last executing test programs:

11m48.767086985s ago: executing program 2 (id=33):
mmap$auto(0x0, 0x400007, 0x965, 0x19, 0xffffffffffffffff, 0x7ffe)
close_range$auto(0x2, 0x8, 0x0)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
close_range$auto(0x2, r0, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x2b, 0x5, 0x2)
open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98)
mkdir$auto(&(0x7f0000000400)='./file0\x00', 0x8000)
rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70)
mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x4)
renameat2$auto(r1, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2)
r2 = socket(0x2, 0x1, 0x106)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
setsockopt$auto(r2, 0x0, 0xc, 0x0, 0x4000fff)
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
read$auto(r2, 0x0, 0x201)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x81}, 0x5)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x5, 0x0, &(0x7f0000000300)})
pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x7def, 0x3)
syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40444c0)
close_range$auto(0x2, 0x8, 0x0)
r6 = socket(0x2, 0x3, 0xa)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r6)

11m48.326811201s ago: executing program 2 (id=34):
mlockall$auto(0x1)
mprotect$auto(0x1ffffffff000, 0x100004, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
inotify_init1$auto(0x3000000000000)
r2 = gettid()
rt_sigqueueinfo$auto(r2, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xffffeffb, @_timer={r2, 0xd, @sival_ptr=0x0, 0x62}}})
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
truncate$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6)
listxattr$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x7)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)

11m44.588903239s ago: executing program 2 (id=41):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fffffffefffcf7f8", @ANYRES16=0x0, @ANYBLOB="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"], 0x198}}, 0x8000)
sendmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x9336, 0x26}, 0x895}, 0x8, 0x1)
ftruncate$auto(r0, 0x2)
sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084)
getpid()
r1 = socket(0x2, 0x80002, 0x73)
getsockopt$auto(r1, 0x0, 0x3, 0x0, &(0x7f0000000080)=0x3ff)
unshare$auto(0x40000080)
connect$auto(0x3, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x402000a, 0xdf, 0x14, 0x401, 0x8001)
openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000800)
socket(0x10, 0x2, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0)
open(0x0, 0x22240, 0x154)
syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
socket(0xa, 0x1, 0x100)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7fff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS2\x00', 0x141e81, 0x0)

11m43.092938838s ago: executing program 2 (id=46):
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
r0 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/fragmentation_threshold\x00', 0x400, 0x0)
read$auto_fragmentation_threshold_ops_(r0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff)
mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000)
getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
connect$auto(0x3, 0x0, 0x54)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff)
read$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x91e2)
r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = pipe2$auto(0x0, 0x80)
fcntl$auto(r2, 0x8, 0xffffffff80000000)
ioctl$auto(r1, 0x5522, 0xf15)
ioctl$auto(r1, 0x5523, r1)
acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00')
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x3b5282, 0x0)

11m42.177112426s ago: executing program 2 (id=49):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x185040, 0x0)
ioctl$auto_BTRFS_IOC_SCAN_DEV(r0, 0x50009404, &(0x7f0000002080)={@inferred, "4d3a31658c50519f67cf7f566f4a3f95c9a512302591c026f9e50e88c144ff77484f3786697338d41a4719a3b32ffbaf9ff991a24bfe717de638e92a76f201fd8f75dc4df4ada310242836b2b92cff26215d3b13342ae3ac8463ffd0dfad810ba581376b0fd58b8e5754ab989928a291e0048f399465384f8d3d0d13ba489b5a3f2533ff6d879e966c898e6a14cdb7368c84aaf0fb3687a5944ee2a5698833d56306b6d8e619e13e1488ccc9d7618873a8568aacfe76e390c36754ef3a1e06add8ea6dbd20f2b00f4d2a6b832fe328397a49312a0a27987f6481c5232ec1f8c96569373196780dd887e1597867f23e2c99226b7319dec6498639b6cfe4c87727602d27cc5829495c88f1aa770ccac2a034af8f3f2a942a6150dc10cca22bd0581d44b2f06b0259a105d3515a074b93a24a33e6ebfaaf9c8af8bda222f3d3607c247161e0784407c8f68296d6cb4b7b391b2f97ef012fe92b9387102798cacba53d50232b4f592f23ff700b8698224ec5b15e19e7d5dd32eff437b03ca7d05aac4eebafcd44999545bbc359f60c2784452dd92082a52239ce353f827ed2ac16cfc4314deb2c8a80e2ebcbbd7cbc3d9a952b706d0b1e3d512d427fe9d6893dd228fbf9dd8d85e43ca271fc9abc71aaa0d94874ad4a438f5484b139565061c758d73b94bbb14c6ff79f534f7d1c8f7d2ed9be4158503fa4c6cf4413965c03f38e164c1c97d1ee90707bb03ba98193543d8098739558b26fda02f434e2579e6a542a1ebd9aeed475d6d59c25aa9349f2e4ee23e55333e7ea8f3bf42a5f3c1b314c147d75d16ea88da36e017cbfad89c8c7c27f46139cbd24a0f727616503eaadc8744c95234053ce51fa13dd7f72d75f954a508049bc0f7f29080df8cccb98999615e8e5835b0eb24c360edb636ba380f9a6e08dfbccb6167c7da4eecfe90e2413ba0927142f48325efe6bf13baad2d3372c0045821510360446eb9c9d293e48401662dbfe4397ac95a5d8db1912791a1ed6b7348d42c5d47279af85b7e258cceac50d47e235e8dafcde121b4e24079854dd822c90f139f1034582f8b8064f64e0348f972871317db84f9c0eeaf7e5779ce4a0f81a0eb47f54d8cfa076c887412c28ee55948808c1bd056d7764c580d7e59e5b48c7c18754da589abf546c8c12574d26547ccc41bf7270946d92517a48cb6f7ff08faf35f213dc25d1618725b028f5e94b9e3ce619ac91a29e6e2fc68ae178048cc0b86ab41f2d0adf80ab432f7cd9fd41ec4c16b085fc5a68ff185e3be4cafbd4df33f798ab09d930ce36cc1fa56b07c00640d47e0dfe147bba1b6448404252f929431974c6e50693890576771088502c94db44333674517235bf7703f99f304ab1dc7586a1cc551482e96c25690985857927d80b9035d2a691de669df9c4e690ec046fb60f3b6090eefb3ad65d852a6d581a721cddcf02feb5f6a0e4905024fca346af83aafbcf86e57435b79f97de7d869ff3f122c6d5695ce873271b749d9c9fd7175d466f3ec4c8c58dd9ae213216fa13317ef42da818dce3e9bbeb168f7ea4bb70078fb6842bca9645085e188b16c17d40a66dc418cf52f5dc6331c0697fa351acc11ca0c684f50c9a1ab400369e7a942d418abb53b573c99e271e9fbf5174d336a5ec7927b9a51b4aab4f613fcc4388c09b07ac8699de58ff94e124b11a5cc36475763460797ea4c92dbc8dd876397c126a6edac3860660650bc261099ae8a45b6e3c436d1e3dcd590e19e285b3a5bf8ec1bdb0a8b980266a66cb49978151303e54883524a28f9f037a5802ebfbc03537cdad7a2c9c3bc1ce72035ecbad8269517762c86ba028f33ee1fbf22c223f3af3452982d6e8985e8f538d57cc6cc04b74656ad14b8d4cb4b45ded29bc7fd288b2143b598a8ce9cf5ee1b6304dc208330534c47625611e2b48caf07aaeb7f0d53929572cc56e22af0de1edfe10a52576fd957f3d648e97da36088c1f16fd07ac1369c689182a4a76e480b81048136102e9079a257aa72200dbf57544f33c1db593a81681e7b90b1f63161ace52ce7c787ad4772c7de8200308278acb70505742dd110619d2cfa8442faaa6c019992ea430319879ba43324990e2e5c0a2f5e6ff55e06a96ac6c379b093dd814b764e69d5839cb96e177ef4d450fd1d2099ec226af4b539cb0debef4e743bdaafb143ed9a9feb2b40db5a2b139dffa548a6088c79d87ecb43aa15fa0f738802b3cdeffb4c095127f9759d20483f95d13dd45939856059a3d78dd6cb352ad21d4b9a984413fc14f9ce9798823a6bb67e19ea6dd7b50e303c775da57be10d81b147751fda058e32427b2aae35867ac78cb7c964518671f5b54a6c1760b02527d29bbb6d51f0a59d9044ee1f0d74f93a1eb2743119180dd35423d578b0bbbc70c04c398f88ebd225f9aacb14f5028c22ea5e5144cbc1ee7988ffcd0ddfd6739e8f34a14a10303f9b2cd9ec8dc435fe4aadc5f942d5ce6baeceb2f2d0cd070af82a41116c81ca5425a915051888146589f18e1faeda73860e6522fbfcfefe1273483ed6661269b257fb4162f828722a4d095203591514318d8763a141607bcfc4004ee7304e335dacb59d2776eb9ae101b05dfe29e8e767e45ba38187f3c6b4e42f4952e76d1eddf3abee0087c6f2daaaf0dcf79debc0eec3c7b38243a5696aa19328e21102ff2b2ab6f679dcd96a00ccb4737b68bf1e58166fa104b0873abf40344383ce2ba7dd2f1a7e2f3752a68f07c3aa88d3e873345b2639137b14fb905c4eeae2f7717c645535aa35b83d3d5ab41babcb46d31b8154e2409cf605c3116c13f4b0a8a49529d25fc1e93ab1406f358fff152c0b56dc983cbf8e83ec0c318f4f3d9bf96176480df6793512ee8c6e6f376e02fcc5bc4bcc4414b5b71ec986027f1e65e72677baf8c643a50c3d7166bf2a4d444a83f38a23e5283bf74b132c864ea2e4edac182db9192ba6d5da7e9a1bce2f9d4725ac4a07177c60a1378f68725d26ac57ff6c8411426312865c44c3c214c925754251d417cea9d9efc64b3ea54ab220e5388bac1a04a31dad6743591fea39216e8adb7de66e610c73dc4cf21370826366b4c86f701fe53e24f8c6c0808e18acbd539bf171069844ea7c7d88ac436e42dce7d4982e19cdd195b570a20e662958baac7fac90cc834fb1a93acf0c0b90bba54c614dc3c01cfed27c809aae23dd69122f269adf2ccbe949ead66831c14b5c771ca0e46ced2ace9c08d5465031b36eb5017f499c31dbe1f5deaafd2eab70ed8be897e235771f39aac9aaec6060c06331b914f133f8834174e2a11ff5f3db87548ac39eb6fdc1b5f02d396dca4c37f5cabc07c6ec7c1c0c63dce566c46cdf9c2f0189d1f32c1c94e8c5ad0969f06cc576db756ae9344e6001746ec81c00fb2f47ef04b9df5921a1f261e08848074e1b35f96a09338db5e48e292707695ed1697fa1e888237395e7f80ecd4ea2616eac4c4e1caccb13916d31fbbdbaffd9d0f009dc219f9d6f07101bed472879894afc3e9dd6a85fe1ac11870f10224527583a5bb9c79a53973660191baa07838f76f97ab3a487bd74c4cd860d3bc0def1a7ab94b9fc55a54d4bf33bf079ee3bec5a1f34fa510c1aa600a5d3879931854b14bad02165c48f3667841f33396f18ca66b7c0a769ecd48604054f7ddb06f065216917c6d2e74105d1ce02b541e6afe5190792bb676bdb668c55920c6eb8ad07e8316730f405cd55b13efaf03b44ae227fcc51eb5d461617d1d3a3a24bbf78886653fbfe867e312ce95aad82eb2df2594535b33b6928aef79518ed158e76d6fafc3bb75e1721226f248bbf0cc342c598fc189f1bfbff9fafd4371f77773f9bc91dc6abb8c23dff3e3617b976cf7fcfc90f56426ba0495e4738f6e6572bfc633baa2034ba39e0bd030f4978ca68201c8e48c6c53727be08c4a3aa3c660dbd7805f2ddae4323149792b2f9c64cddbc5ee79e64ff20bb7d5c4d92366fb97926319a2f270719827f15e887965b5439a7a7be93df675fce06811276292d59f2356aa9860c0421e52dbce174e681c018893acdce33883e61a2140cef2bb8e92d83a7eb41802443afd458f6351e7752befa6076ad32d68a90379947a70d95fd69f02f0ffba4f9cd92bd35417c9d4e8ebc1048eb980d00efca66c47e5e3d5e92d121dde0a9c086da101670ad9546167348b31ee0c6f7bf2503af4e6b9868a47387bfa5251b2a18fdff1bbc44ccfccc80d120089e94921123bb724d9e378c284edb80baf8473547158f928ff93b58d6ef63f3b146e0199eb37d7e62e79d72afd1c17eedf7b878bdbf5b21aeac9bb8f9a4a02ee6a24f2bcaffee3828ffe4e573f7dd962fe7a83120b058dc536dae23b6e1f2af7c965dc4ddc1e260c1fa0ea56b768ecefff8ef893eea21adc7729f34d75185c4d1a300cfa8b99000000800000000077ae26952fd849416ff50002b1c32c75960020a868a754fca8a599c08aff7a8d7fa0f1b56cea8ab09c6af2d56ea4705162466d6c0930ee6a218c13a80fa78558f1141a1f36edff830d0489271138f3542c63ad5835a0662a58692c64f91a893e921aa2f618706875f1406ed9fe87f387c0969866c9a83288f64d85ba83bca67563134c5f0bb82ae7fb4772798d640d74dc65efffd0e3e30c1d5dc92fea6aa35f2975a7b0686d464ad5f0b05d5cc13202940794cbd4df7edf8ef1c6e30b96bb4f3c79695763a13e16a1ea0155a54054fa3452e599ccb07fece7ee5700b72d90d9b930d17b6ce26b0ecf2e64171aef54294d98bb7bf5143e2bd4135556b7547c179efdf19476883b8f1e06481966fe49558f8f38f3901900cf465a301fff76ce99f40968dee82a69cbf3c1c4cc85aa0ec7c6fcfba72eaf2883c93839da7cc4102f1904cdf753a31c0820c4dbf645b5a4102ed2e17caf9c6f50c4babbbbb24c6f463c980c748832e828bfc8ba1078afc85fdd940ba2b1670c41a1c49486a2d370de49c42451e699b72e2f63956b9e58a6d48780f256fc1326cce862524bceefcc42000d54fb6e4bd53346114482b574b1dcda23c8f8630afd263b91b4fc2d2889401595ad7d14f6f2ba96b3caaa5cce1aa9074828edcbb8129610c9e9940a32ae4a3a7067549b669cb7c3cd1cd0d8e12aadf1a7104c02f7be60c1e9192ed2aa8a9f2b3c03df6db1c33c0f57a253a50e94faf001fb6b188894401de43c22fba16c688087589ecfdef51ff5527ad109562d3686e408f7d77b180ce6cf38eec0d220262414162bb3283ac2adeb6e51c6b79d1fa6c72b63272bec5d7716c4dea808e29aa62ef389e456f16bf869547c46b2c6fcc5dd8ac1e173bc98c429ba8f7e1c2019c2230178ace25677632dd83d954a59c8d05dde4487d3983b3b33edbd7cd64cfa01eb2e4a8c4f925024528fb645e83cbe470ac2587bee072459dc191aeb3fb243f77d1ae069cc7fee66a96ab38321b049d6adfb5a26477fe9071c6e4e6602437ebc53a833a6f59f0ede824376f917a68bb0297037377f72ba148dfd073a7c415423985878ba49419350714775ef04ad1fa6c007d7bfec91522ed53baee9615dd17359585f0c579f352a1f39e1624f9ca1bb6621244e4fcadd3b4be653de14fb6dbee0900c40f1540fd502480a7d07ce3b1c975ba2ec62bb0b63bf2f2bddf15d72a9df2183a3e52538c6298953f2144cbb062ebc72eb4a3fb05989f63f3a8ce4e715beca2f27d5661faf9d0800"})
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x2b, 0x1, 0x1)
arch_prctl$auto(0x8006, 0x2)
r1 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0)
ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{r1, &(0x7f0000000180)="c4484027d828120f57cd8cc438c2c390b1d5a62b57628e7351b768d6d679b450b53bd7c6fe7d4570dd878bc4bae003b2890fb024fa61c185091a73ec191acb51f29b119d2cdae76e7b3e9c07b57ddc6273a7c4d76ef780291aa3a0b2a20f7fc3b9566c962c5b059cf5ea9f7275582241979237a8509b68e26da85316283195e116c782d2545fa237e55f372445dc0a06cdde2007ede89233ad41191e32474ed0aa42ba6e834946b1964147f6cab2fed68ed88f987a7f3ded11cc41fa9952474419", 0x10, &(0x7f0000000280)="90701379519bd363c698f989c2034762c2a07a532a2bf33b71531967fdf9a333db0496aa2a38676043c682742d5a1d68a220122eb630e671f37b995641f7a6b807b8b171a981c705847893c8c35346a46f5d317069d7be12832c8442dbeb9d0a463456728de74f6f935a785ca54aa61159f0b55da2959e43e087b9915193c11f346b5ce3b8508f27ef77f7d5666ae3d222d0b424ede927a80918933a239166bf8620bbc790f57cd182d29c980410aebb10c799ebc52d42c7fbff719bed5ce7581a2e458203b4cfab704425e73a3935c55ef0533615f7d3be4809606e2caf8ec0417985edfe42aac465105b7acef71eb80419c5567b4feb", 0x3, 0x0, &(0x7f0000000400)=0xff}, {[0x400, 0x2, 0x100, 0x7ff]}, 0x5, 0x0, &(0x7f0000000440)="ce965c9a701746305497814fe209e1983a80cba79c9e4f3df2ebf5603221f6775a44334911d3f650e0489d1e0d56b577d1cd136d2f98889e9796b701e19847522f73e38804b1b89917"})
unshare$auto(0x40000080)
unshare$auto(0xffffffffffffffbd)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/024/001\x00', 0x402, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r3 = socket(0x2, 0x1, 0x0)
bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socketpair$auto(0xb2c, 0x2, 0x20000000, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0x100085)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)

11m40.95629874s ago: executing program 2 (id=53):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x400, 0x0) (async)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0)
keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) (async)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)=@info={<r3=>r1, 0x5, 0x5}, 0x5)
ioctl$auto_UI_SET_SNDBIT(r3, 0x4004556a, &(0x7f0000000200)=0x1)
r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$auto(r4, 0x800064d1, r4)
ioctl$auto(r2, 0x401c5504, r2) (async)
fsconfig$auto_SHMEM_HUGE_DENY(r2, 0x1, &(0x7f0000000000)='/sys/module/usb_storage/parameters/delay_use\x00', &(0x7f0000000040)="f07e0032969e3d52f4c30084238f177f03fed9de67a96821a1614688cdaffcfa02458e2236122f8430c14c6310b580acd9b10c6deb04", 0xffffffffffffffff) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
getsockopt$auto_SO_RCVMARK(r2, 0x1000, 0x4b, &(0x7f0000000080)='-\xd9-]-@\x00', &(0x7f00000000c0)=0x58)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
set_mempolicy$auto(0x2, 0x0, 0x4)
mmap$auto(0x0, 0xd561, 0x9, 0x13, 0xffffffffffffffff, 0x8000) (async)
timer_create$auto(0x2, 0x0, 0x0) (async)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
memfd_create$auto(0x0, 0xfffffff8) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)

11m25.558562017s ago: executing program 32 (id=53):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x400, 0x0) (async)
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0)
keyctl$auto(0x11, 0xfffffffd, 0x0, 0x0, 0x1000000000008) (async)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async)
r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)=@info={<r3=>r1, 0x5, 0x5}, 0x5)
ioctl$auto_UI_SET_SNDBIT(r3, 0x4004556a, &(0x7f0000000200)=0x1)
r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$auto(r4, 0x800064d1, r4)
ioctl$auto(r2, 0x401c5504, r2) (async)
fsconfig$auto_SHMEM_HUGE_DENY(r2, 0x1, &(0x7f0000000000)='/sys/module/usb_storage/parameters/delay_use\x00', &(0x7f0000000040)="f07e0032969e3d52f4c30084238f177f03fed9de67a96821a1614688cdaffcfa02458e2236122f8430c14c6310b580acd9b10c6deb04", 0xffffffffffffffff) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
getsockopt$auto_SO_RCVMARK(r2, 0x1000, 0x4b, &(0x7f0000000080)='-\xd9-]-@\x00', &(0x7f00000000c0)=0x58)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async)
set_mempolicy$auto(0x2, 0x0, 0x4)
mmap$auto(0x0, 0xd561, 0x9, 0x13, 0xffffffffffffffff, 0x8000) (async)
timer_create$auto(0x2, 0x0, 0x0) (async)
timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
memfd_create$auto(0x0, 0xfffffff8) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)

4m38.866383577s ago: executing program 0 (id=1466):
process_madvise$auto_MADV_PAGEOUT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6", 0x3}, 0x1, 0x15, 0x5)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x19)
madvise$auto(0x0, 0x200007, 0x8)
madvise$auto(0x300000000000000, 0x200204, 0x15)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]})

4m38.495129967s ago: executing program 0 (id=1468):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101101, 0x0)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r0, 0x7b9, 0x0)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000020c0)=""/4093, 0xffd)

4m37.22266098s ago: executing program 0 (id=1476):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec2\x00', 0x1, 0x0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0)
readv$auto(r1, &(0x7f0000000a80)={0x0, 0x2}, 0x2)
pipe$auto(&(0x7f0000000140)=<r2=>0xffffffffffffffff)
fcntl$auto_F_ADD_SEALS(r2, 0x409, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/mac80211_hwsim/hwsim5/power/runtime_active_time\x00', 0xda9983, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)='a@', 0x2)
ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0x6, 0x7, 0x1, 0x2, 0x7fffffff, 'f\x00\b\x00', 0xb, 0x5, 0x9, 0x81, 0x2, 0x4, 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0)
sendfile$auto(r4, r4, 0x0, 0x7fffe000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1)
set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xfff, 0x9b72, 0x2, 0x8000)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/pcmC0D0c\x00', 0x20000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT642(r5, 0xc0984124, &(0x7f0000000580)={0x10003, "33626888", 0x4179ed4f, 0x1, 0xa, 0x1, 0x8, 0x6, 0x5, 0x101, 0x3, 0x1ff, 0x0, 0x8, 0xfffffffffffffffc, 0x14000000, 0x17795cb1, 0x1, 0xfffffffc, "2effd87679bd5e47a63add6f535cd80f84710b55"})
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyp8\x00', 0x10000, 0x0)
ioctl$auto_TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)="731fdadbb1c68d1dc61d00000000b7ea557505ff797529467b8b1e21330ee4415c104bd806df056c9c963aee406c63906148ad51bad6963822bdbad3fce40d0d2b0606")
madvise$auto(0x0, 0x5d6, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
userfaultfd$auto(0x1)
close_range$auto(0x2, 0x8, 0x0)
msgctl$auto_MSG_INFO(0xc3, 0xc, 0x0)

4m33.783462044s ago: executing program 0 (id=1485):
mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101101, 0x0)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r0, 0x7b9, 0x0)
r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000020c0)=""/4093, 0xffd)

4m32.585968603s ago: executing program 0 (id=1489):
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
write$auto_ecryptfs_miscdev_fops_miscdev(r1, &(0x7f0000000180)="58a3373c92f5", 0x6) (async)
write$auto_ecryptfs_miscdev_fops_miscdev(r1, &(0x7f0000000180)="58a3373c92f5", 0x6)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c01, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)
sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x40050)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6) (async)
r3 = socket(0x2, 0x3, 0x6)
socket(0x2, 0x1, 0x0) (async)
r4 = socket(0x2, 0x1, 0x0)
bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
epoll_create$auto(0x5) (async)
epoll_create$auto(0x5)
sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0)
syz_genetlink_get_family_id$auto_nfsd(0x0, r4) (async)
syz_genetlink_get_family_id$auto_nfsd(0x0, r4)
mmap$auto(0x8000000000000001, 0xeeb3, 0x0, 0x13ba, 0xffffffffffffffff, 0x7) (async)
mmap$auto(0x8000000000000001, 0xeeb3, 0x0, 0x13ba, 0xffffffffffffffff, 0x7)
bpf$auto(0x1, &(0x7f0000000180)=@raw_tracepoint={0x9, r3, 0x0, 0x3ff}, 0x4)
socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9)
write$auto(0x3, 0x0, 0x100085)
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)

4m31.238396468s ago: executing program 0 (id=1493):
mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000)
move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x8)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x20200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0x3efd, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x9, 0x23, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0xb, 0x0, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x8000000000000000, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0xbf, 0x3, 0x0, 0x0, 0x33, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x60000004, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x1000800}, 0x9, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0)
pread64$auto(r2, 0x0, 0x1000f42d, 0x100)

4m16.02253957s ago: executing program 33 (id=1493):
mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000)
move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x8)
socket(0x2, 0x801, 0x106)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b)
socket(0xa, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x20200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2c, 0x3, 0x0)
lsm_list_modules$auto(0x0, &(0x7f0000000100)=0x3efd, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x9, 0x23, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0xb, 0x0, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x8000000000000000, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0xbf, 0x3, 0x0, 0x0, 0x33, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r1 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x60000004, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x1000800}, 0x9, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0)
pread64$auto(r2, 0x0, 0x1000f42d, 0x100)

