last executing test programs:

1m21.156877404s ago: executing program 2 (id=495):
r0 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x4002, 0x0)
write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x03\x00\x00\x00\xc7\xd9\x88t?$\xe4W\x88Q\xe6e\xb2\xa5\xbbZ$\xc9\xa4@\xfb\xca|I\xb9\xdf\xb9\x81K\x02\xcb\t\x9f\x80\x187\xab\b\xd22\x14\xacj\x11\xd0\xa5E\x14\xc4n\xb7\xa4C\xb2C\x02\xb5L!\xc9_8\xe0r\xa8\a\x1d\x03/\xb0x\x83\xd8\x1d\xd3\x1e\xd0\xdd\x131\xca\x98\x96\xbc`\x06\a,\x88\x9dhT\xc6\x88\xa1\xd7\xe0\xb7\n\xbc\xbc\xf3\xd6\xf4g&\xed\xc2n\xee\x89\xfc\xf7F@\xf2\xddW;/%@\x185\x1ab\xf4*\xb8\x9a`D\xa3\xd0\xc3\x10\xff>\x87(\xba\xb4\xa0\x84\x89n9\x85\xa1\x8a\xce\x00'/176, 0x100081)

1m20.910855179s ago: executing program 2 (id=498):
r0 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0)
pread64$auto(r0, 0x0, 0x200007, 0x80000000000)
mmap$auto(0x0, 0x2020006, 0x0, 0xf8, 0xffffffffffffffff, 0x7ffd)
r1 = socket(0x28, 0x800, 0x1)
setsockopt$auto(r1, 0xffffa203, 0x39, 0x0, 0x3)
mmap$auto(0x0, 0x20009, 0xf, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80802, 0x0)
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
clock_gettime$auto(0x1164, 0x0)
r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
write$auto(0x3, 0x0, 0x2000000002)
mmap$auto(0x800, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
shutdown$auto(0x200000003, 0x2)
io_uring_register$auto(0x2, 0x22, 0x0, 0x1)
mmap$auto(0x6, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0)
io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0xfffffff9)
r5 = open(&(0x7f00000000c0)='&&\x00', 0x595802, 0x400)
write$auto(r5, 0x0, 0xfffffdf2)
linkat$auto(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000)

1m20.490725428s ago: executing program 2 (id=501):
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyqd\x00', 0x1abe83, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x11, 0x5, 0x100)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x62, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x569042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x44e02, 0x0)
memfd_create$auto(0x0, 0x40)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, r1, 0x0)
socket(0xa, 0x5, 0x84)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
preadv2$auto(r2, 0x0, 0x1, 0x9, 0x17f, 0x5)
r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x7)
get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
munmap$auto(0x66, 0x100000005)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0)

1m16.419469476s ago: executing program 2 (id=511):
bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@task_fd_query={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x3373, 0xffffffffffffffff, 0x7}, 0x8)
mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2b, 0x1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x80000006, 0x1, 0x9, 0x7, 0xf, 0x8, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x5, 0x2, 0x7, 0xb3, 0x6, 0x8, 0x3, 0xc, 0x9, 0xbd, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x100000, 0xfffffffe, [0x99, 0x2, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xcd1, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff7, 0x4, 0x0, 0xfdffffffffffff81, 0x7, 0x4, 0x0, 0x0, 0x200000000000000, 0x1d6, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/authorized_default\x00', 0x182b02, 0x0)
unshare$auto(0x40000080)
write$auto(r0, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x9)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
chdir$auto(&(0x7f0000000000)='}[,&*}\x00')
open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x14)
madvise$auto(0x0, 0x200007, 0x19)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x5d, 0x0)
socket(0xa, 0x1, 0x84)

1m14.818936033s ago: executing program 2 (id=516):
r0 = socket(0x29, 0x2, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$auto(0x3, 0x89e2, 0x91)
ioctl$auto(0x3, 0x89e1, 0x91)
read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000)
statmount$auto(0x0, &(0x7f0000000180)={0x29f, 0x1, 0x401bf, 0xaf1e, 0x30, 0x400000000065f, 0x7, 0x40007, 0x1, 0x20000005, 0x5, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x31a2118, 0xc, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x0, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x8, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x20000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x1, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x8, 0x400000000000002, 0x1, 0x6, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0], 0x1ac}}, 0x20048001)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'})
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0x22, 0x6, 0x800000)
r2 = socket(0x11, 0x3, 0x9)
sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_IEEE802154_START_REQ(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='TpB', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fedbdf250d0000000500350091000000050037000500000005003500fa00000005001200000000001f0016002d909bfba985dccef6be8570ee2e37df467058af9f86a5bb626e6700"], 0x54}}, 0x44)
prctl$auto_PR_SET_VMA(0x53564d41, 0xfff, 0x7ff, 0x7, 0xa5e7)
r3 = socket(0x18, 0x5, 0x1)
connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a)
sendto$auto(0x3, 0x0, 0x8, 0x101, 0x0, 0x1c)
acct$auto(&(0x7f0000000080)='/dev/ptyaf\x00')
r4 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa502}, 0x800}, 0x2, 0x4008)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x4, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)

1m14.340368421s ago: executing program 2 (id=518):
socket(0x11, 0x80003, 0x300) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/sctp/rto_alpha_exp_divisor\x00', 0x900, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) (async)
timer_settime$auto(0x1, 0x3, 0x0, 0x0)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r1, 0x400454ca, 0x38) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) (async)
ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220408c0}, 0x24000805) (async)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4c800) (async)
timer_create$auto(0x2, 0x0, 0x0) (async)
timer_create$auto(0x9, 0x0, 0x0) (async)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0)
io_uring_setup$auto(0xb3d, &(0x7f0000000000)={0x4, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xffffffffffffffff, [0x3, 0xffff, 0x5], {0x2, 0x7, 0x2, 0x7, 0x6, 0x2, 0xd, 0x4, 0x6}, {0x8, 0x4, 0x2, 0x80000000, 0x5, 0x5, 0x7ffb, 0x63e, 0x2}}) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200"}, 0x0, @enumerated=@item_ptr=0x0, "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) (async)
setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) (async)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a37, 0x0, 0x4, 0x0, 0x3, 0x5}, 0x8}, 0xb, 0xdb22, 0x0)

1m12.654633778s ago: executing program 1 (id=524):
mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
eventfd$auto(0x8c)
socket(0x10, 0x2, 0x4)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0xa, 0x801, 0x106)
recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x2000007, 0x2}, 0x7ff}, 0x70000000, 0x1, &(0x7f0000000400)={0x3, 0xbd64})
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x1, 0x84)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x7, 0x800001, 0x14, 0x945, 0x1ffe5, 0x3, 0x1, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0xd1d2, 0xd, 0xc26f, 0x3, 0x4, 0x4, 0x20, 0x309, 0x8, 0x2, 0x7fffffff, 0x3, 0x0, 0x0, 0x79, 0x80, 0x0, [0x8000000000000000, 0x4, 0x0, 0x2000000000000200, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x4, 0x800000000002, 0x80000001, 0xffffffffffffffff, 0xbec, 0x0, 0x1, 0xe, 0x7fffffffffffffff, 0x4, 0x0, 0x200000, 0x2, 0x4000000000000, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x3, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
r1 = userfaultfd$auto(0x8)
mmap$auto(0x8, 0x7f, 0x91, 0x800000000014, r1, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0)
fsopen$auto(0x0, 0x1ff)
symlink$auto(0x0, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0)
r2 = memfd_create$auto(0x0, 0x5)
mmap$auto(0x0, 0xa, 0x5, 0x8200000008011, r2, 0x3)
mmap$auto(0x0, 0x9, 0xff9, 0x8000000008012, 0x1000000004, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x1)
r3 = socket(0x15, 0x5, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x800c0, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)

1m9.654962594s ago: executing program 3 (id=530):
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
semget$auto(0x0, 0x2e4a, 0x8000)
unshare$auto(0x40000080)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv0\x00', 0x3896c2, 0x0)
bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3)
bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
socket(0x8, 0x0, 0x104)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir$auto(0x0, 0x7f)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d)
select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000)
poll$auto(&(0x7f0000000340)={0xffffffffffffffff, 0x5, 0x3}, 0x4, 0x101)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bus/usb/007/001\x00', 0x48302, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
write$auto(r3, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2b, 0x1, 0x1)
r4 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x1c0)
pwrite64$auto(r4, 0x0, 0x9, 0xfffd)
readv$auto(r4, &(0x7f0000000000)={&(0x7f0000000100), 0x12000}, 0x2)

