last executing test programs:

8.731570802s ago: executing program 2 (id=4492):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2)
sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010)
sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xd4, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xa2, 0x1, 0x0, 0x1, [@generic="93aa1eee5506dadf23557d300c166626b82ccb18821c72fdb323ad2ed191ca0b2159e7ec3f2eb9f8a9f061837a7fc47da351cba8ef296b51ec83984f5444a2f2a70d47ed031833e32b342ccd1300393e7769101ed7e0d6c0682dd372e5f4f7f062a8b385f652f358044ee9ff490dd116448eeaf8c032aa34a5c1a45f0535c226fe78bd9a776bda2674090beee62302e0ba791bf1c86a0f676aecbc18bc40"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r5 = socket(0x29, 0x3, 0x84)
sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)

7.978469755s ago: executing program 3 (id=4494):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2)
sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010)
sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r5 = socket(0x29, 0x3, 0x84)
sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)

7.204348722s ago: executing program 2 (id=4496):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r1 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
read$auto(r1, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8})
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

6.596101796s ago: executing program 3 (id=4497):
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x2000c800)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xa2102, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x9)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000500)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x404889c}, 0x0)

6.589603921s ago: executing program 1 (id=4498):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8)
personality$auto(0xfffff032)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
r2 = socket(0x1d, 0x80008, 0x7fff)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r6 = socket(0x18, 0x5, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5403, 0x0)
connect$auto(r6, 0x0, 0x3a)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

6.423821966s ago: executing program 0 (id=4499):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8)
personality$auto(0xfffff032)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r0, 0x8, 0xfffffffa)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)

5.573536749s ago: executing program 0 (id=4500):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2)
sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010)
sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa0, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x6d, 0x1, 0x0, 0x1, [@generic="93aa1eee5506dadf23557d300c166626b82ccb18821c72fdb323ad2ed191ca0b2159e7ec3f2eb9f8a9f061837a7fc47da351cba8ef296b51ec83984f5444a2f2a70d47ed031833e32b342ccd1300393e7769101ed7e0d6c0682dd372e5f4f7f062a8b385f652f35804"]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r5 = socket(0x29, 0x3, 0x84)
sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)

5.572553014s ago: executing program 3 (id=4508):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8)
personality$auto(0xfffff032)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0xffffffffffffffff, 0x8, 0xfffffffa)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)

5.50749362s ago: executing program 1 (id=4501):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2)
sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010)
sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa0, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x6d, 0x1, 0x0, 0x1, [@generic="93aa1eee5506dadf23557d300c166626b82ccb18821c72fdb323ad2ed191ca0b2159e7ec3f2eb9f8a9f061837a7fc47da351cba8ef296b51ec83984f5444a2f2a70d47ed031833e32b342ccd1300393e7769101ed7e0d6c0682dd372e5f4f7f062a8b385f652f35804"]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r5 = socket(0x29, 0x3, 0x84)
sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)

4.534597137s ago: executing program 3 (id=4502):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
close_range$auto(0x2, 0x8, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

4.525379862s ago: executing program 2 (id=4503):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r0, 0x0, 0x2)
fdatasync$auto(r0)

4.302973759s ago: executing program 1 (id=4504):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8)
personality$auto(0xfffff032)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
close_range$auto(r0, 0x8, 0xfffffffa)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
r2 = socket(0x1d, 0x80008, 0x7fff)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r6 = socket(0x18, 0x5, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5403, 0x0)
connect$auto(r6, 0x0, 0x3a)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

4.055324941s ago: executing program 0 (id=4505):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

3.27491704s ago: executing program 1 (id=4506):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r0, 0x0, 0x2)
fdatasync$auto(r0)

3.170996272s ago: executing program 2 (id=4507):
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x3, 0xfffffffffffff7cc, 0x4, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8)
personality$auto(0xfffff032)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r0, 0x8, 0xfffffffa)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
r2 = socket(0x1d, 0x80008, 0x7fff)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r6 = socket(0x18, 0x5, 0x1)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TCFLSH2(r7, 0x5403, 0x0)
connect$auto(r6, 0x0, 0x3a)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0)
preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4)
sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.628376536s ago: executing program 0 (id=4509):
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2982, 0x0)
ioctl$auto_SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040))
ioctl$auto_SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000140)="9f40b3b8ebcbfb85c9193f533261dd90a83e332525f27f9118be702f22c429028252b8b2959a11f77378ab8eb851d711a996f761a31514c0a40cb4abbb8b09082e53970467629c5a35974ae6a675314a093cf93fa7a0a221b747517a4fe19b938040cfc1ac0238ab40895d871e8af25a32466687be3f2e399d59b6126a05b4e1f72ac8388bf81f856a934b296e7db8a42d469a369ff2ee92d853fe4fce848d863edf1767")
r1 = socket$auto(0x0, 0x7, 0x5)
r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
getsockname$auto(r2, &(0x7f0000000280)=@l2tp={0x2, 0x0, @remote, 0x6}, &(0x7f00000002c0)=0x3)
syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000340), r1)
r3 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000480), r1)
sendmsg$auto_KSMBD_EVENT_TREE_CONNECT_REQUEST(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x24008c10)
getsockopt$auto_SO_RCVLOWAT(r1, 0x7, 0x12, 0x0, &(0x7f00000005c0)=0x5)
io_uring_register$auto_IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000600)="07bcf8a6846801b8b7db173c515bee4c4f7367d4b936e56b06b3d2267fdf2e567c1c4da918c85b3e818c58e7426e08170c95e8185dbe7972fc2bdf25102dc97ead795f845deb5faec6290d12874f675017c6c97c7fd1c87175b1b48f7b941aab598e26483e83c375cae99277c807534dd2c1393df5bedaf19f5c8e9417aff5991e7ca4ec84ddd4", 0x3)
getsockopt$auto_SO_TXTIME(r1, 0x3, 0x3d, &(0x7f00000006c0)='NET_DM\x00', &(0x7f0000000700)=0x1)
r4 = getpgrp(0xffffffffffffffff)
waitid$auto_P_PIDFD(0x3, r1, &(0x7f00000007c0)={@siginfo_0_0={0xfffffff6, 0x0, 0x7ff, @_kill={<r5=>0x0, 0xffffffffffffffff}}}, 0x2, &(0x7f0000000840)={{0x1, 0xf}, {0x4, 0x3ff}, 0x8001, 0x6, 0x5, 0x7fffffff, 0x6, 0x3, 0x3ff, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x9, 0x39d, 0x9})
rt_tgsigqueueinfo$auto_SIGCONT(r4, r5, 0x12, &(0x7f0000000900)={@_si_pad})
r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000009c0), r1)
sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x3}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0xfffffffa}, @BATADV_ATTR_TQ={0x5, 0x19, 0x9}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8041)
ioctl$auto_FIGETBSZ(r1, 0x2, 0x7)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b40), r1)
sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001540)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000000b80)={0x970, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x8000}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xffff8305}, @NL80211_ATTR_STA_WME={0x34, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfb}]}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_MAC_HINT={0xde, 0xc8, "331da05cb97430ba8a8a16f7eb9b22fc232448a33a3a62ffc5e743b7c6a4819411f4f7f5d6c3eb694129325f68ec5b3d8166ccb823e11a34988d6e6594fa2cea19a1ec7dcb223716c50d72a5213e0557ae6057c8387d283f14e12e05e6a50d65c9b7eca871d35a969625f88e23611ad094d1343dbf4aa2d61d329a8ab4c7c6b18666c5c3ec6c43bf7dc12a3e7e8643d5d4227c2e4ebdb1355802c434dad7d71252470ec82b1c55a2f84812e53c072676c2c4b7eaaa2915060e61373e28e40336c820b08d6e69dec7158ece3357cb7c0c7e6cfe3f53a33e948686"}, @NL80211_ATTR_MAC={0x4e, 0x6, "6615d4f94e4cbe1c32987821be138784c0cc9e76fc632e0ef6edd57c2eb293fd6d58f96832bdd5c8cfdf98cb1590318b0eecd0a528835262f86567a34cd14fd04d94a4a1f1c7dca07193"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x80}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x7d2, 0x33, "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"}]}, 0x970}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080)
ioctl$auto_SOUND_MIXER_READ_RECSRC2(r0, 0x80044dff, &(0x7f0000001580)="bf2b7add563682e1b24fd2c044a1d30d881ee002951728959248a71f792acf705f5a8b1b2ad369d2b23110a21524386029799dc0ff53059cff0407349e6c9a5beac77b2514d2f1ea173a712c92ea62b9d413330c0055bd6b2d9ddce467bd3a051cf4d4ed6f0fe61d8866b92c39173c59b9afc1b9a7b16953b26e642c880e7671c6f68671bd798da1971f67adcc0b26074b4a75d5161fb6e2e70c77bb7d3ada3abe540a6bc3c6b9bd9fbe1fd8d0512a1a766db319da8fb94108d865b694a20653d486e1b616ad4ffbfa81")
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/usb/usbmon/18t\x00', 0x8002, 0x0)
getsockopt$auto_SO_PEEK_OFF(0xffffffffffffffff, 0xfffffffb, 0x2a, &(0x7f00000016c0)='SMBD_GENL\x00', &(0x7f0000001700)=0x3ff)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x5c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TT_ADDRESS={0xa, 0x10, @remote}, @BATADV_ATTR_THROUGHPUT={0x8, 0x1a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'ipvlan1\x00'}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0x4}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket(0x1e, 0x3, 0x2)

2.559328799s ago: executing program 3 (id=4510):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
read$auto(0xffffffffffffffff, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8})
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

1.984559102s ago: executing program 2 (id=4511):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r1 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
read$auto(r1, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8})
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r2, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

1.983511183s ago: executing program 0 (id=4519):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

1.073378926s ago: executing program 3 (id=4512):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
close_range$auto(0x2, 0x8, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

1.072236445s ago: executing program 1 (id=4521):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x67, 0x3)
setpriority$auto_PRIO_USER(0x2, 0x0, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0)
read$auto(r2, 0x0, 0x4)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2)
sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c05", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYRES32=0x0, @ANYBLOB="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"], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000)
waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200009, 0x2, 0x8})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x7fff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0xfffffffffffefffd, 0x17)
madvise$auto(0x866d, 0x7fff, 0x9)
madvise$auto(0x0, 0x20499d, 0x9)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5)
timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6)
mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd, 0x11, 0x1, 0x9, 0x7f, @prog_cnt=0x2, 0x0, 0xf, 0x8, 0x7, 0x1}, 0x63a)

707.325811ms ago: executing program 2 (id=4513):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0x2000040080000004, 0xe)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
write$auto(0x3, 0x0, 0xfdef)
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, &(0x7f0000000100)='@+\\!\x00', &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2)
sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010)
sendmsg$auto_IPVS_CMD_SET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xd4, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xa2, 0x1, 0x0, 0x1, [@generic="93aa1eee5506dadf23557d300c166626b82ccb18821c72fdb323ad2ed191ca0b2159e7ec3f2eb9f8a9f061837a7fc47da351cba8ef296b51ec83984f5444a2f2a70d47ed031833e32b342ccd1300393e7769101ed7e0d6c0682dd372e5f4f7f062a8b385f652f358044ee9ff490dd116448eeaf8c032aa34a5c1a45f0535c226fe78bd9a776bda2674090beee62302e0ba791bf1c86a0f676aecbc18bc40"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2bb1f3f23ec0e74c}, 0x4)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9)
r5 = socket(0x29, 0x3, 0x84)
sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)

442.97351ms ago: executing program 0 (id=4514):
keyctl$auto_KEYCTL_LINK(0x8, 0xffffffffffffffff, 0x100, 0xec9, 0x8000000000000001)
mmap$auto(0x0, 0x20007, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0)
mmap$auto(0x4, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$auto(0x0, 0xa00006, 0x10000, 0x40eb1, 0x602, 0x300000000000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64$auto(r0, 0x0, 0x100000001, 0x9)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
write$auto(r1, 0x0, 0x2)
fdatasync$auto(r1)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0)
getsockopt$auto_SO_PEEK_OFF(r2, 0x8, 0x2a, 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, 0x2, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2})
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_RNDGETENTCNT2(r3, 0x80045200, &(0x7f0000000200)=0x800)
r5 = inotify_init1$auto(0x3)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)="12d6206be3b03d6c6e07cde708f4356ada10a0191bca4b7b4c6c57958e43ef27a04ba00c9ab65d8b9778ba6cf2838b74f74a67ae301158ffe9ff2a80ac59287fd2c39cc941e4ef00840a8614d78cae2506b04423c81df0c4f8d2acee1343889c0d5f4f28fffb2ab183e7913352d49e0e369869f386388738b015226a963ccf85aca27dc6307627bf71471a731ec48c766764e045aacd956b7ca0d847", 0x9c)
socket(0x22, 0x800, 0x3)
ioctl$auto(r0, 0x4b4a, 0xffffffffffffffff)
getcwd$auto(0x0, 0xffffffffffffffff)
openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x404a03, 0x0)