7.53335345s ago: executing program 4 (id=2515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$auto_NL80211_CMD_STOP_AP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002b449454e7eec49f2e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008000)
sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xc, 0x4, "ef20bbf0b6e731c5"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000)
r6 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000000c0))
sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000002580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000000100)={0x240c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd}, @SEG6_ATTR_HMACINFO={0x109c, 0x7, 0x0, 0x1, [@nested={0x1081, 0x9d, 0x0, 0x1, [@nested={0x4, 0x101}, @generic="e15954eee6524aa29b9d70f2e19571b673768957b3549f77cdb0d748cff0f8ee5da1937b25f66033519fdd553006a1201d1a8faa94", @typed={0xc, 0xf9, 0x0, 0x0, @u64=0x558f}, @generic="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", @nested={0x4, 0x68}, @typed={0x2a, 0x136, 0x0, 0x0, @str='/sys/kernel/debug/binder/transactions\x00'}, @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@local}]}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@mcast2}]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x7d, 0x4, "772b1b7cbc0733087b22274ed30677e28ce536a2b32e464efced18de980f2bd9bece58767956b08b1b8430ed8b3b22667141a66bab38ded6538883cf24d3b9362493b4b82b5a906f1fbf7931fc3afa0087e18ff622bd4d3a8a7416fa7f472088c288cac0e5d43803c61e8aa22f045324e744f3cef0054ff810"}, @SEG6_ATTR_HMACINFO={0x129f, 0x7, 0x0, 0x1, [@nested={0x1018, 0x23, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @fd=r6}, @generic="b7e18d15191f00c235e8dd7109e481839611790b5726bb10db28bdd12f88bdcdb3ecdb34992f5f3ac08cb21e0df2a7bbd56cc5d6164df6448a8ecd61eb259a497b76613bba65a85bb7b96a7fa0df3bc3d39fcf3906fe96c08d91374a93e6feac8a7059d0ce42a358afb2b59061c0704dda24f40038978cd9cd65f28b7d396309e242c91805a4d579f905e001990dfb73002a8478471761921d718f0ef8ec0d5e3786e683718d7afe2ff819f0b4dd2053c7c8bff0671d87d73a4e40b99677de222c7773f37abf5c95f114cd1edca820c1b24a7c5ef5e86025438fad2f05e9c849b7f046b9568eced827a39ca72dc55ff54e2eb512fcd2a461dde619d223411ef0a9951daa19371eaef25d2cbc11fea0ca8856c3eed945b14e9741152ad4a2d09e14502b9c7ebbae3fa3e6f774b8c8bb50db8eeac27aebc833547a42f17b8d92eaab888620f30d22f40323dfe1518eccda41ecf6ea2d338c74bf6f9e43b958c1ab9a702411efd2605575b9644bf132cc85ed391c371cf2e546a5dee9ebace6aa96fc72d76d3b44917d70efb3ac63dd7078ab75d15d3fd424f3ec65250a4df0f74fa65bbb29525030dd4ec9809083750793f78ad9dda92b6d548889c19267e0f99c10cffbc86c8944d5ab40c623467cae80d65bbec2ef67d73a2d013fa7dcab00963b09fa077a79184db07fb214a1479033f4efce1c0dde129efdfa5cd3ccc1791820a9be2431bc4cd55e18e0195a05d1141267e358358d4d182e397eb57f99c860b05c8ec6b4f7d0547e9c953a1219969f8e1aa024ade615dc1e8789ca2ef44f6b87e6b75b9ca5c79c79b368908d6e791abe4e70a06eb65bba5e6e4a3d99bed283bbce0110092df5c25c9ce1a8283bdb57bc147c7c38aae33b7d338b94d3afff8072c96db6677b2ca5d358fcf7dd54a18003c149edba32881c0c3d519fd1fd27ecef0db08bc2e730dbad57e5c5ea89b4cbee7594c227e810be6e8514137682219204505ba8204d841d063d1a2253d82dd3c104cf335ff863123b9ecb445ca98591c29f73c366c5e1d0400d03d9b4d71f01c1bf81421edb0c36bf3f8daa00aea5c8badb7240aa87dd429616ea11b1ec1441e1e0992641b89386249fd177913927fd8b865a5d1792223f2dfb585a5d9f5b7baa2cbb83af151d14e32bcb9a23da624d8fd5d3f6b37cbf3c7fbb2fb78f8ee99e9a3cf9b42e4107a48392858bd2ab5e23b0dcf989d78c654d178a2b5b3b3a885bda7fbddb55bb7b8d0471c7b64bf8d9efa8e8b1fa38e6e9862275a7435c8f00db0f5c8be7a130af8020164a7885703f4d0889e23cfbdd268c40ec1ea22d9dd869d8e5f7ddbf4f5bef4b4b9a9e1dab354e3c13868395883e8678d3d0064543070fcb2088779a05942afbf029c608fd6f294698710b78f175d302ef4a2f22cd21310694fdb3978bb8cd36651751c9ac26c55c7de8d3924fb85aff3fd0112008429d5394b81c6c17db65cb58a952f1aa892411dca806af868e3fc7ebc217f33fbafd594a4849c4efcd50416ca334065d369684a53335fdc863cd9395406de1b30d563d5df2e1d5c51abc36dc8efb7809a70a4759602a707b1665bc64ace090a3c0718a93352e1725a59387963faaf5049a38b7684572d3250ff92a99abd9cfe1986809480c5ee14dc2080dac3fd638acfb87c2c6b8288d69cc283388a6d7e6ff8afd9c792a51f3569885fb8a29b860ff219438daf5010ab511b78b2cf4c2d9f903f262b890bf2e78c4bcb90367a4b545c379d839d6eff3c7ab6882f8e7071baa7d72eb8f862c3d010d8210538e1c2d49b9103eb620bf9ac76665241b2b01da7d78153af13f10bca30d27e013534694429a46edae3cd86af035e2a3e67bfc2a1f7d4a29e01008fe1398cadd932f1fc079d17c9dcc0daf0fa5c00d5d4445580b255ef75605e852110afe220d2140401b877bc831b09d9c68b308b1d321ee40e88c4b88ebe17fa2e304013b058edc3d19b8a14bf7e5f04cc13a65d28fdff09d495080456573ecf587f039f325f633cfb3312f273ddd3fbfdaa08a42c33d63cf64224a95c3bb7be669940e50bbb913788245223bd9950202de59a4b01026e565f2e95bfb13f5b54bbc8643152952e33fbbb3e9acda13b2c8a517fee6316047c433b521d3d66321781fa247cb7ecd706d775af886fccecc820a648d4d6e2ff6bbb906b292f63594df0ff5b7b1b1bfb949ad0fccb429c174d498fa2985fbb11a998a9b5166677626d7defe1b31d2ccac84fa9949c4e39bec88f974e69ab928c251ede1aad7119a80a53ac773f67375950e0532eaba743fd97aa2ca65fd62dd3360495d24ce5ceacc09b44418d4097c73dfea71b15c6493e72f287243c926c7a5cf7dd3b6fa963f2fb53c8e8aa63e3314f7fa7fe704eb98a8eabdeabdcd8865631583c1886c8430bf1485f45cc11e5238dcd90b2d92ef24e6eb6180facbb46799a41b42b6adce0ec41a2883ec2c464fd1da698d22126459678871cb806daed52cb321531bf3f4e7729316681f0c93703680712f3de39a8e8caee2eccb7b5325a4566c025795ff271fbfd8a2ea89d797e757bbdb9aea6ceb379f9520ad42dea5829342b1022f6cb980a34c5cb6e2896255cfdf4e15299f3e66199e89669d29bad4c82f780c34536ac82a8906f6f7ee4844f09ba6f2e88e315a1a6da12d97119f76708c7d4725acb450951eaff24511b624c7a3e4a4127d99c337fae926bcba85799eff68bbdb3d759be543c13c215c56e765494e5053c7a3ef3e5afc9be8ea848b201c59773e0ad4ebbaf4bb0ccbeec9a67e9cff89ba1d22cc27c78da52fe30d922069249418736fc7c9ef63bbff5991a4b35cbc8ead93bf5b85558d567c0c37ec1a2bead38785514eef78abbfa563e2a4e0e5517a59d134a74c33a1aae349f7409ba2bcc5019e1574f543f03d8634679d279c8f3d312a022afe187d52fab0bdfcda4016d7ade02137f325d936d795c1e53d462c5ddc431e8226ba4b43e843d12789850021eb8dc0b786bce655e56a99274b2227fe08031fecd28f17546426e404fdf64d38e81e221169102452df56cbe82480583170e72189e8904735edf62b4faf62f44a0c88a371a135151bf98967097437482c9e762afe955a2a5cf5491ea7d447f32561ee47492a06cdf20f5d809391520714eb7de44e8d8459b96fa8212af0dcc0cee6a5e92b816be062afac56ec7d921b81f8ac5a9ff03b332ce1c7fe61228612b724edc2749714df3495b0202ee79a13efbf202e3b0bd93678480bc7f727a16dbdff8a90482d408f63c93682d319a7cf4eb4258400d6753dbbf2eece0cb969523d0c3fef1c528205a999498197666762293b0748aaa8bfa546e4acc1740791621f52c4b5b2988eda58d759795198b8c2e4bb79196f99738761a90a0ff0944e79bcfe3023dfc57479a12bfc0e3bbfd99038a5d455c2a78abe673185d95e2bd582879e2a68c4d645462abe504cfb2efd781ee94aefbc0f2b9cb344b35d2f38ed447c80083e54889c50214b3e8d0f427b3adcb4934861b6cb346504aed3f01f0e9a2dc0a0cd7a6d3d769fcb25cde8cdd481d34b7f6820266a929c1c3425f5ece64df6bf6e4740e2b178548837ae64aa70d7667ec8dd01ce94afc71f193b404b401151fa930be830c7e6016711b24694272b28da2156b710bbe6bf46d6c8a33d3e3be8c123ed4eef39313d148392816876f800d0cb9b7572e0d882b5d0369bc3513be9af8d553722547e4baac751a15a580cbcf0866b01e53a39bda1ce9915f3547dc382d0ee0fb289b00d9510a8368c238babe7005a21f842c77351e8f9e87cd6b03e18c60b49e780c095fcf26a16a558325fcabcac8e7e21892f6d8f77d6802f1f63abaa027578f580811ededba95160eb4d80a0f510e4a0f0b5482f428b0590b322fbd6a4b271da1e13bccf97f87077400b14e129b60ab4726396f7757c4bc11e8e5ceef009563b868b25843e9a2d3412ec6ce96ddd9a0c0e6e9ea7df82ac9d953954c51107079c86bf259fadcd935254fdcedee2986d8a8155aa893ca22355f512cdc44dd723f01d966b9dc3463558bf34941cc3dd8a2266120413e4b5087b2d1dee933f328951156d32d6fe1e35d640fa09ddc8611059ccc65672bf7943c7160b4680ce9942759d02f323a2b2bcc3a232e907d1c484f044a2fb641c61a0df6197ead71dada3feec60bdd2805f50de00ec456070b3088dc6a541be6771a8077784237f6e451c59796088e7e00f8e4213daddc5199be9ff56298c2dce6ff7cb1dea7da37fba855d411cb1566b016495c859f651994b3d2f424f98952dc3cdf2fede357ca5fffc51de31b4e3f2a37ac4e008d84bab0035f3efca3e83b3768771b193f5ab3ef579eb2e59ac2bb622fde67a49cc9d27c7d33b028a6ef990ccdb2d7f149d9c594fd5e3294c7b78720976a528409235e57342b58d3aca9192af2c834e7ea2dc5da58f0277ef4ab2778e25e0e2abe5cb940ec6391934876e17495e47273a8d15c6f829f75a34d808b853a06ff0f12d9d38df542934e3d9bcc7dff0f8ab6456d656c1feb52d59268ee585d798df3162864c8f8d7b80a230f46e44b08bc8af799b98930887d8716c9360c2c9b4c4680b8f81548055161b2f21fcd4640c0696abcbd4cc24990dec3a34635a93837604ead7c478fd4cd19205aa3fe7d815d4e11f019a81ccfdc53e4202acd21b0051c99be20a242185804cc02bb973d399278bb3dac124f6b5750da81a2c04d673be3133eabc229569a07689eeb7bbb3b1087520715098a2f14ebe5905f100441c3894f6c65363044847c044f0f4becb9533842f833f3cafc840b3be082bbfe43f6fbb680fb9f7b19d7015962a34232cbb193770f7d39bab4df93ed4343baa9cb344f6196fad3383aa4d05bd14abdba99581bdb57a755bcf71bf9f809d03fc37b02c408119b3e0e465c8316c0a43ee0104b5cdc4a2b9d6e1a2e9b3782f12a31af185d18d42fda8ecd44d2fe32c0ca489e0c00ae9da28c4c91d580a3fd1d4b997063eef9e7c9059bc693c09505696033af41b61db08856876e9ad8e64850a8fc6d8011a4290b5a30e92a307fdaa7454da928475490a28267d9ae60933a13a48b6e6740450cd76aa244dde013a778923d0f35d3bd4b2a54180d68551cdf4f01c517c0afec6b9bd8dc8e540e65487c9bef343fb6e109cc64fb5e379fba336946f82ab9e0bcfda83742f9e937f36717fb23195d26566a60532e3e0f71d414d4d310aa604e6d597bea6d7add86738640117d71cc8e19372be8317adf7c97d301e2180d1d614f39beeb7115cab8a30134d2f7f862fcf1cdebe42e35b5413e4e39968cee4b09b9959b08010fbd771218f7971eb412b12e7533b26a0470925389c80ac137ad1eda722b97cedfd0031c706b1c5b1436b94c5f43e8f0eeac2629736dc6d9c19267de7289712e3f78cde82d2c9bb1b8e877ab5da24bd2ae704109a5d6c3e099efb9005ca5ea87c94b6162b2f769e54bc7c20d025999a43313918369ed21da746f84813982aa28e51698bfc0ddcc931265d2a00613a898b8e2383e9005ae4bf450c96501ac0e7d5362f3a275daa6708a93751e691fe7a2aa4ab3c9962765625efc6055023c89a9c8356800bf80900e3121b255825306197256c326d2964463410b0bfa8e6d5c2cc5f6d3bb972eee9b7b356059733d89d80511069925bd3316eef4197dfd5d670e05471eb3d1807c524e81b21926cf45bcd093aaba55d3a15252f3844829487bed0ee4dc73ae3782942953787681c7d88eeac9d81cfca03e876dd83edad", @nested={0x4, 0x128}, @typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="10927817e83ca602f61ec9a9e46a2d8e28c5d49ff5e8ffe80ea593ac1a9d607e5604803b8a6fcca20c11c2a7d4509800a18c3cdfcd11069ca2a133409fbab605491c2e95212d5e55347743ba55a078413e82bc3f62db61a5604e7dae881e5c3b23c708a6e5b32386464a822b9ab8f664487122d52475fc145b7ced11e2df16b3f946d8", @nested={0x14e, 0x153, 0x0, 0x1, [@nested={0x4, 0xa1}, @nested={0x4, 0x9d}, @generic="04c64155a83de408b950d871b238", @nested={0x4, 0x6c}, @generic="0fa7741131ed10cbb640189f6bc7b7caf75805f9fb18a92b2256d48fe59a36cd941cfa836ea5aca0cb6cbbb97d49ea00120744f3c223ed8144d0200f758d3ecb9487076126d7b34768f8d823589c9e4f84bc531570efb7500623aa7c25c60667fc99c59a511128720fdbef8c41c6e3d2c04c", @typed={0xc, 0x169, 0x0, 0x0, @u64=0x9}, @generic="aef579de732f30213e2f7f999c5ed372d3c020ff20bed338d26a925100fa1dca9d7eadb8f77f550021", @generic="412d8d42cb3f32e399f399daadd13151c54681da1712431a9f3e876a5bf6c1141aa79d96c5cfdb1b550bc1d57f826e1cb6ea1acca7a6b7de95d1ace6506ba9516833f48c46a5cb067fa43ca7597daa428b2d24874e2716e9b3a9f175d8dd9b74eda822e1acb8b28c03e4fed903703de542bdac511d415efaf355e1f503c929674e6973b03c", @nested={0x4, 0x14}]}, @nested={0xa2, 0x149, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @u32=0x4}, @generic="aba8761f6d84ac9929c347d63200813b77d5fed6ebe4fde4645df451aee62bac900e23602ffc6161b2421d28f717bf6d59923e6ba8fdef06a848097ad68190bb277c573eeeaf27e693722eba6a7b60a68dc9e53bde2b0ffbff908b90a8269152f035171bd83384253079a8bed7cef46779c17ad2c84864bc6c1c8c8854174992eb58ec66481d5ad7c700375ae4147c0467c854c603f2"]}, @nested={0xc, 0x145, 0x0, 0x1, [@nested={0x4, 0xc4}, @nested={0x4, 0xea}]}]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xb7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}]}, 0x240c}, 0x1, 0x0, 0x0, 0x20002040}, 0x10)
r7 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0)
socket(0x1d, 0x2, 0x5)
read$auto_transactions_fops_(r7, &(0x7f0000000080)=""/18, 0x12)

7.178384698s ago: executing program 4 (id=2517):
mmap$auto(0x0, 0x4020009, 0x80000001, 0xeb1, 0x401, 0x8000)
syz_clone(0x40c6611, 0x0, 0x1a, 0x0, 0x0, 0x0)
socketpair$auto(0x5, 0x1, 0x9, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
r1 = memfd_create$auto(&(0x7f0000000000)='\x00', 0x6)
read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x601c0, 0x11)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x10000008000)
r3 = socket(0x10, 0x3, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800)
r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/fuse\x00', 0xe40, 0x0)
sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB, @ANYRESHEX=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0xb8, 0x0)
ioctl$auto_VHOST_SET_VRING_BASE2(r4, 0x4008af12, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, r3)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sched_setaffinity$auto(0x0, 0x5, 0x0)
keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x400000000000021, 0xe, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd)
fallocate$auto(0x8000000000000003, 0x3, 0x1, 0x4cbd61)
mmap$auto(0x0, 0x1, 0xfd5, 0x12, r2, 0x0)
mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0)
close_range$auto(r0, r0, 0x5)
syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000240), r0)
fcntl$getown(r2, 0x9)

5.584848578s ago: executing program 4 (id=2521):
unshare$auto(0x40000080)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = io_uring_setup$auto(0x59, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0)
mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0)
mmap$auto(0x7, 0x2, 0xa, 0x80000010, r2, 0x101)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x80000001)
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x4)
ioctl$auto_BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r4, r4, 0x6)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3.864942414s ago: executing program 5 (id=2526):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0)
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1e3000, 0x0)
close_range$auto(0x2, r0, 0x9b1f)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x10)
r4 = socket(0xa, 0x801, 0x84)
r5 = socket(0xa, 0x5, 0x84)
getsockopt$auto(r5, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b)
ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8)
setsockopt$auto(r4, 0x10000000084, 0x9, 0x0, 0x9c)
pread64$auto(r3, 0x0, 0x20fe, 0x7)
fanotify_init$auto(0x65, 0x2)
r6 = pipe$auto(0x0)
dup2$auto(0x5, 0x4)
ioctl$auto_SOUND_MIXER_READ_CAPS2(r6, 0x80044dfc, &(0x7f0000000080)="2b1ec8ac3dffb9f92ed34aa8e9db47229a5ff781285a1cb66c9b054e89701374dd6e61bf8e48a1c5bb338a971690cb5a8c595fc1bf2cb1841241d4b739751460850c8237f2e8b74188d5fae3dccd27d4354882246b36a0f9a28265e1d6f1cc3f72fbcb3a3d4489c1867c151ca98eb5609d93a18b62021a")
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
close_range$auto(0x2, 0x8, 0x0)
r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r7)
ioctl$auto_KVM_CREATE_VM(r1, 0x8004ae98, 0x0)
socket(0xa, 0x1, 0x0)
mknod$auto(0x0, 0xc3, 0xfffffffa)

3.708983899s ago: executing program 4 (id=2527):
r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0)
sysfs$auto(0x10, 0xd45, 0xc)
write$auto_bm_register_operations_binfmt_misc(r0, &(0x7f0000000340)="4d96b15940349a69c8f63c", 0xb)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24001000", @ANYRES16=0x0, @ANYBLOB="01002d0008000700000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r1 = socket(0xa, 0x2, 0x3a)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, r1, 0x3, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x100)

3.431340803s ago: executing program 1 (id=2530):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop14\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
write$auto(0xca, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r1, 0x0, 0x400018)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/186, 0xba)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r1)
r4 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/available_events\x00', 0x2200, 0x0)
mbind$auto(0x7de, 0x1, 0x100000000, &(0x7f0000000300)=0xb, 0x6, 0x9)
write$auto(r4, &(0x7f00000002c0)='-\x00', 0x8)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)="dbaef02852b5b833e608b4009628d96daa0200008a69d50ba2ae0d82ecfb519586d1d7c2b3d1cce9eebe14c2d7c7000000000000", 0x206)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x20, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x4000000)

3.30162639s ago: executing program 4 (id=2531):
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async)
mmap$auto(0x0, 0x101, 0x4080010000df, 0xeb1, 0xffffffffffffffff, 0x12000000000c004) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0)
mmap$auto(0x0, 0x202000a, 0x7, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x8001) (async)
set_mempolicy$auto(0x2, &(0x7f0000000280)=0x13, 0x7ff) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
r0 = socket(0x2b, 0x1, 0x1)
r1 = getsockopt$auto(r0, 0x429, 0x6, 0xfffffffffffffffe, 0x0)
mlockall$auto(0x7)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0)
ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) (async)
mmap$auto(0x8000000000, 0x800004020009, 0xdf, 0x1a, r1, 0x3) (async)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x7) (async)
io_uring_setup$auto(0x9, 0x0) (async)
unshare$auto(0x40000080)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vivid.0/video4linux/v4l-touch1/power/runtime_suspended_time\x00', 0x182f02, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
r3 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408)
write$auto(r3, 0x0, 0x371)
linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async)
mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r4)
sendmsg$auto_IPVS_CMD_GET_DEST(r4, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) (async)
getcwd$auto(0x0, 0x9) (async)
unlinkat$auto(0xffffffffffffffff, 0x0, 0x200)
mprotect$auto(0x0, 0x8000000000000001, 0x8) (async)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) (async)
acct$auto(&(0x7f0000000040)='/dev/dri/card0\x00')

3.201384497s ago: executing program 1 (id=2533):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x1, 0x84)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000240)="f6e6812018deadf7e88f819e30236ce79200b01532f2ed0dff68130f", 0x1c)

2.976470098s ago: executing program 1 (id=2534):
mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101101, 0x0)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r0, 0x7b9, 0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0)
ioctl$auto(0x3, 0xc0b45545, 0xb551)

2.624607979s ago: executing program 3 (id=2536):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/syscall\x00', 0x8000, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7)
mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x23, 0x80805, 0x0)
mmap$auto(0x2, 0x400007, 0xd5cd, 0x9b72, 0xffffffffffffffff, 0x10)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/eql/statistics/rx_missed_errors\x00', 0x4a840, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec4\x00', 0x800, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0)
r2 = socket(0xf, 0x800, 0x4)
io_uring_setup$auto(0x406, 0x0)
socketpair$auto(0x7, 0x0, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0x5, 0x0, 0x84)
getsockopt$auto(r2, 0x84, 0x2e97, 0x0, 0x0)
ioctl$auto(0x3, 0x80106f53, r3)
getsockopt$auto(r1, 0x40000000113, 0x9, 0xfffffffffffffffc, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f00000000c0))
mmap$auto(0x3, 0x2, 0x4000000000df, 0x10, 0x401, 0x6)
socket(0x29, 0x2, 0x2)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)

2.458521319s ago: executing program 5 (id=2537):
mmap$auto(0x0, 0x4028008, 0xdf, 0xebf, 0x401, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0x2000040080000004, 0xe)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
unshare$auto(0x20000080)
syz_clone(0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x101101, 0x0)
sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000080)="32ff7749e8a361752f08f48474d23c22da470758043bb2a319e03f411114c258e96c039a90f4da13da5581616ddde6fb02844a9958b8662f9fef23977a8eb6ec5bca8a78e850df78d67332498e8b3574633d83a385ac32f7f6bc47ae66283423db27bfbed1b7b86898e951595f712ef996c005", 0x7, &(0x7f00000001c0)={&(0x7f0000000100)="c9aec6f55b899675629437e8571ace814398cda20cd5d84c4fde729f78d2453115ef49c613c17c76a54ae88c891c9a0b1022ee2d68543f634cbc41dcba9cf60503a1af0e16052b0cfeb11f76680041999e9caf979d7e5902680b3c1556136cd60982aab21f20fff33e4efe14044e155144421cfb2689fcd0e95a13205a74fadf335e86667d536c8630b89acfa562c27c754b1859ef353bca9ae8724db8534999ba3d", 0x80000000}, 0x9, &(0x7f0000000200)="42fa7ca368387fb0726b85b88c1ef10a4d974e532b7f5a23a193e5d25728bb54", 0x8, 0x7}, 0xfffffffe}, 0x200, 0x8)
ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r0, 0x7b9, 0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/maps\x00', 0x40000, 0x0)
remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0xc, 0x7, 0x6)
io_uring_setup$auto(0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
write$auto(0x4, 0x0, 0x100082)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
sysfs$auto(0x2, 0x49, 0x0)
fsopen$auto(0x0, 0x1)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0x202001, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0)
socket(0x11, 0xa, 0x9)
socket(0x2, 0xa, 0xa)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0)