1m9.318740966s ago: executing program 1 (id=531):
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close_range$auto(0x0, r0, 0x67d4d8f6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r1)
sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, 0x0, 0x4000)
close_range$auto(r2, 0x8, 0x1000000)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x7, 0x6, 0xe3, 0x80000000009b72, 0xffffffffffffffff, 0x7ffd)
socket(0x2, 0x4, 0x0)
socketpair$auto(0xffffffff, 0x100d3b9, 0xe, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
shmctl$auto(0x68d, 0x3, 0x0)
setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0)
mmap$auto(0x0, 0x0, 0x4000000000df, 0xeb1, 0x401, 0x7ffd)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7ff}, 0x800}, 0x5, 0x2)
process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f", 0xa}, 0x1000000000007, 0x0, 0x7, 0xb5)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x309001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0)
poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x7)
write$auto(0x1, 0x0, 0x80000000)
write$auto(0x1, 0x0, 0x7ffbfffc)

1m7.975527618s ago: executing program 1 (id=532):
mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0xb051)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
dup$auto(0xffffffffffffffff)
setrlimit$auto(0x8, 0x0)
madvise$auto(0x0, 0x1010001, 0x100000003)

1m7.801983606s ago: executing program 1 (id=533):
timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa)
mmap$auto(0x0, 0x3, 0xdf, 0x19, 0x401, 0x2)
unshare$auto(0x40000080)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x8200, 0x0)
ioctl$auto_SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000100))
write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f)
ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x102, 0x0)
pread64$auto(r1, 0x0, 0x100000001, 0x100)
ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)="607118e6f096b77e5fabdec5eeb0ac7b6f913ede880d53adf879beb15084c971a02af3c5d2679026575b9b372612c59b71c0eb69340a36cab0f3cf8d5e4997de4da2f186d8b2d7226e74a5b1079c13a1df820874b291d76fe478fc03b1898876c83cd47e871504aab00bfc00a8055f3f2d874db388f0ed4808d1f1911b9672c91cb6f9eceaff59323e5dfb4829f0ce38ec29bafe71")
socket(0x15, 0x5, 0x0)
r2 = pidfd_open$auto(0x1, 0x0)
setns(r2, 0x60020000)
recvmsg$auto(r0, &(0x7f0000000380)={&(0x7f0000000040)="1ce9780a04b4648cdebfcb1fef241ec53e473024543dc127f627938e6ae213990cea8bf0585ff4a7b7a220a69cc41156252b8ace28999012b3020570bfe1a2b82e29a92adca2c3da2292ad7474bb21652dfb6998ac77f2edc73d0f0a0d43fa55b1057f0491c4b25485f8d5b0d9e41007221a886946ccf58dcc3b4f2076f5d445555b82b189f24e5f266020916d", 0x4517, &(0x7f0000000300)={&(0x7f0000000200)="601a129734a6bd00d7d89f5785bc33d93d057ca085bd40e8a8f94ab85a148c3a04f9f38b95f893f9feb1c89659592c7f86b2fd303c2563a798de41f65293318c5d033e81dcad359d394dbdc6530a09095f38a8523d8ae6f91e95ddfbbb73085107033ff4bdb7fc819a80706f2cf4841ab44003df29c37d17a1037418927c08c884b83574a9e8712b65aa6082a34f9eff66a1b4eae64d4d9ef11c5bcff73b0fb3394b03bc9a233069c5470bfba028cf109416a9bd723c48c552f793c463ef78210acbd953a66814225628f79469aebe52e506850a3e339a36a03c370aa68ffca5f11dadbdd000f0f093", 0x2}, 0x4, &(0x7f0000000340)="5edad122119e91bbc784bb9ffdb98396a4ea8fbef02785fc6b02f8ed11fd82cf5ea3acbcef8bbf85569935", 0x81, 0xbd}, 0x0)
getcwd$auto(0x0, 0xffffffffffffffff)
mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x5}, 0x7ff)

1m7.422158939s ago: executing program 3 (id=536):
setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0)
r0 = socket(0x2, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="5e57b69f5df1e4060000ff001b94f6", @ANYRES16=r2, @ANYBLOB="010025bd7000f7dbdf250100003f06000200010000000500070058000000080009000500000008000a000500000014001f0000000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
mmap$auto(0x90000000000, 0x4400008, 0x6, 0x9b72, 0xffffffffffffffff, 0x0)
connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521, 0x0)
r3 = socket(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_batadv\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'netpci0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'team_slave_0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r10=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2f212cbd7000fbdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="ec009e000800fc4e962a6e5906beb9174600013891fbb631e01c9b39c6ef199b029b143e6cad0fc3c130a43bb371a85d9250294c0c689be467c1ff5e20b4e95fa9b59c9ac942b714039552235490cdfd39e2337059e8ff83b4e3836929994e4cbae4c8cc1580e4f6b9c734dcb4c570172fc9dc736908f981652bd4f92d9751ef012e9169f9c7cb9850ed5938285280c13ab3a3448e6a919cb6b5abddab6f2faa865c115fd9d7b7420cea9e1a61f04f98f368271b0317dd7b7f06994785a4"], 0x24}}, 0x4000000)
r11 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0)
write$auto(r11, &(0x7f00000001c0)='-\x001c\xc2.b\x97\x1a\xf4\xd8\x1a\x1c\xb2\x9db\xb1\xec\xdeGDr=\xc2\xdc\xdf\x8cg\xa10Fzk\x86bd\xfc\x19\x96y\x9cYy\xc1\xc4\xf1\x0fH\x0f2\xa6\xbd\x9b\xe8\x97\xb0>,\xbf\xb8Kje\x05\xc4\xf8\x01\xd3]\x7f\xb8\x83S\xaf\xc5\xceZZlTO\xf5\x81`$\xec=|1\x05\xa9\x95Q\xf6\a\x81)\x94\xdaJ.\x04\xf2\xd7O\xa7=u1\xcd$\x17(t\xa4.\x1d\xfd\xf1\xc8e\x9c\xb4k\xfd\x94+B\x17o\\>4\xb7d5\a\xef\xb6\xe5F\xba\xf9Q\xdb\xd0\xb5\xa6\x1b\\\x0e\xb7\xab\xc3\x7fO`\x0e\x15\xca\x01z\xc23\xa1\x03\xdd@\xf3', 0xfdef)
sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf250d0000004400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f30000000001400020076657468305f746f5f7465616d000000540001800800030009000000140002007866726d3000000000000000000000000800030056af00001400020076657468315f746f5f62726964676500080003000300000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1c0001800800030001000000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="5c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000400001400020076657468315f746f5f626f6e640000000800030003000000140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000800000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000600000028000180140002000000000000000000000000000000000008000100", @ANYRES32=r7, @ANYRESDEC=r7, @ANYRES32=r10, @ANYBLOB="20000180140002006261746164766c00000076655f3000000800030007000000deec956163f1e7d2707e0739b5a3e7a0f0f0eb4b2a2c71763913ca350d36d397d195c1b359a886f2eac37e8b233a3ea8a6f56b25be0735e81623e2279f678a3070a03458ec0e8d98db5cb7852d9e9d87f6d801793576492019e5594a0a6c6d71679280688daaea6aff11f1437ad94b3ac99235209c5855cfb7ce34545c8f1493f0514bf38446eb68658c90697770edc31335498e6617e01f31b8495b99914a69360a9090fef390787b33161d218928d3d109"], 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x4040084)
writev$auto(0xffffffffffffffff, 0x0, 0x61b3)
setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6})
ioctl$auto(0xc8, 0x54e3, 0x5c8d)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0xe983, 0xe1, 0xeb4, 0x401, 0x8000)
futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0)
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)

1m6.777484213s ago: executing program 1 (id=538):
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101681, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0xa, 0x0)
r1 = socket(0x2, 0x1, 0x106)
setsockopt$auto(r1, 0x6, 0x10, 0x0, 0x100)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r2, 0x0, 0x4800)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8202, 0x0)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop14\x00', 0x14fe02, 0x0)
mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x3)
r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd13\x00', 0x26000, 0x0)
ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, <r5=>0x0})
read$auto_transaction_log_fops_(0xffffffffffffffff, &(0x7f0000000100)=""/3, 0x3)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={"1f1fd77c243ceeb4703491d444db6e35afa5f26ce57f7f18a90a101228aa45b5", 0x7, 0x8, 0x7, 0x1, 0xbc4, r5})
sysfs$auto(0x3, 0x23, 0x0)
r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0xa83, 0x0)
prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7)
write$auto(r6, 0x0, 0x4)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0xa, 0x0)
getcwd$auto(&(0x7f0000000080)='}F/]%)*@\x00', 0xff)
poll$auto(&(0x7f0000000200)={r0, 0x1, 0xa}, 0x25, 0x109)
write$auto(r1, &(0x7f0000000000)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d6)

