mode
[  576.409547][T14569] bridge_slave_0: entered promiscuous mode
[  576.525759][T14569] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.562684][T14569] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.597304][T14569] bridge_slave_1: entered allmulticast mode
[  576.629938][T14569] bridge_slave_1: entered promiscuous mode
[  576.786072][ T5294] 8021q: adding VLAN 0 to HW filter on device eth7
[  576.895553][T14569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.002188][T14569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.305157][T14569] team0: Port device team_slave_0 added
[  577.336969][T14569] team0: Port device team_slave_1 added
[  577.468769][T14569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.516074][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  577.641567][T14569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.714819][T14569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.773034][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  577.882870][T14569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.101840][ T9214] Bluetooth: hci2: command tx timeout
[  578.440660][T14569] hsr_slave_0: entered promiscuous mode
[  578.469931][T14569] hsr_slave_1: entered promiscuous mode
[  578.503335][T14569] debugfs: 'hsr0' already exists in 'hsr'
[  578.528873][T14569] Cannot create hsr debugfs directory
[  578.744196][ T5294] 8021q: adding VLAN 0 to HW filter on device eth8
[  579.056986][T14764] FAULT_INJECTION: forcing a failure.
[  579.056986][T14764] name failslab, interval 1, probability 0, space 0, times 0
[  579.343354][T14764] CPU: 0 UID: 0 PID: 14764 Comm: syz.4.1658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  579.343388][T14764] Tainted: [L]=SOFTLOCKUP
[  579.343395][T14764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  579.343407][T14764] Call Trace:
[  579.343414][T14764]  <TASK>
[  579.343421][T14764]  dump_stack_lvl+0x100/0x190
[  579.343461][T14764]  should_fail_ex.cold+0x5/0xa
[  579.343491][T14764]  should_failslab+0xc2/0x120
[  579.343517][T14764]  __kmalloc_cache_noprof+0x7a/0x6f0
[  579.343556][T14764]  ? percpu_ref_init+0xec/0x3f0
[  579.343584][T14764]  ? __pfx_blk_queue_usage_counter_release+0x10/0x10
[  579.343683][T14764]  percpu_ref_init+0xec/0x3f0
[  579.343708][T14764]  blk_alloc_queue+0x574/0x790
[  579.343741][T14764]  __blk_alloc_disk+0xa0/0x170
[  579.343767][T14764]  ? __pfx___blk_alloc_disk+0x10/0x10
[  579.343806][T14764]  ? __pfx_idr_alloc+0x10/0x10
[  579.343836][T14764]  ? lockdep_init_map_type+0x5c/0x250
[  579.343870][T14764]  ? __raw_spin_lock_init+0x3a/0x110
[  579.343895][T14764]  ? __pfx_hot_add_show+0x10/0x10
[  579.343959][T14764]  zram_add+0x1bf/0x5d0
[  579.343985][T14764]  ? __pfx_zram_add+0x10/0x10
[  579.344028][T14764]  ? find_held_lock+0x2b/0x80
[  579.344053][T14764]  ? sysfs_file_kobj+0xe4/0x290
[  579.344090][T14764]  ? __pfx_hot_add_show+0x10/0x10
[  579.344118][T14764]  hot_add_show+0x21/0x80
[  579.344144][T14764]  class_attr_show+0x72/0xa0
[  579.344169][T14764]  ? __pfx_class_attr_show+0x10/0x10
[  579.344189][T14764]  sysfs_kf_seq_show+0x217/0x3a0
[  579.344213][T14764]  seq_read_iter+0x32f/0x1270
[  579.344235][T14764]  ? lock_acquire+0x1b1/0x370
[  579.344277][T14764]  kernfs_fop_read_iter+0x46c/0x610
[  579.344309][T14764]  ? rw_verify_area+0xce/0x6d0
[  579.344329][T14764]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[  579.344362][T14764]  vfs_read+0x825/0xb30
[  579.344388][T14764]  ? __pfx_vfs_read+0x10/0x10
[  579.344427][T14764]  ksys_read+0x12a/0x250
[  579.344450][T14764]  ? __pfx_ksys_read+0x10/0x10
[  579.344475][T14764]  ? rcu_is_watching+0x12/0xc0
[  579.344502][T14764]  do_syscall_64+0x115/0x840
[  579.344530][T14764]  ? clear_bhb_loop+0x40/0x90
[  579.344564][T14764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.344586][T14764] RIP: 0033:0x7f03eb39ce59
[  579.344602][T14764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.344623][T14764] RSP: 002b:00007f03ec2e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  579.344643][T14764] RAX: ffffffffffffffda RBX: 00007f03eb616090 RCX: 00007f03eb39ce59
[  579.344656][T14764] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006
[  579.344669][T14764] RBP: 00007f03eb432d6f R08: 0000000000000000 R09: 0000000000000000
[  579.344681][T14764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.344693][T14764] R13: 00007f03eb616128 R14: 00007f03eb616090 R15: 00007fff371200a8
[  579.344720][T14764]  </TASK>
[  579.892263][T14764] zram: Error allocating disk structure for device 0
[  582.052656][T14569] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  582.116315][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  582.162333][T14569] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  582.245065][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  582.279700][T14569] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  582.350193][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  582.389502][T14569] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  582.507170][T14569] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  582.915656][T14569] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.169658][T14569] 8021q: adding VLAN 0 to HW filter on device team0
[  583.396967][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.404128][ T9178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.667808][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.675050][ T9188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  586.068652][T14924] kAFS: No cell specified
[  586.862128][T14569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.746949][T14569] veth0_vlan: entered promiscuous mode
[  587.979594][T14569] veth1_vlan: entered promiscuous mode
[  588.209285][T14569] veth0_macvtap: entered promiscuous mode
[  588.266441][T14569] veth1_macvtap: entered promiscuous mode
[  588.385982][T14569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  588.467925][T14569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  588.495730][T14992] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  588.549778][ T9188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.599015][ T9188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.659347][ T9188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.712687][ T9188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  589.075211][ T9188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.127220][ T9188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.261856][ T9178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.307094][ T9178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.350357][T15004] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  589.697136][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1629'.
[  591.906620][T15004] Process accounting paused
[  592.972684][T15070] netlink: 'syz.1.1698': attribute type 1 has an invalid length.
[  593.028024][T15070] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1698'.
[  593.118737][T15070] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[  596.105406][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'.
[  596.162772][T15133] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1712'.
[  596.240707][T15138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1713'.
[  596.688817][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'.
[  600.984235][T15250] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1732'.
[  601.033687][T15251] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1732'.
[  601.107765][T15246] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  603.725399][T15292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1739'.
[  603.983448][T15307] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  604.049843][T15309] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  604.273759][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'.
[  608.597357][T15393] futex_wake_op: syz.1.1761 tries to shift op by -2048; fix this program
[  611.338489][T15445] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1772'.
[  614.199044][T15496] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  615.159155][T15514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'.
[  615.469504][ T9214] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  616.649364][T15536] bond0: invalid ARP target specified
[  617.545047][ T9171] Bluetooth: hci2: command 0x2016 tx timeout
[  619.627994][ T9214] Bluetooth: hci2: command 0x2016 tx timeout
[  622.053928][T15562] Process accounting resumed
[  624.346813][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  624.353570][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  627.024781][T15638] futex_wake_op: syz.1.1814 tries to shift op by -2048; fix this program
[  627.056065][T15638] 0x000000000001-0x000000020000 : ""
[  627.131900][T15638] ftl_cs: FTL header corrupt!
[  629.519811][T15672] kexec: Could not allocate control_code_buffer
[  629.619402][T15681] FAULT_INJECTION: forcing a failure.