0s ago: executing program 1 (id=4515):
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x2000c800)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xa2102, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x9)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000500)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x404889c}, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0xa, 0x801, 0x84)
readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)

kernel console output (not intermixed with test programs):

tooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.319755][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.323004][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.336168][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.337057][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.352083][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.359704][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.368223][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.377473][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.397313][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.406633][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.414481][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.421949][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.431006][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.439038][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.446908][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.962780][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   85.982051][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   86.041943][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   86.121404][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   86.266596][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.274338][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.282382][ T5834] bridge_slave_0: entered allmulticast mode
[   86.289523][ T5834] bridge_slave_0: entered promiscuous mode
[   86.313185][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.320534][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.327676][ T5844] bridge_slave_0: entered allmulticast mode
[   86.334863][ T5844] bridge_slave_0: entered promiscuous mode
[   86.342418][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.349592][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.356977][ T5834] bridge_slave_1: entered allmulticast mode
[   86.364225][ T5834] bridge_slave_1: entered promiscuous mode
[   86.386042][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.393261][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.400681][ T5844] bridge_slave_1: entered allmulticast mode
[   86.407593][ T5844] bridge_slave_1: entered promiscuous mode
[   86.448199][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.455392][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.462769][ T5848] bridge_slave_0: entered allmulticast mode
[   86.469836][ T5848] bridge_slave_0: entered promiscuous mode
[   86.508510][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.516010][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.523549][ T5848] bridge_slave_1: entered allmulticast mode
[   86.530811][ T5848] bridge_slave_1: entered promiscuous mode
[   86.541002][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.553222][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.562460][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.569594][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.577298][ T5840] bridge_slave_0: entered allmulticast mode
[   86.584635][ T5840] bridge_slave_0: entered promiscuous mode
[   86.604478][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.615938][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.625300][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.632709][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.639918][ T5840] bridge_slave_1: entered allmulticast mode
[   86.647326][ T5840] bridge_slave_1: entered promiscuous mode
[   86.696995][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.738234][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.749627][ T5844] team0: Port device team_slave_0 added
[   86.759397][ T5834] team0: Port device team_slave_0 added
[   86.771009][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.792706][ T5844] team0: Port device team_slave_1 added
[   86.799953][ T5834] team0: Port device team_slave_1 added
[   86.807915][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.898377][ T5848] team0: Port device team_slave_0 added
[   86.959823][ T5848] team0: Port device team_slave_1 added
[   86.966539][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.990359][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.030394][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.043482][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.052186][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.079047][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.094227][ T5840] team0: Port device team_slave_0 added
[   87.101978][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.108935][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.136245][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.182670][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.189641][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.216246][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.230866][ T5840] team0: Port device team_slave_1 added
[   87.248031][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.255100][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.281183][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.312326][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.319282][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.345675][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.381225][ T5842] Bluetooth: hci0: command tx timeout
[   87.395253][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.402344][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.428395][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.460473][ T5841] Bluetooth: hci1: command tx timeout
[   87.463789][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.473015][ T5842] Bluetooth: hci2: command tx timeout
[   87.478651][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.504801][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.522539][ T5834] hsr_slave_0: entered promiscuous mode
[   87.528926][ T5834] hsr_slave_1: entered promiscuous mode
[   87.540689][ T5842] Bluetooth: hci3: command tx timeout
[   87.547631][ T5844] hsr_slave_0: entered promiscuous mode
[   87.554204][ T5844] hsr_slave_1: entered promiscuous mode
[   87.560212][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   87.566417][ T5844] Cannot create hsr debugfs directory
[   87.648059][ T5848] hsr_slave_0: entered promiscuous mode
[   87.655486][ T5848] hsr_slave_1: entered promiscuous mode
[   87.662355][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   87.668090][ T5848] Cannot create hsr debugfs directory
[   87.748225][ T5840] hsr_slave_0: entered promiscuous mode
[   87.754651][ T5840] hsr_slave_1: entered promiscuous mode
[   87.760962][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   87.766834][ T5840] Cannot create hsr debugfs directory
[   88.162564][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.176598][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.197095][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.214892][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.264526][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.283270][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.302110][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.325904][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.372725][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.392593][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.408039][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.432186][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.508003][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.524764][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.535575][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.564422][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.654865][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.704638][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   88.742753][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.750054][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.774800][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.789808][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.796983][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.825313][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   88.859994][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.867137][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.894474][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.911381][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.918542][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.932090][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.997182][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   89.009916][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   89.028550][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.035767][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.075875][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.083101][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.097448][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.104608][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.130827][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.157252][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.164483][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.355578][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.463076][ T5842] Bluetooth: hci0: command tx timeout
[   89.526573][ T5844] veth0_vlan: entered promiscuous mode
[   89.541313][ T5841] Bluetooth: hci1: command tx timeout
[   89.546802][ T5842] Bluetooth: hci2: command tx timeout
[   89.576174][ T5844] veth1_vlan: entered promiscuous mode
[   89.620643][ T5842] Bluetooth: hci3: command tx timeout
[   89.635750][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.694524][ T5844] veth0_macvtap: entered promiscuous mode
[   89.727393][ T5844] veth1_macvtap: entered promiscuous mode
[   89.774882][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.793196][ T5834] veth0_vlan: entered promiscuous mode
[   89.802799][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.822714][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.841787][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.852529][ T5834] veth1_vlan: entered promiscuous mode
[   89.881520][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.891926][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.912212][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.921166][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.017616][ T5848] veth0_vlan: entered promiscuous mode
[   90.051948][ T5834] veth0_macvtap: entered promiscuous mode
[   90.067060][ T5840] veth0_vlan: entered promiscuous mode
[   90.078264][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.089479][ T5834] veth1_macvtap: entered promiscuous mode
[   90.096481][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.112482][ T5848] veth1_vlan: entered promiscuous mode
[   90.129572][ T5840] veth1_vlan: entered promiscuous mode
[   90.159381][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.169131][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.205632][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.234933][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.268131][ T5848] veth0_macvtap: entered promiscuous mode
[   90.278082][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.295213][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.306732][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.318503][ T5840] veth0_macvtap: entered promiscuous mode
[   90.331983][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.342487][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.354913][ T5840] veth1_macvtap: entered promiscuous mode
[   90.365611][ T5848] veth1_macvtap: entered promiscuous mode
[   90.458295][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.493763][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.523726][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.544317][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.571839][ T4369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.591652][ T4369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.617157][ T4369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.626664][ T4369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.647194][ T4369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.656978][ T4369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.668317][ T4369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.692093][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.701120][ T4369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.715628][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.807293][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.818428][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.883251][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.905715][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.012706][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.042665][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.141381][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.150458][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.158846][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.182300][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.200705][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.340831][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.340869][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.511180][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   91.541339][ T5842] Bluetooth: hci0: command tx timeout
[   91.630904][ T5841] Bluetooth: hci1: command tx timeout
[   91.636736][ T5842] Bluetooth: hci2: command tx timeout
[   91.646400][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.700894][ T5841] Bluetooth: hci3: command tx timeout
[   91.748214][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   91.850985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   91.860764][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   91.944865][  T879] cfg80211: failed to load regulatory.db
[   92.100868][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.466884][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.666194][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.631123][ T5841] Bluetooth: hci0: command tx timeout
[   93.702806][ T5842] Bluetooth: hci2: command tx timeout
[   93.708288][ T5841] Bluetooth: hci1: command tx timeout
[   93.736418][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'.
[   93.782170][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.791000][ T5841] Bluetooth: hci3: command tx timeout
[   93.916247][ T5971] bridge_slave_1 (unregistering): left allmulticast mode
[   93.931201][ T5971] bridge_slave_1 (unregistering): left promiscuous mode
[   94.013307][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.432636][ T5971] Zero length message leads to an empty skb
[   95.736743][ T5990] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[   96.022546][ T5991] vhci_hcd: invalid port number 252
[   96.032022][ T5991] vhci_hcd: default hub control req: 040f v0772 i00fc l2
[   97.272502][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.748702][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'.
[  101.820849][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.236412][ T6066] bridge_slave_1 (unregistering): left allmulticast mode
[  102.274099][ T6066] bridge_slave_1 (unregistering): left promiscuous mode
[  102.381171][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.232771][ T5841] Bluetooth: hci3: unexpected event 0x0f length: 438 > 4
[  106.563746][ T6113] random: crng reseeded on system resumption
[  108.261596][ T5841] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  108.270073][ T5841] Bluetooth: hci3: Injecting HCI hardware error event
[  108.278159][ T5841] Bluetooth: hci3: hardware error 0x00