1m5.187386535s ago: executing program 1 (id=539):
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000000))
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000040)=0x2)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000080)=0x7f) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000080)=0x7f)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000000c0)=0x3)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000100)=0x8000000000000000)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000140)=0x80000001)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000180)=0x7)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000001c0)=0xa6) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000001c0)=0xa6)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000200)=0x8000)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000240)=0xfffffffffffffff9) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000240)=0xfffffffffffffff9)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000280)=0x239e) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000280)=0x239e)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000002c0)=0x5)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000300)=0x1)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000340)=0x5)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000380)=0x3) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000380)=0x3)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000003c0)=0x8)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000400)=0x6)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000440)=0xffffffffffffffff)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000480)=0x5)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000004c0)=0xca0) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000004c0)=0xca0)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000500)=0x8001) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000500)=0x8001)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000540)=0x2) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000540)=0x2)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000580)=0x3)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f00000005c0)=0x7fffffffffffffff)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000600)=0x3) (async)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000600)=0x3)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000640)=0xfffffffffffffff7)
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000680)=0xff)
r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x81, 0x0)
ioctl$auto_XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000700)={0x8, 0x4, 0xfffffffffffffffe, 0x1, 0x100}) (async)
ioctl$auto_XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000700)={0x8, 0x4, 0xfffffffffffffffe, 0x1, 0x100})
socketcall$auto_SYS_LISTEN(0x4, &(0x7f0000000740)=0xffff)

1m4.05673168s ago: executing program 3 (id=540):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0x2003f0, 0x17)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
close_range$auto(r0, r0, 0x2)
socket(0x10, 0x2, 0x4)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r1, 0x0)
r3 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0)
r4 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050)
write$auto(r3, &(0x7f0000000000)='-\xd3', 0xfdef)
keyctl$auto(0x200000000000020, 0x0, 0x5, 0x5, 0x8)
setfsuid$auto(0xee00)
r5 = setfsuid$auto(0xee01)
keyctl$auto(0xb, 0xffffffffffffffff, r5, 0x0, 0x200000000000075)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r6, 0x0, 0x8880)
unshare$auto(0x40000080)
shutdown$auto(0x200000003, 0x2)

1m1.333474148s ago: executing program 3 (id=542):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000140)={@sival_int=0x1, @inferred, 0x0, @_sigev_thread={&(0x7f0000000040)=&(0x7f0000000000)=0x2, &(0x7f0000000080)="6d7c7e996b74133b34f08b4e786e6722f015b8bde450799ca608ddd860abd46633b17abad378bfcc01f101c8bb5712fda0367fb06ac75cdf13d3eceaabf361bdb2d861eac57851d32142444f24d8fb520374e5f85fc7c13f0f1053c29106a3caa3ecdbfe273023c3db50130a10f115d7285e9c0b02f2f64faa0b1bef8ec53e68ea0f9af86a7b7ff872d5d7d5e95e256e96ee31364574d229053940f86541081cb328"}}, &(0x7f0000000180)=0x8)
r0 = socket(0x2, 0x3, 0x73)
mmap$auto(0x0, 0x2002020009, 0x3, 0xeb1, r0, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0xbfee, 0x0, 0x1)
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
mmap$auto(0x1, 0x1000000810001, 0xffb, 0x417, r1, 0x8000)
r3 = open$dir(0x0, 0x10000, 0x6)
r4 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0)
pwritev$auto(r3, 0x0, 0x4, 0xfffffffffffff274, 0x5)
msgget$auto(0xc, 0x77d9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
ioctl$auto_USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000040)=0xffffffff)
sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(r2, 0x5, 0xfffffffe)
pipe$auto(0x0)
epoll_create$auto(0x1)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0xfffffffffffffefe, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0xb7bf, 0x12, 0xfffffffffffffffa, 0x7ffe)
r5 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f00000000c0)='1', 0x1)
lsm_get_self_attr$auto(0x65, 0x0, 0x0, 0x1)
ioctl$auto(r3, 0x541b, 0x38)

59.093517155s ago: executing program 32 (id=518):
socket(0x11, 0x80003, 0x300) (async)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/sys/net/sctp/rto_alpha_exp_divisor\x00', 0x900, 0x0)
read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) (async)
timer_settime$auto(0x1, 0x3, 0x0, 0x0)
r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(r1, 0x400454ca, 0x38) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) (async)
ioctl$auto_TUNSETVNETLE2(r1, 0x400454dc, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220408c0}, 0x24000805) (async)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4c800) (async)
timer_create$auto(0x2, 0x0, 0x0) (async)
timer_create$auto(0x9, 0x0, 0x0) (async)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x103841, 0x0)
io_uring_setup$auto(0xb3d, &(0x7f0000000000)={0x4, 0x8, 0x1ff, 0x3, 0x4, 0x7, 0xffffffffffffffff, [0x3, 0xffff, 0x5], {0x2, 0x7, 0x2, 0x7, 0x6, 0x2, 0xd, 0x4, 0x6}, {0x8, 0x4, 0x2, 0x80000000, 0x5, 0x5, 0x7ffb, 0x63e, 0x2}}) (async)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0xf67, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200"}, 0x0, @enumerated=@item_ptr=0x0, "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) (async)
setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) (async)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async)
socket(0x10, 0x2, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) (async)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a37, 0x0, 0x4, 0x0, 0x3, 0x5}, 0x8}, 0xb, 0xdb22, 0x0)

56.954174091s ago: executing program 3 (id=545):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r1=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x0, r1, 0x18}, 0x65)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000)
close_range$auto(0x0, 0xffffeffe, 0x2)
pipe$auto(0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2b, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a)
sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000)
r3 = io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8)
setsockopt$auto(0x3, 0x1, 0x7fff, 0x0, 0xf)
read$auto(r3, 0x0, 0x80)
write$auto(0x3, 0x0, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, r4, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0)
write$auto(r5, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)

52.74450796s ago: executing program 3 (id=551):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
mmap$auto(0x0, 0xeb59, 0x3, 0x12, 0xffffffffffffffff, 0x3)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0)
mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000)
ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0)
read$auto_transaction_log_fops_(r1, 0x0, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5})
socket(0x18, 0x4, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, 0x0, 0x9)
ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"])
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0)
write$auto(r2, 0x0, 0x4)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x28, 0x5, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000)
r3 = socket(0x10, 0x2, 0x4)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
unshare$auto(0x40000080)

36.951773818s ago: executing program 33 (id=551):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
mmap$auto(0x0, 0xeb59, 0x3, 0x12, 0xffffffffffffffff, 0x3)
bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0xd, 0x9, 0x9, 0x6, 0x7fff}, 0x3b)
ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x5)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fe02, 0x0)
mmap$auto(0x0, 0x20007, 0x1004000000000df, 0x16, 0x401, 0x8000)
ioctl$auto_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r1 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0)
read$auto_transaction_log_fops_(r1, 0x0, 0x0)
pread64$auto(0xffffffffffffffff, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x1f\x00\xf4\x00\x00\x00\x00\xf4\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001)
mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe)
setrlimit$auto(0xa, &(0x7f0000000080)={0x7, 0x5})
socket(0x18, 0x4, 0x0)
sysfs$auto(0x2, 0x23, 0x0)
openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, 0x0, 0x9)
ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r0, 0x80085502, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000200000087c788deb1e689ded72700ac7e75046f5e547f0939e6c37acca832a2dacd007c9e2177923a589076e8dedc15db27d5af71356faabe0cae869409e01eaaf51b3ff9f05159438811b43e8511e85cffde5ac434b65098ab7fd5eca656e770f6a0c84ccb81b98d07eb6826c9de760e875fe12242f37e662835bed249fe0bd132cec7e8cf8e543b8faeebf75fb6961034812a6cefa843b4eafbf2beca656a6ca55464d7de1d56398823d37f8157dcab7d3c42d8bc1af84b34076ffeac979949ba"])
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0)
write$auto(r2, 0x0, 0x4)
mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000)
sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x28, 0x5, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000)
r3 = socket(0x10, 0x2, 0x4)
write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb)
unshare$auto(0x40000080)

17.526635995s ago: executing program 0 (id=594):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0)
inotify_add_watch$auto(r0, &(0x7f00000010c0)='./file0\x00', 0xfffffffd)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0xa000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x303000, 0x0)
r2 = getpgid$auto(0x0)
rt_tgsigqueueinfo$auto_SIGCONT(0x0, r2, 0x12, 0x0)

17.272246572s ago: executing program 0 (id=595):
r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
r1 = socket(0x28, 0x800, 0xc)
stat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x3, 0x5, 0x7f, <r2=>0xee00, 0xffffffffffffffff, 0x0, 0x9, 0x200, 0x9ab, 0x1b, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x6})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x4)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
dup$auto(0xffffffffffffffff)
socketcall$auto_SYS_ACCEPT(0x5, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/proxy_ndp\x00', 0xc2c41, 0x0)
ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, 0x0)
ptrace$auto(0x10, r3, 0x1, 0x7ff)
openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/invlpg\x00', 0x8001, 0x0)
pwrite64$auto(0xffffffffffffffff, 0x0, 0xf4a, 0x100000001)
setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc)
unshare$auto(0x40000080)
mmap$auto(0x8, 0x2000e, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001700)='/sys/devices/virtual/tty/tty58/power/runtime_status\x00', 0x142, 0x0)
sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000000007, 0x83}, 0x5}, 0x4, 0x4007)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x1ac}}, 0x40000)
write$auto(r5, 0x0, 0x9)
iopl$auto(0x3)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r6, 0x0, 0x9)
write$auto(r0, 0x0, 0x1)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f0000000200)=ANY=[@ANYBLOB="14140000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x1414}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000010)
ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x0)
setsockopt$auto_SO_ATTACH_BPF(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000016c0)='\xb7', 0x5)
ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)={0x7, 0x7, 0x14, 0x8, 0x6, 0x200000a9, 0x11, 0x81, 0x7})