[  629.619402][T15681] name failslab, interval 1, probability 0, space 0, times 0
[  629.777679][T15681] CPU: 0 UID: 0 PID: 15681 Comm: syz.1.1824 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  629.777711][T15681] Tainted: [L]=SOFTLOCKUP
[  629.777718][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  629.777730][T15681] Call Trace:
[  629.777736][T15681]  <TASK>
[  629.777744][T15681]  dump_stack_lvl+0x100/0x190
[  629.777781][T15681]  should_fail_ex.cold+0x5/0xa
[  629.777806][T15681]  should_failslab+0xc2/0x120
[  629.777831][T15681]  __kmalloc_cache_noprof+0x7a/0x6f0
[  629.777860][T15681]  ? newque+0xa3/0x680
[  629.777952][T15681]  ? down_write+0x146/0x1f0
[  629.777990][T15681]  newque+0xa3/0x680
[  629.778021][T15681]  ipcget+0xee/0xf50
[  629.778054][T15681]  ? __fget_files+0x215/0x3d0
[  629.778078][T15681]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  629.778113][T15681]  ? __pfx_ipcget+0x10/0x10
[  629.778147][T15681]  __x64_sys_msgget+0x125/0x1a0
[  629.778199][T15681]  ? __pfx___x64_sys_msgget+0x10/0x10
[  629.778231][T15681]  ? syscall_user_dispatch+0x76/0x130
[  629.778255][T15681]  do_syscall_64+0x115/0x840
[  629.778282][T15681]  ? clear_bhb_loop+0x40/0x90
[  629.778306][T15681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.778327][T15681] RIP: 0033:0x7f4da459ce59
[  629.778342][T15681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.778362][T15681] RSP: 002b:00007f4da53a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044
[  629.778382][T15681] RAX: ffffffffffffffda RBX: 00007f4da4816270 RCX: 00007f4da459ce59
[  629.778395][T15681] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000
[  629.778406][T15681] RBP: 00007f4da53a3090 R08: 0000000000000000 R09: 0000000000000000
[  629.778418][T15681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.778430][T15681] R13: 00007f4da4816308 R14: 00007f4da4816270 R15: 00007fffb6ffb158
[  629.778455][T15681]  </TASK>
[  630.115951][T15690] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1828'.
[  630.260243][T15697] FAULT_INJECTION: forcing a failure.
[  630.260243][T15697] name failslab, interval 1, probability 0, space 0, times 0
[  630.308365][T15697] CPU: 0 UID: 0 PID: 15697 Comm: syz.0.1827 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  630.308395][T15697] Tainted: [L]=SOFTLOCKUP
[  630.308402][T15697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  630.308413][T15697] Call Trace:
[  630.308420][T15697]  <TASK>
[  630.308426][T15697]  dump_stack_lvl+0x100/0x190
[  630.308464][T15697]  should_fail_ex.cold+0x5/0xa
[  630.308489][T15697]  should_failslab+0xc2/0x120
[  630.308513][T15697]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  630.308546][T15697]  ? shmem_alloc_inode+0x25/0x50
[  630.308597][T15697]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  630.308623][T15697]  shmem_alloc_inode+0x25/0x50
[  630.308647][T15697]  alloc_inode+0x68/0x250
[  630.308678][T15697]  new_inode+0x22/0x1c0
[  630.308706][T15697]  ? trace_kmem_cache_alloc+0xd5/0x100
[  630.308733][T15697]  shmem_get_inode+0x1e3/0xfb0
[  630.308761][T15697]  ? __pfx_shmem_get_inode+0x10/0x10
[  630.308795][T15697]  __shmem_file_setup+0x382/0x460
[  630.308824][T15697]  ? __pfx___shmem_file_setup+0x10/0x10
[  630.308854][T15697]  ? vm_area_alloc+0x1f/0x160
[  630.308886][T15697]  shmem_zero_setup+0x96/0x1b0
[  630.308908][T15697]  __mmap_region+0x2509/0x2dd0
[  630.308945][T15697]  ? __pfx___mmap_region+0x10/0x10
[  630.308982][T15697]  ? __lock_acquire+0x4a5/0x2630
[  630.309015][T15697]  ? rcu_is_watching+0x12/0xc0
[  630.309038][T15697]  ? trace_pelt_se_tp+0x13b/0x190
[  630.309079][T15697]  ? __lock_acquire+0x4a5/0x2630
[  630.309111][T15697]  ? do_raw_spin_unlock+0x145/0x1e0
[  630.309133][T15697]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  630.309170][T15697]  ? find_held_lock+0x2b/0x80
[  630.309195][T15697]  ? rcu_is_watching+0x12/0xc0
[  630.309227][T15697]  ? rcu_is_watching+0x12/0xc0
[  630.309250][T15697]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  630.309275][T15697]  ? lockdep_hardirqs_on+0x78/0x100
[  630.309339][T15697]  mmap_region+0x35d/0x620
[  630.309359][T15697]  ? rcu_is_watching+0x12/0xc0
[  630.309381][T15697]  ? __pfx_mmap_region+0x10/0x10
[  630.309402][T15697]  ? cap_mmap_addr+0x4b/0x120
[  630.309462][T15697]  ? bpf_lsm_mmap_addr+0x9/0x30
[  630.309481][T15697]  ? security_mmap_addr+0x71/0x1e0
[  630.309523][T15697]  ? __get_unmapped_area+0x255/0x3e0
[  630.309551][T15697]  do_mmap+0xc63/0x12f0
[  630.309580][T15697]  ? __pfx_do_mmap+0x10/0x10
[  630.309603][T15697]  ? __pfx_down_write_killable+0x10/0x10
[  630.309627][T15697]  vm_mmap_pgoff+0x29e/0x470
[  630.309657][T15697]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  630.309683][T15697]  ? do_futex+0x192/0x350
[  630.309704][T15697]  ? __pfx_do_futex+0x10/0x10
[  630.309728][T15697]  ksys_mmap_pgoff+0xe4/0x610
[  630.309752][T15697]  ? __x64_sys_futex+0x358/0x4d0
[  630.309773][T15697]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  630.309796][T15697]  ? xfd_validate_state+0x129/0x190
[  630.309816][T15697]  ? ksys_write+0x1ac/0x250
[  630.309843][T15697]  __x64_sys_mmap+0x125/0x190
[  630.309866][T15697]  do_syscall_64+0x115/0x840
[  630.309893][T15697]  ? clear_bhb_loop+0x40/0x90
[  630.309918][T15697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.309938][T15697] RIP: 0033:0x7fe97039ce59
[  630.309954][T15697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  630.309974][T15697] RSP: 002b:00007fe971217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  630.309998][T15697] RAX: ffffffffffffffda RBX: 00007fe970616180 RCX: 00007fe97039ce59
[  630.310011][T15697] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000
[  630.310023][T15697] RBP: 00007fe970432d6f R08: 0000000000000401 R09: 0000000000008000
[  630.310035][T15697] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  630.310047][T15697] R13: 00007fe970616218 R14: 00007fe970616180 R15: 00007fff4ce7dd58
[  630.310071][T15697]  </TASK>
[  632.635173][T15720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1833'.
[  632.759996][ T9214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  632.779557][ T9214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  632.788017][ T9214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  632.795835][ T9214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  632.806125][ T9214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  634.745322][T15721] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.786677][T15721] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.816641][T15721] bridge_slave_0: entered allmulticast mode
[  634.850661][T15721] bridge_slave_0: entered promiscuous mode
[  634.889775][T15721] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.902495][ T9214] Bluetooth: hci3: command tx timeout
[  634.932665][T15721] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.963961][T15721] bridge_slave_1: entered allmulticast mode
[  634.998090][T15721] bridge_slave_1: entered promiscuous mode
[  635.063698][T15771] 
[  635.077887][T15771] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  635.118572][T15721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  635.156186][T15721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  635.275511][T15721] team0: Port device team_slave_0 added
[  635.310598][T15721] team0: Port device team_slave_1 added
[  635.423557][T15721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  635.458511][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  635.550887][T15721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  635.602382][T15721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  635.631748][T15721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  635.768592][T15721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.106853][T15721] hsr_slave_0: entered promiscuous mode
[  636.133134][T15721] hsr_slave_1: entered promiscuous mode
[  636.163884][T15721] debugfs: 'hsr0' already exists in 'hsr'
[  636.197510][T15721] Cannot create hsr debugfs directory
[  636.981538][ T9214] Bluetooth: hci3: command tx timeout
[  637.996998][T15721] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  638.058716][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  638.117250][T15721] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  638.182742][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  638.263270][T15721] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  638.274851][ T9214] Bluetooth: hci0: unexpected event for opcode 0x7c89
[  638.311108][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  638.356265][T15721] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  638.487070][T15721] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  638.881438][T15845] blktrace: Concurrent blktraces are not allowed on loop2
[  639.022272][T15845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1851'.
