last executing test programs:

26m5.839028247s ago: executing program 0 (id=1217):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x0, 0x8)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x6)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0)
fsopen$auto(&(0x7f00000005c0)='/dev/sequencer2\x00', 0xeb7d)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x620601, 0x0)
getcpu$auto(&(0x7f0000001140), 0x0, 0x0)
ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={"7fccb9896d47e455be3e37009cab190f1d8d3ba0a34ea8c8aa3127b3095c96f5", 0x4, 0x1c, 0x3, 0x5, 0x2, 0xffffffffffffffff})
socketcall$auto_SYS_ACCEPT(0x5, &(0x7f0000000780)=0x5)
getsockopt$auto_SO_GET_FILTER(r1, 0xe, 0x1a, &(0x7f0000000500)='/dev/sequencer2\x00', &(0x7f0000000580)=0x3)
getcpu$auto(&(0x7f0000000000)=0x3, &(0x7f00000006c0)=0x2, &(0x7f0000000700)={[0x2, 0x5, 0x5d, 0x7f, 0x4, 0x6, 0x40, 0x5, 0x800, 0xffffffffffffff62, 0x770e, 0x1000, 0x717b, 0x8000000000000000, 0x3, 0x401]})
ioctl$auto(r0, 0xc0045405, 0x3)
getcpu$auto(&(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x1, &(0x7f00000000c0)={[0x4, 0x1, 0x6c60, 0x5, 0x6, 0x2, 0x3dd8, 0x5, 0xfff, 0x8000000000000001, 0xd4bd, 0x5, 0x78, 0x2, 0x4, 0xf]})

26m5.700764069s ago: executing program 0 (id=1219):
mmap$auto(0x0, 0x400008, 0x2, 0x400000000009b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0)
write$auto(r0, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
socketpair$auto(0x1, 0x6, 0x0, &(0x7f0000000000)=0xfffffffe)
socket(0xa, 0x1, 0x84)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0)
write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e)
userfaultfd$auto(0xe3)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
bpf$auto_BPF_MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0x850, 0x6, 0x0, 0x9, 0x2, 0x5, r0}, 0x23f8)
r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
pwrite64$auto(0xc8, 0x0, 0x11, 0x2)

26m4.407870715s ago: executing program 0 (id=1225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {0x4, 0x0, 0x1100}, [@HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48041}, 0x10)

26m4.211071581s ago: executing program 0 (id=1227):
openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/2/effective_affinity\x00', 0xabf1fb4f49fd81db, 0x0)
socketpair$auto(0x4, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r0)
ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0)
mkdir$auto(0x0, 0x4)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
socket(0x10, 0x2, 0x0)
r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x401, 0x0)
openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0)
ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0)
read$auto(r4, 0x0, 0x4)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x111442, 0x0)
bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6)
unshare$auto(0x6c000000)
mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0xae74208, 0x0)

26m3.641032762s ago: executing program 0 (id=1229):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/fscaps\x00', 0xe0a00, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/136, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r1)
openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85)
socket(0x2, 0xa, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0)
io_uring_setup$auto(0x55, &(0x7f0000000100)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400c, 0xffffffffffffffff, [], {0x6, 0x80006, 0x8c48, 0x7, 0x3, 0x7f, 0x2, 0x5, 0x40000000}, {0x100, 0xb, 0x53, 0x81, 0x0, 0x1a7b870a, 0x76c5, 0x8, 0xffffffff}})
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0)
ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x7, 0x92fe, 0x1, 0x948b, 0xfffffffffffffff8, 0x15f4da07, 0x6, 0x2, 0x401, 0x400008000001f, 0x10000000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
poll$auto(&(0x7f00000000c0)={r3, 0x20, 0x2}, 0x3, 0x104)
write$auto(0x3, 0x0, 0xfffffdef)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00'})

26m3.265016191s ago: executing program 0 (id=1231):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x7ff, 0x8, 0xdf, 0x10, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4, 0xfffffff9, 0x718c1257}]})
r2 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0)
sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61883c13fe44afc3e67b91241c5cf586c524a26879", 0xa5)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000080)={0x0, 0xfff}, 0x3ffffffffff, &(0x7f0000000180)={&(0x7f0000000280)="191563ed3e1f31e1b4faae63ed73bfd82a3b3fa374a2ca8e3b7a853c2b060279f86e51eb030efbe12c899c6ad2a9f62122b88cef25c5b942c49c8b9016ea9de8c5c938007bc64c05551a47ace489c0706837fe9dedcd3b25498d6cd83890fc33aa43921b9ee72974406a1865ceb90bd9", 0x40000000001243}, 0xa, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r3, 0xc2604110, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=0xfffffff9)
setuid$auto(0xe)
ioctl$auto(0x3, 0x400454ca, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0x8}, 0x1, 0x30e)

25m48.213511467s ago: executing program 32 (id=1231):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x7ff, 0x8, 0xdf, 0x10, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4, 0xfffffff9, 0x718c1257}]})
r2 = socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0)
sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0)
write$auto_cpu_latency_qos_fops_qos(0xffffffffffffffff, &(0x7f00000000c0)="4d46f158ba101c8c2d9356700b866489eff04b4760b3539b045b1af49ea855e368af3d1e6e1f4357d9e208a8ed480f4eff72480ed222ec48dbb1c4c6d0fd8e8a7b798aa8066160cb78be83de9b691f6907f58b4f87e18d4d420de6c18f156d749715ddbf8127891d08247d8c919da0fbb26ace2399e1c632f1e2b0c8ffe8ce7dc7b80b98438f066bd662d0d89bd610fc61883c13fe44afc3e67b91241c5cf586c524a26879", 0xa5)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000080)={0x0, 0xfff}, 0x3ffffffffff, &(0x7f0000000180)={&(0x7f0000000280)="191563ed3e1f31e1b4faae63ed73bfd82a3b3fa374a2ca8e3b7a853c2b060279f86e51eb030efbe12c899c6ad2a9f62122b88cef25c5b942c49c8b9016ea9de8c5c938007bc64c05551a47ace489c0706837fe9dedcd3b25498d6cd83890fc33aa43921b9ee72974406a1865ceb90bd9", 0x40000000001243}, 0xa, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r3, 0xc2604110, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=0xfffffff9)
setuid$auto(0xe)
ioctl$auto(0x3, 0x400454ca, 0x38)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
io_setup$auto(0x1, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0x8}, 0x1, 0x30e)

19m52.275343709s ago: executing program 3 (id=2811):
mmap$auto(0x0, 0x2, 0x9, 0xeb1, 0x40000000000a5, 0x88000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0)
read$auto(r1, 0x0, 0x1f40)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000100)={0x25, 0xf3, 0xb0, @raw=0xfffff018}})

19m52.184148904s ago: executing program 3 (id=2812):
statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x6, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) (async)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd0c, &(0x7f00000001c0)) (async)
socket(0x17, 0x1, 0x106) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
io_uring_setup$auto(0x9d2, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x15, 0x5, 0x0) (async)
mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0x203, 0x9b72, 0x2, 0x8000) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async)
ioprio_set$auto(0x2, 0x800000000, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) (async)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) (async)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/rto_max\x00', 0x101201, 0x0)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) (async)
lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) (async)
write$auto(0x3, 0x0, 0x100082) (async)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) (async)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async)
r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0)
ioctl$auto(r3, 0x800064d1, r3)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x101)
lseek$auto(0x3, 0x2, 0x4) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0)

19m52.048826402s ago: executing program 3 (id=2813):
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
io_setup$auto(0x7ffe, 0x0)
openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/loginuid\x00', 0x4400, 0x0)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog_thresh\x00', 0x20402, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0)
pread64$auto(r3, 0x0, 0xe, 0x100000000007)
write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x11f0, r4, 0x428, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x5}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}, @NL80211_ATTR_FILS_CACHE_ID={0xf6, 0xfd, "94923c4f5704898b792261f0cbe8686035d020c8d47e1c70e9674cfca40f28551e5709272ea1a18a508dda76093254a84f7ef71087ecc7a907b22fc10bbac3eb1b82fe82bd41b239f954ea729d40613e53a18f7c4deca38f725ea78dfa1f9fcc42fbf1ff7a1c825e2585556cce384bc61a3e7e315b5a252c0dd233c421cf147ea9877a82361e9a0bd6af1345de29084c28a7e856a88ca2575d7853354f907ac6d0e5340e00fed3fdba9a5afa38a0b5755155637fa307f34fe4a9ae3a276f8a6a4ca7f70e94a22b85d72839c598f1595a1da727c85205b82ecf24100720c6b5a2d4192dc5d85ec9256e2cc5c20d941d7ba0c6"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x8}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_STA_FLAGS2={0x6d, 0x43, "59f3652a79b54c4dabc05963161f10a9cb2b5e63c78967372561b90e6c52b35c9c2bfbe305b0bd8f8abcd5232d69f7568e32fc4fc67bc7d0f9895919c4e2e93c83234a85252c1d21ba719d0859a2da1d060953f8103fc354d5a9dc7104402e495132f2f44fb46250f5"}, @NL80211_ATTR_CQM={0x1040, 0x5e, 0x0, 0x1, [@typed={0x4, 0xc1}, @typed={0x14, 0x108, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x101c, 0xca, 0x0, 0x1, [@generic="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", @nested={0x4, 0x11d}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x2c}, @typed={0x4, 0xf4}]}, @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x8}]}]}, 0x11f0}, 0x1, 0x0, 0x0, 0x40000}, 0x48c4)
io_uring_setup$auto(0x6, 0x0)
r5 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
read$auto(r5, 0x0, 0x10)
close_range$auto(0x2, 0x8, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0xf3, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, 0x4, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10)
writev$auto(0xc8, &(0x7f00000028c0)={0x0, 0x200}, 0x9)
ptrace$auto(0x10, r6, 0x4, 0x7ff)
ptrace$auto(0xf, r6, 0x1, 0x4053)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = epoll_create$auto(0x8800001)
epoll_ctl$auto(r7, 0x1, r0, 0x0)
setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9)

19m50.328018582s ago: executing program 3 (id=2820):
r0 = socket(0xa, 0x3, 0x3a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
getsockopt$auto(r0, 0x29, 0x36, 0x0, 0x0)
acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00')
socketpair$auto(0x2, 0xfffffff8, 0x4, &(0x7f0000000040)=0x5)
setsockopt$auto_SO_DOMAIN(r0, 0x9, 0x27, &(0x7f0000000080)='/dev/sequencer2\x00', 0x7)

19m49.354205021s ago: executing program 3 (id=2823):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x806, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0)
write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb})
mmap$auto(0x0, 0x5, 0x2, 0xef1, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3d648661fbc0bdc6133511595def5e7f1f8759a5ca9cfa29bcc8df63c28a77587f93d390b984674c7fddaf34c024733e3cb01b018210ccf29ce63b86f92468cf7b4ce047c3bc7fb042"], 0x20}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000001)
r3 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000280), 0x145040, 0x0)
io_uring_register$auto_IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000380)="0ee711e7f149b45bacd25c2813afa45453f5327cbdb05046725d0749a79540d0a6b071ceb61083cc13a9a15f2c17f3807ed3e720f2d63dd9c17367dedf5b85963d47dc0723e4050386ed88d18dbf723a4b441b0f7f71152b3f3500e0f9011e17da9acdcbb886bad694b5a67325d77a0592af78825033aa36608be85e1b9c0851a054ca76cbc617b6f399af8e5bcc05045c7ba4ed290d10eede6ab29478be1c60ef18ebd47d656c1def70bb208ef9906ee82312bbf7e2bc4be805d69d45205fee", 0x1)
r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x101b42, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';')
ioctl$auto(0x3, 0x40086200, 0x38)

19m47.902754164s ago: executing program 3 (id=2828):
mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x4007fff)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
r2 = getpid()
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
mmap$auto(0x7ae, 0xa8f, 0x3, 0x7fffffff, 0xffffffffffffffff, 0xffffffff)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0)
msync$auto(0x0, 0xe0, 0x6)

19m32.517909228s ago: executing program 33 (id=2828):
mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x4007fff)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
r2 = getpid()
syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0)
mmap$auto(0x7ae, 0xa8f, 0x3, 0x7fffffff, 0xffffffffffffffff, 0xffffffff)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r3 = socket(0xa, 0x2, 0x0)
socket(0xa, 0x801, 0x84)
openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0)
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0)
msync$auto(0x0, 0xe0, 0x6)

4m32.105263664s ago: executing program 2 (id=6900):
open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310)
r0 = socket(0x2b, 0x80004, 0x7)
r1 = prctl$auto(0x21, 0x0, 0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x29, 0x7, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113)
r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000040)='-:', 0x2)
alarm$auto(0x4)
write$auto(0x1, 0x0, 0x80000000)
r3 = pipe$auto(&(0x7f0000000040)=<r4=>0xffffffffffffffff)
tee$auto(r4, r3, 0x5, 0x8)
close_range$auto(0x2, 0x8, 0x0)
connect$auto(r1, &(0x7f0000000000)=@phonet={0x23, 0x2, 0x5, 0x4b}, 0x5b)
unshare$auto(0x40000080)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
set_mempolicy$auto(0x1, 0x0, 0x803)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf250200000004000a800800050000000008"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0)
msync$auto(0x0, 0xe0, 0x6)
madvise$auto(0x7f, 0xfffffffffffefffd, 0x17)
pkey_free$auto(0xfffffffd)
bpf$auto(0x0, &(0x7f00000001c0)=@link_detach={r5}, 0x10)
r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
ioctl$auto_SOUND_MIXER_READ_RECSRC2(r7, 0x80044dff, &(0x7f0000000300)="04069dd9f9b5f661a5c34458b227a77e49cccce4c7feec5b5c9a7bd256985cd1f73e538addd24e492c95e9ae7fd9c0ea460800b8e1372173f1db3f038e42d0797b2a8eb6649683cd8eb3cfa1b8aba92fd8b6d25350c6e03b430715c3485c6245a3145fcba2d6e0e404a9e8000f6c721778bfb06c5925bb27f96b17058ea727")

4m29.819846551s ago: executing program 2 (id=6911):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x800, 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408)
write$auto(r1, 0x0, 0xfffffdef)
fcntl$auto_F_ADD_SEALS(r1, 0x409, 0x0)
msgctl$auto_MSG_INFO(0x200, 0xc, 0x0)
waitid$auto_P_PID(0x1, 0x0, 0x0, 0x7, 0x0)
r2 = semctl$auto_GETPID(0x19, 0x5a48, 0xb, 0x6)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000040)={{@inferred, 0x8, 0x3, 0x4338, "0508ef5c02864dd5c35496fab129fe93e170b30016d0cf0a93b570d8ea6943760ea9119f58f5db6093defac0", @inferred=0xffffffffffffffff}, 0x10, 0x1, 0x3, @inferred=r2, @integer={0x7, 0x3fffc000000, 0x9}, "ece132c65533f6ae0f69aea0f58e0ec1fed8e73a2133901c005333801c23678a8922a550ace2a9c0c2c66c50c9048320382f8e2a87ac9e4a277621056af6f983"})
pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r0, 0x5, &(0x7f0000000240)={@siginfo_0_0={0x18e, 0x5, 0x2, @_timer={r2, 0x1, @sival_ptr=&(0x7f0000000180)="6fbfb58d2038e8c0fe35833fb95f2f24fefce09fe5c4feb87647a56444b82b01e0f0df4fa30300abfed146225ba134395bfcc3076725a6ef30114f364fdca1db93dd937538f94135d5e5bdcf1faf2b97ef3364ad3e6a487130ffa288600f1f8fb9a1aca267a572f8d104da7451ce148b0d16b9517baaefff389066290bef07b7030e393b31d6589039aea86648ac10a33a96749a0fb2f080dbc185b99c3f7e78e0ef6cbc9767df3f8d63927df0efee5f12949de956f4ce", 0xfff}}}, 0x4)
openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/smc/smcr_max_links_per_lgr\x00', 0x0, 0x0)
write$auto(0x3, 0x0, 0xfdef)
r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r4 = getpid()
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
socket(0x1e, 0x4, 0x0)
socket(0x1d, 0x2, 0x7)
setsockopt$auto(0x3, 0x6b, 0x2, 0x0, 0x4)
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xffe}, 0x40000000001, &(0x7f0000000140)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0xdb8}, 0x4, 0x0)
ioctl$auto(r3, 0x400454ca, 0x38)
r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0)
ioctl$auto_EVIOCGRAB(r6, 0x40044590, &(0x7f0000000000)=0x2)
ioctl$auto(r5, 0x400454ca, 0x38)
close_range$auto(0x2, 0x8, 0x0)

4m28.859440334s ago: executing program 2 (id=6917):
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
unshare$auto(0x40000080)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x42800, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"6bf4798bc67635ceb7dad669dd0b1df21916f5519c3aa5cc57b95a82466e17e4", 0x5, 0x2, 0x6, 0xfffffffffffffe01, 0x628edca4, 0xffffffffffffffff})
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x10a41, 0x0)
r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r1, r1, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0x1)
r2 = io_uring_setup$auto(0x86, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2)
sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x4004004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2)
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xaaaba978e63e307e}, 0x40000)
sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
kill$auto(0x0, 0x1000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_rmid_forced\x00', 0x141241, 0x0)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x200000000000, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x814}, 0x2004c0c4)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={&(0x7f0000001040), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0)
statx$auto(0xffffffffffffff9c, 0x0, 0x1ff, 0x8, 0x0)
unshare$auto(0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)

4m27.568855715s ago: executing program 2 (id=6921):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(0x0, 0x0, 0x6f)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1, 0x1, 0x0, 0x401, 0xdd16)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"})
r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0)
ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]})
ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2})
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xd)
migrate_pages$auto(0x0, 0xa, 0x0, &(0x7f0000000140)=0x2)
r2 = socket(0xa, 0x3, 0x3a)
msgctl$auto(0x401, 0x0, &(0x7f0000000640)={{0x8, 0x0, <r3=>0xffffffffffffffff, 0x6, 0x9, 0x7f}, &(0x7f0000000500)=0x7, &(0x7f0000000600)=0x2, 0x54, 0x101, 0x3, 0xe, 0x1, 0x1000, 0x7, 0x6, @inferred=0xffffffffffffffff})
r4 = wait4$auto(0x0, &(0x7f00000006c0)=0xb8e00000, 0x1, &(0x7f0000000700)={{0x100, 0x800}, {0x4ddbdf6d, 0x7}, 0x961f, 0x100000000000b0f7, 0x4040, 0x8, 0xffff, 0x9, 0x400000000005, 0x240000000000000, 0x8000000000000001, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6})
shmctl$auto(0x80, 0x8001, &(0x7f0000000880)={{0x54, 0x0, r3, 0x4, 0x4, 0x1, 0x101}, 0x9, 0x9, 0xd0, 0x7, @inferred=r4, @raw=0x7, 0x3, 0x0, &(0x7f00000007c0), 0x0})
clock_getres$auto(0xfffffffd, 0x0)
move_pages$auto(r4, 0x3, &(0x7f0000000040)=&(0x7f0000000280)="2726d9d229bb4bc5ff06d5a51188e1d4eb99afed9265382a5fc2d9aa70233867626c102b5e61486829edb833e64454ece68f963ace48affdffffffff", 0x0, &(0x7f00000000c0)=0x6, 0x10)
getsockopt$auto(r2, 0x29, 0x38, 0x0, 0x0)

4m24.655526478s ago: executing program 2 (id=6930):
r0 = socket(0x2, 0x1, 0x100)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f00000001c0)=':,\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0)
ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, 0x0)
listen$auto(r0, 0x1ff) (async)
listen$auto(r0, 0x1ff)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
socket(0x10, 0x2, 0x4) (async)
socket(0x10, 0x2, 0x4)
epoll_create$auto(0x0)
socket(0x2, 0x3, 0x4)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) (async)
bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b)

4m22.777093172s ago: executing program 2 (id=6938):
ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) (async)
waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xffff, 0x413, 0x0, @_sigsys={&(0x7f0000000080)="bbac2f12a3a001cb9c09", 0x0, 0x3ff}}}, 0x3, 0x0)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r0, 0x0, 0x1) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0x7a5fa6b4, 0x401, 0x8000) (async)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
recvmmsg$auto(r1, 0x0, 0x5, 0x0, &(0x7f0000000300)={0x200, 0x6}) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
write$auto(0x3, 0x0, 0x1) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
write$auto(0x1, 0x0, 0x80000000) (async)
vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0)