[  110.741011][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  111.669191][ T6171] Unable to find swap-space signature
[  113.825101][ T6203] process 'syz.2.64' launched ':,' with NULL argv: empty string added
[  114.042139][ T6205] capability: warning: `syz.0.65' uses 32-bit capabilities (legacy support in use)
[  114.066275][ T6211] openvswitch: netlink: Key type 1699 is out of range max 32
[  114.082404][ T6211] nfs: Unknown parameter 'w¾Ã`_…à‚ûÏI+;ýá�	ÑöHYø º†»·«ÏLuõ>>ËÕuh�*àéC<+°ðÀÛ'
[  114.382491][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.66'.
[  115.451568][ T6220] mmap: syz.1.67 (6220) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  116.026270][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'.
[  116.086962][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.294837][ T6235] bridge_slave_1 (unregistering): left allmulticast mode
[  116.315821][ T6235] bridge_slave_1 (unregistering): left promiscuous mode
[  116.415115][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.811650][ T6243] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  117.416196][ T6260] input: f¬
 as /devices/virtual/input/input5
[  123.643218][ T6333] FAULT_INJECTION: forcing a failure.
[  123.643218][ T6333] name fail_futex, interval 1, probability 0, space 0, times 1
[  123.660469][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) 
[  123.660503][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  123.660521][ T6333] Call Trace:
[  123.660531][ T6333]  <TASK>
[  123.660541][ T6333]  dump_stack_lvl+0x16c/0x1f0
[  123.660577][ T6333]  should_fail_ex+0x512/0x640
[  123.660605][ T6333]  ? __schedule+0x114c/0x6150
[  123.660646][ T6333]  get_futex_key+0x1d0/0x15f0
[  123.660683][ T6333]  ? __pfx_get_futex_key+0x10/0x10
[  123.660723][ T6333]  futex_wait_setup+0x9d/0x570
[  123.660771][ T6333]  __futex_wait+0x193/0x2f0
[  123.660809][ T6333]  ? __pfx___futex_wait+0x10/0x10
[  123.660849][ T6333]  ? __pfx_futex_wake_mark+0x10/0x10
[  123.660890][ T6333]  ? futex_hash+0x2c5/0x380
[  123.660923][ T6333]  ? futex_private_hash_put+0x160/0x1b0
[  123.660955][ T6333]  futex_wait+0xe8/0x380
[  123.660991][ T6333]  ? __pfx_futex_wait+0x10/0x10
[  123.661035][ T6333]  ? __might_fault+0xe3/0x190
[  123.661064][ T6333]  ? __might_fault+0x13b/0x190
[  123.661109][ T6333]  do_futex+0x229/0x350
[  123.661141][ T6333]  ? __pfx_do_futex+0x10/0x10
[  123.661172][ T6333]  ? fput+0x70/0xf0
[  123.661201][ T6333]  ? __sys_connect+0xe0/0x160
[  123.661229][ T6333]  __x64_sys_futex+0x1e0/0x4c0
[  123.661264][ T6333]  ? __pfx___x64_sys_futex+0x10/0x10
[  123.661293][ T6333]  ? xfd_validate_state+0x61/0x180
[  123.661326][ T6333]  ? __pfx_ksys_write+0x10/0x10
[  123.661359][ T6333]  do_syscall_64+0xcd/0xf80
[  123.661387][ T6333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.661412][ T6333] RIP: 0033:0x7f93c7f8f7c9
[  123.661440][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.661464][ T6333] RSP: 002b:00007f93c8db40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  123.661488][ T6333] RAX: ffffffffffffffda RBX: 00007f93c81e5fa8 RCX: 00007f93c7f8f7c9
[  123.661506][ T6333] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f93c81e5fa8
[  123.661522][ T6333] RBP: 00007f93c81e5fa0 R08: 0000000000000000 R09: 0000000000000000
[  123.661538][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.661552][ T6333] R13: 00007f93c81e6038 R14: 00007ffd9eb2d280 R15: 00007ffd9eb2d368
[  123.661588][ T6333]  </TASK>
[  124.080496][ T6333] svc: failed to register nfsdv3 RPC service (errno 111).
[  124.132906][ T6333] svc: failed to register nfsaclv3 RPC service (errno 111).
[  124.706827][ T6346] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  125.299649][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'.
[  125.464667][ T6355] netlink: 25 bytes leftover after parsing attributes in process `syz.2.96'.
[  127.103504][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'.
[  127.130598][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.262312][ T6383] bridge_slave_1 (unregistering): left allmulticast mode
[  127.305157][ T6383] bridge_slave_1 (unregistering): left promiscuous mode
[  127.362574][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.061960][ T6396] ubi0: attaching mtd0
[  128.089532][ T6396] ubi0: scanning is finished
[  128.103763][ T6396] ubi0: empty MTD device detected
[  128.146675][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'.
[  128.664314][ T6396] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  128.672076][ T6396] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  128.681158][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'.
[  128.741635][ T6396] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  128.785271][ T6396] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  128.818941][ T6396] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  128.835638][ T6396] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  128.853859][ T6396] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2544322854
[  128.869358][ T6396] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  128.891676][ T6402] ubi0: detaching mtd0
[  129.062062][ T6402] ubi0: mtd0 is detached
[  130.711685][ T5842] Bluetooth: hci0: unexpected event 0x0e length: 438 > 260
[  131.700491][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  134.740495][ T5841] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  134.748985][ T5841] Bluetooth: hci0: Injecting HCI hardware error event
[  134.759129][ T5841] Bluetooth: hci0: hardware error 0x00
[  138.026107][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  138.035642][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  139.552162][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  139.680355][ T6548] random: crng reseeded on system resumption
[  139.817097][ T6549] FAULT_INJECTION: forcing a failure.
[  139.817097][ T6549] name failslab, interval 1, probability 0, space 0, times 1
[  139.830094][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.2.136 Not tainted syzkaller #0 PREEMPT(full) 
[  139.830129][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  139.830144][ T6549] Call Trace:
[  139.830153][ T6549]  <TASK>
[  139.830163][ T6549]  dump_stack_lvl+0x16c/0x1f0
[  139.830195][ T6549]  should_fail_ex+0x512/0x640
[  139.830221][ T6549]  ? kmem_cache_alloc_node_noprof+0x65/0x7f0
[  139.830263][ T6549]  should_failslab+0xc2/0x120
[  139.830290][ T6549]  kmem_cache_alloc_node_noprof+0x78/0x7f0
[  139.830325][ T6549]  ? alloc_vmap_area+0x633/0x29a0
[  139.830362][ T6549]  ? __pfx___might_resched+0x10/0x10
[  139.830406][ T6549]  ? alloc_vmap_area+0x633/0x29a0
[  139.830442][ T6549]  alloc_vmap_area+0x633/0x29a0
[  139.830493][ T6549]  ? __pfx_alloc_vmap_area+0x10/0x10
[  139.830538][ T6549]  __get_vm_area_node+0x1ca/0x330
[  139.830571][ T6549]  __vmalloc_node_range_noprof+0x271/0x1480
[  139.830608][ T6549]  ? n_tty_open+0x1a/0x170
[  139.830655][ T6549]  ? n_tty_open+0x1a/0x170
[  139.830699][ T6549]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  139.830735][ T6549]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  139.830778][ T6549]  ? n_tty_open+0x1a/0x170
[  139.830810][ T6549]  __vmalloc_node_noprof+0xad/0xf0
[  139.830837][ T6549]  ? n_tty_open+0x1a/0x170
[  139.830870][ T6549]  ? __pfx_n_tty_open+0x10/0x10
[  139.830906][ T6549]  n_tty_open+0x1a/0x170
[  139.830941][ T6549]  ? __pfx_n_tty_open+0x10/0x10
[  139.830975][ T6549]  tty_ldisc_open+0x9f/0x120
[  139.831003][ T6549]  tty_ldisc_setup+0x40/0x100
[  139.831033][ T6549]  tty_init_dev.part.0+0x1ec/0x500
[  139.831070][ T6549]  tty_open+0xa4f/0xf90
[  139.831110][ T6549]  ? __pfx_tty_open+0x10/0x10
[  139.831143][ T6549]  ? chrdev_open+0x58c/0x6a0
[  139.831175][ T6549]  ? __pfx_tty_open+0x10/0x10
[  139.831207][ T6549]  chrdev_open+0x234/0x6a0
[  139.831234][ T6549]  ? __pfx_chrdev_open+0x10/0x10
[  139.831262][ T6549]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  139.831292][ T6549]  do_dentry_open+0x748/0x1590
[  139.831314][ T6549]  ? __pfx_chrdev_open+0x10/0x10
[  139.831348][ T6549]  vfs_open+0x82/0x3f0
[  139.831384][ T6549]  path_openat+0x2078/0x3140
[  139.831422][ T6549]  ? __pfx_path_openat+0x10/0x10
[  139.831463][ T6549]  do_filp_open+0x20b/0x470
[  139.831491][ T6549]  ? __pfx_do_filp_open+0x10/0x10
[  139.831545][ T6549]  ? alloc_fd+0x471/0x7d0
[  139.831581][ T6549]  do_sys_openat2+0x11f/0x280
[  139.831625][ T6549]  ? __pfx_do_sys_openat2+0x10/0x10
[  139.831672][ T6549]  __x64_sys_openat+0x174/0x210
[  139.831703][ T6549]  ? __pfx___x64_sys_openat+0x10/0x10
[  139.831749][ T6549]  do_syscall_64+0xcd/0xf80
[  139.831776][ T6549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.831801][ T6549] RIP: 0033:0x7f51dcb8f7c9
[  139.831823][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.831846][ T6549] RSP: 002b:00007f51dadf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  139.831870][ T6549] RAX: ffffffffffffffda RBX: 00007f51dcde6180 RCX: 00007f51dcb8f7c9
[  139.831887][ T6549] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  139.831903][ T6549] RBP: 00007f51dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  139.831918][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.831932][ T6549] R13: 00007f51dcde6218 R14: 00007f51dcde6180 R15: 00007ffd1c56a698
[  139.831967][ T6549]  </TASK>
[  140.260900][ T6549] syz.2.136: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  140.324201][ T6549] CPU: 0 UID: 0 PID: 6549 Comm: syz.2.136 Not tainted syzkaller #0 PREEMPT(full) 
[  140.324237][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  140.324251][ T6549] Call Trace:
[  140.324261][ T6549]  <TASK>
[  140.324271][ T6549]  dump_stack_lvl+0x16c/0x1f0
[  140.324302][ T6549]  warn_alloc+0x248/0x3a0
[  140.324339][ T6549]  ? __pfx_warn_alloc+0x10/0x10
[  140.324397][ T6549]  ? __get_vm_area_node+0x2cd/0x330
[  140.324431][ T6549]  ? __get_vm_area_node+0x2cd/0x330
[  140.324456][ T6549]  ? __get_vm_area_node+0x208/0x330
[  140.324489][ T6549]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  140.324545][ T6549]  ? n_tty_open+0x1a/0x170
[  140.324593][ T6549]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  140.324629][ T6549]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  140.324678][ T6549]  ? n_tty_open+0x1a/0x170
[  140.324713][ T6549]  __vmalloc_node_noprof+0xad/0xf0
[  140.324740][ T6549]  ? n_tty_open+0x1a/0x170
[  140.324780][ T6549]  ? __pfx_n_tty_open+0x10/0x10
[  140.324816][ T6549]  n_tty_open+0x1a/0x170
[  140.324852][ T6549]  ? __pfx_n_tty_open+0x10/0x10
[  140.324892][ T6549]  tty_ldisc_open+0x9f/0x120
[  140.324921][ T6549]  tty_ldisc_setup+0x40/0x100
[  140.324953][ T6549]  tty_init_dev.part.0+0x1ec/0x500
[  140.324989][ T6549]  tty_open+0xa4f/0xf90
[  140.325029][ T6549]  ? __pfx_tty_open+0x10/0x10
[  140.325063][ T6549]  ? chrdev_open+0x58c/0x6a0
[  140.325093][ T6549]  ? __pfx_tty_open+0x10/0x10
[  140.325125][ T6549]  chrdev_open+0x234/0x6a0
[  140.325152][ T6549]  ? __pfx_chrdev_open+0x10/0x10
[  140.325179][ T6549]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  140.325214][ T6549]  do_dentry_open+0x748/0x1590
[  140.325238][ T6549]  ? __pfx_chrdev_open+0x10/0x10
[  140.325273][ T6549]  vfs_open+0x82/0x3f0
[  140.325309][ T6549]  path_openat+0x2078/0x3140
[  140.325347][ T6549]  ? __pfx_path_openat+0x10/0x10
[  140.325388][ T6549]  do_filp_open+0x20b/0x470
[  140.325415][ T6549]  ? __pfx_do_filp_open+0x10/0x10
[  140.325470][ T6549]  ? alloc_fd+0x471/0x7d0
[  140.325506][ T6549]  do_sys_openat2+0x11f/0x280
[  140.325546][ T6549]  ? __pfx_do_sys_openat2+0x10/0x10
[  140.325603][ T6549]  __x64_sys_openat+0x174/0x210
[  140.325637][ T6549]  ? __pfx___x64_sys_openat+0x10/0x10
[  140.325687][ T6549]  do_syscall_64+0xcd/0xf80
[  140.325717][ T6549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.325743][ T6549] RIP: 0033:0x7f51dcb8f7c9
[  140.325763][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.325792][ T6549] RSP: 002b:00007f51dadf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  140.325816][ T6549] RAX: ffffffffffffffda RBX: 00007f51dcde6180 RCX: 00007f51dcb8f7c9
[  140.325834][ T6549] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  140.325851][ T6549] RBP: 00007f51dcc13f91 R08: 0000000000000000 R09: 0000000000000000
[  140.325866][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.325881][ T6549] R13: 00007f51dcde6218 R14: 00007f51dcde6180 R15: 00007ffd1c56a698
[  140.325919][ T6549]  </TASK>
[  140.325929][ T6549] Mem-Info:
[  140.770340][ T6549] active_anon:83416 inactive_anon:0 isolated_anon:0
[  140.770340][ T6549]  active_file:18220 inactive_file:39549 isolated_file:0
[  140.770340][ T6549]  unevictable:2686 dirty:257 writeback:0
[  140.770340][ T6549]  slab_reclaimable:10981 slab_unreclaimable:92267
[  140.770340][ T6549]  mapped:42804 shmem:70460 pagetables:1243
[  140.770340][ T6549]  sec_pagetables:0 bounce:0
[  140.770340][ T6549]  kernel_misc_reclaimable:0
[  140.770340][ T6549]  free:1241398 free_pcp:16791 free_cma:0
[  140.968018][ T5842] Bluetooth: hci2: unexpected event 0x08 length: 438 > 4
[  141.017656][ T6549] Node 0 active_anon:338964kB inactive_anon:28kB active_file:72880kB inactive_file:157996kB unevictable:9296kB isolated(anon):0kB isolated(file):0kB mapped:158248kB dirty:1064kB writeback:0kB shmem:290568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:30720kB kernel_stack:12120kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  141.057414][ T6549] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  141.095847][ T6549] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  141.160834][ T6549] lowmem_reserve[]: 0 2482 2484 2484 2484
[  141.230396][ T6549] Node 0 DMA32 free:1045132kB boost:0kB min:34340kB low:42924kB high:51508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:342744kB inactive_anon:28kB active_file:72880kB inactive_file:157996kB unevictable:9296kB writepending:1064kB zspages:48kB present:3129332kB managed:2542212kB mlocked:7760kB bounce:0kB free_pcp:60140kB local_pcp:44672kB free_cma:0kB
[  141.630518][ T6549] lowmem_reserve[]: 0 0 1 1 1
[  141.635303][ T6549] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  141.700706][ T6549] lowmem_reserve[]: 0 0 0 0 0
[  141.705992][ T6549] Node 1 Normal free:3888260kB boost:0kB min:55536kB low:69420kB high:83304kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18276kB local_pcp:7136kB free_cma:0kB
[  141.740109][ T6549] lowmem_reserve[]: 0 0 0 0 0
[  141.745024][ T6549] Node 0 DMA: 0*4kB 0*8kB 
[  141.869777][ T6549] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  142.017917][ T6549] Node 0 DMA32: 427*4kB (UE) 160*8kB (UM) 123*16kB (U) 4*32kB (UME) 0*64kB 1*128kB (M) 2*256kB (ME) 2*512kB (UM) 1*1024kB (U) 2*2048kB (UE) 247*4096kB (UM) = 1023580kB
[  142.200467][ T6549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  142.250573][ T6549] Node 1 Normal: 142*4kB (UME) 46*8kB (UME) 40*16kB (UME) 75*32kB (UME) 22*64kB (UME) 9*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888520kB
[  142.271310][ T6549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  142.286082][ T6549] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  142.296712][ T6549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  142.438535][ T6549] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.474779][ T6549] 112189 total pagecache pages
[  142.479669][ T6549] 0 pages in swap cache
[  142.537341][ T6549] Free swap  = 124996kB
[  142.596604][ T6549] Total swap = 124996kB
[  142.650383][ T6549] 2097051 pages RAM
[  142.685187][ T6549] 0 pages HighMem/MovableOnly
[  142.727143][ T6549] 429472 pages reserved
[  142.746046][ T5841] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  142.750377][ T6549] 0 pages cma reserved
[  142.810205][ T6549] pty pty16: ldisc open failed (-12), clearing slot 16
[  142.853342][ T6542] tty tty12: ldisc open failed (-12), clearing slot 11
[  142.881845][ T6559] tty tty12: ldisc open failed (-12), clearing slot 11
[  143.506237][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'.
[  147.743598][ T6635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'.
[  148.880601][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'.
[  153.685183][ T6714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'.
[  155.636322][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'.
[  156.730762][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'.
[  157.675698][ T5841] Bluetooth: hci1: unexpected event 0x08 length: 438 > 4
[  158.164387][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'.
[  159.125168][ T6805] futex_wake_op: syz.1.191 tries to shift op by -2048; fix this program
[  161.180160][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'.