[  639.061674][ T9214] Bluetooth: hci3: command tx timeout
[  639.865172][T15721] 8021q: adding VLAN 0 to HW filter on device bond0
[  640.189511][T15721] 8021q: adding VLAN 0 to HW filter on device team0
[  640.305399][T11623] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.312696][T11623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  640.407126][T11623] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.414365][T11623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  641.141382][ T9214] Bluetooth: hci3: command tx timeout
[  642.352406][T15721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  642.763373][T15905] FAULT_INJECTION: forcing a failure.
[  642.763373][T15905] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  642.918114][T15905] CPU: 0 UID: 0 PID: 15905 Comm: syz.0.1859 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  642.918145][T15905] Tainted: [L]=SOFTLOCKUP
[  642.918152][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  642.918164][T15905] Call Trace:
[  642.918170][T15905]  <TASK>
[  642.918177][T15905]  dump_stack_lvl+0x100/0x190
[  642.918215][T15905]  should_fail_ex.cold+0x5/0xa
[  642.918241][T15905]  _copy_to_user+0x32/0xd0
[  642.918270][T15905]  simple_read_from_buffer+0xcb/0x170
[  642.918296][T15905]  proc_fail_nth_read+0x1af/0x230
[  642.918329][T15905]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  642.918362][T15905]  ? rw_verify_area+0xce/0x6d0
[  642.918381][T15905]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  642.918413][T15905]  vfs_read+0x1e4/0xb30
[  642.918438][T15905]  ? __pfx_vfs_read+0x10/0x10
[  642.918459][T15905]  ? __fget_files+0x215/0x3d0
[  642.918487][T15905]  ? __fget_files+0x21f/0x3d0
[  642.918517][T15905]  ksys_read+0x12a/0x250
[  642.918538][T15905]  ? __pfx_ksys_read+0x10/0x10
[  642.918563][T15905]  ? rcu_is_watching+0x12/0xc0
[  642.918588][T15905]  do_syscall_64+0x115/0x840
[  642.918622][T15905]  ? clear_bhb_loop+0x40/0x90
[  642.918650][T15905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.918671][T15905] RIP: 0033:0x7fe97035d68e
[  642.918686][T15905] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  642.918705][T15905] RSP: 002b:00007fe971237fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  642.918724][T15905] RAX: ffffffffffffffda RBX: 00007fe9712386c0 RCX: 00007fe97035d68e
[  642.918755][T15905] RDX: 000000000000000f RSI: 00007fe9712380a0 RDI: 0000000000000006
[  642.918768][T15905] RBP: 00007fe971238090 R08: 0000000000000000 R09: 0000000000000000
[  642.918780][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.918792][T15905] R13: 00007fe970616128 R14: 00007fe970616090 R15: 00007fff4ce7dd58
[  642.918819][T15905]  </TASK>
[  643.770650][T15913] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1862'.
[  644.726368][T15721] veth0_vlan: entered promiscuous mode
[  644.837958][T15721] veth1_vlan: entered promiscuous mode
[  644.947877][T15721] veth0_macvtap: entered promiscuous mode
[  644.999507][T15721] veth1_macvtap: entered promiscuous mode
[  645.089404][T15721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  645.137467][T15721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  645.214328][T11623] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.275822][T11623] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.342084][T11623] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.397348][T11623] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.725162][ T9178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.772949][ T9178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.878176][ T9188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.915794][ T9188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.494326][T15973] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1831'.
[  646.588274][T15975] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input11
[  648.782752][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5
[  649.768556][T16047] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  649.999075][T16050] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  650.436720][T16057] FAULT_INJECTION: forcing a failure.
[  650.436720][T16057] name failslab, interval 1, probability 0, space 0, times 0
[  650.528761][T16057] CPU: 0 UID: 0 PID: 16057 Comm: syz.1.1890 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  650.528800][T16057] Tainted: [L]=SOFTLOCKUP
[  650.528807][T16057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  650.528819][T16057] Call Trace:
[  650.528826][T16057]  <TASK>
[  650.528833][T16057]  dump_stack_lvl+0x100/0x190
[  650.528873][T16057]  should_fail_ex.cold+0x5/0xa
[  650.528899][T16057]  should_failslab+0xc2/0x120
[  650.528924][T16057]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  650.528958][T16057]  ? alloc_inode+0x183/0x250
[  650.528989][T16057]  ? stashed_dentry_get+0x10a/0x2c0
[  650.529017][T16057]  ? stashed_dentry_get+0x10a/0x2c0
[  650.529049][T16057]  alloc_inode+0x183/0x250
[  650.529081][T16057]  path_from_stashed+0x25b/0x750
[  650.529114][T16057]  ns_get_path+0x60/0x80
[  650.529141][T16057]  proc_ns_get_link+0x121/0x230
[  650.529163][T16057]  ? __pfx_proc_ns_get_link+0x10/0x10
[  650.529188][T16057]  ? atime_needs_update+0x8b/0x6b0
[  650.529210][T16057]  pick_link+0xd17/0x13c0
[  650.529229][T16057]  ? __pfx_proc_ns_get_link+0x10/0x10
[  650.529255][T16057]  step_into_slowpath+0x9ba/0xf90
[  650.529281][T16057]  ? __pfx_step_into_slowpath+0x10/0x10
[  650.529302][T16057]  ? find_held_lock+0x2b/0x80
[  650.529335][T16057]  path_openat+0xf95/0x31a0
[  650.529369][T16057]  ? __pfx_path_openat+0x10/0x10
[  650.529403][T16057]  do_file_open+0x20e/0x430
[  650.529431][T16057]  ? __pfx_do_file_open+0x10/0x10
[  650.529474][T16057]  ? alloc_fd+0x476/0x790
[  650.529501][T16057]  ? do_getname+0x191/0x390
[  650.529533][T16057]  do_sys_openat2+0x10d/0x1e0
[  650.529566][T16057]  ? __pfx_do_sys_openat2+0x10/0x10
[  650.529606][T16057]  __x64_sys_openat+0x12d/0x210
[  650.529641][T16057]  ? __pfx___x64_sys_openat+0x10/0x10
[  650.529678][T16057]  ? rcu_is_watching+0x12/0xc0
[  650.529704][T16057]  do_syscall_64+0x115/0x840
[  650.529733][T16057]  ? clear_bhb_loop+0x40/0x90
[  650.529758][T16057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.529796][T16057] RIP: 0033:0x7f4da455d68e
[  650.529811][T16057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  650.529832][T16057] RSP: 002b:00007f4da5405ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  650.529852][T16057] RAX: ffffffffffffffda RBX: 00007f4da54066c0 RCX: 00007f4da455d68e
[  650.529865][T16057] RDX: 0000000000000002 RSI: 00007f4da5405f90 RDI: ffffffffffffff9c
[  650.529878][T16057] RBP: 00007f4da4632d6f R08: 0000000000000000 R09: 0000000000000000
[  650.529890][T16057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  650.529902][T16057] R13: 00007f4da4816038 R14: 00007f4da4815fa0 R15: 00007fffb6ffb158
[  650.529928][T16057]  </TASK>
[  652.373254][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  652.455682][   T30] audit: type=1800 audit(8277292071.550:23): pid=16098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1895" name="dbroot" dev="configfs" ino=71625 res=0 errno=0
[  652.476756][T16075] Process accounting paused
[  652.521461][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.777925][T16092] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  652.809252][ T9214] Bluetooth: hci3: unexpected event 0x3c length: 124 > 7
[  653.517545][ T9214] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  654.003682][T16130] FAULT_INJECTION: forcing a failure.
