last executing test programs:

37.613488224s ago: executing program 3 (id=4715):
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000300)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2})
r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
getdents64$auto(0xffffffffffffffff, 0x0, 0xa)
ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffeffb, 0xfffffffffffffffe, 0x1, 0x8, 0xba72, 0x0, 0x2, 0x0, 0x2})

36.914951355s ago: executing program 3 (id=4719):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="1100000008000000000000000000000001", 0x11)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x6, 0x3)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x8800)
r1 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000040)=0x400)
shmctl$auto_SHM_STAT_ANY(0x69a0, 0xf, &(0x7f0000000280)={{0x4, <r2=>0x0, 0xee00, 0x3ff, 0x8, 0x0, 0x5}, 0x1, 0x5, 0x9, 0xc, @raw=0x7, @raw=0x30, 0x8, 0x0, &(0x7f0000000140), &(0x7f00000001c0)="c845af89eddb836bd0cd55b01bc1914cf4b294895bcdee894f29bd70c3f7694a3202cf829e9e8fb76d997472e43dc88266524759c2648147d7a3e44c"})
r3 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000400)={@siginfo_0_0={0xc, 0x477, 0x10000, @_sigsys={&(0x7f0000000300)="e1901e228d0f7dcd0cfbcff313c0dd5015707920d9b92138d9ad0e6f54f64f407f09164712ee946bf1cd7fdd91e9e6b16c0fdb3d70bd843f341c203bc5dbb423c552cedba43bc5d2d199553d0e83462ee99a4a8fb6508fd688b2e730133d51c5ef50b5620fa82d784a0a876fd777a1d6a7fb90ba024784e13dffcd7d175c414f9e48922dcad3fe7a148fda5cd73de887117efaf4170548eba57a6242043caf78fe143828337bc856c70468662a8c5a92734d6d975e67092b04eea77893cb80792ca3af2f93bd142b7cb1543bcad291aca292675a88f47be8a4c33ea57f6cbd194c0a912f567adc6bcf082d81ee67dca4e7e36b078e3b6ed462", 0x3}}}, 0x85, &(0x7f0000000480)={{0x7, 0x4d41}, {0x4, 0x9}, 0x1, 0x24d6, 0x99, 0x5, 0xffffffffffff9d0f, 0x5, 0x62, 0x80, 0x8, 0x15b3, 0x3, 0x7, 0xfffffffffffffff8, 0x100000000})
syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/time\x00')
sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa8, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8000}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x4}, @NL802154_ATTR_SEC_LEVEL={0x64, 0x2d, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @uid=r2}, @generic="c4e49002707409f5eeb8084dc6e37d7f048f48364229a97a0a99dfa3c9a4b1599c63c2402eeda609fd57f8036fc6d38ee3c4f92e5d43d0423eb882a30a84b2df396b39bfbea57f77c029ba3be0a0c3", @generic='X', @typed={0x8, 0xff, 0x0, 0x0, @pid=r3}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x8000}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x9}, @NL802154_ATTR_SCAN_DURATION={0x0, 0x24, 0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0xbe}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740", 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x80840, 0x0)
ioctl$auto(0x3, 0x5404, 0x38)

36.152863821s ago: executing program 3 (id=4723):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8008000)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1c, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [0x1], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x10000002, 0x4006, 0x4}, {0xe63b, 0x3, 0x52, 0x88, 0x2, 0x1a7b870a, 0x4, 0x8000c, 0x100000000}})
r1 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f00000000c0)={{&(0x7f0000000480)="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", 0x12, 0x0, 0x9, 0x0, 0x7, 0xfffbfffd}, 0x10003}, 0x4000, 0x20000043)
r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xffffffffc0403d11, 0x0)
recvfrom$auto(0xffffffffffffffff, 0x0, 0x81, 0x100, 0x0, 0xfffffffffffffffd)
mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = prctl$auto(0x8, 0x7fffffffffffffff, 0x0, 0x100, 0x0)
socket(0x2, 0x2, 0x0)
connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x2, @private=0xa010100}, 0x4d)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0xc, 0xffff)
syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f00000001c0), 0xffffffffffffffff)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
move_pages$auto(0xffffffffffffffff, 0x1002, 0x0, 0x0, 0x0, 0x80)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
write$auto(0xffffffffffffffff, 0x0, 0x80000083)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0)
write$auto_tty_fops_tty_io(r3, &(0x7f0000000240)="d981d87ec99f3f23acba3c083d4a8e144d24001c93ffa9c39039fb64f5318f66c7b3de8b9cd2b0726a8293b03b209e935cf5aeaa113a73560127c8f38f1a2a25af818443e737fca0d6ca3037e2dc95f4951fd06c8970c9eb33821a2cf3072b7d27556d2843e5341a45db35e4c6336a7d69a9999695a04ca94cd8fad6872e7a6a7f42d26cc0371e341af85bda23aa710c406095d3356bc0195b2a4e814085b4f55a1262c494cf5d8ae9b4", 0xaa)
sendfile$auto(0x3, r4, 0x0, 0x400000000006)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0)
rt_sigsuspend$auto(0x0, 0x8)
shutdown$auto(0x200000003, 0x2)

35.122268975s ago: executing program 3 (id=4729):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/quirks\x00', 0x9c0302, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/firmware/acpi/tables/FACS\x00', 0x8100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000)
madvise$auto(0x0, 0x200007, 0x19)
io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', <r1=>0x0})
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x8e4, &(0x7f0000001100)="77cc34de9e4934e3c803eabdd97748c2782e53d728aac1d8eb2035fdb1fe3b649072ba5d64088d0b0a5bd93458564cf922312ac2bd3624439cfac357eb673058de20114acf23b2dd6e2383b24237df8d1b61c9e4f26d0ed6671390002218dfab360dd1ae92406b7c3731b15b80f5d12b602379ad55d3075b8169d2c6251ae15b51506774247b1f8e92c93518851545e74dd65e1c262bb342a87e6235b2dc09000000ec3a112ac6f126805c87b68bb28e340c8f905605663b91e57a3c4493261f08a872be064b219545b4552a")
r4 = setfsuid$auto(0xffffffffffffffff)
getpriority$auto_PRIO_USER(0x2, r4)
ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f0000000600)={0x200000dd, 0x0, [{0x8001, 0x5, 0xff}]})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001200)='/dev/nbd0\x00', 0x2003, 0x0)
mmap$auto(0x8, 0x40000b, 0x0, 0x19, 0x8000000000000003, 0x7ffd)
r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0)
ioctl$auto(r5, 0xab04, 0xffffffffffffffff)

34.721773437s ago: executing program 3 (id=4732):
mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/rq_affinity\x00', 0x2062, 0x0)
write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7)
io_uring_setup$auto(0x8, 0x0)
select$auto(0x7, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffd, 0x4, 0x3, 0x14b, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range$auto(0x2, 0x8, 0x0)

34.141527698s ago: executing program 3 (id=4735):
mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x0, 0x5, 0x0)
r1 = pipe$auto(0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c)
write$auto(r0, &(0x7f0000001040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8)
socket(0x11, 0x3, 0x9)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r3, 0x4008af03, 0x0)
ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)

30.07354237s ago: executing program 2 (id=4748):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
poll$auto(&(0x7f0000000180)={<r2=>r1, 0x3569, 0x8}, 0x34, 0x5)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
madvise$auto(0x0, 0x2003f0, 0x11)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0)
sendfile$auto(r3, r3, 0x0, 0x1000200)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
getpriority$auto_PRIO_USER(0x2, 0x0)
r4 = setfsuid$auto(0xee00)
setresuid$auto(0xffffffffffffffff, r4, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5)
r7 = getpgrp(0x0)
sendmsg$auto_TASKSTATS_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r6, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f0000000300)={{0x7fff, <r8=>0xee00, 0xffffffffffffffff, 0x2, 0x4, 0xffff, 0x5}, &(0x7f0000000240)=0x9, &(0x7f0000000280)=0x2f, 0x7, 0x0, 0xeff, 0x1000, 0x42, 0x7, 0x10, 0x2, @raw=0x9, @raw=0x7})
r9 = fcntl$getown(r3, 0x9)
sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000002540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f0000003080)={0x213c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x7c, 0x1, 0x0, 0x1, [@nested={0x70, 0x3a, 0x0, 0x1, [@generic="9fcf81f7f47b0bf37d8659427ed5f14046b10bab9df95bbe7868c81dff2fa26fe06c2472eab44c4a16a1af3f98d8e514172bdbe743093c46b0c87607994c656bc77a44a1f231d177e42ce537eb234d4f4c6ffcc42c6edaf22b22886f8c8cc801bac40dea9b44407a49dd014c"]}, @nested={0x8, 0xdb, 0x0, 0x1, [@nested={0x4, 0x8f}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x18e, 0x1, 0x0, 0x1, [@typed={0xffffffffffffffa4, 0x15c, 0x0, 0x0, @uid}, @generic="f45edb8c7046c86ac2d1b4e260ed6f36676cab1650765de38abaece8fe5f1bcb5724795be4228311903a85c0c30b477b2746223aa4a6f301aaa82577754b96e1e1dd1b535a21e31a2fa30a9d0918abdca6a9d94c63cf0486a4aa5413b7a98d2677041b79a8a608c3a082b88c7be91b7777ed2d6775db83f682a5b641be7fb9b65956685d0cb051d39dd93dcf6c276d3b614e03f42b3fa1b8687d045ea2ac65d75443153d4df66d250e9dd7439ebd7a4f841c9e96efa3ae04778240930010b6d0bbf6670a73e1b208a104f9ebe25f34267b6b9723286fafb3ffd91a24c04c", @nested={0xa1, 0x1, 0x0, 0x1, [@generic="1893164836cea768e0f79d9af7c745b3a6edc127dddc7aee09bc34c3fa3c497ad834ab177eb6256bfe759ea8503afa1edc88031f821fe8b76046b2521e387a05da10f1ee92eb5230a7230dbe7822a3e4b6a66c45e8ee9415266e2da4c36aa0e5870b14a2775091d31628334fb3c2bdf275e3f2ba4192ef89994d07a21c10c75ecd2b08e143bf317e06b689ddaa1e659b598f582251fa10ba737ab1dbd7"]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1281, 0x1, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @uid=r4}, @generic="56e1869a9c9a0bd6d1f041405e42b57a1d8fd559da44fe44f1795e565003b8a2c8f752e0afd95988d87d0247526fe8af203ee001917fd7d477b3afa3a1f1f144366404b94a9a1a6b04f3e343bafaed80651b856026ae40e9d6ef6554646367b611af400599b720f71c9cc56fa35514dc044cfd8d9ec9b4066256070c3040d0ac7be30555285d54df84b626", @nested={0x10, 0xaf, 0x0, 0x1, [@nested={0x4, 0x7d}, @typed={0x6, 0x12e, 0x0, 0x0, @str='[\x00'}]}, @nested={0x18, 0xaa, 0x0, 0x1, [@nested={0x4, 0xc8}, @nested={0x4, 0xec}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0xffff}, @nested={0x4, 0xf2}]}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x3}, @generic="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", @generic="8420fc96a321f3bdfad7414fca4f621bbe741d81c5bf80e0e8c59754c5f0923378ba657886f8dd770228e83b9f8061263444f672e21d7f427b65bab4cd791b0cd63bf516ecc2ad88a88aabf24a5b1cb931d8b1a2c19f814d8b0cc721fab0879d00cd390e852d5423ebc6d8518d8e0c978085ec3f8d1ef494571737a4018edbf97d2fc26934fe7c84574a3f7706d128186c7262bca26a2bdf7d4298e63eb63118c805a31bf8f8bac83c7a", @nested={0x10f, 0x114, 0x0, 0x1, [@nested={0x4, 0x137}, @generic="42720416227e7a5adb1e45041ece50f6c02012b545b2060829fde5689fc67e1f8d70abc20eab63fd400986fbe9546b7c2708cd1b84fe06765abfcf2d147e5f078c58b6526c965a1e6459a3de613327aa6bb5d24985b48355a9c14667d2e78cd6f1ef50e43ee6959f5e162af1f72906ad66771484e77ebdcf917c861627ebea2afb256f38c6dd9b966b45d047073d9840", @generic="c1e7e36a61b2136fcc3c0494fa2346a51c166b94714e1f9543a58c7cd43e10f6f12d9b5bad6b15ab7f63813dad6ba2f65738f0c2ef374cbaa21c5a202d5352bc36d1ecb8538782e8dc43650e024631c86003ea0bc053e992fe0ca7a7fdd97cf9b90c4bb272d4983e0373f2a178a88d7a9a515605357350"]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xf6, 0x1, 0x0, 0x1, [@generic="837e8f97f16d20ddb0d9c0fefccc15dcf8ee84d06452888115c7c74897413f62c12ea5b74824a137e1aa7f8164b6c1f73fc8cb04e28c88f1210a1bde0182406fa266b07ea1f67517332b2ec76567cc5887dd5dd767390122450cc6c11024bcb37937b8e6c9a9f84dee608f2d20e9c4b68ba969aa4b0466de9f033138ff96cad0902d2b0c200bd1bef18243c4d8db0e6409d7275c8a54be968c66b0b8986326e1d6eb745a13b7e908961fb04df9766f782579d3b093fde71ee4e363e1b0986939566f056a9c066f70", @typed={0x8, 0x167, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="a26b594b60b1b4f8bd2f45fea7b6073f3aa0d55e9b708f9102fe39f82e79b9286f4a"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x228, 0x1, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64}, @typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x81, 0x4e, 0x0, 0x1, [@generic="0faeff2f75eb16569325253fa29f6eb75388a442b24c8ee217a4bfeafd41cfc4a615446829eb4eda1bad7e5e8f075abccf", @nested={0x4, 0xa3}, @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x401}, @typed={0x1c, 0x65, 0x0, 0x0, @str='/dev/infiniband/rdma_cm\x00'}, @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="77754a8b8405ae130e448527"]}, @nested={0x174, 0x12, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x5}, @typed={0x50, 0xf2, 0x0, 0x0, @binary="546bdd6adfbb99a50ed83bf9d6b614ba78e1a3574174916d56f499e4a39ae80bea0a1ad411ceaf6adbef86b2a9ea5f81e7482ea4d9a44571a05a27f4b2da1a8785cfbe744a35b11f23f4d062"}, @typed={0x8, 0xa3, 0x0, 0x0, @u32=0x84}, @typed={0x4, 0x76}, @generic="4839ddcbf96274adebcfe0283d7995333de583c51d2827e81aeff8a56de25f6bac4451ee8f68ac3277ab35f596bd2dc1e60efc74f738eceb4ebc33ad8b8806e6b5016a3bee5985910c2fc1a6c7db2c337b2516a02f14635460637ae8a14536e822a4146cb2e92368c4c5301b442f5c14347d539d739e72a6102534e9979f9f55549c88c5d63a46de201cb8ef7300f9fa560ca2002f4b9906e88ab5388db552d7a92974f6456b513d71ff1dcfc22b6ecd2fcaabed6025df67cc64110a1c6e989fe8f239b8f432911a7458bf0819efca1eedb79e3a4ed14a01e72c4a884d1b1698b3a9e513cdfde53f065ff204de1d53d7", @nested={0x4, 0x17}, @nested={0x4, 0x77}, @nested={0x4, 0x102}, @nested={0x4, 0x12c}, @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@local}]}, @nested={0x18, 0xd2, 0x0, 0x1, [@typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@private2}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x210, 0x1, 0x0, 0x1, [@nested={0x20c, 0x11, 0x0, 0x1, [@nested={0x4, 0x8c}, @nested={0x4, 0x120}, @typed={0x8, 0xff, 0x0, 0x0, @pid=r7}, @generic="9858e881bed1ec98f8c3dc74e6bd90a8bba848b1554e968d9acf1ee22867cf8d96e1eef9cdcbad8bedda186c36c1971c0a3534ffed75bbeade1c1219c7528e544a8964ad5114d32992352e728899cb495c4767eb8de82025fef91b0bfc0243c272db295149b1bc04167ed3bc42b7adde5c", @typed={0x4, 0x15d}, @generic="67e8d11ce632af06c1dc12e21a3226c0f55a99396aa03aef59ac86ceec5426a95cefcc232a54178e97c42daeab5119f6320ae743aa0fa54b2151e1b45ca389e0f5605bd4c59bdda74504f433fe1eb778b3cf63d52739bcae29486e0dc0fcf82ae0b66723ae51eef64bd427ccbd3ef48dff1d2c75e773b8e2a73749023d54313de97267b3df609d1bd90119a7bdaaf43f053a683777cd3701f90ef69b1e045bb79a7ab0b394b2c06eed9e328d97b5f1b217599252006cc4114a3e6dd00997d083df6a527f93ed032bce806b", @typed={0x14, 0x167, 0x0, 0x0, @ipv6=@private1}, @generic="99d039738f28c072ae9a2984074cc261595410336a6c0aa3d8d5fa09b91516c741d545a60fdd942fadd76299c2114b9a4e38f87d4653c7a8a2ebab98dc0610827010c7dd55c6c437aa12ab92ad15958bc8bccbd799bc72dc59afdc993ab6c0e8f61fcdded834d2ea5536f0eaad57e50c25b0588ead8f5263ae8d41de6698dc3b5c5f7a73cc55bad542cf506c1a3e22e9ed2199bd853a4f90255903aa9bd36e00b16970c3"]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x88, 0x1, 0x0, 0x1, [@typed={0x7a, 0x164, 0x0, 0x0, @binary="e150cdc35f27da280fdd3df0b8d282a904163ef05b58764826b5277927be46b7b4430d7a320dc61ec36613f753ec0a8892321693e7d804f9108772d6458963d1803c68f203025b9419aaa3864a9fe21078764d197be660c881e23b276a0992725127413c300a73001a8d0fe441ea4cd7a3cb3bf4df2f"}, @typed={0x8, 0x123, 0x0, 0x0, @uid=0xee00}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1d9, 0x1, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@loopback}, @generic="c3c67b6d8486bcff5e4648cdd34aab56ff2989370be70042610b529c99f87209b03c83634a8ee479bfcede41968a3eb4502e7691a87305268d37d596c91aaebbaf665c10bca492c39b12b6114ceed513d213bed30554c4910678e8f4147f6827f7", @generic="634cbde776311b21b0490113bce54401c27ddf52dbde401317f18f31d24c844cb05751a029dc1d4b2879ac3c03886ada387102541de19289dec7a4ec30c97c19d13c", @generic="83ef25b5a5267eaa82550fafaef79b995313dbfe17d7e409876de8377f411863fb92efbb1dc9005ff05acfd3e6fc2518741f62e4aeaf5d21e2380cfe7700c0986dde02c0a165e4f7265168743446d72651b1497e66bf65754d20b1045f1e926d2ccadc0a9ee9b9d37260a4f28cd27e60b79a58003db7b5f9d8fe8340c5fc1609a3e09843a9d607385d14e5fd0ca02f130e06d6bfdcde055cf31a2129857915a9fe479c741fe173f35a7807a269b9274e63cf82e8e5ab47f02bc29a6c3f0b8479fc97b5d2ecb43b114d9af32d11a4a2f49ce174af5dd853766b7385e02815bb8d383ebb", @generic="4a06141cd4b8cb96738a16feb709adb3fccd28e26d85d3447054cf4a024dba9db60dbed0254cd8bdda02306e9c49211b07ce7846b5378ad60678d743cbae80c1dcfa4878c841ae"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x502, 0x1, 0x0, 0x1, [@typed={0x4, 0xdc}, @generic="e590f3706af2608bd6a9545539e2f5f7ba4a762bf3df00861f4d7a7ed5b06fc1e7fb15918b41a8589ca95cc892eafd8582a0a33fb78f7cadb0313edda77ba9f902be8aa89b140e5c297e3a1d40d2f01f957705e35139eb05d521b3824e4aa4835400bb7642bf9cfb0e3abaec", @generic="4190387520e5037111480b43238b2373e5206018556bd0c85f82c9d7fbe8617638dbc2669b9765279f75a85335e59c113be115ae91af", @generic="0b709cdc434c155a8035cddeb37d7ffea28cd094fafbd27bedf65f36d1fb7b038e8186d1046c95ba66d1df6214294d0c0e4c94565d6c80a5396ec8fd8d5f68186e9730a2cc933bab707962ce816d816c90cc9931ae45f6647895b0e482118b6371d2de78ffed112982edfc1bf9e54fa3f262cf07d635a0f7b16225d9794a8e318641274aa6dec0850f8bfce8c249654ae83cc35e82b6e1951a100034710ac0340c1e511ee54a35d8ed1279093216dcb2e5b9ea5bbd3db193297f942820924ff144ebd69d335a3fd807af47a3fedfee22a01eb5493af3db660b0d51475cee4555943731f9c9b2a11d687670c803", @generic="b295a4d513c04580bf48aa9e1bd97d8a9a08970f52af9d702b3ce48278ab8ba5612bd2808af3aa363db942cb55b33d176b808e90365fe0caa13f5ed46b17d3a25440cb0537c3d10a088683e3c232bcba39d9289ff5472654179a13bb8960ddc9d009", @nested={0x17f, 0x8d, 0x0, 0x1, [@generic="7d838b107164dcdb844c2ec28c7aadf022419e7177a99d55ddf36e1c9c0e26a073fbf8a13aff4327b8a894512969c8423372dd9556c310305126b0b0d2266927cdcedf4780f2964b36f1f3e2b5042e4615adb4d1ed93017bbe9eac436098593148d169ea237471400488b8a845544df4b706d90843a3e04ae7560c00ea1dcc77435043f2eb210304d8aae924dc329e1f1ac94885", @generic="1ae4ba7095af2ba752da69e339f5615256d49c3fc83811ec4ce3404b1510c24512272de2dd96c9c11c7d6b17d1cc9e216fc0353a6fb2d927cec6c48523afa41ab4a945002ab994caa43476556b2c3bb466aefcadcd6e221a49e9d231628d0e0e3c07820769c52cc321164de8396ce6337df5dec96b504db12013", @typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x14e}, @generic="36915cb0a85de2031a26f727ab4be174c6f88fa46bfc962a13a1a7d6a93a5eabe1b2a0db419b698893998640d1791e87af6692ee8de72099407c923f80ebc4ccba2b4aa7e0", @nested={0x4, 0x13c}, @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0xf7}]}, @typed={0x8, 0x10f, 0x0, 0x0, @uid=r8}, @generic="78a17984f52e637c0e7a10ebfd8071dbf5a0e0c3e0c1550ca8b9e36ed687a4d6fc747d17d5b05804751ceb64f7d913eda1800628b536255a354acf0fbd8e2528705df603418aa98170ea95304dbb70e2fc03bda7671d053b798dfecbfd530350754d63859661010a607ee2de41bd9be5bc1d39be65f9ade3bcd5b9724c95dbabd9507afe5357ba569320c3fad79c7863fc00071b69eaa68f9777731195912218c0100b12aa55e98475dec8dbccf8def65eff1eaff1b10bf14d", @nested={0xbd, 0xa0, 0x0, 0x1, [@generic="601950de5ba15b91cfc35287c65d5da342d47396f3cf1e4c62582311eaf7f407645a213412897dfc3fae87eabb55450d0f6421dbc58e7bb22d5d315b629bce5cd4ea6929e34e974ac126e602baa35b0e4e9963dad27aa64c9f632e6d88c20f02de29ab273d0b46f17c128e27dd653aa9daf7c7a5edaf88d198", @nested={0x4, 0x68}, @nested={0x4, 0xa3}, @nested={0x4, 0x16a}, @nested={0x4, 0x169}, @generic="adfb603378678a7cbe0d4decd544db6ee529987ce730db663ca3e74267b66c1328d6761561e31485", @typed={0x8, 0x101, 0x0, 0x0, @u32=0x5}]}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=r9}]}]}, 0x213c}, 0x1, 0x0, 0x0, 0x48000}, 0x40881)
ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=[0xfff, 0x2688])
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880)
r10 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='2'], 0x1ac}}, 0x40000)
sendmmsg$auto(r10, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)