4m7.31709299s ago: executing program 34 (id=6938):
ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) (async)
waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xffff, 0x413, 0x0, @_sigsys={&(0x7f0000000080)="bbac2f12a3a001cb9c09", 0x0, 0x3ff}}}, 0x3, 0x0)
mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
read$auto(0xffffffffffffffff, 0x0, 0x20)
r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r0, 0x0, 0x1) (async)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
mmap$auto(0x0, 0xe983, 0xdf, 0x7a5fa6b4, 0x401, 0x8000) (async)
rseq$auto(0x0, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
recvmmsg$auto(r1, 0x0, 0x5, 0x0, &(0x7f0000000300)={0x200, 0x6}) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
write$auto(0x3, 0x0, 0x1) (async)
write$auto(0x3, 0x0, 0xfffffdef) (async)
write$auto(0x1, 0x0, 0x80000000) (async)
vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0)

1m38.836448918s ago: executing program 5 (id=7520):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, 0x0, 0x5, 0x20000000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x2, 0xd, 0xfffffffffffffffb, 0x100000004, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0)

1m38.645230534s ago: executing program 5 (id=7521):
socket(0x1f, 0x6, 0xffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
exit$auto(0x7)
mount$auto(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xb, 0x0)
syz_clone(0x0, 0x0, 0xfffffffffffffd55, 0x0, 0x0, 0x0)

1m36.095427036s ago: executing program 5 (id=7528):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400000000000004}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20041570)

1m35.703366594s ago: executing program 5 (id=7529):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x9, @ANYBLOB="0800078a04040000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)

1m35.332216986s ago: executing program 5 (id=7530):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0x2, 0xd, 0xfffffffffffffffb, 0x100000004, 0x2c2, 0x800002017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000005]}, 0x0, 0x0)

1m35.07284604s ago: executing program 5 (id=7533):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x806, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0)
write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb})
mmap$auto(0x0, 0x5, 0x2, 0xef1, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x1100000000000000, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3d648661fbc0bdc6133511595def5e7f1f8759a5ca9cfa29bcc8df63c28a77587f93d390b984674c7fddaf34c024733e3cb01b018210ccf29ce63b86f92468cf7b4ce047c3bc7fb042"], 0x20}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000001)
r3 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000280), 0x145040, 0x0)
io_uring_register$auto_IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000380)="0ee711e7f149b45bacd25c2813afa45453f5327cbdb05046725d0749a79540d0a6b071ceb61083cc13a9a15f2c17f3807ed3e720f2d63dd9c17367dedf5b85963d47dc0723e4050386ed88d18dbf723a4b441b0f7f71152b3f3500e0f9011e17da9acdcbb886bad694b5a67325d77a0592af78825033aa36608be85e1b9c0851a054ca76cbc617b6f399af8e5bcc05045c7ba4ed290d10eede6ab29478be1c60ef18ebd47d656c1def70bb208ef9906ee82312bbf7e2bc4be805d69d45205fee", 0x1)
r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x101b42, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';')
ioctl$auto(0x3, 0x40086200, 0x38)

1m31.161038932s ago: executing program 4 (id=7542):
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
r1 = getpid()
sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={0x0, 0x224c}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8002)
recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r2)
msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000280)={{0xff, <r5=>0xee00, <r6=>0x0, 0x6, 0x9, 0x8, 0x40}, &(0x7f0000000100), &(0x7f0000000200)=0x7, 0x6, 0xc76c, 0x2, 0x1, 0x87e, 0x1, 0x9, 0xb, @raw=0x9, @inferred=<r7=>r1})
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x462fc0, 0x0)
sendfile$auto(r8, r8, 0x0, 0x4f64a1d5)
ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f00000005c0)={0x6, @inferred=r8, @raw=0x2, 0x8, 0x7, '\x00', {0x401, 0xb, 0x5158, <r9=>r5, r6, 0x7, 0x5, 0x2, {0x1, 0x401}, {0xa, 0x8}, {0x400, 0x8}, 0x401, 0x3, 0x9, 0x1c7c83cc, 0xfffffffa, 0x0, 0xfff7, 0x7, 0x5, 0x80, '\x00', 0xffffffff, 0x46, 0x4, 0x101}})
msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000380)={{0xfffffff9, r9, 0xffffffffffffffff, 0xfffffffe, 0x1, 0xdbf, 0x5}, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5, 0x81, 0x6, 0x8, 0xfffffffffffffffb, 0x5, 0x7, 0x3, 0x100, @inferred=r7, @inferred=r1})
r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0)
ioctl$auto(r10, 0x540a, 0x0)
ioctl$auto_TIOCSTI2(r10, 0x5412, &(0x7f0000000080))
sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000001200)={0x12f0, r4, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2e8, 0x1, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @pid=r1}, @typed={0x8, 0xf3, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x1da, 0x53, 0x0, 0x1, [@nested={0x4, 0x73}, @generic="e1318457cb92152c", @typed={0x8, 0x117, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x8d}, @nested={0x4, 0x1f}, @generic="e01c8dd77d835f128e38784761edab0b4068e44d3502245cf69ff92abddbe9ce8657b12a5c515d26200422da8e9986ccba67b91c92fa4a9ea615c4cb4ae38cad7a00c55ffc014bfdadffe1b89857ca8c894224fd7f09747d88d36ef7ea0f757b0427c24ddf8a0a6062b1378d679d30a7dff7e2afa383c050304215f8746619e55242875fa10b1b2c39ead7679f082b44a6d6a37380f60554f9401d042b532399776f8a7e277efb4d31b7aa", @nested={0x4, 0x119}, @nested={0x4, 0xce}, @generic="44b4b7ef88435cf09f5f05b78c80bc50326cce19ae6501542fc021da21f9bd3f047d37568edc5a42a10681e399691d268767dbe30c85c6995c2b43375cf166c2af1576659a8249af52bd2a1847fee5f8dd08298897d691b14dd200b523a6bc2557a75e775143fe8c42740f7a77db3169e4a9890069c43d17f659c16bf56a27e65e2061d1e0f00c5c7a019932af6a0c8ac9da380fd61b4c30c3b6da9d727d252ea911473d6b857d8e096dd281ad83da9ddf735614cf8f75c5d6642c52ec1d76fbff0cd9d5b8f5672a5599c55584688425bb5b1d566be63cf1504358fa8eedd00d523fd6f68965c807e32df4c8f94660e99795774a00aae3f4a5d72ca18ebcab", @typed={0x8, 0x8b5, 0x0, 0x0, @u32=0x1}]}, @nested={0xee, 0x12c, 0x0, 0x1, [@typed={0x4, 0x14f}, @nested={0x4, 0x120}, @typed={0x8, 0x83, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x82}, @generic="2ed5130f358144c2e846166f5414105f60392d6a07a9d063e7c65c9f7800b09f6baf73a2980d53b330e0b294218e741d79c58ed0f8c06d2b", @generic="fd8206a719a7aef77bb5ef17775439d535184e7bc1f0d97f2a167cf9359a8961686aea0387f5a6f0a56dea125a787ed61c6f00cf5537c7dd897a85132ca6ecd1b86799ebeaa5ca076a7cddeb3ea1ae5fdeca87480c7c7d43d1f68cd93897e5a8e3586cad9afde5be0d382735e5fe72b30c310ce7d57fd261eff308e34c1aa0f04b66b61a2a60e6bb5345a98b3865", @typed={0x8, 0xce, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x3b}, @typed={0x4, 0x48}]}]}, @IPVS_CMD_ATTR_DAEMON={0xff4, 0x3, 0x0, 0x1, [@generic="2357adeccd60f447fc13016d81210f52939b5be2421433655990a2bd48b060e3338e77cdc2c4c313ec83d87a727707a7c677b0847b2bfb4bfee61aefc0f62435eb80d45132178cee2bdfb9d4b9c09b51276245db774b44a9c61b45f401c216a0fd243c6e10928a3b54189a2df4", @generic="62e918d5ecb84bc7e66d3044eba23fcc5157ec8352df778f979e393eed3aef53ef16597fe1667a9d2d1cbbaf799d607b48b439aa5ba7a8d48516cb6ebec4b1bda80f4c4fba32ed234beca790abb6006602a4534474141edec765a53e76a3e9922b1848f3340369ef4e21e0d981cd74250804aab6e70b657e14df30bbd399398381de645c15e816470df3a644fee25eb855e087165b647bf8c581b5a4f187e520d10b1e0a8b4660a5e767c2750f1a2f6205c37c0d7663a3a783d256308d4071ce0f0d5702ca45cb6a2c9331", @nested={0x4, 0xfd}, @typed={0x8, 0x37, 0x0, 0x0, @u32=0x101}, @generic="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", @generic="975da3ce9b93170dfc6b3441988b69f420505d8467f6185acbe5c2ae04ae07d5850cbebadb4041a9c18941fa8c66", @nested={0x4, 0x145}, @typed={0x69, 0xc4, 0x0, 0x0, @binary="8b41547a1968f6782ec8f87861eeb2022749987464ca84f10dab9417b4c3879b9c52d4d9eaa016ee05b1d066e21c67cf47cfea06c278b3ee31d433277ec7c932111f9ebc39013c21ade57f1a44d88e7383df311a7133311c8e9a94e92e31f25c4925dfacc6"}, @typed={0x8, 0xa7, 0x0, 0x0, @fd=r8}, @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x12f0}, 0x1, 0x0, 0x0, 0x4040084}, 0x4)
r11 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000004c0), r2)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0xffffffffffffffb7, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x9b6a}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x880)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r12)
sendmsg$auto_CTRL_CMD_GETPOLICY(r12, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r13, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810)

1m30.19507779s ago: executing program 4 (id=7546):
mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
r0 = io_uring_setup$auto(0x1, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="ac295cbf2c560100000080fbdd06000000007952"], 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x2400c084)
process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1", 0x40000000001243}, 0x4, 0x0)
getpid()
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4c100)
recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b)

1m29.285403841s ago: executing program 4 (id=7548):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x9, @ANYBLOB="0800078a04040000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c000100"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)

1m28.90642421s ago: executing program 4 (id=7550):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = io_uring_setup$auto(0x806, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0)
write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb})
mmap$auto(0x0, 0x5, 0x2, 0xef1, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x6f15000000000000, 0x9}, 0x7}, 0x3, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0)
sendmsg$auto_NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3d648661fbc0bdc6133511595def5e7f1f8759a5ca9cfa29bcc8df63c28a77587f93d390b984674c7fddaf34c024733e3cb01b018210ccf29ce63b86f92468cf7b4ce047c3bc7fb042"], 0x20}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000001)
r3 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000280), 0x145040, 0x0)
io_uring_register$auto_IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000380)="0ee711e7f149b45bacd25c2813afa45453f5327cbdb05046725d0749a79540d0a6b071ceb61083cc13a9a15f2c17f3807ed3e720f2d63dd9c17367dedf5b85963d47dc0723e4050386ed88d18dbf723a4b441b0f7f71152b3f3500e0f9011e17da9acdcbb886bad694b5a67325d77a0592af78825033aa36608be85e1b9c0851a054ca76cbc617b6f399af8e5bcc05045c7ba4ed290d10eede6ab29478be1c60ef18ebd47d656c1def70bb208ef9906ee82312bbf7e2bc4be805d69d45205fee", 0x1)
r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x101b42, 0x0)
ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';')
ioctl$auto(0x3, 0x40086200, 0x38)

1m28.64712908s ago: executing program 4 (id=7551):
r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x40002, 0x0)
read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f0000000100)=""/127, 0x7f)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
open(0x0, 0x22240, 0x55)
openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket(0xa, 0x801, 0x84)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram0/queue/dma_alignment\x00', 0x8800, 0x0)
read$auto(r3, 0x0, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
memfd_create$auto(&(0x7f0000000000)='^[#@-\x00', 0x3)
fcntl$auto(0xff80000000000000, 0x409, 0x13)
mmap$auto(0x7ffffdfde000, 0x2020006, 0xa, 0x11, 0x8000000000000000, 0x8000)
getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
write$auto(r4, 0x0, 0x101)
ioctl$auto_SG_GET_NUM_WAITING(r4, 0x227d, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8)
ioctl$auto(0x3, 0x80106f53, r1)
madvise$auto(0xfffffffffffffff7, 0x7, 0x200)

1m28.431565536s ago: executing program 4 (id=7553):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe$auto(0x0)
pipe$auto(0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x68802, 0x0)
rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20a"}, 0x9, 0x3, 0x2af3)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x169c81, 0x0)
write$auto(r5, &(0x7f0000000080)=')@-!\x00', 0x1e1)
ioctl$auto_UI_SET_ABSBIT(r4, 0x40045567, 0x0)
open(0x0, 0x149043, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan1\x00'})

1m13.359002768s ago: executing program 35 (id=7553):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
pipe$auto(0x0)
pipe$auto(0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0)
sendfile$auto(r1, r1, 0x0, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$auto(r3, 0x0, 0x20)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x68802, 0x0)
rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20a"}, 0x9, 0x3, 0x2af3)
r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/health/break_health\x00', 0x169c81, 0x0)
write$auto(r5, &(0x7f0000000080)=')@-!\x00', 0x1e1)
ioctl$auto_UI_SET_ABSBIT(r4, 0x40045567, 0x0)
open(0x0, 0x149043, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan1\x00'})

15.812429937s ago: executing program 6 (id=7886):
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/profile\x00', 0x60c81, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1)
fsopen$auto(&(0x7f0000000000)='/dev/mapper/control\x00', 0x3)
r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd03, &(0x7f00000001c0))

15.727729596s ago: executing program 6 (id=7887):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) (async)
sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xd}, @ETHTOOL_A_COALESCE_TX_AGGR_MAX_BYTES={0x8, 0x1a, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

15.624432978s ago: executing program 6 (id=7889):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async)
mmap$auto(0x0, 0x202000b, 0x3, 0x2000f8, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$auto(r1, 0x10f, 0x8a, 0x0, 0x14)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/ptp/ptp0/pps_available\x00', 0x0, 0x0)
setsockopt$auto_SO_LINGER(r2, 0x2, 0xd, &(0x7f0000000040)='/dev/sda\x00', 0x5) (async)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009)
ioctl$auto_IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x2, 0x10000003, 0x5})

15.481345181s ago: executing program 6 (id=7890):
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x10, 0x2, 0xc)
fchmod$auto(r0, 0x6)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/slab/kmalloc-64/total_objects\x00', 0x80000, 0x0)
read$auto(r1, &(0x7f0000000100)='\xcb%)\x00', 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto_KVM_GET_MSRS(r2, 0xaea2, &(0x7f00000000c0)={0xfc})
futex_wait$auto(&(0x7f0000000040)="790b734b9e560562eade5bdc56e2f50f12e49534aae2870c267e670b29befb96617970a09ae8155551078439097c40adb3bf0ea79b7edd5536b2f7c9f9912e98b9061892a3ecb7f54a2104375ef9478002bdc6880aae5e735a458e699543a82542328078f5faa8db9ad6478997e3fc8e2cbf1804116c7961", 0x2, 0x8, 0x1, &(0x7f0000000100)={0x4, 0x19d45fe0}, 0x3ff)

15.280197704s ago: executing program 6 (id=7891):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x9, @ANYBLOB="0800078a04040000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c000100"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)

15.053460527s ago: executing program 6 (id=7893):
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000000c0)="7677491a", 0x8, 0x0, 0xd5b9, 0x0, 0x1, 0x4}, 0x3}, 0x7, 0x8001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
listen$auto(r1, 0x4)
poll$auto(&(0x7f0000000000)={<r2=>r1, 0x1963, 0x81}, 0x5, 0x10001)
r3 = socket(0x25, 0x1, 0x2)
setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004)
setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0))
ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000000)="b3b4552bbf94f71b485a9bd36b552a9a2c63d89907ac9bf96f4771e37607e838cd52d5da0e40e40509692a1fadf208405240f0464a25d111bc813a73956aa4621f2d1eccad44a21ca5d2725b154013cf24a9849e929080506b2db94dc9d7c1db9f3d24ce89")

652.398548ms ago: executing program 1 (id=7956):
rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x23, 0x80805, 0x0)
io_uring_setup$auto(0x1, 0x0)
openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x40aa2, 0x0)
write$auto(0x3, 0x0, 0xfdef)
poll$auto(&(0x7f0000000040)={<r1=>r0, 0x7, 0x8}, 0x80, 0x400400)
setsockopt$auto(r1, 0x113, 0x1, 0x0, 0x81)
r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x410000, 0x0)
readv$auto(r2, &(0x7f0000000180)={&(0x7f0000000080)="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", 0x1}, 0x6)
recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0)

524.808216ms ago: executing program 1 (id=7957):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x5, 0x3, 0x17, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x9, @ANYBLOB="0800078a04040000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r3, @ANYBLOB="01009b64c23ef155546b0104000008000900", @ANYBLOB="080005000600000008000200", @ANYRES32=0x0, @ANYBLOB="0c000100"], 0x8d}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80)

466.918966ms ago: executing program 1 (id=7958):
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
unshare$auto(0x40000080)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x42800, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"6bf4798bc67635ceb7dad669dd0b1df21916f5519c3aa5cc57b95a82466e17e4", 0x5, 0x2, 0x6, 0xfffffffffffffe01, 0x628edca4, 0xffffffffffffffff})
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x10a41, 0x0)
r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r1, r1, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r1, 0x1)
r2 = io_uring_setup$auto(0x86, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2)
sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x4004004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r2)
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xaaaba978e63e307e}, 0x40000)
sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
kill$auto(0x0, 0x1000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_rmid_forced\x00', 0x141241, 0x0) (fail_nth: 1)
r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x7, 0x3, 0x9a89, 0x5, 0x80005, 0x800, 0x200000000000, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r6 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x814}, 0x2004c0c4)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={&(0x7f0000001040), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0)
statx$auto(0xffffffffffffff9c, 0x0, 0x1ff, 0x8, 0x0)
unshare$auto(0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)

341.455323ms ago: executing program 1 (id=7959):
sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
unshare$auto(0x40000080)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x42800, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={"6bf4798bc67635ceb7dad669dd0b1df21916f5519c3aa5cc57b95a82466e17e4", 0x5, 0x2, 0x6, 0xfffffffffffffe01, 0x628edca4, 0xffffffffffffffff})
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x10a41, 0x0)
r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(r2, r2, 0x2)
r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0)
landlock_restrict_self$auto(r2, 0x1)
r4 = io_uring_setup$auto(0x86, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4)
sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x4004004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r4)
sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240023138576cfa72664990000", @ANYRES16=r6, @ANYBLOB="20002bbd7000fedbdf252400000005001700070000000500280005000000"], 0x24}, 0x1, 0x0, 0x0, 0xaaaba978e63e307e}, 0x40000)
sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c2000a979952504043a70a884158e2d72bd8ad19686fd4be0c8897c1bc56af1962c09acf65e15907fc1a719a15e5fa420aa3acaa8d04189359970f7d0c7ea9dab30251871759c0eac6f665aa2001e583cbd50fb864aa136455e6ac59cf6411be1b329c8b39cc7cdc35f999258dd83874ae6cd58a05307f85bfccc7ebf16b3686dc2c1044097b4ad01de9492b211d97e7599a5f17fedd91eb0734444b64384a3090c6f49cb86ccbc9f17491dec40cb123a48263eadfae10671b02ffb2c472b401b2561617cea5cab3fa1e5e561f0045d9886f6f56650b9b8121af6f374565bddcf", @ANYRESHEX=r3, @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
kill$auto(0x0, 0x1000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_rmid_forced\x00', 0x141241, 0x0)
r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x100000003, 0xd77, 0x7, 0x7181, 0x81, 0x6, 0x1, 0x9a89, 0x5, 0x80005, 0x800, 0x200000000000, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0xea4, 0x9cf, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0x3, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x2, 0xcc, 0x4000000002, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000]}, 0x1fe, 0xe)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r8 = socket(0xa, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x814}, 0x2004c0c4)
sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000380)={&(0x7f0000001040), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x80000000}, 0x7, 0x0)
statx$auto(0xffffffffffffff9c, 0x0, 0x1ff, 0x8, 0x0)
unshare$auto(0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)