[  161.341416][ T6823] veth1_macvtap: left promiscuous mode
[  162.953587][ T6844] futex_wake_op: syz.0.200 tries to shift op by -2048; fix this program
[  165.786527][ T6861] ptp ptp0: max value is 20
[  171.489627][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'.
[  171.690994][ T6957] veth1_macvtap: left promiscuous mode
[  173.636220][ T6981] futex_wake_op: syz.0.227 tries to shift op by -2048; fix this program
[  175.600495][ T6995] futex_wake_op: syz.3.231 tries to shift op by -2048; fix this program
[  175.859451][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'.
[  176.236121][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'.
[  176.263781][ T7011] veth1_macvtap: left promiscuous mode
[  177.377666][ T7016] futex_wake_op: syz.1.234 tries to shift op by -2048; fix this program
[  178.587650][ T7038] futex_wake_op: syz.3.241 tries to shift op by -2048; fix this program
[  178.660374][ T7036] futex_wake_op: syz.2.242 tries to shift op by -2048; fix this program
[  180.633780][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'.
[  182.228315][ T7071] futex_wake_op: syz.2.247 tries to shift op by -2048; fix this program
[  182.246216][ T7079] futex_wake_op: syz.1.248 tries to shift op by -2048; fix this program
[  186.306599][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.263'.
[  186.663216][ T7141] futex_wake_op: syz.2.260 tries to shift op by -2048; fix this program
[  187.000791][ T7142] futex_wake_op: syz.1.262 tries to shift op by -2048; fix this program
[  189.302270][ T7175] bond0: option all_slaves_active: invalid value ()
[  190.929963][ T7184] futex_wake_op: syz.3.274 tries to shift op by -2048; fix this program
[  191.115819][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.275'.
[  191.767098][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.278'.
[  192.692961][ T7218] futex_wake_op: syz.1.277 tries to shift op by -2048; fix this program
[  196.367652][ T7267] random: crng reseeded on system resumption
[  196.873027][ T7271] futex_wake_op: syz.0.289 tries to shift op by -2048; fix this program
[  196.961036][ T7273] futex_wake_op: syz.3.291 tries to shift op by -2048; fix this program
[  199.484047][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  199.490432][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  199.734574][ T7300] futex_wake_op: syz.2.296 tries to shift op by -2048; fix this program
[  202.273792][ T7352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'.
[  202.646193][ T7353] futex_wake_op: syz.1.302 tries to shift op by -2048; fix this program
[  203.276049][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.318'.
[  203.325349][ T7358] futex_wake_op: syz.3.307 tries to shift op by -2048; fix this program
[  204.916536][ T5841] Bluetooth: hci2: unexpected event 0x0f length: 438 > 4
[  205.186606][ T7387] futex_wake_op: syz.2.310 tries to shift op by -2048; fix this program
[  206.475984][ T7396] futex_wake_op: syz.3.315 tries to shift op by -2048; fix this program
[  208.015437][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'.
[  208.679676][ T7433] ptp ptp0: max value is 20
[  208.980644][ T5841] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  208.990774][ T5841] Bluetooth: hci2: Injecting HCI hardware error event
[  209.008623][ T5842] Bluetooth: hci2: hardware error 0x00
[  209.489496][ T7447] random: crng reseeded on system resumption
[  209.551249][ T7447] Restarting kernel threads ...
[  209.575530][ T7447] Done restarting kernel threads.
[  211.220357][ T5842] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  211.256553][ T7456] futex_wake_op: syz.3.327 tries to shift op by -2048; fix this program
[  211.790394][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  215.285078][ T7509] futex_wake_op: syz.0.340 tries to shift op by -2048; fix this program
[  216.156808][ T5841] Bluetooth: hci1: unexpected event 0x0e length: 438 > 260
[  216.157577][ T5841] Bluetooth: hci1: unexpected event for opcode 0x0f00
[  216.460055][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.349'.
[  217.209318][ T7548] futex_wake_op: syz.3.348 tries to shift op by -2048; fix this program
[  217.381129][ T7558] ptp ptp0: max value is 20
[  217.738739][ T7559] futex_wake_op: syz.2.350 tries to shift op by -2048; fix this program
[  219.125245][ T7568] futex_wake_op: syz.0.355 tries to shift op by -2048; fix this program
[  219.499488][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'.
[  220.180414][ T5841] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  220.193593][ T5841] Bluetooth: hci1: Injecting HCI hardware error event
[  220.202474][ T5842] Bluetooth: hci1: hardware error 0x00
[  220.652722][ T7598] futex_wake_op: syz.2.361 tries to shift op by -2048; fix this program
[  222.510668][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  222.806786][ T7626] futex_wake_op: syz.3.364 tries to shift op by -2048; fix this program
[  224.150634][ T7642] futex_wake_op: syz.0.370 tries to shift op by -2048; fix this program
[  226.090011][ T7681] futex_wake_op: syz.3.378 tries to shift op by -2048; fix this program
[  227.874930][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.386'.
[  230.473480][ T7761] futex_wake_op: syz.0.392 tries to shift op by -2048; fix this program
[  233.586328][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.405'.
[  234.784146][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.412'.
[  235.227243][ T7831] futex_wake_op: syz.3.410 tries to shift op by -2048; fix this program
[  237.041881][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'.
[  237.075634][ T7860] futex_wake_op: syz.1.418 tries to shift op by -2048; fix this program
[  238.386858][ T7893] futex_wake_op: syz.2.421 tries to shift op by -2048; fix this program
[  242.899598][ T7954] random: crng reseeded on system resumption
[  242.952382][ T7954] Restarting kernel threads ...
[  242.961150][ T7954] Done restarting kernel threads.
[  244.511891][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'.
[  247.359637][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'.
[  248.104344][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.462'.
[  248.765690][ T8091] futex_wake_op: syz.3.460 tries to shift op by -2048; fix this program
[  249.975734][ T8114] random: crng reseeded on system resumption
[  250.040562][ T8114] Restarting kernel threads ...
[  250.045942][ T8114] Done restarting kernel threads.
[  250.547537][ T8122] futex_wake_op: syz.3.468 tries to shift op by -2048; fix this program
[  251.875497][ T8127] ubi0: attaching mtd0
[  251.896607][ T8127] ubi0 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0
[  251.971434][ T8127] ubi0: scanning is finished
[  252.314592][ T8141] ptp ptp0: max value is 20
[  252.877876][ T8127] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  252.947930][ T8127] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  253.029394][ T8127] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  253.068489][ T8127] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  253.100314][ T8127] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  253.128277][ T8127] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  253.165007][ T8127] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2544322854
[  253.190404][ T8127] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  253.261301][ T8130] ubi0: detaching mtd0
[  253.271356][ T8147] ubi0: background thread "ubi_bgt0d" started, PID 8147
[  253.312359][ T8130] ubi0: mtd0 is detached
[  254.273644][ T8161] random: crng reseeded on system resumption
[  254.511562][ T8161] FAULT_INJECTION: forcing a failure.
[  254.511562][ T8161] name failslab, interval 1, probability 0, space 0, times 0
[  254.540663][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.0.479 Not tainted syzkaller #0 PREEMPT(full) 
[  254.540699][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  254.540715][ T8161] Call Trace:
[  254.540724][ T8161]  <TASK>
[  254.540735][ T8161]  dump_stack_lvl+0x16c/0x1f0
[  254.540767][ T8161]  should_fail_ex+0x512/0x640
[  254.540793][ T8161]  ? __kmalloc_cache_node_noprof+0x62/0x820
[  254.540836][ T8161]  should_failslab+0xc2/0x120
[  254.540864][ T8161]  __kmalloc_cache_node_noprof+0x75/0x820
[  254.540903][ T8161]  ? look_up_lock_class+0x59/0x130
[  254.540927][ T8161]  ? __get_vm_area_node+0x101/0x330
[  254.540959][ T8161]  ? __get_vm_area_node+0x101/0x330
[  254.540982][ T8161]  __get_vm_area_node+0x101/0x330
[  254.541014][ T8161]  __vmalloc_node_range_noprof+0x271/0x1480
[  254.541042][ T8161]  ? n_tty_open+0x1a/0x170
[  254.541089][ T8161]  ? n_tty_open+0x1a/0x170
[  254.541134][ T8161]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  254.541169][ T8161]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  254.541211][ T8161]  ? n_tty_open+0x1a/0x170
[  254.541243][ T8161]  __vmalloc_node_noprof+0xad/0xf0
[  254.541270][ T8161]  ? n_tty_open+0x1a/0x170
[  254.541304][ T8161]  ? __pfx_n_tty_open+0x10/0x10
[  254.541340][ T8161]  n_tty_open+0x1a/0x170
[  254.541373][ T8161]  ? __pfx_n_tty_open+0x10/0x10
[  254.541407][ T8161]  tty_ldisc_open+0x9f/0x120
[  254.541435][ T8161]  tty_ldisc_setup+0x40/0x100
[  254.541473][ T8161]  tty_init_dev.part.0+0x1ec/0x500
[  254.541510][ T8161]  tty_open+0xa4f/0xf90
[  254.541546][ T8161]  ? __pfx_tty_open+0x10/0x10
[  254.541576][ T8161]  ? chrdev_open+0x10b/0x6a0
[  254.541603][ T8161]  ? __pfx_tty_open+0x10/0x10
[  254.541635][ T8161]  chrdev_open+0x234/0x6a0
[  254.541659][ T8161]  ? __pfx_apparmor_file_open+0x10/0x10
[  254.541697][ T8161]  ? __pfx_chrdev_open+0x10/0x10
[  254.541725][ T8161]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  254.541760][ T8161]  do_dentry_open+0x748/0x1590
[  254.541783][ T8161]  ? __pfx_chrdev_open+0x10/0x10
[  254.541819][ T8161]  vfs_open+0x82/0x3f0
[  254.541855][ T8161]  path_openat+0x2078/0x3140
[  254.541894][ T8161]  ? __pfx_path_openat+0x10/0x10
[  254.541935][ T8161]  do_filp_open+0x20b/0x470
[  254.541962][ T8161]  ? __pfx_do_filp_open+0x10/0x10
[  254.542017][ T8161]  ? alloc_fd+0x471/0x7d0
[  254.542053][ T8161]  do_sys_openat2+0x11f/0x280
[  254.542085][ T8161]  ? __pfx_do_sys_openat2+0x10/0x10
[  254.542131][ T8161]  __x64_sys_openat+0x174/0x210
[  254.542164][ T8161]  ? __pfx___x64_sys_openat+0x10/0x10
[  254.542212][ T8161]  do_syscall_64+0xcd/0xf80
[  254.542240][ T8161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.542266][ T8161] RIP: 0033:0x7f93c7f8f7c9
[  254.542287][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.542311][ T8161] RSP: 002b:00007f93c8d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  254.542336][ T8161] RAX: ffffffffffffffda RBX: 00007f93c81e6090 RCX: 00007f93c7f8f7c9
[  254.542353][ T8161] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  254.542369][ T8161] RBP: 00007f93c8013f91 R08: 0000000000000000 R09: 0000000000000000
[  254.542384][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.542399][ T8161] R13: 00007f93c81e6128 R14: 00007f93c81e6090 R15: 00007ffd9eb2d368
[  254.542439][ T8161]  </TASK>
[  254.542711][ T8161] syz.0.479: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  254.902437][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.0.479 Not tainted syzkaller #0 PREEMPT(full) 
[  254.902469][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  254.902481][ T8161] Call Trace:
[  254.902489][ T8161]  <TASK>
[  254.902502][ T8161]  dump_stack_lvl+0x16c/0x1f0
[  254.902531][ T8161]  warn_alloc+0x248/0x3a0
[  254.902564][ T8161]  ? __pfx_warn_alloc+0x10/0x10
[  254.902593][ T8161]  ? trace_kmalloc+0x2b/0xb0
[  254.902617][ T8161]  ? __get_vm_area_node+0x101/0x330
[  254.902647][ T8161]  ? __kasan_kmalloc+0x8a/0xb0
[  254.902682][ T8161]  ? __get_vm_area_node+0x208/0x330
[  254.902714][ T8161]  __vmalloc_node_range_noprof+0xaf5/0x1480
[  254.902749][ T8161]  ? n_tty_open+0x1a/0x170
[  254.902791][ T8161]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  254.902823][ T8161]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  254.902864][ T8161]  ? n_tty_open+0x1a/0x170
[  254.902894][ T8161]  __vmalloc_node_noprof+0xad/0xf0
[  254.902919][ T8161]  ? n_tty_open+0x1a/0x170
[  254.902949][ T8161]  ? __pfx_n_tty_open+0x10/0x10
[  254.902981][ T8161]  n_tty_open+0x1a/0x170
[  254.903013][ T8161]  ? __pfx_n_tty_open+0x10/0x10
[  254.903045][ T8161]  tty_ldisc_open+0x9f/0x120
[  254.903074][ T8161]  tty_ldisc_setup+0x40/0x100
[  254.903104][ T8161]  tty_init_dev.part.0+0x1ec/0x500
[  254.903138][ T8161]  tty_open+0xa4f/0xf90
[  254.903178][ T8161]  ? __pfx_tty_open+0x10/0x10
[  254.903209][ T8161]  ? chrdev_open+0x10b/0x6a0
[  254.903241][ T8161]  ? __pfx_tty_open+0x10/0x10
[  254.903274][ T8161]  chrdev_open+0x234/0x6a0
[  254.903299][ T8161]  ? __pfx_apparmor_file_open+0x10/0x10
[  254.903347][ T8161]  ? __pfx_chrdev_open+0x10/0x10
[  254.903375][ T8161]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  254.903411][ T8161]  do_dentry_open+0x748/0x1590
[  254.903434][ T8161]  ? __pfx_chrdev_open+0x10/0x10
[  254.903471][ T8161]  vfs_open+0x82/0x3f0
[  254.903509][ T8161]  path_openat+0x2078/0x3140
[  254.903547][ T8161]  ? __pfx_path_openat+0x10/0x10
[  254.903587][ T8161]  do_filp_open+0x20b/0x470
[  254.903615][ T8161]  ? __pfx_do_filp_open+0x10/0x10
[  254.903669][ T8161]  ? alloc_fd+0x471/0x7d0
[  254.903705][ T8161]  do_sys_openat2+0x11f/0x280
[  254.903737][ T8161]  ? __pfx_do_sys_openat2+0x10/0x10
[  254.903785][ T8161]  __x64_sys_openat+0x174/0x210
[  254.903818][ T8161]  ? __pfx___x64_sys_openat+0x10/0x10
[  254.903866][ T8161]  do_syscall_64+0xcd/0xf80
[  254.903895][ T8161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.903920][ T8161] RIP: 0033:0x7f93c7f8f7c9
[  254.903941][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.903964][ T8161] RSP: 002b:00007f93c8d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  254.903988][ T8161] RAX: ffffffffffffffda RBX: 00007f93c81e6090 RCX: 00007f93c7f8f7c9
[  254.904002][ T8161] RDX: 0000000000020000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  254.904017][ T8161] RBP: 00007f93c8013f91 R08: 0000000000000000 R09: 0000000000000000
[  254.904031][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.904046][ T8161] R13: 00007f93c81e6128 R14: 00007f93c81e6090 R15: 00007ffd9eb2d368
[  254.904084][ T8161]  </TASK>
[  255.238354][ T8161] Mem-Info:
[  255.241866][ T8161] active_anon:42330 inactive_anon:0 isolated_anon:0
[  255.241866][ T8161]  active_file:18103 inactive_file:40161 isolated_file:0
[  255.241866][ T8161]  unevictable:768 dirty:706 writeback:0
[  255.241866][ T8161]  slab_reclaimable:11908 slab_unreclaimable:91655
[  255.241866][ T8161]  mapped:26667 shmem:30360 pagetables:1095
[  255.241866][ T8161]  sec_pagetables:0 bounce:0
[  255.241866][ T8161]  kernel_misc_reclaimable:0
[  255.241866][ T8161]  free:1266588 free_pcp:35475 free_cma:0
[  255.620907][ T8161] Node 0 active_anon:133760kB inactive_anon:0kB active_file:72412kB inactive_file:166648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110768kB dirty:6328kB writeback:0kB shmem:80304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:30720kB kernel_stack:11920kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  255.743748][ T8161] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  255.904240][ T8161] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  256.107554][ T8161] lowmem_reserve[]: 0 2482 2484 2484 2484
[  256.172675][ T8161] Node 0 DMA32 free:1237484kB boost:0kB min:34340kB low:42924kB high:51508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93000kB inactive_anon:0kB active_file:72412kB inactive_file:176904kB unevictable:1536kB writepending:14668kB zspages:0kB present:3129332kB managed:2542212kB mlocked:0kB bounce:0kB free_pcp:114404kB local_pcp:55628kB free_cma:0kB
[  256.306531][ T8161] lowmem_reserve[]: 0 0 1 1 1
[  256.326819][ T8161] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  256.392931][ T8161] lowmem_reserve[]: 0 0 0 0 0
[  256.397742][ T8161] Node 1 Normal free:3892000kB boost:0kB min:55536kB low:69420kB high:83304kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14980kB local_pcp:5828kB free_cma:0kB
[  256.460363][ T8161] lowmem_reserve[]: 0 0 0 0 0
[  256.504201][ T8161] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  256.575083][ T8161] Node 0 DMA32: 2074*4kB (UME) 1350*8kB (UME) 560*16kB (UME) 515*32kB (UME) 479*64kB (UME) 133*128kB (UM) 206*256kB (UME) 153*512kB (UME) 72*1024kB (UME) 11*2048kB (UM) 227*4096kB (UM) = 1249336kB
[  256.725563][ T8161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  256.737851][ T8161] Node 1 Normal: 156*4kB (UME) 48*8kB (UME) 41*16kB (UME) 133*32kB (UME) 42*64kB (UME) 11*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3892000kB