2.282081892s ago: executing program 4 (id=2538):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10003, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
sysfs$auto(0x2, 0x43, 0x0) (async)
sysfs$auto(0x2, 0x43, 0x0)
add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffc)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x80064, 0x9) (async)
madvise$auto(0x0, 0x80064, 0x9)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x3ff)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x55, 0x82, 0x8000004, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}})
io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
r0 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7)
mmap$auto(0x0, 0x800, 0xdf, 0xeb1, 0x401, 0x8000) (async)
mmap$auto(0x0, 0x800, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
mprotect$auto(0x0, 0x2, 0x1000002) (async)
mprotect$auto(0x0, 0x2, 0x1000002)
sysfs$auto(0x2, 0xc, 0x0)
r1 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd4}, @L2TP_ATTR_NONE={0x4e, 0x0, "1723b9842bd7463ad3e414a89662459eb6f0a0af4fd7d63cb99f1cae5c51665b3560aac6276d59534f476c653432edd0dbcf1e2d75c48b85eb39899e8743bd3c5741a90ae3f1cd38067e"}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) (async)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd4}, @L2TP_ATTR_NONE={0x4e, 0x0, "1723b9842bd7463ad3e414a89662459eb6f0a0af4fd7d63cb99f1cae5c51665b3560aac6276d59534f476c653432edd0dbcf1e2d75c48b85eb39899e8743bd3c5741a90ae3f1cd38067e"}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
keyctl$auto_KEYCTL_GET_KEYRING_ID(0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

2.213815793s ago: executing program 3 (id=2539):
setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000000)={{0xffffffffffffff80, 0x8}, {0x32ec}}, &(0x7f0000000040)={{0x5}, {0x5b, 0x55}})
getitimer$auto(0x9, &(0x7f0000000080)={{0x8, 0x9}, {0x7, 0x5}})
setitimer$auto_ITIMER_REAL(0x0, &(0x7f00000000c0)={{0xfffffffffffffff3, 0x7}, {0xffffffffffffffff, 0x6}}, &(0x7f0000000100)={{0x0, 0xaab}, {0x10000, 0xffffffffffffffff}})
setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000140)={{0x9, 0x1ff}, {0x2225, 0x8}}, &(0x7f0000000180)={{0x7, 0x8}, {0x7ff, 0xc}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff)
shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000001300)={{0x9, <r2=>0xee01, <r3=>0xee01, 0xc, 0x5, 0x3}, 0x0, 0x8, 0x0, 0xfffffffffffffffc, @raw=0x8, @raw=0x5, 0x8, 0x0, &(0x7f0000000240)="81db1114600f1e477b335fbc981608f9cfc742736d0ac6d208e84ffd7df4b9da055e4963033cffb80296939ffcded498c8acaab052563945864e9f2153d282ff38f82f087abda4eee9fc69aa6a65277c8c5930d39720e4c4d13182896e2f3011259a8a1775ea85036788fc449cf250e101c98546588b9ed7cd21b7f158d4fd187e6c592bb8572e2c4bd4eff5db080ffc1b5c214a279cf558102c560c5c37313ced53d78aa0ca3ec86953032731d8ad18c50f0ed7635f7d4a2e0cf7cb69c7f79832fee1e13aba80b1ec988d1515cf6185fe13a584b82fe73483f4570df2f4accc9b1cf601fac6cdbfea9e68941044423ef432048d71b198ebbd2f254126317cd9209f715b3d0dd8ac605b2e0c2ad3433aa956e567d5ba0cfa8e8a41e905337e108be962da57538a112bf21e20c1041f60dad0190234802c3ef4ff8fc69a1d1ed1bce6ab32c5742ee08ee1c0504fd86d26234ddc449e97abaf63bb85bf30cc85968271bf5df5a1c9c614dd1c0171e9a474eb9cf8c524b9e8123c4ac530c4665eb264c253642e811c3065181be6d32c6959f1eef0b24b6431cccd0acfbfc391725f07813dd5fd5bb467453d4798eb176bf5ce69c494e568454be2c1ccc63e6ce6ac617658bf1f112ca8fc54fb869efde04d74c0a0b16bb9694a6df884210151758d9a40eddd83dc9b7aaeb12f336f5711f99c932285e8e41f33f5ab4244cdb949599473230eeb01deb66f9c9eb03d79075bbd2af1e0fc7ece38039bd4ecbaf5b9e0cd59ab347ccc13c04485500897f17163892c21b2e052e881b09a850f04dccb42a5680177e6dcec19335b269066e6f0fa47c18942a47b40e22db277fcc8bebdef0134613d54bcde27e2c2771dd538c5555dc5e52d68bc73d1ae63db9af62ac3aad334fffb022371eba9cfe9c10f98fe265f0f73a6ba67c7a27e043a6eb9562ca25120f76a6ff0521bc837b43924eb0dffb93854d5f5e21f8698c8c6b6c71b29908f5980397e6b6badd3df0669b88e4ee876e7bdb04abee9fac9b346535b9c165eb9cdec58089ae6b41f5cee5f29104e90e9bc8a157a7934aba704be8b6ba093fe4c741dc35027ad8886f9d2741c7ad10f68a24b876d684c0dc2666808773412395a9e0c2c9b7c2fbad090b0e9bb1c7ab7f473dd6363630196b49c9343fc43be0c7f802e1b79ad11d21f192e9553461bc075a9f672297fc7a949599c4cc2e3bf1099b81cc74f7c28a03d5bbfa1d00bf86646e79b36f861b66db224ac7d515449503ec09f3d80f3ce9fc3cd849d9e158b9e7aed36347c2e6266ea389684de2e6abb0d0a41381ae94756843e548947277c4ff02e6595021b9fb6d64df6e405aa82907178964a76bea83364b5c9389f6c90142d881ea4f2667ea7f79810cacf1741b2aaca4beb3267ee4e13e59a1a7fc5f5084daa7f38bd3966b3beee1cb2f19c705512279188702ee07ae8ee9caaa3d69662681008032b96728f4a53c010e002273385c1616a989a104862beed0606578187fafb5077e504c79db355b1b13b30a915f8e151613ffeddaf48e4d0029a0d3d5a9fa206170098e1077d625dfc4f9da0af3498b7e17408363646e709d9c6c93e7d3b8b9919461db52c3c12477a9689ecc6bff11c17030b21fbf3032d436ec3b8d37d5f73808f68747e3a49dc8879695730067b641d10684896c111c9fc6ace28b17c964ce6b45bcc7508fb3b1c4704167e83516bba51e14282794d6bcc1dcbffdf5556a6fe07ea8f57973f4fc063631663482d8321c864512777e1591f62ce3da0c11d700653f90a6c534d535370ab6747294514ef2810542eeb7328419efe9b298d66fc866a90b47942afa563c5cc6625bbe84a876e9743466f50bc789f2eea9d1a4271ac288295dafba91248a31cb63b54e6545811ccb9e6faa1b4dac289c192d282f6cbdb74aa84b407703ba32e0c89cebd65563ead21680050d6797620ac09517f1f2549c015f89caef0810ed902991b48b7349575d886bcecfc03961141e03a9d557f7a04a2d698864629872ccf3853ac7aec2ea13b949769de2fcf942acddafcee8d9cd71291ef5e5d8bdf2adec26a995e9b63ddfb0ad0c89c0b28406a5d661f88631b084ef4a725cbbc21671b3da0f49427f1d58953241cdcedd5ef0190517f61004f2bca3b600d65384ecd894aaa03568bef9b4f8eaba8d69a7aedfb57758eda170ac7c72b7be2582eeb208e0ca223b0724413c4192e0ce845cf56e194aeda8d3dedec3f3bde7f1b8c90e0e19568662ea31316d0a8bf95c3920d982404e5d41e1191788077d51654a67632dfd3b9630b67f9bcef927350b113113990749ad7c090edb13d6bbcc061b77c9e5432cab3eab8c05a0877b789b5f6d98f60fc946cc09d385d128bdb6d9e37343f2739c28bff957e58b3ebba6888e036c4876fda5ac37b850fa8b9f7f4652dcd6f435e6591de6296d20d5879f93724551ea81a4d03b2a4b91809371c1742339414062a4e82378c6f3d0441f7d469397fd93a989c1374248f6653c49c00a455572d1f080cb59c716997c18c4d2a09d006767e06e1f7e90ae6bb105889e6c51e9f916b7ea9e0482cf84d4a4078e7ae76f9ea00e4634822b75cd46a5b587dcc4ba8e6b929c131fb56a23f14b61d389e7e5bce81a2b3d86d819d1d8324f513e9343d75df4d49fac34622e6a66bebfe58f2a5125c6d3ab5ea75f7ae36314119b477e0785f4c5de45e2f2830f7acbc793901e5663c6f753c5f123a55350320c9d2581290cbb5e3e8c4d26af1430d2d904861c1f5d2f9bcb956da0928dd67f22aa32b0e434d562c40b00129a678a909ce6edc4e797994de85b72822abcba906697b45fe57b7c3620538481a919ec524181ad944d6f541c8a301b29012139cc73dfdf0664f118e4417ffa2c5cbfaeb2d7a3074ea81faf905fb4338487b28b1eaaab5e9fbe539e9a040934ce7e2c6e02125f1ed5f09eed19e324464354642f16643a3cfdd1527a0d8f86f148de6288f77356ba23aaa770aa922324a816d7b74c38270ed4be4192ca609635c1cecac2eccccae642239cc54dc2312ce0ee911224d442c4313331ffe91eb282f89bbc7643e2a5e84cdc10c0d26eb224c1b676cd52bd705c9e1c6fca4d5a3e073290bfdf599e45bdff03794b18901fa564aea6919238236bf93a0c98b5dc7205097f9bb50b8a33eb5659fb7e82eedd09db2661234696b85ea7aa2ab4347c83e77832b228233bc5f54d55e544b3022a371a52d1d7933c24f4f186b0fb8ccc739800a43fdcd05501e34b5eebfece8089284b16e84f2e092a8fde32de0608be35ed90b56d3a1ab22cf0b07a3ff87ec52e54d65f01ae2f86458860266343d54d5beb3a139883ac6cf7d23a918aec4b34c1cff7ae1abc48f1c8ac2cf5ab284c045939be242f9c89ecd537764c9ebfa238f134a182d45351491eb4df68db7763524500a1b58298a09fcba262e13178346b3a38504f31720e20b75066a86ebcd3f2141c48c2f1d890dca5560976369af7c42257d91ac2ff30983199954d085ddac4d481c3df05555177b75dbd2ef0e0341483d18ffcd2bfd6a6d1b1e2dc4eb15cc8c1cf8cea913ceada26c6b51b7112180a7db78ccb82e434b051472e4a1143733f4f40d63e93a4b0a7c241144eb65cb7123a243a9e8abf0f8a87c2d770244eb2c9909bb2b29178ec04e6ef6775cc2bfe5420b8185d6ffda0b2667ce63be67628c259bffde03b53efa133d9d5cf8a7fce156884ec5b4d65078c4c0e473baa7f3dbb3efe2ca75ccd83fc0907444c953b77f047edc160bf4e47354b64f5c9db28b3bb7dcfa2dde0d675b057f4a57e45f56a97a8985515e4a8fceadcb983b56b4f07bb6c7306b2c838f554dadb0b0e29194ef716cc23108a4e10c7eb7a045b08f10b8e09f426a3ddafbbfb7e73bd221246101be1b56054e13a39a44bf880ff1ee9fee6a77c6d4c7326927c8f1e8e039d11100efd937603a7f3fa5b26b4e324d5be7c4601b0483caaec827a6e505a978529d392e4a3ef7cd025ecd403cb8b10e77c2939274393c64396494365ee1cc2feb72d8fd37bc223d5e81f94638e99923a00a8723ba8eaca85833976a7a3d2cb70a97853096412cfc7de9014a6256096bb074c31ad69392c382dba196f875d233a78ffb6d37a0514f67ac6ae7be74a22529df9adede8932eaad9f06435fbef35c249fde200441ea47c105cbb38b81b08b22b32c672d2abfd998105f4cd175b1e91a673c98b6421116f113ace0107c0b636652da830d4f052bd042ae60f51b6a31abb2a0cc2bb86faf72ef8daa05ddc98a985a8651c837af2ed91d9f546aed9c2775355291ef7cbaebe814759dcf5c6fcb07113342b365677dc48d09fb1303b19cfdd82aeaddacb1b2bdb74c414039d52f56feea824a872f4d221ad9421c0ea7bf11b80ad0aa74076761a3d1af558ba6b745b7fff5f60666360c0b2365b18aa0ab4420b1629c8747dbeba439acdd5fde41ef3e8c793dfa2a67488765265ba7416e372197665d7f7b3eb37a841dc47078171ed329042963ca69dd28fbd9de35d164e40f22a65f636032c5b8c56e11c27c5bbfb1c57920e345a086bb190851e87a57880309b4b6f3de952a11d41f30453058dcf51b2c7a80b8deef30d33c5455455e1ae557585f235afa0f449665af51b91dbce76a7cc658977d16cdf40cf45dc229e041d40fd71a95f9bea8ca6beda5435017f0eb1ac25aa83d7a3d62224d803e015ff782a005e56d0b5ed00bc19b59b440acb6b9ca2c47ea8cae7c6e337c125bfa9057bc06d84fd643f0bd5e99cb2b00965f002282977e3b39d1886bc39735c578c945a6d82c5641e675b2be8fb3e4d7fc930880cc671f51f5a4134b1eb187d830de296cd6b835c72dc515c8a1de0db5b831cbb40ca099e4b4a247b0e2ff909f6389f7d161c14ba028ead66e34c37758716e6c33dc350b0bb9655d2340ab3e7a86f344e15cba4cdfc28a88067b5f5a542acb4c1ee04849b76070cba7cd940378d7e8d76252cccccf208b5a1891b1f77a6f3eb5c435e2920e08991588f523a3aeddbc9b076ebeb1a05883e281808ea4e9e4dd0da8023996f42e0a1df59ce09e8f5eb85488a15dd3719951261d729f59e3a453397a90f00a103e4d0d3001dd058a60f34c82e4839cf75d7b3b277411469cf35417a9853d887eb0609011c987675375cbb29211ff526a234e46263a1f0600cd89fd885a3d94d305737fadd2936480d5d5bdf35d7918d20facf0548b5787b62e2fc9abb65ee882ea479f58e4b086cdc7713c9c5f80a800455874f6056ea548e51a89ecc7672781ad340e3b20be64239d9220cecf637ce7f75d9f09009f897f69c47fbd1f56e5b4274aefae6122a1c98b4c63b27b60c3886adbf5e86b3d0c1a97ab11dc8cb59735ac488633f7c7825b5f7e605b239942c4d4c05f8499b8a0fe6d8e82152751035226149cebd36808fc71e8e7c15ff6182c1e3fdf3c25e110f66c53d380032215b160ca246372c8e5b7fd8aab92dab44b052082e473e053962247475dc9493d1a190e2b70481cd1d36f7d34292680a0d3823d582bfbff6fcbb86b66b6cc546ca790e561b06974bb5d0760c40c9e8d3fab9f32d57f40492b47a52d8b8e881fa563a4818c1b23d19eb2824686eccf8406352b73a7a6382410b01c2cc794bf33debce1d1cec3378e3b341d122ac161191ea90ef75ff29def049661b6a612ed36efb5718b0aa9bdbb8777ba5e93305676551e13793d12918c6ed85afb570070531544782ab28bd7e8fcdd6fa48e7c739dd756c01f83b7bbf76f20f4cacbb2", &(0x7f0000001240)="2fa5fc2a31e49f2fd83226f1b170ded07431c6dcaf1a174a2ebc33c8bd06c70aa8ad799de9e7acd12859e8de43b6264dcff2353cbae3b615694354f5b34ee1746dc2539f360ada96830173dfe34fcc87fbdd739cf0acf0d6c1bab84c8add2b601794028c5a4ec7db9dfe2971c0ef582a28de41e10c7e2308cd9e025b9a3e9c8e9850e9ed4005801e4eb6a898790d730bbb"})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000001440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x48, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xd2}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0x13b, 0x0, 0x0, @uid=r2}]}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x3}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_WIPHY_SELF_MANAGED_REG={0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xf9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40)
setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001480)={{0xffffffffffff44e7}, {0x1, 0xf}}, &(0x7f00000014c0)={{0x1, 0x3}, {0x4, 0x5}})
r4 = creat$auto(&(0x7f0000001500)='./file0\x00', 0xae)
sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x50, 0x0, 0x200, 0xdf1, 0x25dfdbfd, {}, [@ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x43}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x6}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9da5}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x5}, @ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000090)
setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001680)={{0x9, 0x100000001}, {0x8, 0x3}}, &(0x7f00000016c0)={{0xe, 0x22a}, {0x3, 0xfffffffffffffffc}})
r5 = getsockopt$auto(r4, 0xffffffff, 0x3, &(0x7f0000001700)='\'-\x00', &(0x7f0000001740)=0x1)
getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000001780)={{0x1, 0x5}, {0xfffffffffffffff7, 0x76}})
sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001a40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001800)={0x1d8, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0xc8, 0x4, "976b465bcae06abb4fc74ce77f1064be1a33a62422357ee6499e8c906e85929fa220b35cc9f89ee97dc45d74217340c9eb4e512ab3a15027ae161286eaa7fb56e5cff2e19c2918689c02d473ae326b8ec26d7517f9efbc855b2e427a4fdbe8a186132c3ca677ac4969d52851e13fc2ca528e99719c9880db901bc1d342b72ce4c7a6e31b1d8c7edb56ddb4b58f7bf7d5d7f1a7f73abf038a3558b7f837034f3cd8ab343c658982d5a4a621912c05380874b38a130004c8d4480e6d9ce25b4804d073cf16"}, @SEG6_ATTR_SECRET={0x6f, 0x4, "191645c107b4ad868c0c004d932dcb087b5266a0672e43553255c770adfd02617cf3bcfc0a3f1f331a9d1e06389c39aa5d5ede6e037c45be5c24bb2c1aa0fd26b1122a93df8cbfadf517fb7372b048948ad614fb543f8473379b52e10df842db5c127b090732adb9bc0d26"}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb1e}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x5e, 0x4, "29222416e746736f7c0246dff36863cf754774c70bf3dae7ca3b1d21d115d05e4e6359b8aa403b601c3e80eb452bb3d9b6df56a09220aa7918d9ba4e4762078ff44d5d0b592587b50028c7ea4831facf6e7215b130b4fdaab1ef"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x42}, 0xc000)
io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000001a80)="cfc6489d670b5ae65f350dce4e22509c8a3aa6b5f1701b1ac3b4cded82b54de268a5410514e0c3799179b6567ec69d76fb1473b8b9b5200912776bd6bd360c64ff2f8a34d532f165cf0a0c250ce721942c8e187320ba1d399c954eacd1aa3f2bf4eb7822a391b7c358c49a831e8fe908ff24bfac54d979882c5b6411adfa4995168b9165ac76eac948b73d8556fc089c5999fe114e1ec18e6b72b227dd2accc993c67378c78d8f7b1aec2e2858cd13d9a9b13f9b63fef0830d157339d94a9903de5f669ef4a2a22ea8cb46c2faa0c7efcdd4310a02e5d91d4fecf64e9f", 0xb69d)
mbind$auto(0x94b, 0x1000, 0xa, &(0x7f0000001b80)=0x200, 0x5, 0xfff)
openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/cpu/1/cpuid\x00', 0x400002, 0x0)
read$auto_random_fops_random(r4, &(0x7f0000001c00)=""/71, 0x47)
setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000001c80)={{0x2, 0x62}, {0xe398, 0x3}}, &(0x7f0000001cc0)={{0x10000, 0x7}, {0xc, 0x8000}})
r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001d00)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0xe0002, 0x0)
ioctl$auto_TIOCMBIC(r5, 0x5417, &(0x7f0000001d40)="85f3e1bcb693f9ada2ca7a6a4a4934f4f37469006828bba8256c726a9ff6fa2e4e6cc492f1dbde6e84836d25998e7360546adb6ecc071103b2b63f0f365110ef36bc2d49a295aba9401a3b")
setitimer$auto(0x101, &(0x7f0000001dc0)={{0x3, 0xc}, {0x9, 0x43e}}, &(0x7f0000001e00)={{0x8001, 0x3}, {0x8, 0x1}})
r7 = fsopen$auto(&(0x7f0000001e40)=']\x00', 0x9)
getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000001e80)={{0x1bb, 0x5}, {0xfffffffffffffffe, 0x9}})
close_range$auto(r7, r7, 0x8)
ioctl$auto_SNDCTL_TMR_STOP(r5, 0x5403, &(0x7f0000001ec0)="604062f5662f8b4edcf7af2fde81e9a914b0d4d9f0743409c97c43c9704ee11a3979f1d7c0629a42b4a899e8bbb7c754f8c54a95f02b59949618518de1deede84c66f94e4b6686ab040ad1cf928c60f8ab9a72d79c0c240da037a156ae33237da93f325a8e8bb232917e51c18a26bc66dfe54c0f147a04d2303ed0d9b9684bcc8c7e0084ca6ac74d3a5e9e1f5a0f14f66881221b1dd805a42ce9725f4d04faf58cf26d8c34696e13901954e9210d084d70d5abf5b37562b6bd3d91976bf744917d88546828ede419a6fbdf81cff6df2f6c69a05fcf6c71d1bcc76dcdfd")
fsconfig$auto_FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001fc0)='\x00', &(0x7f0000002000)="ed6887be0dac7ece34f8ca523ca12637a08dbf6ee6a0f8c2fd65c1671a71c94cfe40dcddfe484606a9a9e14e679659895b91e96ffb5eea8350b9313117ed5da80e0ff2eb1a02c5c4d989ddeedc01d111160cf79176a48b91a2b2e5482287253d337a3fc92da2b7b3bdf93465ecdd5e3c142a19a1719c5c9dac2f329c7d40ca207180cf3663261a35bfc3710ca9299d7e4e386a90405abbb4b3db249a6e703e472160af9ee41751d590bf1752586b7a306bdf03f5b21f141cc8c0a27f0e7633a753417864f5f41b29355ad5e07e30104e176f79cddf61b0896438f9cfdc57cb05f7bf611f004a90666bdaa42428dd4d", r3)
read$auto_safesetid_gid_file_fops_securityfs(r4, &(0x7f0000002100)=""/206, 0xce)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4004080)

1.956828901s ago: executing program 3 (id=2540):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x56dc, 0x0, 0x1, 0x0, 0x10000000000001, 0xffff}, 0x5e}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid() (async)
r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async)
statx$auto(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x1000, 0x10000, &(0x7f00000002c0)={0x7, 0x4, 0x42, 0xe, 0xffffffffffffffff, 0x0, 0x1000, 0x1816, 0xa, 0x9, 0xfa8e, 0xfd1, {0x7, 0x9}, {0x4, 0xc001}, {0x8, 0x9}, {0xffffffffffffffff, 0x1}, 0x3, 0xfffffe01, 0x7fff, 0x9, 0x402, 0x7, 0x6, 0x68362be0, 0x2, 0x5, 0x6, 0x3, [0xd33, 0x0, 0x9, 0x8, 0x800004, 0x8, 0xb0, 0x849, 0x7ff]})
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x8000, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x42200, 0x0)
mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x800008000) (async)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async)
r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async)
ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000040) (async)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0)
writev$auto(r5, &(0x7f0000000140)={&(0x7f00000000c0), 0xabf}, 0x8000000000000001)
write$auto(r3, 0x0, 0x6) (async)
ioctl$auto(r2, 0x540b, r1) (async)
r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x64, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_CSUM={0x0, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_NONE={0xfffffffffffffc72, 0x0, "30e6bb72000ba01c82ebfb8dcd26362af33d0f213229633f4176b8"}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfe}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x851) (async)
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async)
bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7)

1.606280092s ago: executing program 3 (id=2541):
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)
close_range$auto(0xffffffffffffffff, 0x8, 0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
landlock_restrict_self$auto(0xffffffffffffffff, 0xc)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff)
r2 = socket(0xa, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x74c)
r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r0)
sendmsg$auto_GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x508000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400cced", @ANYRES16=r4, @ANYBLOB="20002cbd7000fbdbdf250100000006000600010100000600060006000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9)
mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000)
sendmsg$auto_HSR_C_GET_NODE_LIST(r3, 0x0, 0x20000800)
r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r1)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x25}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r6, 0x0, 0x840003, 0x40000000002e72)
recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
write$auto(0x3, 0x0, 0xffd8)

1.580460106s ago: executing program 1 (id=2542):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0)
writev$auto(r0, &(0x7f0000000100)={0x0, 0x7111}, 0x3)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
lseek$auto(0x3, 0x7fffffffffffffff, 0x3)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
r1 = bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x5852}, 0x18)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={<r2=>0x19, <r3=>0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8855}, 0x10)
prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x0, 0x3, r2, 0x101, 0x7)
sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40)
r5 = socket(0x11, 0x3, 0x2)
mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x7f)
getsockopt$auto(r5, 0x107, 0x12, 0x0, 0x0)
mount$auto(0x0, 0x0, &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r6, 0x1261, 0xfbff)