28.37787267s ago: executing program 2 (id=4753):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop4\x00', 0x185500, 0x0)
ioctl$auto_IOC_PR_RELEASE(r0, 0xc01070ce, &(0x7f0000000040)={0x40000000006, 0x16, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffb, 0x8000)
timer_create$auto(0x8, 0x0, 0x0)
prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x3, 0x5)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x1, 0x0, 0x800)
r1 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x3, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1ac}, 0x1, 0xffffff9e}, 0x40000)
timer_create$auto(0x9, 0x0, 0x0)

27.951691263s ago: executing program 2 (id=4754):
mmap$auto(0x800000, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f0000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfbe}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x10000007, 0x4008)
unshare$auto(0x40000080)
setsockopt$auto(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x1)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42200, 0x0)
capset$auto(0x0, 0x0)
r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
clock_getres$auto(0x7, &(0x7f00000000c0)={0x3, 0x38})
ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r1, 0x40107447, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/mixer\x00', 0xfffffffffffffffe)
mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/conf/ip_vti0/arp_announce\x00', 0xa0202, 0x0)
r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0)
ioctl$auto(r3, 0x80004508, r2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0)
readv$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x100010001}, 0x1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7}, 0x41)

25.656483302s ago: executing program 2 (id=4757):
unshare$auto(0x40000080)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), 0xffffffffffffffff)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0)
open(0x0, 0x22240, 0x147)
sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r0, 0x0, 0x0)
ioctl$auto(0x3, 0x541b, 0x38)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x3)
read$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x0)
getpgrp(0xffffffffffffffff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
write$auto_mousedev_fops_mousedev(0xffffffffffffffff, 0x0, 0x0)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
r3 = epoll_create$auto(0x1)
epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x4, 0x8021, 0x0, 0x4, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)

24.823599079s ago: executing program 1 (id=4759):
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd701afedbee35020000000800270008000000ae1b7e089a0b0000"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
madvise$auto(0xfffffffffffffffc, 0xffffffffffff0001, 0x3)
write$auto(r1, 0x0, 0x10007c)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r3, 0x0, 0x1)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop13/ext_range\x00', 0xc0402, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x800)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
read$auto_transaction_log_fops_(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xffffffffffffffff, 0x5, 0x1, 0xbe, r4, 0x18)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x14, r0, 0xff)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

24.537217591s ago: executing program 2 (id=4760):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="1100000008000000000000000000000001", 0x11)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x6, 0x3)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x8800)
ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000040)=0x400)
shmctl$auto_SHM_STAT_ANY(0x69a0, 0xf, &(0x7f0000000280)={{0x4, 0x0, 0xee00, 0x3ff, 0x8, 0x0, 0x5}, 0x1, 0x5, 0x9, 0xc, @raw=0x7, @raw=0x30, 0x8, 0x0, &(0x7f0000000140), &(0x7f00000001c0)="c845af89eddb836bd0cd55b01bc1914cf4b294895bcdee894f29bd70c3f7694a3202cf829e9e8fb76d997472e43dc88266524759c2648147d7a3e44c"})
waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000400)={@siginfo_0_0={0xc, 0x477, 0x10000, @_sigsys={&(0x7f0000000300)="e1901e228d0f7dcd0cfbcff313c0dd5015707920d9b92138d9ad0e6f54f64f407f09164712ee946bf1cd7fdd91e9e6b16c0fdb3d70bd843f341c203bc5dbb423c552cedba43bc5d2d199553d0e83462ee99a4a8fb6508fd688b2e730133d51c5ef50b5620fa82d784a0a876fd777a1d6a7fb90ba024784e13dffcd7d175c414f9e48922dcad3fe7a148fda5cd73de887117efaf4170548eba57a6242043caf78fe143828337bc856c70468662a8c5a92734d6d975e67092b04eea77893cb80792ca3af2f93bd142b7cb1543bcad291aca292675a88f47be8a4c33ea57f6cbd194c0a912f567adc6bcf082d81ee67dca4e7e36b078e3b6ed462", 0x3}}}, 0x85, &(0x7f0000000480)={{0x7, 0x4d41}, {0x4, 0x9}, 0x1, 0x24d6, 0x99, 0x5, 0xffffffffffff9d0f, 0x5, 0x62, 0x80, 0x8, 0x15b3, 0x3, 0x7, 0xfffffffffffffff8, 0x100000000})
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740", 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x80840, 0x0)
ioctl$auto(0x3, 0x5404, 0x38)

24.452868265s ago: executing program 1 (id=4761):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop4\x00', 0x185500, 0x0)
ioctl$auto_IOC_PR_RELEASE(r0, 0xc01070ce, &(0x7f0000000040)={0x40000000006, 0x16, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff)
open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffb, 0x8000)
timer_create$auto(0x8, 0x0, 0x0)
prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
socket(0xa, 0x3, 0x5)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x1, 0x0, 0x800)
r1 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x9, 0x7, 0x1, 0x7fff, 0x2, 0x3, 0x5, 0xffffffffffffffea, 0x0, 0x3, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000000000002, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc]}, 0x5, 0x2)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1ac}, 0x1, 0xffffff9e}, 0x40000)
timer_create$auto(0x9, 0x0, 0x0)

24.124688972s ago: executing program 1 (id=4762):
mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x0, 0x5, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0)
write$auto(0x1, 0x0, 0x80000000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
sendmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c)
write$auto(r0, &(0x7f0000001040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8)
socket(0x11, 0x3, 0x9)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto(r2, 0x4008af03, 0x0)
ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)

24.000538109s ago: executing program 1 (id=4763):
r0 = bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x7, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3)
ioctl$auto_SCSI_IOCTL_DOORLOCK(r0, 0x5380, &(0x7f0000000000)="3f44a8362d6e7dc8b1f3733a1a5162d55336934f09e275d4d8db8cdcb1a1")
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
set_mempolicy$auto(0x3c, &(0x7f0000000080)=0x2, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0xa, 0x801, 0x84)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x9, 0x0)
setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r2 = socket(0x10, 0x2, 0x4)
sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000804)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010003", @ANYBLOB="12"], 0x1ac}}, 0x40000)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
sendmmsg$auto(r4, &(0x7f0000000540)={{&(0x7f00000002c0)="79fd8606cc11477bb2d55f2a97dbd7abf17ad8dba081e5ed2a0d1619936877f21f926087d2ef47fc5f69da0190c46f315bd05d5c5749446b2deb2435f0a601bf40d47cb65316af3787c4872d23b90b48f7c1ce1427441c660cd8ba1f0067d261eb0350e7b32ee5592102584f1a6993cc70d504368f140c5fd85b2f9f7e772b476ba907781ec5196c71ac7eb910bf0969d22b20ef47cf9418488c8bd95b95e20c5a04d003f9f5c1cf8c46416d59c1ff9f9b92cc8075de8539bc8ecd09633c792536dc268fc5f3968ebf066f5bdc189bd72f57c5e5378e48c1bebb0bd1973e82babb18ad604da0f2204763", 0x9, &(0x7f0000000440)={&(0x7f00000003c0)="dfc4a86038f318150ea5f20ba08fd180762606d6ee5803103038a1b4940a4dfe90689446235b6e831c4083fbb3863c038364c72c62a7eec4dbf4cc171b42320f5ac87b248c722dbb4bc573677eb6ac82861eb26387af93", 0x91}, 0x4, &(0x7f0000000480)="50d9bce624f8d85619aba24502cff7588be8da0cca27e893fa69c22f7da799250ba7f28a122012e8233eff20fd9e5442396e2cbde1372131169612b79ee71548856384de203c1147f97b5bfcba505de99e97e1429ab227cde39f51bfd6ec2a47f3b76a992fd706f1d947bc37728c2c1f7c6bdfda33a27a1108870824cba2bba7eb3ed9abc4698b47a3fae1e7105b9edecbaf03c01ec0f20f508e5559a7a26c7a", 0x3e}, 0x4c7}, 0x5, 0x9)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x0)
write$auto(0x3, 0x0, 0x100000000)

23.687774596s ago: executing program 1 (id=4764):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
connect$auto(0x3, 0x0, 0x58)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
socket(0x10, 0x2, 0x4)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x1247b7d8889990eb, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5)
r4 = socket(0x10, 0x2, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000)
mincore$auto(0x1000, 0x8001, 0x0)
timerfd_create$auto(0x9, 0x0)
fcntl$auto(0x8000000000000001, 0x7, 0x8)
fcntl$auto(0x8000000000000001, 0x25, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r4, &(0x7f00000000c0)='MJC802154_HWSIM\x00\xcb\x0fXS\v^\x02\xf7\xb5T\x04\xad\x96\xf4\xbc2UWT1\x02\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a\x00\x00A\xd8\xe8}q\xca|\x9aU9\x19\x8aU\xe1\xc6\xaby\xe3;]\xe5\xf9\x87\x90\xb6#\xc8\x12\x17\xe6\x18\x86\xb0\xdd\x9eh\x80\xff\x01,\x9f\xe6', 0x1060)
read$auto(r4, 0x0, 0xb4d3)
socket(0x23, 0x3, 0x1)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@inferred, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100"}, 0x4, 0xfffffffe, 0x3, @raw=0xd, @integer={0x2, 0x9, 0x7fffffffffffffff}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4059a078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"})
r5 = socket(0x2b, 0x1, 0x1)
r6 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r6, 0x0, 0x2, 0x0, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, 0x0, 0x24084005)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)

22.970801957s ago: executing program 1 (id=4765):
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa040, 0x0)
pread64$auto(r2, 0x0, 0x0, 0x7fff)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x3)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x3, 0x8)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
setpriority$auto(0x2, 0x0, 0x20080000)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r4)
r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r6, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26)
msgctl$auto_MSG_STAT(0x1000, 0xb, &(0x7f0000000340)={{0x5, 0xee01, 0xee00, 0x81, 0xdc, 0x80000000, 0x9}, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0xd, 0x63, 0x7a63, 0x682, 0xb5, 0x9, 0x2c, 0x1000, 0xd, @raw=0x5, @raw=0x5})
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000040)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
socket(0x10, 0x2, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)

21.946797989s ago: executing program 2 (id=4768):
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd701afedbee35020000000800270008000000ae1b7e089a0b0000"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
madvise$auto(0xfffffffffffffffc, 0xffffffffffff0001, 0x3)
write$auto(r1, 0x0, 0x10007c)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r3, 0x0, 0x1)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop13/ext_range\x00', 0xc0402, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x800)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
read$auto_transaction_log_fops_(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xffffffffffffffff, 0x5, 0x1, 0xbe, r4, 0x18)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x14, r0, 0xff)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

15.892625069s ago: executing program 0 (id=4780):
mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x0, 0x5, 0x0)
pipe$auto(0x0)
write$auto(0x1, 0x0, 0x80000000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
sendmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c)
write$auto(r0, &(0x7f0000001040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x8)
r2 = socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(r2, 0x8, 0x0)
socket(0x11, 0x3, 0x9)
r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5)
ioctl$auto(r3, 0x4008af03, 0x0)
ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0)
close_range$auto(r2, 0x8, 0x0)

15.807367584s ago: executing program 0 (id=4781):
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0)
poll$auto(&(0x7f0000000180)={r1, 0x3569, 0x8}, 0x34, 0x5)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
madvise$auto(0x0, 0x2003f0, 0x11)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nullb0/queue/write_cache\x00', 0x10b142, 0x0)
sendfile$auto(r2, r2, 0x0, 0x1000200)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
unshare$auto(0x40000080)
getpriority$auto_PRIO_USER(0x2, 0x0)
r3 = setfsuid$auto(0xee00)
setresuid$auto(0xffffffffffffffff, r3, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r4)
r6 = getpgrp(0x0)
sendmsg$auto_TASKSTATS_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r5, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f0000000300)={{0x7fff, 0xee00, 0xffffffffffffffff, 0x2, 0x4, 0xffff, 0x5}, &(0x7f0000000240)=0x9, &(0x7f0000000280)=0x2f, 0x7, 0x0, 0xeff, 0x1000, 0x42, 0x7, 0x10, 0x2, @raw=0x9, @raw=0x7})
fcntl$getown(r2, 0x9)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880)
r7 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='2'], 0x1ac}}, 0x40000)
sendmmsg$auto(r7, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0)

15.628950867s ago: executing program 0 (id=4782):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="1100000008000000000000000000000001", 0x11)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x6, 0x3)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x8800)
ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000040)=0x400)
shmctl$auto_SHM_STAT_ANY(0x69a0, 0xf, &(0x7f0000000280)={{0x4, 0x0, 0xee00, 0x3ff, 0x8, 0x0, 0x5}, 0x1, 0x5, 0x9, 0xc, @raw=0x7, @raw=0x30, 0x8, 0x0, &(0x7f0000000140), &(0x7f00000001c0)="c845af89eddb836bd0cd55b01bc1914cf4b294895bcdee894f29bd70c3f7694a3202cf829e9e8fb76d997472e43dc88266524759c2648147d7a3e44c"})
waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000400)={@siginfo_0_0={0xc, 0x477, 0x10000, @_sigsys={&(0x7f0000000300)="e1901e228d0f7dcd0cfbcff313c0dd5015707920d9b92138d9ad0e6f54f64f407f09164712ee946bf1cd7fdd91e9e6b16c0fdb3d70bd843f341c203bc5dbb423c552cedba43bc5d2d199553d0e83462ee99a4a8fb6508fd688b2e730133d51c5ef50b5620fa82d784a0a876fd777a1d6a7fb90ba024784e13dffcd7d175c414f9e48922dcad3fe7a148fda5cd73de887117efaf4170548eba57a6242043caf78fe143828337bc856c70468662a8c5a92734d6d975e67092b04eea77893cb80792ca3af2f93bd142b7cb1543bcad291aca292675a88f47be8a4c33ea57f6cbd194c0a912f567adc6bcf082d81ee67dca4e7e36b078e3b6ed462", 0x3}}}, 0x85, &(0x7f0000000480)={{0x7, 0x4d41}, {0x4, 0x9}, 0x1, 0x24d6, 0x99, 0x5, 0xffffffffffff9d0f, 0x5, 0x62, 0x80, 0x8, 0x15b3, 0x3, 0x7, 0xfffffffffffffff8, 0x100000000})
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740", 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x80840, 0x0)
ioctl$auto(0x3, 0x5404, 0x38)

15.358040067s ago: executing program 0 (id=4783):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r0 = socket(0x11, 0x80003, 0x300)
setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0)
setitimer$auto(0x2, &(0x7f0000000000)={{0x8000, 0x6}, {0xa4b, 0x6}}, 0x0)
setsockopt$auto(r0, 0x107, 0x17, 0x0, 0x8004)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x5, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0)
r2 = setfsuid$auto(0xee00)
bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@enable_stats={0x7f}, 0xa6)
socket(0x8, 0x802, 0xe)
setreuid$auto(r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$auto(0x5, 0x1, r3, 0x0)
sendmsg$auto_IPVS_CMD_NEW_DEST(r3, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001480)={0x260, 0x0, 0x10, 0x50bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x233, 0x3, 0x0, 0x1, [@generic="dbbf6294995a42f799aad0e1b29a50b3c2c6dd5bafd9d3dcef9ce533b511fcc9d24f1cebb2cd2122c003110b4f473e94ba3fff0e08b990a1ac9d8189daca7783401f11920a6514e35782dee58d6c", @nested={0x8, 0xc2, 0x0, 0x1, [@typed={0x4, 0x17}]}, @generic="c1805b5fd517687145f1355fef01de32b71690b249fdc4906ecd18ad37d48ed848239c7538901efbe8d8cc588c0018d05611b0616c1bc44e4e57fefa22c9d86087ec8263977485ba75e36929808a0ea016", @generic="feb6c47b17df7fec3a1be0a7a242509d10fff6bacec525d120c44b5fe74fc1bd1f68f15452b8", @generic="97b5473f0d754d983c59da233be57d360c9846fc26d175896a055f9a93012fa99dceb1877532629b874e24a8d5a126a508be0cc506", @generic="d143f5862b57fb5a8676d63146e25ad2020621e777cf0fa74d089016e164ff9b6915d3d4ca0433ff0be1bbf32c8f4de6f3d982ac25d6dc5a74146e1b00f09e1c45c4c08ed36c0c", @generic="916c4ef928947c21732ff3e8fd35dc370e0071d10240c380c10c25fd9e4f5159e4007c1f28b3ecffe9d355c90d9e23052dc55ff19ec2f1e8c30f7e4f18b4f3329d738a933f75b7e970ae7bcd85a742d07630d1529ff6e7f247869a567bf45fe5aec7d736b45bd2e95723ab33e860ce88d58e25b7d4f20ff77eee17639dcaf0ea7e3eb06258f9ee475e5232900e25828ee10a9733de16b7aa7e3752e9f42545e7c3b22ef21effaf9e99a46b545feca915aeb4f9673c71925f50d1b076f2261f65e91407a2f1138c6a1647634b0f9e71f30bf00be9f274bd15b6a3a7ed68b73722ab3b4194db80"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x260}, 0x1, 0x0, 0x0, 0x40}, 0x320b8c7b5262f2e2)
r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
ioctl$auto_UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000140)={0x1, 0xb, {0xd5, 0xfffb, 0xae7, {0xa, 0x1}, {0x1ff, 0x60}, @periodic={0xfffe, 0x4, 0x2, 0x40, 0x4df, {0x7, 0x6, 0xb, 0x2}, 0x61a469b, 0x0}}, {0x3, 0x0, 0x9, {0xc1b2, 0x3}, {0x8, 0x40}, @ramp={0x3bb6, 0xfffb, {0xffff, 0x2, 0x1000, 0x1}}}})
r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r6 = signalfd4$auto(r0, &(0x7f00000000c0)={0x10000}, 0x3, 0x8001)
read$auto_proc_timers_operations_base(r6, &(0x7f00000001c0)=""/163, 0xa3)
ioctl$auto_UBI_IOCATT(r5, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x3f, 0x808, 0x1, 0x1})
readv$auto(r5, &(0x7f0000001400)={&(0x7f0000001380)="e770c1f13bf52200993236538961860b49b8610059f8c694b60b1f17c597b45a9d2f4b16ac2eddb37e11d61ab3f2279a258f61cf2f3980a5fe4fa6febb21b7d9add68dc6da075c", 0x7}, 0x7)
ioprio_set$auto(0x2, 0x800000000, 0x8)

15.096943168s ago: executing program 0 (id=4784):
r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="1100000008000000000000000000000001", 0x11)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x3, 0xff)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x6, 0x3)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x8800)
ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000040)=0x400)
r1 = getpid()
process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7a2329fbdfb4986a26faf4182257497e4856e4a66e5177fa5d4eb558a61b740", 0xffffffff}, 0x6, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x80840, 0x0)
ioctl$auto(0x3, 0x5404, 0x38)

14.979066716s ago: executing program 0 (id=4785):
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa040, 0x0)
pread64$auto(r2, 0x0, 0x0, 0x7fff)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x3)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x1, 0x106)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
setpriority$auto(0x2, 0x0, 0x20080000)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r4)
r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r6, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc59682d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26)
msgctl$auto_MSG_STAT(0x1000, 0xb, &(0x7f0000000340)={{0x5, 0xee01, 0xee00, 0x81, 0xdc, 0x80000000, 0x9}, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0xd, 0x63, 0x7a63, 0x682, 0xb5, 0x9, 0x2c, 0x1000, 0xd, @raw=0x5, @raw=0x5})
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000040)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
socket(0x10, 0x2, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)

7.996138573s ago: executing program 32 (id=4765):
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa040, 0x0)
pread64$auto(r2, 0x0, 0x0, 0x7fff)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x3)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x3, 0x8)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
setpriority$auto(0x2, 0x0, 0x20080000)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r4)
r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r6, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc52782d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26)
msgctl$auto_MSG_STAT(0x1000, 0xb, &(0x7f0000000340)={{0x5, 0xee01, 0xee00, 0x81, 0xdc, 0x80000000, 0x9}, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0xd, 0x63, 0x7a63, 0x682, 0xb5, 0x9, 0x2c, 0x1000, 0xd, @raw=0x5, @raw=0x5})
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000040)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
socket(0x10, 0x2, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)