16.843554375s ago: executing program 0 (id=596):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x40, 0x0)
r0 = socket(0x10, 0x2, 0x4)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4044000)
r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TIPC_NL_MON_PEER_GET(r3, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x711, 0x70b52c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848)
r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
pidfd_open$auto(r4, 0x0)
r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$auto(r5, 0x400454ca, 0x38)
r6 = fcntl$getown(r5, 0x9)
prctl$auto(0x79, 0x7, r6, 0x4d, 0x1)
sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002640)={&(0x7f0000000180)={0x2484, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x121c, 0x7, 0x0, 0x1, [@generic="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", @generic="a09e9190197c775c1feeb0c7868658f91cd82adf8e58cf568880a4869815a481e35143d7dc3ba390fe77caedd9cea8277c6fdc7cc1417aeaf06c41c2a0f427db369a0505d736b551fc231e9691135f826151ed88222010f5b974aa04d1c1934d5781c95fcadba7e7c88455904eaf79a9cffe4c8c4a1035b367af5f69be3824ceed50aabc", @nested={0x180, 0x163, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0xd7}, @generic="ad1a233165109bfd55b81de211f424d47791958e1f40db79ddfc5cc0fbaaf9eedf065979aef061faa98d98779f8af3a9021bd3b1cdf0f7db4386d307005941fe579bf3690c79ee42ba57915df484e011f48226631f437baea92e0472a1319bc1f22180a2c45184f2d876edd8589fd2f07a654f7aacffdf7f04753c284f0b3903f1317f7c5cb972af8dab11e14b665c5a4e52f032fca8ef1a", @typed={0x5a, 0xc, 0x0, 0x0, @binary="9591226dc27652de25bddd5febc9dbf1aca42769f9b500c462b1bbb099f9fca9494f0ab38c2feefbe09edebd66f95c762e330bf71ab67b6f6780428cbfd340f92db2cf6709786205f721424b919e20054f53eab825cc"}, @generic="aad076c45e2aa4925607553e29185a348f6e293e3c6dcbeb9ec03da0383baecc1f095d2dd7c04d398297b3b3d64f88e341fb5dafba38aa8058bd9cf29927c070dc1e9fd4e8cf778c1332a961e3ef907739f382617de7bd92a2c56bab3e8e5552eaaadb207d63017ab788bccdcf83770c61f75fc7f092fd350f3b8ea7412de1e4"]}, @typed={0x12, 0x52, 0x0, 0x0, @str='+-,^-/--$]-\x8e^\x00'}]}, @TIPC_NLA_NAME_TABLE={0x1252, 0x8, 0x0, 0x1, [@nested={0x1183, 0xa2, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @pid=r4}, @generic="9956a7081f51a37b55ad0e2d609911b0a6ee1dffbbb19ba29459229ad443b0fce9ef7854400b4a6b2536ff224b453be4633d8f501ea1b21eb8d38e1a712db1dc40eb906341194f20ea4a7e9408dc9f27a50fcd13a0948c33613de474da051869e70271ffc107687c61306c29c08b04524a2da747a4f90077fa05c2e5fbc6289798674ced00f0a514497bf362c2d6a3e72a00858be43870f542877f94238f48895c772529fefd0818e4c68343325e8f3b853290b847954e86792c17ba53781972ca3fc21977dc308dca7e3382b59466c5e8859f47", @nested={0x4, 0x104}, @generic="ae4d50e0392c801556616d882d6c87c1a5f6cf1265de0b3d78cfd19a98c6fd2964bec7dbe7064d7a43c14dd28a25909b787a0d3b9b5bc125089324cfc1381d54ad1659bb761d52ed7412c06d6b15b1f644f799fe4c32a90dd7ff3c2fbed869e6a7f33a97e4c15821b7dbb1f3a36fd7c531f39e51e66052496fd86e4c105a288c9770d08063719359905f22e607ee6159693ecd1b1cfeec62862411c1c6c7914e757ccdf5aebd7398799a8a35e778b21264fb73796622f0e825414f2066a236c5a352456a55d3038365a57aac46d1a188c512d5c9d9721c3d251dc4db56101c3d5bd5bd4f5d774b8b72e5dec554b3cd4431403741eb7a85a19148f7472d171b3c364a8cf05dacd9db15d9f06242c19e77d633927e80c0d6ec6ac3a0ec31a34ed8be4433c70bcb2968a81912eb4c1d1b8fabafc21d8934d276f429eb2bef59f2b54676d9b5caf559a8f3b3dc5b1cbc14c8b52b81ef2319a1ec597aa501f43bd46dd0e757166f6f685ed9326eae68868a3a030dd26d32f84f4ab3f88a858dfa16dfe4839619a6936f7faa08ea1ff3fe772847490b7215bc932d2ed3101ed0f767b6997588384153fd0fadcc60f5240357e26d162febad814b8e0aa74c6776d30815547d4a9464b1a184f002e176c5766f496538de78cb92b8785e6bbee3944942a149cc7a522b09de46fdb022162584b863e154d6354a633a3186380d765dbc00bb4421e64c8b676de86468ebde712e9ca7206fbb8132e42b6dffa5227abfb9e7c875d43caa634643191ec852db72643407205393b94138e2e4bc213385b68bdf340687df50e80867552c8890b01374f839c286f202be45692b9194268d5c81b6c316050bba1ba32ef84ec703d36d7cfd7a649ff9bdf57aace12dabcc077565afeef9cbe8b9748072920c01ca14ab1d968f59f1bf317568b97712cfd8ab581052243fa004828f67aa0840ee417c3481eeabae3273d46aea61d50feafb1ece8eeaffd6a8ad14ad05a30369bb9befd64d983a08f2cf30f4b6fb105d5f4ff1d0ee0207ba36b942e95fec48d88051c6d2f5a2acdf16e89650186c656a0e72e8deb7d32de0af4984f3befbb4cc116ef5ef10cf64b7b89b4d6e7b4f9329b3885281a8f440f965d91055366891137a51684c6042acda4b9e151d80846836e3a3a9ec8fa18fdcdea3f1318dc355c99be6873984d010753ec9cbca6ea9f99d23d0bdc72eb02f844f7750ae97217e0582f7684ffbf98df6a8848c7af18f98bceeb43476bc54bbbe986704891ee355fa4096192590f55b9dbce972ed46f666bcf72dba6e9dd3dc0633a68a27ce10ac2aef2bf4686cd9074fc090279c31530482e5ef35b708efbe920649e343d3483a077e9863a558c8ee0ca815e00cfc5057fbf34028eaed2c7cbe9f0c76c46435a618487e43ef47164a51c5a8ceff7d8c1a1be99f22bd39ac3c21684e29e94e271931cb0496ec369a4044109af7063f4c065b1878e4c8f82523e1024c00fe0f0040960b294ec8f1f15979d8dea5a30dafc7fcd25de5b28e018c79559dc91ffcc6811958fac92da5f283e4b213ed546bbe4a8ed7114444394014325b8b543238560e61890241ec64d6d09e3fd1a935da05202327fcb62236c36e623353e8d3be0bae600eca2798aac3750e5252a93d6c039f772ec54da504c4fbe27d0cd27a559b23ee4ca7402e67d79663f83565cf90faa141517c87761e2fef0d5b7babcbca2aa1cb86b85db2b482545e8bc43e5ef0b476e5d4860dc95447c2b9f56289607e8f5c59c608ec46807d866e7dd181de7ddb4875f0f3d653426b55ea55483835aa86cd095c65d4a3ace45b6f953cb9144a2436042cead224d73570e9f22447fca942b6c1f7074f3260322e16b13341b6fa205d9fe6fcf93dcbf8ab90321ac805905687474d992fdb553be1a261ebeee18b6131908b41d88100d3d3322e3707ab501f8a5bfccc0154139df7cdcea8f9d082cb80c1eadb83eae0a4cf36785026e09d6b199b7490481764e39eb9004970685727419104b7b7b63a3a9f53b243833600c1cc3a5eb6fed175153a3aac48d740244e3846bf0a6e6fdf965be5da48e3fcf00eff2439b9cb836fac269891e8f69c5b63e6907fba2f19076f41ecc6904d5d4146afb67ceeab9ebeb0e57ea26750d057e54b538680768a1a5c83b91508f84fef2a0637a0e55c422d4abb167a7de46a89ae09b2f8921cdc936b7761b878808c5d852cb49d908f2aedc54118fed231444d013daa021ff23d5fddf1ce2227f7a5eca038a61d29eb4153154a7138001a4692aa7270