[  256.763884][ T8161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  256.774077][ T8161] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  256.785861][ T8161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  256.802014][ T8161] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  256.855238][ T8161] 65939 total pagecache pages
[  256.881319][ T8161] 0 pages in swap cache
[  256.903408][ T8161] Free swap  = 124996kB
[  256.942591][ T8161] Total swap = 124996kB
[  257.009383][ T8161] 2097051 pages RAM
[  257.018078][ T8161] 0 pages HighMem/MovableOnly
[  257.034430][ T8161] 429472 pages reserved
[  257.038649][ T8161] 0 pages cma reserved
[  257.079588][ T8161] pty pty16: ldisc open failed (-12), clearing slot 16
[  257.101057][ T8174] tty tty12: ldisc open failed (-12), clearing slot 11
[  257.819374][ T8205] ptp ptp0: max value is 20
[  258.131194][ T8218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'.
[  258.682936][ T8227] random: crng reseeded on system resumption
[  258.702033][ T8227] Restarting kernel threads ...
[  258.707386][ T8227] Done restarting kernel threads.
[  259.444662][ T8223] futex_wake_op: syz.0.493 tries to shift op by -2048; fix this program
[  260.905303][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  260.911740][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  261.461888][ T8271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'.
[  263.429836][ T8289] futex_wake_op: syz.1.508 tries to shift op by -2048; fix this program
[  263.881021][ T8288] futex_wake_op: syz.3.507 tries to shift op by -2048; fix this program
[  265.328916][ T8293] futex_wake_op: syz.0.510 tries to shift op by -2048; fix this program
[  266.019056][ T8317] futex_wake_op: syz.2.519 tries to shift op by -2048; fix this program
[  268.142182][ T8341] futex_wake_op: syz.1.517 tries to shift op by -2048; fix this program
[  268.616102][ T8346] futex_wake_op: syz.0.518 tries to shift op by -2048; fix this program
[  270.937633][ T8368] ptp ptp0: max value is 20
[  271.408485][ T8376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'.
[  271.947865][ T8382] random: crng reseeded on system resumption
[  273.841666][ T8414] ptp ptp0: max value is 20
[  274.511068][ T8434] random: crng reseeded on system resumption
[  274.549651][ T8436] ptp ptp0: max value is 20
[  274.558037][ T8434] Restarting kernel threads ...
[  274.570713][ T8434] Done restarting kernel threads.
[  274.840480][ T8439] random: crng reseeded on system resumption
[  274.878927][ T8441] FAULT_INJECTION: forcing a failure.
[  274.878927][ T8441] name fail_futex, interval 1, probability 0, space 0, times 0
[  274.899468][ T8439] Restarting kernel threads ...
[  274.906180][ T8439] Done restarting kernel threads.
[  274.927204][ T8441] CPU: 1 UID: 0 PID: 8441 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT(full) 
[  274.927236][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  274.927249][ T8441] Call Trace:
[  274.927258][ T8441]  <TASK>
[  274.927266][ T8441]  dump_stack_lvl+0x16c/0x1f0
[  274.927297][ T8441]  should_fail_ex+0x512/0x640
[  274.927322][ T8441]  ? __schedule+0x114c/0x6150
[  274.927365][ T8441]  get_futex_key+0x1d0/0x15f0
[  274.927398][ T8441]  ? __pfx_get_futex_key+0x10/0x10
[  274.927439][ T8441]  futex_wait_setup+0x9d/0x570
[  274.927485][ T8441]  __futex_wait+0x193/0x2f0
[  274.927521][ T8441]  ? __pfx___futex_wait+0x10/0x10
[  274.927561][ T8441]  ? __pfx_futex_wake_mark+0x10/0x10
[  274.927601][ T8441]  ? futex_hash+0x2c5/0x380
[  274.927635][ T8441]  ? futex_private_hash_put+0x160/0x1b0
[  274.927667][ T8441]  futex_wait+0xe8/0x380
[  274.927701][ T8441]  ? __pfx_futex_wait+0x10/0x10
[  274.927743][ T8441]  ? __might_fault+0xe3/0x190
[  274.927773][ T8441]  ? __might_fault+0x13b/0x190
[  274.927813][ T8441]  do_futex+0x229/0x350
[  274.927844][ T8441]  ? __pfx_do_futex+0x10/0x10
[  274.927874][ T8441]  ? fput+0x70/0xf0
[  274.927901][ T8441]  ? __sys_connect+0xe0/0x160
[  274.927929][ T8441]  __x64_sys_futex+0x1e0/0x4c0
[  274.927961][ T8441]  ? __pfx___x64_sys_futex+0x10/0x10
[  274.927990][ T8441]  ? xfd_validate_state+0x61/0x180
[  274.928036][ T8441]  ? __pfx_ksys_write+0x10/0x10
[  274.928069][ T8441]  do_syscall_64+0xcd/0xf80
[  274.928098][ T8441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.928123][ T8441] RIP: 0033:0x7fc068b8f7c9
[  274.928143][ T8441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.928166][ T8441] RSP: 002b:00007fc069ad10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  274.928190][ T8441] RAX: ffffffffffffffda RBX: 00007fc068de5fa8 RCX: 00007fc068b8f7c9
[  274.928207][ T8441] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc068de5fa8
[  274.928222][ T8441] RBP: 00007fc068de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  274.928237][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.928252][ T8441] R13: 00007fc068de6038 R14: 00007ffd76e818c0 R15: 00007ffd76e819a8
[  274.928288][ T8441]  </TASK>
[  275.226569][ T8441] svc: failed to register nfsdv3 RPC service (errno 111).
[  275.239098][ T8441] svc: failed to register nfsaclv3 RPC service (errno 111).
[  276.141192][ T8460] ptp ptp0: max value is 20
[  277.259830][ T8462] futex_wake_op: syz.2.544 tries to shift op by -2048; fix this program
[  278.744576][ T8494] futex_wake_op: syz.0.549 tries to shift op by -2048; fix this program
[  279.096504][ T8498] futex_wake_op: syz.3.553 tries to shift op by -2048; fix this program
[  279.783770][ T8499] futex_wake_op: syz.2.555 tries to shift op by -2048; fix this program
[  281.750956][ T8543] futex_wake_op: syz.1.560 tries to shift op by -2048; fix this program
[  282.141780][ T8545] futex_wake_op: syz.3.561 tries to shift op by -2048; fix this program
[  282.644427][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.566'.
[  284.242498][ T8581] futex_wake_op: syz.1.568 tries to shift op by -2048; fix this program
[  284.293881][ T8582] ptp ptp0: max value is 20
[  285.224232][ T8593] futex_wake_op: syz.3.572 tries to shift op by -2048; fix this program
[  285.246425][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'.
[  285.550091][ T8596] futex_wake_op: syz.2.574 tries to shift op by -2048; fix this program
[  287.148658][ T8618] futex_wake_op: syz.1.577 tries to shift op by -2048; fix this program
[  287.730728][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'.
[  288.119045][ T8623] futex_wake_op: syz.2.582 tries to shift op by -2048; fix this program
[  288.487139][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'.
[  289.046054][ T8640] FAULT_INJECTION: forcing a failure.
[  289.046054][ T8640] name fail_futex, interval 1, probability 0, space 0, times 0
[  289.089015][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.3.587 Not tainted syzkaller #0 PREEMPT(full) 
[  289.089051][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.089065][ T8640] Call Trace:
[  289.089074][ T8640]  <TASK>
[  289.089084][ T8640]  dump_stack_lvl+0x16c/0x1f0
[  289.089115][ T8640]  should_fail_ex+0x512/0x640
[  289.089142][ T8640]  ? __schedule+0x114c/0x6150
[  289.089183][ T8640]  get_futex_key+0x1d0/0x15f0
[  289.089217][ T8640]  ? __pfx_get_futex_key+0x10/0x10
[  289.089259][ T8640]  futex_wait_setup+0x9d/0x570
[  289.089305][ T8640]  __futex_wait+0x193/0x2f0
[  289.089344][ T8640]  ? __pfx___futex_wait+0x10/0x10
[  289.089387][ T8640]  ? __pfx_futex_wake_mark+0x10/0x10
[  289.089427][ T8640]  ? futex_hash+0x2c5/0x380
[  289.089460][ T8640]  ? futex_private_hash_put+0x160/0x1b0
[  289.089493][ T8640]  futex_wait+0xe8/0x380
[  289.089528][ T8640]  ? __pfx_futex_wait+0x10/0x10
[  289.089572][ T8640]  ? __might_fault+0xe3/0x190
[  289.089602][ T8640]  ? __might_fault+0x13b/0x190
[  289.089639][ T8640]  do_futex+0x229/0x350
[  289.089670][ T8640]  ? __pfx_do_futex+0x10/0x10
[  289.089701][ T8640]  ? fput+0x70/0xf0
[  289.089748][ T8640]  ? __sys_connect+0xe0/0x160
[  289.089778][ T8640]  __x64_sys_futex+0x1e0/0x4c0
[  289.089815][ T8640]  ? __pfx___x64_sys_futex+0x10/0x10
[  289.089849][ T8640]  ? xfd_validate_state+0x61/0x180
[  289.089894][ T8640]  ? __pfx_ksys_write+0x10/0x10
[  289.089929][ T8640]  do_syscall_64+0xcd/0xf80
[  289.089962][ T8640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.089987][ T8640] RIP: 0033:0x7f3995b8f7c9
[  289.090007][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.090029][ T8640] RSP: 002b:00007f3996a220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  289.090053][ T8640] RAX: ffffffffffffffda RBX: 00007f3995de5fa8 RCX: 00007f3995b8f7c9
[  289.090070][ T8640] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3995de5fa8
[  289.090085][ T8640] RBP: 00007f3995de5fa0 R08: 0000000000000000 R09: 0000000000000000
[  289.090100][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.090114][ T8640] R13: 00007f3995de6038 R14: 00007ffce61de980 R15: 00007ffce61dea68
[  289.090150][ T8640]  </TASK>
[  289.614473][ T8640] svc: failed to register nfsdv3 RPC service (errno 111).
[  289.686600][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.590'.
[  289.745841][ T8640] svc: failed to register nfsaclv3 RPC service (errno 111).
[  291.236973][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'.
[  291.782300][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'.
[  294.784865][ T8713] futex_wake_op: syz.1.603 tries to shift op by -2048; fix this program
[  295.005471][ T8735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'.
[  296.342497][ T8749] futex_wake_op: syz.3.609 tries to shift op by -2048; fix this program
[  297.055768][ T8769] ptp ptp0: max value is 20
[  298.230356][ T8784] futex_wake_op: syz.1.616 tries to shift op by -2048; fix this program
[  298.236680][ T8798] random: crng reseeded on system resumption
[  298.313218][ T8798] Restarting kernel threads ...
[  298.318713][ T8798] Done restarting kernel threads.
[  298.491883][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.622'.
[  298.997631][ T8795] futex_wake_op: syz.0.618 tries to shift op by -2048; fix this program
[  301.726743][ T8814] futex_wake_op: syz.1.625 tries to shift op by -2048; fix this program
[  303.395422][ T8857] ptp ptp0: max value is 20
[  303.663409][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'.
[  304.214257][ T8862] futex_wake_op: syz.1.634 tries to shift op by -2048; fix this program
[  304.926902][ T8881] random: crng reseeded on system resumption
[  304.956129][ T8881] Restarting kernel threads ...
[  304.961521][ T8881] Done restarting kernel threads.
[  306.266670][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.646'.
[  306.633192][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.649'.
[  306.759694][ T8906] futex_wake_op: syz.2.647 tries to shift op by -2048; fix this program
[  307.372612][ T8916] futex_wake_op: syz.0.645 tries to shift op by -2048; fix this program
[  307.644870][ T8921] random: crng reseeded on system resumption
[  307.694748][ T8921] Restarting kernel threads ...
[  307.722015][ T8921] Done restarting kernel threads.
[  309.480392][ T8948] futex_wake_op: syz.1.653 tries to shift op by -2048; fix this program
[  310.125852][ T8954] futex_wake_op: syz.0.655 tries to shift op by -2048; fix this program
[  311.395382][ T8953] futex_wake_op: syz.3.658 tries to shift op by -2048; fix this program
[  312.441358][ T8990] futex_wake_op: syz.2.661 tries to shift op by -2048; fix this program
[  312.854183][ T8988] futex_wake_op: syz.0.662 tries to shift op by -2048; fix this program
[  314.513447][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.670'.
[  314.616052][ T9008] futex_wake_op: syz.2.668 tries to shift op by -2048; fix this program
[  315.235383][ T9018] futex_wake_op: syz.0.669 tries to shift op by -2048; fix this program
[  315.731845][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'.
[  316.629491][ T9042] futex_wake_op: syz.1.671 tries to shift op by -2048; fix this program
[  317.016965][ T9047] futex_wake_op: syz.2.675 tries to shift op by -2048; fix this program
[  318.118033][ T9046] futex_wake_op: syz.0.676 tries to shift op by -2048; fix this program
[  320.327437][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'.
[  320.344086][ T9080] futex_wake_op: syz.2.679 tries to shift op by -2048; fix this program
[  320.929408][ T9090] futex_wake_op: syz.1.684 tries to shift op by -2048; fix this program
[  322.343813][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  322.350593][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  323.357577][ T9121] futex_wake_op: syz.1.692 tries to shift op by -2048; fix this program
[  323.525219][ T9124] futex_wake_op: syz.2.689 tries to shift op by -2048; fix this program
[  326.521492][ T9164] futex_wake_op: syz.2.699 tries to shift op by -2048; fix this program
[  326.641642][ T9168] futex_wake_op: syz.3.701 tries to shift op by -2048; fix this program
[  327.265789][ T9171] futex_wake_op: syz.0.708 tries to shift op by -2048; fix this program
[  328.730891][ T9179] futex_wake_op: syz.2.704 tries to shift op by -2048; fix this program
[  328.833342][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.705'.
[  328.972549][ T9178] futex_wake_op: syz.3.703 tries to shift op by -2048; fix this program
[  330.949796][ T9212] futex_wake_op: syz.1.706 tries to shift op by -2048; fix this program
[  331.511581][ T9220] futex_wake_op: syz.0.711 tries to shift op by -2048; fix this program
[  332.708084][ T9227] futex_wake_op: syz.3.714 tries to shift op by -2048; fix this program
[  334.071073][ T9243] futex_wake_op: syz.0.717 tries to shift op by -2048; fix this program
[  335.390071][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'.
[  335.676833][ T9261] futex_wake_op: syz.3.721 tries to shift op by -2048; fix this program
[  338.025251][ T9282] futex_wake_op: syz.3.728 tries to shift op by -2048; fix this program
[  339.172695][ T9303] futex_wake_op: syz.0.733 tries to shift op by -2048; fix this program
[  339.540303][ T9299] futex_wake_op: syz.1.732 tries to shift op by -2048; fix this program
[  342.613010][ T9346] futex_wake_op: syz.1.738 tries to shift op by -2048; fix this program
[  342.970994][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'.
[  343.339590][ T9357] futex_wake_op: syz.0.743 tries to shift op by -2048; fix this program
[  343.538914][ T9354] futex_wake_op: syz.3.742 tries to shift op by -2048; fix this program
[  345.631480][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'.
[  346.994589][ T9405] futex_wake_op: syz.2.751 tries to shift op by -2048; fix this program
[  348.132156][ T9415] futex_wake_op: syz.1.754 tries to shift op by -2048; fix this program
[  348.955205][ T9427] futex_wake_op: syz.3.756 tries to shift op by -2048; fix this program
[  351.381142][ T9457] futex_wake_op: syz.3.764 tries to shift op by -2048; fix this program
[  355.071806][ T9494] futex_wake_op: syz.1.771 tries to shift op by -2048; fix this program
[  355.990551][ T9506] futex_wake_op: syz.0.772 tries to shift op by -2048; fix this program
[  357.600570][ T9514] futex_wake_op: syz.2.776 tries to shift op by -2048; fix this program
[  359.333347][ T9527] futex_wake_op: syz.3.779 tries to shift op by -2048; fix this program
[  361.020676][ T9556] futex_wake_op: syz.2.784 tries to shift op by -2048; fix this program
[  362.414940][ T9577] futex_wake_op: syz.0.790 tries to shift op by -2048; fix this program
[  362.682707][ T9572] futex_wake_op: syz.3.787 tries to shift op by -2048; fix this program
[  363.467645][ T9588] futex_wake_op: syz.1.791 tries to shift op by -2048; fix this program
[  364.316098][ T9595] futex_wake_op: syz.2.793 tries to shift op by -2048; fix this program
[  364.451378][ T9594] futex_wake_op: syz.0.794 tries to shift op by -2048; fix this program
[  366.352353][ T9619] futex_wake_op: syz.1.796 tries to shift op by -2048; fix this program
[  367.368466][ T9631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'.
[  369.106696][ T9658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.809'.
[  369.128170][ T9650] futex_wake_op: syz.1.804 tries to shift op by -2048; fix this program
[  369.159545][ T9658] veth1_macvtap: left promiscuous mode
[  369.844411][ T9660] futex_wake_op: syz.0.808 tries to shift op by -2048; fix this program
[  370.352151][ T9663] futex_wake_op: syz.3.807 tries to shift op by -2048; fix this program
[  373.591678][ T9705] futex_wake_op: syz.1.815 tries to shift op by -2048; fix this program
[  373.740738][ T9713] futex_wake_op: syz.0.816 tries to shift op by -2048; fix this program
[  374.944599][ T9709] futex_wake_op: syz.2.818 tries to shift op by -2048; fix this program