6.999769763s ago: executing program 33 (id=4768):
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd701afedbee35020000000800270008000000ae1b7e089a0b0000"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
madvise$auto(0xfffffffffffffffc, 0xffffffffffff0001, 0x3)
write$auto(r1, 0x0, 0x10007c)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/libata/parameters/atapi_passthru16\x00', 0x80d40, 0x0)
read$auto(r2, 0x0, 0x20)
r3 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r3, 0x0, 0x1)
socket(0x2, 0x1, 0x106)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop13/ext_range\x00', 0xc0402, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x800)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
read$auto_transaction_log_fops_(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xffffffffffffffff, 0x5, 0x1, 0xbe, r4, 0x18)
sysfs$auto(0x2, 0x23, 0x0)
r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r5, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x14, r0, 0xff)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)

0s ago: executing program 34 (id=4785):
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa040, 0x0)
pread64$auto(r2, 0x0, 0x0, 0x7fff)
r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
write$auto(0x3, 0x0, 0x3)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x1, 0x106)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
setpriority$auto(0x2, 0x0, 0x20080000)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r4)
r6 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2, 0x0)
write$auto_ftrace_subsystem_filter_fops_trace_events(r6, &(0x7f0000000180)="b953e6ca6360e45b4fd8ecccc59682d28ddb740407f4571929f3c0f5962cf000e2d2cac4c602", 0x26)
msgctl$auto_MSG_STAT(0x1000, 0xb, &(0x7f0000000340)={{0x5, 0xee01, 0xee00, 0x81, 0xdc, 0x80000000, 0x9}, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0xd, 0x63, 0x7a63, 0x682, 0xb5, 0x9, 0x2c, 0x1000, 0xd, @raw=0x5, @raw=0x5})
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000040)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
socket(0x10, 0x2, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)

kernel console output (not intermixed with test programs):