e76f576887915c49f18bd53d09a593fd94222e0f1b4117e3cc253e46f8567ba2d4e195f97a377ff91acea709d0c3628bea38a474db391ea8151ef3348f6567ecf85942d718f05cf357c9696d2ed9419a8bcee45ca9bd1e5267a097eff44b4fa44ca2fa37118a4896c5007b0f9732b0c14800f6d245b0359ab7837ebd0211322620efdc0246dd0e59eb79bbb5a809c4f45ba753dadc7c7e933e6fcdb960e0bddd7bc994b063ba93628a74e1a56b7ad498fac7afde61b0bf7bef7ad8884a916b58b3285b7a721c5717922649af952b798f6b5644d15fe7c90325f7d77141d36b003aab5ae471af7f377b8832b0d3a95a04b2ef6672bae64c6e9fa305748134162999f47d2eada900a0b97135c4cd5fb4ced6bb13034de201f186ab9f20613faac0e7674605448b2a09081422e788af1772aa2313f62ca94d302d5c85a2292e624887e4756f6d87c950c3de23848b17adb58528349812f993bdde45abf4cf606acddc644fe52f7cef4d8a6e4ce70e7fa64c714df70dd40958173ebfd0fddb17f39a9dccebd67715e7adeadd641c291baca6b7690641e5e4970ea35be213dce99bc9ac125d8d147ccf31d7c2a5ce7a2d1a1c93799b09c69df43fab61b506f4a4c093a268368e75bc969ac4d277c99749b5a4127fabca2798b4e8ff88c3a4137bbbf94a9b704c40a1d49093735418b7f089e7efe6491894562d229ecb588a961ffce084297980cf3d9f627798f3f59f886cb60ff537aa7868c07a1d9edcbf72d711ac61f298a76ec443ba6a0638fca58df44751769233ca86a429dc3a5870e9c6591a929c6073d41d7870572402714362d480717325c984b8f80250dd25b52ffd889425dc90bc2a6f438548b483b49a625dfeef0a736b264760bc73c8b4443e8a217a2e06467244540372e5e6c8a1c13da3ded24141c61095befccbde12f4819007a500fa411f3242d7efd80cc911ec1e842697906e064b33cf36d16eb19a19cad167bf8eb1ac940e33ba4026704c38a4660994993b7c3eaa564d1d429079dac970d594ee82f2a835f2a062bb3e6baed87016a09d754dc8bf3512ff612cb5f975ce05b18396acd327b9b7978071c4046ab8f7a73308da318fb98fdd4f213d860ae01fdf6a70a9c7d08052a1674e71eaec667d03a6c3f78e38c769b141787acf118e2ff2ab5b03e34abd20b10eeb2c1943ca0c09f80f1b59218c18145d9984a6598c6e75eea2d2738558b27486a1f214e3cc5e4f38dfde9e2b61c931e8d4e4f444224566360fb7f7505169d196b03df455fccc9d41fd721c928430ce6a88f2cf23852bc248b0af4edae581dbee639d0c2e458ccd35925319c600b6358301987156eb618be6759e833b8059a51e56c019c01643b4b69b86b6ec25727910244b642b3f03d67f6fb3922558412b825eb9958770273f9b2f68d6404495fc44cf1a554aa11c28fe2b89c998f00cd5a530a7e21392627f4c8d5c4ac76764194c866669c5fe5a60dec27d97c7297e615418b8873baff29f8b3598427bb880db640c61eca5e6b11873f2049962c85bdc055a306b59f97e153bc4ef5a106c5cec0a99814b16234f368279de58f98303b00852380c12109b64ac981a3b33007551504514c9258f2d51e8df4ea3e2e5cbd06ae47a72e88c74bbf86ada3e9c7a2da32a0699044d708f68feb5d18f9403db54d1dccc55a4a4f79fe812356746dd365f00a4929b94c26b685ef2bcc25d4c496ab8389bface55db6bfe529ce5e4f7f3215a63944a3b3a444afa29dfdab95f0b5942b2e589070a114517468048502224203e76e04a9c2d712180bb61aaae2f1da1c555bc39d97138ad970576bc99cfc27b87404a71b47a51f030f9226b7e82a78b8a98bf0acfcf92f39b5a0128ed1547c1f2cef382f71144e1217dddce341c1b3c19cfbb395dbc864e8dc0bac4ce75c8bd09ba53a5395eaa01abe8971714c803dc5dcf9eec030dcb833e5daa6e12886052d246d843ed32ef06d55560eabb86a1dd9fc22f0030a393d415df6e866a4c970d48e4b48b00177e1f17fc4d24fbbc2c3b8f561fdcce5a798778190ef31bac1839ee558225e1121ae641ba85babff952bc01f3b87567f312a3483d91e824267d313f9d2ce01d14bc117bb649ed364dc989d19857ea4707d886476d45725ee92e76e23581090f32cc5af5c7945a2ed2fd1383dc820e8f29fba7b4d4d528aa6564a1a25dc712253afc1f233688b13df274e0d2475a0a88f72f088cb6af0f91f1fbb8b0d5fceb49d3a511634fed27802f40c920ac637bf31f50e0108a541e13ca18600b342405da79e58579178a53b5db4a6eeeb19d67379cdef78f08335f7e79e14f63c33863ea5e6da945bcf4729790eab56b8acd14f3e0d27b3b6d97dca33c6105e901afd5e6e1bb06c61a79d14ec6299c67794f0e847e2dbae306565d9057a836d510a235ff1e90fc01577207761f5d208b266195357d76c67e5bf6b9ba354ba20215bcde059545fa8396e073ceeff7e715ba0f146c91cfb47b55f4e56764f1f38f6a9ca45bd670d73b19fdd9753a3eff52ae8a25ae06d1b56c2b2edb386531feb7167717d1fa92599971973274f3d01cd93e57966800a6fb71bf1c6da93113ce4367919545cd412a316c90696e9c4a3e6a965f04f55b18bd57e3973e49a4507e4000f600a86541d19b7234024d306cddb6c76dfe7613277c8af0d323227756d1ae382252e2898d0ef0b173b1e126046be822ce07337c52090447e4e287df51dc845e0dc52537c1f4f8193bccf8bf787ad5a43b0c916d3048c681de474617843357ba1e896d2f80d9a37b1e6a259434060673fca643cba1cf59abc58490d7712f6664694fc825834c1bdf46b23f5c13ea653116ed8198695bdaf21c4bc065fd40ccca45102cebb0e7b0c97af0a1939f804aaf466bffd45ee9f14a0c19868d732c54d5d36c38c8ec1270f1e6eed58a2232f16f8bdf0be39eda962a5abb58f1250fb9061f75aa241221b2baac53ba72bbe5669b51d89d1e54899777deef539c122c73eb9f6e36c2b60d84ec3ec61147b8d45bc20e8629a30cf6a5719adf68b2d20f3a7dda923973324ab313a11115965828190843ab4a119119c5a0c004a2dddeb541e40e18dad88eb658f16e6512c8a87188e7da01e57618d17e4c374e96101f83aef9aa158676f3a96050d49322918572e4f52256254b260fe1d6da9de307e398c93ed6e705b074e78c4d1e5d147a8dddba34785c2f9aa0beb9b3bbe9eea061fcec1407fdce3d9e307553c36b11ea0265b91bd8ca8e5aa694ee07270b4849ca7590ece546898fd15f4063528338e3aefe53b66a09e9ae8f6b6e66aaa124202d2448ae4d917450de2270769e29aa50d93bc9c91b8c067ad98e77a79f13b7ab664b4f023fadaf0ef690a395515429919c64dafe114e7408772239b3c7772b42456fead2dadf81bbfda6673ca30ed338ceac4d92134393e06ea409cf804b4229659c8faa9e89798c3bc285550a2fa1ec", @typed={0x9, 0x10e, 0x0, 0x0, @str='*/.}\x00'}, @nested={0x4, 0x13f}, @nested={0x4, 0x1d}, @nested={0x4, 0xb3}, @generic="bcc3e872cbbb98460a6357ba782e702fa53c6656113cc7fa9e94f08e98d7f580b3a8661b36a12720986bfe8665b2549b0983961d5a20d8a445fa0f34490f0c714c9f7d50d0e88d9328112b5f2a0b06e7e25baa121463bc05322e6cfaaa4ab418e9fd370a92565e9bcf29deacb9158dc25f8ea890a5050fd94878b7618957f29741a7572bb0fa96"]}, @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@empty}, @nested={0x10, 0x77, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x55}]}, @typed={0x8, 0xe8, 0x0, 0x0, @u32=0x4}, @generic="9bd81586aa084f505849ec8f9f235d2959c6a2388fd5c6fb3a3bf21b6c3efe1ee3193bde03b27cbb563d3d279196838dc3406a1242efd8d02b9c8a3315d6ed9dba02142adbe144112b95a1ee48ef7017227e93e1360c24a303449c7f82cd8c55e3337c89f60083686f98f97741ae5caa7fe3b0a953b814b8c4bd4413911b92d9d9f6f24d09538d7093d10ce5d5874ce29e224529f716a05ab8414d5756ee"]}]}, 0x2484}}, 0x40)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)