175.053976ms ago: executing program 1 (id=7960):
r0 = socket(0x28, 0x805, 0x0)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x100000000001, 0x0, 0x3, 0x9}, 0x7}, 0x81, 0x400)
bind$auto(r0, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2)
sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="389a0000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x8000)
sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x48d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48080)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0)
ioctl$auto(r4, 0x5424, r4)
r5 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x80140, 0x0)
mmap$auto(0xb, 0x45, 0xdf, 0x11, r5, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_MACSEC_CMD_UPD_RXSC(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="01943f01", @ANYRES16=r7, @ANYBLOB="01022abd7000fedbdf2503000000"], 0x14}}, 0x48010)
epoll_create$auto(0x3e)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r8 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r8, 0xffffffffffffffff, 0x0)
r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0)
ioctl$auto(r9, 0xc058560f, r9)

53.846916ms ago: executing program 1 (id=7961):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0)
ioctl$auto_SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)="ec")
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
read$auto(r0, 0x0, 0x1001)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
open_by_handle_at$auto(r2, &(0x7f0000000000)={0x8, 0x2, "8b00000000000000"}, 0x36c)
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x1}, 0x3, 0x5, 0x4, @inferred, @integer64={0x0, 0x7, 0xc11}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"})
unshare$auto(0x40000080)
sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4020}, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

0s ago: executing program 36 (id=7893):
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{&(0x7f00000000c0)="7677491a", 0x8, 0x0, 0xd5b9, 0x0, 0x1, 0x4}, 0x3}, 0x7, 0x8001, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0)
semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0)
r1 = socket(0x23, 0x80805, 0x0)
listen$auto(r1, 0x4)
poll$auto(&(0x7f0000000000)={<r2=>r1, 0x1963, 0x81}, 0x5, 0x10001)
r3 = socket(0x25, 0x1, 0x2)
setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004)
setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b)
readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0)
write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7)
migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0))
ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000000)="b3b4552bbf94f71b485a9bd36b552a9a2c63d89907ac9bf96f4771e37607e838cd52d5da0e40e40509692a1fadf208405240f0464a25d111bc813a73956aa4621f2d1eccad44a21ca5d2725b154013cf24a9849e929080506b2db94dc9d7c1db9f3d24ce89")

kernel console output (not intermixed with test programs):