d0
[ 1142.168540][T25574]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 1142.168561][T25574]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1142.168585][T25574]  do_syscall_64+0x115/0x840
[ 1142.168604][T25574]  ? clear_bhb_loop+0x40/0x90
[ 1142.168622][T25574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.168638][T25574] RIP: 0033:0x7fdb53f9ce59
[ 1142.168652][T25574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1142.168667][T25574] RSP: 002b:00007fdb54efc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1142.168683][T25574] RAX: ffffffffffffffda RBX: 00007fdb54215fa8 RCX: 00007fdb53f9ce59
[ 1142.168693][T25574] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdb54215fac
[ 1142.168703][T25574] RBP: 00007fdb54215fa0 R08: 0000000000000001 R09: 0000000000000000
[ 1142.168712][T25574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1142.168720][T25574] R13: 00007fdb54216038 R14: 00007ffdc4ec93c0 R15: 00007ffdc4ec94a8
[ 1142.168740][T25574]  </TASK>
[ 1142.427691][T25586] FAULT_INJECTION: forcing a failure.
[ 1142.427691][T25586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1142.569307][T25586] CPU: 1 UID: 0 PID: 25586 Comm: syz.0.4468 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1142.569350][T25586] Tainted: [L]=SOFTLOCKUP
[ 1142.569358][T25586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1142.569373][T25586] Call Trace:
[ 1142.569382][T25586]  <TASK>
[ 1142.569392][T25586]  dump_stack_lvl+0x100/0x190
[ 1142.569433][T25586]  should_fail_ex.cold+0x5/0xa
[ 1142.569467][T25586]  _copy_from_user+0x2e/0xd0
[ 1142.569499][T25586]  mem_rw+0x1ec/0x670
[ 1142.569535][T25586]  ? __pfx_mem_write+0x10/0x10
[ 1142.569562][T25586]  vfs_writev+0x5ed/0xdd0
[ 1142.569608][T25586]  ? __pfx_vfs_writev+0x10/0x10
[ 1142.569661][T25586]  ? __fget_files+0x21f/0x3d0
[ 1142.569693][T25586]  ? do_pwritev+0x1ac/0x270
[ 1142.569729][T25586]  do_pwritev+0x1ac/0x270
[ 1142.569773][T25586]  ? __pfx_do_pwritev+0x10/0x10
[ 1142.569820][T25586]  do_syscall_64+0x115/0x840
[ 1142.569851][T25586]  ? clear_bhb_loop+0x40/0x90
[ 1142.569884][T25586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.569912][T25586] RIP: 0033:0x7fe1acf9ce59
[ 1142.569934][T25586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1142.569962][T25586] RSP: 002b:00007fe1aded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[ 1142.569977][T25586] RAX: ffffffffffffffda RBX: 00007fe1ad216090 RCX: 00007fe1acf9ce59
[ 1142.569988][T25586] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005
[ 1142.569997][T25586] RBP: 00007fe1aded2090 R08: 000000000000d3b8 R09: 0000000000000000
[ 1142.570007][T25586] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[ 1142.570016][T25586] R13: 00007fe1ad216128 R14: 00007fe1ad216090 R15: 00007ffecfe9ccd8
[ 1142.570036][T25586]  </TASK>
[ 1142.965877][T25595] FAULT_INJECTION: forcing a failure.
[ 1142.965877][T25595] name failslab, interval 1, probability 0, space 0, times 0
[ 1142.981623][T25595] CPU: 1 UID: 0 PID: 25595 Comm: syz.0.4470 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1142.981670][T25595] Tainted: [L]=SOFTLOCKUP
[ 1142.981681][T25595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1142.981699][T25595] Call Trace:
[ 1142.981709][T25595]  <TASK>
[ 1142.981722][T25595]  dump_stack_lvl+0x100/0x190
[ 1142.981766][T25595]  should_fail_ex.cold+0x5/0xa
[ 1142.981807][T25595]  should_failslab+0xc2/0x120
[ 1142.981857][T25595]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1142.981901][T25595]  ? debugfs_create_symlink+0x29/0x220
[ 1142.981946][T25595]  kstrdup+0x51/0xe0
[ 1142.981981][T25595]  debugfs_create_symlink+0x29/0x220
[ 1142.982020][T25595]  ref_tracker_dir_symlink+0x257/0x3b0
[ 1142.982057][T25595]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[ 1142.982142][T25595]  ? __pfx_net_ns_net_init+0x10/0x10
[ 1142.982169][T25595]  net_ns_net_init+0xd2/0x120
[ 1142.982196][T25595]  ops_init+0x1e2/0x5f0
[ 1142.982226][T25595]  setup_net+0x118/0x3a0
[ 1142.982256][T25595]  ? __pfx_setup_net+0x10/0x10
[ 1142.982284][T25595]  ? mutex_init_lockdep+0xf1/0x120
[ 1142.982320][T25595]  copy_net_ns+0x46f/0x7c0
[ 1142.982355][T25595]  create_new_namespaces+0x3ea/0xac0
[ 1142.982395][T25595]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1142.982433][T25595]  ksys_unshare+0x438/0xab0
[ 1142.982474][T25595]  ? __pfx_ksys_unshare+0x10/0x10
[ 1142.982526][T25595]  __x64_sys_unshare+0x31/0x40
[ 1142.982565][T25595]  do_syscall_64+0x115/0x840
[ 1142.982599][T25595]  ? clear_bhb_loop+0x40/0x90
[ 1142.982635][T25595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.982665][T25595] RIP: 0033:0x7fe1acf9ce59
[ 1142.982691][T25595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1142.982720][T25595] RSP: 002b:00007fe1aded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1142.982749][T25595] RAX: ffffffffffffffda RBX: 00007fe1ad216090 RCX: 00007fe1acf9ce59
[ 1142.982770][T25595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1142.982789][T25595] RBP: 00007fe1ad032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1142.982807][T25595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1142.982833][T25595] R13: 00007fe1ad216128 R14: 00007fe1ad216090 R15: 00007ffecfe9ccd8
[ 1142.982873][T25595]  </TASK>
[ 1143.222477][T14303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1144.897352][T14303] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1144.955944][T14303] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1144.964041][T14303] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1144.972772][T14303] CPU: 0 UID: 0 PID: 14303 Comm: kworker/u11:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1144.972799][T14303] Tainted: [L]=SOFTLOCKUP
[ 1144.972804][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1144.972816][T14303] Workqueue: hci2 hci_rx_work
[ 1144.972839][T14303] Call Trace:
[ 1144.972845][T14303]  <TASK>
[ 1144.972852][T14303]  dump_stack_lvl+0x100/0x190
[ 1144.972874][T14303]  sysfs_warn_dup.cold+0x1c/0x28
[ 1144.972898][T14303]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1144.972920][T14303]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1144.972941][T14303]  ? find_held_lock+0x2b/0x80
[ 1144.972959][T14303]  ? kobject_add_internal+0x25f/0x930
[ 1144.972983][T14303]  ? kobject_add_internal+0x25f/0x930
[ 1144.973007][T14303]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1144.973026][T14303]  kobject_add_internal+0x2c8/0x930
[ 1144.973055][T14303]  kobject_add+0x16a/0x1e0
[ 1144.973077][T14303]  ? __pfx_kobject_add+0x10/0x10
[ 1144.973098][T14303]  ? class_to_subsys+0x10f/0x150
[ 1144.973122][T14303]  ? kobject_put+0xb9/0x640
[ 1144.973141][T14303]  ? _raw_spin_unlock+0x28/0x50
[ 1144.973172][T14303]  device_add+0x294/0x1970
[ 1144.973192][T14303]  ? __pfx_dev_set_name+0x10/0x10
[ 1144.973214][T14303]  ? __pfx_device_add+0x10/0x10
[ 1144.973233][T14303]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1144.973258][T14303]  hci_conn_add_sysfs+0x1a3/0x260
[ 1144.973280][T14303]  le_conn_complete_evt+0x11eb/0x1f60
[ 1144.973304][T14303]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1144.973321][T14303]  ? __pfx_bt_warn+0x10/0x10
[ 1144.973336][T14303]  ? hci_event_packet+0x186/0xcd0
[ 1144.973358][T14303]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1144.973378][T14303]  ? skb_pull_data+0x15f/0x1e0
[ 1144.973398][T14303]  hci_le_meta_evt+0x34a/0x5f0
[ 1144.973418][T14303]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1144.973440][T14303]  hci_event_packet+0x51c/0xcd0
[ 1144.973459][T14303]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1144.973479][T14303]  ? __pfx_hci_event_packet+0x10/0x10
[ 1144.973499][T14303]  ? kcov_remote_start+0x384/0x670
[ 1144.973521][T14303]  ? lockdep_hardirqs_on+0x78/0x100
[ 1144.973543][T14303]  hci_rx_work+0x451/0xfc0
[ 1144.973565][T14303]  process_one_work+0xa23/0x1940
[ 1144.973596][T14303]  ? __pfx_process_one_work+0x10/0x10
[ 1144.973623][T14303]  ? __pfx_hci_rx_work+0x10/0x10
[ 1144.973643][T14303]  worker_thread+0x5ef/0xe50
[ 1144.973676][T14303]  ? kthread+0x13a/0x450
[ 1144.973695][T14303]  ? __pfx_worker_thread+0x10/0x10
[ 1144.973716][T14303]  kthread+0x370/0x450
[ 1144.973735][T14303]  ? __pfx_kthread+0x10/0x10
[ 1144.973756][T14303]  ret_from_fork+0x72b/0xd50
[ 1144.973777][T14303]  ? __pfx_ret_from_fork+0x10/0x10
[ 1144.973796][T14303]  ? __switch_to+0x800/0x10f0
[ 1144.973810][T14303]  ? __switch_to_asm+0x39/0x70
[ 1144.973831][T14303]  ? __pfx_kthread+0x10/0x10
[ 1144.973852][T14303]  ret_from_fork_asm+0x1a/0x30
[ 1144.973888][T14303]  </TASK>
[ 1144.973918][T14303] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1145.242261][T14303] Bluetooth: hci2: failed to register connection device
[ 1145.278319][T14303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1145.288437][T25618] FAULT_INJECTION: forcing a failure.
[ 1145.288437][T25618] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1145.314573][T25618] CPU: 0 UID: 0 PID: 25618 Comm: syz.0.4474 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1145.314615][T25618] Tainted: [L]=SOFTLOCKUP
[ 1145.314626][T25618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1145.314642][T25618] Call Trace:
[ 1145.314651][T25618]  <TASK>
[ 1145.314663][T25618]  dump_stack_lvl+0x100/0x190
[ 1145.314710][T25618]  should_fail_ex.cold+0x5/0xa
[ 1145.314745][T25618]  get_futex_key+0x295/0x14f0
[ 1145.314778][T25618]  ? __pfx_get_futex_key+0x10/0x10
[ 1145.314805][T25618]  ? lock_acquire+0x1b9/0x370
[ 1145.314836][T25618]  futex_wake+0xf4/0x5e0
[ 1145.314873][T25618]  ? __pfx_futex_wake+0x10/0x10
[ 1145.314908][T25618]  ? find_held_lock+0x2b/0x80
[ 1145.314941][T25618]  ? exit_mm_release+0x19/0x30
[ 1145.314981][T25618]  do_futex+0x2b2/0x440
[ 1145.315012][T25618]  ? __pfx_do_futex+0x10/0x10
[ 1145.315040][T25618]  ? __might_fault+0xc5/0x140
[ 1145.315080][T25618]  mm_release+0x24a/0x2f0
[ 1145.315110][T25618]  do_exit+0x707/0x2ae0
[ 1145.315153][T25618]  ? __pfx_do_exit+0x10/0x10
[ 1145.315187][T25618]  ? do_raw_spin_lock+0x128/0x260
[ 1145.315216][T25618]  ? find_held_lock+0x2b/0x80
[ 1145.315248][T25618]  ? get_signal+0x7e0/0x21e0
[ 1145.315281][T25618]  do_group_exit+0xd5/0x2a0
[ 1145.315335][T25618]  get_signal+0x1ec7/0x21e0
[ 1145.315381][T25618]  ? __pfx_get_signal+0x10/0x10
[ 1145.315413][T25618]  ? do_futex+0x190/0x440
[ 1145.315446][T25618]  arch_do_signal_or_restart+0x91/0x7a0
[ 1145.315476][T25618]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1145.315512][T25618]  ? __sys_socket+0xac/0x260
[ 1145.315558][T25618]  exit_to_user_mode_loop+0x139/0x6f0
[ 1145.315588][T25618]  ? rcu_is_watching+0x12/0xc0
[ 1145.315624][T25618]  do_syscall_64+0x652/0x840
[ 1145.315656][T25618]  ? clear_bhb_loop+0x40/0x90
[ 1145.315688][T25618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.315723][T25618] RIP: 0033:0x7fe1acf9ce59
[ 1145.315746][T25618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1145.315773][T25618] RSP: 002b:00007fe1adef30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1145.315798][T25618] RAX: fffffffffffffe00 RBX: 00007fe1ad215fa8 RCX: 00007fe1acf9ce59
[ 1145.315817][T25618] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe1ad215fa8
[ 1145.315835][T25618] RBP: 00007fe1ad215fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1145.315853][T25618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1145.315871][T25618] R13: 00007fe1ad216038 R14: 00007ffecfe9cbf0 R15: 00007ffecfe9ccd8
[ 1145.315909][T25618]  </TASK>
[ 1146.228251][T25647] FAULT_INJECTION: forcing a failure.
[ 1146.228251][T25647] name failslab, interval 1, probability 0, space 0, times 0
[ 1146.252903][T25647] CPU: 0 UID: 0 PID: 25647 Comm: syz.1.4480 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1146.252950][T25647] Tainted: [L]=SOFTLOCKUP
[ 1146.252961][T25647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1146.252979][T25647] Call Trace:
[ 1146.252989][T25647]  <TASK>
[ 1146.253000][T25647]  dump_stack_lvl+0x100/0x190
[ 1146.253049][T25647]  should_fail_ex.cold+0x5/0xa
[ 1146.253088][T25647]  should_failslab+0xc2/0x120
[ 1146.253133][T25647]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1146.253169][T25647]  ? __kasan_kmalloc+0xaa/0xb0
[ 1146.253202][T25647]  ? __request_module+0x2d5/0x6a0
[ 1146.253241][T25647]  kstrdup+0x51/0xe0
[ 1146.253273][T25647]  __request_module+0x2d5/0x6a0
[ 1146.253306][T25647]  ? __pfx___request_module+0x10/0x10
[ 1146.253353][T25647]  ? find_held_lock+0x2b/0x80
[ 1146.253390][T25647]  ? inet6_create+0xb9f/0x12b0
[ 1146.253433][T25647]  inet6_create+0xbdc/0x12b0
[ 1146.253471][T25647]  ? inet6_create+0x7f/0x12b0
[ 1146.253509][T25647]  __sock_create+0x339/0x860
[ 1146.253561][T25647]  __sys_socket+0x14d/0x260
[ 1146.253600][T25647]  ? __pfx___sys_socket+0x10/0x10
[ 1146.253649][T25647]  __x64_sys_socket+0x72/0xb0
[ 1146.253686][T25647]  ? lockdep_hardirqs_on+0x78/0x100
[ 1146.253723][T25647]  do_syscall_64+0x115/0x840
[ 1146.253756][T25647]  ? clear_bhb_loop+0x40/0x90
[ 1146.253793][T25647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.253823][T25647] RIP: 0033:0x7f36bf19ce59
[ 1146.253848][T25647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1146.253876][T25647] RSP: 002b:00007f36c011f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1146.253904][T25647] RAX: ffffffffffffffda RBX: 00007f36bf415fa0 RCX: 00007f36bf19ce59
[ 1146.253924][T25647] RDX: 0000000000000003 RSI: 000000000000000a RDI: 000000000000000a
[ 1146.253941][T25647] RBP: 00007f36bf232e6f R08: 0000000000000000 R09: 0000000000000000
[ 1146.253960][T25647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1146.253977][T25647] R13: 00007f36bf416038 R14: 00007f36bf415fa0 R15: 00007ffeea9a86e8
[ 1146.254015][T25647]  </TASK>
[ 1146.607448][   T30] audit: type=1800 audit(1844279050.195:108): pid=25652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4481" name="lu_gp_id" dev="configfs" ino=136496 res=0 errno=0
[ 1146.655151][T25641] Process accounting resumed
[ 1146.921333][T25663] FAULT_INJECTION: forcing a failure.
[ 1146.921333][T25663] name failslab, interval 1, probability 0, space 0, times 0
[ 1146.949023][T14303] Bluetooth: hci2: command 0x0406 tx timeout
[ 1146.958101][T25663] CPU: 1 UID: 0 PID: 25663 Comm: syz.1.4484 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1146.958139][T25663] Tainted: [L]=SOFTLOCKUP
[ 1146.958149][T25663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1146.958166][T25663] Call Trace:
[ 1146.958176][T25663]  <TASK>
[ 1146.958187][T25663]  dump_stack_lvl+0x100/0x190
[ 1146.958227][T25663]  should_fail_ex.cold+0x5/0xa
[ 1146.958266][T25663]  should_failslab+0xc2/0x120
[ 1146.958307][T25663]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1146.958335][T25663]  ? allocate_file_region_entries+0x15d/0x620
[ 1146.958372][T25663]  ? allocate_file_region_entries+0x15d/0x620
[ 1146.958406][T25663]  ? allocate_file_region_entries+0x1a0/0x620
[ 1146.958449][T25663]  allocate_file_region_entries+0x1a0/0x620
[ 1146.958492][T25663]  ? __pfx_allocate_file_region_entries+0x10/0x10
[ 1146.958538][T25663]  region_chg+0x85/0x140
[ 1146.958573][T25663]  __vma_reservation_common+0x376/0x720
[ 1146.958612][T25663]  ? __pfx___vma_reservation_common+0x10/0x10
[ 1146.958647][T25663]  ? filemap_get_entry+0x22d/0x450
[ 1146.958675][T25663]  ? filemap_get_entry+0x22d/0x450
[ 1146.958714][T25663]  alloc_hugetlb_folio+0x6fd/0x1490
[ 1146.958766][T25663]  ? __pfx_alloc_hugetlb_folio+0x10/0x10
[ 1146.958818][T25663]  ? __filemap_get_folio_mpol+0x369/0x1320
[ 1146.958858][T25663]  hugetlb_no_page+0xfbb/0x1b00
[ 1146.958913][T25663]  hugetlb_fault+0x5e5/0x1410
[ 1146.958944][T25663]  ? __pfx_hugetlb_fault+0x10/0x10
[ 1146.958982][T25663]  ? find_vma+0xbf/0x140
[ 1146.959016][T25663]  ? __pfx_find_vma+0x10/0x10
[ 1146.959064][T25663]  handle_mm_fault+0x5ff/0xa30
[ 1146.959101][T25663]  do_user_addr_fault+0x74c/0x12f0
[ 1146.959153][T25663]  exc_page_fault+0x6f/0xd0
[ 1146.959190][T25663]  asm_exc_page_fault+0x26/0x30
[ 1146.959218][T25663] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[ 1146.959263][T25663] Code: 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 8f 9d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1146.959289][T25663] RSP: 0018:ffffc9000e05fbc0 EFLAGS: 00050206
[ 1146.959312][T25663] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000001000
[ 1146.959329][T25663] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888033844000
[ 1146.959347][T25663] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10067089ff
[ 1146.959364][T25663] R10: ffff888033844fff R11: 0000000000000000 R12: 0000000000000000
[ 1146.959384][T25663] R13: ffff888033844000 R14: 0000000000000000 R15: 0000000000000005
[ 1146.959420][T25663]  _copy_from_user+0x98/0xd0
[ 1146.959456][T25663]  mem_rw+0x1ec/0x670
[ 1146.959496][T25663]  ? __pfx_mem_write+0x10/0x10
[ 1146.959526][T25663]  vfs_writev+0x5ed/0xdd0
[ 1146.959578][T25663]  ? __pfx_vfs_writev+0x10/0x10
[ 1146.959644][T25663]  ? __fget_files+0x21f/0x3d0
[ 1146.959681][T25663]  ? do_pwritev+0x1ac/0x270
[ 1146.959720][T25663]  do_pwritev+0x1ac/0x270
[ 1146.959764][T25663]  ? __pfx_do_pwritev+0x10/0x10
[ 1146.959815][T25663]  do_syscall_64+0x115/0x840
[ 1146.959848][T25663]  ? clear_bhb_loop+0x40/0x90
[ 1146.959882][T25663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.959910][T25663] RIP: 0033:0x7f36bf19ce59
[ 1146.959934][T25663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1146.959961][T25663] RSP: 002b:00007f36c011f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[ 1146.959987][T25663] RAX: ffffffffffffffda RBX: 00007f36bf415fa0 RCX: 00007f36bf19ce59
[ 1146.960006][T25663] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005
[ 1146.960039][T25663] RBP: 00007f36c011f090 R08: 000000000000d3b8 R09: 0000000000000000
[ 1146.960058][T25663] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[ 1146.960075][T25663] R13: 00007f36bf416038 R14: 00007f36bf415fa0 R15: 00007ffeea9a86e8
[ 1146.960114][T25663]  </TASK>
[ 1147.356900][ T6113] Bluetooth: hci0: command 0x0406 tx timeout
[ 1148.074633][T23701] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1148.085728][T23701] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1148.098156][T23701] CPU: 0 UID: 0 PID: 23701 Comm: kworker/u11:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1148.098183][T23701] Tainted: [L]=SOFTLOCKUP
[ 1148.098189][T23701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1148.098202][T23701] Workqueue: hci2 hci_rx_work
[ 1148.098225][T23701] Call Trace:
[ 1148.098231][T23701]  <TASK>
[ 1148.098239][T23701]  dump_stack_lvl+0x100/0x190
[ 1148.098261][T23701]  sysfs_warn_dup.cold+0x1c/0x28
[ 1148.098286][T23701]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1148.098313][T23701]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1148.098333][T23701]  ? find_held_lock+0x2b/0x80
[ 1148.098352][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1148.098375][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1148.098399][T23701]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1148.098417][T23701]  kobject_add_internal+0x2c8/0x930
[ 1148.098444][T23701]  kobject_add+0x16a/0x1e0
[ 1148.098466][T23701]  ? __pfx_kobject_add+0x10/0x10
[ 1148.098487][T23701]  ? class_to_subsys+0x10f/0x150
[ 1148.098510][T23701]  ? kobject_put+0xb9/0x640
[ 1148.098530][T23701]  ? _raw_spin_unlock+0x28/0x50
[ 1148.098550][T23701]  device_add+0x294/0x1970
[ 1148.098569][T23701]  ? __pfx_dev_set_name+0x10/0x10
[ 1148.098590][T23701]  ? __pfx_device_add+0x10/0x10
[ 1148.098608][T23701]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1148.098633][T23701]  hci_conn_add_sysfs+0x1a3/0x260
[ 1148.098655][T23701]  le_conn_complete_evt+0x11eb/0x1f60
[ 1148.098679][T23701]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1148.098696][T23701]  ? __pfx_bt_warn+0x10/0x10
[ 1148.098711][T23701]  ? hci_event_packet+0x186/0xcd0
[ 1148.098734][T23701]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1148.098754][T23701]  ? skb_pull_data+0x15f/0x1e0
[ 1148.098774][T23701]  hci_le_meta_evt+0x34a/0x5f0
[ 1148.098795][T23701]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1148.098824][T23701]  hci_event_packet+0x51c/0xcd0