1.49898721s ago: executing program 5 (id=2543):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x1, 0x84)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000240)="f6e6812018deadf7e88f819e30236ce79200b01532f2ed0dff68130f", 0x1c)

1.263188348s ago: executing program 5 (id=2544):
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0xa, 0x5, 0x84) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) (async)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async)
r0 = open$dir(0x0, 0x10000, 0x6) (async)
r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
pwritev$auto(r0, 0x0, 0x2, 0xfffffffffffff274, 0x6) (async)
msgget$auto(0xc, 0x77d9) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000300)="276ebd6cbb1ac5364623272e23af2b50f2ebad835c9d7840f79ffa7504d577141a2c16c434925b3c00c8067f716ba2efac5afb4b91cfd18d70395257e05f5cc55b521c692e181ada3cd0ec7302f3056482f4d2b83137e26d61afb328d630eae031149e93129e9a2eae3bd896b0ecab0e3977252f1b7ec1c5dff9a156892c2f8678d15ea110ef4170893623e36fe44e1a8b134a0dec152e282b86f13962d639bd3649cd05a67c52b32dbb8fdd244cd0d783372ebdd79f83a87059240565ed14277260319a6730e35bd2db9ffee60a", 0x12, 0x0, 0x9, 0x0, 0x3, 0xb}, 0x800009}, 0x5, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
ioctl$auto_USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0xffffffff)
sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) (async, rerun: 32)
ioctl$auto(r0, 0x541b, 0x38) (async, rerun: 32)
syslog$auto(0x3, &(0x7f0000000400)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xea\xd1\xe1O[\xec\xe9\x80\xbe\xe7\xb8\xa0\x1bS\x9a\xadu\xd60\xa3\x02(\xe4\x1b!x\\f:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87\xa1\xea\xbb\xfb\x0e\x84HH\xdes~\xd3>O\xc4\v\x9b\xb7\xf2=\x95\xe3;,\x99\xca\xaa\xa0\xa2\xa9\xae\xc5\xean\x90\xbf\xe7Ha\xc4J\x184!h\xb2\x060\x1d\x8e\x9f\x13\xd9F#<\xc6\xad7\x8f^Z\xc4Q*\x93\xc4\xd8\xb1\"\xe1D(\xcf}\x9fNv\x9f,\xba\xa2\x86\xa1\x8df#%\x1c=\x99\xdc7\x80K\xa3}W\x17\x8be\x9e4t\x99dF\x96w\xe7\x8c\xfc\xba\x7fa\x04\xd1\xac\xe2\xa1\x96\xc2mz`\xcb\xcc\xff\x19O@E|\f^\xb12 =\xfd\x9a\bS\x87S\xf6\xda\xee\xd4\xf6\x1f\xa4\n\x90\xea>\xd5UK\"\xab\xce\x19@\\?{\x98\xe3j\xdd\xda\x8b\x13\xb5N\x13I\xc7\nO\x18\x7f\x8dI\xd5F\xe3\xf3\xd8\xe3\x9a^\xcb\xcb-\x06\xa8', 0x5) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
getdents$auto(r2, 0x0, 0xa2b0) (async, rerun: 32)
msync$auto(0x0, 0x2000000005, 0x6) (async, rerun: 32)
msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/dev_snmp6/virt_wifi0\x00', 0x103200, 0x0) (async)
prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
mprotect$auto(0x6, 0x1, 0x3) (async)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
close_range$auto(0x2, 0xa, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="3ce2b0cb5ff9de88709bd8dea32d96aa033e1858c2f7f650dcfeed3900e245ef7b1d13fd100bcd2256b5e020bdb1ed1088a85055d3eb2d774326d9f7a7d922cea717b0e55d2b4d33f57a98ef0dde0a809ce479137b25294cedab498d643bb211e1438c58866c6e69b1401c06567a6d7aa6a68ed936f5ccfa1d9a5248c9626c17ebcd9110503e5364dfb0ceec158e3006d8237a149f2d7d01d4fc5fb9ae4704f73b3d24bc5578b12c1308d48b73f5623c2065009935ef32472f503572c76b4e8c8ec2767e1864e79781a865176c01e59cb5ef0f6d36fc017898aefa53cfec00d04aa541a3776d8ebf868b1e132cdaf6b013ae9be7e0b7de42779da3c4df090b7d8137cdd2c64eb5b7a4e66d5be7e335258d1b9320c570a624be0246774e1be0baf53ff4ee8a4610f074f0e8ca882c2c26189a7a788677dc630e87ee419db88147015a08aac282e9d5e6612e049963eec6d9c22cd3ff1f65fef407add46ec8a1", @ANYRES64=r3], 0x1ac}, 0x1, 0x0, 0x0, 0xc8c0}, 0x0) (async, rerun: 32)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async, rerun: 32)
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x9, 0x0, 0x9, 0x1}, 0x3}, 0xc, 0x4008)

982.143016ms ago: executing program 5 (id=2545):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) (async)
socket(0x10, 0x2, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) (async)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1f9, 0x0) (async)
setsockopt$auto(0xffffffffffffffff, 0x11b, 0x9, 0xffffffffffffffff, 0x18) (async)
getsockopt$auto_SO_GET_FILTER(0xffffffffffffffff, 0x8, 0x1a, &(0x7f0000000000)='{-/{#-+\x00', &(0x7f0000000040)=0x100)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x11, 0xfffffffe, 0x6, 0x30000000, 0x9, 0xffffffffffffffff, [0x0, 0x0, 0xffff], {0x6, 0x10001, 0x20000b, 0x2e1, 0x504, 0x1, 0x101, 0x6, 0x5}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x440, 0x76c5, 0x8, 0x8000000000040000}})
getpid()
ioctl$auto(0xffffffffffffffff, 0x890c, 0x1)
r0 = socket(0xa, 0x1, 0x8000)
syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r0) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x0, 0x5, 0x0, 0x4, 0x0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) (async)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)
socket(0x2c, 0x3, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async)
r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/self/syscall\x00', 0x40002, 0x0)
read$auto_proc_single_file_operations_base(r1, &(0x7f00000001c0)=""/163, 0xa3) (async)
r2 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)

644.32462ms ago: executing program 3 (id=2546):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000)
mount$auto(0x0, 0x0, 0x0, 0xf, 0x0)
process_vm_readv$auto(0x0, 0x0, 0x5, 0x0, 0x6, 0x0)
madvise$auto(0x1, 0xfffffffffffffffc, 0x10002)
ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x119400, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x167800, 0x0)
close_range$auto(0x2, 0xa, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x3, 0x3a)
fanotify_init$auto(0xfffffff7, 0x2)
pipe$auto(0x0)
dup2$auto(0x5, 0x4)
splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9)
write$auto(0x6, 0x0, 0x100000001)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_CREATE_VM(r0, 0x8004ae98, 0x0)
socket(0xa, 0x1, 0x0)
r2 = fanotify_init$auto(0x5, 0x2000000000002)
r3 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409)
fanotify_mark$auto(r2, 0x60, 0x0, r3, 0x0)
preadv$auto(r3, &(0x7f0000000080)={0x0}, 0x6916, 0x10, 0x6)
mknod$auto(0x0, 0xc3, 0xfffffffa)
execve$auto(0x0, 0x0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)

463.136887ms ago: executing program 1 (id=2547):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x700, 0x8a4d, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x8005}, 0x4f4)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x4, 0x8000003, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = io_uring_setup$auto(0x6, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(r3, 0x2, r2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
bpf$auto(0x0, &(0x7f00000001c0)=@test={r1, 0x5, 0x7, 0x1, 0x200026, 0xa, 0x0, 0x4bab, 0x5, 0x2, 0x2, 0xfffffffffffffff7, 0x80000001, 0x40000000}, 0x27)
mmap$auto(0x0, 0x5, 0xdf, 0x19, 0x7, 0x28000)
socketpair$auto(0x1e, 0x5, 0x200000, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, 0x0, 0x55)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0)
sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20050001}, 0x80)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x400008, 0xede5, 0x10, 0x2, 0x9)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x0)
r4 = socket(0x2b, 0x5, 0x0)
mprotect$auto(0x110c238000, 0x1, 0x3)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
ioctl$auto_FIDEDUPERANGE(r4, 0xc0189436, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0xe, 0x4, 0x5, 0x2000000000007)

286.206221ms ago: executing program 5 (id=2548):
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/syscall\x00', 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty50\x00', 0x101e81, 0x0)
r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
r1 = ioctl$auto_SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000100)=0x7)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2c104, 0x0)
ioctl$auto(0x3, 0x5403, r3)
write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffeffa}, 0xdd7a)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd3/queue/read_ahead_kb\x00', 0x0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040))
ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0x5, &(0x7f0000000380)="6f6aa0f673a29964978314197d17b06da2d660051ea92d5ba5564141e6dd65012fd630215fc8d0c2d389e3f1ac8bd63eb5b89dc295c9f21134df25de753d15da72fdc93e39e299297a037750b6b853339107b4ee0c45624eb3cfb526d9b5a01eb534f7bbb3a022b098f0b673043d634d051f727e844d8df99355241e716781fdd65678afc1a64375e133440910161f35529705c301beb93bc21200e3f9d602bdad6666f7acfeaba15632e65d2aa84beb56597630ee5ba69fba697c5d655d82901f1fdf6c29da620840cba4fe58290b0f9068f3dbc58fb54e8c20f72c7b5e8dfab25a3c48a1c0921a5af42f04bc2420dd")
ioctl$auto_proc_reg_file_ops_compat_inode(r1, 0x5, &(0x7f0000000680)="17a0aa438550060a9b9504c16b2cca46e3b5ded6b57c4ba9076efd82231f42a04e64671fa3689107f09e4b0169258926c619e5943d78b767932376ae280e59074ba080568d72fdd4a5e771720a2924331387630a13e490c731d0875d57628651bf070235f5b378980a5fbf3a3c25dd4c5bb5ee68c0287a34ac8ff5f9d4d08b4b06daf9acf38f621f57f1e41712ac08ae53cd7ac73b497ef8024d702a69c8780f8dc0074094e75eba27da8d566f79376c52c217ff7a79c96bb2d58251f915a85912e9d70398d38a35cbfb6560033eef97")
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x2c, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000)
r5 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r5, 0x29, 0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

206.343489ms ago: executing program 3 (id=2549):
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec6\x00', 0x80001, 0x0)
ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0x6, 0x8, 0x1, 0x10000, 0x7ffff7fb, "66000800000000000000001100", 0xb, 0x5, 0x9, 0x1, 0x2, 0x4, 0x3})

0s ago: executing program 1 (id=2550):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x400000008000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0)
ioctl$auto_OSS_ALSAEMULVER(r1, 0x40086602, &(0x7f0000000100))
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r2 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0)
open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154)
execveat$auto(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r3 = socket(0x15, 0x5, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)

kernel console output (not intermixed with test programs):