[  654.003682][T16130] name fail_futex, interval 1, probability 0, space 0, times 0
[  654.067164][T16130] CPU: 0 UID: 0 PID: 16130 Comm: syz.0.1905 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  654.067196][T16130] Tainted: [L]=SOFTLOCKUP
[  654.067204][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  654.067216][T16130] Call Trace:
[  654.067222][T16130]  <TASK>
[  654.067229][T16130]  dump_stack_lvl+0x100/0x190
[  654.067269][T16130]  should_fail_ex.cold+0x5/0xa
[  654.067295][T16130]  get_futex_key+0x1d2/0x1510
[  654.067331][T16130]  ? __pfx_get_futex_key+0x10/0x10
[  654.067366][T16130]  ? trace_pid_list_is_set+0x22c/0x390
[  654.067424][T16130]  futex_wait_setup+0x83/0x510
[  654.067457][T16130]  __futex_wait+0x19f/0x300
[  654.067485][T16130]  ? __pfx___futex_wait+0x10/0x10
[  654.067511][T16130]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  654.067543][T16130]  ? __pfx_futex_wake_mark+0x10/0x10
[  654.067573][T16130]  ? find_held_lock+0x2b/0x80
[  654.067597][T16130]  ? futex_wake+0x456/0x530
[  654.067628][T16130]  futex_wait+0xe6/0x370
[  654.067654][T16130]  ? __pfx_futex_wait+0x10/0x10
[  654.067685][T16130]  ? madvise_unlock+0xa9/0x220
[  654.067716][T16130]  do_futex+0x1ef/0x350
[  654.067737][T16130]  ? __pfx_do_futex+0x10/0x10
[  654.067759][T16130]  ? find_held_lock+0x2b/0x80
[  654.067783][T16130]  ? __fget_files+0x215/0x3d0
[  654.067812][T16130]  __x64_sys_futex+0x34f/0x4d0
[  654.067837][T16130]  ? __pfx___x64_sys_futex+0x10/0x10
[  654.067863][T16130]  ? rcu_is_watching+0x12/0xc0
[  654.067889][T16130]  do_syscall_64+0x115/0x840
[  654.067917][T16130]  ? clear_bhb_loop+0x40/0x90
[  654.067942][T16130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.067963][T16130] RIP: 0033:0x7fe97039ce59
[  654.067980][T16130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.068000][T16130] RSP: 002b:00007fe9712590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  654.068019][T16130] RAX: ffffffffffffffda RBX: 00007fe970615fa8 RCX: 00007fe97039ce59
[  654.068032][T16130] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe970615fa8
[  654.068045][T16130] RBP: 00007fe970615fa0 R08: 0000000000000000 R09: 0000000000000000
[  654.068057][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  654.068069][T16130] R13: 00007fe970616038 R14: 00007fff4ce7dc70 R15: 00007fff4ce7dd58
[  654.068095][T16130]  </TASK>
[  656.465710][T16144] Process accounting resumed
[  657.748141][T16170] kexec: Could not allocate control_code_buffer
[  658.346157][T16191] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  658.456406][T16190] ima: policy update failed
[  658.496267][   T30] audit: type=1802 audit(8277292077.600:24): pid=16190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1920" res=0 errno=0
[  659.012795][T16212] FAULT_INJECTION: forcing a failure.
[  659.012795][T16212] name failslab, interval 1, probability 0, space 0, times 0
[  659.121204][T16212] CPU: 0 UID: 0 PID: 16212 Comm: syz.5.1924 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  659.121237][T16212] Tainted: [L]=SOFTLOCKUP
[  659.121244][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  659.121256][T16212] Call Trace:
[  659.121262][T16212]  <TASK>
[  659.121270][T16212]  dump_stack_lvl+0x100/0x190
[  659.121309][T16212]  should_fail_ex.cold+0x5/0xa
[  659.121335][T16212]  should_failslab+0xc2/0x120
[  659.121360][T16212]  __kmalloc_cache_noprof+0x7a/0x6f0
[  659.121390][T16212]  ? fsnotify_alloc_group+0x92/0x330
[  659.121424][T16212]  fsnotify_alloc_group+0x92/0x330
[  659.121453][T16212]  __do_sys_fanotify_init+0x2bb/0xe80
[  659.121481][T16212]  do_syscall_64+0x115/0x840
[  659.121510][T16212]  ? clear_bhb_loop+0x40/0x90
[  659.121534][T16212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.121555][T16212] RIP: 0033:0x7f94d6f9ce59
[  659.121571][T16212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.121591][T16212] RSP: 002b:00007f94d7e2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[  659.121610][T16212] RAX: ffffffffffffffda RBX: 00007f94d7215fa0 RCX: 00007f94d6f9ce59
[  659.121627][T16212] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000200
[  659.121639][T16212] RBP: 00007f94d7032d6f R08: 0000000000000000 R09: 0000000000000000
[  659.121651][T16212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.121663][T16212] R13: 00007f94d7216038 R14: 00007f94d7215fa0 R15: 00007ffcfd890658
[  659.121688][T16212]  </TASK>
[  659.125680][T16215] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  659.837737][T16215] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  660.453020][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1932'.
[  660.599252][T16249] hsr_slave_0 (unregistering): left promiscuous mode
[  662.320612][T16275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1935'.
[  667.240811][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1953'.
[  667.327645][ T9171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  667.339701][ T9171] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  667.349103][ T9171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  667.357367][ T9171] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  667.366502][ T9171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  667.434425][T16355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1952'.
[  669.461125][ T9171] Bluetooth: hci5: command tx timeout
[  669.642220][T16352] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.674678][T16352] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.705610][T16352] bridge_slave_0: entered allmulticast mode
[  669.736001][T16352] bridge_slave_0: entered promiscuous mode
[  669.796650][T16352] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.828526][T16352] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.862625][T16352] bridge_slave_1: entered allmulticast mode
[  669.890895][T16352] bridge_slave_1: entered promiscuous mode
[  670.087404][T16352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  670.184270][T16352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  670.320518][T16352] team0: Port device team_slave_0 added
[  670.369956][T16352] team0: Port device team_slave_1 added
[  670.476501][T16352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  670.509588][T16352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.641914][T16352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  670.698348][T16352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  670.730618][T16352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  670.843499][T16352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  671.016453][T16352] hsr_slave_0: entered promiscuous mode
[  671.039840][T16352] hsr_slave_1: entered promiscuous mode
[  671.066236][T16352] debugfs: 'hsr0' already exists in 'hsr'
[  671.094255][T16352] Cannot create hsr debugfs directory
[  671.250080][T16373] Process accounting resumed
[  671.410606][T16405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'.
[  671.546475][ T9171] Bluetooth: hci5: command tx timeout
[  671.652527][T16409] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1961'.
[  672.483279][T16422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1965'.
[  672.959396][T16352] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  673.006219][T16352] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  673.049221][T16352] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  673.106741][T16352] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  673.253205][T16352] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  673.295446][T16352] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  673.330219][T16352] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  673.387319][T16352] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  673.624721][ T9171] Bluetooth: hci5: command tx timeout
[  673.665591][T16352] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.735699][T16352] 8021q: adding VLAN 0 to HW filter on device team0
[  673.789200][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  673.796458][ T9629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  673.882314][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state
[  673.889520][ T9188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  674.048556][T16352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  675.702079][ T9171] Bluetooth: hci5: command tx timeout
[  675.744788][T16352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  676.807987][T16352] veth0_vlan: entered promiscuous mode
[  676.859848][T16352] veth1_vlan: entered promiscuous mode
[  677.002609][T16352] veth0_macvtap: entered promiscuous mode
[  677.024816][T16352] veth1_macvtap: entered promiscuous mode
[  677.145265][T16352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  677.394089][T16352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  677.572452][T16501] kexec: Could not allocate control_code_buffer
[  677.599612][T11613] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.630204][T11613] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.713788][T11613] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.769692][T11613] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.019772][T11623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.060256][T11623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.137577][T11623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.184613][T11623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.681740][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1981'.
[  681.926695][T16569] __vm_enough_memory: pid: 16569, comm: syz.0.1990, bytes: 4398046457856 not enough memory for the allocation
[  682.727617][T16581] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  683.324324][T16592] FAULT_INJECTION: forcing a failure.