[ 1148.098843][T23701]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1148.098864][T23701]  ? __pfx_hci_event_packet+0x10/0x10
[ 1148.098886][T23701]  ? kcov_remote_start+0x384/0x670
[ 1148.098909][T23701]  ? lockdep_hardirqs_on+0x78/0x100
[ 1148.098931][T23701]  hci_rx_work+0x451/0xfc0
[ 1148.098952][T23701]  process_one_work+0xa23/0x1940
[ 1148.098983][T23701]  ? __pfx_process_one_work+0x10/0x10
[ 1148.099010][T23701]  ? __pfx_hci_rx_work+0x10/0x10
[ 1148.099030][T23701]  worker_thread+0x5ef/0xe50
[ 1148.099058][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1148.099081][T23701]  ? kthread+0x13a/0x450
[ 1148.099100][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1148.099121][T23701]  kthread+0x370/0x450
[ 1148.099140][T23701]  ? __pfx_kthread+0x10/0x10
[ 1148.099161][T23701]  ret_from_fork+0x72b/0xd50
[ 1148.099184][T23701]  ? __pfx_ret_from_fork+0x10/0x10
[ 1148.099204][T23701]  ? __switch_to+0x800/0x10f0
[ 1148.099217][T23701]  ? __switch_to_asm+0x39/0x70
[ 1148.099240][T23701]  ? __pfx_kthread+0x10/0x10
[ 1148.099262][T23701]  ret_from_fork_asm+0x1a/0x30
[ 1148.099293][T23701]  </TASK>
[ 1148.099335][T23701] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1148.369839][T23701] Bluetooth: hci2: failed to register connection device
[ 1148.475061][T23701] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1148.482237][T23701] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1148.490925][T23701] CPU: 0 UID: 0 PID: 23701 Comm: kworker/u11:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1148.490967][T23701] Tainted: [L]=SOFTLOCKUP
[ 1148.490978][T23701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1148.490996][T23701] Workqueue: hci2 hci_rx_work
[ 1148.491033][T23701] Call Trace:
[ 1148.491042][T23701]  <TASK>
[ 1148.491052][T23701]  dump_stack_lvl+0x100/0x190
[ 1148.491092][T23701]  sysfs_warn_dup.cold+0x1c/0x28
[ 1148.491135][T23701]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1148.491177][T23701]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1148.491215][T23701]  ? find_held_lock+0x2b/0x80
[ 1148.491254][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1148.491297][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1148.491338][T23701]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1148.491372][T23701]  kobject_add_internal+0x2c8/0x930
[ 1148.491418][T23701]  kobject_add+0x16a/0x1e0
[ 1148.491460][T23701]  ? __pfx_kobject_add+0x10/0x10
[ 1148.491501][T23701]  ? class_to_subsys+0x10f/0x150
[ 1148.491538][T23701]  ? kobject_put+0xb9/0x640
[ 1148.491573][T23701]  ? _raw_spin_unlock+0x28/0x50
[ 1148.491605][T23701]  device_add+0x294/0x1970
[ 1148.491638][T23701]  ? __pfx_dev_set_name+0x10/0x10
[ 1148.491675][T23701]  ? __pfx_device_add+0x10/0x10
[ 1148.491711][T23701]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1148.491751][T23701]  hci_conn_add_sysfs+0x1a3/0x260
[ 1148.491794][T23701]  le_conn_complete_evt+0x11eb/0x1f60
[ 1148.491851][T23701]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1148.491886][T23701]  ? __pfx_bt_warn+0x10/0x10
[ 1148.491917][T23701]  ? hci_event_packet+0x186/0xcd0
[ 1148.491963][T23701]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1148.492002][T23701]  ? skb_pull_data+0x15f/0x1e0
[ 1148.492042][T23701]  hci_le_meta_evt+0x34a/0x5f0
[ 1148.492082][T23701]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1148.492125][T23701]  hci_event_packet+0x51c/0xcd0
[ 1148.492162][T23701]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1148.492203][T23701]  ? __pfx_hci_event_packet+0x10/0x10
[ 1148.492243][T23701]  ? kcov_remote_start+0x384/0x670
[ 1148.492285][T23701]  ? lockdep_hardirqs_on+0x78/0x100
[ 1148.492328][T23701]  hci_rx_work+0x451/0xfc0
[ 1148.492372][T23701]  process_one_work+0xa23/0x1940
[ 1148.492432][T23701]  ? __pfx_process_one_work+0x10/0x10
[ 1148.492487][T23701]  ? __pfx_hci_rx_work+0x10/0x10
[ 1148.492526][T23701]  worker_thread+0x5ef/0xe50
[ 1148.492580][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1148.492625][T23701]  ? kthread+0x13a/0x450
[ 1148.492662][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1148.492703][T23701]  kthread+0x370/0x450
[ 1148.492742][T23701]  ? __pfx_kthread+0x10/0x10
[ 1148.492784][T23701]  ret_from_fork+0x72b/0xd50
[ 1148.492829][T23701]  ? __pfx_ret_from_fork+0x10/0x10
[ 1148.492869][T23701]  ? __switch_to+0x800/0x10f0
[ 1148.492896][T23701]  ? __switch_to_asm+0x39/0x70
[ 1148.492939][T23701]  ? __pfx_kthread+0x10/0x10
[ 1148.492981][T23701]  ret_from_fork_asm+0x1a/0x30
[ 1148.493038][T23701]  </TASK>
[ 1148.493069][T23701] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1148.777640][T23701] Bluetooth: hci2: failed to register connection device
[ 1149.016895][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1149.412280][T25713] blktrace: Concurrent blktraces are not allowed on nbd5
[ 1149.414685][T23701] Bluetooth: hci0: command 0x0406 tx timeout
[ 1149.836130][T25725] FAULT_INJECTION: forcing a failure.
[ 1149.836130][T25725] name failslab, interval 1, probability 0, space 0, times 0
[ 1149.850975][T25725] CPU: 0 UID: 0 PID: 25725 Comm: syz.1.4496 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1149.851018][T25725] Tainted: [L]=SOFTLOCKUP
[ 1149.851027][T25725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1149.851043][T25725] Call Trace:
[ 1149.851052][T25725]  <TASK>
[ 1149.851063][T25725]  dump_stack_lvl+0x100/0x190
[ 1149.851103][T25725]  should_fail_ex.cold+0x5/0xa
[ 1149.851139][T25725]  should_failslab+0xc2/0x120
[ 1149.851177][T25725]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1149.851209][T25725]  ? create_filter_start.constprop.0+0x81/0x310
[ 1149.851260][T25725]  create_filter_start.constprop.0+0x81/0x310
[ 1149.851308][T25725]  apply_subsystem_event_filter+0x188/0x17a0
[ 1149.851363][T25725]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 1149.851414][T25725]  ? _copy_from_user+0x59/0xd0
[ 1149.851452][T25725]  subsystem_filter_write+0x95/0x120
[ 1149.851497][T25725]  vfs_write+0x2aa/0x1050
[ 1149.851525][T25725]  ? __pfx_subsystem_filter_write+0x10/0x10
[ 1149.851570][T25725]  ? __pfx_vfs_write+0x10/0x10
[ 1149.851597][T25725]  ? __fget_files+0x215/0x3d0
[ 1149.851633][T25725]  ? __fget_files+0x21f/0x3d0
[ 1149.851674][T25725]  ksys_write+0x12a/0x250
[ 1149.851699][T25725]  ? __pfx_ksys_write+0x10/0x10
[ 1149.851737][T25725]  do_syscall_64+0x115/0x840
[ 1149.851771][T25725]  ? clear_bhb_loop+0x40/0x90
[ 1149.851807][T25725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1149.851836][T25725] RIP: 0033:0x7f36bf19ce59
[ 1149.851860][T25725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1149.851888][T25725] RSP: 002b:00007f36c00dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1149.851915][T25725] RAX: ffffffffffffffda RBX: 00007f36bf416180 RCX: 00007f36bf19ce59
[ 1149.851935][T25725] RDX: 0000000000000026 RSI: 0000200000000180 RDI: 000000000000000a
[ 1149.851953][T25725] RBP: 00007f36c00dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1149.851971][T25725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1149.851988][T25725] R13: 00007f36bf416218 R14: 00007f36bf416180 R15: 00007ffeea9a86e8
[ 1149.852028][T25725]  </TASK>
[ 1150.262702][T25731] FAULT_INJECTION: forcing a failure.
[ 1150.262702][T25731] name failslab, interval 1, probability 0, space 0, times 0
[ 1150.327145][T25731] CPU: 1 UID: 0 PID: 25731 Comm: syz.0.4498 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1150.327176][T25731] Tainted: [L]=SOFTLOCKUP
[ 1150.327183][T25731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1150.327193][T25731] Call Trace:
[ 1150.327198][T25731]  <TASK>
[ 1150.327205][T25731]  dump_stack_lvl+0x100/0x190
[ 1150.327232][T25731]  should_fail_ex.cold+0x5/0xa
[ 1150.327254][T25731]  should_failslab+0xc2/0x120
[ 1150.327275][T25731]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[ 1150.327295][T25731]  ? __d_alloc+0x35/0xa50
[ 1150.327315][T25731]  __d_alloc+0x35/0xa50
[ 1150.327333][T25731]  d_alloc+0x4a/0x1e0
[ 1150.327350][T25731]  lookup_one_qstr_excl+0x171/0x250
[ 1150.327388][T25731]  start_dirop+0x59/0xb0
[ 1150.327416][T25731]  simple_start_creating+0xf9/0x110
[ 1150.327442][T25731]  ? __pfx_simple_start_creating+0x10/0x10
[ 1150.327466][T25731]  ? mntput+0x70/0xa0
[ 1150.327488][T25731]  ? simple_pin_fs+0xa3/0x190
[ 1150.327511][T25731]  debugfs_start_creating.part.0+0x82/0x170
[ 1150.327533][T25731]  __debugfs_create_file+0xb3/0x4f0
[ 1150.327555][T25731]  debugfs_create_file_full+0x41/0x60
[ 1150.327576][T25731]  ref_tracker_dir_debugfs+0x19e/0x2e0
[ 1150.327596][T25731]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1150.327629][T25731]  ? kasan_save_track+0x14/0x30
[ 1150.327647][T25731]  ? __kasan_kmalloc+0xaa/0xb0
[ 1150.327673][T25731]  ? lockdep_init_map_type+0x5c/0x250
[ 1150.327693][T25731]  preinit_net.part.0+0x43b/0x920
[ 1150.327711][T25731]  copy_net_ns+0x339/0x7c0
[ 1150.327729][T25731]  create_new_namespaces+0x3ea/0xac0
[ 1150.327750][T25731]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1150.327769][T25731]  ksys_unshare+0x438/0xab0
[ 1150.327790][T25731]  ? __pfx_ksys_unshare+0x10/0x10
[ 1150.327816][T25731]  __x64_sys_unshare+0x31/0x40
[ 1150.327835][T25731]  do_syscall_64+0x115/0x840
[ 1150.327854][T25731]  ? clear_bhb_loop+0x40/0x90
[ 1150.327872][T25731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.327888][T25731] RIP: 0033:0x7fe1acf9ce59
[ 1150.327901][T25731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.327916][T25731] RSP: 002b:00007fe1aded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1150.327932][T25731] RAX: ffffffffffffffda RBX: 00007fe1ad216090 RCX: 00007fe1acf9ce59
[ 1150.327943][T25731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1150.327953][T25731] RBP: 00007fe1ad032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1150.327963][T25731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1150.327972][T25731] R13: 00007fe1ad216128 R14: 00007fe1ad216090 R15: 00007ffecfe9ccd8
[ 1150.327993][T25731]  </TASK>
[ 1151.093061][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1151.910823][T23701] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[ 1151.977496][T25751] Process accounting resumed
[ 1151.980175][T23701] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[ 1151.988723][T23701] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[ 1152.007978][T23701] CPU: 0 UID: 0 PID: 23701 Comm: kworker/u11:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1152.008023][T23701] Tainted: [L]=SOFTLOCKUP
[ 1152.008033][T23701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1152.008059][T23701] Workqueue: hci0 hci_rx_work
[ 1152.008100][T23701] Call Trace:
[ 1152.008111][T23701]  <TASK>
[ 1152.008124][T23701]  dump_stack_lvl+0x100/0x190
[ 1152.008167][T23701]  sysfs_warn_dup.cold+0x1c/0x28
[ 1152.008211][T23701]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1152.008253][T23701]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1152.008293][T23701]  ? find_held_lock+0x2b/0x80
[ 1152.008330][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1152.008373][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1152.008420][T23701]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1152.008457][T23701]  kobject_add_internal+0x2c8/0x930
[ 1152.008508][T23701]  kobject_add+0x16a/0x1e0
[ 1152.008551][T23701]  ? __pfx_kobject_add+0x10/0x10
[ 1152.008592][T23701]  ? class_to_subsys+0x10f/0x150
[ 1152.008636][T23701]  ? kobject_put+0xb9/0x640
[ 1152.008674][T23701]  ? _raw_spin_unlock+0x28/0x50
[ 1152.008714][T23701]  device_add+0x294/0x1970
[ 1152.008749][T23701]  ? __pfx_dev_set_name+0x10/0x10
[ 1152.008790][T23701]  ? __pfx_device_add+0x10/0x10
[ 1152.008826][T23701]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1152.008873][T23701]  hci_conn_add_sysfs+0x1a3/0x260
[ 1152.008916][T23701]  le_conn_complete_evt+0x11eb/0x1f60
[ 1152.008963][T23701]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1152.008997][T23701]  ? __pfx_bt_warn+0x10/0x10
[ 1152.009026][T23701]  ? hci_event_packet+0x186/0xcd0
[ 1152.009077][T23701]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1152.009117][T23701]  ? skb_pull_data+0x15f/0x1e0
[ 1152.009157][T23701]  hci_le_meta_evt+0x34a/0x5f0
[ 1152.009196][T23701]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1152.009239][T23701]  hci_event_packet+0x51c/0xcd0
[ 1152.009276][T23701]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1152.009316][T23701]  ? __pfx_hci_event_packet+0x10/0x10
[ 1152.009356][T23701]  ? kcov_remote_start+0x384/0x670
[ 1152.009398][T23701]  ? lockdep_hardirqs_on+0x78/0x100
[ 1152.009441][T23701]  hci_rx_work+0x451/0xfc0
[ 1152.009483][T23701]  process_one_work+0xa23/0x1940
[ 1152.009540][T23701]  ? __pfx_process_one_work+0x10/0x10
[ 1152.009594][T23701]  ? __pfx_hci_rx_work+0x10/0x10
[ 1152.009634][T23701]  worker_thread+0x5ef/0xe50
[ 1152.009687][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1152.009732][T23701]  ? kthread+0x13a/0x450
[ 1152.009769][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1152.009810][T23701]  kthread+0x370/0x450
[ 1152.009847][T23701]  ? __pfx_kthread+0x10/0x10
[ 1152.009889][T23701]  ret_from_fork+0x72b/0xd50
[ 1152.009927][T23701]  ? __pfx_ret_from_fork+0x10/0x10
[ 1152.009965][T23701]  ? __switch_to+0x800/0x10f0
[ 1152.009991][T23701]  ? __switch_to_asm+0x39/0x70
[ 1152.010033][T23701]  ? __pfx_kthread+0x10/0x10
[ 1152.010082][T23701]  ret_from_fork_asm+0x1a/0x30
[ 1152.010143][T23701]  </TASK>
[ 1152.276573][T23701] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1152.289380][T23701] Bluetooth: hci0: failed to register connection device
[ 1153.154450][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1153.380740][T14303] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1153.440680][T14303] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1153.447983][T14303] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1153.456539][T14303] CPU: 0 UID: 0 PID: 14303 Comm: kworker/u11:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1153.456584][T14303] Tainted: [L]=SOFTLOCKUP
[ 1153.456594][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1153.456613][T14303] Workqueue: hci2 hci_rx_work
[ 1153.456652][T14303] Call Trace:
[ 1153.456661][T14303]  <TASK>
[ 1153.456672][T14303]  dump_stack_lvl+0x100/0x190
[ 1153.456711][T14303]  sysfs_warn_dup.cold+0x1c/0x28
[ 1153.456756][T14303]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1153.456802][T14303]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1153.456854][T14303]  ? find_held_lock+0x2b/0x80
[ 1153.456892][T14303]  ? kobject_add_internal+0x25f/0x930
[ 1153.456929][T14303]  ? kobject_add_internal+0x25f/0x930
[ 1153.456977][T14303]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1153.457010][T14303]  kobject_add_internal+0x2c8/0x930
[ 1153.457056][T14303]  kobject_add+0x16a/0x1e0
[ 1153.457096][T14303]  ? __pfx_kobject_add+0x10/0x10
[ 1153.457138][T14303]  ? class_to_subsys+0x10f/0x150
[ 1153.457181][T14303]  ? kobject_put+0xb9/0x640
[ 1153.457221][T14303]  ? _raw_spin_unlock+0x28/0x50
[ 1153.457259][T14303]  device_add+0x294/0x1970
[ 1153.457295][T14303]  ? __pfx_dev_set_name+0x10/0x10
[ 1153.457335][T14303]  ? __pfx_device_add+0x10/0x10
[ 1153.457371][T14303]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1153.457418][T14303]  hci_conn_add_sysfs+0x1a3/0x260
[ 1153.457462][T14303]  le_conn_complete_evt+0x11eb/0x1f60
[ 1153.457508][T14303]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1153.457542][T14303]  ? __pfx_bt_warn+0x10/0x10
[ 1153.457571][T14303]  ? hci_event_packet+0x186/0xcd0
[ 1153.457615][T14303]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1153.457654][T14303]  ? skb_pull_data+0x15f/0x1e0
[ 1153.457693][T14303]  hci_le_meta_evt+0x34a/0x5f0
[ 1153.457734][T14303]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1153.457776][T14303]  hci_event_packet+0x51c/0xcd0
[ 1153.457813][T14303]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1153.457862][T14303]  ? __pfx_hci_event_packet+0x10/0x10
[ 1153.457903][T14303]  ? kcov_remote_start+0x384/0x670
[ 1153.457947][T14303]  ? lockdep_hardirqs_on+0x78/0x100
[ 1153.457989][T14303]  hci_rx_work+0x451/0xfc0
[ 1153.458031][T14303]  process_one_work+0xa23/0x1940
[ 1153.458090][T14303]  ? __pfx_process_one_work+0x10/0x10
[ 1153.458143][T14303]  ? __pfx_hci_rx_work+0x10/0x10
[ 1153.458180][T14303]  worker_thread+0x5ef/0xe50
[ 1153.458236][T14303]  ? kthread+0x13a/0x450
[ 1153.458273][T14303]  ? __pfx_worker_thread+0x10/0x10
[ 1153.458311][T14303]  kthread+0x370/0x450
[ 1153.458350][T14303]  ? __pfx_kthread+0x10/0x10
[ 1153.458393][T14303]  ret_from_fork+0x72b/0xd50
[ 1153.458433][T14303]  ? __pfx_ret_from_fork+0x10/0x10
[ 1153.458473][T14303]  ? __switch_to+0x800/0x10f0
[ 1153.458500][T14303]  ? __switch_to_asm+0x39/0x70
[ 1153.458543][T14303]  ? __pfx_kthread+0x10/0x10
[ 1153.458583][T14303]  ret_from_fork_asm+0x1a/0x30
[ 1153.458642][T14303]  </TASK>
[ 1153.458675][T14303] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1153.729077][T14303] Bluetooth: hci2: failed to register connection device
[ 1153.850427][T25805] FAULT_INJECTION: forcing a failure.
[ 1153.850427][T25805] name failslab, interval 1, probability 0, space 0, times 0
[ 1153.875072][T25805] CPU: 0 UID: 0 PID: 25805 Comm: syz.3.4511 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1153.875113][T25805] Tainted: [L]=SOFTLOCKUP
[ 1153.875124][T25805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1153.875140][T25805] Call Trace:
[ 1153.875149][T25805]  <TASK>
[ 1153.875160][T25805]  dump_stack_lvl+0x100/0x190
[ 1153.875195][T25805]  should_fail_ex.cold+0x5/0xa
[ 1153.875216][T25805]  should_failslab+0xc2/0x120
[ 1153.875239][T25805]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1153.875259][T25805]  ? __kasan_kmalloc+0xaa/0xb0
[ 1153.875278][T25805]  ? create_filter_start.constprop.0+0x15b/0x310
[ 1153.875305][T25805]  kstrdup+0x51/0xe0
[ 1153.875324][T25805]  create_filter_start.constprop.0+0x15b/0x310
[ 1153.875348][T25805]  apply_subsystem_event_filter+0x188/0x17a0
[ 1153.875377][T25805]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 1153.875406][T25805]  ? _copy_from_user+0x59/0xd0
[ 1153.875428][T25805]  subsystem_filter_write+0x95/0x120
[ 1153.875451][T25805]  vfs_write+0x2aa/0x1050
[ 1153.875466][T25805]  ? __pfx_subsystem_filter_write+0x10/0x10
[ 1153.875490][T25805]  ? __pfx_vfs_write+0x10/0x10
[ 1153.875504][T25805]  ? __fget_files+0x215/0x3d0
[ 1153.875523][T25805]  ? __fget_files+0x21f/0x3d0
[ 1153.875542][T25805]  ksys_write+0x12a/0x250
[ 1153.875556][T25805]  ? __pfx_ksys_write+0x10/0x10
[ 1153.875575][T25805]  do_syscall_64+0x115/0x840
[ 1153.875594][T25805]  ? clear_bhb_loop+0x40/0x90
[ 1153.875612][T25805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1153.875632][T25805] RIP: 0033:0x7fdb53f9ce59
[ 1153.875655][T25805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1153.875670][T25805] RSP: 002b:00007fdb54eba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1153.875685][T25805] RAX: ffffffffffffffda RBX: 00007fdb54216180 RCX: 00007fdb53f9ce59
[ 1153.875695][T25805] RDX: 0000000000000026 RSI: 0000200000000180 RDI: 000000000000000a
[ 1153.875704][T25805] RBP: 00007fdb54eba090 R08: 0000000000000000 R09: 0000000000000000
[ 1153.875714][T25805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1153.875723][T25805] R13: 00007fdb54216218 R14: 00007fdb54216180 R15: 00007ffdc4ec94a8
[ 1153.875743][T25805]  </TASK>
[ 1154.088809][T14303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1154.740593][T25804] Process accounting resumed
[ 1155.221978][T14303] Bluetooth: hci2: command 0x0406 tx timeout
[ 1155.449826][   T30] audit: type=1800 audit(1844279059.085:109): pid=25864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4519" name="version" dev="configfs" ino=136994 res=0 errno=0
[ 1156.096769][T14303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1156.360485][T25881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4522'.
[ 1156.637342][T25873] smpboot: CPU 1 is now offline
[ 1157.290747][T14303] Bluetooth: hci2: command 0x0406 tx timeout
[ 1157.299720][T25878] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1157.305872][T25893] Process accounting resumed
[ 1157.377695][T25878] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1159.359165][ T6113] Bluetooth: hci1: command 0x0406 tx timeout