ci_rx_wq": -EINTR
[  477.813577][   T29] audit: type=1800 audit(1843104608.530:19): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1226" name="discovery_nqn" dev="configfs" ino=45194 res=0 errno=0
[  479.024981][T12230] Process accounting resumed
[  479.089481][T12241] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1234'.
[  479.190118][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'.
[  479.316107][T12238] bond0: (slave bond_slave_0): Releasing backup interface
[  481.037397][T12267] can0: slcan on pty155.
[  481.529710][T12269] can0 (unregistered): slcan off pty155.
[  481.559780][T12266] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1242'.
[  481.866161][T12285] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1243'.
[  482.543237][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1244'.
[  482.558033][T12290] i2c i2c-0: new_device: Can't parse I2C address
[  482.607041][T12288] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  483.153032][ T5629] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  483.166572][T12302] program syz.3.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  486.001070][T12319] random: crng reseeded on system resumption
[  490.361338][ T5629] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  490.364636][T12428] program syz.3.1266 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  491.613144][T12464] random: crng reseeded on system resumption
[  492.087744][ T5629] Bluetooth: hci4: unexpected event 0x30 length: 10 > 3
[  493.295722][T12511] binder: 12510:12511 unknown command 1936094318
[  493.329615][T12515] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1284'.
[  493.362041][T12511] binder: 12510:12511 ioctl c0306201 0 returned -22
[  494.873872][T12545] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„
[  495.299748][T12557] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1294'.
[  495.328611][T12558] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1293'.
[  496.519414][T12569] FAULT_INJECTION: forcing a failure.
[  496.519414][T12569] name failslab, interval 1, probability 0, space 0, times 0
[  496.555001][T12569] CPU: 0 UID: 0 PID: 12569 Comm: syz.3.1297 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  496.555048][T12569] Tainted: [L]=SOFTLOCKUP
[  496.555057][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  496.555073][T12569] Call Trace:
[  496.555082][T12569]  <TASK>
[  496.555092][T12569]  dump_stack_lvl+0x100/0x190
[  496.555135][T12569]  should_fail_ex.cold+0x5/0xa
[  496.555172][T12569]  should_failslab+0xc2/0x120
[  496.555211][T12569]  __kmalloc_noprof+0xfc/0x820
[  496.555243][T12569]  ? rcu_is_watching+0x12/0xc0
[  496.555277][T12569]  ? tomoyo_realpath_from_path+0xb6/0x690
[  496.555327][T12569]  tomoyo_realpath_from_path+0xb6/0x690
[  496.555380][T12569]  tomoyo_path_number_perm+0x23c/0x580
[  496.555415][T12569]  ? tomoyo_path_number_perm+0x22e/0x580
[  496.555454][T12569]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  496.555541][T12569]  ? find_held_lock+0x2b/0x80
[  496.555577][T12569]  ? __fget_files+0x215/0x3d0
[  496.555604][T12569]  ? hook_file_ioctl_common+0x140/0x440
[  496.555640][T12569]  ? __fget_files+0x215/0x3d0
[  496.555674][T12569]  ? __fget_files+0x21f/0x3d0
[  496.555709][T12569]  security_file_ioctl+0xd3/0x230
[  496.555746][T12569]  __x64_sys_ioctl+0xb7/0x210
[  496.555792][T12569]  do_syscall_64+0x115/0x840
[  496.555820][T12569]  ? clear_bhb_loop+0x40/0x90
[  496.555856][T12569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.555886][T12569] RIP: 0033:0x7ff643b9de59
[  496.555912][T12569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  496.555938][T12569] RSP: 002b:00007ff644aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  496.555968][T12569] RAX: ffffffffffffffda RBX: 00007ff643e25fa0 RCX: 00007ff643b9de59
[  496.555987][T12569] RDX: 0000200000000000 RSI: 00000000c0386105 RDI: 0000000000000003
[  496.556005][T12569] RBP: 00007ff644aa4090 R08: 0000000000000000 R09: 0000000000000000
[  496.556022][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.556039][T12569] R13: 00007ff643e26038 R14: 00007ff643e25fa0 R15: 00007ffe820560a8
[  496.556080][T12569]  </TASK>
[  496.556092][T12569] ERROR: Out of memory at tomoyo_realpath_from_path.
[  499.821985][ T8645] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 7 with max blocks 5 with error 117
[  499.849529][ T8645] EXT4-fs (sda1): This should not happen!! Data will be lost
[  499.849529][ T8645] 
[  500.340589][T12640] openvswitch: netlink: IPv4 tunnel dst address is zero
[  500.490341][T12643] FAULT_INJECTION: forcing a failure.
[  500.490341][T12643] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  500.536600][T12643] CPU: 0 UID: 0 PID: 12643 Comm: syz.1.1316 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  500.536653][T12643] Tainted: [L]=SOFTLOCKUP
[  500.536664][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  500.536682][T12643] Call Trace:
[  500.536693][T12643]  <TASK>
[  500.536704][T12643]  dump_stack_lvl+0x100/0x190
[  500.536754][T12643]  should_fail_ex.cold+0x5/0xa
[  500.536785][T12643]  ? prepare_alloc_pages+0x16d/0x5f0
[  500.536834][T12643]  should_fail_alloc_page+0xeb/0x140
[  500.536881][T12643]  prepare_alloc_pages+0x1f0/0x5f0
[  500.536932][T12643]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  500.536973][T12643]  ? stack_trace_save+0x8e/0xc0
[  500.537016][T12643]  ? __pfx_stack_trace_save+0x10/0x10
[  500.537060][T12643]  ? stack_depot_save_flags+0x27/0x9d0
[  500.537107][T12643]  ? drop_sysctl_table+0x434/0x5f0
[  500.537143][T12643]  ? kasan_save_stack+0x3f/0x50
[  500.537180][T12643]  ? kasan_save_stack+0x30/0x50
[  500.537216][T12643]  ? kasan_save_track+0x14/0x30
[  500.537253][T12643]  ? __kasan_kmalloc+0xaa/0xb0
[  500.537289][T12643]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  500.537322][T12643]  ? unshare_nsproxy_namespaces+0xf2/0x220
[  500.537355][T12643]  ? __x64_sys_unshare+0x31/0x40
[  500.537393][T12643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.537468][T12643]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  500.537520][T12643]  ? policy_nodemask+0xed/0x4f0
[  500.537570][T12643]  alloc_pages_mpol+0x1fb/0x540
[  500.537620][T12643]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  500.537671][T12643]  ? __kmalloc_cache_noprof+0x2e5/0x6c0
[  500.537711][T12643]  alloc_pages_noprof+0x1a/0x160
[  500.537743][T12643]  timens_vdso_alloc_vvar_page+0x1d/0x70
[  500.537795][T12643]  copy_time_ns+0x10b/0x790
[  500.537844][T12643]  create_new_namespaces+0x48a/0xac0
[  500.537888][T12643]  unshare_nsproxy_namespaces+0xf2/0x220
[  500.537926][T12643]  ksys_unshare+0x438/0xab0
[  500.537969][T12643]  ? __pfx_ksys_unshare+0x10/0x10
[  500.538026][T12643]  __x64_sys_unshare+0x31/0x40
[  500.538066][T12643]  do_syscall_64+0x115/0x840
[  500.538096][T12643]  ? clear_bhb_loop+0x40/0x90
[  500.538134][T12643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.538167][T12643] RIP: 0033:0x7fd35519de59
[  500.538196][T12643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.538223][T12643] RSP: 002b:00007fd3560b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  500.538252][T12643] RAX: ffffffffffffffda RBX: 00007fd355426180 RCX: 00007fd35519de59
[  500.538270][T12643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
[  500.538287][T12643] RBP: 00007fd355233e6f R08: 0000000000000000 R09: 0000000000000000
[  500.538305][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.538321][T12643] R13: 00007fd355426218 R14: 00007fd355426180 R15: 00007ffcf98358c8
[  500.538359][T12643]  </TASK>
[  500.698248][T12639] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6179] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12639]
[  500.870658][T12647] random: crng reseeded on system resumption
[  501.035579][T12646] hub 1-0:1.0: USB hub found
[  501.065127][T12646] hub 1-0:1.0: 1 port detected
[  501.242566][T12653] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6179] was attempted by ""[12653]
[  501.937427][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  501.954553][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  502.704725][T12664] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by ""[12664]
[  502.769004][T12667] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  502.869337][   T29] audit: type=1400 audit(1843105656.560:20): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12662 comm="syz.3.1321"
[  505.352401][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1334'.
[  505.775679][  T187] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  506.116187][ T5629] Bluetooth: hci0: unexpected event 0x30 length: 10 > 3
[  506.122658][T12753] program syz.0.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  506.583587][T12761] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1343'.
[  506.656652][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'.
[  506.700656][T12719] kexec: Could not allocate control_code_buffer
[  507.076951][T12762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'.
[  508.877374][   T29] audit: type=1800 audit(1843106685.579:21): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1350" name="file0" dev="tmpfs" ino=1954 res=0 errno=0
[  513.518130][T12892] netlink: 318 bytes leftover after parsing attributes in process `syz.0.1363'.
[  514.035546][T12904] futex_wake_op: syz.1.1369 tries to shift op by -2048; fix this program
[  514.078818][T12904] futex_wake_op: syz.1.1369 tries to shift op by -2048; fix this program
[  514.125639][T12907] 0x000000000001-0x000000020000 : ""
[  514.218773][T12907] ftl_cs: FTL header corrupt!
[  514.698796][T12904] ubi1: attaching mtd0
[  514.796259][T12904] ubi1 error: ubi_add_to_av: two LEBs with same sequence number 2
[  514.836860][T12904] eraseblock attaching information dump:
[  514.847073][T12904] 	ec       1
[  514.857229][T12904] 	pnum     1
[  514.860632][T12904] 	lnum     1
[  514.864164][T12904] 	scrub    0
[  514.872395][T12904] 	sqnum    2
[  514.879379][T12904] Volume identifier header dump:
[  514.891756][T12922] random: crng reseeded on system resumption
[  514.898025][T12904] 	magic     55424921
[  514.909610][T12904] 	version   1
[  514.937731][T12904] 	vol_type  1
[  514.949744][T12904] 	copy_flag 0
[  514.965539][T12904] 	compat    5
[  514.974781][T12918] NFSD: Failed to start, no listeners configured.
[  514.976137][T12904] 	vol_id    2147479551
[  514.992468][T12904] 	lnum      1
[  514.999307][T12904] 	data_size 0
[  515.007716][T12904] 	used_ebs  0
[  515.016603][T12904] 	data_pad  0
[  515.027363][T12904] 	sqnum     2
[  515.036683][T12904] 	hdr_crc   7beff9af
[  515.052821][T12904] Volume identifier header hexdump:
[  515.273220][T12904] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  515.591030][T12931] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1374'.
[  517.350793][T12958] smc: net device dummy0 applied user defined pnetid DUMMY0
[  518.500324][T12863] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 3575 with max blocks 7 with error 117
[  518.539311][T12863] EXT4-fs (sda1): This should not happen!! Data will be lost
[  518.539311][T12863] 
[  519.149321][T12992] openvswitch: HfR: Dropping previously announced user features
[  519.587781][T12799] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  519.590857][T13002] program syz.1.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  520.217855][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'.
[  520.376105][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'.
[  520.497991][T13025] HfR: left promiscuous mode
[  520.517562][T12799] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  521.798973][T13028] Bluetooth: hci0: unexpected event 0x30 length: 10 > 3
[  521.799976][T13058] program syz.0.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  525.196686][T13028] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  525.200593][T13112] program syz.3.1413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  525.612047][T13028] Bluetooth: hci4: unexpected event for opcode 0x7c89
[  525.631662][T13116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'.
[  526.729630][T13131] random: crng reseeded on system resumption
[  527.708012][T13153] random: crng reseeded on system resumption
[  527.979315][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'.
[  530.165840][T13198] random: crng reseeded on system resumption
[  530.209429][   T29] audit: type=1800 audit(1843104533.512:22): pid=13198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1433" name="members" dev="configfs" ino=50629 res=0 errno=0
[  531.178142][T13231] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1442'.
[  534.392312][T13294] rnbd_client L202: map_device: Unknown parameter or missing value '0�="­/�'
[  535.735178][T13323] : Can't lookup blockdev
[  536.414398][T13339] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1467'.
[  538.047570][T13369] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1474'.
[  538.087832][T13028] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  538.091276][T13381] program syz.3.1478 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  542.415315][T13415] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  543.928993][T13468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1493'.
[  544.235853][T13468] team_slave_0 (unregistering): left promiscuous mode
[  544.272773][T13468] team_slave_0 (unregistering): left allmulticast mode
[  544.327246][T13468] team0: Port device team_slave_0 removed
[  545.746489][T13028] Bluetooth: hci4: unexpected event 0x30 length: 10 > 3
[  546.131443][T13492] FAULT_INJECTION: forcing a failure.
[  546.131443][T13492] name fail_futex, interval 1, probability 0, space 0, times 0
[  546.163003][T13485] can: request_module (can-proto-0) failed.
[  546.214500][T13492] CPU: 1 UID: 0 PID: 13492 Comm: syz.1.1499 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  546.214551][T13492] Tainted: [L]=SOFTLOCKUP
[  546.214561][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  546.214580][T13492] Call Trace:
[  546.214589][T13492]  <TASK>
[  546.214601][T13492]  dump_stack_lvl+0x100/0x190
[  546.214652][T13492]  should_fail_ex.cold+0x5/0xa
[  546.214693][T13492]  get_futex_key+0x1d2/0x14f0
[  546.214732][T13492]  ? __pfx_get_futex_key+0x10/0x10
[  546.214777][T13492]  futex_wait_setup+0x91/0x540
[  546.214829][T13492]  __futex_wait+0x19f/0x300
[  546.214874][T13492]  ? __pfx___futex_wait+0x10/0x10
[  546.214913][T13492]  ? futex_hash+0x311/0x400
[  546.214946][T13492]  ? __pfx_futex_wake_mark+0x10/0x10
[  546.214994][T13492]  ? __pfx_futex_hash+0x10/0x10
[  546.215020][T13492]  ? find_held_lock+0x2b/0x80
[  546.215057][T13492]  ? __fget_files+0x215/0x3d0
[  546.215086][T13492]  ? __fget_files+0x215/0x3d0
[  546.215121][T13492]  futex_wait+0xe6/0x370
[  546.215162][T13492]  ? __pfx_futex_wait+0x10/0x10
[  546.215214][T13492]  ? __pfx___sys_sendmmsg+0x10/0x10
[  546.215262][T13492]  do_futex+0x265/0x440
[  546.215303][T13492]  ? __pfx_do_futex+0x10/0x10
[  546.215334][T13492]  ? __pfx_do_sys_openat2+0x10/0x10
[  546.215385][T13492]  __x64_sys_futex+0x34f/0x4d0
[  546.215432][T13492]  ? __x64_sys_openat+0x12d/0x210
[  546.215474][T13492]  ? __pfx___x64_sys_futex+0x10/0x10
[  546.215525][T13492]  do_syscall_64+0x115/0x840
[  546.215556][T13492]  ? clear_bhb_loop+0x40/0x90
[  546.215595][T13492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.215626][T13492] RIP: 0033:0x7fd35519de59
[  546.215652][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.215679][T13492] RSP: 002b:00007fd3560960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  546.215709][T13492] RAX: ffffffffffffffda RBX: 00007fd355426278 RCX: 00007fd35519de59
[  546.215729][T13492] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd355426278
[  546.215746][T13492] RBP: 00007fd355426270 R08: 0000000000000000 R09: 0000000000000000
[  546.215765][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  546.215783][T13492] R13: 00007fd355426308 R14: 00007ffcf98357e0 R15: 00007ffcf98358c8
[  546.215823][T13492]  </TASK>
[  547.259809][T13501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1502'.
[  549.079576][T12786] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 3447 with max blocks 135 with error 117
[  549.100377][T12786] EXT4-fs (sda1): This should not happen!! Data will be lost
[  549.100377][T12786] 
[  552.507598][T13559] kexec: Could not allocate control_code_buffer
[  552.945610][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1514'.
[  554.346512][T13591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1521'.
[  555.234073][T13612] FAULT_INJECTION: forcing a failure.
[  555.234073][T13612] name failslab, interval 1, probability 0, space 0, times 0
[  555.248018][T13612] CPU: 0 UID: 0 PID: 13612 Comm: syz.1.1526 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  555.248067][T13612] Tainted: [L]=SOFTLOCKUP
[  555.248077][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  555.248096][T13612] Call Trace:
[  555.248106][T13612]  <TASK>
[  555.248118][T13612]  dump_stack_lvl+0x100/0x190
[  555.248165][T13612]  should_fail_ex.cold+0x5/0xa
[  555.248204][T13612]  should_failslab+0xc2/0x120
[  555.248248][T13612]  __kmalloc_noprof+0xfc/0x820
[  555.248286][T13612]  ? __register_sysctl_table+0xac/0x1650
[  555.248325][T13612]  __register_sysctl_table+0xac/0x1650
[  555.248355][T13612]  ? is_module_address+0x5f/0xf0
[  555.248392][T13612]  ? __pfx___register_sysctl_table+0x10/0x10
[  555.248423][T13612]  ? is_module_address+0x69/0xf0
[  555.248451][T13612]  ? register_net_sysctl_sz+0x222/0x430
[  555.248582][T13612]  mpls_dev_sysctl_register+0x185/0x2a0
[  555.248613][T13612]  ? pcpu_alloc_noprof+0xde1/0x1ca0
[  555.248650][T13612]  ? __pfx_mpls_dev_sysctl_register+0x10/0x10
[  555.248697][T13612]  mpls_dev_notify+0x365/0x920
[  555.248732][T13612]  notifier_call_chain+0x99/0x3f0
[  555.248791][T13612]  call_netdevice_notifiers_info+0xbe/0x110
[  555.248839][T13612]  register_netdevice+0x1998/0x25a0
[  555.248921][T13612]  ? __pfx_register_netdevice+0x10/0x10
[  555.248960][T13612]  ? net_generic+0xea/0x2a0
[  555.249060][T13612]  register_netdev+0x34/0x50
[  555.249098][T13612]  vti6_init_net+0x2ff/0x480
[  555.249145][T13612]  ? __pfx_vti6_init_net+0x10/0x10
[  555.249191][T13612]  ops_init+0x1e2/0x5f0
[  555.249234][T13612]  setup_net+0x118/0x3a0
[  555.249272][T13612]  ? __pfx_setup_net+0x10/0x10
[  555.249312][T13612]  ? mutex_init_lockdep+0xf1/0x120
[  555.249352][T13612]  copy_net_ns+0x46f/0x7c0
[  555.249398][T13612]  create_new_namespaces+0x3ea/0xac0
[  555.249443][T13612]  unshare_nsproxy_namespaces+0xf2/0x220
[  555.249492][T13612]  ksys_unshare+0x438/0xab0
[  555.249535][T13612]  ? __pfx_ksys_unshare+0x10/0x10
[  555.249589][T13612]  __x64_sys_unshare+0x31/0x40
[  555.249625][T13612]  do_syscall_64+0x115/0x840
[  555.249652][T13612]  ? clear_bhb_loop+0x40/0x90
[  555.249693][T13612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.249725][T13612] RIP: 0033:0x7fd35519de59
[  555.249753][T13612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.249783][T13612] RSP: 002b:00007fd3560f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  555.249815][T13612] RAX: ffffffffffffffda RBX: 00007fd355425fa0 RCX: 00007fd35519de59
[  555.249836][T13612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  555.249855][T13612] RBP: 00007fd355233e6f R08: 0000000000000000 R09: 0000000000000000
[  555.249874][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  555.249892][T13612] R13: 00007fd355426038 R14: 00007fd355425fa0 R15: 00007ffcf98358c8
[  555.249936][T13612]  </TASK>
[  557.404178][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1533'.
[  557.915207][T13028] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  557.916712][T13656] program syz.3.1537 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  559.120886][T13675] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  559.149035][T13675] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  559.207207][T13675] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  559.372569][T13682] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum
[  559.613125][T13685] ubi0: attaching mtd0
[  559.762305][T13685] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2
[  559.849898][T13685] eraseblock attaching information dump:
[  559.860183][T13685] 	ec       1
[  559.866704][T13685] 	pnum     1
[  559.873659][T13685] 	lnum     1
[  559.877119][T13685] 	scrub    0
[  559.885216][T13685] 	sqnum    2
[  559.890292][T13685] Volume identifier header dump:
[  559.896808][T13685] 	magic     55424921
[  559.901817][T13685] 	version   1
[  559.911556][T13685] 	vol_type  1
[  559.915995][T13685] 	copy_flag 0
[  559.925661][T13685] 	compat    5
[  559.933148][T13685] 	vol_id    2147479551
[  559.939052][T13685] 	lnum      1
[  559.942615][T13685] 	data_size 0
[  559.946094][T13685] 	used_ebs  0
[  559.949655][T13685] 	data_pad  0
[  559.954139][T13685] 	sqnum     2
[  559.957757][T13685] 	hdr_crc   7beff9af
[  559.962357][T13685] Volume identifier header hexdump:
[  560.105145][T12777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  560.126209][T12777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  560.145245][T12777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  560.156472][T12777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  560.166677][T12777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  560.556120][T13685] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  561.324206][T13723] random: crng reseeded on system resumption
[  561.365711][T13721] Restarting kernel threads ...
[  561.371935][T13721] Done restarting kernel threads.
[  562.271523][T12777] Bluetooth: hci2: command tx timeout
[  562.613144][T13737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1553'.
[  563.394149][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  563.396880][T13756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1555'.
[  563.400698][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  563.574338][T13695] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.600975][T13695] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.628627][T13695] bridge_slave_0: entered allmulticast mode
[  563.663540][T13695] bridge_slave_0: entered promiscuous mode
[  563.685374][T13695] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.702857][T13695] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.720418][T13695] bridge_slave_1: entered allmulticast mode
[  563.737429][T13695] bridge_slave_1: entered promiscuous mode
[  563.823337][T13763] random: crng reseeded on system resumption
[  563.962586][T13695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  564.022640][T13695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  564.102099][T13695] team0: Port device team_slave_0 added
[  564.124308][T13695] team0: Port device team_slave_1 added
[  564.204544][T13695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.213712][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  564.255343][T13695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  564.290190][T13695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  564.323658][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  564.366047][T12777] Bluetooth: hci2: command tx timeout
[  564.379896][T13695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  564.480072][T13695] hsr_slave_0: entered promiscuous mode
[  564.487533][T13695] hsr_slave_1: entered promiscuous mode
[  564.497277][T13695] debugfs: 'hsr0' already exists in 'hsr'
[  564.504997][T13695] Cannot create hsr debugfs directory
[  565.280505][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1559'.
[  566.132962][T12777] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  566.136401][T13794] program syz.3.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  566.431841][T12777] Bluetooth: hci2: command tx timeout
[  566.544432][T13695] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  566.567989][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  566.576499][T13695] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  566.592756][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  566.614570][T13695] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  566.679520][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  566.881201][T13695] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  566.917523][T13695] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  567.485691][T13695] 8021q: adding VLAN 0 to HW filter on device bond0
[  567.567058][T13695] 8021q: adding VLAN 0 to HW filter on device team0
[  567.638392][T12869] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.645674][T12869] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.718818][T12872] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.726111][T12872] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.513984][T12777] Bluetooth: hci2: command tx timeout
[  570.050712][T13695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  570.575821][T13888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'.
[  570.677617][T13882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1578'.
[  571.022511][T13892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1582'.
[  571.198204][T13695] veth0_vlan: entered promiscuous mode
[  571.237195][T13695] veth1_vlan: entered promiscuous mode
[  571.339380][T13695] veth0_macvtap: entered promiscuous mode
[  571.367940][T13695] veth1_macvtap: entered promiscuous mode
[  571.405713][T13695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.438675][T13695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.526985][T12790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.573474][T12790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  571.608207][T12790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  571.663185][T12790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  571.935496][T12816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.962326][T12816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.189242][T12868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.210508][T12868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.112500][T13937] Device name cannot be null; rc = [-22]
[  574.178879][T12777] Bluetooth: hci3: unexpected event for opcode 0x7c89
[  574.368148][T13969] serio: Serial port pty37
[  575.172806][T13990] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask'
[  575.204766][T13981] FAULT_INJECTION: forcing a failure.
[  575.204766][T13981] name failslab, interval 1, probability 0, space 0, times 0
[  575.245350][T13981] CPU: 0 UID: 0 PID: 13981 Comm: syz.1.1601 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  575.245403][T13981] Tainted: [L]=SOFTLOCKUP
[  575.245415][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  575.245438][T13981] Call Trace:
[  575.245448][T13981]  <TASK>
[  575.245461][T13981]  dump_stack_lvl+0x100/0x190
[  575.245507][T13981]  should_fail_ex.cold+0x5/0xa
[  575.245548][T13981]  should_failslab+0xc2/0x120
[  575.245593][T13981]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  575.245636][T13981]  ? __d_alloc+0x35/0xa50
[  575.245677][T13981]  __d_alloc+0x35/0xa50
[  575.245717][T13981]  d_alloc_pseudo+0x1c/0xc0
[  575.245760][T13981]  alloc_file_pseudo+0x118/0x290
[  575.245803][T13981]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  575.245846][T13981]  ? alloc_fd+0x471/0x7a0
[  575.245884][T13981]  sock_alloc_file+0x50/0x210
[  575.245926][T13981]  __sys_socket+0x1c0/0x260
[  575.245976][T13981]  ? __pfx___sys_socket+0x10/0x10
[  575.246029][T13981]  __x64_sys_socket+0x72/0xb0
[  575.246077][T13981]  ? lockdep_hardirqs_on+0x78/0x100
[  575.246128][T13981]  do_syscall_64+0x115/0x840
[  575.246157][T13981]  ? clear_bhb_loop+0x40/0x90
[  575.246196][T13981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.246229][T13981] RIP: 0033:0x7fd35519de59
[  575.246255][T13981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.246286][T13981] RSP: 002b:00007fd3560f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  575.246327][T13981] RAX: ffffffffffffffda RBX: 00007fd355425fa0 RCX: 00007fd35519de59
[  575.246349][T13981] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002
[  575.246368][T13981] RBP: 00007fd355233e6f R08: 0000000000000000 R09: 0000000000000000
[  575.246387][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  575.246406][T13981] R13: 00007fd355426038 R14: 00007fd355425fa0 R15: 00007ffcf98358c8
[  575.246448][T13981]  </TASK>
[  575.311546][T13990] CPU: 1 UID: 0 PID: 13990 Comm: syz.5.1603 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  575.311668][T13990] Tainted: [L]=SOFTLOCKUP
[  575.311678][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  575.311694][T13990] Call Trace:
[  575.311704][T13990]  <TASK>
[  575.311717][T13990]  dump_stack_lvl+0x100/0x190
[  575.311763][T13990]  sysfs_warn_dup.cold+0x1c/0x28
[  575.311804][T13990]  sysfs_do_create_link_sd+0x113/0x140
[  575.311849][T13990]  sysfs_create_link+0x61/0xc0
[  575.311887][T13990]  device_add+0x675/0x1970
[  575.312032][T13990]  ? __pfx_device_add+0x10/0x10
[  575.312071][T13990]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  575.312117][T13990]  ? ieee80211_set_bitrate_flags+0x41b/0x6b0
[  575.312188][T13990]  wiphy_register+0x2151/0x3110
[  575.312257][T13990]  ? __pfx_wiphy_register+0x10/0x10
[  575.312295][T13990]  ? __asan_memset+0x23/0x50
[  575.312325][T13990]  ? minstrel_ht_alloc+0x5e6/0x7f0
[  575.312399][T13990]  ieee80211_register_hw+0x3053/0x4580
[  575.312479][T13990]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  575.312508][T13990]  ? __pfx___debug_object_init+0x10/0x10
[  575.312565][T13990]  ? find_held_lock+0x2b/0x80
[  575.312603][T13990]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  575.312642][T13990]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  575.312669][T13990]  ? __hrtimer_setup+0x208/0x330
[  575.312705][T13990]  mac80211_hwsim_new_radio+0x2acc/0x64c0
[  575.312767][T13990]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  575.312804][T13990]  ? __asan_memcpy+0x3c/0x60
[  575.312837][T13990]  hwsim_new_radio_nl+0xc6b/0x13f0
[  575.312879][T13990]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  575.312922][T13990]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0
[  575.312998][T13990]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  575.313038][T13990]  genl_family_rcv_msg_doit+0x214/0x300
[  575.313074][T13990]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  575.313105][T13990]  ? genl_get_cmd+0x3e7/0x760
[  575.313144][T13990]  ? bpf_lsm_capable+0x9/0x10
[  575.313173][T13990]  ? security_capable+0x80/0x260
[  575.313204][T13990]  ? ns_capable+0xd2/0xf0
[  575.313237][T13990]  genl_rcv_msg+0x560/0x800
[  575.313271][T13990]  ? __pfx_genl_rcv_msg+0x10/0x10
[  575.313301][T13990]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  575.313348][T13990]  netlink_rcv_skb+0x159/0x420
[  575.313388][T13990]  ? __pfx_genl_rcv_msg+0x10/0x10
[  575.313420][T13990]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  575.313478][T13990]  ? netlink_deliver_tap+0x1ae/0xcc0
[  575.313523][T13990]  genl_rcv+0x28/0x40
[  575.313548][T13990]  netlink_unicast+0x585/0x850
[  575.313612][T13990]  ? __pfx_netlink_unicast+0x10/0x10
[  575.313667][T13990]  netlink_sendmsg+0x8b0/0xda0
[  575.313716][T13990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.313764][T13990]  ? apparmor_socket_sendmsg+0x15b/0x270
[  575.313800][T13990]  ____sys_sendmsg+0xa4d/0xbe0
[  575.313839][T13990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  575.313890][T13990]  ? __pfx_____sys_sendmsg+0x10/0x10
[  575.313934][T13990]  ? rcu_is_watching+0x12/0xc0
[  575.313967][T13990]  ? ___sys_sendmsg+0x19d/0x1e0
[  575.314002][T13990]  ? kfree+0x1e5/0x6c0
[  575.314035][T13990]  ___sys_sendmsg+0x190/0x1e0
[  575.314078][T13990]  ? __pfx____sys_sendmsg+0x10/0x10
[  575.314155][T13990]  ? __pfx___might_resched+0x10/0x10
[  575.314204][T13990]  __sys_sendmmsg+0x20c/0x440
[  575.314241][T13990]  ? __pfx___sys_sendmmsg+0x10/0x10
[  575.314273][T13990]  ? __lock_acquire+0x49f/0x1a40
[  575.314332][T13990]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  575.314407][T13990]  ? kcov_ioctl+0x17a/0x750
[  575.314452][T13990]  __x64_sys_sendmmsg+0x9c/0x100
[  575.314485][T13990]  ? lockdep_hardirqs_on+0x78/0x100
[  575.314526][T13990]  do_syscall_64+0x115/0x840
[  575.314557][T13990]  ? clear_bhb_loop+0x40/0x90
[  575.314591][T13990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.314619][T13990] RIP: 0033:0x7f2edcd9de59
[  575.314644][T13990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.314669][T13990] RSP: 002b:00007f2eddc93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  575.314697][T13990] RAX: ffffffffffffffda RBX: 00007f2edd026090 RCX: 00007f2edcd9de59
[  575.314716][T13990] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003
[  575.314732][T13990] RBP: 00007f2edce33e6f R08: 0000000000000000 R09: 0000000000000000
[  575.314749][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  575.314764][T13990] R13: 00007f2edd026128 R14: 00007f2edd026090 R15: 00007ffe2ad2da98
[  575.314803][T13990]  </TASK>