[  683.324324][T16592] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  683.372094][T16592] CPU: 0 UID: 0 PID: 16592 Comm: syz.0.1995 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  683.372124][T16592] Tainted: [L]=SOFTLOCKUP
[  683.372130][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  683.372142][T16592] Call Trace:
[  683.372148][T16592]  <TASK>
[  683.372156][T16592]  dump_stack_lvl+0x100/0x190
[  683.372202][T16592]  should_fail_ex.cold+0x5/0xa
[  683.372227][T16592]  _copy_to_user+0x32/0xd0
[  683.372257][T16592]  simple_read_from_buffer+0xcb/0x170
[  683.372282][T16592]  proc_fail_nth_read+0x1af/0x230
[  683.372315][T16592]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  683.372349][T16592]  ? rw_verify_area+0xce/0x6d0
[  683.372368][T16592]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  683.372403][T16592]  vfs_read+0x1e4/0xb30
[  683.372428][T16592]  ? __pfx_vfs_read+0x10/0x10
[  683.372449][T16592]  ? __fget_files+0x215/0x3d0
[  683.372478][T16592]  ? __fget_files+0x21f/0x3d0
[  683.372507][T16592]  ksys_read+0x12a/0x250
[  683.372529][T16592]  ? __pfx_ksys_read+0x10/0x10
[  683.372552][T16592]  ? rcu_is_watching+0x12/0xc0
[  683.372578][T16592]  do_syscall_64+0x115/0x840
[  683.372606][T16592]  ? clear_bhb_loop+0x40/0x90
[  683.372631][T16592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.372650][T16592] RIP: 0033:0x7fe97035d68e
[  683.372666][T16592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  683.372685][T16592] RSP: 002b:00007fe971258fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  683.372704][T16592] RAX: ffffffffffffffda RBX: 00007fe9712596c0 RCX: 00007fe97035d68e
[  683.372717][T16592] RDX: 000000000000000f RSI: 00007fe9712590a0 RDI: 0000000000000003
[  683.372729][T16592] RBP: 00007fe971259090 R08: 0000000000000000 R09: 0000000000000000
[  683.372741][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  683.372752][T16592] R13: 00007fe970616038 R14: 00007fe970615fa0 R15: 00007fff4ce7dd58
[  683.372777][T16592]  </TASK>
[  684.172573][T16620] netlink: 'syz.6.1996': attribute type 11 has an invalid length.
[  684.250435][T16622] ubi0: attaching mtd0
[  684.324393][T16622] ubi0: scanning is finished
[  684.411920][T16622] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  684.708510][T16622] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  684.738215][T16622] ubi0: attaching mtd0
[  684.758611][T16622] ubi0: scanning is finished
[  684.776427][T16622] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  684.984063][T16622] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  685.768089][T16652] random: crng reseeded on system resumption
[  685.787781][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  685.797224][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  688.633946][T16709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2017'.
[  688.860627][T16715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2019'.
[  688.937951][T16715] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.041607][T16715] bridge_slave_0 (unregistering): left allmulticast mode
[  689.070950][T16715] bridge_slave_0 (unregistering): left promiscuous mode
[  689.101547][T16715] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.796506][T16708] kexec: Could not allocate control_code_buffer
[  690.745988][ T9214] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  690.761016][ T9214] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  690.773257][ T9214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  690.783541][ T9214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  690.793228][ T9214] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  692.342270][T16785] netlink: 'syz.6.2029': attribute type 11 has an invalid length.
[  692.821241][ T9214] Bluetooth: hci6: command tx timeout
[  692.983044][ T9214] Bluetooth: hci2: command 0x2016 tx timeout
[  693.657734][T16753] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.703950][T16753] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.745107][T16753] bridge_slave_0: entered allmulticast mode
[  693.784837][T16753] bridge_slave_0: entered promiscuous mode
[  693.813709][T16753] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.847428][T16753] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.884597][T16753] bridge_slave_1: entered allmulticast mode
[  693.913330][T16753] bridge_slave_1: entered promiscuous mode
[  694.056150][T16753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  694.134710][T16815] FAULT_INJECTION: forcing a failure.
[  694.134710][T16815] name failslab, interval 1, probability 0, space 0, times 0
[  694.158090][T16753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  694.229496][T16815] CPU: 0 UID: 0 PID: 16815 Comm: syz.6.2034 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  694.229528][T16815] Tainted: [L]=SOFTLOCKUP
[  694.229535][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  694.229547][T16815] Call Trace:
[  694.229554][T16815]  <TASK>
[  694.229562][T16815]  dump_stack_lvl+0x100/0x190
[  694.229604][T16815]  should_fail_ex.cold+0x5/0xa
[  694.229630][T16815]  ? tomoyo_encode2+0xfb/0x3c0
[  694.229731][T16815]  should_failslab+0xc2/0x120
[  694.229758][T16815]  __kmalloc_noprof+0xe0/0x850
[  694.229797][T16815]  tomoyo_encode2+0xfb/0x3c0
[  694.229830][T16815]  tomoyo_encode+0x29/0x50
[  694.229858][T16815]  tomoyo_mount_acl+0x14c/0x8b0
[  694.229885][T16815]  ? is_bpf_text_address+0x8a/0x1a0
[  694.229915][T16815]  ? bpf_ksym_find+0x124/0x1c0
[  694.229936][T16815]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  694.229967][T16815]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  694.229993][T16815]  ? kernel_text_address+0x8d/0x100
[  694.230013][T16815]  ? make_vfsuid+0xec/0x140
[  694.230049][T16815]  ? unwind_get_return_address+0x59/0xa0
[  694.230100][T16815]  ? tomoyo_domain+0xb2/0x150
[  694.230118][T16815]  ? tomoyo_profile+0x47/0x60
[  694.230153][T16815]  tomoyo_mount_permission+0x214/0x460
[  694.230181][T16815]  ? tomoyo_mount_permission+0x1f6/0x460
[  694.230211][T16815]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  694.230253][T16815]  security_sb_mount+0xdd/0x270
[  694.230277][T16815]  path_mount+0x158/0x23d0
[  694.230310][T16815]  ? __pfx_path_mount+0x10/0x10
[  694.230338][T16815]  ? lockdep_hardirqs_on+0x78/0x100
[  694.230372][T16815]  ? putname+0xb1/0x110
[  694.230398][T16815]  ? kmem_cache_free+0x127/0x6c0
[  694.230437][T16815]  ? __x64_sys_mount+0x293/0x310
[  694.230465][T16815]  __x64_sys_mount+0x293/0x310
[  694.230495][T16815]  ? __pfx___x64_sys_mount+0x10/0x10
[  694.230527][T16815]  ? rcu_is_watching+0x12/0xc0
[  694.230555][T16815]  do_syscall_64+0x115/0x840
[  694.230583][T16815]  ? clear_bhb_loop+0x40/0x90
[  694.230609][T16815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.230630][T16815] RIP: 0033:0x7fcf8cd9ce59
[  694.230646][T16815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.230665][T16815] RSP: 002b:00007fcf8dc32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  694.230685][T16815] RAX: ffffffffffffffda RBX: 00007fcf8d016090 RCX: 00007fcf8cd9ce59
[  694.230700][T16815] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000
[  694.230712][T16815] RBP: 00007fcf8ce32d6f R08: 0000000000000000 R09: 0000000000000000
[  694.230724][T16815] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  694.230737][T16815] R13: 00007fcf8d016128 R14: 00007fcf8d016090 R15: 00007fffcc670348
[  694.230763][T16815]  </TASK>
[  694.694385][T16753] team0: Port device team_slave_0 added
[  694.703640][T16753] team0: Port device team_slave_1 added
[  694.728952][T16753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.736337][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  694.763206][T16753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.775340][T16753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.782363][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  694.818786][T16753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.946212][ T9171] Bluetooth: hci6: command tx timeout
[  695.219199][T16753] hsr_slave_0: entered promiscuous mode
[  695.286013][T16753] hsr_slave_1: entered promiscuous mode
[  695.320088][T16753] debugfs: 'hsr0' already exists in 'hsr'
[  695.336445][T16753] Cannot create hsr debugfs directory
[  695.509324][T16827] FAULT_INJECTION: forcing a failure.