[ 1159.438174][ T6113] Bluetooth: hci2: command 0x0406 tx timeout
[ 1159.443643][T14303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1159.455862][T25878] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1159.463587][T25878] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1159.476236][T25878] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1161.506864][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1161.512465][ T6113] Bluetooth: hci0: command 0x0406 tx timeout
[ 1161.905503][T25955] FAULT_INJECTION: forcing a failure.
[ 1161.905503][T25955] name failslab, interval 1, probability 0, space 0, times 0
[ 1161.935826][T25955] CPU: 0 UID: 0 PID: 25955 Comm: syz.3.4537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1161.935854][T25955] Tainted: [L]=SOFTLOCKUP
[ 1161.935860][T25955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1161.935871][T25955] Call Trace:
[ 1161.935876][T25955]  <TASK>
[ 1161.935883][T25955]  dump_stack_lvl+0x100/0x190
[ 1161.935915][T25955]  should_fail_ex.cold+0x5/0xa
[ 1161.935936][T25955]  should_failslab+0xc2/0x120
[ 1161.935957][T25955]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1161.935978][T25955]  ? alloc_uid+0xe2/0x4c0
[ 1161.935998][T25955]  ? alloc_uid+0x13d/0x4c0
[ 1161.936019][T25955]  alloc_uid+0x13d/0x4c0
[ 1161.936038][T25955]  ? __pfx_alloc_uid+0x10/0x10
[ 1161.936057][T25955]  ? bpf_lsm_capable+0x9/0x10
[ 1161.936074][T25955]  ? security_capable+0x80/0x260
[ 1161.936108][T25955]  __sys_setreuid+0x63c/0xb00
[ 1161.936128][T25955]  do_syscall_64+0x115/0x840
[ 1161.936148][T25955]  ? clear_bhb_loop+0x40/0x90
[ 1161.936166][T25955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1161.936182][T25955] RIP: 0033:0x7fdb53f9ce59
[ 1161.936196][T25955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1161.936211][T25955] RSP: 002b:00007fdb54efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071
[ 1161.936226][T25955] RAX: ffffffffffffffda RBX: 00007fdb54215fa0 RCX: 00007fdb53f9ce59
[ 1161.936236][T25955] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000009
[ 1161.936245][T25955] RBP: 00007fdb54032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1161.936254][T25955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1161.936263][T25955] R13: 00007fdb54216038 R14: 00007fdb54215fa0 R15: 00007ffdc4ec94a8
[ 1161.936282][T25955]  </TASK>
[ 1162.335566][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4539'.
[ 1163.575199][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1165.314751][T25978] Process accounting resumed
[ 1165.643362][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1167.043197][T26038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4553'.
[ 1167.712885][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1169.780518][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1170.209023][T26111] FAULT_INJECTION: forcing a failure.
[ 1170.209023][T26111] name failslab, interval 1, probability 0, space 0, times 0
[ 1170.270269][T26111] CPU: 0 UID: 0 PID: 26111 Comm: syz.0.4567 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1170.270298][T26111] Tainted: [L]=SOFTLOCKUP
[ 1170.270304][T26111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1170.270316][T26111] Call Trace:
[ 1170.270323][T26111]  <TASK>
[ 1170.270330][T26111]  dump_stack_lvl+0x100/0x190
[ 1170.270355][T26111]  should_fail_ex.cold+0x5/0xa
[ 1170.270376][T26111]  should_failslab+0xc2/0x120
[ 1170.270398][T26111]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1170.270420][T26111]  ? debugfs_create_symlink+0x29/0x220
[ 1170.270445][T26111]  kstrdup+0x51/0xe0
[ 1170.270463][T26111]  debugfs_create_symlink+0x29/0x220
[ 1170.270484][T26111]  ref_tracker_dir_symlink+0x257/0x3b0
[ 1170.270506][T26111]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[ 1170.270551][T26111]  ? __pfx_net_ns_net_init+0x10/0x10
[ 1170.270567][T26111]  net_ns_net_init+0xd2/0x120
[ 1170.270582][T26111]  ops_init+0x1e2/0x5f0
[ 1170.270598][T26111]  setup_net+0x118/0x3a0
[ 1170.270613][T26111]  ? __pfx_setup_net+0x10/0x10
[ 1170.270628][T26111]  ? mutex_init_lockdep+0xf1/0x120
[ 1170.270648][T26111]  copy_net_ns+0x46f/0x7c0
[ 1170.270665][T26111]  create_new_namespaces+0x3ea/0xac0
[ 1170.270687][T26111]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1170.270705][T26111]  ksys_unshare+0x438/0xab0
[ 1170.270726][T26111]  ? __pfx_ksys_unshare+0x10/0x10
[ 1170.270753][T26111]  __x64_sys_unshare+0x31/0x40
[ 1170.270772][T26111]  do_syscall_64+0x115/0x840
[ 1170.270791][T26111]  ? clear_bhb_loop+0x40/0x90
[ 1170.270809][T26111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.270825][T26111] RIP: 0033:0x7fe1acf9ce59
[ 1170.270838][T26111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1170.270853][T26111] RSP: 002b:00007fe1aded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1170.270869][T26111] RAX: ffffffffffffffda RBX: 00007fe1ad216090 RCX: 00007fe1acf9ce59
[ 1170.270880][T26111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1170.270889][T26111] RBP: 00007fe1ad032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1170.270898][T26111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1170.270907][T26111] R13: 00007fe1ad216128 R14: 00007fe1ad216090 R15: 00007ffecfe9ccd8
[ 1170.270926][T26111]  </TASK>
[ 1171.717437][T26130] FAULT_INJECTION: forcing a failure.
[ 1171.717437][T26130] name failslab, interval 1, probability 0, space 0, times 0
[ 1171.792167][T26130] CPU: 0 UID: 0 PID: 26130 Comm: syz.2.4570 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1171.792204][T26130] Tainted: [L]=SOFTLOCKUP
[ 1171.792210][T26130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1171.792219][T26130] Call Trace:
[ 1171.792226][T26130]  <TASK>
[ 1171.792232][T26130]  dump_stack_lvl+0x100/0x190
[ 1171.792257][T26130]  should_fail_ex.cold+0x5/0xa
[ 1171.792277][T26130]  should_failslab+0xc2/0x120
[ 1171.792299][T26130]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1171.792316][T26130]  ? apply_subsystem_event_filter+0x42e/0x17a0
[ 1171.792344][T26130]  apply_subsystem_event_filter+0x42e/0x17a0
[ 1171.792375][T26130]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 1171.792402][T26130]  ? _copy_from_user+0x59/0xd0
[ 1171.792423][T26130]  subsystem_filter_write+0x95/0x120
[ 1171.792447][T26130]  vfs_write+0x2aa/0x1050
[ 1171.792462][T26130]  ? __pfx_subsystem_filter_write+0x10/0x10
[ 1171.792486][T26130]  ? __pfx_vfs_write+0x10/0x10
[ 1171.792499][T26130]  ? __fget_files+0x215/0x3d0
[ 1171.792518][T26130]  ? __fget_files+0x21f/0x3d0
[ 1171.792537][T26130]  ksys_write+0x12a/0x250
[ 1171.792550][T26130]  ? __pfx_ksys_write+0x10/0x10
[ 1171.792570][T26130]  do_syscall_64+0x115/0x840
[ 1171.792590][T26130]  ? clear_bhb_loop+0x40/0x90
[ 1171.792609][T26130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1171.792624][T26130] RIP: 0033:0x7faef3d9ce59
[ 1171.792638][T26130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1171.792653][T26130] RSP: 002b:00007faef4c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1171.792667][T26130] RAX: ffffffffffffffda RBX: 00007faef4016180 RCX: 00007faef3d9ce59
[ 1171.792678][T26130] RDX: 0000000000000026 RSI: 0000200000000180 RDI: 000000000000000a
[ 1171.792687][T26130] RBP: 00007faef4c9b090 R08: 0000000000000000 R09: 0000000000000000
[ 1171.792696][T26130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1171.792705][T26130] R13: 00007faef4016218 R14: 00007faef4016180 R15: 00007fff432b0be8
[ 1171.792725][T26130]  </TASK>
[ 1172.555653][T26141] random: crng reseeded on system resumption
[ 1173.123704][T23701] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1175.677104][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[ 1175.686734][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[ 1176.419426][T26196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4584'.
[ 1176.647809][T26203] FAULT_INJECTION: forcing a failure.
[ 1176.647809][T26203] name failslab, interval 1, probability 0, space 0, times 0
[ 1176.861082][T26203] CPU: 0 UID: 0 PID: 26203 Comm: syz.2.4585 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1176.861109][T26203] Tainted: [L]=SOFTLOCKUP
[ 1176.861115][T26203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1176.861124][T26203] Call Trace:
[ 1176.861130][T26203]  <TASK>
[ 1176.861136][T26203]  dump_stack_lvl+0x100/0x190
[ 1176.861160][T26203]  should_fail_ex.cold+0x5/0xa
[ 1176.861181][T26203]  should_failslab+0xc2/0x120
[ 1176.861203][T26203]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1176.861223][T26203]  ? __kasan_kmalloc+0xaa/0xb0
[ 1176.861242][T26203]  ? apply_subsystem_event_filter+0x44d/0x17a0
[ 1176.861269][T26203]  kstrdup+0x51/0xe0
[ 1176.861287][T26203]  apply_subsystem_event_filter+0x44d/0x17a0
[ 1176.861319][T26203]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 1176.861345][T26203]  ? _copy_from_user+0x59/0xd0
[ 1176.861366][T26203]  subsystem_filter_write+0x95/0x120
[ 1176.861391][T26203]  vfs_write+0x2aa/0x1050
[ 1176.861406][T26203]  ? __pfx_subsystem_filter_write+0x10/0x10
[ 1176.861430][T26203]  ? __pfx_vfs_write+0x10/0x10
[ 1176.861443][T26203]  ? __fget_files+0x215/0x3d0
[ 1176.861461][T26203]  ? __fget_files+0x21f/0x3d0
[ 1176.861481][T26203]  ksys_write+0x12a/0x250
[ 1176.861494][T26203]  ? __pfx_ksys_write+0x10/0x10
[ 1176.861514][T26203]  do_syscall_64+0x115/0x840
[ 1176.861533][T26203]  ? clear_bhb_loop+0x40/0x90
[ 1176.861551][T26203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1176.861567][T26203] RIP: 0033:0x7faef3d9ce59
[ 1176.861580][T26203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1176.861608][T26203] RSP: 002b:00007faef4c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1176.861624][T26203] RAX: ffffffffffffffda RBX: 00007faef4016180 RCX: 00007faef3d9ce59
[ 1176.861635][T26203] RDX: 0000000000000026 RSI: 0000200000000180 RDI: 000000000000000a
[ 1176.861644][T26203] RBP: 00007faef4c9b090 R08: 0000000000000000 R09: 0000000000000000
[ 1176.861653][T26203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1176.861662][T26203] R13: 00007faef4016218 R14: 00007faef4016180 R15: 00007fff432b0be8
[ 1176.861682][T26203]  </TASK>
[ 1177.985745][T26222] FAULT_INJECTION: forcing a failure.
[ 1177.985745][T26222] name failslab, interval 1, probability 0, space 0, times 0
[ 1178.048054][T26222] CPU: 0 UID: 0 PID: 26222 Comm: syz.2.4589 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1178.048083][T26222] Tainted: [L]=SOFTLOCKUP
[ 1178.048089][T26222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1178.048102][T26222] Call Trace:
[ 1178.048108][T26222]  <TASK>
[ 1178.048115][T26222]  dump_stack_lvl+0x100/0x190
[ 1178.048139][T26222]  should_fail_ex.cold+0x5/0xa
[ 1178.048161][T26222]  should_failslab+0xc2/0x120
[ 1178.048183][T26222]  kmem_cache_alloc_lru_noprof+0x8d/0x6a0
[ 1178.048202][T26222]  ? start_dirop+0x79/0xb0
[ 1178.048226][T26222]  ? alloc_inode+0x68/0x250
[ 1178.048246][T26222]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1178.048266][T26222]  alloc_inode+0x68/0x250
[ 1178.048285][T26222]  new_inode+0x22/0x1c0
[ 1178.048306][T26222]  __debugfs_create_file+0x105/0x4f0
[ 1178.048328][T26222]  debugfs_create_file_full+0x41/0x60
[ 1178.048350][T26222]  ref_tracker_dir_debugfs+0x19e/0x2e0
[ 1178.048371][T26222]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1178.048404][T26222]  ? kasan_save_track+0x14/0x30
[ 1178.048422][T26222]  ? __kasan_kmalloc+0xaa/0xb0
[ 1178.048441][T26222]  ? lockdep_init_map_type+0x5c/0x250
[ 1178.048459][T26222]  preinit_net.part.0+0x43b/0x920
[ 1178.048477][T26222]  copy_net_ns+0x339/0x7c0
[ 1178.048495][T26222]  create_new_namespaces+0x3ea/0xac0
[ 1178.048519][T26222]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1178.048538][T26222]  ksys_unshare+0x438/0xab0
[ 1178.048559][T26222]  ? __pfx_ksys_unshare+0x10/0x10
[ 1178.048594][T26222]  __x64_sys_unshare+0x31/0x40
[ 1178.048615][T26222]  do_syscall_64+0x115/0x840
[ 1178.048635][T26222]  ? clear_bhb_loop+0x40/0x90
[ 1178.048653][T26222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1178.048669][T26222] RIP: 0033:0x7faef3d9ce59
[ 1178.048683][T26222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1178.048698][T26222] RSP: 002b:00007faef4cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1178.048714][T26222] RAX: ffffffffffffffda RBX: 00007faef4015fa0 RCX: 00007faef3d9ce59
[ 1178.048724][T26222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1178.048734][T26222] RBP: 00007faef3e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1178.048743][T26222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1178.048752][T26222] R13: 00007faef4016038 R14: 00007faef4015fa0 R15: 00007fff432b0be8
[ 1178.048771][T26222]  </TASK>
[ 1178.655882][T26248] FAULT_INJECTION: forcing a failure.
[ 1178.655882][T26248] name failslab, interval 1, probability 0, space 0, times 0
[ 1178.709744][T26222] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888077ab82f8'
[ 1178.733698][T26248] CPU: 0 UID: 0 PID: 26248 Comm: syz.0.4596 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1178.733726][T26248] Tainted: [L]=SOFTLOCKUP
[ 1178.733732][T26248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1178.733742][T26248] Call Trace:
[ 1178.733748][T26248]  <TASK>
[ 1178.733755][T26248]  dump_stack_lvl+0x100/0x190
[ 1178.733781][T26248]  should_fail_ex.cold+0x5/0xa
[ 1178.733802][T26248]  should_failslab+0xc2/0x120
[ 1178.733824][T26248]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1178.733844][T26248]  ? copy_utsname+0x1a8/0x690
[ 1178.733868][T26248]  copy_utsname+0x1a8/0x690
[ 1178.733888][T26248]  create_new_namespaces+0x16a/0xac0
[ 1178.733906][T26248]  ? bpf_lsm_capable+0x9/0x10
[ 1178.733922][T26248]  ? security_capable+0x80/0x260
[ 1178.733946][T26248]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1178.733964][T26248]  ksys_unshare+0x438/0xab0
[ 1178.733985][T26248]  ? __pfx_ksys_unshare+0x10/0x10
[ 1178.734012][T26248]  __x64_sys_unshare+0x31/0x40
[ 1178.734031][T26248]  do_syscall_64+0x115/0x840
[ 1178.734050][T26248]  ? clear_bhb_loop+0x40/0x90
[ 1178.734068][T26248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1178.734084][T26248] RIP: 0033:0x7fe1acf9ce59
[ 1178.734098][T26248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1178.734114][T26248] RSP: 002b:00007fe1adef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1178.734129][T26248] RAX: ffffffffffffffda RBX: 00007fe1ad215fa0 RCX: 00007fe1acf9ce59
[ 1178.734140][T26248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000
[ 1178.734149][T26248] RBP: 00007fe1ad032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1178.734158][T26248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1178.734167][T26248] R13: 00007fe1ad216038 R14: 00007fe1ad215fa0 R15: 00007ffecfe9ccd8
[ 1178.734186][T26248]  </TASK>
[ 1179.916907][T26263] FAULT_INJECTION: forcing a failure.
[ 1179.916907][T26263] name failslab, interval 1, probability 0, space 0, times 0
[ 1180.063438][T26263] CPU: 0 UID: 0 PID: 26263 Comm: syz.2.4598 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1180.063464][T26263] Tainted: [L]=SOFTLOCKUP
[ 1180.063470][T26263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1180.063480][T26263] Call Trace:
[ 1180.063485][T26263]  <TASK>
[ 1180.063491][T26263]  dump_stack_lvl+0x100/0x190
[ 1180.063516][T26263]  should_fail_ex.cold+0x5/0xa
[ 1180.063536][T26263]  should_failslab+0xc2/0x120
[ 1180.063558][T26263]  __kmalloc_cache_noprof+0x91/0x6c0
[ 1180.063575][T26263]  ? append_filter_err+0xb8/0x620
[ 1180.063599][T26263]  append_filter_err+0xb8/0x620
[ 1180.063625][T26263]  apply_subsystem_event_filter+0x711/0x17a0
[ 1180.063654][T26263]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 1180.063680][T26263]  ? _copy_from_user+0x59/0xd0
[ 1180.063701][T26263]  subsystem_filter_write+0x95/0x120
[ 1180.063724][T26263]  vfs_write+0x2aa/0x1050
[ 1180.063739][T26263]  ? __pfx_subsystem_filter_write+0x10/0x10
[ 1180.063763][T26263]  ? __pfx_vfs_write+0x10/0x10
[ 1180.063776][T26263]  ? __fget_files+0x215/0x3d0
[ 1180.063794][T26263]  ? __fget_files+0x21f/0x3d0
[ 1180.063814][T26263]  ksys_write+0x12a/0x250
[ 1180.063827][T26263]  ? __pfx_ksys_write+0x10/0x10
[ 1180.063847][T26263]  do_syscall_64+0x115/0x840
[ 1180.063865][T26263]  ? clear_bhb_loop+0x40/0x90
[ 1180.063884][T26263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.063899][T26263] RIP: 0033:0x7faef3d9ce59
[ 1180.063912][T26263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1180.063927][T26263] RSP: 002b:00007faef4c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1180.063943][T26263] RAX: ffffffffffffffda RBX: 00007faef4016180 RCX: 00007faef3d9ce59
[ 1180.063953][T26263] RDX: 0000000000000026 RSI: 0000200000000180 RDI: 000000000000000a
[ 1180.063962][T26263] RBP: 00007faef4c9b090 R08: 0000000000000000 R09: 0000000000000000
[ 1180.063972][T26263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1180.063981][T26263] R13: 00007faef4016218 R14: 00007faef4016180 R15: 00007fff432b0be8
[ 1180.064001][T26263]  </TASK>
[ 1181.473630][T26303] FAULT_INJECTION: forcing a failure.
[ 1181.473630][T26303] name failslab, interval 1, probability 0, space 0, times 0
[ 1181.507217][T26303] CPU: 0 UID: 0 PID: 26303 Comm: syz.2.4607 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1181.507246][T26303] Tainted: [L]=SOFTLOCKUP
[ 1181.507252][T26303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1181.507262][T26303] Call Trace:
[ 1181.507268][T26303]  <TASK>
[ 1181.507275][T26303]  dump_stack_lvl+0x100/0x190
[ 1181.507301][T26303]  should_fail_ex.cold+0x5/0xa
[ 1181.507323][T26303]  should_failslab+0xc2/0x120
[ 1181.507344][T26303]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1181.507363][T26303]  ? __pfx_map_id_range_down+0x10/0x10
[ 1181.507385][T26303]  ? security_inode_alloc+0x3b/0x2c0
[ 1181.507412][T26303]  security_inode_alloc+0x3b/0x2c0
[ 1181.507435][T26303]  inode_init_always_gfp+0xc77/0xfb0
[ 1181.507453][T26303]  alloc_inode+0x8e/0x250
[ 1181.507472][T26303]  new_inode+0x22/0x1c0
[ 1181.507493][T26303]  __debugfs_create_file+0x105/0x4f0
[ 1181.507516][T26303]  debugfs_create_file_full+0x41/0x60
[ 1181.507538][T26303]  ref_tracker_dir_debugfs+0x19e/0x2e0
[ 1181.507558][T26303]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[ 1181.507590][T26303]  ? kasan_save_track+0x14/0x30
[ 1181.507608][T26303]  ? __kasan_kmalloc+0xaa/0xb0
[ 1181.507627][T26303]  ? lockdep_init_map_type+0x5c/0x250
[ 1181.507645][T26303]  preinit_net.part.0+0x43b/0x920
[ 1181.507662][T26303]  copy_net_ns+0x339/0x7c0
[ 1181.507680][T26303]  create_new_namespaces+0x3ea/0xac0
[ 1181.507703][T26303]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1181.507729][T26303]  ksys_unshare+0x438/0xab0
[ 1181.507751][T26303]  ? __pfx_ksys_unshare+0x10/0x10
[ 1181.507778][T26303]  __x64_sys_unshare+0x31/0x40
[ 1181.507798][T26303]  do_syscall_64+0x115/0x840
[ 1181.507816][T26303]  ? clear_bhb_loop+0x40/0x90
[ 1181.507836][T26303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1181.507852][T26303] RIP: 0033:0x7faef3d9ce59
[ 1181.507866][T26303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1181.507881][T26303] RSP: 002b:00007faef4cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1181.507896][T26303] RAX: ffffffffffffffda RBX: 00007faef4015fa0 RCX: 00007faef3d9ce59
[ 1181.507907][T26303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1181.507916][T26303] RBP: 00007faef3e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1181.507926][T26303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1181.507935][T26303] R13: 00007faef4016038 R14: 00007faef4015fa0 R15: 00007fff432b0be8
[ 1181.507956][T26303]  </TASK>
[ 1181.507984][T26303] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88807e00d178'
[ 1182.379349][T26296] Process accounting paused
[ 1183.295390][T26333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4613'.
[ 1183.866132][T26342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4615'.
[ 1183.946966][T26349] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4617'.
[ 1184.001687][T26355] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4617'.
[ 1184.498560][T26365] ERROR: Out of memory at tomoyo_memory_ok.
[ 1184.753031][T26367] ERROR: Out of memory at tomoyo_memory_ok.