syzkaller
syzkaller login: [  578.159635][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'.
[  578.916317][T14059] FAULT_INJECTION: forcing a failure.
[  578.916317][T14059] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  578.966509][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.1.1619 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  578.966543][T14059] Tainted: [L]=SOFTLOCKUP
[  578.966550][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  578.966561][T14059] Call Trace:
[  578.966568][T14059]  <TASK>
[  578.966579][T14059]  dump_stack_lvl+0x100/0x190
[  578.966624][T14059]  should_fail_ex.cold+0x5/0xa
[  578.966650][T14059]  ? prepare_alloc_pages+0x16d/0x5f0
[  578.966682][T14059]  should_fail_alloc_page+0xeb/0x140
[  578.966709][T14059]  prepare_alloc_pages+0x1f0/0x5f0
[  578.966740][T14059]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  578.966765][T14059]  ? rcu_is_watching+0x12/0xc0
[  578.966788][T14059]  ? trace_mm_page_alloc+0x164/0x1c0
[  578.966816][T14059]  ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0
[  578.966837][T14059]  ? stack_trace_save+0x8e/0xc0
[  578.966863][T14059]  ? __pfx_stack_trace_save+0x10/0x10
[  578.966889][T14059]  ? stack_depot_save_flags+0x27/0x9d0
[  578.966917][T14059]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  578.966938][T14059]  ? __lock_acquire+0x49f/0x1a40
[  578.966955][T14059]  ? tomoyo_path_number_perm+0x46d/0x580
[  578.966983][T14059]  ? kasan_save_stack+0x3f/0x50
[  578.967005][T14059]  ? kasan_save_stack+0x30/0x50
[  578.967027][T14059]  ? kasan_save_track+0x14/0x30
[  578.967049][T14059]  ? kasan_save_free_info+0x3b/0x70
[  578.967066][T14059]  ? __kasan_slab_free+0x5f/0x80
[  578.967090][T14059]  ? kfree+0x22b/0x6c0
[  578.967105][T14059]  ? look_up_lock_class+0x55/0x120
[  578.967134][T14059]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  578.967170][T14059]  ? __lock_acquire+0x49f/0x1a40
[  578.967191][T14059]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  578.967220][T14059]  ? policy_nodemask+0xed/0x4f0
[  578.967249][T14059]  alloc_pages_mpol+0x1fb/0x540
[  578.967277][T14059]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  578.967311][T14059]  ___kmalloc_large_node+0xe5/0x120
[  578.967341][T14059]  __kmalloc_large_node_noprof+0x1c/0x70
[  578.967371][T14059]  __kmalloc_noprof+0x5a1/0x820
[  578.967393][T14059]  ? rcu_is_watching+0x12/0xc0
[  578.967417][T14059]  ? trace_kmalloc+0xeb/0x110
[  578.967441][T14059]  ? vhost_dev_set_owner+0x3b2/0xa30
[  578.967522][T14059]  vhost_dev_set_owner+0x3b2/0xa30
[  578.967548][T14059]  vhost_net_ioctl+0xfa3/0x1910
[  578.967582][T14059]  ? do_vfs_ioctl+0x226/0x13e0
[  578.967609][T14059]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  578.967635][T14059]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  578.967662][T14059]  ? find_held_lock+0x2b/0x80
[  578.967685][T14059]  ? __fget_files+0x215/0x3d0
[  578.967701][T14059]  ? hook_file_ioctl_common+0x140/0x440
[  578.967729][T14059]  ? __fget_files+0x21f/0x3d0
[  578.967749][T14059]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  578.967768][T14059]  __x64_sys_ioctl+0x18e/0x210
[  578.967797][T14059]  do_syscall_64+0x115/0x840
[  578.967814][T14059]  ? clear_bhb_loop+0x40/0x90
[  578.967836][T14059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.967855][T14059] RIP: 0033:0x7fd35519de59
[  578.967872][T14059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.967890][T14059] RSP: 002b:00007fd3560f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  578.967915][T14059] RAX: ffffffffffffffda RBX: 00007fd355425fa0 RCX: 00007fd35519de59
[  578.967934][T14059] RDX: 0000000000000005 RSI: 000000000000af01 RDI: 0000000000000002
[  578.967950][T14059] RBP: 00007fd355233e6f R08: 0000000000000000 R09: 0000000000000000
[  578.967965][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  578.967976][T14059] R13: 00007fd355426038 R14: 00007fd355425fa0 R15: 00007ffcf98358c8
[  578.967999][T14059]  </TASK>
[  579.827578][T14045] KVM: debugfs: duplicate directory 14045-3
[  580.095211][T14045] KVM: debugfs: duplicate directory 14045-5
[  582.256668][T14089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1626'.
[  584.036295][T14125] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  584.402473][T12777] Bluetooth: hci4: unexpected event 0x30 length: 10 > 3
[  584.516617][T14132] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1637'.
[  585.862868][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1644'.
[  586.732277][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'.
[  586.786623][T14180] netlink: 354 bytes leftover after parsing attributes in process `syz.5.1649'.
[  587.639403][T12777] Bluetooth: hci2: unexpected subevent 0x01 length: 1 < 18
[  588.712546][T14209] FAULT_INJECTION: forcing a failure.
[  588.712546][T14209] name failslab, interval 1, probability 0, space 0, times 0
[  588.757640][T14209] CPU: 1 UID: 0 PID: 14209 Comm: syz.5.1656 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  588.757701][T14209] Tainted: [L]=SOFTLOCKUP
[  588.757712][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  588.757731][T14209] Call Trace:
[  588.757741][T14209]  <TASK>
[  588.757754][T14209]  dump_stack_lvl+0x100/0x190
[  588.757801][T14209]  should_fail_ex.cold+0x5/0xa
[  588.757843][T14209]  should_failslab+0xc2/0x120
[  588.757888][T14209]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  588.757931][T14209]  ? __d_alloc+0x35/0xa50
[  588.757972][T14209]  __d_alloc+0x35/0xa50
[  588.758011][T14209]  d_alloc+0x4a/0x1e0
[  588.758046][T14209]  lookup_one_qstr_excl+0x171/0x250
[  588.758093][T14209]  start_dirop+0x59/0xb0
[  588.758142][T14209]  simple_start_creating+0xf9/0x110
[  588.758172][T14209]  ? __pfx_simple_start_creating+0x10/0x10
[  588.758205][T14209]  ? mntput+0x70/0xa0
[  588.758251][T14209]  ? simple_pin_fs+0xa3/0x190
[  588.758299][T14209]  debugfs_start_creating.part.0+0x82/0x170
[  588.758349][T14209]  __debugfs_create_file+0xb3/0x4f0
[  588.758400][T14209]  debugfs_create_file_full+0x41/0x60
[  588.758449][T14209]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  588.758499][T14209]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  588.758587][T14209]  ? kasan_save_track+0x14/0x30
[  588.758627][T14209]  ? __kasan_kmalloc+0xaa/0xb0
[  588.758676][T14209]  ? lockdep_init_map_type+0x5c/0x250
[  588.758715][T14209]  preinit_net.part.0+0x43b/0x920
[  588.758759][T14209]  copy_net_ns+0x339/0x7c0
[  588.758807][T14209]  create_new_namespaces+0x3ea/0xac0
[  588.758853][T14209]  unshare_nsproxy_namespaces+0xf2/0x220
[  588.758889][T14209]  ksys_unshare+0x438/0xab0
[  588.758927][T14209]  ? __pfx_ksys_unshare+0x10/0x10
[  588.758977][T14209]  __x64_sys_unshare+0x31/0x40
[  588.759016][T14209]  do_syscall_64+0x115/0x840
[  588.759044][T14209]  ? clear_bhb_loop+0x40/0x90
[  588.759083][T14209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.759115][T14209] RIP: 0033:0x7f2edcd9de59
[  588.759139][T14209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.759166][T14209] RSP: 002b:00007f2eddcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  588.759195][T14209] RAX: ffffffffffffffda RBX: 00007f2edd025fa0 RCX: 00007f2edcd9de59
[  588.759212][T14209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  588.759227][T14209] RBP: 00007f2edce33e6f R08: 0000000000000000 R09: 0000000000000000
[  588.759243][T14209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  588.759261][T14209] R13: 00007f2edd026038 R14: 00007f2edd025fa0 R15: 00007ffe2ad2da98
[  588.759301][T14209]  </TASK>
[  590.234386][T12783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.570640][T12783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.030000][T12783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.080074][T14205] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist!
[  591.310240][T12783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.123409][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'.
[  592.188787][T14268] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1668'.
[  592.270553][T12783] team0: left allmulticast mode
[  592.275599][T12783] team_slave_1: left allmulticast mode
[  592.320588][T12783] team0: left promiscuous mode
[  592.338559][T12783] team_slave_1: left promiscuous mode
[  592.359966][T12783] bridge0: port 3(team0) entered disabled state
[  592.384812][T12783] bridge_slave_1: left allmulticast mode
[  592.395693][T12783] bridge_slave_1: left promiscuous mode
[  592.413534][T12783] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.027992][T12783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.050493][T12783] bond0 (unregistering): Released all slaves
[  593.453636][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  593.509058][T12783] Â: left promiscuous mode
[  593.774042][T12783] tipc: Left network mode
[  595.665741][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  595.745696][T14319] Invalid ELF header magic: != ELF
[  595.844857][T12783] hsr_slave_0: left promiscuous mode
[  595.856381][T12783] hsr_slave_1: left promiscuous mode
[  595.865972][T12783] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  595.879522][T12783] batman_adv: batadv0: Removing interface: batadv_slave_0
[  595.893132][T12783] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  595.903803][T12783] batman_adv: batadv0: Removing interface: batadv_slave_1
[  595.963706][T12783] veth1_macvtap: left promiscuous mode
[  595.972954][T12783] veth1_vlan: left promiscuous mode
[  595.988092][T12783] veth0_vlan: left promiscuous mode
[  596.444693][T12783] team0 (unregistering): Port device team_slave_1 removed
[  597.413096][T14375] netlink: 326 bytes leftover after parsing attributes in process `syz.4.1686'.
[  597.442510][T14375] bridge0: port 4(batadv0) entered disabled state
[  597.449612][T14375] bridge0: port 3(netdevsim3) entered disabled state
[  597.456437][T14375] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.463834][T14375] bridge0: port 1(bridge_slave_0) entered disabled state
[  598.830424][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3
[  600.256465][T14434] netlink: 302 bytes leftover after parsing attributes in process `syz.3.1697'.
[  600.652740][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4
[  607.106087][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'.
[  607.190021][T14542] Â: entered promiscuous mode
[  607.792348][T14556] netlink: 'syz.4.1722': attribute type 1 has an invalid length.
[  608.323714][T14566] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist!
[  611.287413][T12777] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  611.291917][T14625] program syz.3.1736 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  614.288332][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'.
[  615.268267][T14750] kAFS: No cell specified
[  615.506980][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'.
[  616.164243][T14768] random: crng reseeded on system resumption
[  617.956137][T14808] FAULT_INJECTION: forcing a failure.
[  617.956137][T14808] name failslab, interval 1, probability 0, space 0, times 0
[  617.978110][T14808] CPU: 1 UID: 0 PID: 14808 Comm: syz.5.1769 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  617.978157][T14808] Tainted: [L]=SOFTLOCKUP
[  617.978166][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  617.978182][T14808] Call Trace:
[  617.978192][T14808]  <TASK>
[  617.978202][T14808]  dump_stack_lvl+0x100/0x190
[  617.978255][T14808]  should_fail_ex.cold+0x5/0xa
[  617.978293][T14808]  should_failslab+0xc2/0x120
[  617.978331][T14808]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[  617.978364][T14808]  ? start_dirop+0x79/0xb0
[  617.978403][T14808]  ? alloc_inode+0x68/0x250
[  617.978438][T14808]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  617.978476][T14808]  alloc_inode+0x68/0x250
[  617.978512][T14808]  new_inode+0x22/0x1c0
[  617.978549][T14808]  debugfs_create_symlink+0xd1/0x220
[  617.978587][T14808]  drm_debugfs_clients_add+0x199/0x210
[  617.978625][T14808]  drm_file_alloc+0x5c6/0xb40
[  617.978752][T14808]  drm_open_helper+0x1fc/0x540
[  617.978802][T14808]  drm_open+0x1a0/0x3e0
[  617.978837][T14808]  ? __pfx_drm_open+0x10/0x10
[  617.978870][T14808]  drm_stub_open+0x20f/0x380
[  617.978906][T14808]  ? __pfx_drm_stub_open+0x10/0x10
[  617.978941][T14808]  chrdev_open+0x234/0x6a0
[  617.978970][T14808]  ? __pfx_apparmor_file_open+0x10/0x10
[  617.979002][T14808]  ? __pfx_chrdev_open+0x10/0x10
[  617.979033][T14808]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  617.979073][T14808]  do_dentry_open+0x6ab/0x14d0
[  617.979102][T14808]  ? __pfx_chrdev_open+0x10/0x10
[  617.979139][T14808]  vfs_open+0x82/0x3f0
[  617.979179][T14808]  path_openat+0x2873/0x4280
[  617.979233][T14808]  ? __pfx_path_openat+0x10/0x10
[  617.979277][T14808]  do_file_open+0x20e/0x430
[  617.979309][T14808]  ? __pfx_do_file_open+0x10/0x10
[  617.979370][T14808]  ? alloc_fd+0x471/0x7a0
[  617.979403][T14808]  ? do_getname+0x191/0x390
[  617.979441][T14808]  do_sys_openat2+0x10f/0x1e0
[  617.979478][T14808]  ? __pfx_do_sys_openat2+0x10/0x10
[  617.979529][T14808]  __x64_sys_openat+0x12d/0x210
[  617.979566][T14808]  ? __pfx___x64_sys_openat+0x10/0x10
[  617.979618][T14808]  do_syscall_64+0x115/0x840
[  617.979644][T14808]  ? clear_bhb_loop+0x40/0x90
[  617.979678][T14808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.979708][T14808] RIP: 0033:0x7f2edcd9de59
[  617.979731][T14808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  617.979758][T14808] RSP: 002b:00007f2eddcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  617.979787][T14808] RAX: ffffffffffffffda RBX: 00007f2edd025fa0 RCX: 00007f2edcd9de59
[  617.979806][T14808] RDX: 0000000000028900 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  617.979824][T14808] RBP: 00007f2edce33e6f R08: 0000000000000000 R09: 0000000000000000
[  617.979841][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.979856][T14808] R13: 00007f2edd026038 R14: 00007f2edd025fa0 R15: 00007ffe2ad2da98
[  617.979893][T14808]  </TASK>
[  618.282726][T14808] debugfs: out of free dentries, can not create symlink 'device'
[  618.611823][T14816] HfR: entered promiscuous mode
[  620.297956][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1777'.
[  621.524751][T14884] program syz.5.1785 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  621.982139][T12777] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  623.403719][T14923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1791'.
[  623.737509][T14948] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1796'.
[  624.856851][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  624.860166][T14977] futex_wake_op: syz.3.1801 tries to shift op by -2048; fix this program
[  624.863461][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  626.604617][T15022] netlink: 82 bytes leftover after parsing attributes in process `syz.1.1811'.
[  627.997709][T15046] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1817'.
[  628.056149][T15043] can: request_module (can-proto-0) failed.
[  628.136943][T15050] FAULT_INJECTION: forcing a failure.
[  628.136943][T15050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.169329][T15050] CPU: 1 UID: 0 PID: 15050 Comm: syz.5.1818 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  628.169377][T15050] Tainted: [L]=SOFTLOCKUP
[  628.169387][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  628.169403][T15050] Call Trace:
[  628.169413][T15050]  <TASK>
[  628.169424][T15050]  dump_stack_lvl+0x100/0x190
[  628.169468][T15050]  should_fail_ex.cold+0x5/0xa
[  628.169508][T15050]  _copy_from_user+0x2e/0xd0
[  628.169551][T15050]  copy_msghdr_from_user+0x9f/0x4c0
[  628.169600][T15050]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  628.169653][T15050]  ? __pfx__kstrtoull+0x10/0x10
[  628.169750][T15050]  ___sys_sendmsg+0x106/0x1e0
[  628.169797][T15050]  ? __pfx____sys_sendmsg+0x10/0x10
[  628.169861][T15050]  ? find_held_lock+0x2b/0x80
[  628.169924][T15050]  __sys_sendmmsg+0x20c/0x440
[  628.169965][T15050]  ? __pfx___sys_sendmmsg+0x10/0x10
[  628.169999][T15050]  ? ksys_write+0x190/0x250
[  628.170058][T15050]  ? fput+0x79/0x100
[  628.170092][T15050]  ? ksys_write+0x1ac/0x250
[  628.170120][T15050]  ? __pfx_ksys_write+0x10/0x10
[  628.170164][T15050]  __x64_sys_sendmmsg+0x9c/0x100
[  628.170199][T15050]  ? lockdep_hardirqs_on+0x78/0x100
[  628.170246][T15050]  do_syscall_64+0x115/0x840
[  628.170272][T15050]  ? clear_bhb_loop+0x40/0x90
[  628.170308][T15050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.170338][T15050] RIP: 0033:0x7f2edcd9de59
[  628.170364][T15050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.170392][T15050] RSP: 002b:00007f2eddcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  628.170421][T15050] RAX: ffffffffffffffda RBX: 00007f2edd025fa0 RCX: 00007f2edcd9de59
[  628.170441][T15050] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003
[  628.170458][T15050] RBP: 00007f2eddcb4090 R08: 0000000000000000 R09: 0000000000000000
[  628.170475][T15050] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001
[  628.170492][T15050] R13: 00007f2edd026038 R14: 00007f2edd025fa0 R15: 00007ffe2ad2da98
[  628.170532][T15050]  </TASK>
[  628.406155][T15041] Process accounting resumed
[  629.758106][T15098] random: crng reseeded on system resumption
[  631.408187][T15137] netlink: 'syz.4.1839': attribute type 1 has an invalid length.
[  632.952380][T15157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1842'.
[  634.139408][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1844'.
[  634.670215][T15170] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  634.693146][T15170] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  634.802346][T15170] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  634.809975][T15170] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  634.826326][T15170] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  634.832951][T15170] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  634.871883][T15170] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  634.943560][T12777] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  635.041310][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1853'.
[  635.130833][T15191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.220782][T15191] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.884581][T15220] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request
[  636.058681][T12777] Bluetooth: hci1: command 0x0c1a tx timeout
[  636.428682][T12777] Bluetooth: hci4: unexpected event 0x30 length: 10 > 3
[  636.667129][T15237] futex_wake_op: syz.4.1865 tries to shift op by -2048; fix this program
[  636.730566][T15231] FAULT_INJECTION: forcing a failure.
[  636.730566][T15231] name failslab, interval 1, probability 0, space 0, times 0
[  636.759125][T15231] CPU: 1 UID: 0 PID: 15231 Comm: syz.3.1862 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  636.759177][T15231] Tainted: [L]=SOFTLOCKUP
[  636.759187][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.759205][T15231] Call Trace:
[  636.759215][T15231]  <TASK>
[  636.759227][T15231]  dump_stack_lvl+0x100/0x190
[  636.759272][T15231]  should_fail_ex.cold+0x5/0xa
[  636.759310][T15231]  should_failslab+0xc2/0x120
[  636.759352][T15231]  kmem_cache_alloc_noprof+0x91/0x6a0
[  636.759393][T15231]  ? mas_preallocate+0x1105/0x14a0
[  636.759445][T15231]  mas_preallocate+0x1105/0x14a0
[  636.759500][T15231]  ? __pfx_mas_preallocate+0x10/0x10
[  636.759550][T15231]  ? anon_vma_name+0x5a/0x250
[  636.759606][T15231]  __split_vma+0x33d/0xda0
[  636.759643][T15231]  ? __pfx___split_vma+0x10/0x10
[  636.759672][T15231]  ? vma_link+0x5ee/0x8d0
[  636.759723][T15231]  vms_gather_munmap_vmas+0x1d2/0x1720
[  636.759766][T15231]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  636.759798][T15231]  ? alloc_new_pud+0x217/0x320
[  636.759828][T15231]  ? get_old_pud+0xd8/0x360
[  636.759860][T15231]  ? move_page_tables+0x11c/0x4610
[  636.759895][T15231]  ? __pfx_copy_vma+0x10/0x10
[  636.759944][T15231]  do_vmi_align_munmap+0x287/0x5f0
[  636.759982][T15231]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  636.760074][T15231]  do_vmi_munmap+0x1f8/0x3e0
[  636.760115][T15231]  move_vma+0xe5b/0x1920
[  636.760156][T15231]  ? __pfx_move_vma+0x10/0x10
[  636.760194][T15231]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[  636.760253][T15231]  ? vrm_set_new_addr+0x204/0x290
[  636.760290][T15231]  mremap_to+0x234/0x4c0
[  636.760321][T15231]  ? mas_walk+0x6ef/0x9b0
[  636.760349][T15231]  ? __pfx_mremap_to+0x10/0x10
[  636.760379][T15231]  ? check_prep_vma+0x912/0xe60
[  636.760420][T15231]  __do_sys_mremap+0x88c/0x1850
[  636.760478][T15231]  ? __pfx___do_sys_mremap+0x10/0x10
[  636.760510][T15231]  ? ksys_write+0x190/0x250
[  636.760551][T15231]  ? __pfx_do_futex+0x10/0x10
[  636.760600][T15231]  ? __x64_sys_futex+0x34f/0x4d0
[  636.760659][T15231]  do_syscall_64+0x115/0x840
[  636.760687][T15231]  ? clear_bhb_loop+0x40/0x90
[  636.760724][T15231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.760756][T15231] RIP: 0033:0x7ff643b9de59
[  636.760783][T15231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.760813][T15231] RSP: 002b:00007ff644a83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  636.760844][T15231] RAX: ffffffffffffffda RBX: 00007ff643e26090 RCX: 00007ff643b9de59
[  636.760864][T15231] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000400000
[  636.760882][T15231] RBP: 00007ff643c33e6f R08: 0000000100000000 R09: 0000000000000000
[  636.760901][T15231] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  636.760917][T15231] R13: 00007ff643e26128 R14: 00007ff643e26090 R15: 00007ffe820560a8
[  636.760959][T15231]  </TASK>
[  637.063922][T12777] Bluetooth: hci2: command 0x0c1a tx timeout
[  637.070380][T12777] Bluetooth: hci4: command 0x0c1a tx timeout
[  637.076477][T12777] Bluetooth: hci3: command 0x0c1a tx timeout
[  637.152618][T15239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1864'.
[  638.139201][T13028] Bluetooth: hci1: command 0x0c1a tx timeout
[  638.686713][T15285] kafs: addr_prefs: Too many elements in string
[  639.100591][T13028] Bluetooth: hci2: command 0x0c1a tx timeout
[  641.152224][T15334] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1884'.
[  641.180653][T13028] Bluetooth: hci2: command 0x0c1a tx timeout
[  642.850964][T15366] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1891'.
[  643.616772][T15390] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15390]
[  644.021961][T13028] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  645.621968][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'.
[  645.715981][T15350] kexec: Could not allocate control_code_buffer
[  645.911787][T13028] Bluetooth: hci4: unexpected event 0x30 length: 10 > 3
[  647.790872][   T29] audit: type=1800 audit(4294967297.517:23): pid=15473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1916" name="discovery_nqn" dev="configfs" ino=64580 res=0 errno=0
[  648.505829][T13028] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  648.718383][T15477] FAULT_INJECTION: forcing a failure.
[  648.718383][T15477] name failslab, interval 1, probability 0, space 0, times 0
[  648.835620][T15477] CPU: 0 UID: 0 PID: 15477 Comm: syz.5.1917 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  648.835672][T15477] Tainted: [L]=SOFTLOCKUP
[  648.835682][T15477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  648.835700][T15477] Call Trace:
[  648.835709][T15477]  <TASK>
[  648.835720][T15477]  dump_stack_lvl+0x100/0x190
[  648.835763][T15477]  should_fail_ex.cold+0x5/0xa
[  648.835801][T15477]  should_failslab+0xc2/0x120
[  648.835845][T15477]  kmem_cache_alloc_noprof+0x91/0x6a0
[  648.835879][T15477]  ? __proc_create+0xc1/0x8f0
[  648.835908][T15477]  ? __proc_create+0xc1/0x8f0
[  648.835935][T15477]  ? __proc_create+0x247/0x8f0
[  648.835971][T15477]  __proc_create+0x247/0x8f0
[  648.836000][T15477]  ? __pfx___proc_create+0x10/0x10
[  648.836031][T15477]  ? proc_register+0x559/0x8a0
[  648.836071][T15477]  proc_create_reg+0x75/0x170
[  648.836106][T15477]  proc_create_data+0x86/0x110
[  648.836137][T15477]  ? __pfx_proc_create_data+0x10/0x10
[  648.836167][T15477]  ? net_generic+0xea/0x2a0
[  648.836290][T15477]  gss_svc_init_net+0x233/0x640
[  648.836321][T15477]  ? __pfx_canbcm_pernet_init+0x10/0x10
[  648.836359][T15477]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[  648.836415][T15477]  ops_init+0x1e2/0x5f0
[  648.836460][T15477]  setup_net+0x118/0x3a0
[  648.836508][T15477]  ? __pfx_setup_net+0x10/0x10
[  648.836547][T15477]  ? mutex_init_lockdep+0xf1/0x120
[  648.836585][T15477]  copy_net_ns+0x46f/0x7c0
[  648.836631][T15477]  create_new_namespaces+0x3ea/0xac0
[  648.836674][T15477]  unshare_nsproxy_namespaces+0xf2/0x220
[  648.836711][T15477]  ksys_unshare+0x438/0xab0
[  648.836752][T15477]  ? __pfx_ksys_unshare+0x10/0x10
[  648.836806][T15477]  __x64_sys_unshare+0x31/0x40
[  648.836844][T15477]  do_syscall_64+0x115/0x840
[  648.836872][T15477]  ? clear_bhb_loop+0x40/0x90
[  648.836908][T15477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.836938][T15477] RIP: 0033:0x7f2edcd9de59
[  648.836962][T15477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.836988][T15477] RSP: 002b:00007f2eddcb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  648.837016][T15477] RAX: ffffffffffffffda RBX: 00007f2edd025fa0 RCX: 00007f2edcd9de59
[  648.837037][T15477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  648.837054][T15477] RBP: 00007f2edce33e6f R08: 0000000000000000 R09: 0000000000000000
[  648.837072][T15477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  648.837090][T15477] R13: 00007f2edd026038 R14: 00007f2edd025fa0 R15: 00007ffe2ad2da98
[  648.837135][T15477]  </TASK>
[  651.738379][T13028] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  651.739548][T15548] program syz.3.1929 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  653.782205][T15603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1940'.
[  655.292911][T13028] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[  655.458150][T15643] kafs: addr_prefs: Invalid Command
[  656.694168][   T42] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243)
[  656.722986][T13028] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18
[  656.799413][T15672] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1957'.
[  657.351509][T12777] Bluetooth: hci2: command 0x0c1a tx timeout
[  657.600511][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1961'.
[  658.682097][T15688] Process accounting paused
[  658.863457][T15705] zswap: compressor  not available
[  658.965849][T15713] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[6179] was attempted by ""[15713]
[  659.375877][T15718] random: crng reseeded on system resumption
[  659.402185][T15719] netlink: 206 bytes leftover after parsing attributes in process `syz.3.1968'.
[  659.447943][T12777] Bluetooth: hci2: command 0x0c1a tx timeout
[  662.384358][T13028] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  663.207282][   T29] audit: type=1800 audit(4294967312.930:24): pid=15814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1992" name="version" dev="configfs" ino=65555 res=0 errno=0
[  663.711316][T15817] FAULT_INJECTION: forcing a failure.
[  663.711316][T15817] name fail_futex, interval 1, probability 0, space 0, times 0
[  663.729501][T15817] CPU: 1 UID: 0 PID: 15817 Comm: syz.3.1992 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  663.729552][T15817] Tainted: [L]=SOFTLOCKUP
[  663.729564][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  663.729582][T15817] Call Trace:
[  663.729592][T15817]  <TASK>
[  663.729604][T15817]  dump_stack_lvl+0x100/0x190
[  663.729655][T15817]  should_fail_ex.cold+0x5/0xa
[  663.729698][T15817]  get_futex_key+0x1d2/0x14f0
[  663.729739][T15817]  ? __pfx_get_futex_key+0x10/0x10
[  663.729769][T15817]  ? __pfx_futex_hash+0x10/0x10
[  663.729812][T15817]  futex_wake+0xf4/0x5e0
[  663.729851][T15817]  ? futex_wait+0x11e/0x370
[  663.729899][T15817]  ? __pfx_futex_wake+0x10/0x10
[  663.729948][T15817]  ? putname+0xb1/0x110
[  663.729982][T15817]  ? kmem_cache_free+0x127/0x6b0
[  663.730025][T15817]  do_futex+0x2b2/0x440
[  663.730062][T15817]  ? __pfx_do_futex+0x10/0x10
[  663.730099][T15817]  ? cap_task_prctl+0x104/0xa50
[  663.730141][T15817]  __x64_sys_futex+0x34f/0x4d0
[  663.730184][T15817]  ? __pfx___x64_sys_futex+0x10/0x10
[  663.730222][T15817]  ? __pfx___do_sys_prctl+0x10/0x10
[  663.730291][T15817]  do_syscall_64+0x115/0x840
[  663.730321][T15817]  ? clear_bhb_loop+0x40/0x90
[  663.730361][T15817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.730393][T15817] RIP: 0033:0x7ff643b9de59
[  663.730421][T15817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  663.730452][T15817] RSP: 002b:00007ff644a830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  663.730482][T15817] RAX: ffffffffffffffda RBX: 00007ff643e26098 RCX: 00007ff643b9de59
[  663.730504][T15817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff643e2609c
[  663.730523][T15817] RBP: 00007ff643e26090 R08: 0000000000000001 R09: 0000000000000000
[  663.730542][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  663.730559][T15817] R13: 00007ff643e26128 R14: 00007ffe82055fc0 R15: 00007ffe820560a8
[  663.730599][T15817]  </TASK>
[  665.758796][T15859] FAULT_INJECTION: forcing a failure.
[  665.758796][T15859] name failslab, interval 1, probability 0, space 0, times 0
[  665.794172][T15859] CPU: 0 UID: 0 PID: 15859 Comm: syz.5.2000 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  665.794220][T15859] Tainted: [L]=SOFTLOCKUP
[  665.794238][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  665.794254][T15859] Call Trace:
[  665.794264][T15859]  <TASK>
[  665.794275][T15859]  dump_stack_lvl+0x100/0x190
[  665.794317][T15859]  should_fail_ex.cold+0x5/0xa
[  665.794357][T15859]  should_failslab+0xc2/0x120
[  665.794399][T15859]  __kmalloc_cache_noprof+0x91/0x6c0
[  665.794431][T15859]  ? net_alloc_generic+0x1e/0x70
[  665.794470][T15859]  ? copy_net_ns+0x135/0x7c0
[  665.794516][T15859]  copy_net_ns+0x135/0x7c0
[  665.794556][T15859]  ? copy_cgroup_ns+0x71/0x970
[  665.794616][T15859]  create_new_namespaces+0x3ea/0xac0
[  665.794660][T15859]  unshare_nsproxy_namespaces+0xf2/0x220
[  665.794699][T15859]  ksys_unshare+0x438/0xab0
[  665.794740][T15859]  ? __pfx_ksys_unshare+0x10/0x10
[  665.794790][T15859]  __x64_sys_unshare+0x31/0x40
[  665.794824][T15859]  do_syscall_64+0x115/0x840
[  665.794850][T15859]  ? clear_bhb_loop+0x40/0x90
[  665.794889][T15859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.794920][T15859] RIP: 0033:0x7f2edcd9de59
[  665.794947][T15859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  665.794975][T15859] RSP: 002b:00007f2eddc72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  665.795005][T15859] RAX: ffffffffffffffda RBX: 00007f2edd026180 RCX: 00007f2edcd9de59
[  665.795025][T15859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  665.795044][T15859] RBP: 00007f2edce33e6f R08: 0000000000000000 R09: 0000000000000000
[  665.795062][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  665.795082][T15859] R13: 00007f2edd026218 R14: 00007f2edd026180 R15: 00007ffe2ad2da98
[  665.795121][T15859]  </TASK>
[  668.792188][T15934] input: f¬
 as /devices/virtual/input/input20
[  669.532819][T15944] HfR: entered promiscuous mode
[  672.740546][T16020] ubi0: attaching mtd0
[  672.782676][T16020] ubi0: scanning is finished
[  672.792804][T16020] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  673.061462][T16020] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  673.218002][T13028] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  673.219084][T16031] program syz.3.2034 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  673.727044][T16048] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2038'.
[  673.814237][T16049] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2038'.
[  677.865479][T13028] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  677.868241][T16122] program syz.3.2047 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  680.291690][T16151] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2052'.
[  686.250768][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2073'.
[  686.326054][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  686.332592][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  688.030687][T13028] Bluetooth: hci4: unexpected event 0x30 length: 10 > 3
[  688.809544][T16345] Process accounting resumed
[  689.998825][T16365] Process accounting resumed
[  690.128275][T16381] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2091'.
[  690.171716][T16381] IPv6: NLM_F_CREATE should be specified when creating new route
[  690.198784][T16381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  690.208554][T16381] IPv6: NLM_F_CREATE should be set when creating new route
[  690.215989][T16381] IPv6: NLM_F_CREATE should be set when creating new route
[  690.760777][T16399] can: request_module (can-proto-3) failed.
[  690.891145][T16403] netlink: 'syz.1.2101': attribute type 10 has an invalid length.
[  690.900989][T16403] netlink: 230 bytes leftover after parsing attributes in process `syz.1.2101'.
[  690.961770][T16404] mmap: syz.1.2101 (16404): VmData 46145536 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data.
[  691.420084][T16416] ksmbd: Unknown IPC event: 1, ignore.
[  691.660396][T13028] Bluetooth: hci2: unexpected event 0x30 length: 10 > 3
[  691.663181][T16421] program syz.5.2106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  691.716638][T13028] Bluetooth: hci4: unexpected event 0x30 length: 10 > 3
[  692.461396][T16439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2111'.
[  692.511501][   T29] audit: type=1800 audit(4294967342.205:25): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2112" name="dbroot" dev="configfs" ino=69700 res=0 errno=0
[  692.672844][T16441] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  692.719404][T16441] netlink: 350 bytes leftover after parsing attributes in process `syz.5.2112'.
[  692.992417][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2113'.
[  693.299700][T16459] FAULT_INJECTION: forcing a failure.
[  693.299700][T16459] name failslab, interval 1, probability 0, space 0, times 0
[  693.361246][T16459] CPU: 0 UID: 0 PID: 16459 Comm: syz.3.2116 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  693.361294][T16459] Tainted: [L]=SOFTLOCKUP
[  693.361304][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  693.361321][T16459] Call Trace:
[  693.361331][T16459]  <TASK>
[  693.361341][T16459]  dump_stack_lvl+0x100/0x190
[  693.361384][T16459]  should_fail_ex.cold+0x5/0xa
[  693.361432][T16459]  should_failslab+0xc2/0x120
[  693.361474][T16459]  __kmalloc_noprof+0xfc/0x820
[  693.361509][T16459]  ? trace_kmem_cache_alloc+0xdd/0x100
[  693.361551][T16459]  ? lsm_blob_alloc+0x68/0x90
[  693.361601][T16459]  lsm_blob_alloc+0x68/0x90
[  693.361643][T16459]  security_sk_alloc+0x2d/0x290
[  693.361677][T16459]  sk_prot_alloc+0x1d1/0x2a0
[  693.361724][T16459]  sk_alloc+0x36/0xe80
[  693.361758][T16459]  inet_create+0x3a0/0x1060
[  693.361855][T16459]  ? inet_create+0x94/0x1060
[  693.361893][T16459]  __sock_create+0x339/0x860
[  693.361943][T16459]  __sys_socket+0x14d/0x260
[  693.361988][T16459]  ? __pfx___sys_socket+0x10/0x10
[  693.362045][T16459]  __x64_sys_socket+0x72/0xb0
[  693.362088][T16459]  ? lockdep_hardirqs_on+0x78/0x100
[  693.362135][T16459]  do_syscall_64+0x115/0x840
[  693.362182][T16459]  ? clear_bhb_loop+0x40/0x90
[  693.362218][T16459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.362248][T16459] RIP: 0033:0x7ff643b9de59
[  693.362273][T16459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.362300][T16459] RSP: 002b:00007ff644aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  693.362329][T16459] RAX: ffffffffffffffda RBX: 00007ff643e25fa0 RCX: 00007ff643b9de59
[  693.362348][T16459] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002
[  693.362365][T16459] RBP: 00007ff643c33e6f R08: 0000000000000000 R09: 0000000000000000
[  693.362382][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  693.362399][T16459] R13: 00007ff643e26038 R14: 00007ff643e25fa0 R15: 00007ffe820560a8
[  693.362445][T16459]  </TASK>
[  693.627048][T13028] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  694.308757][T16496] netlink: 206 bytes leftover after parsing attributes in process `syz.5.2123'.
[  694.941743][T16508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2125'.
[  695.027590][T16493] Invalid ELF header magic: != ELF
[  696.729391][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'.
[  697.196464][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2135'.
[  698.310038][T13028] Bluetooth: hci4: unexpected event 0x10 length: 124 > 1
[  698.313417][T12777] Bluetooth: hci4: hardware error 0x00
[  700.162429][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2150'.
[  700.196875][T16635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.199187][T16628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2149'.
[  700.208097][T16635] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.253136][T16635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.270717][T16635] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.411913][T12777] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  704.961446][T12777] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  706.982253][T12777] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3
[  707.685173][T16781] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2184'.
[  707.762973][T16787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2183'.
[  708.035615][T16788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2185'.
[  709.783879][T16814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'.
[  710.276872][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'.
[  711.047809][T16835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2195'.
[  711.353008][T16843] kAFS: No cell specified
[  711.943921][T16855] FAULT_INJECTION: forcing a failure.
[  711.943921][T16855] name fail_futex, interval 1, probability 0, space 0, times 0
[  711.982949][T16855] CPU: 0 UID: 0 PID: 16855 Comm: syz.5.2200 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  711.982998][T16855] Tainted: [L]=SOFTLOCKUP
[  711.983008][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  711.983025][T16855] Call Trace:
[  711.983034][T16855]  <TASK>
[  711.983045][T16855]  dump_stack_lvl+0x100/0x190
[  711.983087][T16855]  should_fail_ex.cold+0x5/0xa
[  711.983119][T16855]  ? __pfx___up_read+0x10/0x10
[  711.983155][T16855]  get_futex_key+0x1d2/0x14f0
[  711.983189][T16855]  ? __pfx_get_futex_key+0x10/0x10
[  711.983222][T16855]  ? __pfx_validate_mm+0x10/0x10
[  711.983257][T16855]  futex_wait_setup+0x91/0x540
[  711.983318][T16855]  __futex_wait+0x19f/0x300
[  711.983357][T16855]  ? __pfx___futex_wait+0x10/0x10
[  711.983395][T16855]  ? futex_hash+0x311/0x400
[  711.983428][T16855]  ? __pfx_futex_wake_mark+0x10/0x10
[  711.983482][T16855]  ? __pfx_futex_hash+0x10/0x10
[  711.983508][T16855]  ? userfaultfd_unmap_complete+0x267/0x380
[  711.983542][T16855]  ? do_mmap+0x93f/0x12f0
[  711.983580][T16855]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  711.983620][T16855]  futex_wait+0xe6/0x370
[  711.983660][T16855]  ? __pfx_futex_wait+0x10/0x10
[  711.983706][T16855]  ? vm_mmap_pgoff+0x103/0x470
[  711.983756][T16855]  do_futex+0x265/0x440
[  711.983789][T16855]  ? __pfx_do_futex+0x10/0x10
[  711.983818][T16855]  ? __pfx_do_sys_openat2+0x10/0x10
[  711.983867][T16855]  __x64_sys_futex+0x34f/0x4d0
[  711.983901][T16855]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  711.983940][T16855]  ? __pfx___x64_sys_futex+0x10/0x10
[  711.983987][T16855]  do_syscall_64+0x115/0x840
[  711.984012][T16855]  ? clear_bhb_loop+0x40/0x90
[  711.984046][T16855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.984077][T16855] RIP: 0033:0x7f2edcd9de59
[  711.984103][T16855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.984129][T16855] RSP: 002b:00007f2eddcb40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  711.984159][T16855] RAX: ffffffffffffffda RBX: 00007f2edd025fa8 RCX: 00007f2edcd9de59
[  711.984179][T16855] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2edd025fa8
[  711.984197][T16855] RBP: 00007f2edd025fa0 R08: 0000000000000000 R09: 0000000000000000
[  711.984215][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  711.984232][T16855] R13: 00007f2edd026038 R14: 00007ffe2ad2d9b0 R15: 00007ffe2ad2da98
[  711.984278][T16855]  </TASK>
[  712.726787][T16878] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2207'.
[  713.583985][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2209'.