16.597964368s ago: executing program 0 (id=597):
mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
read$auto(r0, 0x0, 0x9)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80080, 0x0)
read$auto(r1, 0x0, 0x5642)
syz_clone3(&(0x7f0000000100)={0x40004400, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x58)
ioperm$auto(0x94, 0xc81, 0x5)
r2 = getpid()
process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0x82}, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0)
ioctl$auto_SNDCTL_DSP_GETOPTR(r3, 0x800c5012, 0x0)
r4 = openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/nfcsim/nfc0/dropframe\x00', 0x202a00, 0x0)
read$auto_fops_u8_(r4, &(0x7f00000002c0)=""/236, 0xec)
r5 = open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310)
fcntl$auto(r5, 0x402, 0x1)
mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r6 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x2, 0x0)
pread64$auto(r6, &(0x7f0000000040)='\x00\x01\x00\x00\x00\x00\xfe\r\vZ\x00\x00', 0x301000002, 0x183)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0xa, 0x1, 0x84)
io_uring_setup$auto(0x7, 0x0)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x15, 0x5, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/gre0/locktime\x00', 0x2100, 0x0)
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)

16.216606558s ago: executing program 0 (id=598):
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x11, 0x80003, 0x300)
socket(0x11, 0xa, 0x300)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x11, 0xa, 0x9)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0xb, 0x1, 'dummy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20041040}, 0x44c0)
unshare$auto(0x40000080)
openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x10, 0x2, 0x4)
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082)
write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
mmap$auto(0x0, 0x100000000400008, 0xdf, 0x100000009b72, 0x2, 0x8000)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0)
ioctl$auto(0x3, 0x3, r3)
readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3)
ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5406, 0x0)

15.215152942s ago: executing program 0 (id=599):
mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0)
socket(0x2, 0x2, 0x0) (async)
socket(0x2, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x0) (async)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x0)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000840)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\b\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\xb5\"\xe8\xe1x7\xa1b\x83?\x06r}u6\x1c\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\xdd\xd1\xfc\xfd\x9c\x04\xedW\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x8, 0x0)
lgetxattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x101)
mmap$auto(0x800, 0x2020009, 0x3, 0x7f, r0, 0xfff) (async)
mmap$auto(0x800, 0x2020009, 0x3, 0x7f, r0, 0xfff)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/module/parameters/sig_enforce\x00', 0x1, 0x0)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/current_tracer\x00', 0x440100, 0x0)
write$auto(r2, 0x0, 0x80)
statmount$auto(&(0x7f0000000000)={0xffff, @raw=0x5, 0x7, 0x6, 0x8001}, &(0x7f0000000a80)={0x7f52, 0x7fffffff, 0x9, 0x7, 0x6, 0x8000, 0xc000, 0x1, 0x5, 0xfff, 0x5, 0x3, 0x8000000000000000, 0x7289, 0x4, 0xd, 0xbba000000, 0x9, 0x9, 0x9, 0x5, 0x4, 0x7, 0xfff, 0x100, 0x8, 0x101, 0x3, 0x10000, 0x7fffffff, 0x5, [0x0, 0x28, 0x5, 0x5, 0x4, 0x51, 0x3e3, 0x2, 0x2, 0xb6ab572, 0x6, 0x9, 0x200, 0x7fffffff, 0x5, 0x8000000000000001, 0xc6d, 0x1000, 0x8, 0x3ff, 0x7, 0x1, 0x2, 0x346, 0x7, 0x10, 0x1, 0x9, 0xc, 0x7, 0x3, 0x2, 0x7fdf, 0xffffffffffffffff, 0xff, 0x6, 0xc2da, 0x4, 0x10001, 0x7, 0x10000, 0x3, 0x7], "62d91da4aed04c31f6bb765b25a3bb132f56a3893d02ead6619f85f4d7ac9d5c086a00f455184743bf7c34f1b025ed5403c23902ad4bf2e68b0e1a9e6a55aced3502ec26f7c2974e2d"}, 0x1, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x6, 0x80000000eb1, 0xffffffffffffffff, 0x8000)
write$auto_uhid_fops_uhid(r1, &(0x7f0000000440)="b5549a26f7a8c14042e12a5f76aafd629da571fb2e679f1aff4581b8ea55", 0x1e) (async)
write$auto_uhid_fops_uhid(r1, &(0x7f0000000440)="b5549a26f7a8c14042e12a5f76aafd629da571fb2e679f1aff4581b8ea55", 0x1e)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) (async)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000)
mprotect$auto(0x0, 0x806121, 0x6) (async)
mprotect$auto(0x0, 0x806121, 0x6)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0)
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1", 0x23) (async)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1", 0x23)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004) (async)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)

0s ago: executing program 34 (id=599):
mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0)
socket(0x2, 0x2, 0x0) (async)
socket(0x2, 0x2, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x0) (async)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x0)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000840)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\b\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\xb5\"\xe8\xe1x7\xa1b\x83?\x06r}u6\x1c\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\xdd\xd1\xfc\xfd\x9c\x04\xedW\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x8, 0x0)
lgetxattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x101)
mmap$auto(0x800, 0x2020009, 0x3, 0x7f, r0, 0xfff) (async)
mmap$auto(0x800, 0x2020009, 0x3, 0x7f, r0, 0xfff)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/module/parameters/sig_enforce\x00', 0x1, 0x0)
openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/current_tracer\x00', 0x440100, 0x0)
write$auto(r2, 0x0, 0x80)
statmount$auto(&(0x7f0000000000)={0xffff, @raw=0x5, 0x7, 0x6, 0x8001}, &(0x7f0000000a80)={0x7f52, 0x7fffffff, 0x9, 0x7, 0x6, 0x8000, 0xc000, 0x1, 0x5, 0xfff, 0x5, 0x3, 0x8000000000000000, 0x7289, 0x4, 0xd, 0xbba000000, 0x9, 0x9, 0x9, 0x5, 0x4, 0x7, 0xfff, 0x100, 0x8, 0x101, 0x3, 0x10000, 0x7fffffff, 0x5, [0x0, 0x28, 0x5, 0x5, 0x4, 0x51, 0x3e3, 0x2, 0x2, 0xb6ab572, 0x6, 0x9, 0x200, 0x7fffffff, 0x5, 0x8000000000000001, 0xc6d, 0x1000, 0x8, 0x3ff, 0x7, 0x1, 0x2, 0x346, 0x7, 0x10, 0x1, 0x9, 0xc, 0x7, 0x3, 0x2, 0x7fdf, 0xffffffffffffffff, 0xff, 0x6, 0xc2da, 0x4, 0x10001, 0x7, 0x10000, 0x3, 0x7], "62d91da4aed04c31f6bb765b25a3bb132f56a3893d02ead6619f85f4d7ac9d5c086a00f455184743bf7c34f1b025ed5403c23902ad4bf2e68b0e1a9e6a55aced3502ec26f7c2974e2d"}, 0x1, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
mmap$auto(0x0, 0x2020009, 0x6, 0x80000000eb1, 0xffffffffffffffff, 0x8000)
write$auto_uhid_fops_uhid(r1, &(0x7f0000000440)="b5549a26f7a8c14042e12a5f76aafd629da571fb2e679f1aff4581b8ea55", 0x1e) (async)
write$auto_uhid_fops_uhid(r1, &(0x7f0000000440)="b5549a26f7a8c14042e12a5f76aafd629da571fb2e679f1aff4581b8ea55", 0x1e)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) (async)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000)
mprotect$auto(0x0, 0x806121, 0x6) (async)
mprotect$auto(0x0, 0x806121, 0x6)
io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}})
openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0)
openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1", 0x23) (async)
write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1", 0x23)
unshare$auto(0x40000080) (async)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004) (async)
futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)

kernel console output (not intermixed with test programs):