 0
[ 1740.210513][ T3699] FAULT_INJECTION: forcing a failure.
[ 1740.210513][ T3699] name failslab, interval 1, probability 0, space 0, times 0
[ 1740.272775][ T3700] CPU: 0 UID: 0 PID: 3700 Comm: syz.4.7173 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1740.272802][ T3700] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1740.272807][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1740.272816][ T3700] Call Trace:
[ 1740.272822][ T3700]  <TASK>
[ 1740.272827][ T3700]  dump_stack_lvl+0x100/0x190
[ 1740.272853][ T3700]  should_fail_ex.cold+0x5/0xa
[ 1740.272870][ T3700]  _copy_to_user+0x32/0xd0
[ 1740.272892][ T3700]  simple_read_from_buffer+0xcb/0x170
[ 1740.272912][ T3700]  proc_fail_nth_read+0x1af/0x230
[ 1740.272936][ T3700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1740.272960][ T3700]  ? rw_verify_area+0xce/0x6d0
[ 1740.272978][ T3700]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1740.273000][ T3700]  vfs_read+0x1e4/0xb30
[ 1740.273021][ T3700]  ? __pfx_vfs_read+0x10/0x10
[ 1740.273040][ T3700]  ? __fget_files+0x215/0x3d0
[ 1740.273063][ T3700]  ? __fget_files+0x21f/0x3d0
[ 1740.273087][ T3700]  ksys_read+0x12a/0x250
[ 1740.273105][ T3700]  ? __pfx_ksys_read+0x10/0x10
[ 1740.273129][ T3700]  do_syscall_64+0x106/0xf80
[ 1740.273143][ T3700]  ? clear_bhb_loop+0x40/0x90
[ 1740.273160][ T3700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1740.273175][ T3700] RIP: 0033:0x7fc0a035cece
[ 1740.273188][ T3700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1740.273202][ T3700] RSP: 002b:00007fc0a1206fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1740.273216][ T3700] RAX: ffffffffffffffda RBX: 00007fc0a12076c0 RCX: 00007fc0a035cece
[ 1740.273226][ T3700] RDX: 000000000000000f RSI: 00007fc0a12070a0 RDI: 0000000000000003
[ 1740.273234][ T3700] RBP: 00007fc0a1207090 R08: 0000000000000000 R09: 0000000000000000
[ 1740.273243][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1740.273251][ T3700] R13: 00007fc0a0616038 R14: 00007fc0a0615fa0 R15: 00007ffe80114098
[ 1740.273270][ T3700]  </TASK>
[ 1740.488107][ T3699] CPU: 0 UID: 0 PID: 3699 Comm: syz.5.7172 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1740.488136][ T3699] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1740.488143][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1740.488152][ T3699] Call Trace:
[ 1740.488158][ T3699]  <TASK>
[ 1740.488165][ T3699]  dump_stack_lvl+0x100/0x190
[ 1740.488192][ T3699]  should_fail_ex.cold+0x5/0xa
[ 1740.488211][ T3699]  should_failslab+0xc2/0x120
[ 1740.488234][ T3699]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1740.488253][ T3699]  ? __anon_vma_prepare+0xae/0x5e0
[ 1740.488274][ T3699]  __anon_vma_prepare+0xae/0x5e0
[ 1740.488290][ T3699]  ? do_raw_spin_lock+0x128/0x260
[ 1740.488312][ T3699]  __vmf_anon_prepare+0x11f/0x250
[ 1740.488337][ T3699]  do_huge_pmd_anonymous_page+0x15c/0x1a60
[ 1740.488358][ T3699]  ? __pmd_alloc+0x6aa/0x9c0
[ 1740.488374][ T3699]  __handle_mm_fault+0x1e9e/0x2b60
[ 1740.488394][ T3699]  ? mt_find+0x45e/0x8e0
[ 1740.488412][ T3699]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1740.488428][ T3699]  ? __pfx_mt_find+0x10/0x10
[ 1740.488459][ T3699]  handle_mm_fault+0x36d/0xa20
[ 1740.488480][ T3699]  __get_user_pages+0xf9c/0x34d0
[ 1740.488510][ T3699]  ? __pfx___get_user_pages+0x10/0x10
[ 1740.488539][ T3699]  populate_vma_page_range+0x267/0x3f0
[ 1740.488555][ T3699]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1740.488578][ T3699]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1740.488602][ T3699]  ? do_mmap+0x93f/0x12f0
[ 1740.488627][ T3699]  __mm_populate+0x107/0x3a0
[ 1740.488644][ T3699]  ? __pfx___mm_populate+0x10/0x10
[ 1740.488661][ T3699]  ? up_write+0x290/0x4f0
[ 1740.488684][ T3699]  vm_mmap_pgoff+0x37f/0x470
[ 1740.488709][ T3699]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1740.488736][ T3699]  ? __x64_sys_futex+0x34f/0x4d0
[ 1740.488752][ T3699]  ? __x64_sys_futex+0x358/0x4d0
[ 1740.488772][ T3699]  ksys_mmap_pgoff+0x7d/0x5b0
[ 1740.488796][ T3699]  __x64_sys_mmap+0x125/0x190
[ 1740.488820][ T3699]  do_syscall_64+0x106/0xf80
[ 1740.488834][ T3699]  ? clear_bhb_loop+0x40/0x90
[ 1740.488852][ T3699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1740.488867][ T3699] RIP: 0033:0x7fcbbc99c629
[ 1740.488881][ T3699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1740.488897][ T3699] RSP: 002b:00007fcbbd938028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1740.488911][ T3699] RAX: ffffffffffffffda RBX: 00007fcbbcc15fa0 RCX: 00007fcbbc99c629
[ 1740.488922][ T3699] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[ 1740.488931][ T3699] RBP: 00007fcbbca32b39 R08: ffffffffffffffff R09: 0000000000008000
[ 1740.488940][ T3699] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[ 1740.488950][ T3699] R13: 00007fcbbcc16038 R14: 00007fcbbcc15fa0 R15: 00007ffc38cb0c68
[ 1740.488970][ T3699]  </TASK>
[ 1741.077271][ T3704] netlink: 186 bytes leftover after parsing attributes in process `syz.1.7176'.
[ 1741.749481][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7180'.
[ 1742.059364][ T3708] [U] ^@
[ 1742.367108][ T3730] FAULT_INJECTION: forcing a failure.
[ 1742.367108][ T3730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1742.506056][ T3730] CPU: 0 UID: 0 PID: 3730 Comm: syz.1.7182 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1742.506084][ T3730] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1742.506089][ T3730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1742.506098][ T3730] Call Trace:
[ 1742.506103][ T3730]  <TASK>
[ 1742.506109][ T3730]  dump_stack_lvl+0x100/0x190
[ 1742.506134][ T3730]  should_fail_ex.cold+0x5/0xa
[ 1742.506150][ T3730]  _copy_from_user+0x2e/0xd0
[ 1742.506171][ T3730]  copy_msghdr_from_user+0x9f/0x4f0
[ 1742.506192][ T3730]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1742.506213][ T3730]  ? rcu_is_watching+0x12/0xc0
[ 1742.506232][ T3730]  ? ___sys_sendmsg+0x19d/0x1e0
[ 1742.506249][ T3730]  ? kfree+0x2ec/0x6b0
[ 1742.506268][ T3730]  ___sys_sendmsg+0x106/0x1e0
[ 1742.506287][ T3730]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1742.506321][ T3730]  ? __pfx___might_resched+0x10/0x10
[ 1742.506345][ T3730]  __sys_sendmmsg+0x205/0x430
[ 1742.506367][ T3730]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1742.506387][ T3730]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1742.506411][ T3730]  ? fput+0x79/0x100
[ 1742.506424][ T3730]  ? ksys_write+0x1ac/0x250
[ 1742.506443][ T3730]  ? __pfx_ksys_write+0x10/0x10
[ 1742.506465][ T3730]  __x64_sys_sendmmsg+0x9c/0x100
[ 1742.506479][ T3730]  ? lockdep_hardirqs_on+0x78/0x100
[ 1742.506493][ T3730]  do_syscall_64+0x106/0xf80
[ 1742.506507][ T3730]  ? clear_bhb_loop+0x40/0x90
[ 1742.506525][ T3730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1742.506539][ T3730] RIP: 0033:0x7f94d299c629
[ 1742.506552][ T3730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1742.506566][ T3730] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1742.506580][ T3730] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1742.506590][ T3730] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000003
[ 1742.506598][ T3730] RBP: 00007f94d38de090 R08: 0000000000000000 R09: 0000000000000000
[ 1742.506607][ T3730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1742.506615][ T3730] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1742.506633][ T3730]  </TASK>
[ 1743.181131][ T3735] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE�r��҄y�*�"�l-���y–��
[ 1743.464677][ T3740] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input40
[ 1743.675279][ T3744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7186'.
[ 1744.241449][ T3752] nbd: must specify at least one socket
[ 1744.305916][ T3752] netlink: 'syz.5.7189': attribute type 11 has an invalid length.
[ 1744.348099][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7190'.
[ 1744.411549][ T3757] HfR: entered promiscuous mode
[ 1744.773018][ T3755] i: entered promiscuous mode
[ 1745.055670][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7191'.
[ 1745.169632][ T3765] FAULT_INJECTION: forcing a failure.
[ 1745.169632][ T3765] name failslab, interval 1, probability 0, space 0, times 0
[ 1745.297144][ T3765] CPU: 0 UID: 0 PID: 3765 Comm: syz.6.7193 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1745.297172][ T3765] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1745.297178][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1745.297186][ T3765] Call Trace:
[ 1745.297192][ T3765]  <TASK>
[ 1745.297199][ T3765]  dump_stack_lvl+0x100/0x190
[ 1745.297224][ T3765]  should_fail_ex.cold+0x5/0xa
[ 1745.297241][ T3765]  should_failslab+0xc2/0x120
[ 1745.297262][ T3765]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1745.297281][ T3765]  ? snd_pcm_plugin_alloc+0x5ed/0x7e0
[ 1745.297301][ T3765]  ? snd_pcm_plugin_alloc+0x5d4/0x7e0
[ 1745.297321][ T3765]  ? mark_lock+0x9b0/0xa20
[ 1745.297339][ T3765]  snd_pcm_plugin_alloc+0x5ed/0x7e0
[ 1745.297363][ T3765]  snd_pcm_plug_alloc+0x146/0x320
[ 1745.297385][ T3765]  snd_pcm_oss_change_params_locked+0x1fb3/0x39f0
[ 1745.297413][ T3765]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[ 1745.297447][ T3765]  snd_pcm_oss_get_active_substream+0x175/0x1d0
[ 1745.297470][ T3765]  snd_pcm_oss_ioctl+0x1c08/0x3720
[ 1745.297490][ T3765]  ? __fget_files+0x215/0x3d0
[ 1745.297509][ T3765]  ? hook_file_ioctl_common+0x146/0x410
[ 1745.297529][ T3765]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1745.297550][ T3765]  ? __fget_files+0x21f/0x3d0
[ 1745.297572][ T3765]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[ 1745.297592][ T3765]  __x64_sys_ioctl+0x18e/0x210
[ 1745.297611][ T3765]  do_syscall_64+0x106/0xf80
[ 1745.297626][ T3765]  ? clear_bhb_loop+0x40/0x90
[ 1745.297643][ T3765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1745.297658][ T3765] RIP: 0033:0x7f10b019c629
[ 1745.297671][ T3765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1745.297686][ T3765] RSP: 002b:00007f10b0fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1745.297700][ T3765] RAX: ffffffffffffffda RBX: 00007f10b0415fa0 RCX: 00007f10b019c629
[ 1745.297709][ T3765] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006
[ 1745.297718][ T3765] RBP: 00007f10b0fb7090 R08: 0000000000000000 R09: 0000000000000000
[ 1745.297727][ T3765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1745.297735][ T3765] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007fffd37698d8
[ 1745.297754][ T3765]  </TASK>
[ 1747.628102][ T3788] netlink: set zone limit has 8 unknown bytes
[ 1747.813384][ T3785] EXT4-fs warning: 2 callbacks suppressed
[ 1747.813399][ T3785] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7197: No space for directory leaf checksum. Please run e2fsck -D.
[ 1748.073734][ T3785] EXT4-fs error: 2 callbacks suppressed
[ 1748.073750][ T3785] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7197: checksumming directory block 0
[ 1748.303942][ T3785] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1748.435116][ T3785] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7197: No space for directory leaf checksum. Please run e2fsck -D.
[ 1748.585956][ T3785] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7197: checksumming directory block 0
[ 1748.586141][ T3785] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1748.586262][ T3785] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7197: No space for directory leaf checksum. Please run e2fsck -D.
[ 1748.586283][ T3785] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7197: checksumming directory block 0
[ 1748.586401][ T3785] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1748.586473][ T3785] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7197: No space for directory leaf checksum. Please run e2fsck -D.
[ 1748.586493][ T3785] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7197: checksumming directory block 0
[ 1748.586605][ T3785] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1748.586637][ T3785] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1748.586653][ T3785] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1748.741919][ T3793] [U] ^@
[ 1749.572785][ T3816] nbd: must specify at least one socket
[ 1749.611424][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7205'.
[ 1750.190923][ T3826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7209'.
[ 1750.295923][ T3830] openvswitch: HfR: Dropping previously announced user features
[ 1751.343009][ T3849] FAULT_INJECTION: forcing a failure.
[ 1751.343009][ T3849] name failslab, interval 1, probability 0, space 0, times 0
[ 1751.449705][ T3849] CPU: 0 UID: 0 PID: 3849 Comm: syz.6.7214 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1751.449734][ T3849] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1751.449741][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1751.449750][ T3849] Call Trace:
[ 1751.449756][ T3849]  <TASK>
[ 1751.449763][ T3849]  dump_stack_lvl+0x100/0x190
[ 1751.449790][ T3849]  should_fail_ex.cold+0x5/0xa
[ 1751.449808][ T3849]  should_failslab+0xc2/0x120
[ 1751.449831][ T3849]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1751.449849][ T3849]  ? sp_alloc+0x27/0x160
[ 1751.449868][ T3849]  sp_alloc+0x27/0x160
[ 1751.449884][ T3849]  mpol_set_shared_policy+0xa5/0x8a0
[ 1751.449903][ T3849]  ? __pfx_shmem_set_policy+0x10/0x10
[ 1751.449926][ T3849]  mbind_range+0x339/0x550
[ 1751.449943][ T3849]  do_mbind+0x7de/0xfd0
[ 1751.449970][ T3849]  ? __might_fault+0xc5/0x140
[ 1751.449988][ T3849]  ? __pfx_do_mbind+0x10/0x10
[ 1751.450007][ T3849]  ? _copy_from_user+0x59/0xd0
[ 1751.450031][ T3849]  ? __pfx_get_nodes+0x10/0x10
[ 1751.450055][ T3849]  kernel_mbind+0x1b7/0x200
[ 1751.450076][ T3849]  ? __pfx_kernel_mbind+0x10/0x10
[ 1751.450097][ T3849]  do_syscall_64+0x106/0xf80
[ 1751.450113][ T3849]  ? clear_bhb_loop+0x40/0x90
[ 1751.450131][ T3849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1751.450146][ T3849] RIP: 0033:0x7f10b019c629
[ 1751.450160][ T3849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1751.450175][ T3849] RSP: 002b:00007f10b0f96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1751.450190][ T3849] RAX: ffffffffffffffda RBX: 00007f10b0416090 RCX: 00007f10b019c629
[ 1751.450200][ T3849] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000
[ 1751.450210][ T3849] RBP: 00007f10b0232b39 R08: 0000000000000003 R09: 0000000000000003
[ 1751.450218][ T3849] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[ 1751.450227][ T3849] R13: 00007f10b0416128 R14: 00007f10b0416090 R15: 00007fffd37698d8
[ 1751.450247][ T3849]  </TASK>
[ 1753.532068][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7222'.
[ 1753.763145][ T3879] openvswitch: HfR: Dropping previously announced user features
[ 1753.941213][ T3873] snd_aloop snd_aloop.0: Parsing timer source '
' failed with -22
[ 1756.070176][ T3893] [U] ^@
[ 1756.738595][ T3918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7232'.
[ 1757.181299][ T3925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7234'.
[ 1757.379310][ T3929] openvswitch: HfR: Dropping previously announced user features
[ 1760.191659][ T3975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7246'.
[ 1760.343509][ T3976] openvswitch: HfR: Dropping previously announced user features
[ 1761.133937][ T3990] FAULT_INJECTION: forcing a failure.
[ 1761.133937][ T3990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1761.240846][ T3990] CPU: 0 UID: 0 PID: 3990 Comm: syz.6.7251 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1761.240878][ T3990] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1761.240884][ T3990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1761.240893][ T3990] Call Trace:
[ 1761.240898][ T3990]  <TASK>
[ 1761.240904][ T3990]  dump_stack_lvl+0x100/0x190
[ 1761.240930][ T3990]  should_fail_ex.cold+0x5/0xa
[ 1761.240947][ T3990]  _copy_to_user+0x32/0xd0
[ 1761.240968][ T3990]  simple_read_from_buffer+0xcb/0x170
[ 1761.240989][ T3990]  proc_fail_nth_read+0x1af/0x230
[ 1761.241013][ T3990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1761.241037][ T3990]  ? rw_verify_area+0xce/0x6d0
[ 1761.241054][ T3990]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1761.241076][ T3990]  vfs_read+0x1e4/0xb30
[ 1761.241097][ T3990]  ? __pfx_vfs_read+0x10/0x10
[ 1761.241115][ T3990]  ? __fget_files+0x215/0x3d0
[ 1761.241138][ T3990]  ? __fget_files+0x21f/0x3d0
[ 1761.241162][ T3990]  ksys_read+0x12a/0x250
[ 1761.241180][ T3990]  ? __pfx_ksys_read+0x10/0x10
[ 1761.241204][ T3990]  do_syscall_64+0x106/0xf80
[ 1761.241219][ T3990]  ? clear_bhb_loop+0x40/0x90
[ 1761.241237][ T3990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1761.241251][ T3990] RIP: 0033:0x7f10b015cece
[ 1761.241264][ T3990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1761.241278][ T3990] RSP: 002b:00007f10b0fb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1761.241293][ T3990] RAX: ffffffffffffffda RBX: 00007f10b0fb76c0 RCX: 00007f10b015cece
[ 1761.241302][ T3990] RDX: 000000000000000f RSI: 00007f10b0fb70a0 RDI: 0000000000000008
[ 1761.241311][ T3990] RBP: 00007f10b0fb7090 R08: 0000000000000000 R09: 0000000000000000
[ 1761.241320][ T3990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1761.241328][ T3990] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007fffd37698d8
[ 1761.241347][ T3990]  </TASK>
[ 1763.086861][ T4008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7256'.
[ 1765.333927][ T4023] [U] ^@
[ 1765.739917][ T4049] FAULT_INJECTION: forcing a failure.
[ 1765.739917][ T4049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1765.865157][ T4050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7267'.
[ 1765.883473][ T4049] CPU: 0 UID: 0 PID: 4049 Comm: syz.4.7268 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1765.883501][ T4049] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1765.883507][ T4049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1765.883517][ T4049] Call Trace:
[ 1765.883523][ T4049]  <TASK>
[ 1765.883530][ T4049]  dump_stack_lvl+0x100/0x190
[ 1765.883555][ T4049]  should_fail_ex.cold+0x5/0xa
[ 1765.883572][ T4049]  _copy_from_user+0x2e/0xd0
[ 1765.883594][ T4049]  copy_msghdr_from_user+0x9f/0x4f0
[ 1765.883614][ T4049]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1765.883636][ T4049]  ? rcu_is_watching+0x12/0xc0
[ 1765.883656][ T4049]  ? ___sys_sendmsg+0x19d/0x1e0
[ 1765.883672][ T4049]  ? kfree+0x2ec/0x6b0
[ 1765.883691][ T4049]  ___sys_sendmsg+0x106/0x1e0
[ 1765.883710][ T4049]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1765.883745][ T4049]  ? __pfx___might_resched+0x10/0x10
[ 1765.883768][ T4049]  __sys_sendmmsg+0x205/0x430
[ 1765.883784][ T4049]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1765.883804][ T4049]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1765.883828][ T4049]  ? fput+0x79/0x100
[ 1765.883842][ T4049]  ? ksys_write+0x1ac/0x250
[ 1765.883861][ T4049]  ? __pfx_ksys_write+0x10/0x10
[ 1765.883890][ T4049]  __x64_sys_sendmmsg+0x9c/0x100
[ 1765.883904][ T4049]  ? lockdep_hardirqs_on+0x78/0x100
[ 1765.883918][ T4049]  do_syscall_64+0x106/0xf80
[ 1765.883933][ T4049]  ? clear_bhb_loop+0x40/0x90
[ 1765.883950][ T4049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1765.883965][ T4049] RIP: 0033:0x7fc0a039c629
[ 1765.883978][ T4049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1765.883993][ T4049] RSP: 002b:00007fc0a1207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1765.884007][ T4049] RAX: ffffffffffffffda RBX: 00007fc0a0615fa0 RCX: 00007fc0a039c629
[ 1765.884017][ T4049] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000003
[ 1765.884025][ T4049] RBP: 00007fc0a1207090 R08: 0000000000000000 R09: 0000000000000000
[ 1765.884034][ T4049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1765.884042][ T4049] R13: 00007fc0a0616038 R14: 00007fc0a0615fa0 R15: 00007ffe80114098
[ 1765.884061][ T4049]  </TASK>
[ 1767.469284][ T4059] nbd: must specify at least one socket
[ 1770.001493][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7284'.
[ 1771.852925][ T4146] FAULT_INJECTION: forcing a failure.
[ 1771.852925][ T4146] name failslab, interval 1, probability 0, space 0, times 0
[ 1771.938853][ T4146] CPU: 0 UID: 0 PID: 4146 Comm: syz.4.7294 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1771.938880][ T4146] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1771.938887][ T4146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1771.938896][ T4146] Call Trace:
[ 1771.938901][ T4146]  <TASK>
[ 1771.938908][ T4146]  dump_stack_lvl+0x100/0x190
[ 1771.938933][ T4146]  should_fail_ex.cold+0x5/0xa
[ 1771.938950][ T4146]  should_failslab+0xc2/0x120
[ 1771.938971][ T4146]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 1771.938991][ T4146]  ? __alloc_skb+0x140/0x710
[ 1771.939016][ T4146]  __alloc_skb+0x140/0x710
[ 1771.939035][ T4146]  ? __alloc_skb+0x5b7/0x710
[ 1771.939056][ T4146]  ? __pfx___alloc_skb+0x10/0x10
[ 1771.939077][ T4146]  ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110
[ 1771.939101][ T4146]  __ip6_append_data+0x36af/0x4de0
[ 1771.939122][ T4146]  ? __pfx_raw6_getfrag+0x10/0x10
[ 1771.939139][ T4146]  ? find_held_lock+0x2b/0x80
[ 1771.939164][ T4146]  ? __pfx___ip6_append_data+0x10/0x10
[ 1771.939182][ T4146]  ? __pfx_ip6_mtu+0x10/0x10
[ 1771.939195][ T4146]  ? ip6_setup_cork+0x5be/0x14c0
[ 1771.939214][ T4146]  ip6_append_data+0x10b/0x410
[ 1771.939232][ T4146]  ? __pfx_raw6_getfrag+0x10/0x10
[ 1771.939249][ T4146]  rawv6_sendmsg+0x16a0/0x4750
[ 1771.939268][ T4146]  ? aa_profile_af_perm+0x2c0/0x390
[ 1771.939290][ T4146]  ? __pfx_rawv6_sendmsg+0x10/0x10
[ 1771.939305][ T4146]  ? check_irq_usage+0x7b0/0x810
[ 1771.939325][ T4146]  ? __lock_acquire+0x4a5/0x2630
[ 1771.939358][ T4146]  ? __import_iovec+0x1d2/0x640
[ 1771.939379][ T4146]  ? __pfx_rawv6_sendmsg+0x10/0x10
[ 1771.939396][ T4146]  ? inet_sendmsg+0x11c/0x140
[ 1771.939414][ T4146]  inet_sendmsg+0x11c/0x140
[ 1771.939432][ T4146]  ____sys_sendmsg+0x9ad/0xc30
[ 1771.939452][ T4146]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1771.939472][ T4146]  ? rcu_is_watching+0x12/0xc0
[ 1771.939492][ T4146]  ? ___sys_sendmsg+0x19d/0x1e0
[ 1771.939509][ T4146]  ? kfree+0x2ec/0x6b0
[ 1771.939527][ T4146]  ___sys_sendmsg+0x190/0x1e0
[ 1771.939546][ T4146]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1771.939589][ T4146]  ? __pfx___might_resched+0x10/0x10
[ 1771.939613][ T4146]  __sys_sendmmsg+0x205/0x430
[ 1771.939629][ T4146]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1771.939649][ T4146]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1771.939673][ T4146]  ? fput+0x79/0x100
[ 1771.939687][ T4146]  ? ksys_write+0x1ac/0x250
[ 1771.939705][ T4146]  ? __pfx_ksys_write+0x10/0x10
[ 1771.939733][ T4146]  __x64_sys_sendmmsg+0x9c/0x100
[ 1771.939747][ T4146]  ? lockdep_hardirqs_on+0x78/0x100
[ 1771.939764][ T4146]  do_syscall_64+0x106/0xf80
[ 1771.939779][ T4146]  ? clear_bhb_loop+0x40/0x90
[ 1771.939796][ T4146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1771.939811][ T4146] RIP: 0033:0x7fc0a039c629
[ 1771.939824][ T4146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1771.939838][ T4146] RSP: 002b:00007fc0a1207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1771.939853][ T4146] RAX: ffffffffffffffda RBX: 00007fc0a0615fa0 RCX: 00007fc0a039c629
[ 1771.939863][ T4146] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000003
[ 1771.939872][ T4146] RBP: 00007fc0a1207090 R08: 0000000000000000 R09: 0000000000000000
[ 1771.939880][ T4146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1771.939889][ T4146] R13: 00007fc0a0616038 R14: 00007fc0a0615fa0 R15: 00007ffe80114098
[ 1771.939908][ T4146]  </TASK>
[ 1772.274384][ T4137] [U] ^@
[ 1772.566279][ T4149] nbd: must specify at least one socket
[ 1773.443176][ T1436] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1773.542905][ T4162] openvswitch: HfR: Dropping previously announced user features
[ 1773.795337][ T1436] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1773.880721][ T4167] netlink: 62 bytes leftover after parsing attributes in process `syz.6.7302'.
[ 1774.055394][ T1436] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1774.224734][ T1436] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1774.666018][ T4176] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1774.708216][ T1436] gretap0: left allmulticast mode
[ 1774.748329][ T1436] gretap0: left promiscuous mode
[ 1774.769727][ T1436] bridge0: port 3(gretap0) entered disabled state
[ 1774.786567][ T4176] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1774.855258][ T1436] bridge_slave_0: left allmulticast mode
[ 1774.885766][ T1436] bridge_slave_0: left promiscuous mode