syzkaller
syzkaller login: [  715.348410][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2216'.
[  715.426720][T16926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  715.440619][T16926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.460292][T16926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  715.501978][T16926] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.803333][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2217'.
[  716.460260][T16944] debugfs: '!PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211'
[  716.529417][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2221'.
[  719.251032][T16959] Process accounting paused
[  719.378493][T12777] Bluetooth: hci3: unexpected event 0x30 length: 10 > 3
[  719.383920][T17004] program syz.3.2235 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  719.583518][T17005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2233'.
[  720.495071][T17032] random: crng reseeded on system resumption
[  720.686089][T17035] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2)
[  720.899552][T17046] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2244'.
[  722.311228][T17073] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2249'.
[  722.320728][T17070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2250'.
[  722.354890][T17073] netlink: 214 bytes leftover after parsing attributes in process `syz.1.2249'.
[  722.517479][T17073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  722.524864][T17073] IPv6: NLM_F_CREATE should be set when creating new route
[  722.532691][T17073] IPv6: NLM_F_CREATE should be set when creating new route
[  722.539970][T17073] IPv6: NLM_F_CREATE should be set when creating new route
[  722.818783][T17077] vhci_hcd: not connected 4

syzkaller
syzkaller login: [  724.801885][T17122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2262'.
[  725.753953][T17139] FAULT_INJECTION: forcing a failure.
[  725.753953][T17139] name failslab, interval 1, probability 0, space 0, times 0
[  725.820424][T17139] CPU: 1 UID: 0 PID: 17139 Comm: syz.3.2265 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  725.820476][T17139] Tainted: [L]=SOFTLOCKUP
[  725.820487][T17139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  725.820505][T17139] Call Trace:
[  725.820516][T17139]  <TASK>
[  725.820529][T17139]  dump_stack_lvl+0x100/0x190
[  725.820576][T17139]  should_fail_ex.cold+0x5/0xa
[  725.820619][T17139]  should_failslab+0xc2/0x120
[  725.820663][T17139]  __kmalloc_noprof+0xfc/0x820
[  725.820704][T17139]  ? tomoyo_encode2+0xfb/0x3c0
[  725.820755][T17139]  tomoyo_encode2+0xfb/0x3c0
[  725.820805][T17139]  tomoyo_encode+0x29/0x50
[  725.820846][T17139]  tomoyo_realpath_from_path+0x18c/0x690
[  725.820895][T17139]  tomoyo_check_open_permission+0x2af/0x3c0
[  725.820931][T17139]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  725.820992][T17139]  ? hook_file_open+0x24f/0x8f0
[  725.821060][T17139]  ? path_get+0x61/0x80
[  725.821100][T17139]  tomoyo_file_open+0x6b/0x90
[  725.821257][T17139]  security_file_open+0xb5/0x1e0
[  725.821301][T17139]  do_dentry_open+0x588/0x14d0
[  725.821351][T17139]  vfs_open+0x82/0x3f0
[  725.821392][T17139]  path_openat+0x2873/0x4280
[  725.821443][T17139]  ? __pfx_path_openat+0x10/0x10
[  725.821485][T17139]  do_file_open+0x20e/0x430
[  725.821519][T17139]  ? __pfx_do_file_open+0x10/0x10
[  725.821578][T17139]  ? alloc_fd+0x471/0x7a0
[  725.821612][T17139]  ? do_getname+0x191/0x390
[  725.821649][T17139]  do_sys_openat2+0x10f/0x1e0
[  725.821688][T17139]  ? __pfx_do_sys_openat2+0x10/0x10
[  725.821729][T17139]  ? __fget_files+0x21f/0x3d0
[  725.821767][T17139]  __x64_sys_openat+0x12d/0x210
[  725.821809][T17139]  ? __pfx___x64_sys_openat+0x10/0x10
[  725.821887][T17139]  do_syscall_64+0x115/0x840
[  725.821916][T17139]  ? clear_bhb_loop+0x40/0x90
[  725.821952][T17139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.821984][T17139] RIP: 0033:0x7ff643b9de59
[  725.822011][T17139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.822037][T17139] RSP: 002b:00007ff644a62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  725.822069][T17139] RAX: ffffffffffffffda RBX: 00007ff643e26180 RCX: 00007ff643b9de59
[  725.822089][T17139] RDX: 0000000000008000 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  725.822108][T17139] RBP: 00007ff643c33e6f R08: 0000000000000000 R09: 0000000000000000
[  725.822134][T17139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.822153][T17139] R13: 00007ff643e26218 R14: 00007ff643e26180 R15: 00007ffe820560a8
[  725.822195][T17139]  </TASK>
[  725.934815][T17139] ERROR: Out of memory at tomoyo_realpath_from_path.
[  726.278015][T17143] nvme_fabrics: missing parameter 'transport=%s'
[  726.350826][T17143] nvme_fabrics: missing parameter 'nqn=%s'
[  726.805679][T17163] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2270'.
[  727.094535][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'.
[  728.096254][T17175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2273'.
[  730.810660][T17237] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 902 with max blocks 10 with error 117
[  730.832423][T17237] EXT4-fs (sda1): This should not happen!! Data will be lost
[  730.832423][T17237] 
[  731.478741][T13028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  731.515592][T13028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  731.537849][T13028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  731.549714][T13028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  731.557784][T13028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  732.213529][T17268] FAULT_INJECTION: forcing a failure.
[  732.213529][T17268] name failslab, interval 1, probability 0, space 0, times 0
[  732.277391][T17268] CPU: 0 UID: 0 PID: 17268 Comm: syz.3.2292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  732.277445][T17268] Tainted: [L]=SOFTLOCKUP
[  732.277456][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  732.277475][T17268] Call Trace:
[  732.277486][T17268]  <TASK>
[  732.277498][T17268]  dump_stack_lvl+0x100/0x190
[  732.277545][T17268]  should_fail_ex.cold+0x5/0xa
[  732.277588][T17268]  should_failslab+0xc2/0x120
[  732.277634][T17268]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  732.277675][T17268]  ? __pfx___kasan_kmalloc+0x10/0x10
[  732.277717][T17268]  ? vidtv_psi_short_event_desc_init+0x429/0x5f0
[  732.277764][T17268]  kstrdup+0x51/0xe0
[  732.277803][T17268]  vidtv_psi_short_event_desc_init+0x429/0x5f0
[  732.277846][T17268]  vidtv_channel_s302m_init+0x4fd/0x9b0
[  732.277893][T17268]  ? __pfx_vidtv_channel_s302m_init+0x10/0x10
[  732.277934][T17268]  ? __pfx___kasan_kmalloc+0x10/0x10
[  732.277982][T17268]  ? __asan_memcpy+0x3c/0x60
[  732.278018][T17268]  vidtv_channels_init+0x4c/0xb0
[  732.278059][T17268]  vidtv_mux_init+0x9d9/0xbf0
[  732.278104][T17268]  vidtv_start_feed+0x34e/0x500
[  732.278159][T17268]  ? __pfx_vidtv_start_feed+0x10/0x10
[  732.278206][T17268]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  732.278272][T17268]  dmx_section_feed_start_filtering+0x3a8/0x660
[  732.278323][T17268]  dvb_dmxdev_filter_start+0x767/0xdd0
[  732.278379][T17268]  dvb_demux_do_ioctl+0xe64/0x1200
[  732.278433][T17268]  dvb_usercopy+0x167/0x340
[  732.278472][T17268]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  732.278517][T17268]  ? __pfx_dvb_usercopy+0x10/0x10
[  732.278571][T17268]  ? __fget_files+0x21f/0x3d0
[  732.278608][T17268]  dvb_demux_ioctl+0x29/0x40
[  732.278645][T17268]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  732.278688][T17268]  __x64_sys_ioctl+0x18e/0x210
[  732.278731][T17268]  do_syscall_64+0x115/0x840
[  732.278758][T17268]  ? clear_bhb_loop+0x40/0x90
[  732.278793][T17268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.278833][T17268] RIP: 0033:0x7ff643b9de59
[  732.278859][T17268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  732.278887][T17268] RSP: 002b:00007ff644a83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  732.278916][T17268] RAX: ffffffffffffffda RBX: 00007ff643e26090 RCX: 00007ff643b9de59
[  732.278937][T17268] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007
[  732.278956][T17268] RBP: 00007ff643c33e6f R08: 0000000000000000 R09: 0000000000000000
[  732.278974][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  732.278992][T17268] R13: 00007ff643e26128 R14: 00007ff643e26090 R15: 00007ffe820560a8
[  732.279034][T17268]  </TASK>
[  733.633572][T13028] Bluetooth: hci5: command tx timeout
[  734.192668][T12790] netdevsim netdevsim4 netdevsim3 (unregistering): left allmulticast mode
[  734.221294][T12790] netdevsim netdevsim4 netdevsim3 (unregistering): left promiscuous mode
[  734.242234][T12790] bridge0: port 3(netdevsim3) entered disabled state
[  734.344046][T12790] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.709272][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2299'.
[  734.891883][T12790] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.139308][T12790] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.404812][T12790] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.544747][T17248] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.559192][T17248] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.572096][T17248] bridge_slave_0: entered allmulticast mode
[  735.582734][T17248] bridge_slave_0: entered promiscuous mode
[  735.597856][T17248] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.617159][T17248] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.639232][T17248] bridge_slave_1: entered allmulticast mode
[  735.655502][T17248] bridge_slave_1: entered promiscuous mode
[  735.707960][T13028] Bluetooth: hci5: command tx timeout
[  735.864568][T17248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  735.922165][T17248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  736.067581][T17338] FAULT_INJECTION: forcing a failure.
[  736.067581][T17338] name failslab, interval 1, probability 0, space 0, times 0
[  736.105698][T17338] CPU: 1 UID: 0 PID: 17338 Comm: syz.5.2304 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  736.105748][T17338] Tainted: [L]=SOFTLOCKUP
[  736.105760][T17338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  736.105782][T17338] Call Trace:
[  736.105791][T17338]  <TASK>
[  736.105802][T17338]  dump_stack_lvl+0x100/0x190
[  736.105847][T17338]  should_fail_ex.cold+0x5/0xa
[  736.105888][T17338]  should_failslab+0xc2/0x120
[  736.105931][T17338]  __kmalloc_cache_noprof+0x91/0x6c0
[  736.105963][T17338]  ? __pfx_vidtv_psi_eit_event_init+0x10/0x10
[  736.105998][T17338]  ? vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  736.106039][T17338]  vidtv_psi_short_event_desc_init+0xbb/0x5f0
[  736.106077][T17338]  vidtv_channel_s302m_init+0x4fd/0x9b0
[  736.106121][T17338]  ? __pfx_vidtv_channel_s302m_init+0x10/0x10
[  736.106157][T17338]  ? __pfx___kasan_kmalloc+0x10/0x10
[  736.106199][T17338]  ? __asan_memcpy+0x3c/0x60
[  736.106235][T17338]  vidtv_channels_init+0x4c/0xb0
[  736.106273][T17338]  vidtv_mux_init+0x9d9/0xbf0
[  736.106320][T17338]  vidtv_start_feed+0x34e/0x500
[  736.106367][T17338]  ? __pfx_vidtv_start_feed+0x10/0x10
[  736.106411][T17338]  ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10
[  736.106481][T17338]  dmx_section_feed_start_filtering+0x3a8/0x660
[  736.106527][T17338]  dvb_dmxdev_filter_start+0x767/0xdd0
[  736.106580][T17338]  dvb_demux_do_ioctl+0xe64/0x1200
[  736.106640][T17338]  dvb_usercopy+0x167/0x340
[  736.106691][T17338]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  736.106737][T17338]  ? __pfx_dvb_usercopy+0x10/0x10
[  736.106802][T17338]  dvb_demux_ioctl+0x29/0x40
[  736.106842][T17338]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  736.106881][T17338]  __x64_sys_ioctl+0x18e/0x210
[  736.106929][T17338]  do_syscall_64+0x115/0x840
[  736.106957][T17338]  ? clear_bhb_loop+0x40/0x90
[  736.106995][T17338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.107026][T17338] RIP: 0033:0x7f2edcd9de59
[  736.107051][T17338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.107078][T17338] RSP: 002b:00007f2eddc93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  736.107108][T17338] RAX: ffffffffffffffda RBX: 00007f2edd026090 RCX: 00007f2edcd9de59
[  736.107127][T17338] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007
[  736.107144][T17338] RBP: 00007f2edce33e6f R08: 0000000000000000 R09: 0000000000000000
[  736.107161][T17338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.107177][T17338] R13: 00007f2edd026128 R14: 00007f2edd026090 R15: 00007ffe2ad2da98
[  736.107219][T17338]  </TASK>
[  736.651752][T17248] team0: Port device team_slave_0 added
[  736.868908][T17248] team0: Port device team_slave_1 added
[  737.105505][T12790] batadv0: left allmulticast mode
[  737.118269][T12790] batadv0: left promiscuous mode
[  737.134359][T12790] bridge0: port 4(batadv0) entered disabled state
[  737.164393][T12790] bridge_slave_1: left allmulticast mode
[  737.181203][T12790] bridge_slave_1: left promiscuous mode
[  737.192405][T12790] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.249596][T12790] bridge_slave_0: left allmulticast mode
[  737.260941][T12790] bridge_slave_0: left promiscuous mode
[  737.284849][T12790] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.800212][T13028] Bluetooth: hci5: command tx timeout
[  737.898874][T12790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.921673][T12790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.953406][T12790] bond0 (unregistering): Released all slaves
[  738.047814][T17248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.079192][T17248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.162316][T17248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.264696][T12790] HfR: left promiscuous mode
[  738.364397][T17248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  738.380706][T17248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.464166][T17248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  738.577761][T17365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2311'.
[  739.097085][T17248] hsr_slave_0: entered promiscuous mode
[  739.116143][T17248] hsr_slave_1: entered promiscuous mode
[  739.132226][T17248] debugfs: 'hsr0' already exists in 'hsr'
[  739.141207][T17248] Cannot create hsr debugfs directory
[  739.574238][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5
[  739.871023][T13028] Bluetooth: hci5: command tx timeout
[  741.015219][T12790] hsr_slave_0: left promiscuous mode
[  741.043695][T12790] hsr_slave_1: left promiscuous mode
[  741.074503][T12790] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  741.102182][T12790] batman_adv: batadv0: Removing interface: batadv_slave_0
[  741.148799][T12790] veth1_macvtap: left promiscuous mode
[  741.641922][T12790] team0 (unregistering): Port device team_slave_1 removed
[  741.708161][T12790] team0 (unregistering): Port device team_slave_0 removed
[  741.977402][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6
[  743.181584][T17435] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  743.189780][T17450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2321'.
[  743.209136][T17435] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  743.218453][T17435] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  743.228838][T17435] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  743.235199][T17435] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  743.253856][T17435] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  743.430533][T17248] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  743.483093][T17248] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  743.512310][T17248] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  743.559345][T17248] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  743.583002][T17248] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  743.609682][T17248] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  743.636508][T17248] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  743.669858][T17248] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  744.474616][T17248] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.513202][T13028] Bluetooth: hci1: command 0x0c1a tx timeout
[  744.592659][T17248] 8021q: adding VLAN 0 to HW filter on device team0
[  744.650522][T12864] bridge0: port 1(bridge_slave_0) entered blocking state
[  744.657845][T12864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  744.710958][T12790] bridge0: port 2(bridge_slave_1) entered blocking state
[  744.718334][T12790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  745.245098][T13028] Bluetooth: hci5: command 0x0c1a tx timeout
[  745.251272][T12777] Bluetooth: hci2: command 0x0c1a tx timeout
[  745.257737][T12777] Bluetooth: hci3: command 0x0c1a tx timeout
[  745.411403][T17505] FAULT_INJECTION: forcing a failure.
[  745.411403][T17505] name failslab, interval 1, probability 0, space 0, times 0
[  745.516229][T17505] CPU: 0 UID: 0 PID: 17505 Comm: syz.3.2329 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  745.516261][T17505] Tainted: [L]=SOFTLOCKUP
[  745.516268][T17505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  745.516289][T17505] Call Trace:
[  745.516296][T17505]  <TASK>
[  745.516303][T17505]  dump_stack_lvl+0x100/0x190
[  745.516337][T17505]  should_fail_ex.cold+0x5/0xa
[  745.516362][T17505]  should_failslab+0xc2/0x120
[  745.516393][T17505]  __kmalloc_cache_noprof+0x91/0x6c0
[  745.516413][T17505]  ? __lock_acquire+0x49f/0x1a40
[  745.516432][T17505]  ? tty_open+0x139/0xfa0
[  745.516462][T17505]  ? __pfx_tty_open+0x10/0x10
[  745.516487][T17505]  tty_open+0x139/0xfa0
[  745.516516][T17505]  ? __pfx_tty_open+0x10/0x10
[  745.516539][T17505]  ? chrdev_open+0x10b/0x6a0
[  745.516558][T17505]  ? chrdev_open+0x10b/0x6a0
[  745.516580][T17505]  ? __pfx_tty_open+0x10/0x10
[  745.516605][T17505]  chrdev_open+0x234/0x6a0
[  745.516624][T17505]  ? __pfx_apparmor_file_open+0x10/0x10
[  745.516653][T17505]  ? __pfx_chrdev_open+0x10/0x10
[  745.516673][T17505]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  745.516702][T17505]  do_dentry_open+0x6ab/0x14d0
[  745.516720][T17505]  ? __pfx_chrdev_open+0x10/0x10
[  745.516744][T17505]  vfs_open+0x82/0x3f0
[  745.516771][T17505]  path_openat+0x2873/0x4280
[  745.516800][T17505]  ? __pfx_path_openat+0x10/0x10
[  745.516826][T17505]  do_file_open+0x20e/0x430
[  745.516847][T17505]  ? __pfx_do_file_open+0x10/0x10
[  745.516883][T17505]  ? alloc_fd+0x471/0x7a0
[  745.516904][T17505]  ? do_getname+0x191/0x390
[  745.516928][T17505]  do_sys_openat2+0x10f/0x1e0
[  745.516953][T17505]  ? __pfx_do_sys_openat2+0x10/0x10
[  745.516979][T17505]  ? do_raw_spin_lock+0x128/0x260
[  745.517005][T17505]  __x64_sys_openat+0x12d/0x210
[  745.517031][T17505]  ? __pfx___x64_sys_openat+0x10/0x10
[  745.517064][T17505]  do_syscall_64+0x115/0x840
[  745.517111][T17505]  ? clear_bhb_loop+0x40/0x90
[  745.517134][T17505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.517155][T17505] RIP: 0033:0x7ff643b9de59
[  745.517172][T17505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  745.517191][T17505] RSP: 002b:00007ff644a83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  745.517210][T17505] RAX: ffffffffffffffda RBX: 00007ff643e26090 RCX: 00007ff643b9de59
[  745.517223][T17505] RDX: 0000000000103e81 RSI: 0000200000000400 RDI: ffffffffffffff9c
[  745.517235][T17505] RBP: 00007ff643c33e6f R08: 0000000000000000 R09: 0000000000000000
[  745.517246][T17505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  745.517257][T17505] R13: 00007ff643e26128 R14: 00007ff643e26090 R15: 00007ffe820560a8
[  745.517280][T17505]  </TASK>
[  747.131101][T17248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.313920][T12777] Bluetooth: hci5: command 0x0c1a tx timeout
[  747.345758][T17558] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2337'.
[  747.795743][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  747.804509][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  747.984625][T17248] veth0_vlan: entered promiscuous mode
[  748.460017][T17248] veth1_vlan: entered promiscuous mode
[  748.853827][T17248] veth0_macvtap: entered promiscuous mode
[  748.879262][T17248] veth1_macvtap: entered promiscuous mode
[  748.981820][T17248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.051459][T17248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.092925][T12864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.213249][T12864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.320022][T12864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.376969][T12864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.394790][T12777] Bluetooth: hci5: command 0x0c1a tx timeout
[  749.654644][T12790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.677217][T12790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.701090][T17594] Process accounting resumed
[  749.801507][T12864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.837157][T12864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.839217][T17597] WARNING! power/level is deprecated; use power/control instead
[  749.993551][T17597] futex_wake_op: syz.3.2345 tries to shift op by -2048; fix this program
[  749.993635][T17597] futex_wake_op: syz.3.2345 tries to shift op by -2048; fix this program
[  749.995823][T17597] 0x000000000001-0x000000020000 : ""
[  750.096232][T17597] ftl_cs: FTL header corrupt!
[  750.740268][T17606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2346'.
[  751.186437][T17611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2348'.
[  752.285398][T17634] misc userio: Invalid payload size
[  753.700331][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2362'.
[  753.920082][T17690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2364'.
[  754.736176][T17713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2368'.
[  756.090082][T17730] smpboot: CPU 1 is now offline
[  756.733542][T17739] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request
[  757.792594][T17752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2377'.
[  760.205834][T17754] kexec: Could not allocate control_code_buffer
[  760.643629][T12777] Bluetooth: hci5: unexpected event 0x30 length: 10 > 3
[  760.648572][T17796] program syz.4.2388 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  761.133564][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2387'.
[  762.298624][T13028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  762.318851][T13028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  762.333170][T13028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  762.350037][T13028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  762.361150][T13028] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  762.699093][T17846] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2402'.
[  763.067717][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2402'.
[  764.117292][T17872] random: crng reseeded on system resumption
[  764.317926][T17873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2406'.
[  764.442829][T13028] Bluetooth: hci0: command tx timeout
[  764.471214][T17817] kexec: Could not allocate control_code_buffer
[  765.691586][T17838] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.741608][T17838] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.778278][T17838] bridge_slave_0: entered allmulticast mode
[  765.812853][T17838] bridge_slave_0: entered promiscuous mode
[  765.848382][T17838] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.882356][T17838] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.918757][T17838] bridge_slave_1: entered allmulticast mode