[ 1185.328217][T26369] Process accounting paused
[ 1187.093492][T26404] FAULT_INJECTION: forcing a failure.
[ 1187.093492][T26404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1187.214334][T26404] CPU: 0 UID: 0 PID: 26404 Comm: syz.1.4627 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1187.214361][T26404] Tainted: [L]=SOFTLOCKUP
[ 1187.214367][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1187.214376][T26404] Call Trace:
[ 1187.214382][T26404]  <TASK>
[ 1187.214388][T26404]  dump_stack_lvl+0x100/0x190
[ 1187.214413][T26404]  should_fail_ex.cold+0x5/0xa
[ 1187.214434][T26404]  _copy_from_user+0x2e/0xd0
[ 1187.214453][T26404]  kstrtouint_from_user+0xd6/0x1d0
[ 1187.214475][T26404]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1187.214497][T26404]  ? __lock_acquire+0x49f/0x1a40
[ 1187.214520][T26404]  proc_fail_nth_write+0x83/0x220
[ 1187.214541][T26404]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1187.214567][T26404]  vfs_write+0x2aa/0x1050
[ 1187.214582][T26404]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1187.214604][T26404]  ? __pfx_vfs_write+0x10/0x10
[ 1187.214617][T26404]  ? __fget_files+0x215/0x3d0
[ 1187.214635][T26404]  ? __fget_files+0x21f/0x3d0
[ 1187.214654][T26404]  ksys_write+0x12a/0x250
[ 1187.214668][T26404]  ? __pfx_ksys_write+0x10/0x10
[ 1187.214687][T26404]  do_syscall_64+0x115/0x840
[ 1187.214706][T26404]  ? clear_bhb_loop+0x40/0x90
[ 1187.214724][T26404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1187.214740][T26404] RIP: 0033:0x7f36bf15d68e
[ 1187.214753][T26404] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1187.214768][T26404] RSP: 002b:00007f36c00bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1187.214782][T26404] RAX: ffffffffffffffda RBX: 00007f36c00bc6c0 RCX: 00007f36bf15d68e
[ 1187.214793][T26404] RDX: 0000000000000001 RSI: 00007f36c00bc0a0 RDI: 0000000000000004
[ 1187.214802][T26404] RBP: 00007f36c00bc090 R08: 0000000000000000 R09: 0000000000000000
[ 1187.214812][T26404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1187.214821][T26404] R13: 00007f36bf416308 R14: 00007f36bf416270 R15: 00007ffeea9a86e8
[ 1187.214841][T26404]  </TASK>
[ 1188.102069][T26399] Process accounting paused
[ 1188.422131][T26435] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4634'.
[ 1188.492268][T26439] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1188.567309][T26439] ERROR: Out of memory at tomoyo_memory_ok.
[ 1188.640586][T26433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4635'.
[ 1189.843930][T26444] Process accounting resumed
[ 1192.887567][T26548] FAULT_INJECTION: forcing a failure.
[ 1192.887567][T26548] name failslab, interval 1, probability 0, space 0, times 0
[ 1192.945851][T26548] CPU: 0 UID: 0 PID: 26548 Comm: syz.0.4656 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1192.945878][T26548] Tainted: [L]=SOFTLOCKUP
[ 1192.945884][T26548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1192.945894][T26548] Call Trace:
[ 1192.945900][T26548]  <TASK>
[ 1192.945906][T26548]  dump_stack_lvl+0x100/0x190
[ 1192.945931][T26548]  should_fail_ex.cold+0x5/0xa
[ 1192.945953][T26548]  should_failslab+0xc2/0x120
[ 1192.945975][T26548]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1192.945997][T26548]  ? debugfs_create_symlink+0x29/0x220
[ 1192.946021][T26548]  kstrdup+0x51/0xe0
[ 1192.946048][T26548]  debugfs_create_symlink+0x29/0x220
[ 1192.946070][T26548]  ref_tracker_dir_symlink+0x257/0x3b0
[ 1192.946092][T26548]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[ 1192.946138][T26548]  ? __pfx_net_ns_net_init+0x10/0x10
[ 1192.946153][T26548]  net_ns_net_init+0xd2/0x120
[ 1192.946169][T26548]  ops_init+0x1e2/0x5f0
[ 1192.946185][T26548]  setup_net+0x118/0x3a0
[ 1192.946200][T26548]  ? __pfx_setup_net+0x10/0x10
[ 1192.946215][T26548]  ? mutex_init_lockdep+0xf1/0x120
[ 1192.946234][T26548]  copy_net_ns+0x46f/0x7c0
[ 1192.946252][T26548]  create_new_namespaces+0x3ea/0xac0
[ 1192.946274][T26548]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1192.946293][T26548]  ksys_unshare+0x438/0xab0
[ 1192.946313][T26548]  ? __pfx_ksys_unshare+0x10/0x10
[ 1192.946340][T26548]  __x64_sys_unshare+0x31/0x40
[ 1192.946359][T26548]  do_syscall_64+0x115/0x840
[ 1192.946377][T26548]  ? clear_bhb_loop+0x40/0x90
[ 1192.946396][T26548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1192.946411][T26548] RIP: 0033:0x7fe1acf9ce59
[ 1192.946426][T26548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1192.946441][T26548] RSP: 002b:00007fe1aded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1192.946457][T26548] RAX: ffffffffffffffda RBX: 00007fe1ad216090 RCX: 00007fe1acf9ce59
[ 1192.946467][T26548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1192.946476][T26548] RBP: 00007fe1ad032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1192.946485][T26548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1192.946494][T26548] R13: 00007fe1ad216128 R14: 00007fe1ad216090 R15: 00007ffecfe9ccd8
[ 1192.946514][T26548]  </TASK>
[ 1195.172050][T26600] FAULT_INJECTION: forcing a failure.
[ 1195.172050][T26600] name failslab, interval 1, probability 0, space 0, times 0
[ 1195.260087][T26600] CPU: 0 UID: 0 PID: 26600 Comm: syz.0.4667 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1195.260115][T26600] Tainted: [L]=SOFTLOCKUP
[ 1195.260121][T26600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1195.260131][T26600] Call Trace:
[ 1195.260137][T26600]  <TASK>
[ 1195.260144][T26600]  dump_stack_lvl+0x100/0x190
[ 1195.260169][T26600]  should_fail_ex.cold+0x5/0xa
[ 1195.260191][T26600]  should_failslab+0xc2/0x120
[ 1195.260213][T26600]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1195.260235][T26600]  ? debugfs_create_symlink+0x29/0x220
[ 1195.260262][T26600]  kstrdup+0x51/0xe0
[ 1195.260279][T26600]  debugfs_create_symlink+0x29/0x220
[ 1195.260301][T26600]  ref_tracker_dir_symlink+0x257/0x3b0
[ 1195.260322][T26600]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[ 1195.260367][T26600]  ? __pfx_net_ns_net_init+0x10/0x10
[ 1195.260383][T26600]  net_ns_net_init+0xd2/0x120
[ 1195.260398][T26600]  ops_init+0x1e2/0x5f0
[ 1195.260415][T26600]  setup_net+0x118/0x3a0
[ 1195.260430][T26600]  ? __pfx_setup_net+0x10/0x10
[ 1195.260445][T26600]  ? mutex_init_lockdep+0xf1/0x120
[ 1195.260465][T26600]  copy_net_ns+0x46f/0x7c0
[ 1195.260483][T26600]  create_new_namespaces+0x3ea/0xac0
[ 1195.260505][T26600]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1195.260523][T26600]  ksys_unshare+0x438/0xab0
[ 1195.260544][T26600]  ? __pfx_ksys_unshare+0x10/0x10
[ 1195.260571][T26600]  __x64_sys_unshare+0x31/0x40
[ 1195.260590][T26600]  do_syscall_64+0x115/0x840
[ 1195.260609][T26600]  ? clear_bhb_loop+0x40/0x90
[ 1195.260627][T26600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.260642][T26600] RIP: 0033:0x7fe1acf9ce59
[ 1195.260657][T26600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1195.260672][T26600] RSP: 002b:00007fe1aded2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1195.260688][T26600] RAX: ffffffffffffffda RBX: 00007fe1ad216090 RCX: 00007fe1acf9ce59
[ 1195.260699][T26600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1195.260708][T26600] RBP: 00007fe1ad032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1195.260718][T26600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1195.260727][T26600] R13: 00007fe1ad216128 R14: 00007fe1ad216090 R15: 00007ffecfe9ccd8
[ 1195.260747][T26600]  </TASK>
[ 1195.501846][T26599] Process accounting paused
[ 1195.566377][T23701] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1195.762934][T23701] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18
[ 1195.770113][T23701] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[ 1195.778953][T23701] CPU: 0 UID: 0 PID: 23701 Comm: kworker/u11:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1195.778978][T23701] Tainted: [L]=SOFTLOCKUP
[ 1195.778984][T23701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1195.778996][T23701] Workqueue: hci2 hci_rx_work
[ 1195.779021][T23701] Call Trace:
[ 1195.779027][T23701]  <TASK>
[ 1195.779033][T23701]  dump_stack_lvl+0x100/0x190
[ 1195.779055][T23701]  sysfs_warn_dup.cold+0x1c/0x28
[ 1195.779078][T23701]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1195.779100][T23701]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1195.779121][T23701]  ? find_held_lock+0x2b/0x80
[ 1195.779140][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1195.779163][T23701]  ? kobject_add_internal+0x25f/0x930
[ 1195.779187][T23701]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1195.779207][T23701]  kobject_add_internal+0x2c8/0x930
[ 1195.779232][T23701]  kobject_add+0x16a/0x1e0
[ 1195.779254][T23701]  ? __pfx_kobject_add+0x10/0x10
[ 1195.779276][T23701]  ? class_to_subsys+0x10f/0x150
[ 1195.779299][T23701]  ? kobject_put+0xb9/0x640
[ 1195.779318][T23701]  ? _raw_spin_unlock+0x28/0x50
[ 1195.779339][T23701]  device_add+0x294/0x1970
[ 1195.779358][T23701]  ? __pfx_dev_set_name+0x10/0x10
[ 1195.779379][T23701]  ? __pfx_device_add+0x10/0x10
[ 1195.779398][T23701]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1195.779422][T23701]  hci_conn_add_sysfs+0x1a3/0x260
[ 1195.779445][T23701]  le_conn_complete_evt+0x11eb/0x1f60
[ 1195.779469][T23701]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1195.779486][T23701]  ? __pfx_bt_warn+0x10/0x10
[ 1195.779501][T23701]  ? hci_event_packet+0x186/0xcd0
[ 1195.779524][T23701]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1195.779543][T23701]  ? skb_pull_data+0x15f/0x1e0
[ 1195.779564][T23701]  hci_le_meta_evt+0x34a/0x5f0
[ 1195.779585][T23701]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1195.779606][T23701]  hci_event_packet+0x51c/0xcd0
[ 1195.779625][T23701]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1195.779645][T23701]  ? __pfx_hci_event_packet+0x10/0x10
[ 1195.779666][T23701]  ? kcov_remote_start+0x384/0x670
[ 1195.779701][T23701]  ? lockdep_hardirqs_on+0x78/0x100
[ 1195.779725][T23701]  hci_rx_work+0x451/0xfc0
[ 1195.779748][T23701]  process_one_work+0xa23/0x1940
[ 1195.779778][T23701]  ? __pfx_process_one_work+0x10/0x10
[ 1195.779806][T23701]  ? __pfx_hci_rx_work+0x10/0x10
[ 1195.779826][T23701]  worker_thread+0x5ef/0xe50
[ 1195.779853][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1195.779875][T23701]  ? kthread+0x13a/0x450
[ 1195.779893][T23701]  ? __pfx_worker_thread+0x10/0x10
[ 1195.779914][T23701]  kthread+0x370/0x450
[ 1195.779932][T23701]  ? __pfx_kthread+0x10/0x10
[ 1195.779954][T23701]  ret_from_fork+0x72b/0xd50
[ 1195.779974][T23701]  ? __pfx_ret_from_fork+0x10/0x10
[ 1195.779994][T23701]  ? __switch_to+0x800/0x10f0
[ 1195.780007][T23701]  ? __switch_to_asm+0x39/0x70
[ 1195.780040][T23701]  ? __pfx_kthread+0x10/0x10
[ 1195.780065][T23701]  ret_from_fork_asm+0x1a/0x30
[ 1195.780099][T23701]  </TASK>
[ 1195.780158][T23701] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1196.072884][T23701] Bluetooth: hci2: failed to register connection device
[ 1197.083507][T25860] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 7 with max blocks 1 with error 117
[ 1197.132633][T25860] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1197.132633][T25860] 
[ 1198.116216][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1199.652664][T26714] FAULT_INJECTION: forcing a failure.
[ 1199.652664][T26714] name failslab, interval 1, probability 0, space 0, times 0
[ 1199.736305][T26714] CPU: 0 UID: 0 PID: 26714 Comm: syz.2.4685 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1199.736331][T26714] Tainted: [L]=SOFTLOCKUP
[ 1199.736337][T26714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1199.736347][T26714] Call Trace:
[ 1199.736352][T26714]  <TASK>
[ 1199.736359][T26714]  dump_stack_lvl+0x100/0x190
[ 1199.736383][T26714]  should_fail_ex.cold+0x5/0xa
[ 1199.736403][T26714]  should_failslab+0xc2/0x120
[ 1199.736434][T26714]  __kmalloc_noprof+0xfc/0x820
[ 1199.736452][T26714]  ? rcu_is_watching+0x12/0xc0
[ 1199.736471][T26714]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1199.736494][T26714]  tomoyo_realpath_from_path+0xb6/0x690
[ 1199.736516][T26714]  tomoyo_path_number_perm+0x23c/0x580
[ 1199.736540][T26714]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1199.736565][T26714]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1199.736597][T26714]  ? rcu_read_lock_any_held+0x6a/0xa0
[ 1199.736629][T26714]  ? hook_file_ioctl_common+0x140/0x440
[ 1199.736654][T26714]  security_file_ioctl+0xd3/0x230
[ 1199.736679][T26714]  __x64_sys_ioctl+0xb7/0x210
[ 1199.736702][T26714]  do_syscall_64+0x115/0x840
[ 1199.736721][T26714]  ? clear_bhb_loop+0x40/0x90
[ 1199.736739][T26714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1199.736754][T26714] RIP: 0033:0x7faef3d9ce59
[ 1199.736767][T26714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1199.736782][T26714] RSP: 002b:00007faef4cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1199.736797][T26714] RAX: ffffffffffffffda RBX: 00007faef4015fa0 RCX: 00007faef3d9ce59
[ 1199.736807][T26714] RDX: 0000000000000000 RSI: ffffffffc0403d11 RDI: 0000000000000002
[ 1199.736816][T26714] RBP: 00007faef4cdd090 R08: 0000000000000000 R09: 0000000000000000
[ 1199.736826][T26714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1199.736834][T26714] R13: 00007faef4016038 R14: 00007faef4015fa0 R15: 00007fff432b0be8
[ 1199.736854][T26714]  </TASK>
[ 1199.736861][T26714] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1200.190098][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1200.810033][T26723] Process accounting resumed
[ 1200.845189][T26713] Process accounting resumed
[ 1200.982951][T26741] FAULT_INJECTION: forcing a failure.
[ 1200.982951][T26741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1201.064673][T26741] CPU: 0 UID: 0 PID: 26741 Comm: syz.3.4692 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1201.064700][T26741] Tainted: [L]=SOFTLOCKUP
[ 1201.064705][T26741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1201.064715][T26741] Call Trace:
[ 1201.064720][T26741]  <TASK>
[ 1201.064727][T26741]  dump_stack_lvl+0x100/0x190
[ 1201.064751][T26741]  should_fail_ex.cold+0x5/0xa
[ 1201.064772][T26741]  _copy_from_user+0x2e/0xd0
[ 1201.064791][T26741]  nsim_bus_dev_max_vfs_write+0x102/0x410
[ 1201.064893][T26741]  ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10
[ 1201.064909][T26741]  ? __debugfs_file_get+0x1fc/0x860
[ 1201.064936][T26741]  full_proxy_write+0x135/0x1a0
[ 1201.064953][T26741]  vfs_write+0x2aa/0x1050
[ 1201.064969][T26741]  ? __pfx_full_proxy_write+0x10/0x10
[ 1201.064986][T26741]  ? __pfx_vfs_write+0x10/0x10
[ 1201.064999][T26741]  ? __fget_files+0x215/0x3d0
[ 1201.065017][T26741]  ? __fget_files+0x21f/0x3d0
[ 1201.065036][T26741]  ksys_write+0x12a/0x250
[ 1201.065050][T26741]  ? __pfx_ksys_write+0x10/0x10
[ 1201.065070][T26741]  do_syscall_64+0x115/0x840
[ 1201.065089][T26741]  ? clear_bhb_loop+0x40/0x90
[ 1201.065107][T26741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1201.065123][T26741] RIP: 0033:0x7fdb53f9ce59
[ 1201.065136][T26741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.065152][T26741] RSP: 002b:00007fdb54efc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1201.065167][T26741] RAX: ffffffffffffffda RBX: 00007fdb54215fa0 RCX: 00007fdb53f9ce59
[ 1201.065177][T26741] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004
[ 1201.065186][T26741] RBP: 00007fdb54efc090 R08: 0000000000000000 R09: 0000000000000000
[ 1201.065195][T26741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1201.065204][T26741] R13: 00007fdb54216038 R14: 00007fdb54215fa0 R15: 00007ffdc4ec94a8
[ 1201.065231][T26741]  </TASK>
[ 1201.320784][T26746] FAULT_INJECTION: forcing a failure.
[ 1201.320784][T26746] name failslab, interval 1, probability 0, space 0, times 0
[ 1201.332412][T26746] CPU: 0 UID: 0 PID: 26746 Comm: syz.2.4693 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1201.332440][T26746] Tainted: [L]=SOFTLOCKUP
[ 1201.332446][T26746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1201.332456][T26746] Call Trace:
[ 1201.332464][T26746]  <TASK>
[ 1201.332472][T26746]  dump_stack_lvl+0x100/0x190
[ 1201.332496][T26746]  should_fail_ex.cold+0x5/0xa
[ 1201.332519][T26746]  should_failslab+0xc2/0x120
[ 1201.332541][T26746]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[ 1201.332564][T26746]  ? debugfs_create_symlink+0x29/0x220
[ 1201.332596][T26746]  kstrdup+0x51/0xe0
[ 1201.332615][T26746]  debugfs_create_symlink+0x29/0x220
[ 1201.332637][T26746]  ref_tracker_dir_symlink+0x257/0x3b0
[ 1201.332659][T26746]  ? __pfx_ref_tracker_dir_symlink+0x10/0x10
[ 1201.332704][T26746]  ? __pfx_net_ns_net_init+0x10/0x10
[ 1201.332720][T26746]  net_ns_net_init+0xd2/0x120
[ 1201.332735][T26746]  ops_init+0x1e2/0x5f0
[ 1201.332752][T26746]  setup_net+0x118/0x3a0
[ 1201.332767][T26746]  ? __pfx_setup_net+0x10/0x10
[ 1201.332781][T26746]  ? mutex_init_lockdep+0xf1/0x120
[ 1201.332802][T26746]  copy_net_ns+0x46f/0x7c0
[ 1201.332820][T26746]  create_new_namespaces+0x3ea/0xac0
[ 1201.332842][T26746]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1201.332861][T26746]  ksys_unshare+0x438/0xab0
[ 1201.332882][T26746]  ? __pfx_ksys_unshare+0x10/0x10
[ 1201.332909][T26746]  __x64_sys_unshare+0x31/0x40
[ 1201.332928][T26746]  do_syscall_64+0x115/0x840
[ 1201.332947][T26746]  ? clear_bhb_loop+0x40/0x90
[ 1201.332965][T26746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1201.332982][T26746] RIP: 0033:0x7faef3d9ce59
[ 1201.332996][T26746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1201.333011][T26746] RSP: 002b:00007faef4cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1201.333030][T26746] RAX: ffffffffffffffda RBX: 00007faef4016090 RCX: 00007faef3d9ce59
[ 1201.333041][T26746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1201.333050][T26746] RBP: 00007faef3e32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1201.333060][T26746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1201.333069][T26746] R13: 00007faef4016128 R14: 00007faef4016090 R15: 00007fff432b0be8
[ 1201.333098][T26746]  </TASK>
[ 1201.653349][T26755] Format for deleting device is "id" (uint).
[ 1202.255741][T23701] Bluetooth: hci2: command 0x0406 tx timeout
[ 1202.479451][ T6113] Bluetooth: hci1: unexpected event 0x3c length: 124 > 7
[ 1202.539732][T26775] FAULT_INJECTION: forcing a failure.
[ 1202.539732][T26775] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1202.708010][T26775] CPU: 0 UID: 0 PID: 26775 Comm: syz.1.4699 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1202.708038][T26775] Tainted: [L]=SOFTLOCKUP
[ 1202.708052][T26775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1202.708062][T26775] Call Trace:
[ 1202.708068][T26775]  <TASK>
[ 1202.708075][T26775]  dump_stack_lvl+0x100/0x190
[ 1202.708100][T26775]  should_fail_ex.cold+0x5/0xa
[ 1202.708122][T26775]  get_futex_key+0x1d2/0x14f0
[ 1202.708141][T26775]  ? __pfx_get_futex_key+0x10/0x10
[ 1202.708163][T26775]  futex_wake+0xf4/0x5e0
[ 1202.708184][T26775]  ? __do_sys_mremap+0x9a5/0x1850
[ 1202.708202][T26775]  ? __pfx_futex_wake+0x10/0x10
[ 1202.708227][T26775]  ? __pfx___do_sys_mremap+0x10/0x10
[ 1202.708247][T26775]  do_futex+0x2b2/0x440
[ 1202.708264][T26775]  ? __pfx_do_futex+0x10/0x10
[ 1202.708288][T26775]  __x64_sys_futex+0x34f/0x4d0
[ 1202.708308][T26775]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1202.708333][T26775]  do_syscall_64+0x115/0x840
[ 1202.708351][T26775]  ? clear_bhb_loop+0x40/0x90
[ 1202.708370][T26775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1202.708386][T26775] RIP: 0033:0x7f36bf19ce59
[ 1202.708400][T26775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1202.708415][T26775] RSP: 002b:00007f36c00fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1202.708431][T26775] RAX: ffffffffffffffda RBX: 00007f36bf416098 RCX: 00007f36bf19ce59
[ 1202.708441][T26775] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36bf41609c
[ 1202.708451][T26775] RBP: 00007f36bf416090 R08: 0000000000000001 R09: 0000000000000000
[ 1202.708460][T26775] R10: 0000200001001000 R11: 0000000000000246 R12: 0000000000000000
[ 1202.708469][T26775] R13: 00007f36bf416128 R14: 00007ffeea9a8600 R15: 00007ffeea9a86e8
[ 1202.708489][T26775]  </TASK>
	