[ 1774.915499][ T4176] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1774.958759][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1775.107726][ T4176] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1775.412663][ T4188] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1775.561973][ T4188] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1775.678568][ T4188] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1775.848648][ T4188] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1776.359718][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1776.422825][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1776.499296][ T1436] bond0 (unregistering): Released all slaves
[ 1776.553014][ T4200] openvswitch: HfR: Dropping previously announced user features
[ 1776.829505][ T1436] i: left promiscuous mode
[ 1776.854168][ T4212] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1777.004099][ T4212] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1777.084433][ T1436] HfR: left promiscuous mode
[ 1777.090593][ T4212] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1777.211137][ T4212] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1777.532322][ T4223] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1777.707447][ T4223] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1777.843457][ T4223] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1778.007728][ T4223] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1778.412619][ T4239] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1778.463276][ T4240] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1778.549901][ T4239] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1778.563840][ T4244] openvswitch: HfR: Dropping previously announced user features
[ 1778.669295][ T4239] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1778.792438][ T4246] FAULT_INJECTION: forcing a failure.
[ 1778.792438][ T4246] name failslab, interval 1, probability 0, space 0, times 0
[ 1778.843182][ T4239] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1778.879622][ T4250] nbd: must specify at least one socket
[ 1778.921521][ T4232] [U] ^@
[ 1779.221195][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.5.7323 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1779.221225][ T4246] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1779.221231][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1779.221240][ T4246] Call Trace:
[ 1779.221246][ T4246]  <TASK>
[ 1779.221253][ T4246]  dump_stack_lvl+0x100/0x190
[ 1779.221280][ T4246]  should_fail_ex.cold+0x5/0xa
[ 1779.221298][ T4246]  ? __netlink_kernel_create+0x181/0x750
[ 1779.221314][ T4246]  should_failslab+0xc2/0x120
[ 1779.221337][ T4246]  __kmalloc_noprof+0xe0/0x850
[ 1779.221360][ T4246]  __netlink_kernel_create+0x181/0x750
[ 1779.221377][ T4246]  ? __pfx___netlink_kernel_create+0x10/0x10
[ 1779.221400][ T4246]  fib_net_init+0x26d/0x3f0
[ 1779.221415][ T4246]  ? is_module_address+0x69/0xf0
[ 1779.221433][ T4246]  ? __pfx_fib_net_init+0x10/0x10
[ 1779.221449][ T4246]  ? timer_init_key+0x150/0x340
[ 1779.221464][ T4246]  ? __pfx_nl_fib_input+0x10/0x10
[ 1779.221483][ T4246]  ? devinet_init_net+0x56c/0x8d0
[ 1779.221503][ T4246]  ? __pfx_fib_net_init+0x10/0x10
[ 1779.221518][ T4246]  ops_init+0x1e2/0x5f0
[ 1779.221535][ T4246]  setup_net+0x118/0x3a0
[ 1779.221551][ T4246]  ? __pfx_setup_net+0x10/0x10
[ 1779.221564][ T4246]  ? lockdep_init_map_type+0x5c/0x250
[ 1779.221593][ T4246]  ? mutex_init_lockep+0x110/0x150
[ 1779.221616][ T4246]  copy_net_ns+0x46f/0x7c0
[ 1779.221636][ T4246]  create_new_namespaces+0x3ea/0xac0
[ 1779.221666][ T4246]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1779.221683][ T4246]  ksys_unshare+0x455/0xab0
[ 1779.221704][ T4246]  ? native_tss_update_io_bitmap+0x3d6/0x740
[ 1779.221727][ T4246]  ? __pfx_ksys_unshare+0x10/0x10
[ 1779.221752][ T4246]  __x64_sys_unshare+0x31/0x40
[ 1779.221770][ T4246]  do_syscall_64+0x106/0xf80
[ 1779.221786][ T4246]  ? clear_bhb_loop+0x40/0x90
[ 1779.221804][ T4246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.221819][ T4246] RIP: 0033:0x7fcbbc99c629
[ 1779.221832][ T4246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1779.221847][ T4246] RSP: 002b:00007fcbbd938028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1779.221863][ T4246] RAX: ffffffffffffffda RBX: 00007fcbbcc15fa0 RCX: 00007fcbbc99c629
[ 1779.221873][ T4246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1779.221882][ T4246] RBP: 00007fcbbca32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1779.221891][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1779.221899][ T4246] R13: 00007fcbbcc16038 R14: 00007fcbbcc15fa0 R15: 00007ffc38cb0c68
[ 1779.221919][ T4246]  </TASK>
[ 1780.663284][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7330'.
[ 1781.237182][ T4272] EXT4-fs warning: 2 callbacks suppressed
[ 1781.237196][ T4272] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1781.422202][ T4272] EXT4-fs error: 2 callbacks suppressed
[ 1781.422216][ T4272] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1781.521140][ T4272] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1781.639355][ T4272] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1781.954358][ T4279] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1782.070861][ T4279] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1782.165367][ T4279] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1782.200810][ T1436] hsr_slave_0: left promiscuous mode
[ 1782.241467][ T1436] hsr_slave_1: left promiscuous mode
[ 1782.264609][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1782.284760][ T4279] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1782.318833][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1782.389169][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1782.434493][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1782.612330][ T1436] veth1_macvtap: left promiscuous mode
[ 1782.643488][ T1436] veth0_macvtap: left promiscuous mode
[ 1783.489265][ T1436] team0 (unregistering): Port device team_slave_1 removed
[ 1783.569197][ T1436] team0 (unregistering): Port device team_slave_0 removed
[ 1784.259153][ T4287] openvswitch: HfR: Dropping previously announced user features
[ 1784.278196][ T4292] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1784.402999][ T4292] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1784.510892][ T4292] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1784.665779][ T4292] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1784.941726][ T4303] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1785.123470][ T4303] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1785.215830][ T4303] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1785.363186][ T4303] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1785.715324][ T4320] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1785.872932][ T4320] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1785.992657][ T4320] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1786.119387][ T4320] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1786.391924][ T4330] netlink: 'syz.6.7347': attribute type 4 has an invalid length.
[ 1786.525386][ T4336] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1786.654609][ T4336] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1786.694259][ T4330] netlink: 'syz.6.7347': attribute type 1 has an invalid length.
[ 1786.784383][ T4336] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1786.910217][ T4336] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1787.285580][ T4342] openvswitch: HfR: Dropping previously announced user features
[ 1787.531232][ T4338] [U] ^@
[ 1787.981940][T28248] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1788.484502][ T4363] nbd: must specify at least one socket
[ 1790.195434][ T4389] openvswitch: HfR: Dropping previously announced user features
[ 1791.588808][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.596071][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.320836][ T4432] openvswitch: HfR: Dropping previously announced user features
[ 1793.782694][ T4447] [U] ^@
[ 1794.403847][ T4469] openvswitch: HfR: Dropping previously announced user features
[ 1794.701778][ T4474] FAULT_INJECTION: forcing a failure.
[ 1794.701778][ T4474] name failslab, interval 1, probability 0, space 0, times 0
[ 1794.833232][ T4474] CPU: 0 UID: 0 PID: 4474 Comm: syz.1.7376 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1794.833261][ T4474] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1794.833267][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1794.833277][ T4474] Call Trace:
[ 1794.833283][ T4474]  <TASK>
[ 1794.833289][ T4474]  dump_stack_lvl+0x100/0x190
[ 1794.833316][ T4474]  should_fail_ex.cold+0x5/0xa
[ 1794.833334][ T4474]  ? tomoyo_encode2+0xfb/0x3c0
[ 1794.833356][ T4474]  should_failslab+0xc2/0x120
[ 1794.833379][ T4474]  __kmalloc_noprof+0xe0/0x850
[ 1794.833398][ T4474]  ? d_absolute_path+0x136/0x1b0
[ 1794.833418][ T4474]  tomoyo_encode2+0xfb/0x3c0
[ 1794.833443][ T4474]  tomoyo_encode+0x29/0x50
[ 1794.833464][ T4474]  tomoyo_realpath_from_path+0x18c/0x690
[ 1794.833492][ T4474]  tomoyo_path_number_perm+0x23c/0x580
[ 1794.833511][ T4474]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1794.833532][ T4474]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1794.833551][ T4474]  ? find_held_lock+0x2b/0x80
[ 1794.833573][ T4474]  ? rcu_read_unlock+0x17/0x60
[ 1794.833599][ T4474]  ? do_raw_spin_lock+0x128/0x260
[ 1794.833618][ T4474]  ? find_held_lock+0x2b/0x80
[ 1794.833649][ T4474]  ? __pfx_d_add+0x10/0x10
[ 1794.833663][ T4474]  ? d_alloc+0x176/0x1e0
[ 1794.833684][ T4474]  ? current_check_access_path+0x281/0x460
[ 1794.833708][ T4474]  ? __pfx_current_check_access_path+0x10/0x10
[ 1794.833731][ T4474]  ? simple_lookup+0x105/0x1d0
[ 1794.833751][ T4474]  ? lookup_one_qstr_excl+0xb3/0x250
[ 1794.833773][ T4474]  tomoyo_path_mkdir+0x9b/0xe0
[ 1794.833790][ T4474]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[ 1794.833812][ T4474]  security_path_mkdir+0x154/0x2e0
[ 1794.833837][ T4474]  filename_mkdirat+0x168/0x5e0
[ 1794.833861][ T4474]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1794.833884][ T4474]  ? strncpy_from_user+0x19d/0x2d0
[ 1794.833914][ T4474]  ? do_getname+0x191/0x390
[ 1794.833932][ T4474]  __x64_sys_mkdir+0x6b/0x90
[ 1794.833956][ T4474]  do_syscall_64+0x106/0xf80
[ 1794.833972][ T4474]  ? clear_bhb_loop+0x40/0x90
[ 1794.833991][ T4474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1794.834007][ T4474] RIP: 0033:0x7f94d299c629
[ 1794.834022][ T4474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1794.834037][ T4474] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1794.834052][ T4474] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1794.834063][ T4474] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100
[ 1794.834073][ T4474] RBP: 00007f94d2a32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1794.834083][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1794.834093][ T4474] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1794.834114][ T4474]  </TASK>
[ 1794.834153][ T4474] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1795.971091][ T4485] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1796.098044][ T4485] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1796.212080][ T4485] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1796.381685][ T4485] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1796.894881][ T4501] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1797.033781][ T4505] openvswitch: HfR: Dropping previously announced user features
[ 1797.044876][ T4501] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1797.172613][ T4501] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1797.317208][ T4501] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1797.725696][ T4517] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1797.858279][ T4517] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1797.954800][ T4517] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1798.117068][ T4517] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1798.584271][ T4527] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1798.726707][ T4527] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1798.793163][T11768] Bluetooth: hci0: command 0x0406 tx timeout
[ 1798.840886][ T4527] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1798.965593][ T4527] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1799.646096][ T4549] futex_wake_op: syz.6.7401 tries to shift op by -2048; fix this program
[ 1799.769633][ T4550] size and base must be multiples of 4 kiB
[ 1799.775458][ T4550] CPU: 0 UID: 0 PID: 4550 Comm: syz.6.7401 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1799.775484][ T4550] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1799.775490][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1799.775501][ T4550] Call Trace:
[ 1799.775507][ T4550]  <TASK>
[ 1799.775513][ T4550]  dump_stack_lvl+0x100/0x190
[ 1799.775540][ T4550]  mtrr_add.cold+0x74/0x87
[ 1799.775557][ T4550]  mtrr_ioctl+0x25a/0xcf0
[ 1799.775577][ T4550]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1799.775600][ T4550]  ? find_held_lock+0x2b/0x80
[ 1799.775627][ T4550]  ? __fget_files+0x21f/0x3d0
[ 1799.775648][ T4550]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1799.775666][ T4550]  proc_reg_unlocked_ioctl+0x229/0x320
[ 1799.775685][ T4550]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[ 1799.775705][ T4550]  __x64_sys_ioctl+0x18e/0x210
[ 1799.775725][ T4550]  do_syscall_64+0x106/0xf80
[ 1799.775740][ T4550]  ? clear_bhb_loop+0x40/0x90
[ 1799.775758][ T4550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1799.775773][ T4550] RIP: 0033:0x7f10b019c629
[ 1799.775786][ T4550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1799.775801][ T4550] RSP: 002b:00007f10b0f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1799.775816][ T4550] RAX: ffffffffffffffda RBX: 00007f10b0416090 RCX: 00007f10b019c629
[ 1799.775826][ T4550] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000
[ 1799.775835][ T4550] RBP: 00007f10b0232b39 R08: 0000000000000000 R09: 0000000000000000
[ 1799.775844][ T4550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1799.775852][ T4550] R13: 00007f10b0416128 R14: 00007f10b0416090 R15: 00007fffd37698d8
[ 1799.775871][ T4550]  </TASK>
[ 1800.016986][ T4550] kafs: addr_prefs: Invalid Command
[ 1800.208401][ T4542] [U] ^@
[ 1800.255455][ T4550] netlink: 342 bytes leftover after parsing attributes in process `syz.6.7401'.
[ 1800.634732][ T4560] openvswitch: HfR: Dropping previously announced user features
[ 1801.392845][ T4572] binder: 4571:4572 ioctl c0306201 200000000000 returned -11
[ 1802.109370][ T4590] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string
[ 1802.136440][ T4589] openvswitch: HfR: Dropping previously announced user features
[ 1802.843437][T28248] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6
[ 1803.964766][ T4631] openvswitch: HfR: Dropping previously announced user features
[ 1804.220960][ T4621] [U] ^@
[ 1804.587944][ T4643] size and base must be multiples of 4 kiB
[ 1804.624645][ T4643] CPU: 0 UID: 0 PID: 4643 Comm: syz.5.7429 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1804.624674][ T4643] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1804.624679][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1804.624688][ T4643] Call Trace:
[ 1804.624693][ T4643]  <TASK>
[ 1804.624700][ T4643]  dump_stack_lvl+0x100/0x190
[ 1804.624725][ T4643]  mtrr_add.cold+0x74/0x87
[ 1804.624741][ T4643]  mtrr_ioctl+0x25a/0xcf0
[ 1804.624761][ T4643]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1804.624783][ T4643]  ? find_held_lock+0x2b/0x80
[ 1804.624808][ T4643]  ? __fget_files+0x21f/0x3d0
[ 1804.624828][ T4643]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1804.624846][ T4643]  proc_reg_unlocked_ioctl+0x229/0x320
[ 1804.624865][ T4643]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[ 1804.624884][ T4643]  __x64_sys_ioctl+0x18e/0x210
[ 1804.624903][ T4643]  do_syscall_64+0x106/0xf80
[ 1804.624918][ T4643]  ? clear_bhb_loop+0x40/0x90
[ 1804.624936][ T4643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1804.624951][ T4643] RIP: 0033:0x7fcbbc99c629
[ 1804.624963][ T4643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1804.624977][ T4643] RSP: 002b:00007fcbbd917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1804.624992][ T4643] RAX: ffffffffffffffda RBX: 00007fcbbcc16090 RCX: 00007fcbbc99c629
[ 1804.625001][ T4643] RDX: 0000000000000004 RSI: 00000000400c4d01 RDI: 0000000000000004
[ 1804.625010][ T4643] RBP: 00007fcbbca32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1804.625019][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1804.625027][ T4643] R13: 00007fcbbcc16128 R14: 00007fcbbcc16090 R15: 00007ffc38cb0c68
[ 1804.625046][ T4643]  </TASK>
[ 1805.946566][ T4642] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1805.994925][ T4642] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1806.055170][ T4642] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1806.118081][ T4642] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1806.168737][ T4642] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1806.283119][ T4642] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1806.323908][ T4642] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1806.335595][ T4672] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7437'.
[ 1806.402122][ T4642] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1806.493907][ T4673] openvswitch: HfR: Dropping previously announced user features
[ 1806.612868][T28248] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1807.992264][T28248] Bluetooth: hci2: command 0x0406 tx timeout
[ 1808.152394][T28248] Bluetooth: hci0: command 0x0406 tx timeout
[ 1808.292248][T28248] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1809.062131][ T4716] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7449'.
[ 1809.132856][ T4716] openvswitch: HfR: Dropping previously announced user features
[ 1809.434854][ T4708] [U] ^@
[ 1810.052862][T28248] Bluetooth: hci2: command 0x0406 tx timeout
[ 1810.211122][T28248] Bluetooth: hci0: command 0x0406 tx timeout
[ 1810.373349][T28248] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1810.668075][ T4745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7460'.
[ 1810.685689][ T4747] nbd: must specify at least one socket
[ 1810.760032][ T4748] openvswitch: HfR: Dropping previously announced user features
[ 1811.117611][ T4753] netlink: 334 bytes leftover after parsing attributes in process `syz.6.7462'.
[ 1811.455386][ T4767] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12)
[ 1812.431119][ T4789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7473'.
[ 1812.449790][T28248] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1812.480476][ T4789] openvswitch: HfR: Dropping previously announced user features
[ 1813.467235][ T4808] bridge0: port 3(dummy0) entered blocking state
[ 1813.533877][ T4808] bridge0: port 3(dummy0) entered disabled state
[ 1813.574674][ T4808] dummy0: entered allmulticast mode
[ 1813.635910][ T4808] dummy0: entered promiscuous mode
[ 1813.680346][ T4808] bridge0: port 3(dummy0) entered blocking state
[ 1813.686895][ T4808] bridge0: port 3(dummy0) entered forwarding state
[ 1814.032678][ T4822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7484'.
[ 1814.101549][ T4826] openvswitch: HfR: Dropping previously announced user features
[ 1815.522390][ T4861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7497'.
[ 1815.655136][ T4862] openvswitch: HfR: Dropping previously announced user features
[ 1816.781697][ T4883] vhci_hcd vhci_hcd.2: default hub control req: 2307 v0002 i0006 l6
[ 1816.932108][ T4867] [U] ^@
[ 1817.271486][ T4880] nbd: must specify at least one socket
[ 1817.319346][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7507'.
[ 1817.438681][ T4900] openvswitch: HfR: Dropping previously announced user features
[ 1818.100595][ T4914] FAULT_INJECTION: forcing a failure.
[ 1818.100595][ T4914] name failslab, interval 1, probability 0, space 0, times 0
[ 1818.216131][ T4914] CPU: 0 UID: 0 PID: 4914 Comm: syz.1.7511 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1818.216160][ T4914] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1818.216166][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1818.216176][ T4914] Call Trace:
[ 1818.216182][ T4914]  <TASK>
[ 1818.216189][ T4914]  dump_stack_lvl+0x100/0x190
[ 1818.216216][ T4914]  should_fail_ex.cold+0x5/0xa
[ 1818.216234][ T4914]  ? vhost_dev_set_owner+0x20c/0xa30
[ 1818.216253][ T4914]  should_failslab+0xc2/0x120
[ 1818.216275][ T4914]  __kmalloc_noprof+0xe0/0x850
[ 1818.216298][ T4914]  vhost_dev_set_owner+0x20c/0xa30
[ 1818.216329][ T4914]  vhost_dev_ioctl+0x521/0xe20
[ 1818.216347][ T4914]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1818.216373][ T4914]  ? __pfx_vhost_dev_ioctl+0x10/0x10
[ 1818.216399][ T4914]  vhost_vsock_dev_ioctl+0x320/0xb60
[ 1818.216416][ T4914]  ? __fget_files+0x215/0x3d0
[ 1818.216435][ T4914]  ? hook_file_ioctl_common+0x146/0x410
[ 1818.216456][ T4914]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1818.216475][ T4914]  ? __fget_files+0x21f/0x3d0
[ 1818.216498][ T4914]  ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10
[ 1818.216517][ T4914]  __x64_sys_ioctl+0x18e/0x210
[ 1818.216536][ T4914]  do_syscall_64+0x106/0xf80
[ 1818.216559][ T4914]  ? clear_bhb_loop+0x40/0x90
[ 1818.216578][ T4914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1818.216595][ T4914] RIP: 0033:0x7f94d299c629
[ 1818.216608][ T4914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1818.216623][ T4914] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1818.216638][ T4914] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1818.216648][ T4914] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000008
[ 1818.216657][ T4914] RBP: 00007f94d2a32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1818.216669][ T4914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1818.216677][ T4914] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1818.216697][ T4914]  </TASK>
[ 1819.658389][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7518'.
[ 1819.714860][ T4935] openvswitch: HfR: Dropping previously announced user features
[ 1821.701834][ T4951] [U] ^P
[ 1823.129465][ T4986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7529'.
[ 1823.190270][ T4987] openvswitch: HfR: Dropping previously announced user features
[ 1824.600838][T11768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1824.615242][T11768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1824.623234][T11768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1824.630988][T11768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1824.654634][T11768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1824.698400][ T5013] scsi_dev_info_list_add_str: bad dev info string '�' '' ''
[ 1825.088898][ T5014] zswap: compressor  not available
[ 1825.166488][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7539'.
[ 1825.321109][ T5024] openvswitch: HfR: Dropping previously announced user features
[ 1826.689227][T11768] Bluetooth: hci1: command tx timeout
[ 1826.997434][ T2665] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1827.058684][ T5010] chnl_net:caif_netlink_parms(): no params data found
[ 1827.240549][ T2665] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1827.330228][ T2665] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1827.476023][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1827.520269][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1827.570164][ T5010] bridge_slave_0: entered allmulticast mode
[ 1827.593444][ T5010] bridge_slave_0: entered promiscuous mode
[ 1827.675724][ T2665] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1827.733425][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1827.763437][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1827.819469][ T5010] bridge_slave_1: entered allmulticast mode
[ 1827.839483][ T5010] bridge_slave_1: entered promiscuous mode
[ 1827.966876][ T5010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1828.036858][ T5010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1828.212983][ T5010] team0: Port device team_slave_0 added
[ 1828.260473][ T5010] team0: Port device team_slave_1 added
[ 1828.386725][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1828.401001][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1828.443630][ T5038] [U] ^@
[ 1828.463300][ T5010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1828.498369][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1828.514112][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1828.552649][ T5010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1828.623926][ T2665] gretap0: left allmulticast mode
[ 1828.654536][ T2665] gretap0: left promiscuous mode
[ 1828.671082][ T2665] bridge0: port 3(gretap0) entered disabled state
[ 1828.684889][ T5053] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1828.702473][ T2665] bridge_slave_0: left allmulticast mode