[  377.233736][ T9751] random: crng reseeded on system resumption
[  377.257476][ T9751] Restarting kernel threads ...
[  377.270679][ T9751] Done restarting kernel threads.
[  377.499238][ T9749] futex_wake_op: syz.2.824 tries to shift op by -2048; fix this program
[  382.122092][ T9827] futex_wake_op: syz.1.839 tries to shift op by -2048; fix this program
[  382.241436][ T9811] futex_wake_op: syz.2.840 tries to shift op by -2048; fix this program
[  382.972070][ T9833] futex_wake_op: syz.0.841 tries to shift op by -2048; fix this program
[  383.592762][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'.
[  383.789277][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  383.796647][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  385.716251][ T9866] futex_wake_op: syz.2.848 tries to shift op by -2048; fix this program
[  386.381092][ T9868] futex_wake_op: syz.3.850 tries to shift op by -2048; fix this program
[  386.909000][ T9870] futex_wake_op: syz.0.849 tries to shift op by -2048; fix this program
[  389.649125][ T9889] futex_wake_op: syz.2.853 tries to shift op by -2048; fix this program
[  389.821590][ T9905] futex_wake_op: syz.0.856 tries to shift op by -2048; fix this program
[  390.952265][ T9912] futex_wake_op: syz.1.860 tries to shift op by -2048; fix this program
[  392.471182][ T9936] futex_wake_op: syz.2.862 tries to shift op by -2048; fix this program
[  394.525372][ T9951] futex_wake_op: syz.3.868 tries to shift op by -2048; fix this program
[  395.836619][ T9952] futex_wake_op: syz.0.866 tries to shift op by -2048; fix this program
[  397.028354][ T9986] futex_wake_op: syz.2.875 tries to shift op by -2048; fix this program
[  397.260358][ T9989] futex_wake_op: syz.1.874 tries to shift op by -2048; fix this program
[  399.590779][T10010] futex_wake_op: syz.2.880 tries to shift op by -2048; fix this program
[  399.959212][T10009] futex_wake_op: syz.3.879 tries to shift op by -2048; fix this program
[  402.413527][T10050] futex_wake_op: syz.3.887 tries to shift op by -2048; fix this program
[  404.301607][T10074] futex_wake_op: syz.3.894 tries to shift op by -2048; fix this program
[  404.459781][T10077] futex_wake_op: syz.0.892 tries to shift op by -2048; fix this program
[  405.277443][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.898'.
[  406.033921][T10099] futex_wake_op: syz.1.896 tries to shift op by -2048; fix this program
[  408.066280][T10127] futex_wake_op: syz.0.905 tries to shift op by -2048; fix this program
[  408.388754][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.907'.
[  410.114842][T10147] futex_wake_op: syz.1.911 tries to shift op by -2048; fix this program
[  410.125999][T10154] futex_wake_op: syz.2.910 tries to shift op by -2048; fix this program
[  410.324612][T10158] random: crng reseeded on system resumption
[  410.359439][T10158] Restarting kernel threads ...
[  410.380971][T10158] Done restarting kernel threads.
[  410.452842][T10149] futex_wake_op: syz.3.912 tries to shift op by -2048; fix this program
[  410.910942][T10165] futex_wake_op: syz.0.913 tries to shift op by -2048; fix this program
[  411.171560][T10160] futex_wake_op: syz.1.915 tries to shift op by -2048; fix this program
[  412.668170][T10185] futex_wake_op: syz.2.920 tries to shift op by -2048; fix this program
[  413.068036][T10187] futex_wake_op: syz.1.921 tries to shift op by -2048; fix this program
[  413.110302][T10191] futex_wake_op: syz.0.922 tries to shift op by -2048; fix this program
[  413.909422][T10193] futex_wake_op: syz.1.923 tries to shift op by -2048; fix this program
[  414.558227][T10204] futex_wake_op: syz.0.926 tries to shift op by -2048; fix this program
[  414.561579][T10213] futex_wake_op: syz.2.925 tries to shift op by -2048; fix this program
[  416.520406][T10233] futex_wake_op: syz.0.933 tries to shift op by -2048; fix this program
[  417.092316][T10236] futex_wake_op: syz.1.927 tries to shift op by -2048; fix this program
[  418.395185][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'.
[  419.383409][T10272] futex_wake_op: syz.0.941 tries to shift op by -2048; fix this program
[  419.610427][T10274] futex_wake_op: syz.1.942 tries to shift op by -2048; fix this program
[  420.670018][T10298] futex_wake_op: syz.2.948 tries to shift op by -2048; fix this program
[  420.721979][T10302] futex_wake_op: syz.3.945 tries to shift op by -2048; fix this program
[  420.833998][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.950'.
[  422.630550][T10329] futex_wake_op: syz.3.956 tries to shift op by -2048; fix this program
[  423.206727][T10344] futex_wake_op: syz.1.954 tries to shift op by -2048; fix this program
[  425.028054][T10368] futex_wake_op: syz.3.963 tries to shift op by -2048; fix this program
[  425.522926][T10383] futex_wake_op: syz.2.962 tries to shift op by -2048; fix this program
[  426.170259][T10392] futex_wake_op: syz.0.965 tries to shift op by -2048; fix this program
[  426.995929][T10395] futex_wake_op: syz.3.967 tries to shift op by -2048; fix this program
[  430.631095][T10456] futex_wake_op: syz.3.978 tries to shift op by -2048; fix this program
[  431.280727][T10461] futex_wake_op: syz.0.979 tries to shift op by -2048; fix this program
[  431.302956][T10463] futex_wake_op: syz.1.981 tries to shift op by -2048; fix this program
[  433.836318][T10488] futex_wake_op: syz.2.982 tries to shift op by -2048; fix this program
[  434.147925][T10489] futex_wake_op: syz.1.986 tries to shift op by -2048; fix this program
[  434.683130][T10498] random: crng reseeded on system resumption
[  434.706384][T10498] Restarting kernel threads ...
[  434.711781][T10498] Done restarting kernel threads.
[  437.194815][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.998'.
[  437.721393][T10552] futex_wake_op: syz.0.996 tries to shift op by -2048; fix this program
[  438.728908][T10563] futex_wake_op: syz.1.999 tries to shift op by -2048; fix this program
[  438.924436][T10564] futex_wake_op: syz.2.1000 tries to shift op by -2048; fix this program
[  441.403530][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1009'.
[  442.201654][T10613] futex_wake_op: syz.0.1006 tries to shift op by -2048; fix this program
[  443.325296][T10623] futex_wake_op: syz.1.1010 tries to shift op by -2048; fix this program
[  443.492597][T10625] futex_wake_op: syz.2.1011 tries to shift op by -2048; fix this program
[  444.650045][T10628] futex_wake_op: syz.3.1012 tries to shift op by -2048; fix this program
[  445.226254][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  445.234315][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  446.249858][T10650] futex_wake_op: syz.1.1015 tries to shift op by -2048; fix this program
[  447.891743][T10671] futex_wake_op: syz.3.1020 tries to shift op by -2048; fix this program
[  449.830730][T10690] futex_wake_op: syz.2.1022 tries to shift op by -2048; fix this program
[  450.636203][T10701] futex_wake_op: syz.0.1025 tries to shift op by -2048; fix this program
[  452.550302][T10712] futex_wake_op: syz.3.1030 tries to shift op by -2048; fix this program
[  454.432349][T10750] futex_wake_op: syz.0.1035 tries to shift op by -2048; fix this program
[  457.416279][T10775] futex_wake_op: syz.2.1040 tries to shift op by -2048; fix this program
[  457.650454][T10765] futex_wake_op: syz.0.1049 tries to shift op by -2048; fix this program
[  458.022360][T10774] futex_wake_op: syz.3.1041 tries to shift op by -2048; fix this program
[  460.359092][T10794] futex_wake_op: syz.0.1044 tries to shift op by -2048; fix this program
[  460.804936][T10807] futex_wake_op: syz.1.1047 tries to shift op by -2048; fix this program
[  462.874580][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'.
[  463.369888][T10836] futex_wake_op: syz.3.1053 tries to shift op by -2048; fix this program
[  464.415823][T10848] random: crng reseeded on system resumption
[  464.452174][T10848] Restarting kernel threads ...
[  464.514799][T10848] Done restarting kernel threads.
[  466.605741][T10882] futex_wake_op: syz.3.1063 tries to shift op by -2048; fix this program
[  467.069445][T10890] futex_wake_op: syz.2.1066 tries to shift op by -2048; fix this program
[  467.421731][T10892] futex_wake_op: syz.1.1067 tries to shift op by -2048; fix this program
[  470.362957][T10903] futex_wake_op: syz.3.1070 tries to shift op by -2048; fix this program
[  472.258523][T10942] random: crng reseeded on system resumption
[  472.347283][T10942] Restarting kernel threads ...
[  472.362887][T10942] Done restarting kernel threads.
[  472.951869][T10936] futex_wake_op: syz.1.1078 tries to shift op by -2048; fix this program
[  473.741450][T10952] futex_wake_op: syz.2.1081 tries to shift op by -2048; fix this program
[  474.379119][T10949] futex_wake_op: syz.3.1082 tries to shift op by -2048; fix this program
[  474.838901][T10955] futex_wake_op: syz.0.1083 tries to shift op by -2048; fix this program
[  476.736666][T10984] random: crng reseeded on system resumption
[  476.781074][T10984] Restarting kernel threads ...
[  476.786726][T10984] Done restarting kernel threads.
[  476.949644][T10980] futex_wake_op: syz.0.1089 tries to shift op by -2048; fix this program
[  478.836424][T11005] futex_wake_op: syz.2.1094 tries to shift op by -2048; fix this program
[  482.902127][T11053] futex_wake_op: syz.0.1103 tries to shift op by -2048; fix this program
[  483.415013][T11062] futex_wake_op: syz.1.1104 tries to shift op by -2048; fix this program
[  485.582647][T11096] futex_wake_op: syz.3.1111 tries to shift op by -2048; fix this program
[  485.592970][T11097] futex_wake_op: syz.2.1110 tries to shift op by -2048; fix this program
[  486.112363][T11095] futex_wake_op: syz.1.1112 tries to shift op by -2048; fix this program
[  487.272096][T11102] futex_wake_op: syz.0.1114 tries to shift op by -2048; fix this program
[  488.012384][T11115] futex_wake_op: syz.3.1115 tries to shift op by -2048; fix this program
[  488.655003][T11116] futex_wake_op: syz.1.1116 tries to shift op by -2048; fix this program
[  490.019705][T11139] futex_wake_op: syz.2.1119 tries to shift op by -2048; fix this program
[  490.910389][T11146] futex_wake_op: syz.3.1122 tries to shift op by -2048; fix this program
[  491.100684][T11147] futex_wake_op: syz.1.1123 tries to shift op by -2048; fix this program
[  492.161358][T11162] futex_wake_op: syz.0.1124 tries to shift op by -2048; fix this program
[  493.426906][T11173] futex_wake_op: syz.3.1128 tries to shift op by -2048; fix this program
[  494.810210][T11206] futex_wake_op: syz.1.1131 tries to shift op by -2048; fix this program
[  495.085346][T11210] futex_wake_op: syz.0.1133 tries to shift op by -2048; fix this program
[  496.479860][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1138'.
[  496.692881][T11214] futex_wake_op: syz.3.1137 tries to shift op by -2048; fix this program
[  497.846578][T11230] futex_wake_op: syz.1.1139 tries to shift op by -2048; fix this program
[  497.979281][T11237] futex_wake_op: syz.2.1140 tries to shift op by -2048; fix this program
[  501.277636][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1151'.
[  502.051955][T11282] futex_wake_op: syz.1.1150 tries to shift op by -2048; fix this program
[  502.776057][T11294] futex_wake_op: syz.3.1153 tries to shift op by -2048; fix this program
[  502.959781][T11300] futex_wake_op: syz.2.1152 tries to shift op by -2048; fix this program
[  503.763087][T11325] random: crng reseeded on system resumption
[  503.828127][T11325] Restarting kernel threads ...
[  503.833636][T11325] Done restarting kernel threads.
[  505.118685][T11330] futex_wake_op: syz.0.1158 tries to shift op by -2048; fix this program
[  505.472421][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1166'.
[  505.628029][T11365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1167'.
[  506.605582][T11381] random: crng reseeded on system resumption
[  506.665972][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  506.673313][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  506.686955][T11381] Restarting kernel threads ...
[  506.698350][T11381] Done restarting kernel threads.
[  507.251623][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1174'.
[  509.082887][T11429] random: crng reseeded on system resumption
[  509.161473][T11429] Restarting kernel threads ...
[  509.202158][T11429] Done restarting kernel threads.
[  510.873071][T11453] futex_wake_op: syz.2.1182 tries to shift op by -2048; fix this program
[  514.024091][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1193'.
[  517.289433][T11552] random: crng reseeded on system resumption
[  517.355338][T11552] Restarting kernel threads ...
[  517.401751][T11552] Done restarting kernel threads.
[  519.154866][T11587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1209'.
[  526.469948][T11695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1229'.
[  531.206240][T11780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'.
[  536.326253][T11865] random: crng reseeded on system resumption
[  536.373742][T11865] Restarting kernel threads ...
[  536.378951][T11865] Done restarting kernel threads.
[  538.812706][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1261'.
[  539.657133][T11934] random: crng reseeded on system resumption
[  539.731633][T11934] Restarting kernel threads ...
[  539.746788][T11934] Done restarting kernel threads.
[  542.104189][T11979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1273'.
[  542.472922][T11986] random: crng reseeded on system resumption
[  542.526235][T11986] Restarting kernel threads ...
[  542.545702][T11986] Done restarting kernel threads.
[  546.221163][T12045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1283'.
[  549.984375][T12106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'.
[  553.634755][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1303'.
[  557.726587][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'.
[  560.719091][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  561.647474][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1325'.
[  568.105677][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  568.115365][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  570.354940][T12439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1346'.
[  589.004231][T12749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1394'.
[  595.511222][T12861] random: crng reseeded on system resumption
[  595.584113][T12861] Restarting kernel threads ...
[  595.610424][T12861] Done restarting kernel threads.
[  602.916805][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1426'.
[  608.145104][T13052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1437'.
[  610.488845][T13091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1442'.
[  611.302203][T13103] random: crng reseeded on system resumption
[  616.008084][T13177] random: crng reseeded on system resumption
[  616.108992][T13177] Restarting kernel threads ...
[  616.119470][T13177] Done restarting kernel threads.
[  620.222563][T13245] random: crng reseeded on system resumption
[  620.282803][T13245] Restarting kernel threads ...
[  620.289996][T13245] Done restarting kernel threads.
[  620.647375][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1469'.
[  623.723449][T13309] random: crng reseeded on system resumption
[  624.219095][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1479'.
[  628.825470][T13377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1489'.
[  629.554480][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  629.561066][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  638.721291][T13535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1511'.
[  644.492382][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1523'.
[  657.059431][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1550'.
[  690.984914][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  690.991407][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  693.933013][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1627'.
[  698.260463][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'.
[  752.444340][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  752.450715][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  753.991676][T15179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1761'.
[  760.452880][T15271] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  762.532199][T15305] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  765.248837][T15347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'.
[  793.658126][T15779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1865'.