		

	
	
	
	

	
		

	
		

	


		

		
	
		
	
	

	



			








	


	


	



	

	



	





	
	
	




		
		





	
		








	







	






	

	









	

	
		

	
	

	
		
[ 1210.911839][ T6113] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[ 1211.000376][ T6113] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[ 1211.007417][ T6113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[ 1211.016219][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: kworker/u11:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1211.016246][ T6113] Tainted: [L]=SOFTLOCKUP
[ 1211.016259][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1211.016272][ T6113] Workqueue: hci1 hci_rx_work
[ 1211.016296][ T6113] Call Trace:
[ 1211.016302][ T6113]  <TASK>
[ 1211.016309][ T6113]  dump_stack_lvl+0x100/0x190
[ 1211.016332][ T6113]  sysfs_warn_dup.cold+0x1c/0x28
[ 1211.016356][ T6113]  sysfs_create_dir_ns+0x24b/0x2b0
[ 1211.016379][ T6113]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1211.016399][ T6113]  ? find_held_lock+0x2b/0x80
[ 1211.016418][ T6113]  ? kobject_add_internal+0x25f/0x930
[ 1211.016441][ T6113]  ? kobject_add_internal+0x25f/0x930
[ 1211.016465][ T6113]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1211.016484][ T6113]  kobject_add_internal+0x2c8/0x930
[ 1211.016510][ T6113]  kobject_add+0x16a/0x1e0
[ 1211.016531][ T6113]  ? __pfx_kobject_add+0x10/0x10
[ 1211.016553][ T6113]  ? class_to_subsys+0x10f/0x150
[ 1211.016575][ T6113]  ? kobject_put+0xb9/0x640
[ 1211.016595][ T6113]  ? _raw_spin_unlock+0x28/0x50
[ 1211.016618][ T6113]  device_add+0x294/0x1970
[ 1211.016640][ T6113]  ? __pfx_dev_set_name+0x10/0x10
[ 1211.016661][ T6113]  ? __pfx_device_add+0x10/0x10
[ 1211.016680][ T6113]  ? mgmt_send_event_skb+0x2fb/0x460
[ 1211.016705][ T6113]  hci_conn_add_sysfs+0x1a3/0x260
[ 1211.016728][ T6113]  le_conn_complete_evt+0x11eb/0x1f60
[ 1211.016755][ T6113]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 1211.016775][ T6113]  ? __pfx_bt_warn+0x10/0x10
[ 1211.016790][ T6113]  ? hci_event_packet+0x186/0xcd0
[ 1211.016812][ T6113]  hci_le_conn_complete_evt+0x23c/0x3a0
[ 1211.016832][ T6113]  ? skb_pull_data+0x15f/0x1e0
[ 1211.016852][ T6113]  hci_le_meta_evt+0x34a/0x5f0
[ 1211.016872][ T6113]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1211.016895][ T6113]  hci_event_packet+0x51c/0xcd0
[ 1211.016913][ T6113]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1211.016934][ T6113]  ? __pfx_hci_event_packet+0x10/0x10
[ 1211.016954][ T6113]  ? kcov_remote_start+0x384/0x670
[ 1211.016976][ T6113]  ? lockdep_hardirqs_on+0x78/0x100
[ 1211.016998][ T6113]  hci_rx_work+0x451/0xfc0
[ 1211.017020][ T6113]  process_one_work+0xa23/0x1940
[ 1211.017050][ T6113]  ? __pfx_process_one_work+0x10/0x10
[ 1211.017078][ T6113]  ? __pfx_hci_rx_work+0x10/0x10
[ 1211.017098][ T6113]  worker_thread+0x5ef/0xe50
[ 1211.017127][ T6113]  ? kthread+0x13a/0x450
[ 1211.017146][ T6113]  ? __pfx_worker_thread+0x10/0x10
[ 1211.017167][ T6113]  kthread+0x370/0x450
[ 1211.017186][ T6113]  ? __pfx_kthread+0x10/0x10
[ 1211.017207][ T6113]  ret_from_fork+0x72b/0xd50
[ 1211.017231][ T6113]  ? __pfx_ret_from_fork+0x10/0x10
[ 1211.017258][ T6113]  ? __switch_to+0x800/0x10f0
[ 1211.017273][ T6113]  ? __switch_to_asm+0x39/0x70
[ 1211.017296][ T6113]  ? __pfx_kthread+0x10/0x10
[ 1211.017319][ T6113]  ret_from_fork_asm+0x1a/0x30
[ 1211.017351][ T6113]  </TASK>
[ 1211.017385][ T6113] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1211.304678][ T6113] Bluetooth: hci1: failed to register connection device
[ 1211.441472][T14303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1211.461647][T14303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1211.469602][T14303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1211.480601][T14303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1211.489940][T14303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1212.820118][T26992] FAULT_INJECTION: forcing a failure.
[ 1212.820118][T26992] name failslab, interval 1, probability 0, space 0, times 0
[ 1212.928567][T14303] Bluetooth: hci1: command 0x0406 tx timeout
[ 1212.934297][T26992] CPU: 0 UID: 0 PID: 26992 Comm: syz.0.4743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1212.934324][T26992] Tainted: [L]=SOFTLOCKUP
[ 1212.934330][T26992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1212.934341][T26992] Call Trace:
[ 1212.934346][T26992]  <TASK>
[ 1212.934353][T26992]  dump_stack_lvl+0x100/0x190
[ 1212.934378][T26992]  should_fail_ex.cold+0x5/0xa
[ 1212.934400][T26992]  should_failslab+0xc2/0x120
[ 1212.934422][T26992]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1212.934442][T26992]  ? anon_vma_clone+0x2ba/0xcd0
[ 1212.934469][T26992]  anon_vma_clone+0x2ba/0xcd0
[ 1212.934490][T26992]  ? kmem_cache_alloc_noprof+0x271/0x6a0
[ 1212.934514][T26992]  anon_vma_fork+0x1bb/0x6b0
[ 1212.934532][T26992]  dup_mmap+0x143e/0x21b0
[ 1212.934562][T26992]  ? __pfx_dup_mmap+0x10/0x10
[ 1212.934583][T26992]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1212.934604][T26992]  ? __lock_acquire+0x49f/0x1a40
[ 1212.934619][T26992]  ? find_held_lock+0x2b/0x80
[ 1212.934638][T26992]  ? __percpu_counter_init_many+0x2bc/0x3b0
[ 1212.934670][T26992]  copy_process+0x4588/0x7ff0
[ 1212.934700][T26992]  ? __pfx_copy_process+0x10/0x10
[ 1212.934728][T26992]  kernel_clone+0x176/0x9d0
[ 1212.934748][T26992]  ? __pfx_kernel_clone+0x10/0x10
[ 1212.934778][T26992]  __do_sys_clone+0xd9/0x120
[ 1212.934796][T26992]  ? __pfx___do_sys_clone+0x10/0x10
[ 1212.934815][T26992]  ? fd_install+0x24f/0x580
[ 1212.934844][T26992]  do_syscall_64+0x115/0x840
[ 1212.934861][T26992]  ? clear_bhb_loop+0x40/0x90
[ 1212.934880][T26992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.934895][T26992] RIP: 0033:0x7fe1acf9ce59
[ 1212.934910][T26992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1212.934924][T26992] RSP: 002b:00007fe1adeb0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1212.934940][T26992] RAX: ffffffffffffffda RBX: 00007fe1ad216180 RCX: 00007fe1acf9ce59
[ 1212.934950][T26992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[ 1212.934959][T26992] RBP: 00007fe1ad032e6f R08: 0000000000000000 R09: 0000000000000000
[ 1212.934969][T26992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1212.934978][T26992] R13: 00007fe1ad216218 R14: 00007fe1ad216180 R15: 00007ffecfe9ccd8
[ 1212.935000][T26992]  </TASK>
[ 1213.558546][T14303] Bluetooth: hci3: command tx timeout
[ 1214.020110][T27018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4747'.
[ 1214.162710][T27018] ipvlan1: entered promiscuous mode
[ 1214.204456][T27018] ipvlan1: entered allmulticast mode
[ 1214.242992][T27018] veth0_vlan: entered allmulticast mode
[ 1214.863753][T27033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4750'.
[ 1214.959174][ T6112] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.364096][ T6112] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.387851][T14303] Bluetooth: hci1: command 0x0406 tx timeout
[ 1215.565805][ T6112] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.627168][T23701] Bluetooth: hci3: command tx timeout
[ 1215.850202][ T6112] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.952604][T26968] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1215.978471][T26968] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1216.000025][T26968] bridge_slave_0: entered allmulticast mode
[ 1216.023044][T26968] bridge_slave_0: entered promiscuous mode
[ 1216.066809][T26968] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1216.100620][T26968] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1216.132083][T26968] bridge_slave_1: entered allmulticast mode
[ 1216.162992][T26968] bridge_slave_1: entered promiscuous mode
[ 1216.292863][T26968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1216.357347][T26968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1216.632072][T27055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4754'.
[ 1216.696587][T26968] team0: Port device team_slave_0 added
[ 1216.731284][T27055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1216.763758][T27055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1216.809079][T27055] bond0 (unregistering): Released all slaves
[ 1216.863851][T26968] team0: Port device team_slave_1 added
[ 1216.993340][ T6112] bridge_slave_1: left allmulticast mode
[ 1217.018533][ T6112] bridge_slave_1: left promiscuous mode
[ 1217.040623][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1217.066406][ T6112] bridge_slave_0: left allmulticast mode
[ 1217.083457][ T6112] bridge_slave_0: left promiscuous mode
[ 1217.100114][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1217.457231][T23701] Bluetooth: hci1: command 0x0406 tx timeout
[ 1217.563705][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1217.592851][ T6112] bond_slave_0: left promiscuous mode
[ 1217.610336][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1217.635622][ T6112] bond_slave_1: left promiscuous mode
[ 1217.654626][ T6112] bond0 (unregistering): Released all slaves
[ 1217.695987][T23701] Bluetooth: hci3: command tx timeout
[ 1217.748336][T26968] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1217.781127][T26968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1217.894797][T26968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1217.989537][T26968] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1218.017946][T26968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1218.112509][T26968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1218.161887][ T6112] ovs_: left promiscuous mode
[ 1218.600125][T26968] hsr_slave_0: entered promiscuous mode
[ 1218.619445][T26968] hsr_slave_1: entered promiscuous mode
[ 1218.639630][T26968] debugfs: 'hsr0' already exists in 'hsr'
[ 1218.658279][T26968] Cannot create hsr debugfs directory
[ 1218.797587][T27061] Process accounting resumed
[ 1218.987701][T27081] netlink: 'syz.1.4758': attribute type 1 has an invalid length.
[ 1219.041232][T27081] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4758'.
[ 1219.165218][   T30] audit: type=1800 audit(1844279129.122:110): pid=27081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4758" name="dbroot" dev="configfs" ino=145608 res=0 errno=0
[ 1219.346630][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1219.526725][T23701] Bluetooth: hci1: command 0x0406 tx timeout
[ 1219.765455][T23701] Bluetooth: hci3: command tx timeout
[ 1219.871314][T27084] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1219.922552][T27084] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1219.958164][T27084] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1219.982294][T27084] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1219.991454][ T6112] hsr_slave_0: left promiscuous mode
[ 1220.013631][T27084] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1220.022901][ T6112] hsr_slave_1: left promiscuous mode
[ 1220.050803][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1220.080956][T27084] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1220.088734][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1220.114876][ T6112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1220.136368][ T6112] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1220.186936][ T6112] veth0_macvtap: left promiscuous mode
[ 1220.738610][ T6112] team0 (unregistering): Port device team_slave_1 removed
[ 1220.785496][ T6112] team0 (unregistering): Port device team_slave_0 removed
[ 1221.064588][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1221.835547][T23701] Bluetooth: hci1: command 0x0406 tx timeout
[ 1221.931194][T23701] Bluetooth: hci0: command 0x0406 tx timeout
[ 1221.994703][T14303] Bluetooth: hci2: command 0x0406 tx timeout
[ 1222.000185][T23701] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1222.314275][T27147] random: crng reseeded on system resumption
[ 1224.063949][T23701] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1224.483367][T27200] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[ 1226.132951][T23701] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1227.408969][T27248] Process accounting resumed
[ 1227.941114][T23701] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[ 1229.953981][T14303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1232.023454][T14303] Bluetooth: hci0: command 0x0406 tx timeout
[ 1236.648446][T14303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1236.667710][T14303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1236.677766][T14303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1236.688470][T14303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1236.701646][T14303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1236.800073][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[ 1236.805830][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[ 1237.253371][T27284] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1237.259932][T27284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1237.266826][T27284] bridge_slave_0: entered allmulticast mode
[ 1237.273436][T27284] bridge_slave_0: entered promiscuous mode
[ 1237.281008][T27284] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1237.287532][T27284] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1237.294013][T27284] bridge_slave_1: entered allmulticast mode
[ 1237.301126][T27284] bridge_slave_1: entered promiscuous mode
[ 1237.330611][T27284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1237.345526][T27284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1237.372208][T27284] team0: Port device team_slave_0 added
[ 1237.379536][T27284] team0: Port device team_slave_1 added
[ 1237.402562][T27284] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1237.409032][T27284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1237.433578][T27284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1237.448165][T27284] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1237.454452][T27284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1237.500520][T27284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1237.521469][T18279] Process accounting paused
[ 1237.626614][T27284] hsr_slave_0: entered promiscuous mode
[ 1237.645991][T27284] hsr_slave_1: entered promiscuous mode
[ 1237.667688][T27284] debugfs: 'hsr0' already exists in 'hsr'
[ 1237.683661][T27284] Cannot create hsr debugfs directory
[ 1237.775393][T23701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1237.796183][T23701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1237.804453][T23701] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1237.811422][T23701] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1237.822681][T23701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1238.444509][T27304] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1238.451959][T27304] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1238.458459][T27304] bridge_slave_0: entered allmulticast mode
[ 1238.465485][T27304] bridge_slave_0: entered promiscuous mode
[ 1238.480062][T27304] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1238.488275][T27304] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1238.495993][T27304] bridge_slave_1: entered allmulticast mode
[ 1238.502887][T27304] bridge_slave_1: entered promiscuous mode
[ 1238.532594][T27304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1238.544376][T27304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1238.574674][T27304] team0: Port device team_slave_0 added
[ 1238.581961][T27304] team0: Port device team_slave_1 added
[ 1238.604523][T27304] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1238.610949][T27304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1238.635143][T27304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1238.646510][T27304] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1238.655141][T27304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1238.678908][T27304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1238.717322][T27304] hsr_slave_0: entered promiscuous mode
[ 1238.723330][T27304] hsr_slave_1: entered promiscuous mode
[ 1238.729435][T27304] debugfs: 'hsr0' already exists in 'hsr'
[ 1238.734651][T27304] Cannot create hsr debugfs directory
[ 1238.788914][T23701] Bluetooth: hci4: command tx timeout
[ 1239.902906][T23701] Bluetooth: hci5: command tx timeout
[ 1240.858325][T23701] Bluetooth: hci4: command tx timeout
[ 1241.972512][T23701] Bluetooth: hci5: command tx timeout
[ 1242.927708][T23701] Bluetooth: hci4: command tx timeout
[ 1244.041719][T23701] Bluetooth: hci5: command tx timeout
[ 1244.678093][T14303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1244.690721][T14303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1244.708273][T14303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1244.715491][T14303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1244.722450][T14303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1244.997120][T14303] Bluetooth: hci4: command tx timeout
[ 1245.212595][T27322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1245.220271][T27322] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1245.227370][T27322] bridge_slave_0: entered allmulticast mode
[ 1245.233944][T27322] bridge_slave_0: entered promiscuous mode
[ 1245.242582][T27322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1245.249141][T27322] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1245.256252][T27322] bridge_slave_1: entered allmulticast mode
[ 1245.262773][T27322] bridge_slave_1: entered promiscuous mode
[ 1245.292476][T27322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1245.303502][T27322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1245.332729][T27322] team0: Port device team_slave_0 added
[ 1245.340121][T27322] team0: Port device team_slave_1 added
[ 1245.363508][T27322] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1245.370118][T27322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1245.394936][T27322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1245.408054][T27322] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1245.414353][T27322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1245.439126][T27322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1245.485420][T27322] hsr_slave_0: entered promiscuous mode
[ 1245.491500][T27322] hsr_slave_1: entered promiscuous mode
[ 1245.497441][T27322] debugfs: 'hsr0' already exists in 'hsr'
[ 1245.502636][T27322] Cannot create hsr debugfs directory
[ 1246.111156][T14303] Bluetooth: hci5: command tx timeout
[ 1246.747950][T14303] Bluetooth: hci6: command tx timeout
[ 1248.817356][T14303] Bluetooth: hci6: command tx timeout
[ 1250.886857][T14303] Bluetooth: hci6: command tx timeout
[ 1252.956225][T14303] Bluetooth: hci6: command tx timeout
[ 1270.614765][T23701] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1270.630060][T23701] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1270.646014][T23701] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1270.658950][T23701] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1270.666075][T23701] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1271.114879][T27350] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1271.121385][T27350] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1271.128360][T27350] bridge_slave_0: entered allmulticast mode
[ 1271.135315][T27350] bridge_slave_0: entered promiscuous mode
[ 1271.144667][T27350] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1271.151978][T27350] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1271.160306][T27350] bridge_slave_1: entered allmulticast mode
[ 1271.167945][T27350] bridge_slave_1: entered promiscuous mode
[ 1271.198025][T27350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1271.208801][T27350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1271.237910][T27350] team0: Port device team_slave_0 added
[ 1271.245157][T27350] team0: Port device team_slave_1 added
[ 1271.269919][T27350] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1271.276386][T27350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1271.300560][T27350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1271.311875][T27350] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1271.318537][T27350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1271.348783][T27350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1271.391905][T27350] hsr_slave_0: entered promiscuous mode
[ 1271.397991][T27350] hsr_slave_1: entered promiscuous mode
[ 1271.404220][T27350] debugfs: 'hsr0' already exists in 'hsr'
[ 1271.409476][T27350] Cannot create hsr debugfs directory
[ 1272.696170][T23701] Bluetooth: hci7: command tx timeout
[ 1274.765158][T23701] Bluetooth: hci7: command tx timeout
[ 1276.834496][T23701] Bluetooth: hci7: command tx timeout
[ 1278.903890][T23701] Bluetooth: hci7: command tx timeout
[ 1297.130636][T14303] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1297.149424][T14303] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1297.162249][T14303] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1297.176088][T14303] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1297.182938][T14303] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1297.639984][T27370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1297.647218][T27370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1297.654212][T27370] bridge_slave_0: entered allmulticast mode
[ 1297.661177][T27370] bridge_slave_0: entered promiscuous mode
[ 1297.668910][T27370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1297.675457][T27370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1297.682668][T27370] bridge_slave_1: entered allmulticast mode
[ 1297.689896][T27370] bridge_slave_1: entered promiscuous mode
[ 1297.721635][T27370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1297.732694][T27370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1297.761827][T27370] team0: Port device team_slave_0 added
[ 1297.770058][T27370] team0: Port device team_slave_1 added
[ 1297.793131][T27370] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1297.799620][T27370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1297.823479][T27370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1297.834824][T27370] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1297.841378][T27370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1297.868279][T27370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1297.906270][T27370] hsr_slave_0: entered promiscuous mode
[ 1297.912305][T27370] hsr_slave_1: entered promiscuous mode
[ 1297.918317][T27370] debugfs: 'hsr0' already exists in 'hsr'
[ 1297.923497][T27370] Cannot create hsr debugfs directory
[ 1297.930317][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[ 1297.936282][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[ 1298.142266][T14303] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1298.158459][T14303] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1298.168738][T14303] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1298.182914][T14303] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1298.190210][T14303] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1298.636481][T27390] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1298.642978][T27390] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1298.650832][T27390] bridge_slave_0: entered allmulticast mode
[ 1298.658701][T27390] bridge_slave_0: entered promiscuous mode
[ 1298.666234][T27390] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1298.672721][T27390] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1298.680425][T27390] bridge_slave_1: entered allmulticast mode
[ 1298.687406][T27390] bridge_slave_1: entered promiscuous mode
[ 1298.714578][T27390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1298.728698][T27390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1298.757383][T27390] team0: Port device team_slave_0 added
[ 1298.765671][T27390] team0: Port device team_slave_1 added
[ 1298.790871][T27390] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1298.797261][T27390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1298.821731][T27390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1298.833604][T27390] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1298.839891][T27390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1298.865496][T27390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1298.905180][T27390] hsr_slave_0: entered promiscuous mode
[ 1298.911032][T27390] hsr_slave_1: entered promiscuous mode
[ 1298.917171][T27390] debugfs: 'hsr0' already exists in 'hsr'
[ 1298.922651][T27390] Cannot create hsr debugfs directory
[ 1299.280494][T14303] Bluetooth: hci8: command tx timeout
[ 1300.235121][T14303] Bluetooth: hci9: command tx timeout
[ 1301.349923][T14303] Bluetooth: hci8: command tx timeout
[ 1302.304529][T14303] Bluetooth: hci9: command tx timeout
[ 1303.419403][T14303] Bluetooth: hci8: command tx timeout
[ 1304.373988][T14303] Bluetooth: hci9: command tx timeout
[ 1305.138443][T23701] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1305.152530][T23701] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1305.162163][T23701] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1305.174551][T23701] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1305.185805][T23701] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1305.488768][T23701] Bluetooth: hci8: command tx timeout
[ 1305.650925][T27408] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1305.657524][T27408] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1305.664129][T27408] bridge_slave_0: entered allmulticast mode
[ 1305.671232][T27408] bridge_slave_0: entered promiscuous mode
[ 1305.678956][T27408] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1305.685426][T27408] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1305.693238][T27408] bridge_slave_1: entered allmulticast mode
[ 1305.700265][T27408] bridge_slave_1: entered promiscuous mode
[ 1305.731767][T27408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1305.745163][T27408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1305.774758][T27408] team0: Port device team_slave_0 added
[ 1305.782111][T27408] team0: Port device team_slave_1 added
[ 1305.807682][T27408] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1305.814115][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1305.838344][T27408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1305.849621][T27408] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1305.855987][T27408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1305.881332][T27408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1305.921192][T27408] hsr_slave_0: entered promiscuous mode
[ 1305.927224][T27408] hsr_slave_1: entered promiscuous mode
[ 1305.932831][T27408] debugfs: 'hsr0' already exists in 'hsr'
[ 1305.938570][T27408] Cannot create hsr debugfs directory
[ 1306.443440][T23701] Bluetooth: hci9: command tx timeout
[ 1307.239493][T23701] Bluetooth: hci10: command tx timeout
[ 1309.308993][T23701] Bluetooth: hci10: command tx timeout
[ 1311.378296][T23701] Bluetooth: hci10: command tx timeout
[ 1313.447743][T23701] Bluetooth: hci10: command tx timeout
[ 1330.676339][T14303] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1330.691039][T14303] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1330.701934][T14303] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1330.716331][T14303] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1330.724830][T14303] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1331.181645][T27431] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1331.188227][T27431] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1331.194774][T27431] bridge_slave_0: entered allmulticast mode
[ 1331.203135][T27431] bridge_slave_0: entered promiscuous mode
[ 1331.211433][T27431] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.218011][T27431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1331.224569][T27431] bridge_slave_1: entered allmulticast mode
[ 1331.231667][T27431] bridge_slave_1: entered promiscuous mode
[ 1331.262938][T27431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1331.274891][T27431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1331.303425][T27431] team0: Port device team_slave_0 added
[ 1331.310800][T27431] team0: Port device team_slave_1 added
[ 1331.334037][T27431] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1331.340412][T27431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1331.372701][T27431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1331.385291][T27431] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1331.392009][T27431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1331.415833][T27431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1331.455220][T27431] hsr_slave_0: entered promiscuous mode
[ 1331.461356][T27431] hsr_slave_1: entered promiscuous mode
[ 1331.468546][T27431] debugfs: 'hsr0' already exists in 'hsr'
[ 1331.473748][T27431] Cannot create hsr debugfs directory
[ 1332.789082][T14303] Bluetooth: hci11: command tx timeout
[ 1334.858696][T14303] Bluetooth: hci11: command tx timeout
[ 1336.928030][T14303] Bluetooth: hci11: command tx timeout
[ 1338.997502][T14303] Bluetooth: hci11: command tx timeout
[ 1357.216394][T23701] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1357.236706][T23701] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1357.249119][T23701] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1357.262042][T23701] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1357.269790][T23701] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1358.230284][T27454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1358.250864][T27454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1358.272268][T27454] bridge_slave_0: entered allmulticast mode
[ 1358.300084][T27454] bridge_slave_0: entered promiscuous mode
[ 1358.318161][T27454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1358.346915][T27454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1358.361911][T27454] bridge_slave_1: entered allmulticast mode
[ 1358.382264][T27454] bridge_slave_1: entered promiscuous mode
[ 1358.399801][T14303] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1358.425594][T14303] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1358.435701][T14303] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1358.442877][T14303] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1358.451558][T14303] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1358.579886][T27454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1358.612515][T27454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1358.709634][T27454] team0: Port device team_slave_0 added
[ 1358.740795][T27454] team0: Port device team_slave_1 added
[ 1358.820469][T27454] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1358.846420][T27454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1358.925690][T27454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1358.954072][T27454] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1358.971370][T27454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1359.025354][T27454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1359.077719][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[ 1359.083531][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[ 1359.161964][T27454] hsr_slave_0: entered promiscuous mode
[ 1359.196612][T27454] hsr_slave_1: entered promiscuous mode
[ 1359.202442][T27454] debugfs: 'hsr0' already exists in 'hsr'
[ 1359.214560][T27454] Cannot create hsr debugfs directory
[ 1359.296937][T27484] Bluetooth: hci12: command tx timeout
[ 1359.646893][T27474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1359.653607][T27474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1359.660537][T27474] bridge_slave_0: entered allmulticast mode
[ 1359.668660][T27474] bridge_slave_0: entered promiscuous mode
[ 1359.676361][T27474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1359.682930][T27474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1359.690585][T27474] bridge_slave_1: entered allmulticast mode
[ 1359.700518][T27474] bridge_slave_1: entered promiscuous mode
[ 1359.729775][T27474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1359.740559][T27474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1359.768253][T27474] team0: Port device team_slave_0 added
[ 1359.777517][T27474] team0: Port device team_slave_1 added
[ 1359.802339][T27474] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1359.808659][T27474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1359.832726][T27474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1359.844295][T27474] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1359.850661][T27474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1359.875565][T27474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1359.916940][T27474] hsr_slave_0: entered promiscuous mode
[ 1359.922977][T27474] hsr_slave_1: entered promiscuous mode
[ 1359.928964][T27474] debugfs: 'hsr0' already exists in 'hsr'
[ 1359.935957][T27474] Cannot create hsr debugfs directory
[ 1360.488027][T27484] Bluetooth: hci13: command tx timeout
[ 1361.135838][T27484] Bluetooth: hci5: command 0x0406 tx timeout
[ 1361.141388][T27484] Bluetooth: hci4: command 0x0406 tx timeout
[ 1361.363859][T14303] Bluetooth: hci12: command tx timeout
[ 1362.557329][T14303] Bluetooth: hci13: command tx timeout
[ 1363.433268][T14303] Bluetooth: hci12: command tx timeout
[ 1364.626882][T14303] Bluetooth: hci13: command tx timeout
[ 1364.786087][   T31] INFO: task syz.1.4765:27133 blocked for more than 143 seconds.
[ 1364.793458][   T31]       Tainted: G             L      syzkaller #0
[ 1364.800017][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1364.808802][   T31] task:syz.1.4765      state:D stack:27848 pid:27133 tgid:27131 ppid:15948  task_flags:0x400140 flags:0x00080002
[ 1364.820400][   T31] Call Trace:
[ 1364.823382][   T31]  <TASK>
[ 1364.826325][   T31]  __schedule+0x125c/0x6730
[ 1364.830430][   T31]  ? do_raw_spin_lock+0x128/0x260
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1364.834962][   T31]  ? __pfx___schedule+0x10/0x10
[ 1364.840032][   T31]  ? find_held_lock+0x2b/0x80
[ 1364.855867][   T31]  ? schedule+0x2bf/0x390
[ 1364.860021][   T31]  schedule+0xdd/0x390
[ 1364.863696][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1364.877057][   T31]  __mutex_lock+0xccc/0x1bd0
[ 1364.886926][   T31]  ? del_device_store+0xd1/0x480
[ 1364.896663][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1364.906904][   T31]  ? sscanf+0xc7/0x100
[ 1364.914464][   T31]  ? __pfx_sscanf+0x10/0x10
[ 1364.955034][   T31]  ? __lock_acquire+0x49f/0x1a40
[ 1364.977492][   T31]  ? del_device_store+0xd1/0x480
[ 1364.993687][   T31]  del_device_store+0xd1/0x480
[ 1364.998704][   T31]  ? __pfx_del_device_store+0x10/0x10
[ 1365.003591][   T31]  ? find_held_lock+0x2b/0x80
[ 1365.008516][   T31]  ? sysfs_file_kobj+0xe4/0x290
[ 1365.012962][   T31]  ? sysfs_file_kobj+0xe4/0x290
[ 1365.018305][   T31]  ? __pfx_del_device_store+0x10/0x10
[ 1365.023183][   T31]  bus_attr_store+0x74/0xb0
[ 1365.028967][   T31]  ? __pfx_bus_attr_store+0x10/0x10
[ 1365.033693][   T31]  sysfs_kf_write+0xf2/0x150
[ 1365.038726][   T31]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1365.043517][   T31]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1365.048607][   T31]  vfs_write+0x6ac/0x1050
[ 1365.052550][   T31]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1365.058164][   T31]  ? __pfx_vfs_write+0x10/0x10
[ 1365.062531][   T31]  ksys_write+0x12a/0x250
[ 1365.066960][   T31]  ? __pfx_ksys_write+0x10/0x10
[ 1365.071360][   T31]  do_syscall_64+0x115/0x840
[ 1365.075957][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1365.080303][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.086807][   T31] RIP: 0033:0x7f36bf19ce59
[ 1365.090913][   T31] RSP: 002b:00007f36c011f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1365.099136][   T31] RAX: ffffffffffffffda RBX: 00007f36bf415fa0 RCX: 00007f36bf19ce59
[ 1365.108807][   T31] RDX: 0000000000000045 RSI: 0000200000000040 RDI: 0000000000000004
[ 1365.116386][   T31] RBP: 00007f36bf232e6f R08: 0000000000000000 R09: 0000000000000000
[ 1365.123668][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1365.131277][   T31] R13: 00007f36bf416038 R14: 00007f36bf415fa0 R15: 00007ffeea9a86e8
[ 1365.139188][   T31]  </TASK>
[ 1365.142016][   T31] 
[ 1365.142016][   T31] Showing all locks held in the system:
[ 1365.159305][   T31] 1 lock held by khungtaskd/31:
[ 1365.164014][   T31]  #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1365.173103][   T31] 2 locks held by getty/17363:
[ 1365.177851][   T31]  #0: ffff8880363570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1365.188156][   T31]  #1: ffffc9000322d2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 1365.197540][   T31] 3 locks held by kworker/u11:2/23701:
[ 1365.202556][   T31]  #0: ffff888025cd4940 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[ 1365.212335][   T31]  #1: ffffc90005b67d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[ 1365.223407][   T31]  #2: ffff88807f6f0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470
[ 1365.232497][   T31] 7 locks held by syz-executor/26968:
[ 1365.237749][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.246579][   T31]  #1: ffff888058a06c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.255710][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.266404][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.276152][   T31]  #4: ffff888077b7d128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 1365.285967][   T31]  #5: ffff888077b7c258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0
[ 1365.296323][   T31]  #6: ffff88804f8aec90 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[ 1365.307149][   T31] 5 locks held by syz.1.4765/27133:
[ 1365.311845][   T31]  #0: ffff8880295a0470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1365.320327][   T31]  #1: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.328689][   T31]  #2: ffff88801c6f5880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.337802][   T31]  #3: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.348156][   T31]  #4: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.358095][   T31] 3 locks held by syz.2.4768/27153:
[ 1365.363231][   T31]  #0: ffff88807e365970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1365.371526][   T31]  #1: ffff8880206b2450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.380564][   T31]  #2: ffff888077b7c258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410
[ 1365.391648][   T31] 5 locks held by syz.0.4785/27279:
[ 1365.396555][   T31]  #0: ffff88805a377cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1365.405116][   T31]  #1: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.413572][   T31]  #2: ffff88801fb00c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.422381][   T31]  #3: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.432272][   T31]  #4: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.441899][   T31] 4 locks held by syz-executor/27284:
[ 1365.447212][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.455654][   T31]  #1: ffff888079da6880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.465139][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.474574][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.484624][   T31] 4 locks held by syz-executor/27304:
[ 1365.489487][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.498934][   T31]  #1: ffff888032ab7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.511819][T14303] Bluetooth: hci12: command tx timeout
[ 1365.520053][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.529895][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.540011][   T31] 4 locks held by syz-executor/27322:
[ 1365.545073][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.553503][   T31]  #1: ffff888058ffa080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.562582][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.571636][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.584252][   T31] 4 locks held by syz-executor/27350:
[ 1365.589193][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.599367][   T31]  #1: ffff88802aaea480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.608704][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.617990][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.627587][   T31] 4 locks held by syz-executor/27370:
[ 1365.632731][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.640834][   T31]  #1: ffff888079cf2880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.650021][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.659403][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.669293][   T31] 4 locks held by syz-executor/27390:
[ 1365.674400][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.683243][   T31]  #1: ffff88807a147480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.692324][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.702986][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.712620][   T31] 4 locks held by syz-executor/27408:
[ 1365.717558][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.725986][   T31]  #1: ffff8880451d7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.735014][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.745815][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.755452][   T31] 4 locks held by syz-executor/27431:
[ 1365.760336][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.768861][   T31]  #1: ffff888022750480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.778002][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.787375][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.798276][   T31] 4 locks held by syz-executor/27454:
[ 1365.803372][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.812252][   T31]  #1: ffff88802cdfc880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.822611][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.832007][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.841553][   T31] 4 locks held by syz-executor/27474:
[ 1365.846478][   T31]  #0: ffff88807fdfc450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1365.854895][   T31]  #1: ffff8880765cd080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1365.863923][   T31]  #2: ffff888029bef1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1365.873419][   T31]  #3: ffffffff8fbad340 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1365.883038][   T31] 
[ 1365.885233][   T31] =============================================
[ 1365.885233][   T31] 
[ 1365.893400][   T31] NMI backtrace for cpu 0
[ 1365.893423][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1365.893445][   T31] Tainted: [L]=SOFTLOCKUP
[ 1365.893451][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1365.893460][   T31] Call Trace:
[ 1365.893466][   T31]  <TASK>
[ 1365.893471][   T31]  dump_stack_lvl+0x100/0x190
[ 1365.893497][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1365.893518][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1365.893538][   T31]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[ 1365.893566][   T31]  sys_info+0x141/0x190
[ 1365.893587][   T31]  watchdog+0xcb1/0x1030
[ 1365.893613][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1365.893630][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1365.893652][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1365.893672][   T31]  ? kthread+0x13a/0x450
[ 1365.893691][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1365.893710][   T31]  kthread+0x370/0x450
[ 1365.893729][   T31]  ? __pfx_kthread+0x10/0x10
[ 1365.893750][   T31]  ret_from_fork+0x72b/0xd50
[ 1365.893771][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1365.893791][   T31]  ? __switch_to+0x800/0x10f0
[ 1365.893804][   T31]  ? __switch_to_asm+0x39/0x70
[ 1365.893825][   T31]  ? __pfx_kthread+0x10/0x10
[ 1365.893846][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1365.893876][   T31]  </TASK>
[ 1366.021684][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1366.027892][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1366.037512][   T31] Tainted: [L]=SOFTLOCKUP
[ 1366.041401][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1366.050445][   T31] Call Trace:
[ 1366.053394][   T31]  <TASK>
[ 1366.056121][   T31]  dump_stack_lvl+0x100/0x190
[ 1366.060348][   T31]  vpanic+0x552/0x970
[ 1366.063931][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1366.067984][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[ 1366.073607][   T31]  panic+0xd1/0xe0
[ 1366.076953][   T31]  ? __pfx_panic+0x10/0x10
[ 1366.080941][   T31]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[ 1366.086487][   T31]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[ 1366.092047][   T31]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[ 1366.097589][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1366.101879][   T31]  ? watchdog+0xcc1/0x1030
[ 1366.105855][   T31]  watchdog.cold+0x1fd/0x234
[ 1366.109985][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1366.115207][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1366.119436][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1366.124036][   T31]  ? kthread+0x13a/0x450
[ 1366.127901][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1366.132134][   T31]  kthread+0x370/0x450
[ 1366.135812][   T31]  ? __pfx_kthread+0x10/0x10
[ 1366.139956][   T31]  ret_from_fork+0x72b/0xd50
[ 1366.144103][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1366.148699][   T31]  ? __switch_to+0x800/0x10f0
[ 1366.152978][   T31]  ? __switch_to_asm+0x39/0x70
[ 1366.157342][   T31]  ? __pfx_kthread+0x10/0x10
[ 1366.161476][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1366.165774][   T31]  </TASK>
[ 1366.168632][   T31] Kernel Offset: disabled
[ 1366.172529][   T31] Rebooting in 86400 seconds..