[ 1828.708213][ T2665] bridge_slave_0: left promiscuous mode
[ 1828.714458][ T2665] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1828.722218][ T5053] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1828.747997][ T5053] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1828.771577][T11768] Bluetooth: hci1: command tx timeout
[ 1828.824834][ T5053] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1828.967376][ T5057] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1829.024011][ T5057] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1829.071095][ T5057] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1829.129991][ T2665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1829.146884][ T5057] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1829.177670][ T2665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1829.208738][ T2665] bond0 (unregistering): Released all slaves
[ 1829.308493][ T2665] i: left promiscuous mode
[ 1829.345272][ T5010] hsr_slave_0: entered promiscuous mode
[ 1829.378122][ T5010] hsr_slave_1: entered promiscuous mode
[ 1829.406030][ T5010] debugfs: 'hsr0' already exists in 'hsr'
[ 1829.427467][ T5010] Cannot create hsr debugfs directory
[ 1829.456696][ T2665] HfR: left promiscuous mode
[ 1829.495797][ T5063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7548'.
[ 1829.590515][ T5065] openvswitch: HfR: Dropping previously announced user features
[ 1829.694095][ T5064] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1829.816403][ T5064] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1829.896891][ T5064] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1830.000089][ T5064] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1830.213141][ T5074] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1830.290983][ T5074] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1830.368044][ T5074] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1830.440492][ T5074] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1830.840838][T11768] Bluetooth: hci1: command tx timeout
[ 1831.218021][ T5088] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1831.288689][ T5088] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum
[ 1831.342530][ T5088] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D.
[ 1831.430188][ T5088] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0
[ 1831.576496][ T2665] hsr_slave_0: left promiscuous mode
[ 1831.606290][ T2665] hsr_slave_1: left promiscuous mode
[ 1831.624107][ T2665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1831.651903][ T2665] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1831.676583][ T2665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1831.703863][ T2665] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1831.735089][ T2665] veth1_macvtap: left promiscuous mode
[ 1831.749734][ T2665] veth0_macvtap: left promiscuous mode
[ 1831.763521][ T2665] veth1_vlan: left promiscuous mode
[ 1831.774856][ T2665] veth0_vlan: left promiscuous mode
[ 1832.149566][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7558'.
[ 1832.217428][ T2665] team0 (unregistering): Port device team_slave_1 removed
[ 1832.245965][ T2665] team0 (unregistering): Port device team_slave_0 removed
[ 1832.452857][ T5100] openvswitch: HfR: Dropping previously announced user features
[ 1832.920251][T11768] Bluetooth: hci1: command tx timeout
[ 1833.284275][ T5111] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1833.404585][ T5101] [U] ^@
[ 1834.432459][ T5117] Invalid ELF header magic: != ELF
[ 1834.545254][ T5110] kexec: Could not allocate control_code_buffer
[ 1835.086982][ T5133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7567'.
[ 1835.099899][ T5133] openvswitch: HfR: Dropping previously announced user features
[ 1835.281996][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7569'.
[ 1835.862870][ T5149] [U] ^@
[ 1836.354160][ T5153] nbd: must specify at least one socket
[ 1836.715932][ T5162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7576'.
[ 1836.750290][ T5162] openvswitch: HfR: Dropping previously announced user features
[ 1837.932966][ T5186] zswap: compressor  not available
[ 1838.785397][ T5195] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1839.248432][ T5208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7586'.
[ 1839.297857][ T5208] openvswitch: HfR: Dropping previously announced user features
[ 1839.456404][T11768] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[ 1839.463923][T11768] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff
[ 1840.108004][ T5224] FAULT_INJECTION: forcing a failure.
[ 1840.108004][ T5224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1840.152578][ T5224] CPU: 0 UID: 0 PID: 5224 Comm: syz.1.7590 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1840.152605][ T5224] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1840.152610][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1840.152619][ T5224] Call Trace:
[ 1840.152625][ T5224]  <TASK>
[ 1840.152631][ T5224]  dump_stack_lvl+0x100/0x190
[ 1840.152657][ T5224]  should_fail_ex.cold+0x5/0xa
[ 1840.152674][ T5224]  _copy_from_user+0x2e/0xd0
[ 1840.152695][ T5224]  core_sys_select+0x319/0xbb0
[ 1840.152719][ T5224]  ? __pfx_core_sys_select+0x10/0x10
[ 1840.152737][ T5224]  ? get_pid_task+0xfc/0x250
[ 1840.152758][ T5224]  ? get_pid_task+0x106/0x250
[ 1840.152786][ T5224]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1840.152803][ T5224]  ? __fget_files+0x215/0x3d0
[ 1840.152823][ T5224]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1840.152841][ T5224]  kern_select+0x20c/0x270
[ 1840.152862][ T5224]  ? __pfx_kern_select+0x10/0x10
[ 1840.152883][ T5224]  ? __pfx_ksys_write+0x10/0x10
[ 1840.152905][ T5224]  __x64_sys_select+0xbd/0x160
[ 1840.152923][ T5224]  ? do_syscall_64+0x95/0xf80
[ 1840.152937][ T5224]  ? lockdep_hardirqs_on+0x78/0x100
[ 1840.152952][ T5224]  do_syscall_64+0x106/0xf80
[ 1840.152965][ T5224]  ? clear_bhb_loop+0x40/0x90
[ 1840.152982][ T5224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1840.152997][ T5224] RIP: 0033:0x7f94d299c629
[ 1840.153010][ T5224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1840.153024][ T5224] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[ 1840.153038][ T5224] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1840.153048][ T5224] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000004
[ 1840.153057][ T5224] RBP: 00007f94d38de090 R08: 0000000000000000 R09: 0000000000000000
[ 1840.153066][ T5224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1840.153074][ T5224] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1840.153092][ T5224]  </TASK>
[ 1840.406506][ T5226] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1840.897300][ T5239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7595'.
[ 1840.924763][ T5239] openvswitch: HfR: Dropping previously announced user features
[ 1841.168879][ T5246] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7598'.
[ 1841.181556][ T5247] Console: switching to colour VGA+ 80x25
[ 1841.203772][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1841.204131][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1842.325348][ T5261] FAULT_INJECTION: forcing a failure.
[ 1842.325348][ T5261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1842.372108][ T5261] CPU: 0 UID: 0 PID: 5261 Comm: syz.6.7601 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1842.372135][ T5261] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1842.372141][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1842.372150][ T5261] Call Trace:
[ 1842.372155][ T5261]  <TASK>
[ 1842.372161][ T5261]  dump_stack_lvl+0x100/0x190
[ 1842.372187][ T5261]  should_fail_ex.cold+0x5/0xa
[ 1842.372204][ T5261]  core_sys_select+0x9b9/0xbb0
[ 1842.372228][ T5261]  ? __pfx_core_sys_select+0x10/0x10
[ 1842.372246][ T5261]  ? get_pid_task+0xfc/0x250
[ 1842.372266][ T5261]  ? get_pid_task+0x106/0x250
[ 1842.372296][ T5261]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1842.372313][ T5261]  ? __fget_files+0x215/0x3d0
[ 1842.372333][ T5261]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1842.372352][ T5261]  kern_select+0x20c/0x270
[ 1842.372372][ T5261]  ? __pfx_kern_select+0x10/0x10
[ 1842.372393][ T5261]  ? __pfx_ksys_write+0x10/0x10
[ 1842.372415][ T5261]  __x64_sys_select+0xbd/0x160
[ 1842.372434][ T5261]  ? do_syscall_64+0x95/0xf80
[ 1842.372447][ T5261]  ? lockdep_hardirqs_on+0x78/0x100
[ 1842.372462][ T5261]  do_syscall_64+0x106/0xf80
[ 1842.372475][ T5261]  ? clear_bhb_loop+0x40/0x90
[ 1842.372493][ T5261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1842.372507][ T5261] RIP: 0033:0x7f10b019c629
[ 1842.372519][ T5261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1842.372534][ T5261] RSP: 002b:00007f10b0f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[ 1842.372548][ T5261] RAX: ffffffffffffffda RBX: 00007f10b0416090 RCX: 00007f10b019c629
[ 1842.372558][ T5261] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000004
[ 1842.372566][ T5261] RBP: 00007f10b0f96090 R08: 0000000000000000 R09: 0000000000000000
[ 1842.372575][ T5261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1842.372584][ T5261] R13: 00007f10b0416128 R14: 00007f10b0416090 R15: 00007fffd37698d8
[ 1842.372603][ T5261]  </TASK>
[ 1843.137773][ T5272] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7605'.
[ 1843.152333][ T5272] openvswitch: HfR: Dropping previously announced user features
[ 1843.415235][ T5277] futex_wake_op: syz.6.7607 tries to shift op by -2048; fix this program
[ 1843.436693][ T5277] futex_wake_op: syz.6.7607 tries to shift op by -2048; fix this program
[ 1843.580857][ T5281] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7609'.
[ 1843.704997][   T29] audit: type=1804 audit(1843104545.343:44): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.7610" name="/newroot/154/file0" dev="tmpfs" ino=814 res=1 errno=0
[ 1843.781975][   T29] audit: type=1804 audit(1843104545.413:45): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.7610" name="/newroot/154/file0" dev="tmpfs" ino=814 res=1 errno=0
[ 1844.862885][ T5301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7615'.
[ 1844.889489][ T5301] openvswitch: HfR: Dropping previously announced user features
[ 1845.071817][ T5309] FAULT_INJECTION: forcing a failure.
[ 1845.071817][ T5309] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1845.098109][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz.1.7617 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1845.098136][ T5309] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1845.098142][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1845.098151][ T5309] Call Trace:
[ 1845.098157][ T5309]  <TASK>
[ 1845.098163][ T5309]  dump_stack_lvl+0x100/0x190
[ 1845.098189][ T5309]  should_fail_ex.cold+0x5/0xa
[ 1845.098206][ T5309]  _copy_to_user+0x32/0xd0
[ 1845.098228][ T5309]  simple_read_from_buffer+0xcb/0x170
[ 1845.098249][ T5309]  proc_fail_nth_read+0x1af/0x230
[ 1845.098273][ T5309]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1845.098297][ T5309]  ? rw_verify_area+0xce/0x6d0
[ 1845.098314][ T5309]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1845.098337][ T5309]  vfs_read+0x1e4/0xb30
[ 1845.098358][ T5309]  ? __pfx_vfs_read+0x10/0x10
[ 1845.098376][ T5309]  ? __fget_files+0x215/0x3d0
[ 1845.098399][ T5309]  ? __fget_files+0x21f/0x3d0
[ 1845.098423][ T5309]  ksys_read+0x12a/0x250
[ 1845.098442][ T5309]  ? __pfx_ksys_read+0x10/0x10
[ 1845.098466][ T5309]  do_syscall_64+0x106/0xf80
[ 1845.098480][ T5309]  ? clear_bhb_loop+0x40/0x90
[ 1845.098498][ T5309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1845.098513][ T5309] RIP: 0033:0x7f94d295cece
[ 1845.098526][ T5309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1845.098540][ T5309] RSP: 002b:00007f94d38ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1845.098554][ T5309] RAX: ffffffffffffffda RBX: 00007f94d38de6c0 RCX: 00007f94d295cece
[ 1845.098564][ T5309] RDX: 000000000000000f RSI: 00007f94d38de0a0 RDI: 0000000000000006
[ 1845.098572][ T5309] RBP: 00007f94d38de090 R08: 0000000000000000 R09: 0000000000000000
[ 1845.098581][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1845.098589][ T5309] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1845.098608][ T5309]  </TASK>
[ 1846.344511][T28248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1846.356008][T28248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1846.363799][T28248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1846.371406][T28248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1846.384831][T28248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1846.905187][ T5316] chnl_net:caif_netlink_parms(): no params data found
[ 1847.048386][ T5341] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7622'.
[ 1847.111015][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1847.118482][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1847.282844][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1847.303839][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1847.320103][ T5316] bridge_slave_0: entered allmulticast mode
[ 1847.336519][ T5316] bridge_slave_0: entered promiscuous mode
[ 1847.373535][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1847.403265][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1847.413945][ T5316] bridge_slave_1: entered allmulticast mode
[ 1847.428216][ T5316] bridge_slave_1: entered promiscuous mode
[ 1847.544386][ T5316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1847.594490][ T5316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1847.678806][ T5357] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7624'.
[ 1847.688732][ T5359] nbd: must specify at least one socket
[ 1847.698238][ T5316] team0: Port device team_slave_0 added
[ 1847.716369][ T5316] team0: Port device team_slave_1 added
[ 1847.809874][ T5360] openvswitch: HfR: Dropping previously announced user features
[ 1847.863641][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1847.900943][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1848.016575][ T5316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1848.051369][ T5316] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1848.074626][ T5316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1848.128385][ T5316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1848.181245][ T5316] hsr_slave_0: entered promiscuous mode
[ 1848.188083][ T5316] hsr_slave_1: entered promiscuous mode
[ 1848.195198][ T5316] debugfs: 'hsr0' already exists in 'hsr'
[ 1848.200963][ T5316] Cannot create hsr debugfs directory
[ 1848.431886][T28248] Bluetooth: hci3: command tx timeout
[ 1848.766213][ T5390] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7631'.
[ 1849.068436][ T5398] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7634'.
[ 1849.104435][ T5398] openvswitch: HfR: Dropping previously announced user features
[ 1849.473164][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7637'.
[ 1849.609775][ T5413] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7638'.
[ 1849.810739][ T5417] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7640'.
[ 1849.958728][ T5422] ptp ptp0: delete virtual clock ptp1
[ 1850.012707][ T5422] ptp ptp0: only physical clock in use now
[ 1850.510675][T28248] Bluetooth: hci3: command tx timeout
[ 1850.773203][ T5432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7643'.
[ 1850.804656][ T5432] openvswitch: HfR: Dropping previously announced user features
[ 1850.997549][ T5438] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7645'.
[ 1851.282591][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7647'.
[ 1851.488754][ T5445] Invalid ELF header magic: != ELF
[ 1852.002773][ T5460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7651'.
[ 1852.013093][ T5460] openvswitch: HfR: Dropping previously announced user features
[ 1852.439949][ T5473] FAULT_INJECTION: forcing a failure.
[ 1852.439949][ T5473] name failslab, interval 1, probability 0, space 0, times 0
[ 1852.454226][ T5471] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7654'.
[ 1852.467914][ T5473] CPU: 0 UID: 0 PID: 5473 Comm: syz.1.7655 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1852.467942][ T5473] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1852.467948][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1852.467965][ T5473] Call Trace:
[ 1852.467971][ T5473]  <TASK>
[ 1852.467978][ T5473]  dump_stack_lvl+0x100/0x190
[ 1852.468005][ T5473]  should_fail_ex.cold+0x5/0xa
[ 1852.468022][ T5473]  should_failslab+0xc2/0x120
[ 1852.468045][ T5473]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1852.468061][ T5473]  ? snd_seq_fifo_new+0x42/0x270
[ 1852.468084][ T5473]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1852.468109][ T5473]  ? __pfx_snd_seq_open+0x10/0x10
[ 1852.468125][ T5473]  snd_seq_fifo_new+0x42/0x270
[ 1852.468147][ T5473]  snd_seq_open+0x3fe/0x590
[ 1852.468164][ T5473]  ? __pfx_snd_seq_open+0x10/0x10
[ 1852.468179][ T5473]  snd_open+0x22d/0x4c0
[ 1852.468198][ T5473]  ? __pfx_snd_open+0x10/0x10
[ 1852.468216][ T5473]  chrdev_open+0x234/0x6a0
[ 1852.468237][ T5473]  ? __pfx_apparmor_file_open+0x10/0x10
[ 1852.468255][ T5473]  ? __pfx_chrdev_open+0x10/0x10
[ 1852.468277][ T5473]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1852.468303][ T5473]  do_dentry_open+0x6d8/0x1660
[ 1852.468324][ T5473]  ? __pfx_chrdev_open+0x10/0x10
[ 1852.468349][ T5473]  vfs_open+0x82/0x3f0
[ 1852.468367][ T5473]  path_openat+0x208c/0x31a0
[ 1852.468394][ T5473]  ? __pfx_path_openat+0x10/0x10
[ 1852.468422][ T5473]  do_file_open+0x20e/0x430
[ 1852.468445][ T5473]  ? __pfx_do_file_open+0x10/0x10
[ 1852.468480][ T5473]  ? alloc_fd+0x476/0x790
[ 1852.468502][ T5473]  ? do_getname+0x191/0x390
[ 1852.468519][ T5473]  do_sys_openat2+0x10d/0x1e0
[ 1852.468536][ T5473]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1852.468559][ T5473]  __x64_sys_openat+0x12d/0x210
[ 1852.468576][ T5473]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1852.468600][ T5473]  do_syscall_64+0x106/0xf80
[ 1852.468615][ T5473]  ? clear_bhb_loop+0x40/0x90
[ 1852.468633][ T5473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1852.468648][ T5473] RIP: 0033:0x7f94d299c629
[ 1852.468662][ T5473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1852.468677][ T5473] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1852.468692][ T5473] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1852.468703][ T5473] RDX: 00000000001e3800 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1852.468713][ T5473] RBP: 00007f94d2a32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1852.468723][ T5473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1852.468733][ T5473] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1852.468753][ T5473]  </TASK>
[ 1852.752814][T28248] Bluetooth: hci3: command tx timeout
[ 1852.878228][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7656'.
[ 1852.973392][ T5480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7658'.
[ 1852.983549][ T5480] openvswitch: HfR: Dropping previously announced user features
[ 1853.035082][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.041446][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.904297][   T29] audit: type=1800 audit(1843104555.548:46): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7662" name="dbroot" dev="configfs" ino=489352 res=0 errno=0
[ 1854.145189][ T5517] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7666'.
[ 1854.156502][ T5517] openvswitch: HfR: Dropping previously announced user features
[ 1854.830804][T28248] Bluetooth: hci3: command tx timeout
[ 1854.980408][ T5541] random: crng reseeded on system resumption
[ 1855.971709][ T5525] kexec: Could not allocate control_code_buffer
[ 1856.118019][ T5556] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7674'.
[ 1856.128769][ T5556] openvswitch: HfR: Dropping previously announced user features
[ 1856.644634][ T5569] FAULT_INJECTION: forcing a failure.
[ 1856.644634][ T5569] name failslab, interval 1, probability 0, space 0, times 0
[ 1856.681645][ T5569] CPU: 0 UID: 0 PID: 5569 Comm: syz.6.7677 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1856.681674][ T5569] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1856.681681][ T5569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1856.681690][ T5569] Call Trace:
[ 1856.681696][ T5569]  <TASK>
[ 1856.681702][ T5569]  dump_stack_lvl+0x100/0x190
[ 1856.681729][ T5569]  should_fail_ex.cold+0x5/0xa
[ 1856.681747][ T5569]  should_failslab+0xc2/0x120
[ 1856.681770][ T5569]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1856.681789][ T5569]  ? sk_prot_alloc+0x60/0x2a0
[ 1856.681810][ T5569]  sk_prot_alloc+0x60/0x2a0
[ 1856.681829][ T5569]  sk_alloc+0x36/0xe80
[ 1856.681851][ T5569]  inet6_create+0x385/0x12b0
[ 1856.681869][ T5569]  ? inet6_create+0x7f/0x12b0
[ 1856.681886][ T5569]  __sock_create+0x339/0x860
[ 1856.681908][ T5569]  __sys_socket+0x14d/0x260
[ 1856.681929][ T5569]  ? __pfx___sys_socket+0x10/0x10
[ 1856.681956][ T5569]  __x64_sys_socket+0x72/0xb0
[ 1856.681974][ T5569]  ? lockdep_hardirqs_on+0x78/0x100
[ 1856.681990][ T5569]  do_syscall_64+0x106/0xf80
[ 1856.682005][ T5569]  ? clear_bhb_loop+0x40/0x90
[ 1856.682023][ T5569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1856.682039][ T5569] RIP: 0033:0x7f10b019c629
[ 1856.682052][ T5569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1856.682067][ T5569] RSP: 002b:00007f10b0fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1856.682082][ T5569] RAX: ffffffffffffffda RBX: 00007f10b0415fa0 RCX: 00007f10b019c629
[ 1856.682092][ T5569] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a
[ 1856.682101][ T5569] RBP: 00007f10b0232b39 R08: 0000000000000000 R09: 0000000000000000
[ 1856.682110][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1856.682119][ T5569] R13: 00007f10b0416038 R14: 00007f10b0415fa0 R15: 00007fffd37698d8
[ 1856.682138][ T5569]  </TASK>
[ 1857.090903][ T5571] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7678'.
[ 1857.364612][ T5585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7682'.
[ 1857.408238][ T5585] openvswitch: HfR: Dropping previously announced user features
[ 1857.864901][ T5601] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7687'.
[ 1858.828840][ T5624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7691'.
[ 1858.848031][ T5624] openvswitch: HfR: Dropping previously announced user features
[ 1859.734079][ T5645] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7696'.
[ 1860.119323][ T5655] netlink: 330 bytes leftover after parsing attributes in process `syz.6.7698'.
[ 1860.167701][ T5652] zswap: compressor r�Gr�=E�L���H�����)6��:s�� not available
[ 1860.226677][ T5657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7699'.
[ 1860.257381][ T5657] openvswitch: HfR: Dropping previously announced user features
[ 1860.790706][ T5672] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7704'.
[ 1860.830436][ T5672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7704'.
[ 1860.840879][ T5672] veth1_vlan: entered allmulticast mode
[ 1861.239147][ T5686] __nla_validate_parse: 1 callbacks suppressed
[ 1861.239164][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7708'.
[ 1861.296779][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7709'.
[ 1861.327630][ T5688] openvswitch: HfR: Dropping previously announced user features
[ 1861.598230][ T5697] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7712'.
[ 1862.141531][ T5700] EXT4-fs warning: 4 callbacks suppressed
[ 1862.141547][ T5700] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7713: No space for directory leaf checksum. Please run e2fsck -D.
[ 1862.182521][ T5700] EXT4-fs error: 4 callbacks suppressed
[ 1862.182535][ T5700] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7713: checksumming directory block 0
[ 1862.224370][ T5700] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1862.250231][ T5700] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7713: No space for directory leaf checksum. Please run e2fsck -D.
[ 1862.294222][ T5700] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7713: checksumming directory block 0
[ 1862.330970][ T5700] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1862.361582][ T5700] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7713: No space for directory leaf checksum. Please run e2fsck -D.
[ 1862.378612][ T5719] [U] 
[ 1862.381302][ T5719] [U] 
[ 1862.383975][ T5719] [U] 
[ 1862.386644][ T5719] [U] 
[ 1862.391031][ T5719] [U] 
[ 1862.393717][ T5719] [U] 
[ 1862.396387][ T5719] [U] 
[ 1862.399055][ T5719] [U] 
[ 1862.404398][ T5700] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7713: checksumming directory block 0
[ 1862.416976][ T5719] [U] 
[ 1862.419653][ T5719] [U] 
[ 1862.422323][ T5719] [U] 
[ 1862.424990][ T5719] [U] 
[ 1862.433051][ T5700] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1862.443870][ T5719] [U] 