[  765.953434][T17838] bridge_slave_1: entered promiscuous mode
[  765.998532][T17890] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  766.145695][T17838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  766.196947][T17838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  766.335646][T17838] team0: Port device team_slave_0 added
[  766.368927][T17838] team0: Port device team_slave_1 added
[  766.500395][T17838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  766.528344][T13028] Bluetooth: hci0: command tx timeout
[  766.549004][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.673905][T17838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  766.725496][T17838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  766.766704][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.885750][T17838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  767.185912][T17838] hsr_slave_0: entered promiscuous mode
[  767.199809][T17838] hsr_slave_1: entered promiscuous mode
[  767.214624][T17838] debugfs: 'hsr0' already exists in 'hsr'
[  767.227457][T17838] Cannot create hsr debugfs directory
[  768.605627][T13028] Bluetooth: hci0: command tx timeout
[  768.669687][T17838] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.080513][T17838] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.289118][T17838] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.536216][T17838] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.685052][T13028] Bluetooth: hci0: command tx timeout
[  770.897129][T17838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  770.933731][T17964] usb usb33: usbfs: process 17964 (syz.4.2428) did not claim interface 0 before use
[  770.996783][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  771.012932][T17968] usb usb33: usbfs: process 17968 (syz.4.2428) did not claim interface 0 before use
[  771.036472][T17838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  771.063303][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  771.100278][T17838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  771.131931][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  771.162792][T17838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  771.200702][T17838] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  771.638993][T17838] 8021q: adding VLAN 0 to HW filter on device bond0
[  771.714836][T17838] 8021q: adding VLAN 0 to HW filter on device team0
[  771.762453][T12867] bridge0: port 1(bridge_slave_0) entered blocking state
[  771.769677][T12867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  771.858593][T12867] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.865908][T12867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.955883][T17838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  774.068849][T18037] FAULT_INJECTION: forcing a failure.
[  774.068849][T18037] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  774.139215][T17838] veth0_vlan: entered promiscuous mode
[  774.162496][T18037] CPU: 0 UID: 0 PID: 18037 Comm: syz.4.2439 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  774.162527][T18037] Tainted: [L]=SOFTLOCKUP
[  774.162534][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  774.162544][T18037] Call Trace:
[  774.162551][T18037]  <TASK>
[  774.162559][T18037]  dump_stack_lvl+0x100/0x190
[  774.162633][T18037]  should_fail_ex.cold+0x5/0xa
[  774.162667][T18037]  ? prepare_alloc_pages+0x16d/0x5f0
[  774.162717][T18037]  should_fail_alloc_page+0xeb/0x140
[  774.162749][T18037]  prepare_alloc_pages+0x1f0/0x5f0
[  774.162781][T18037]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  774.162804][T18037]  ? bpf_ksym_find+0x124/0x1c0
[  774.162840][T18037]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  774.162877][T18037]  ? is_bpf_text_address+0x94/0x1a0
[  774.162905][T18037]  ? kernel_text_address+0x8d/0x100
[  774.162944][T18037]  ? __kernel_text_address+0xd/0x30
[  774.162972][T18037]  ? unwind_get_return_address+0x59/0xa0
[  774.163010][T18037]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  774.163047][T18037]  ? update_load_avg+0x1fd/0x1500
[  774.163085][T18037]  ? update_curr+0x71/0x540
[  774.163105][T18037]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  774.163139][T18037]  ? policy_nodemask+0xed/0x4f0
[  774.163168][T18037]  alloc_pages_mpol+0x1fb/0x540
[  774.163207][T18037]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  774.163240][T18037]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  774.163280][T18037]  folio_alloc_mpol_noprof+0x36/0x260
[  774.163323][T18037]  shmem_alloc_folio+0x135/0x160
[  774.163393][T18037]  shmem_alloc_and_add_folio+0x371/0xd40
[  774.163420][T18037]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  774.163443][T18037]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  774.163469][T18037]  shmem_get_folio_gfp+0x6ad/0x1910
[  774.163496][T18037]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  774.163530][T18037]  shmem_write_begin+0x1a4/0x420
[  774.163554][T18037]  ? __pfx_shmem_write_begin+0x10/0x10
[  774.163576][T18037]  ? balance_dirty_pages_ratelimited_flags+0x91/0x1170
[  774.163606][T18037]  ? __mark_inode_dirty+0xf6b/0x16e0
[  774.163647][T18037]  generic_perform_write+0x292/0xa40
[  774.163684][T18037]  ? __pfx_generic_perform_write+0x10/0x10
[  774.163711][T18037]  ? __mark_inode_dirty+0x55c/0x16e0
[  774.163741][T18037]  ? mnt_put_write_access_file+0x4e/0x100
[  774.163764][T18037]  ? file_update_time_flags+0x373/0x500
[  774.163790][T18037]  shmem_file_write_iter+0x10e/0x140
[  774.163818][T18037]  iter_file_splice_write+0x830/0x10b0
[  774.163852][T18037]  ? __pfx_iter_file_splice_write+0x10/0x10
[  774.163876][T18037]  ? __pfx___might_resched+0x10/0x10
[  774.163919][T18037]  ? __pfx_iter_file_splice_write+0x10/0x10
[  774.163942][T18037]  do_splice+0x109c/0x1f90
[  774.163963][T18037]  ? __lock_acquire+0x49f/0x1a40
[  774.163984][T18037]  ? ksys_write+0x190/0x250
[  774.164017][T18037]  ? __pfx_do_splice+0x10/0x10
[  774.164035][T18037]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  774.164056][T18037]  ? find_held_lock+0x2b/0x80
[  774.164083][T18037]  __do_splice+0x33b/0x370
[  774.164105][T18037]  ? __pfx___do_splice+0x10/0x10
[  774.164132][T18037]  __x64_sys_splice+0x187/0x250
[  774.164156][T18037]  do_syscall_64+0x115/0x840
[  774.164172][T18037]  ? clear_bhb_loop+0x40/0x90
[  774.164203][T18037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.164222][T18037] RIP: 0033:0x7f8cb499de59
[  774.164238][T18037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.164256][T18037] RSP: 002b:00007f8cb5868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  774.164275][T18037] RAX: ffffffffffffffda RBX: 00007f8cb4c25fa0 RCX: 00007f8cb499de59
[  774.164287][T18037] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004
[  774.164304][T18037] RBP: 00007f8cb5868090 R08: 0000000080000001 R09: 0000000000000009
[  774.164316][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.164326][T18037] R13: 00007f8cb4c26038 R14: 00007f8cb4c25fa0 R15: 00007ffc49cfc878
[  774.164350][T18037]  </TASK>
[  774.973186][T17838] veth1_vlan: entered promiscuous mode
[  775.021996][T17838] veth0_macvtap: entered promiscuous mode
[  775.040700][T17838] veth1_macvtap: entered promiscuous mode
[  775.077291][T17838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.102170][T17838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  775.269365][T12867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  775.290567][T13028] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18
[  775.301750][T12867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  775.328082][T12867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  775.351500][T12867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.393856][T18043] netlink: 206 bytes leftover after parsing attributes in process `syz.1.2440'.
[  775.701055][T12862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.745082][T12862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.834402][T12866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.866588][T12866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.970348][T18060] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  778.732204][T12777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  778.749442][T12777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  778.763499][T12777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  778.779818][T12777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  778.800778][T12777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  779.184301][T18099] __vm_enough_memory: pid: 18099, comm: syz.3.2453, bytes: 4398046457856 not enough memory for the allocation
[  780.648556][T12866] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.795635][T18116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2455'.
[  780.854260][T12866] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.932248][T12777] Bluetooth: hci3: command tx timeout
[  781.097982][T12866] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.205301][T12866] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.484470][T12777] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18
[  782.257751][T18140] ceph: Failed to parse sending metrics switch value 'P^'
[  782.505806][T18088] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.520653][T18152] kafs: addr_prefs: Invalid Command
[  782.555899][T18088] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.597290][T18088] bridge_slave_0: entered allmulticast mode
[  782.646926][T18088] bridge_slave_0: entered promiscuous mode
[  782.699362][T18088] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.744009][T18088] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.786842][T18088] bridge_slave_1: entered allmulticast mode
[  782.827605][T18088] bridge_slave_1: entered promiscuous mode
[  783.014461][T17506] Bluetooth: hci3: command tx timeout
[  783.048109][T18088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  783.144395][T18088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  783.554432][T12866] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  783.575568][T13028] Bluetooth: hci5: command 0x0c1a tx timeout
[  783.869761][T18180] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13695] was attempted by ""[18180]
[  783.932906][T18088] team0: Port device team_slave_0 added
[  783.973407][T18088] team0: Port device team_slave_1 added
[  784.004846][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5
[  784.213641][T18088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  784.267510][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  784.404414][T18088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  784.850185][T18088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  784.881137][T18088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  785.001689][T18088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  785.093794][T12777] Bluetooth: hci3: command tx timeout
[  785.159446][T12866] bridge_slave_1: left allmulticast mode
[  785.187622][T12866] bridge_slave_1: left promiscuous mode
[  785.214230][T12866] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.251315][T12866] bridge_slave_0: left allmulticast mode
[  785.283985][T12866] bridge_slave_0: left promiscuous mode
[  785.314588][T12866] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.652909][T12777] Bluetooth: hci5: command 0x0c1a tx timeout
[  785.965633][T12866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  785.999965][T12866] bond_slave_0: left promiscuous mode
[  786.021266][T12866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  786.064933][T12866] bond_slave_1: left promiscuous mode
[  786.096181][T12866] bond0 (unregistering): Released all slaves
[  786.285545][T18088] hsr_slave_0: entered promiscuous mode
[  786.320320][T18088] hsr_slave_1: entered promiscuous mode
[  786.354512][T18088] debugfs: 'hsr0' already exists in 'hsr'
[  786.376736][T18088] Cannot create hsr debugfs directory
[  786.467929][T12866] Â: left promiscuous mode
[  786.575252][T12866] HfR: left promiscuous mode
[  786.614944][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6
[  786.711662][T18222] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2473'.
[  787.174410][T13028] Bluetooth: hci3: command tx timeout
[  787.657098][T18225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2474'.
[  788.536221][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7
[  788.650238][T18248] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[17838] was attempted by ""[18248]
[  788.697781][T12866] hsr_slave_0: left promiscuous mode
[  788.716632][T12866] hsr_slave_1: left promiscuous mode
[  789.042542][T13028] Bluetooth: hci2: unexpected event 0x30 length: 10 > 3
[  789.047280][T18252] program syz.5.2477 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  789.172056][T12866] team0 (unregistering): Port device team_slave_1 removed
[  789.216381][T12866] team0 (unregistering): Port device team_slave_0 removed
[  789.881873][   T29] audit: type=1800 audit(959788388.843:26): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2479" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0
[  789.998948][T18259] Invalid ELF header magic: != ELF
[  792.344813][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9
[  793.176890][T18088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  793.216552][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  793.277458][T18088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  793.321189][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  793.359861][T18088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  793.402545][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  793.443850][T18088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  793.508988][T18088] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  793.896420][T18088] 8021q: adding VLAN 0 to HW filter on device bond0
[  794.089688][T18088] 8021q: adding VLAN 0 to HW filter on device team0
[  794.252227][T12862] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.259522][T12862] bridge0: port 1(bridge_slave_0) entered forwarding state
[  794.417471][T12864] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.424716][T12864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  796.135449][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'.
[  798.321983][T18088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  799.368661][T18088] veth0_vlan: entered promiscuous mode
[  799.444702][T18088] veth1_vlan: entered promiscuous mode
[  799.825645][T18088] veth0_macvtap: entered promiscuous mode
[  800.014299][T18088] veth1_macvtap: entered promiscuous mode
[  800.270559][T18088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  800.369628][T18088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  800.394825][T18423] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2497'.
[  800.439792][T12786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  800.488246][T12786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  800.552603][T12786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  800.612098][T12786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.125335][T12866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.180211][T12866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.306224][T12866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.348700][T12866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.218090][T18475] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2502'.
[  803.473246][T18475] netdevsim netdevsim5 ›: renamed from netdevsim0 (while UP)
[  805.015148][T18505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2506'.
[  806.004649][T18522] ubi31: attaching mtd0
[  806.042777][T18522] ubi31: scanning is finished
[  806.042822][T18522] ubi31 error: ubi_read_volume_table: the layout volume was not found
[  806.271760][T18526] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  806.494594][T18522] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  806.797692][T18532] ubi0: attaching mtd0
[  806.799084][T18532] ubi0: scanning is finished
[  806.809236][T18532] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  807.064737][T18532] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  807.821620][T18549] can: request_module (can-proto-5) failed.
[  807.978041][T13028] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  807.978130][T13028] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff
[  809.278432][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  809.287886][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  809.678643][T18588] FAULT_INJECTION: forcing a failure.
[  809.678643][T18588] name fail_futex, interval 1, probability 0, space 0, times 0
[  809.758980][T18588] CPU: 0 UID: 0 PID: 18588 Comm: syz.5.2529 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  809.759010][T18588] Tainted: [L]=SOFTLOCKUP
[  809.759016][T18588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  809.759028][T18588] Call Trace:
[  809.759034][T18588]  <TASK>
[  809.759041][T18588]  dump_stack_lvl+0x100/0x190
[  809.759069][T18588]  should_fail_ex.cold+0x5/0xa
[  809.759093][T18588]  get_futex_key+0x1d2/0x14f0
[  809.759115][T18588]  ? __pfx_get_futex_key+0x10/0x10
[  809.759132][T18588]  ? __mutex_unlock_slowpath+0x35d/0x930
[  809.759164][T18588]  ? find_held_lock+0x2b/0x80
[  809.759188][T18588]  ? __might_fault+0xc5/0x140
[  809.759208][T18588]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  809.759242][T18588]  futex_wake+0xf4/0x5e0
[  809.759269][T18588]  ? __pfx_futex_wake+0x10/0x10
[  809.759297][T18588]  ? vfs_read+0x243/0xb40
[  809.759317][T18588]  do_futex+0x2b2/0x440
[  809.759337][T18588]  ? __pfx_do_futex+0x10/0x10
[  809.759363][T18588]  __x64_sys_futex+0x34f/0x4d0
[  809.759385][T18588]  ? fput+0x79/0x100
[  809.759405][T18588]  ? __pfx___x64_sys_futex+0x10/0x10
[  809.759434][T18588]  ? __pfx___x64_sys_pread64+0x10/0x10
[  809.759460][T18588]  do_syscall_64+0x115/0x840
[  809.759476][T18588]  ? clear_bhb_loop+0x40/0x90
[  809.759498][T18588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.759516][T18588] RIP: 0033:0x7f2edcd9de59
[  809.759533][T18588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  809.759550][T18588] RSP: 002b:00007f2eddc930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  809.759568][T18588] RAX: ffffffffffffffda RBX: 00007f2edd026098 RCX: 00007f2edcd9de59
[  809.759580][T18588] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2edd02609c
[  809.759591][T18588] RBP: 00007f2edd026090 R08: 0000000000000001 R09: 0000000000000000
[  809.759602][T18588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  809.759613][T18588] R13: 00007f2edd026128 R14: 00007ffe2ad2d9b0 R15: 00007ffe2ad2da98
[  809.759636][T18588]  </TASK>
[  811.136877][T18602] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2523'.
[  812.521020][T18645] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  814.131517][T18687] netlink: 'syz.5.2545': attribute type 27 has an invalid length.
[  814.228708][T18689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2545'.
[  814.273226][T18687] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2545'.
[  814.473960][T18689] bond0: (slave bond_slave_0): Releasing backup interface
[  814.999063][T18700] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  815.107508][ T5641] BUG: unable to handle page fault for address: fffff52000936208
[  815.107527][ T5641] #PF: supervisor read access in kernel mode
[  815.107537][ T5641] #PF: error_code(0x0000) - not-present page
[  815.107548][ T5641] PGD 23fff5067 P4D 23fff5067 PUD 1c6cd067 PMD 25f90067 PTE 0
[  815.107582][ T5641] Oops: Oops: 0000 [#1] SMP KASAN PTI
[  815.107602][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  815.107628][ T5641] Tainted: [L]=SOFTLOCKUP
[  815.107635][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  815.107652][ T5641] Workqueue: events_power_efficient fb_flashcursor
[  815.107732][ T5641] RIP: 0010:sys_imageblit+0x16c1/0x1d60
[  815.107771][ T5641] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee
[  815.107790][ T5641] RSP: 0018:ffffc9000436f8a0 EFLAGS: 00010a02
[  815.107805][ T5641] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[  815.107822][ T5641] RDX: 0000000000000000 RSI: 1ffff92000936208 RDI: ffffc9000436f928
[  815.107834][ T5641] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003
[  815.107845][ T5641] R10: 0000000000000004 R11: 000000000000751b R12: ffff888026844f51
[  815.107857][ T5641] R13: ffffc9000436f928 R14: ffffc900049b1040 R15: ffffc900049b1040
[  815.107870][ T5641] FS:  0000000000000000(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000
[  815.107889][ T5641] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  815.107902][ T5641] CR2: fffff52000936208 CR3: 0000000046a36000 CR4: 00000000003526f0
[  815.107915][ T5641] Call Trace:
[  815.107921][ T5641]  <TASK>
[  815.107931][ T5641]  ? __pfx_sys_imageblit+0x10/0x10
[  815.107958][ T5641]  drm_fbdev_shmem_defio_imageblit+0x20/0x130
[  815.107992][ T5641]  soft_cursor+0x524/0xa10
[  815.108013][ T5641]  bit_cursor+0xca1/0x1490
[  815.108033][ T5641]  ? __pfx_bit_cursor+0x10/0x10
[  815.108054][ T5641]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  815.108083][ T5641]  ? get_color+0x1da/0x450
[  815.108110][ T5641]  ? __pfx_bit_cursor+0x10/0x10
[  815.108127][ T5641]  fb_flashcursor+0x338/0x430
[  815.108155][ T5641]  process_one_work+0xa23/0x1940
[  815.108187][ T5641]  ? __pfx_process_one_work+0x10/0x10
[  815.108217][ T5641]  ? __pfx_fb_flashcursor+0x10/0x10
[  815.108245][ T5641]  worker_thread+0x5ef/0xe50
[  815.108282][ T5641]  ? __pfx_worker_thread+0x10/0x10
[  815.108310][ T5641]  ? kthread+0x13a/0x450
[  815.108335][ T5641]  ? __pfx_worker_thread+0x10/0x10
[  815.108363][ T5641]  kthread+0x370/0x450
[  815.108387][ T5641]  ? __pfx_kthread+0x10/0x10
[  815.108412][ T5641]  ret_from_fork+0x72b/0xd50
[  815.108437][ T5641]  ? __pfx_ret_from_fork+0x10/0x10
[  815.108460][ T5641]  ? rcu_is_watching+0x12/0xc0
[  815.108482][ T5641]  ? __switch_to+0x800/0x10f0
[  815.108503][ T5641]  ? __switch_to_asm+0x39/0x70
[  815.108531][ T5641]  ? __pfx_kthread+0x10/0x10
[  815.108557][ T5641]  ret_from_fork_asm+0x1a/0x30
[  815.108588][ T5641]  </TASK>
[  815.108595][ T5641] Modules linked in:
[  815.108606][ T5641] CR2: fffff52000936208
[  815.108622][ T5641] ---[ end trace 0000000000000000 ]---
[  815.108632][ T5641] RIP: 0010:sys_imageblit+0x16c1/0x1d60
[  815.108656][ T5641] Code: 7c cd 00 48 89 fe 48 c1 ee 03 80 3c 1e 00 0f 85 aa 05 00 00 4d 63 f6 48 8b 8c cc 88 00 00 00 4f 8d 34 f7 4c 89 f6 48 c1 ee 03 <80> 3c 1e 00 0f 85 1b 03 00 00 49 89 0e 41 89 c6 8d 4d fd 41 c1 ee
[  815.108675][ T5641] RSP: 0018:ffffc9000436f8a0 EFLAGS: 00010a02
[  815.108689][ T5641] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[  815.108701][ T5641] RDX: 0000000000000000 RSI: 1ffff92000936208 RDI: ffffc9000436f928
[  815.108713][ T5641] RBP: 0000000000000004 R08: 0000000000000005 R09: 0000000000000003
[  815.108724][ T5641] R10: 0000000000000004 R11: 000000000000751b R12: ffff888026844f51
[  815.108736][ T5641] R13: ffffc9000436f928 R14: ffffc900049b1040 R15: ffffc900049b1040
[  815.108748][ T5641] FS:  0000000000000000(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000
[  815.108766][ T5641] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  815.108779][ T5641] CR2: fffff52000936208 CR3: 0000000046a36000 CR4: 00000000003526f0
[  815.108798][ T5641] Kernel panic - not syncing: Fatal exception
[  815.108867][ T5641] Kernel Offset: disabled