01633][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[   88.407371][ T5628] Cannot create hsr debugfs directory
[   88.817975][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.835151][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.843477][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.854305][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.862827][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.873144][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.890791][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.901439][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.965961][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.977148][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.985317][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.995671][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.003886][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.014895][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.038464][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.048730][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.137509][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.147377][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.155697][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.166903][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.185915][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.196383][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.214100][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.226378][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.261583][   T50] Bluetooth: hci1: command tx timeout
[   89.270963][   T50] Bluetooth: hci2: command tx timeout
[   89.277148][ T4942] Bluetooth: hci3: command tx timeout
[   89.341372][   T50] Bluetooth: hci0: command tx timeout
[   89.354053][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.365753][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.378504][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.389248][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.405456][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.415451][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.433021][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.443541][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.459907][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.527149][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   89.551590][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.558780][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.600256][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.607443][ T1346] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.676801][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.747638][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.782803][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   89.829482][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.843956][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[   89.856344][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.863586][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.895437][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.902702][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.935277][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.942508][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.974898][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   89.994867][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.002126][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.049482][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.056709][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.094403][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.101575][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.835544][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.995905][ T5623] veth0_vlan: entered promiscuous mode
[   91.058631][ T5623] veth1_vlan: entered promiscuous mode
[   91.189667][ T5623] veth0_macvtap: entered promiscuous mode
[   91.223981][ T5623] veth1_macvtap: entered promiscuous mode
[   91.319673][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.345777][ T4942] Bluetooth: hci3: command tx timeout
[   91.345801][ T5639] Bluetooth: hci1: command tx timeout
[   91.354661][   T50] Bluetooth: hci2: command tx timeout
[   91.379900][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.408583][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.422017][   T50] Bluetooth: hci0: command tx timeout
[   91.429282][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.462318][   T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.477727][   T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.499484][   T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.510371][   T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.578763][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.684264][ T5629] veth0_vlan: entered promiscuous mode
[   91.713333][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.732239][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.761408][ T5627] veth0_vlan: entered promiscuous mode
[   91.770266][ T5629] veth1_vlan: entered promiscuous mode
[   91.814184][ T5628] veth0_vlan: entered promiscuous mode
[   91.829264][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.854793][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.856355][ T5627] veth1_vlan: entered promiscuous mode
[   91.875377][ T5628] veth1_vlan: entered promiscuous mode
[   91.930054][ T5629] veth0_macvtap: entered promiscuous mode
[   91.955405][ T5629] veth1_macvtap: entered promiscuous mode
[   91.962288][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.989689][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.016971][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.051082][   T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.072885][ T5628] veth0_macvtap: entered promiscuous mode
[   92.110052][   T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.132299][   T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.143923][ T5628] veth1_macvtap: entered promiscuous mode
[   92.161011][ T5627] veth0_macvtap: entered promiscuous mode
[   92.185284][   T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.252996][    T9] cfg80211: failed to load regulatory.db
[   92.262744][ T5627] veth1_macvtap: entered promiscuous mode
[   92.308371][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.327826][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.429502][   T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.441586][   T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.485053][  T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.496794][  T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.505138][   T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.525720][   T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.556231][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.641675][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.709335][  T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.719251][   T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.728451][  T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.769384][   T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.769479][   T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.769530][   T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.979240][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.988436][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.190818][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.202157][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.213246][ T5786] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   93.245354][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.263343][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.421175][   T50] Bluetooth: hci2: command tx timeout
[   93.421692][ T4942] Bluetooth: hci1: command tx timeout
[   93.426817][ T5639] Bluetooth: hci3: command tx timeout
[   93.511485][ T5639] Bluetooth: hci0: command tx timeout
[   93.601760][  T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.644156][  T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.419185][ T5799] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1'.
[   94.496009][ T5799] Zero length message leads to an empty skb
[   94.948333][ T5796] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.254392][ T5792] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[   96.454089][ T5823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'.
[   96.728457][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   97.160324][ T5831] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.012053][ T5837] random: crng reseeded on system resumption
[   99.531180][ T5869] openvswitch: netlink: ERSPAN option length err (len 4571, max 255).
[   99.716975][   T29] audit: type=1800 audit(1783966759.606:2): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15" name="discovery_nqn" dev="configfs" ino=7848 res=0 errno=0
[  100.865463][ T5903] process 'syz.0.17' launched './file0' with NULL argv: empty string added
[  103.606793][ T5926] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  105.976819][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[  106.205443][ T5961] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  106.224316][ T5959] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET)
[  107.319900][ T5975] random: crng reseeded on system resumption
[  107.938220][ T5983] netlink: 6 bytes leftover after parsing attributes in process `syz.2.34'.
[  115.972343][ T6117] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  117.420333][ T6135] smpboot: CPU 1 is now offline
[  117.627779][ T6121] FAULT_INJECTION: forcing a failure.
[  117.627779][ T6121] name fail_futex, interval 1, probability 0, space 0, times 1
[  117.685851][ T6121] CPU: 0 UID: 8 PID: 6121 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT(full) 
[  117.685878][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  117.685889][ T6121] Call Trace:
[  117.685895][ T6121]  <TASK>
[  117.685902][ T6121]  dump_stack_lvl+0x100/0x190
[  117.685927][ T6121]  should_fail_ex.cold+0x5/0xa
[  117.685947][ T6121]  get_futex_key+0x295/0x14f0
[  117.685991][ T6121]  ? __pfx_get_futex_key+0x10/0x10
[  117.686020][ T6121]  ? lock_acquire+0x1b9/0x370
[  117.686052][ T6121]  futex_wake+0xf4/0x5e0
[  117.686077][ T6121]  ? __pfx_futex_wake+0x10/0x10
[  117.686099][ T6121]  ? find_held_lock+0x2b/0x80
[  117.686120][ T6121]  ? exit_mm_release+0x19/0x30
[  117.686146][ T6121]  do_futex+0x2b2/0x440
[  117.686165][ T6121]  ? __pfx_do_futex+0x10/0x10
[  117.686182][ T6121]  ? __might_fault+0xc5/0x140
[  117.686204][ T6121]  mm_release+0x24a/0x2f0
[  117.686222][ T6121]  do_exit+0x707/0x2ae0
[  117.686249][ T6121]  ? __pfx_do_exit+0x10/0x10
[  117.686275][ T6121]  ? do_raw_spin_lock+0x128/0x260
[  117.686293][ T6121]  ? find_held_lock+0x2b/0x80
[  117.686313][ T6121]  ? get_signal+0x7e0/0x21e0
[  117.686333][ T6121]  do_group_exit+0xd5/0x2a0
[  117.686359][ T6121]  get_signal+0x1ec7/0x21e0
[  117.686386][ T6121]  ? __pfx_get_signal+0x10/0x10
[  117.686405][ T6121]  ? do_futex+0x190/0x440
[  117.686425][ T6121]  arch_do_signal_or_restart+0x91/0x7a0
[  117.686456][ T6121]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  117.686490][ T6121]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  117.686519][ T6121]  exit_to_user_mode_loop+0x139/0x6f0
[  117.686548][ T6121]  ? rcu_is_watching+0x12/0xc0
[  117.686570][ T6121]  do_syscall_64+0x652/0x840
[  117.686587][ T6121]  ? clear_bhb_loop+0x40/0x90
[  117.686609][ T6121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.686627][ T6121] RIP: 0033:0x7f4408f9de59
[  117.686643][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  117.686660][ T6121] RSP: 002b:00007f4409dbc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  117.686678][ T6121] RAX: fffffffffffffe00 RBX: 00007f4409225fa8 RCX: 00007f4408f9de59
[  117.686689][ T6121] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4409225fa8
[  117.686700][ T6121] RBP: 00007f4409225fa0 R08: 0000000000000000 R09: 0000000000000000
[  117.686710][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.686721][ T6121] R13: 00007f4409226038 R14: 00007fff8202d5a0 R15: 00007fff8202d688
[  117.686743][ T6121]  </TASK>
[  118.240282][ T6142] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input5