[  695.509324][T16827] name failslab, interval 1, probability 0, space 0, times 0
[  695.627305][T16827] CPU: 0 UID: 0 PID: 16827 Comm: syz.0.2037 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  695.627338][T16827] Tainted: [L]=SOFTLOCKUP
[  695.627346][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  695.627358][T16827] Call Trace:
[  695.627364][T16827]  <TASK>
[  695.627372][T16827]  dump_stack_lvl+0x100/0x190
[  695.627412][T16827]  should_fail_ex.cold+0x5/0xa
[  695.627438][T16827]  should_failslab+0xc2/0x120
[  695.627463][T16827]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  695.627498][T16827]  ? __alloc_skb+0x140/0x710
[  695.627576][T16827]  ? __alloc_skb+0x5b7/0x710
[  695.627598][T16827]  __alloc_skb+0x140/0x710
[  695.627615][T16827]  ? __alloc_skb+0x5b7/0x710
[  695.627634][T16827]  ? __pfx___alloc_skb+0x10/0x10
[  695.627653][T16827]  ? kmem_cache_alloc_noprof+0x292/0x6e0
[  695.627686][T16827]  ? audit_log_start+0x29d/0x930
[  695.627710][T16827]  ? lockdep_init_map_type+0x5c/0x250
[  695.627749][T16827]  audit_log_start+0x350/0x930
[  695.627776][T16827]  ? __pfx_audit_log_start+0x10/0x10
[  695.627801][T16827]  ? arch_do_signal_or_restart+0x1f9/0x7a0
[  695.627842][T16827]  ? native_tss_update_io_bitmap+0x3d6/0x740
[  695.627875][T16827]  audit_seccomp+0x60/0x190
[  695.627899][T16827]  __secure_computing+0x26d/0x2c0
[  695.627924][T16827]  do_syscall_64+0x5ce/0x840
[  695.627953][T16827]  ? clear_bhb_loop+0x40/0x90
[  695.627978][T16827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.628000][T16827] RIP: 0033:0x7fe97039ce59
[  695.628016][T16827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.628036][T16827] RSP: 002b:00007fe9711f59f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  695.628056][T16827] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fe97039ce59
[  695.628069][T16827] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b
[  695.628081][T16827] RBP: 00007fe9711f6030 R08: 0000000000000001 R09: 000000000000000b
[  695.628093][T16827] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000
[  695.628105][T16827] R13: 00007fe970616308 R14: 00007fe970616270 R15: 00007fff4ce7dd58
[  695.628132][T16827]  </TASK>
[  695.628167][T16827] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  696.210651][T16839] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  696.267620][T16839] netlink: 'syz.6.2039': attribute type 2 has an invalid length.
[  696.286649][T16839] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2039'.
[  696.537062][T16827] audit: out of memory in audit_log_start
[  696.921367][T16753] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  696.959161][T16753] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  696.981607][ T9171] Bluetooth: hci6: command tx timeout
[  697.000312][T16753] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  697.045099][T16753] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  697.111985][T16753] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  697.143566][T16753] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  697.177983][T16753] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  697.227366][T16753] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  697.339913][T16861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2043'.
[  698.214842][T16753] 8021q: adding VLAN 0 to HW filter on device bond0
[  698.287338][T16753] 8021q: adding VLAN 0 to HW filter on device team0
[  698.324563][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.331720][ T9178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  698.399491][T11619] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.406752][T11619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  699.061201][ T9171] Bluetooth: hci6: command tx timeout
[  700.463273][T16753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.779375][   T30] audit: type=1800 audit(2147483682.590:25): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2051" name="dbroot" dev="configfs" ino=77100 res=0 errno=0
[  701.103411][T16942] random: crng reseeded on system resumption
[  702.204920][T16753] veth0_vlan: entered promiscuous mode
[  702.247102][T16753] veth1_vlan: entered promiscuous mode
[  702.384170][T16917] Process accounting paused
[  702.399467][T16753] veth0_macvtap: entered promiscuous mode
[  702.459484][T16753] veth1_macvtap: entered promiscuous mode
[  702.538305][T16753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  702.606792][T16753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  702.806466][T11613] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  702.879499][T11613] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  702.908054][T11613] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  702.992586][T11613] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  703.256286][T16968] could not allocate digest TFM handle 
[  703.510490][ T9188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  703.573438][ T9188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  703.819580][T16982] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  703.838978][T11623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  703.898252][T11623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  704.377965][T16996] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  704.452737][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2026'.
[  705.911130][T17025] random: crng reseeded on system resumption
[  707.204913][ T9171] Bluetooth: hci5: unexpected event 0x3e length: 358 > 260
[  707.204939][ T9171] Bluetooth: hci5: unexpected subevent 0x1b length: 357 > 260
[  708.036131][   T30] audit: type=1800 audit(2147483689.840:26): pid=17069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2081" name="lu_gp_id" dev="configfs" ino=78329 res=0 errno=0
[  709.359804][T17100] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2088'.
[  712.403868][ T9171] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  712.411435][ T9171] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff
[  712.426757][ T9171] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  712.435871][ T9171] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff
[  712.674384][T17151] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  713.229849][T17164] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2099'.
[  718.337600][T17253] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  720.414816][ T9171] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18
[  720.784749][T17276] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2121'.
[  721.363439][ T9171] Bluetooth: hci6: unexpected event 0x3e length: 358 > 260
[  721.363466][ T9171] Bluetooth: hci6: unexpected subevent 0x1b length: 357 > 260
[  722.334571][T17302] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2130'.
[  722.390837][T17302] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2130'.
[  722.663548][T17302] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2130'.
[  724.139293][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'.
[  726.245853][T17332] tipc: can't start tipc receive workqueue
[  726.936738][T17354] FAULT_INJECTION: forcing a failure.
[  726.936738][T17354] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  727.090758][T17354] CPU: 0 UID: 0 PID: 17354 Comm: syz.6.2140 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  727.090790][T17354] Tainted: [L]=SOFTLOCKUP
[  727.090797][T17354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  727.090808][T17354] Call Trace:
[  727.090814][T17354]  <TASK>
[  727.090821][T17354]  dump_stack_lvl+0x100/0x190
[  727.090859][T17354]  should_fail_ex.cold+0x5/0xa
[  727.090880][T17354]  ? prepare_alloc_pages+0x16d/0x5f0
[  727.090908][T17354]  should_fail_alloc_page+0xeb/0x140
[  727.090934][T17354]  prepare_alloc_pages+0x1f0/0x5f0
[  727.090959][T17354]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  727.090990][T17354]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  727.091024][T17354]  ? unwind_get_return_address+0x59/0xa0
[  727.091050][T17354]  ? arch_stack_walk+0xa6/0xf0
[  727.091084][T17354]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  727.091117][T17354]  ? __pfx_stack_trace_save+0x10/0x10
[  727.091142][T17354]  ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[  727.091182][T17354]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  727.091214][T17354]  ? __pmd_alloc+0xbf/0x950
[  727.091237][T17354]  ? __handle_mm_fault+0xa9c/0x2a00
[  727.091265][T17354]  ? handle_mm_fault+0x37b/0xa30
[  727.091293][T17354]  ? __get_user_pages+0x1178/0x32a0
[  727.091316][T17354]  ? populate_vma_page_range+0x267/0x3f0
[  727.091341][T17354]  ? __mm_populate+0x107/0x3a0
[  727.091364][T17354]  ? vm_mmap_pgoff+0x37f/0x470
[  727.091388][T17354]  ? ksys_mmap_pgoff+0xe4/0x610
[  727.091409][T17354]  ? __x64_sys_mmap+0x125/0x190
[  727.091428][T17354]  ? do_syscall_64+0x115/0x840
[  727.091455][T17354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.091476][T17354]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  727.091505][T17354]  ? policy_nodemask+0xed/0x4f0
[  727.091536][T17354]  alloc_pages_mpol+0x1fb/0x540