[ 1862.446554][ T5719] [U] 
[ 1862.449222][ T5719] [U] 
[ 1862.451887][ T5719] [U] 
[ 1862.456258][ T5700] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.1.7713: No space for directory leaf checksum. Please run e2fsck -D.
[ 1862.472334][ T5719] [U] 
[ 1862.475014][ T5719] [U] 
[ 1862.477686][ T5719] [U] 
[ 1862.480352][ T5719] [U] 
[ 1862.483517][ T5700] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.1.7713: checksumming directory block 0
[ 1862.495913][ T5719] [U] 
[ 1862.498588][ T5719] [U] 
[ 1862.501254][ T5719] [U] 
[ 1862.503920][ T5719] [U] 
[ 1862.511870][ T5700] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1862.521565][ T5719] [U] 
[ 1862.524245][ T5719] [U] 
[ 1862.526913][ T5719] [U] 
[ 1862.529580][ T5719] [U] 
[ 1862.533453][ T5700] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1862.546403][ T5719] [U] 
[ 1862.549088][ T5719] [U] 
[ 1862.551755][ T5719] [U] 
[ 1862.554424][ T5719] [U] 
[ 1862.557668][ T5700] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1862.568305][ T5719] [U] 
[ 1862.570986][ T5719] [U] 
[ 1862.573749][ T5719] [U] 
[ 1862.576415][ T5719] [U] 
[ 1862.607883][ T5719] [U] 
[ 1862.610593][ T5719] [U] 
[ 1862.613261][ T5719] [U] 
[ 1862.615929][ T5719] [U] 
[ 1862.641315][ T5719] [U] 
[ 1862.644016][ T5719] [U] 
[ 1862.646683][ T5719] [U] 
[ 1862.649347][ T5719] [U] 
[ 1862.676793][ T5719] [U] 
[ 1862.679676][ T5719] [U] 
[ 1862.682343][ T5719] [U] 
[ 1862.685033][ T5719] [U] 
[ 1862.719357][ T5719] [U] 
[ 1862.722075][ T5719] [U] 
[ 1862.724752][ T5719] [U] 
[ 1862.727425][ T5719] [U] 
[ 1862.751163][ T5719] [U] 
[ 1862.753869][ T5719] [U] 
[ 1862.756537][ T5719] [U] 
[ 1862.759205][ T5719] [U] 
[ 1862.798015][ T5719] [U] 
[ 1862.800723][ T5719] [U] 
[ 1862.803403][ T5719] [U] 
[ 1862.806079][ T5719] [U] 
[ 1862.824980][ T5719] [U] 
[ 1862.828119][ T5719] [U] 
[ 1862.830788][ T5719] [U] 
[ 1862.833474][ T5719] [U] 
[ 1862.845608][ T5719] [U] 
[ 1862.848302][ T5719] [U] 
[ 1862.850970][ T5719] [U] 
[ 1862.853643][ T5719] [U] 
[ 1862.867756][ T5719] [U] 
[ 1862.870457][ T5719] [U] 
[ 1862.873388][ T5719] [U] 
[ 1862.876054][ T5719] [U] 
[ 1862.895967][ T5719] [U] 
[ 1862.898661][ T5719] [U] 
[ 1862.901328][ T5719] [U] 
[ 1862.904167][ T5719] [U] 
[ 1862.920008][ T5719] [U] 
[ 1862.922703][ T5719] [U] 
[ 1862.925368][ T5719] [U] 
[ 1862.928040][ T5719] [U] 
[ 1862.942873][ T5719] [U] 
[ 1862.945560][ T5719] [U] 
[ 1862.948323][ T5719] [U] 
[ 1862.951010][ T5719] [U] 
[ 1862.966337][ T5719] [U] 
[ 1862.969035][ T5719] [U] 
[ 1862.971704][ T5719] [U] 
[ 1862.974381][ T5719] [U] 
[ 1862.988733][ T5719] [U] 
[ 1862.991518][ T5719] [U] 
[ 1862.994200][ T5719] [U] 
[ 1862.996866][ T5719] [U] 
[ 1863.006009][ T5719] [U] 
[ 1863.008754][ T5719] [U] 
[ 1863.011426][ T5719] [U] 
[ 1863.014091][ T5719] [U] 
[ 1863.035603][ T5719] [U] 
[ 1863.038299][ T5719] [U] 
[ 1863.040969][ T5719] [U] 
[ 1863.043636][ T5719] [U] 
[ 1863.054473][ T5719] [U] 
[ 1863.057167][ T5719] [U] 
[ 1863.059845][ T5719] [U] 
[ 1863.062523][ T5719] [U] 
[ 1863.078528][ T5719] [U] 
[ 1863.081231][ T5719] [U] 
[ 1863.083986][ T5719] [U] 
[ 1863.086650][ T5719] [U] 
[ 1863.104564][ T5719] [U] 
[ 1863.107263][ T5719] [U] 
[ 1863.109932][ T5719] [U] 
[ 1863.112597][ T5719] [U] 
[ 1863.131374][ T5719] [U] 
[ 1863.134075][ T5719] [U] 
[ 1863.136829][ T5719] [U] 
[ 1863.139499][ T5719] [U] 
[ 1863.218367][ T5719] [U] 
[ 1863.366341][ T5739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7718'.
[ 1863.396563][ T5739] openvswitch: HfR: Dropping previously announced user features
[ 1863.492622][ T5744] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7720'.
[ 1863.962776][ T5758] bridge0: port 3(team0) entered blocking state
[ 1864.020907][ T5758] bridge0: port 3(team0) entered disabled state
[ 1864.071085][ T5758] team0: entered allmulticast mode
[ 1864.124270][ T5758] team_slave_0: entered allmulticast mode
[ 1864.163789][ T5758] team_slave_1: entered allmulticast mode
[ 1864.226586][ T5758] team0: entered promiscuous mode
[ 1864.276619][ T5758] team_slave_0: entered promiscuous mode
[ 1864.313929][ T5758] team_slave_1: entered promiscuous mode
[ 1864.751416][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7725'.
[ 1864.787604][ T5772] FAULT_INJECTION: forcing a failure.
[ 1864.787604][ T5772] name failslab, interval 1, probability 0, space 0, times 0
[ 1864.801019][ T5772] CPU: 0 UID: 0 PID: 5772 Comm: syz.1.7725 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1864.801046][ T5772] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1864.801053][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1864.801063][ T5772] Call Trace:
[ 1864.801068][ T5772]  <TASK>
[ 1864.801074][ T5772]  dump_stack_lvl+0x100/0x190
[ 1864.801101][ T5772]  should_fail_ex.cold+0x5/0xa
[ 1864.801119][ T5772]  should_failslab+0xc2/0x120
[ 1864.801141][ T5772]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1864.801157][ T5772]  ? __request_module+0x2b7/0x6c0
[ 1864.801175][ T5772]  ? lockdep_hardirqs_on+0x78/0x100
[ 1864.801194][ T5772]  __request_module+0x2b7/0x6c0
[ 1864.801213][ T5772]  ? __pfx___request_module+0x10/0x10
[ 1864.801241][ T5772]  ? find_held_lock+0x2b/0x80
[ 1864.801262][ T5772]  ? inet_create+0xa72/0x1060
[ 1864.801286][ T5772]  inet_create+0xab1/0x1060
[ 1864.801305][ T5772]  ? inet_create+0x94/0x1060
[ 1864.801327][ T5772]  __sock_create+0x339/0x860
[ 1864.801350][ T5772]  __sys_socket+0x14d/0x260
[ 1864.801370][ T5772]  ? __pfx___sys_socket+0x10/0x10
[ 1864.801395][ T5772]  __x64_sys_socket+0x72/0xb0
[ 1864.801413][ T5772]  ? lockdep_hardirqs_on+0x78/0x100
[ 1864.801428][ T5772]  do_syscall_64+0x106/0xf80
[ 1864.801442][ T5772]  ? clear_bhb_loop+0x40/0x90
[ 1864.801460][ T5772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1864.801475][ T5772] RIP: 0033:0x7f94d299c629
[ 1864.801488][ T5772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1864.801503][ T5772] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1864.801518][ T5772] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1864.801528][ T5772] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002
[ 1864.801536][ T5772] RBP: 00007f94d2a32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1864.801545][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1864.801554][ T5772] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1864.801573][ T5772]  </TASK>
[ 1865.475689][ T5782] openvswitch: HfR: Dropping previously announced user features
[ 1865.860909][ T5790] netlink: 'syz.1.7731': attribute type 5 has an invalid length.
[ 1865.869908][ T5790] netlink: 'syz.1.7731': attribute type 1 has an invalid length.
[ 1865.878432][ T5790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7731'.
[ 1866.058153][ T5803] futex_wake_op: syz.6.7733 tries to shift op by -2048; fix this program
[ 1866.111225][ T5803] futex_wake_op: syz.6.7733 tries to shift op by -2048; fix this program
[ 1866.129474][ T5807] 0x000000000001-0x000000020000 : ""
[ 1866.150421][ T5807] ftl_cs: FTL header corrupt!
[ 1866.234432][ T5794] misc userio: No port type given on /dev/userio
[ 1866.367964][ T5803] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[ 1866.532208][ T5817] openvswitch: HfR: Dropping previously announced user features
[ 1866.551117][ T5794] : Can't lookup blockdev
[ 1867.465002][ T5846] openvswitch: HfR: Dropping previously announced user features
[ 1868.776865][ T5872] openvswitch: HfR: Dropping previously announced user features
[ 1869.260226][ T5881] FAULT_INJECTION: forcing a failure.
[ 1869.260226][ T5881] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.287422][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.1.7754 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1869.287451][ T5881] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1869.287457][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1869.287467][ T5881] Call Trace:
[ 1869.287473][ T5881]  <TASK>
[ 1869.287479][ T5881]  dump_stack_lvl+0x100/0x190
[ 1869.287506][ T5881]  should_fail_ex.cold+0x5/0xa
[ 1869.287524][ T5881]  should_failslab+0xc2/0x120
[ 1869.287547][ T5881]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1869.287564][ T5881]  ? mqueue_init_fs_context+0x4b/0x690
[ 1869.287586][ T5881]  mqueue_init_fs_context+0x4b/0x690
[ 1869.287605][ T5881]  alloc_fs_context+0x60c/0xf40
[ 1869.287632][ T5881]  mq_init_ns+0x16e/0x820
[ 1869.287652][ T5881]  copy_ipcs+0x3dd/0x7e0
[ 1869.287671][ T5881]  create_new_namespaces+0x20a/0xac0
[ 1869.287696][ T5881]  ? security_capable+0x80/0x260
[ 1869.287718][ T5881]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1869.287735][ T5881]  ksys_unshare+0x455/0xab0
[ 1869.287754][ T5881]  ? __pfx_ksys_unshare+0x10/0x10
[ 1869.287778][ T5881]  __x64_sys_unshare+0x31/0x40
[ 1869.287795][ T5881]  do_syscall_64+0x106/0xf80
[ 1869.287811][ T5881]  ? clear_bhb_loop+0x40/0x90
[ 1869.287828][ T5881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.287844][ T5881] RIP: 0033:0x7f94d299c629
[ 1869.287857][ T5881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1869.287872][ T5881] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1869.287887][ T5881] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1869.287897][ T5881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000
[ 1869.287906][ T5881] RBP: 00007f94d2a32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1869.287915][ T5881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1869.287923][ T5881] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1869.287947][ T5881]  </TASK>
[ 1869.814798][ T5890] FAULT_INJECTION: forcing a failure.
[ 1869.814798][ T5890] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.843953][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz.1.7757 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1869.843982][ T5890] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1869.843989][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1869.843998][ T5890] Call Trace:
[ 1869.844004][ T5890]  <TASK>
[ 1869.844010][ T5890]  dump_stack_lvl+0x100/0x190
[ 1869.844038][ T5890]  should_fail_ex.cold+0x5/0xa
[ 1869.844056][ T5890]  ? lsm_blob_alloc+0x68/0x90
[ 1869.844070][ T5890]  should_failslab+0xc2/0x120
[ 1869.844093][ T5890]  __kmalloc_noprof+0xe0/0x850
[ 1869.844111][ T5890]  ? trace_kmalloc+0x101/0x130
[ 1869.844136][ T5890]  lsm_blob_alloc+0x68/0x90
[ 1869.844157][ T5890]  security_sk_alloc+0x2d/0x290
[ 1869.844177][ T5890]  sk_prot_alloc+0x12a/0x2a0
[ 1869.844198][ T5890]  sk_alloc+0x36/0xe80
[ 1869.844220][ T5890]  mctp_pf_create+0xe8/0x360
[ 1869.844238][ T5890]  __sock_create+0x339/0x860
[ 1869.844260][ T5890]  __sys_socket+0x14d/0x260
[ 1869.844280][ T5890]  ? __pfx___sys_socket+0x10/0x10
[ 1869.844304][ T5890]  __x64_sys_socket+0x72/0xb0
[ 1869.844323][ T5890]  ? lockdep_hardirqs_on+0x78/0x100
[ 1869.844338][ T5890]  do_syscall_64+0x106/0xf80
[ 1869.844353][ T5890]  ? clear_bhb_loop+0x40/0x90
[ 1869.844371][ T5890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.844387][ T5890] RIP: 0033:0x7f94d299c629
[ 1869.844400][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1869.844416][ T5890] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1869.844430][ T5890] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1869.844441][ T5890] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d
[ 1869.844450][ T5890] RBP: 00007f94d2a32b39 R08: 0000000000000000 R09: 0000000000000000
[ 1869.844459][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1869.844467][ T5890] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1869.844487][ T5890]  </TASK>
[ 1870.318556][ T5890] Invalid ELF header magic: != ELF
[ 1870.381488][ T5889] delete_channel: no stack
[ 1870.505897][ T5901] openvswitch: HfR: Dropping previously announced user features
[ 1870.949055][ T5909] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7762'.
[ 1871.223026][ T5919] Invalid input. Must be >= 4608
[ 1872.406729][ T5940] openvswitch: HfR: Dropping previously announced user features
[ 1872.726194][ T5946] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7770'.
[ 1880.701658][ T5972] openvswitch: HfR: Dropping previously announced user features
[ 1881.487396][ T5982] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7779'.
[ 1883.111485][ T5996] openvswitch: HfR: Dropping previously announced user features
[ 1883.536100][ T6004] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7786'.
[ 1883.770109][ T5991] kexec: Could not allocate control_code_buffer
[ 1884.213743][T28248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1884.226627][T28248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1884.237035][T28248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1884.245654][T28248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1884.253109][T28248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1884.889524][ T6031] openvswitch: HfR: Dropping previously announced user features
[ 1885.069471][ T6018] chnl_net:caif_netlink_parms(): no params data found
[ 1885.456784][ T6044] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7795'.
[ 1885.492249][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1885.523214][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1885.551999][ T6018] bridge_slave_0: entered allmulticast mode
[ 1885.571146][ T6018] bridge_slave_0: entered promiscuous mode
[ 1885.596428][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1885.612757][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1885.628551][ T6018] bridge_slave_1: entered allmulticast mode
[ 1885.648618][ T6018] bridge_slave_1: entered promiscuous mode
[ 1885.756860][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1885.796979][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1885.891039][ T6018] team0: Port device team_slave_0 added
[ 1885.939430][ T6018] team0: Port device team_slave_1 added
[ 1886.059215][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1886.074468][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1886.131951][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1886.171183][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1886.192747][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1886.290935][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1886.337654][T28248] Bluetooth: hci5: command tx timeout
[ 1886.713622][ T6018] hsr_slave_0: entered promiscuous mode
[ 1886.741808][ T6018] hsr_slave_1: entered promiscuous mode
[ 1886.781241][ T6018] debugfs: 'hsr0' already exists in 'hsr'
[ 1886.810901][ T6018] Cannot create hsr debugfs directory
[ 1887.022396][ T6067] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7800'.
[ 1887.054435][ T6067] openvswitch: HfR: Dropping previously announced user features
[ 1888.179837][ T6082] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7804'.
[ 1888.346652][ T6086] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12)
[ 1888.367244][ T6086] kAFS: Invalid Command on /proc/fs/afs/cells file
[ 1888.412008][T28248] Bluetooth: hci5: command tx timeout
[ 1888.788816][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7808'.
[ 1888.868239][ T6095] openvswitch: HfR: Dropping previously announced user features
[ 1890.490705][T28248] Bluetooth: hci5: command tx timeout
[ 1890.522076][ T6108] netlink: 326 bytes leftover after parsing attributes in process `syz.1.7813'.
[ 1891.509575][ T6126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7818'.
[ 1891.602062][ T6127] openvswitch: HfR: Dropping previously announced user features
[ 1892.181717][ T6132] zswap: compressor d_ not available
[ 1892.343774][ T6141] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7821'.
[ 1892.569832][T28248] Bluetooth: hci5: command tx timeout
[ 1893.930992][ T6164] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7826'.
[ 1893.977036][ T6164] openvswitch: HfR: Dropping previously announced user features
[ 1894.326338][ T6172] ptp ptp0: new virtual clock ptp1
[ 1894.338386][ T6172] ptp ptp0: guarantee physical clock free running
[ 1894.346553][ T6172] ptp ptp0: delete virtual clock ptp1
[ 1894.355653][ T6172] ptp ptp0: only physical clock in use now
[ 1895.157398][ T6177] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7830'.
[ 1895.619429][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7834'.
[ 1895.630164][ T6189] openvswitch: HfR: Dropping previously announced user features
[ 1896.480676][ T6208] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7840'.
[ 1896.722363][ T6218] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7843'.
[ 1896.744741][ T6218] openvswitch: HfR: Dropping previously announced user features
[ 1897.386450][T28248] block nbd0: Receive control failed (result -32)
[ 1897.638812][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7851'.
[ 1897.663887][ T6239] openvswitch: HfR: Dropping previously announced user features
[ 1898.450701][ T6259] ACPI: Can not change Invalid GPE/Fixed Event status
[ 1898.914003][ T6271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7859'.
[ 1898.962482][ T6271] openvswitch: HfR: Dropping previously announced user features
[ 1900.018277][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7866'.
[ 1900.120466][ T6295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7867'.
[ 1900.140416][ T6295] openvswitch: HfR: Dropping previously announced user features
[ 1901.006809][ T6323] openvswitch: HfR: Dropping previously announced user features
[ 1901.056691][ T6325] FAULT_INJECTION: forcing a failure.
[ 1901.056691][ T6325] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1901.070227][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.1.7876 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1901.070255][ T6325] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1901.070261][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1901.070271][ T6325] Call Trace:
[ 1901.070277][ T6325]  <TASK>
[ 1901.070284][ T6325]  dump_stack_lvl+0x100/0x190
[ 1901.070310][ T6325]  should_fail_ex.cold+0x5/0xa
[ 1901.070325][ T6325]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1901.070349][ T6325]  should_fail_alloc_page+0xeb/0x140
[ 1901.070373][ T6325]  prepare_alloc_pages+0x1f0/0x5f0
[ 1901.070397][ T6325]  ? trace_ignore_this_task+0xbc/0x100
[ 1901.070420][ T6325]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[ 1901.070440][ T6325]  ? lock_acquire+0x1cf/0x380
[ 1901.070458][ T6325]  ? find_held_lock+0x2b/0x80
[ 1901.070479][ T6325]  ? finish_task_switch.isra.0+0x200/0xb80
[ 1901.070496][ T6325]  ? mark_held_locks+0x40/0x70
[ 1901.070513][ T6325]  ? finish_task_switch.isra.0+0x205/0xb80
[ 1901.070527][ T6325]  ? lockdep_hardirqs_on+0x78/0x100
[ 1901.070542][ T6325]  ? finish_task_switch.isra.0+0x205/0xb80
[ 1901.070557][ T6325]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1901.070576][ T6325]  ? rcu_is_watching+0x12/0xc0
[ 1901.070598][ T6325]  ? __schedule+0x1000/0x60e0
[ 1901.070625][ T6325]  ? folio_remove_rmap_pmd+0x69c/0xed0
[ 1901.070647][ T6325]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1901.070671][ T6325]  ? policy_nodemask+0xed/0x4f0
[ 1901.070694][ T6325]  alloc_pages_mpol+0x1fb/0x550
[ 1901.070716][ T6325]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1901.070738][ T6325]  ? preempt_schedule_thunk+0x16/0x30
[ 1901.070760][ T6325]  alloc_pages_noprof+0x131/0x390
[ 1901.070782][ T6325]  pte_alloc_one+0x1e/0x3e0
[ 1901.070799][ T6325]  __pte_alloc+0x6d/0x3f0
[ 1901.070820][ T6325]  ? __pfx___pte_alloc+0x10/0x10
[ 1901.070842][ T6325]  ? _raw_spin_unlock+0x28/0x50
[ 1901.070863][ T6325]  ? __pmd_alloc+0x6aa/0x9c0
[ 1901.070879][ T6325]  move_page_tables+0x257e/0x4500
[ 1901.070908][ T6325]  ? __pfx_copy_vma+0x10/0x10
[ 1901.070934][ T6325]  ? __pfx_move_page_tables+0x10/0x10
[ 1901.070964][ T6325]  ? finish_task_switch.isra.0+0x200/0xb80
[ 1901.070982][ T6325]  copy_vma_and_data+0x25c/0x7c0
[ 1901.071004][ T6325]  ? __pfx_copy_vma_and_data+0x10/0x10
[ 1901.071031][ T6325]  ? __vma_start_write+0x17f/0x280
[ 1901.071047][ T6325]  ? __pfx___vma_start_write+0x10/0x10
[ 1901.071069][ T6325]  move_vma+0x51b/0x1890
[ 1901.071093][ T6325]  ? __pfx_move_vma+0x10/0x10
[ 1901.071113][ T6325]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[ 1901.071136][ T6325]  ? cap_mmap_addr+0x4b/0x120
[ 1901.071152][ T6325]  ? bpf_lsm_mmap_addr+0x9/0x30
[ 1901.071171][ T6325]  ? security_mmap_addr+0x71/0x1e0
[ 1901.071196][ T6325]  ? __get_unmapped_area+0x255/0x3e0
[ 1901.071221][ T6325]  ? vrm_set_new_addr+0x204/0x290
[ 1901.071240][ T6325]  mremap_to+0x1b7/0x450
[ 1901.071259][ T6325]  do_mremap+0xb76/0x2130
[ 1901.071285][ T6325]  ? __pfx_do_mremap+0x10/0x10
[ 1901.071308][ T6325]  ? ksys_write+0x190/0x250
[ 1901.071333][ T6325]  __do_sys_mremap+0x126/0x170
[ 1901.071351][ T6325]  ? __pfx___do_sys_mremap+0x10/0x10
[ 1901.071375][ T6325]  ? __x64_sys_futex+0x34f/0x4d0
[ 1901.071403][ T6325]  do_syscall_64+0x106/0xf80
[ 1901.071418][ T6325]  ? clear_bhb_loop+0x40/0x90
[ 1901.071436][ T6325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1901.071452][ T6325] RIP: 0033:0x7f94d299c629
[ 1901.071466][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1901.071481][ T6325] RSP: 002b:00007f94d38de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 1901.071496][ T6325] RAX: ffffffffffffffda RBX: 00007f94d2c15fa0 RCX: 00007f94d299c629
[ 1901.071506][ T6325] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000
[ 1901.071516][ T6325] RBP: 00007f94d2a32b39 R08: 0000000100000000 R09: 0000000000000000
[ 1901.071527][ T6325] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[ 1901.071536][ T6325] R13: 00007f94d2c16038 R14: 00007f94d2c15fa0 R15: 00007fff85935f58
[ 1901.071559][ T6325]  </TASK>
[ 1902.633649][ T6359] openvswitch: HfR: Dropping previously announced user features
[ 1903.083886][ T6379] sd 0:0:1:0: PR command failed: 1026
[ 1903.090813][ T6379] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[ 1903.112928][ T6379] sd 0:0:1:0: Add. Sense: Invalid command operation code
[ 1903.501881][ T6386] openvswitch: HfR: Dropping previously announced user features
[ 1904.549041][ T6413] openvswitch: HfR: Dropping previously announced user features
[ 1905.577857][T11768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1905.589448][T11768] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1905.600247][T11768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1905.608850][T11768] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1905.616740][T11768] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1905.777668][ T6426] chnl_net:caif_netlink_parms(): no params data found
[ 1905.850650][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1905.858222][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1905.866083][ T6426] bridge_slave_0: entered allmulticast mode
[ 1905.873708][ T6426] bridge_slave_0: entered promiscuous mode
[ 1905.881729][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1905.892700][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1905.903410][ T6426] bridge_slave_1: entered allmulticast mode
[ 1905.925814][ T6426] bridge_slave_1: entered promiscuous mode
[ 1905.979140][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1905.991060][ T6435] netlink: 334 bytes leftover after parsing attributes in process `syz.1.7904'.
[ 1906.012382][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1906.074529][ T6426] team0: Port device team_slave_0 added
[ 1906.082161][ T6426] team0: Port device team_slave_1 added
[ 1906.145283][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1906.152533][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1906.182575][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1906.203432][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1906.212436][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1906.243614][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1906.327539][ T6426] hsr_slave_0: entered promiscuous mode
[ 1906.351708][ T6426] hsr_slave_1: entered promiscuous mode
[ 1906.368555][ T6426] debugfs: 'hsr0' already exists in 'hsr'
[ 1906.379777][ T6426] Cannot create hsr debugfs directory
[ 1906.852152][ T6449] openvswitch: HfR: Dropping previously announced user features
[ 1907.193406][ T6455] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7910'.
[ 1907.682389][T11768] Bluetooth: hci6: command tx timeout
[ 1908.277199][ T6461] input: jJǸ-���9�%v���J86�� as /devices/virtual/input/input41
[ 1909.761251][T11768] Bluetooth: hci6: command tx timeout
[ 1909.829945][T11768] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260
[ 1909.829972][T11768] Bluetooth: hci4: unexpected subevent 0x0e length: 725 > 15
[ 1909.846315][T11768] Bluetooth: hci4: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[ 1910.370168][ T6491] openvswitch: HfR: Dropping previously announced user features
[ 1911.840534][T28248] Bluetooth: hci6: command tx timeout
[ 1911.944627][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7920'.
[ 1911.961775][ T6502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7920'.
[ 1912.015731][ T6503] bridge_slave_1 (unregistering): left allmulticast mode