[  799.352030][T15861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1882'.
[  813.866496][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  813.880133][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  864.659422][T16869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2071'.
[  870.157888][T16964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2089'.
[  875.330992][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  875.337335][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  893.979586][T17431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2203'.
[  894.226651][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'.
[  909.330841][T17687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2255'.
[  909.366869][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'.
[  913.816352][T17763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2268'.
[  936.742960][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  936.749445][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  940.344737][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  940.370189][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  940.378246][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  940.386248][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  940.393929][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  941.233437][T18183] chnl_net:caif_netlink_parms(): no params data found
[  941.802152][T18183] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.812176][T18183] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.819862][T18183] bridge_slave_0: entered allmulticast mode
[  941.827748][T18183] bridge_slave_0: entered promiscuous mode
[  941.864463][T18183] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.873283][T18183] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.880602][T18183] bridge_slave_1: entered allmulticast mode
[  941.888464][T18183] bridge_slave_1: entered promiscuous mode
[  942.007711][T18183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  942.117763][T18183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  942.344969][T18183] team0: Port device team_slave_0 added
[  942.489774][T18183] team0: Port device team_slave_1 added
[  942.501894][ T5841] Bluetooth: hci4: command tx timeout
[  942.606653][ T1317] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.682990][T18183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  942.690019][T18183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  942.718131][T18183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  942.731548][T18183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  942.751443][T18183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  942.832040][T18183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  942.952911][ T1317] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.139616][ T1317] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.182547][T18183] hsr_slave_0: entered promiscuous mode
[  943.205980][T18183] hsr_slave_1: entered promiscuous mode
[  943.227310][T18183] debugfs: 'hsr0' already exists in 'hsr'
[  943.256754][T18183] Cannot create hsr debugfs directory
[  943.441470][ T1317] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.336328][ T1317] bridge_slave_0: left allmulticast mode
[  944.350896][ T1317] bridge_slave_0: left promiscuous mode
[  944.357052][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.581907][ T5841] Bluetooth: hci4: command tx timeout
[  945.103653][ T1317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  945.114583][ T1317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  945.124675][ T1317] bond0 (unregistering): Released all slaves
[  946.111191][T18183] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  946.169101][T18183] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  946.243246][T18183] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  946.332063][ T1317] hsr_slave_0: left promiscuous mode
[  946.354364][ T1317] hsr_slave_1: left promiscuous mode
[  946.361775][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  946.378941][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_0
[  946.396435][ T1317] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  946.414114][ T1317] batman_adv: batadv0: Removing interface: batadv_slave_1
[  946.488010][ T1317] veth0_macvtap: left promiscuous mode
[  946.519491][ T1317] veth1_vlan: left promiscuous mode
[  946.540742][ T1317] veth0_vlan: left promiscuous mode
[  946.660805][ T5841] Bluetooth: hci4: command tx timeout
[  948.191553][ T1317] team0 (unregistering): Port device team_slave_1 removed
[  948.268591][ T1317] team0 (unregistering): Port device team_slave_0 removed
[  948.740946][ T5841] Bluetooth: hci4: command tx timeout
[  948.881589][T18183] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  949.239791][T18183] 8021q: adding VLAN 0 to HW filter on device bond0
[  949.399211][T18183] 8021q: adding VLAN 0 to HW filter on device team0
[  949.451691][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state
[  949.458851][ T7515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  949.577430][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state
[  949.584694][ T6339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  950.155755][T18183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  950.937377][T18183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  951.311845][T18183] veth0_vlan: entered promiscuous mode
[  951.381903][T18183] veth1_vlan: entered promiscuous mode
[  951.951518][T18183] veth0_macvtap: entered promiscuous mode
[  951.993135][T18183] veth1_macvtap: entered promiscuous mode
[  952.048876][T18183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  952.159400][T18183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  952.194346][ T3801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  952.255221][ T3801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  952.273671][ T3801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  952.299721][ T3801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  952.610620][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  952.655586][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  952.862690][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  952.870960][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  955.580646][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  955.596514][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  955.604950][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  955.615639][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  955.627770][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  956.193812][T18435] chnl_net:caif_netlink_parms(): no params data found
[  956.489546][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  956.761842][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.091109][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.237722][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.323003][T18435] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.342854][T18435] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.363120][T18435] bridge_slave_0: entered allmulticast mode
[  957.370431][T18435] bridge_slave_0: entered promiscuous mode
[  957.401367][T18435] bridge0: port 2(bridge_slave_1) entered blocking state
[  957.409493][T18435] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.420270][T18435] bridge_slave_1: entered allmulticast mode
[  957.470029][T18465] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  957.470053][T18435] bridge_slave_1: entered promiscuous mode
[  957.697033][T18435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  957.706292][ T5842] Bluetooth: hci1: command tx timeout
[  957.773294][T18435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.958930][   T36] bridge_slave_0: left allmulticast mode
[  957.965928][   T36] bridge_slave_0: left promiscuous mode
[  957.977481][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.647357][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  958.685821][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  958.723581][   T36] bond0 (unregistering): Released all slaves
[  958.747282][T18435] team0: Port device team_slave_0 added
[  958.779609][T18435] team0: Port device team_slave_1 added
[  958.882717][T18435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  958.918912][T18435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.014691][T18435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  959.122414][T18435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  959.131291][T18435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  959.157467][T18435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  959.405892][T18435] hsr_slave_0: entered promiscuous mode
[  959.465477][T18435] hsr_slave_1: entered promiscuous mode
[  959.482892][T18435] debugfs: 'hsr0' already exists in 'hsr'
[  959.502871][T18435] Cannot create hsr debugfs directory
[  959.780971][ T5842] Bluetooth: hci1: command tx timeout
[  960.451408][   T36] hsr_slave_0: left promiscuous mode
[  960.464341][   T36] hsr_slave_1: left promiscuous mode
[  960.490848][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  960.519427][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.585083][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  960.612778][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.679693][   T36] veth0_macvtap: left promiscuous mode
[  960.716250][   T36] veth1_vlan: left promiscuous mode
[  960.731224][   T36] veth0_vlan: left promiscuous mode
[  961.860136][ T5842] Bluetooth: hci1: command tx timeout
[  961.999579][   T36] team0 (unregistering): Port device team_slave_1 removed
[  962.062846][   T36] team0 (unregistering): Port device team_slave_0 removed
[  963.942980][ T5842] Bluetooth: hci1: command tx timeout
[  964.135930][T18435] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  964.174689][T18435] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  964.306323][T18435] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  964.378036][T18435] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  964.549441][T18435] 8021q: adding VLAN 0 to HW filter on device bond0
[  964.632611][T18435] 8021q: adding VLAN 0 to HW filter on device team0
[  964.799757][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.806935][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.848181][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.855417][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.731144][T18435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  965.871398][T18435] veth0_vlan: entered promiscuous mode
[  965.896382][T18435] veth1_vlan: entered promiscuous mode
[  966.115033][T18435] veth0_macvtap: entered promiscuous mode
[  966.152821][T18435] veth1_macvtap: entered promiscuous mode
[  966.453875][T18435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  966.475269][T18435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  966.560101][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  966.675325][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  966.715870][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  966.778843][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  966.934226][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.979411][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.079882][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.101761][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  968.710374][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  968.719000][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  968.729523][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  968.741215][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  968.751219][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  970.120429][ T6339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.267875][ T6339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.423528][ T6339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.454406][T18662] chnl_net:caif_netlink_parms(): no params data found
[  970.545813][ T6339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.831987][ T5842] Bluetooth: hci0: command tx timeout
[  970.880644][T18662] bridge0: port 1(bridge_slave_0) entered blocking state
[  970.910201][T18662] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.918851][T18662] bridge_slave_0: entered allmulticast mode
[  970.928879][T18662] bridge_slave_0: entered promiscuous mode
[  970.953716][T18662] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.967202][T18662] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.976463][T18662] bridge_slave_1: entered allmulticast mode
[  971.002148][T18662] bridge_slave_1: entered promiscuous mode
[  971.212831][ T6339] bridge_slave_0: left allmulticast mode
[  971.218518][ T6339] bridge_slave_0: left promiscuous mode
[  971.255711][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state
[  972.208350][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  972.223123][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  972.241968][ T6339] bond0 (unregistering): Released all slaves
[  972.261742][T18662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  972.366207][T18662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  972.464723][T18662] team0: Port device team_slave_0 added
[  972.489147][T18662] team0: Port device team_slave_1 added
[  972.605522][T18662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  972.619829][T18662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  972.653116][T18662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  972.775909][T18662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  972.786899][T18662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  972.818518][T18662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  972.900819][ T5842] Bluetooth: hci0: command tx timeout
[  973.176090][T18662] hsr_slave_0: entered promiscuous mode
[  973.203679][T18662] hsr_slave_1: entered promiscuous mode
[  974.205113][ T6339] hsr_slave_0: left promiscuous mode
[  974.237642][ T6339] hsr_slave_1: left promiscuous mode
[  974.253777][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  974.270065][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  974.288201][ T6339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  974.303396][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  974.338381][ T6339] veth0_macvtap: left promiscuous mode
[  974.360254][ T6339] veth1_vlan: left promiscuous mode
[  974.370135][ T6339] veth0_vlan: left promiscuous mode
[  974.980065][ T5842] Bluetooth: hci0: command tx timeout
[  975.284327][ T6339] team0 (unregistering): Port device team_slave_1 removed
[  975.323612][ T6339] team0 (unregistering): Port device team_slave_0 removed
[  976.626785][T18662] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  976.647739][T18662] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  976.840504][T18662] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  976.958939][T18662] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  977.066904][ T5842] Bluetooth: hci0: command tx timeout
[  977.737712][T18662] 8021q: adding VLAN 0 to HW filter on device bond0
[  977.800153][T18662] 8021q: adding VLAN 0 to HW filter on device team0
[  977.888127][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.895341][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state
[  977.992050][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.999181][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state
[  978.741782][T18662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  978.911781][T18662] veth0_vlan: entered promiscuous mode
[  978.955159][T18662] veth1_vlan: entered promiscuous mode
[  979.075719][T18662] veth0_macvtap: entered promiscuous mode
[  979.148951][T18662] veth1_macvtap: entered promiscuous mode