[  727.091561][T17354]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  727.091587][T17354]  ? __lock_acquire+0x4a5/0x2630
[  727.091620][T17354]  alloc_pages_noprof+0x1a/0x160
[  727.091647][T17354]  pte_alloc_one+0x1c/0x3d0
[  727.091674][T17354]  __pte_alloc+0x6d/0x380
[  727.091695][T17354]  ? __pfx___pte_alloc+0x10/0x10
[  727.091721][T17354]  ? do_raw_spin_lock+0x128/0x260
[  727.091742][T17354]  ? find_held_lock+0x2b/0x80
[  727.091768][T17354]  do_anonymous_page+0x13c6/0x2050
[  727.091801][T17354]  ? __pmd_alloc+0x3fb/0x950
[  727.091828][T17354]  __handle_mm_fault+0x1d2c/0x2a00
[  727.091861][T17354]  ? mt_find+0x45e/0x8e0
[  727.091893][T17354]  ? __pfx___handle_mm_fault+0x10/0x10
[  727.091920][T17354]  ? __pfx_mt_find+0x10/0x10
[  727.091969][T17354]  handle_mm_fault+0x37b/0xa30
[  727.092003][T17354]  __get_user_pages+0x1178/0x32a0
[  727.092036][T17354]  ? __pfx___get_user_pages+0x10/0x10
[  727.092067][T17354]  populate_vma_page_range+0x267/0x3f0
[  727.092095][T17354]  ? __pfx_populate_vma_page_range+0x10/0x10
[  727.092120][T17354]  ? __pfx_find_vma_intersection+0x10/0x10
[  727.092145][T17354]  ? do_mmap+0x93f/0x12f0
[  727.092171][T17354]  __mm_populate+0x107/0x3a0
[  727.092198][T17354]  ? __pfx___mm_populate+0x10/0x10
[  727.092225][T17354]  ? up_write+0x28c/0x4f0
[  727.092248][T17354]  vm_mmap_pgoff+0x37f/0x470
[  727.092275][T17354]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  727.092301][T17354]  ? do_futex+0x192/0x350
[  727.092322][T17354]  ? __pfx_do_futex+0x10/0x10
[  727.092340][T17354]  ? __pfx_do_sys_openat2+0x10/0x10
[  727.092375][T17354]  ksys_mmap_pgoff+0xe4/0x610
[  727.092399][T17354]  ? __x64_sys_futex+0x358/0x4d0
[  727.092420][T17354]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  727.092443][T17354]  ? xfd_validate_state+0x129/0x190
[  727.092467][T17354]  __x64_sys_mmap+0x125/0x190
[  727.092490][T17354]  do_syscall_64+0x115/0x840
[  727.092516][T17354]  ? clear_bhb_loop+0x40/0x90
[  727.092544][T17354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.092564][T17354] RIP: 0033:0x7fcf8cd9ce59
[  727.092579][T17354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.092598][T17354] RSP: 002b:00007fcf8dbcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  727.092617][T17354] RAX: ffffffffffffffda RBX: 00007fcf8d016360 RCX: 00007fcf8cd9ce59
[  727.092630][T17354] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  727.092642][T17354] RBP: 00007fcf8ce32d6f R08: 0000000000000002 R09: 0000000000008000
[  727.092653][T17354] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  727.092665][T17354] R13: 00007fcf8d0163f8 R14: 00007fcf8d016360 R15: 00007fffcc670348
[  727.092690][T17354]  </TASK>
[  727.811153][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2142'.
[  731.596183][T17416] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  731.626424][T17416] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  731.651184][T17416] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  731.688878][T17416] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  731.720031][T17416] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  731.797499][T17416] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  731.861811][T17416] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  731.941100][T17416] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  731.984471][T17416] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  732.005623][T17416] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  732.054961][T17416] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  732.157176][T17416] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  732.183680][T17416] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  732.247631][T17416] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  732.544979][T17415] Process accounting resumed
[  733.145496][ T9171] Bluetooth: hci0: command 0x2016 tx timeout
[  733.704920][ T9171] Bluetooth: hci2: command 0x2016 tx timeout
[  733.711031][ T9214] Bluetooth: hci1: command 0x0c1a tx timeout
[  733.717075][ T9214] Bluetooth: hci4: command 0x041b tx timeout
[  733.862843][ T9214] Bluetooth: hci3: command 0x0c1a tx timeout
[  734.022552][ T9214] Bluetooth: hci5: command 0x0c1a tx timeout
[  734.151804][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2158'.
[  734.184587][ T9214] Bluetooth: hci6: command 0x0c1a tx timeout
[  735.041489][T17476] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0
[  735.783872][ T9214] Bluetooth: hci2: command 0x2016 tx timeout
[  735.929467][ T9171] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  735.937538][ T9171] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  735.938203][ T9171] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  735.941482][ T9171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  735.943066][T11999] Bluetooth: hci3: command 0x0c1a tx timeout
[  735.953629][ T9171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  736.103682][ T9171] Bluetooth: hci5: command 0x0c1a tx timeout
[  736.266564][ T9171] Bluetooth: hci6: command 0x0c1a tx timeout
[  736.359934][ T5629] ------------[ cut here ]------------
[  736.359946][ T5629] ODEBUG: free active (active state 0) object: ffff88802b5fd438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0
[  736.360054][ T5629] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz-executor/5629
[  736.360092][ T5629] Modules linked in:
[  736.360118][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  736.360147][ T5629] Tainted: [L]=SOFTLOCKUP
[  736.360154][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  736.360167][ T5629] RIP: 0010:debug_print_object+0x19b/0x2a0
[  736.360192][ T5629] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d b2 fe e1 0b 41 56 48 8b 14 dd c0 54 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c 7a d7 0b 01 48 83 c4 18 5b 5d 41 5c 41
[  736.360213][ T5629] RSP: 0018:ffffc90003dbf6f8 EFLAGS: 00010246
[  736.360230][ T5629] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  736.360243][ T5629] RDX: ffffffff8c1c5400 RSI: ffffffff8c1c5020 RDI: ffffffff90e1ebe0
[  736.360257][ T5629] RBP: 0000000000000001 R08: ffff88802b5fd438 R09: ffffffff8bb2c6a0
[  736.360270][ T5629] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c5020
[  736.360283][ T5629] R13: ffffffff8bb2c6e0 R14: ffffffff8a914a80 R15: ffffc90003dbf7f8
[  736.360297][ T5629] FS:  0000000000000000(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000
[  736.360336][ T5629] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  736.360350][ T5629] CR2: 0000200000513030 CR3: 0000000022312000 CR4: 00000000003526f0
[  736.360365][ T5629] Call Trace:
[  736.360371][ T5629]  <TASK>
[  736.360379][ T5629]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  736.360420][ T5629]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  736.360452][ T5629]  debug_check_no_obj_freed+0x4da/0x630
[  736.360486][ T5629]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  736.360514][ T5629]  ? __page_table_check_zero+0x333/0x410
[  736.360543][ T5629]  ? __page_table_check_zero+0x338/0x410
[  736.360571][ T5629]  __free_frozen_pages+0x3fc/0x10a0
[  736.360620][ T5629]  hci_release_dev+0x4ef/0x630
[  736.360679][ T5629]  ? __pfx_hci_release_dev+0x10/0x10
[  736.360703][ T5629]  ? device_release+0x97/0x270
[  736.360748][ T5629]  ? rcu_is_watching+0x12/0xc0
[  736.360772][ T5629]  ? device_release+0x97/0x270
[  736.360799][ T5629]  bt_host_release+0x6a/0xb0
[  736.360856][ T5629]  ? __pfx_bt_host_release+0x10/0x10
[  736.360885][ T5629]  device_release+0xd2/0x270
[  736.360911][ T5629]  kobject_put+0x1f7/0x640
[  736.360947][ T5629]  put_device+0x1f/0x30
[  736.360971][ T5629]  vhci_release+0x185/0x230
[  736.361032][ T5629]  ? __pfx_vhci_release+0x10/0x10
[  736.361057][ T5629]  __fput+0x3ff/0xb50
[  736.361091][ T5629]  task_work_run+0x150/0x240
[  736.361112][ T5629]  ? __pfx_task_work_run+0x10/0x10
[  736.361131][ T5629]  ? free_uts_ns+0x16e/0x330
[  736.361162][ T5629]  do_exit+0x951/0x2af0
[  736.361192][ T5629]  ? anon_pipe_read+0xc1c/0x1200
[  736.361218][ T5629]  ? __pfx_do_exit+0x10/0x10
[  736.361248][ T5629]  ? do_raw_spin_lock+0x128/0x260
[  736.361270][ T5629]  ? find_held_lock+0x2b/0x80
[  736.361294][ T5629]  ? get_signal+0x7e5/0x2210
[  736.361322][ T5629]  do_group_exit+0xd5/0x2a0
[  736.361355][ T5629]  get_signal+0x20ff/0x2210
[  736.361381][ T5629]  ? security_file_permission+0x76/0x210
[  736.361417][ T5629]  ? rw_verify_area+0xce/0x6d0
[  736.361441][ T5629]  ? __pfx_get_signal+0x10/0x10
[  736.361468][ T5629]  ? __pfx_vfs_read+0x10/0x10
[  736.361489][ T5629]  ? __fput+0x68d/0xb50
[  736.361519][ T5629]  arch_do_signal_or_restart+0x91/0x7a0
[  736.361551][ T5629]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  736.361591][ T5629]  ? rcu_is_watching+0x12/0xc0
[  736.361617][ T5629]  exit_to_user_mode_loop+0x98/0x670
[  736.361650][ T5629]  ? rcu_is_watching+0x12/0xc0
[  736.361676][ T5629]  do_syscall_64+0x652/0x840
[  736.361704][ T5629]  ? clear_bhb_loop+0x40/0x90
[  736.361730][ T5629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.361751][ T5629] RIP: 0033:0x7fe97035d68e
[  736.361767][ T5629] Code: Unable to access opcode bytes at 0x7fe97035d664.