[ 1912.024939][ T6503] bridge_slave_1 (unregistering): left promiscuous mode
[ 1912.046436][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1912.201913][ T6511] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 1912.729040][ T6521] openvswitch: HfR: Dropping previously announced user features
[ 1913.294860][ T6537] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7929'.
[ 1913.746028][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7932'.
[ 1913.834972][ T6553] openvswitch: HfR: Dropping previously announced user features
[ 1913.919704][T11768] Bluetooth: hci6: command tx timeout
[ 1914.401921][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.409847][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.960268][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7939'.
[ 1915.177311][ T6584] openvswitch: HfR: Dropping previously announced user features
[ 1916.295098][ T6597] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 1916.306247][ T6597] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 1916.545551][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7946'.
[ 1916.979937][ T6610] openvswitch: HfR: Dropping previously announced user features
[ 1917.110013][ T6614] random: crng reseeded on system resumption
[ 1917.707915][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7954'.
[ 1918.172707][ T6634] openvswitch: HfR: Dropping previously announced user features
[ 1918.889868][T28248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1918.905304][T28248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1918.914182][T28248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1918.926479][T28248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1918.933990][T28248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1919.303174][ T6648] chnl_net:caif_netlink_parms(): no params data found
[ 1919.476707][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1919.491711][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1919.526745][ T6648] bridge_slave_0: entered allmulticast mode
[ 1919.533933][ T6648] bridge_slave_0: entered promiscuous mode
[ 1919.646328][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1919.653511][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1919.691665][ T6648] bridge_slave_1: entered allmulticast mode
[ 1919.709927][ T6648] bridge_slave_1: entered promiscuous mode
[ 1919.810395][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1919.839555][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1919.991338][ T6648] team0: Port device team_slave_0 added
[ 1920.015341][ T6648] team0: Port device team_slave_1 added
[ 1920.101666][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1920.135851][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1920.216174][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1920.322589][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1920.374277][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1920.463800][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1920.500255][ T6668] openvswitch: HfR: Dropping previously announced user features
[ 1920.605142][ T6648] hsr_slave_0: entered promiscuous mode
[ 1920.612510][ T6648] hsr_slave_1: entered promiscuous mode
[ 1920.644831][ T6648] debugfs: 'hsr0' already exists in 'hsr'
[ 1920.653082][ T6648] Cannot create hsr debugfs directory
[ 1920.958337][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7967'.
[ 1921.036528][T28248] Bluetooth: hci7: command tx timeout
[ 1923.114488][T28248] Bluetooth: hci7: command tx timeout
[ 1925.193307][T28248] Bluetooth: hci7: command tx timeout
[ 1927.272305][T28248] Bluetooth: hci7: command tx timeout
[ 1944.309837][T11768] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1944.325699][T11768] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1944.335493][T11768] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1944.343374][T11768] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1944.351119][T11768] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1944.534482][ T6679] chnl_net:caif_netlink_parms(): no params data found
[ 1944.610915][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1944.618310][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1944.629383][ T6679] bridge_slave_0: entered allmulticast mode
[ 1944.636786][ T6679] bridge_slave_0: entered promiscuous mode
[ 1944.644981][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1944.652246][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1944.659883][ T6679] bridge_slave_1: entered allmulticast mode
[ 1944.667302][ T6679] bridge_slave_1: entered promiscuous mode
[ 1944.696677][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1944.709651][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1944.742103][ T6679] team0: Port device team_slave_0 added
[ 1944.750176][ T6679] team0: Port device team_slave_1 added
[ 1944.774239][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1944.781232][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1944.810034][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1944.822750][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1944.835404][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1944.862004][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1944.904645][ T6679] hsr_slave_0: entered promiscuous mode
[ 1944.911130][ T6679] hsr_slave_1: entered promiscuous mode
[ 1944.917893][ T6679] debugfs: 'hsr0' already exists in 'hsr'
[ 1944.923937][ T6679] Cannot create hsr debugfs directory
[ 1946.387218][T28248] Bluetooth: hci8: command tx timeout
[ 1947.182621][T11493] Bluetooth: hci1: command 0x0406 tx timeout
[ 1948.461773][T11768] Bluetooth: hci8: command tx timeout
[ 1950.541321][T11768] Bluetooth: hci8: command tx timeout
[ 1952.619707][T11768] Bluetooth: hci8: command tx timeout
[ 1966.386031][T11493] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1966.398813][T11493] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1966.407260][T11493] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1966.421112][T11493] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1966.432960][T11493] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1966.610661][ T6692] chnl_net:caif_netlink_parms(): no params data found
[ 1966.746827][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1966.772592][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1966.779874][ T6692] bridge_slave_0: entered allmulticast mode
[ 1966.798428][ T6692] bridge_slave_0: entered promiscuous mode
[ 1966.816674][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1966.832627][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1966.839898][ T6692] bridge_slave_1: entered allmulticast mode
[ 1966.863889][ T6692] bridge_slave_1: entered promiscuous mode
[ 1966.926678][ T6692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1966.954936][ T6692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1967.018338][ T6692] team0: Port device team_slave_0 added
[ 1967.029579][ T6692] team0: Port device team_slave_1 added
[ 1967.056129][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1967.063310][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1967.092001][ T6692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1967.107957][ T6692] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1967.115234][ T6692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1967.144894][ T6692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1967.185811][ T6692] hsr_slave_0: entered promiscuous mode
[ 1967.194154][ T6692] hsr_slave_1: entered promiscuous mode
[ 1967.200427][ T6692] debugfs: 'hsr0' already exists in 'hsr'
[ 1967.208490][ T6692] Cannot create hsr debugfs directory
[ 1968.531886][T11768] Bluetooth: hci9: command tx timeout
[ 1970.610826][T11768] Bluetooth: hci9: command tx timeout
[ 1972.689922][T11768] Bluetooth: hci9: command tx timeout
[ 1972.769636][T11768] Bluetooth: hci3: command 0x0406 tx timeout
[ 1974.768746][T11493] Bluetooth: hci9: command tx timeout
[ 1975.815617][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1975.822107][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1979.420485][T11768] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1979.433411][T11768] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1979.446639][T11768] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1979.458452][T11768] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1979.468926][T11768] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1979.641022][ T6705] chnl_net:caif_netlink_parms(): no params data found
[ 1979.716913][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1979.724078][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1979.733462][ T6705] bridge_slave_0: entered allmulticast mode
[ 1979.747413][ T6705] bridge_slave_0: entered promiscuous mode
[ 1979.762657][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1979.770253][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1979.778721][ T6705] bridge_slave_1: entered allmulticast mode
[ 1979.786221][ T6705] bridge_slave_1: entered promiscuous mode
[ 1979.824426][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1979.837748][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1979.868267][ T6705] team0: Port device team_slave_0 added
[ 1979.876884][ T6705] team0: Port device team_slave_1 added
[ 1979.904180][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1979.913293][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1979.939993][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1979.953116][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1979.960562][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1979.992131][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1980.037714][ T6705] hsr_slave_0: entered promiscuous mode
[ 1980.044505][ T6705] hsr_slave_1: entered promiscuous mode
[ 1980.052847][ T6705] debugfs: 'hsr0' already exists in 'hsr'
[ 1980.060265][ T6705] Cannot create hsr debugfs directory
[ 1981.565338][T11493] Bluetooth: hci10: command tx timeout
[ 1983.485115][   T30] INFO: task syz-executor:5010 blocked for more than 143 seconds.
[ 1983.492950][   T30]       Tainted: G     U       L      syzkaller #0
[ 1983.507124][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1983.516137][   T30] task:syz-executor    state:D stack:24584 pid:5010  tgid:5010  ppid:1      task_flags:0x480140 flags:0x00080002
[ 1983.528519][   T30] Call Trace:
[ 1983.531897][   T30]  <TASK>
[ 1983.538328][   T30]  __schedule+0xfee/0x60e0
[ 1983.543838][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1983.555209][   T30]  ? __pfx___schedule+0x10/0x10
[ 1983.560104][   T30]  ? find_held_lock+0x2b/0x80
[ 1983.584244][   T30]  ? schedule+0x2bf/0x390
[ 1983.588622][   T30]  schedule+0xdd/0x390
[ 1983.592698][   T30]  schedule_timeout+0x1b2/0x280
[ 1983.615092][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1983.620525][   T30]  ? preempt_schedule_thunk+0x16/0x30
[ 1983.647553][T11493] Bluetooth: hci10: command tx timeout
[ 1983.656445][   T30]  __wait_for_common+0x2e7/0x4c0
[ 1983.661457][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1983.715014][   T30]  ? __pfx___wait_for_common+0x10/0x10
[ 1983.720749][   T30]  remove_one+0x312/0x420
[ 1983.737853][   T30]  ? find_next_child+0x18f/0x280
[ 1983.742835][   T30]  __simple_recursive_removal+0x148/0x5c0
[ 1983.749818][   T30]  ? __pfx_remove_one+0x10/0x10
[ 1983.758112][   T30]  debugfs_remove+0x5d/0x80
[ 1983.762756][   T30]  nsim_dev_health_exit+0x3b/0xe0
[ 1983.768440][   T30]  nsim_dev_reload_destroy+0x144/0x4a0
[ 1983.774247][   T30]  nsim_drv_remove+0x52/0x1e0
[ 1983.778935][   T30]  ? __pfx_nsim_bus_remove+0x10/0x10
[ 1983.784659][   T30]  device_remove+0xcb/0x180
[ 1983.791155][   T30]  device_release_driver_internal+0x42e/0x600
[ 1983.797864][   T30]  bus_remove_device+0x22f/0x440
[ 1983.802907][   T30]  device_del+0x376/0x9b0
[ 1983.808777][   T30]  ? __pfx_device_del+0x10/0x10
[ 1983.814168][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1983.819111][   T30]  device_unregister+0x1d/0xe0
[ 1983.824200][   T30]  del_device_store+0x346/0x480
[ 1983.829056][   T30]  ? __pfx_del_device_store+0x10/0x10
[ 1983.835911][   T30]  ? find_held_lock+0x2b/0x80
[ 1983.840598][   T30]  ? sysfs_file_kobj+0xe4/0x290
[ 1983.846017][   T30]  ? sysfs_file_kobj+0xe4/0x290
[ 1983.851092][   T30]  ? __pfx_del_device_store+0x10/0x10
[ 1983.857101][   T30]  bus_attr_store+0x74/0xb0
[ 1983.861615][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[ 1983.870636][   T30]  sysfs_kf_write+0xf2/0x150
[ 1983.875635][   T30]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1983.880926][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1983.887364][   T30]  vfs_write+0x6ac/0x1070
[ 1983.893582][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1983.899777][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1983.904772][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1983.909974][   T30]  ksys_write+0x12a/0x250
[ 1983.915328][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1983.920205][   T30]  do_syscall_64+0x106/0xf80
[ 1983.925211][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1983.933926][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1983.939848][   T30] RIP: 0033:0x7f579935cece
[ 1983.949358][   T30] RSP: 002b:00007ffff752eb08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1983.958746][   T30] RAX: ffffffffffffffda RBX: 0000555562253500 RCX: 00007f579935cece
[ 1983.970136][   T30] RDX: 0000000000000001 RSI: 00007ffff752eb90 RDI: 0000000000000005
[ 1983.981763][   T30] RBP: 00007f579943343f R08: 0000000000000000 R09: 0000000000000000
[ 1983.990119][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1984.000298][   T30] R13: 00007ffff752eb90 R14: 00007f579a144620 R15: 0000000000000003
[ 1984.008656][   T30]  </TASK>
[ 1984.044131][   T30] INFO: task syz.4.7553:5083 blocked for more than 143 seconds.
[ 1984.051991][   T30]       Tainted: G     U       L      syzkaller #0
[ 1984.073831][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1984.082520][   T30] task:syz.4.7553      state:D stack:26984 pid:5083  tgid:5078  ppid:32218  task_flags:0x400140 flags:0x00080002
[ 1984.134463][   T30] Call Trace:
[ 1984.137804][   T30]  <TASK>
[ 1984.140727][   T30]  __schedule+0xfee/0x60e0
[ 1984.164884][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1984.169864][   T30]  ? __pfx___schedule+0x10/0x10
[ 1984.183770][   T30]  ? find_held_lock+0x2b/0x80
[ 1984.188481][   T30]  ? schedule+0x2bf/0x390
[ 1984.192841][   T30]  schedule+0xdd/0x390
[ 1984.216066][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1984.221559][   T30]  __mutex_lock+0xc9a/0x1b90
[ 1984.234075][   T30]  ? netlink_has_listeners+0x20f/0x430
[ 1984.239567][   T30]  ? devlink_health_report+0x681/0xb50
[ 1984.263702][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1984.268774][   T30]  ? devlink_recover_notify.constprop.0+0x200/0x670
[ 1984.292802][   T30]  ? __lock_acquire+0x441/0x2630
[ 1984.300259][   T30]  ? devlink_health_report+0x681/0xb50
[ 1984.330680][   T30]  devlink_health_report+0x681/0xb50
[ 1984.337511][   T30]  ? __pfx_devlink_health_report+0x10/0x10
[ 1984.343371][   T30]  ? _copy_from_user+0x59/0xd0
[ 1984.348551][   T30]  nsim_dev_health_break_write+0x166/0x210
[ 1984.354710][   T30]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[ 1984.361062][   T30]  full_proxy_write+0x135/0x1a0
[ 1984.367778][   T30]  vfs_write+0x2aa/0x1070
[ 1984.372764][   T30]  ? __pfx_full_proxy_write+0x10/0x10
[ 1984.378698][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1984.383489][   T30]  ? __fget_files+0x215/0x3d0
[ 1984.390629][   T30]  ? __fget_files+0x21f/0x3d0
[ 1984.396049][   T30]  ksys_write+0x12a/0x250
[ 1984.400391][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1984.407486][   T30]  do_syscall_64+0x106/0xf80
[ 1984.412128][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1984.417331][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1984.423233][   T30] RIP: 0033:0x7fc0a039c629
[ 1984.428081][   T30] RSP: 002b:00007fc0a11c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1984.439178][   T30] RAX: ffffffffffffffda RBX: 00007fc0a0616180 RCX: 00007fc0a039c629
[ 1984.447541][   T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 000000000000000b
[ 1984.455914][   T30] RBP: 00007fc0a0432b39 R08: 0000000000000000 R09: 0000000000000000
[ 1984.464367][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1984.472353][   T30] R13: 00007fc0a0616218 R14: 00007fc0a0616180 R15: 00007ffe80114098
[ 1984.481651][   T30]  </TASK>
[ 1984.514151][   T30] 
[ 1984.514151][   T30] Showing all locks held in the system:
[ 1984.522017][   T30] 1 lock held by khungtaskd/30:
[ 1984.527929][   T30]  #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1984.538254][   T30] 2 locks held by getty/12933:
[ 1984.543015][   T30]  #0: ffff888032fb80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1984.555557][   T30]  #1: ffffc90002f462f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[ 1984.566106][   T30] 3 locks held by kworker/u10:13/1432:
[ 1984.571566][   T30]  #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1984.584578][   T30]  #1: ffffc9000e667d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1984.595356][   T30]  #2: ffffffff90611728 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 1984.608027][   T30] 7 locks held by syz-executor/5010:
[ 1984.615069][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1984.624520][   T30]  #1: ffff888076eb0888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1984.634706][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1984.645092][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1984.655675][   T30]  #4: ffff8880236b00e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600
[ 1984.668971][   T30]  #5: ffff8880236b7250 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0
[ 1984.679419][   T30]  #6: ffff88803a1b9f78 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[ 1984.695019][   T30] 3 locks held by syz.4.7553/5083:
[ 1984.700161][   T30]  #0: ffff88807c37b278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1984.713113][   T30]  #1: ffff888020684420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1984.722449][   T30]  #2: ffff8880236b7250 (&devlink->lock_key#15){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50
[ 1984.741264][   T30] 2 locks held by syz.1.7591/5227:
[ 1984.746978][   T30]  #0: ffffffff90611728 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1984.756353][   T30]  #1: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1984.769434][   T30] 4 locks held by syz-executor/5316:
[ 1984.777653][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1984.786959][   T30]  #1: ffff888079152088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1984.797659][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1984.809243][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1984.821893][   T30] 4 locks held by syz-executor/6018:
[ 1984.827513][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1984.836971][   T30]  #1: ffff888077336888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1984.850303][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1984.860751][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1984.871316][   T30] 5 locks held by syz.6.7893/6390:
[ 1984.876951][   T30]  #0: ffff888061ec1cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1984.888457][   T30]  #1: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: do_writev+0x13e/0x340
[ 1984.897728][   T30]  #2: ffff88807ca4d088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1984.907790][   T30]  #3: ffff8880298da2d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1984.920769][   T30]  #4: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x700
[ 1984.932126][   T30] 4 locks held by syz-executor/6426:
[ 1984.937845][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1984.947054][   T30]  #1: ffff888057fef488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1984.958437][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1984.968808][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1984.979688][   T30] 4 locks held by syz-executor/6648:
[ 1984.985464][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1984.996912][   T30]  #1: ffff888057fee488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1985.010053][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1985.022326][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1985.033899][   T30] 4 locks held by syz-executor/6679:
[ 1985.039175][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1985.048390][   T30]  #1: ffff888028073088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1985.058512][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1985.069839][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1985.080673][   T30] 4 locks held by syz-executor/6692:
[ 1985.088093][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1985.097576][   T30]  #1: ffff888034453c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1985.109543][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1985.122071][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1985.132785][   T30] 4 locks held by syz-executor/6705:
[ 1985.138422][   T30]  #0: ffff888036dda420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1985.148346][   T30]  #1: ffff888036450088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1985.158510][   T30]  #2: ffff8880298da1e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1985.172087][   T30]  #3: ffffffff8fb6a028 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1985.184467][   T30] 1 lock held by dhcpcd/6720:
[ 1985.189155][   T30]  #0: ffff8880336c0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50
[ 1985.211780][   T30] 
[ 1985.217228][   T30] =============================================
[ 1985.217228][   T30] 
[ 1985.244146][   T30] NMI backtrace for cpu 0
[ 1985.244164][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1985.244187][   T30] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1985.244192][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1985.244202][   T30] Call Trace:
[ 1985.244207][   T30]  <TASK>
[ 1985.244213][   T30]  dump_stack_lvl+0x100/0x190
[ 1985.244244][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1985.244267][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1985.244288][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1985.244310][   T30]  sys_info+0x141/0x190
[ 1985.244327][   T30]  watchdog+0xd25/0x1050
[ 1985.244353][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1985.244374][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1985.244392][   T30]  ? kthread+0x13a/0x450
[ 1985.244408][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1985.244426][   T30]  kthread+0x370/0x450
[ 1985.244442][   T30]  ? __pfx_kthread+0x10/0x10
[ 1985.244460][   T30]  ret_from_fork+0x754/0xd80
[ 1985.244481][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1985.244501][   T30]  ? __switch_to+0x7b4/0x1120
[ 1985.244517][   T30]  ? __pfx_kthread+0x10/0x10
[ 1985.244534][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1985.244574][   T30]  </TASK>
[ 1985.407303][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1985.414422][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1985.425718][   T30] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1985.430991][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1985.441132][   T30] Call Trace:
[ 1985.444408][   T30]  <TASK>
[ 1985.447327][   T30]  dump_stack_lvl+0x100/0x190
[ 1985.452011][   T30]  vpanic+0x552/0x970
[ 1985.455987][   T30]  ? __pfx_vpanic+0x10/0x10
[ 1985.460474][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1985.466619][   T30]  panic+0xd1/0xe0
[ 1985.470446][   T30]  ? __pfx_panic+0x10/0x10
[ 1985.474866][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1985.481037][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1985.487206][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1985.493393][   T30]  ? watchdog.cold+0x198/0x1ca
[ 1985.498158][   T30]  ? watchdog+0xd35/0x1050
[ 1985.502590][   T30]  watchdog.cold+0x1a9/0x1ca
[ 1985.507375][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1985.512669][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1985.517703][   T30]  ? kthread+0x13a/0x450
[ 1985.522117][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1985.526921][   T30]  kthread+0x370/0x450
[ 1985.531174][   T30]  ? __pfx_kthread+0x10/0x10
[ 1985.535764][   T30]  ret_from_fork+0x754/0xd80
[ 1985.540437][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1985.545537][   T30]  ? __switch_to+0x7b4/0x1120
[ 1985.550201][   T30]  ? __pfx_kthread+0x10/0x10
[ 1985.554787][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1985.559545][   T30]  </TASK>
[ 1985.562702][   T30] Kernel Offset: disabled
[ 1985.567027][   T30] Rebooting in 86400 seconds..