[  979.212253][T18662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  979.253559][T18662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  979.320748][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  979.384708][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  979.563651][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  979.622346][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  979.882884][T16632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.903797][T16632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.220513][ T3801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  980.277132][ T3801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  982.913091][T18932] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  983.335930][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  983.350275][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  983.358868][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  983.367159][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  983.377069][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  984.455606][T16632] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.683725][T16632] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.930224][T16632] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.007997][T18936] chnl_net:caif_netlink_parms(): no params data found
[  985.202801][T16632] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.460250][ T5842] Bluetooth: hci2: command tx timeout
[  985.471150][T18936] bridge0: port 1(bridge_slave_0) entered blocking state
[  985.501836][T18936] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.531026][T18936] bridge_slave_0: entered allmulticast mode
[  985.557392][T18936] bridge_slave_0: entered promiscuous mode
[  985.580971][T18936] bridge0: port 2(bridge_slave_1) entered blocking state
[  985.595190][T18936] bridge0: port 2(bridge_slave_1) entered disabled state
[  985.620379][T18936] bridge_slave_1: entered allmulticast mode
[  985.634457][T18936] bridge_slave_1: entered promiscuous mode
[  985.818314][T18936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  985.964057][T18936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  986.279566][T16632] bridge_slave_0: left allmulticast mode
[  986.285450][T16632] bridge_slave_0: left promiscuous mode
[  986.296275][T16632] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.046899][T16632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  987.057849][T16632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  987.067938][T16632] bond0 (unregistering): Released all slaves
[  987.081102][T18936] team0: Port device team_slave_0 added
[  987.101784][T18936] team0: Port device team_slave_1 added
[  987.217472][T18936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  987.224718][T18936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  987.256654][T18936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  987.286583][T18936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  987.294480][T18936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  987.320939][T18936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  987.459612][T18936] hsr_slave_0: entered promiscuous mode
[  987.493782][T18936] hsr_slave_1: entered promiscuous mode
[  987.499883][T18936] debugfs: 'hsr0' already exists in 'hsr'
[  987.515791][T18936] Cannot create hsr debugfs directory
[  987.550060][ T5842] Bluetooth: hci2: command tx timeout
[  988.870838][T16632] hsr_slave_0: left promiscuous mode
[  988.889120][T16632] hsr_slave_1: left promiscuous mode
[  988.895638][T16632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  988.909988][T16632] batman_adv: batadv0: Removing interface: batadv_slave_0
[  988.922976][T16632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  988.931043][T16632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.953472][T16632] veth0_macvtap: left promiscuous mode
[  988.977970][T16632] veth1_vlan: left promiscuous mode
[  989.013503][T16632] veth0_vlan: left promiscuous mode
[  989.630225][ T5842] Bluetooth: hci2: command tx timeout
[  989.866665][T16632] team0 (unregistering): Port device team_slave_1 removed
[  989.903278][T16632] team0 (unregistering): Port device team_slave_0 removed
[  990.921372][T18936] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  991.019406][T18936] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  991.133894][T18936] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  991.484168][T18936] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  991.701581][ T5842] Bluetooth: hci2: command tx timeout
[  992.336190][T18936] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.377235][T18936] 8021q: adding VLAN 0 to HW filter on device team0
[  992.408752][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.415908][ T7515] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.523638][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.531301][ T7515] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.994465][T18936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  993.020100][T18936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  993.691427][T18936] 8021q: adding VLAN 0 to HW filter on device batadv0
[  993.860767][T18936] veth0_vlan: entered promiscuous mode
[  993.907523][T18936] veth1_vlan: entered promiscuous mode
[  993.965251][T18936] veth0_macvtap: entered promiscuous mode
[  994.142571][T18936] veth1_macvtap: entered promiscuous mode
[  994.186027][T18936] batman_adv: batadv0: Interface activated: batadv_slave_0
[  994.530786][T18936] batman_adv: batadv0: Interface activated: batadv_slave_1
[  994.604406][ T7515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  994.621714][ T7515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  994.653082][ T7515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  994.670041][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  994.845125][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  994.888460][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  994.994735][ T6339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.014045][ T6339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  998.183697][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  998.190081][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  998.881464][T19216] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1013.165840][T19450] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1059.623242][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.629663][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1066.819986][ T5842] Bluetooth: hci4: command 0x0406 tx timeout
[ 1082.190903][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[ 1092.423961][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[ 1107.783123][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[ 1121.071056][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1121.078839][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1164.404302][T21840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2971'.
[ 1164.470329][T21840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.563244][T21840] bridge_slave_1 (unregistering): left allmulticast mode
[ 1164.579321][T21840] bridge_slave_1 (unregistering): left promiscuous mode
[ 1164.600028][T21840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.503210][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.509616][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.967995][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.980717][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1305.390393][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.409718][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1366.824890][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1366.831262][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.263634][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.270119][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1489.705096][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.711559][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1551.144262][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.150642][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1612.603748][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1612.610253][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1674.036227][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.046376][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1724.931210][T29821] FAULT_INJECTION: forcing a failure.
[ 1724.931210][T29821] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.993691][T29821] CPU: 0 UID: 0 PID: 29821 Comm: syz.3.4497 Not tainted syzkaller #0 PREEMPT(full) 
[ 1724.993715][T29821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1724.993739][T29821] Call Trace:
[ 1724.993748][T29821]  <TASK>
[ 1724.993759][T29821]  dump_stack_lvl+0x16c/0x1f0
[ 1724.993913][T29821]  should_fail_ex+0x512/0x640
[ 1724.993988][T29821]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1724.994027][T29821]  should_failslab+0xc2/0x120
[ 1724.994065][T29821]  kmem_cache_alloc_noprof+0x75/0x760
[ 1724.994088][T29821]  ? skb_clone+0x190/0x3f0
[ 1724.994154][T29821]  ? skb_clone+0x190/0x3f0
[ 1724.994169][T29821]  skb_clone+0x190/0x3f0
[ 1724.994187][T29821]  netlink_deliver_tap+0xabd/0xd30
[ 1724.994258][T29821]  netlink_unicast+0x64c/0x870
[ 1724.994281][T29821]  ? __pfx_netlink_unicast+0x10/0x10
[ 1724.994308][T29821]  netlink_sendmsg+0x8c8/0xdd0
[ 1724.994331][T29821]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1724.994354][T29821]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[ 1724.994429][T29821]  ____sys_sendmsg+0xa5d/0xc30
[ 1724.994486][T29821]  ? copy_msghdr_from_user+0x10a/0x160
[ 1724.994503][T29821]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1724.994528][T29821]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1724.994574][T29821]  ___sys_sendmsg+0x134/0x1d0
[ 1724.994593][T29821]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1724.994609][T29821]  ? __lock_acquire+0x433/0x22f0
[ 1724.994678][T29821]  __sys_sendmsg+0x16d/0x220
[ 1724.994709][T29821]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1724.994738][T29821]  ? __x64_sys_futex+0x1e0/0x4c0
[ 1724.994767][T29821]  do_syscall_64+0xcd/0xf80
[ 1724.994821][T29821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1724.994861][T29821] RIP: 0033:0x7ffa5d18f7c9
[ 1724.994882][T29821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1724.994907][T29821] RSP: 002b:00007ffa5e094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1724.994929][T29821] RAX: ffffffffffffffda RBX: 00007ffa5d3e5fa0 RCX: 00007ffa5d18f7c9
[ 1724.994938][T29821] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000007
[ 1724.994947][T29821] RBP: 00007ffa5d213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1724.994956][T29821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1724.994964][T29821] R13: 00007ffa5d3e6038 R14: 00007ffa5d3e5fa0 R15: 00007ffda437c8c8
[ 1724.994983][T29821]  </TASK>
[ 1731.323031][T29907] FAULT_INJECTION: forcing a failure.
[ 1731.323031][T29907] name failslab, interval 1, probability 0, space 0, times 0
[ 1731.335815][T29907] CPU: 0 UID: 0 PID: 29907 Comm: syz.1.4515 Not tainted syzkaller #0 PREEMPT(full) 
[ 1731.335835][T29907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1731.335844][T29907] Call Trace:
[ 1731.335850][T29907]  <TASK>
[ 1731.335857][T29907]  dump_stack_lvl+0x16c/0x1f0
[ 1731.335877][T29907]  should_fail_ex+0x512/0x640
[ 1731.335893][T29907]  ? kmem_cache_alloc_lru_noprof+0x66/0x760
[ 1731.335915][T29907]  should_failslab+0xc2/0x120
[ 1731.335930][T29907]  kmem_cache_alloc_lru_noprof+0x79/0x760
[ 1731.335948][T29907]  ? __d_alloc+0x35/0xa80
[ 1731.336000][T29907]  ? __d_alloc+0x35/0xa80
[ 1731.336013][T29907]  __d_alloc+0x35/0xa80
[ 1731.336031][T29907]  d_alloc_pseudo+0x1c/0xc0
[ 1731.336056][T29907]  alloc_file_pseudo+0xcf/0x230
[ 1731.336083][T29907]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1731.336100][T29907]  ? alloc_fd+0x471/0x7d0
[ 1731.336117][T29907]  sock_alloc_file+0x50/0x210
[ 1731.336138][T29907]  __sys_socket+0x1c6/0x2d0
[ 1731.336150][T29907]  ? __pfx___sys_socket+0x10/0x10
[ 1731.336162][T29907]  ? xfd_validate_state+0x61/0x180
[ 1731.336197][T29907]  __x64_sys_socket+0x72/0xb0
[ 1731.336209][T29907]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1731.336271][T29907]  do_syscall_64+0xcd/0xf80
[ 1731.336286][T29907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1731.336304][T29907] RIP: 0033:0x7ff287f8f7c9
[ 1731.336316][T29907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1731.336330][T29907] RSP: 002b:00007ff288dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1731.336343][T29907] RAX: ffffffffffffffda RBX: 00007ff2881e5fa0 RCX: 00007ff287f8f7c9
[ 1731.336352][T29907] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a
[ 1731.336360][T29907] RBP: 00007ff288013f91 R08: 0000000000000000 R09: 0000000000000000
[ 1731.336368][T29907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1731.336376][T29907] R13: 00007ff2881e6038 R14: 00007ff2881e5fa0 R15: 00007ffc7491c818
[ 1731.336394][T29907]  </TASK>
[ 1731.336561][T29907] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff88805c5897c0
[ 1731.336561][T29907] fs sockfs mode 140777 opflags 0x8 flags 0x0 state 0x300 count 0
[ 1731.586267][T29907] ------------[ cut here ]------------
[ 1731.591858][T29907] kernel BUG at fs/inode.c:1971!
[ 1731.597674][T29907] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1731.603943][T29907] CPU: 0 UID: 0 PID: 29907 Comm: syz.1.4515 Not tainted syzkaller #0 PREEMPT(full) 
[ 1731.613336][T29907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1731.623405][T29907] RIP: 0010:iput.part.0+0xb3b/0x1190
[ 1731.628725][T29907] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 e0 78 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 40 79 a0 8b 48 89 df e8 0f 68 ff ff
[ 1731.648352][T29907] RSP: 0018:ffffc90004b77dc8 EFLAGS: 00010296
[ 1731.654441][T29907] RAX: 000000000000009f RBX: ffff88805c5897c0 RCX: ffffc9001b910000
[ 1731.662436][T29907] RDX: 0000000000000000 RSI: ffffffff819bd739 RDI: 0000000000000005
[ 1731.670425][T29907] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000
[ 1731.678408][T29907] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000
[ 1731.686395][T29907] R13: ffffffff9086aa34 R14: ffff88805c589890 R15: dffffc0000000000
[ 1731.694360][T29907] FS:  00007ff288dec6c0(0000) GS:ffff888124985000(0000) knlGS:0000000000000000
[ 1731.703299][T29907] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1731.709886][T29907] CR2: 00007ff288dcaf98 CR3: 000000006704c000 CR4: 00000000003526f0
[ 1731.717860][T29907] Call Trace:
[ 1731.721149][T29907]  <TASK>
[ 1731.724078][T29907]  iput+0x35/0x40
[ 1731.727721][T29907]  __sock_release+0x20b/0x270
[ 1731.732408][T29907]  __sys_socket+0x23a/0x2d0
[ 1731.736905][T29907]  ? __pfx___sys_socket+0x10/0x10
[ 1731.741928][T29907]  ? xfd_validate_state+0x61/0x180
[ 1731.747049][T29907]  __x64_sys_socket+0x72/0xb0
[ 1731.751742][T29907]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1731.756951][T29907]  do_syscall_64+0xcd/0xf80
[ 1731.761469][T29907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1731.767364][T29907] RIP: 0033:0x7ff287f8f7c9
[ 1731.771781][T29907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1731.791578][T29907] RSP: 002b:00007ff288dec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1731.800009][T29907] RAX: ffffffffffffffda RBX: 00007ff2881e5fa0 RCX: 00007ff287f8f7c9
[ 1731.807994][T29907] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a
[ 1731.815972][T29907] RBP: 00007ff288013f91 R08: 0000000000000000 R09: 0000000000000000
[ 1731.823949][T29907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1731.831926][T29907] R13: 00007ff2881e6038 R14: 00007ff2881e5fa0 R15: 00007ffc7491c818
[ 1731.839905][T29907]  </TASK>
[ 1731.842935][T29907] Modules linked in:
[ 1731.847748][T29907] ---[ end trace 0000000000000000 ]---
[ 1731.946581][T29907] RIP: 0010:iput.part.0+0xb3b/0x1190
[ 1731.986953][T29907] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 e0 78 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 40 79 a0 8b 48 89 df e8 0f 68 ff ff
[ 1732.027838][T29907] RSP: 0018:ffffc90004b77dc8 EFLAGS: 00010296
[ 1732.057404][T29907] RAX: 000000000000009f RBX: ffff88805c5897c0 RCX: ffffc9001b910000
[ 1732.086387][T29907] RDX: 0000000000000000 RSI: ffffffff819bd739 RDI: 0000000000000005
[ 1732.150880][T29907] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000
[ 1732.178582][T29907] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000
[ 1732.207699][T29907] R13: ffffffff9086aa34 R14: ffff88805c589890 R15: dffffc0000000000
[ 1732.241205][T29907] FS:  00007ff288dec6c0(0000) GS:ffff888124a85000(0000) knlGS:0000000000000000
[ 1732.279825][T29907] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1732.290642][T29907] CR2: 0000200000c00000 CR3: 000000006704c000 CR4: 00000000003526f0
[ 1732.315029][T29907] Kernel panic - not syncing: Fatal exception
[ 1732.321599][T29907] Kernel Offset: disabled
[ 1732.325914][T29907] Rebooting in 86400 seconds..