[  736.361777][ T5629] RSP: 002b:00007fff4ce7e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  736.361797][ T5629] RAX: fffffffffffffe00 RBX: 000055556f9a5500 RCX: 00007fe97035d68e
[  736.361811][ T5629] RDX: 0000000000000030 RSI: 00007fff4ce7e150 RDI: 00000000000000f9
[  736.361824][ T5629] RBP: 00007fff4ce7e0fc R08: 0000000000000000 R09: 0000000000000000
[  736.361837][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258
[  736.361850][ T5629] R13: 00000000000927c0 R14: 00000000000b374e R15: 00007fff4ce7e150
[  736.361875][ T5629]  </TASK>
[  736.361888][ T5629] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  736.361903][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  736.361930][ T5629] Tainted: [L]=SOFTLOCKUP
[  736.361938][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  736.361950][ T5629] Call Trace:
[  736.361956][ T5629]  <TASK>
[  736.361963][ T5629]  dump_stack_lvl+0x100/0x190
[  736.361998][ T5629]  vpanic+0x552/0x970
[  736.362018][ T5629]  ? __pfx_vpanic+0x10/0x10
[  736.362044][ T5629]  panic+0xd1/0xe0
[  736.362062][ T5629]  ? __pfx_panic+0x10/0x10
[  736.362088][ T5629]  ? check_panic_on_warn+0x1f/0x90
[  736.362125][ T5629]  check_panic_on_warn.cold+0x19/0x34
[  736.362147][ T5629]  ? debug_print_object+0x18e/0x2a0
[  736.362170][ T5629]  __warn.cold+0x191/0x328
[  736.362192][ T5629]  __report_bug+0x296/0x3d0
[  736.362238][ T5629]  ? debug_print_object+0x18e/0x2a0
[  736.362264][ T5629]  ? __pfx___report_bug+0x10/0x10
[  736.362298][ T5629]  ? unwind_next_frame+0x3c8/0x2090
[  736.362328][ T5629]  report_bug_entry+0xe1/0x290
[  736.362354][ T5629]  ? debug_print_object+0x19b/0x2a0
[  736.362378][ T5629]  handle_bug+0x1cd/0x2a0
[  736.362396][ T5629]  exc_invalid_op+0x17/0x50
[  736.362419][ T5629]  asm_exc_invalid_op+0x1a/0x20
[  736.362438][ T5629] RIP: 0010:debug_print_object+0x19b/0x2a0
[  736.362462][ T5629] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d b2 fe e1 0b 41 56 48 8b 14 dd c0 54 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 8c 7a d7 0b 01 48 83 c4 18 5b 5d 41 5c 41
[  736.362482][ T5629] RSP: 0018:ffffc90003dbf6f8 EFLAGS: 00010246
[  736.362498][ T5629] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000
[  736.362510][ T5629] RDX: ffffffff8c1c5400 RSI: ffffffff8c1c5020 RDI: ffffffff90e1ebe0
[  736.362524][ T5629] RBP: 0000000000000001 R08: ffff88802b5fd438 R09: ffffffff8bb2c6a0
[  736.362537][ T5629] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c5020
[  736.362550][ T5629] R13: ffffffff8bb2c6e0 R14: ffffffff8a914a80 R15: ffffc90003dbf7f8
[  736.362564][ T5629]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  736.362598][ T5629]  ? __pfx_hci_devcd_timeout+0x10/0x10
[  736.362624][ T5629]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  736.362653][ T5629]  debug_check_no_obj_freed+0x4da/0x630
[  736.362687][ T5629]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  736.362714][ T5629]  ? __page_table_check_zero+0x333/0x410
[  736.362742][ T5629]  ? __page_table_check_zero+0x338/0x410
[  736.362769][ T5629]  __free_frozen_pages+0x3fc/0x10a0
[  736.362803][ T5629]  hci_release_dev+0x4ef/0x630
[  736.362826][ T5629]  ? __pfx_hci_release_dev+0x10/0x10
[  736.362849][ T5629]  ? device_release+0x97/0x270
[  736.362873][ T5629]  ? rcu_is_watching+0x12/0xc0
[  736.362895][ T5629]  ? device_release+0x97/0x270
[  736.362923][ T5629]  bt_host_release+0x6a/0xb0
[  736.362951][ T5629]  ? __pfx_bt_host_release+0x10/0x10
[  736.362980][ T5629]  device_release+0xd2/0x270
[  736.363005][ T5629]  kobject_put+0x1f7/0x640
[  736.363039][ T5629]  put_device+0x1f/0x30
[  736.363064][ T5629]  vhci_release+0x185/0x230
[  736.363088][ T5629]  ? __pfx_vhci_release+0x10/0x10
[  736.363112][ T5629]  __fput+0x3ff/0xb50
[  736.363145][ T5629]  task_work_run+0x150/0x240
[  736.363165][ T5629]  ? __pfx_task_work_run+0x10/0x10
[  736.363183][ T5629]  ? free_uts_ns+0x16e/0x330
[  736.363214][ T5629]  do_exit+0x951/0x2af0
[  736.363242][ T5629]  ? anon_pipe_read+0xc1c/0x1200
[  736.363267][ T5629]  ? __pfx_do_exit+0x10/0x10
[  736.363297][ T5629]  ? do_raw_spin_lock+0x128/0x260
[  736.363319][ T5629]  ? find_held_lock+0x2b/0x80
[  736.363343][ T5629]  ? get_signal+0x7e5/0x2210
[  736.363369][ T5629]  do_group_exit+0xd5/0x2a0
[  736.363406][ T5629]  get_signal+0x20ff/0x2210
[  736.363431][ T5629]  ? security_file_permission+0x76/0x210
[  736.363458][ T5629]  ? rw_verify_area+0xce/0x6d0
[  736.363482][ T5629]  ? __pfx_get_signal+0x10/0x10
[  736.363508][ T5629]  ? __pfx_vfs_read+0x10/0x10
[  736.363529][ T5629]  ? __fput+0x68d/0xb50
[  736.363558][ T5629]  arch_do_signal_or_restart+0x91/0x7a0
[  736.363589][ T5629]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  736.363627][ T5629]  ? rcu_is_watching+0x12/0xc0
[  736.363653][ T5629]  exit_to_user_mode_loop+0x98/0x670
[  736.363685][ T5629]  ? rcu_is_watching+0x12/0xc0
[  736.363710][ T5629]  do_syscall_64+0x652/0x840
[  736.363738][ T5629]  ? clear_bhb_loop+0x40/0x90
[  736.363762][ T5629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.363782][ T5629] RIP: 0033:0x7fe97035d68e
[  736.363797][ T5629] Code: Unable to access opcode bytes at 0x7fe97035d664.
[  736.363807][ T5629] RSP: 002b:00007fff4ce7e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  736.363825][ T5629] RAX: fffffffffffffe00 RBX: 000055556f9a5500 RCX: 00007fe97035d68e
[  736.363839][ T5629] RDX: 0000000000000030 RSI: 00007fff4ce7e150 RDI: 00000000000000f9
[  736.363851][ T5629] RBP: 00007fff4ce7e0fc R08: 0000000000000000 R09: 0000000000000000
[  736.363863][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258
[  736.363875][ T5629] R13: 00000000000927c0 R14: 00000000000b374e R15: 00007fff4ce7e150
[  736.363900][ T5629]  </TASK>
[  736.363970][ T5629] Kernel Offset: disabled