[  118.357906][   T29] audit: type=1804 audit(1783967801.232:3): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.67" name="/newroot/16/file0" dev="tmpfs" ino=99 res=1 errno=0
[  119.089449][ T6160] syz.3.72 (6160): /proc/6159/oom_adj is deprecated, please use /proc/6159/oom_score_adj instead.
[  119.387994][ T6168] futex_wake_op: syz.0.73 tries to shift op by -2048; fix this program
[  119.508876][ T6168] futex_wake_op: syz.0.73 tries to shift op by -2048; fix this program
[  119.697358][ T6164] FAULT_INJECTION: forcing a failure.
[  119.697358][ T6164] name failslab, interval 1, probability 0, space 0, times 0
[  119.873511][ T6164] CPU: 0 UID: 0 PID: 6164 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT(full) 
[  119.873538][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  119.873548][ T6164] Call Trace:
[  119.873555][ T6164]  <TASK>
[  119.873562][ T6164]  dump_stack_lvl+0x100/0x190
[  119.873587][ T6164]  should_fail_ex.cold+0x5/0xa
[  119.873609][ T6164]  should_failslab+0xc2/0x120
[  119.873633][ T6164]  __kmalloc_node_noprof+0x101/0x830
[  119.873657][ T6164]  ? __kmalloc_noprof+0x311/0x820
[  119.873677][ T6164]  ? get_callchain_buffers+0x1e5/0x380
[  119.873704][ T6164]  get_callchain_buffers+0x1e5/0x380
[  119.873726][ T6164]  ? security_capable+0x80/0x260
[  119.873756][ T6164]  stack_map_alloc+0x316/0x610
[  119.873778][ T6164]  map_create+0x874/0x3120
[  119.873808][ T6164]  ? __lock_acquire+0x49f/0x1a40
[  119.873849][ T6164]  ? __pfx_map_create+0x10/0x10
[  119.873881][ T6164]  ? __might_fault+0xc5/0x140
[  119.873908][ T6164]  __sys_bpf+0x2a6e/0x4e80
[  119.873932][ T6164]  ? __pfx___sys_bpf+0x10/0x10
[  119.873948][ T6164]  ? find_held_lock+0x2b/0x80
[  119.873969][ T6164]  ? futex_wake+0x4ea/0x5e0
[  119.873993][ T6164]  ? futex_private_hash_put+0x115/0x1c0
[  119.874028][ T6164]  ? __pfx_futex_wake+0x10/0x10
[  119.874053][ T6164]  ? rcu_read_lock_any_held+0x6a/0xa0
[  119.874092][ T6164]  ? __x64_sys_futex+0x34f/0x4d0
[  119.874110][ T6164]  ? __x64_sys_futex+0x358/0x4d0
[  119.874130][ T6164]  ? xfd_validate_state+0x129/0x190
[  119.874153][ T6164]  ? __x64_sys_bpf+0xce/0x140
[  119.874171][ T6164]  __x64_sys_bpf+0xce/0x140
[  119.874189][ T6164]  ? do_syscall_64+0x90/0x840
[  119.874207][ T6164]  do_syscall_64+0x115/0x840
[  119.874222][ T6164]  ? clear_bhb_loop+0x40/0x90
[  119.874245][ T6164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.874263][ T6164] RIP: 0033:0x7f3a8499de59
[  119.874280][ T6164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.874297][ T6164] RSP: 002b:00007f3a82bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  119.874315][ T6164] RAX: ffffffffffffffda RBX: 00007f3a84c26180 RCX: 00007f3a8499de59
[  119.874326][ T6164] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000
[  119.874337][ T6164] RBP: 00007f3a84a33e6f R08: 0000000000000000 R09: 0000000000000000
[  119.874348][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.874358][ T6164] R13: 00007f3a84c26218 R14: 00007f3a84c26180 R15: 00007fff05711058
[  119.874381][ T6164]  </TASK>
[  120.822251][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[  120.855243][ T6188] netlink: 13 bytes leftover after parsing attributes in process `syz.0.76'.
[  120.944662][ T6191] netlink: 'syz.1.75': attribute type 10 has an invalid length.
[  121.014832][ T6191] netlink: 330 bytes leftover after parsing attributes in process `syz.1.75'.
[  121.286187][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[  123.372541][ T6223] Console: switching to colour VGA+ 80x25
[  124.101609][ T6228] vivid-007: =================  START STATUS  =================
[  124.101657][ T6228] vivid-007: Generate PTS: true
[  124.101695][ T6228] vivid-007: Generate SCR: true
[  124.101715][ T6228] tpg source WxH: 320x240 (Y'CbCr)
[  124.101727][ T6228] tpg field: 1
[  124.101734][ T6228] tpg crop: (0,0)/320x240
[  124.101746][ T6228] tpg compose: (0,0)/320x240
[  124.101758][ T6228] tpg colorspace: 8
[  124.101765][ T6228] tpg transfer function: 0/0
[  124.101774][ T6228] tpg Y'CbCr encoding: 0/0
[  124.101783][ T6228] tpg quantization: 0/0
[  124.101792][ T6228] tpg RGB range: 0/2
[  124.101801][ T6228] vivid-007: ==================  END STATUS  ==================
[  126.950990][ T6282] blktrace: Concurrent blktraces are not allowed on nbd5
[  131.444371][ T6356] Console: switching to colour frame buffer device 128x48
[  131.481539][ T6334] zswap: compressor û not available
[  133.189023][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  133.200136][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  133.915708][ T6385] Process accounting resumed
[  134.500182][ T6414] =======================================================
[  134.500182][ T6414] WARNING: The mand mount option has been deprecated and
[  134.500182][ T6414]          and is ignored by this kernel. Remove the mand
[  134.500182][ T6414]          option from the mount to silence this warning.
[  134.500182][ T6414] =======================================================
[  134.568067][ T6401] bond0: option arp_interval: invalid value (/dev/vmci)
[  134.686670][ T6401] bond0: option arp_interval: allowed values 0 - 2147483647
[  134.762777][  T783] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.146092][ T6425] nbd: socks must be embedded in a SOCK_ITEM attr
[  135.244317][ T6423] bond0: invalid ARP target specified
[  135.319390][ T6425] block nbd0: shutting down sockets
[  135.966811][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[  137.099367][ T6474] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  137.891788][   T29] audit: type=1800 audit(1783967820.776:4): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.137" name="version" dev="configfs" ino=12856 res=0 errno=0
[  138.341731][ T6503] netlink: 186 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.771043][ T6512] netlink: 82 bytes leftover after parsing attributes in process `syz.0.141'.
[  143.111896][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[  143.165355][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[  143.528028][ T6621] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  143.544268][ T6614] could not allocate digest TFM handle 
[  146.119258][ T6641] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  146.249414][ T6641] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  146.501216][ T6641] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  146.628597][ T6641] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  146.656349][ T6641] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  146.718800][ T6641] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  146.767151][ T6641] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  146.798001][ T6641] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  146.839102][ T6641] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  146.907378][ T6641] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  146.948103][ T6641] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  147.055976][ T6641] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  147.103164][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  147.566829][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.173'.
[  147.758601][ T6681] bond0: (slave bond_slave_1): Releasing backup interface
[  147.778471][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'.
[  148.258361][ T6696] ubi0: attaching mtd0
[  148.307435][ T6696] ubi0: scanning is finished
[  148.331557][ T6696] ubi0: empty MTD device detected
[  148.622289][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[  148.777724][ T6696] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  148.785498][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  148.830824][ T6696] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  148.881053][ T6696] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  148.937724][ T6696] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  148.952132][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  149.006893][ T6696] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  149.049737][ T6696] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  149.099863][ T6696] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3662325151
[  149.168993][ T6696] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  149.184554][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  149.251260][ T6706] ubi0: background thread "ubi_bgt0d" started, PID 6706
[  150.701680][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[  150.861974][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  151.022393][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  151.261771][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  151.294328][ T6734] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  152.066441][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'.
[  152.181017][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'.
[  152.286170][ T6746] bridge_slave_1: left allmulticast mode
[  152.304648][ T6746] bridge_slave_1: left promiscuous mode
[  152.323727][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.353206][ T6746] bridge_slave_0: left allmulticast mode
[  152.363588][ T6746] bridge_slave_0: left promiscuous mode
[  152.378353][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.781776][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[  152.941331][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  153.101429][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  153.604755][ T6753] futex_wake_op: syz.0.185 tries to shift op by -1; fix this program
[  155.468131][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.195'.
[  156.286963][ T6809] bond0: option packets_per_slave: invalid value (Xµn‘pæ)
[  156.333367][ T6809] bond0: option packets_per_slave: allowed values 0 - 65535
[  161.171332][ T5639] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  162.978094][ T6901] input: jJǸ-�¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input7
[  164.011528][ T6902] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.031475][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'.
[  164.599989][ T6932] Setting dangerous option i915.mitigations - tainting kernel
[  164.647471][ T6903] syz.3.213 (6903): attempted to duplicate a private mapping with mremap.  This is not supported.
[  164.792999][   T29] audit: type=1804 audit(1783967847.682:5): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.220" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=35 res=1 errno=0
[  165.959562][ T6899] Process accounting paused
[  166.957426][    C0] sd 0:0:1:0: [sda] tag#1328 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  166.968054][    C0] sd 0:0:1:0: [sda] tag#1328 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00
[  167.587186][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[  167.697440][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'.
[  167.735404][ T6980] bridge_slave_1: left allmulticast mode
[  167.761474][ T6980] bridge_slave_1: left promiscuous mode
[  167.787709][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.846373][ T6980] bridge_slave_0: left allmulticast mode
[  167.873902][ T6980] bridge_slave_0: left promiscuous mode
[  167.899699][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.410408][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'.
[  169.104551][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'.
[  172.050262][ T7031] sg_read: process 252 (syz.0.239) changed security contexts after opening file descriptor, this is not allowed.
[  172.167712][ T7031] openvswitch: netlink: Flow key attribute not present in set flow.
[  173.503974][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[  173.567810][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[  173.692358][ T7061] FAULT_INJECTION: forcing a failure.
[  173.692358][ T7061] name fail_futex, interval 1, probability 0, space 0, times 0
[  173.720426][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.249'.
[  173.780868][ T7061] CPU: 0 UID: 0 PID: 7061 Comm: syz.1.246 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  173.780899][ T7061] Tainted: [U]=USER
[  173.780906][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  173.780916][ T7061] Call Trace:
[  173.780922][ T7061]  <TASK>
[  173.780929][ T7061]  dump_stack_lvl+0x100/0x190
[  173.780954][ T7061]  should_fail_ex.cold+0x5/0xa
[  173.780975][ T7061]  get_futex_key+0x1d2/0x14f0
[  173.781006][ T7061]  ? __pfx_get_futex_key+0x10/0x10
[  173.781043][ T7061]  futex_wait_setup+0x91/0x540
[  173.781072][ T7061]  __futex_wait+0x19f/0x300
[  173.781097][ T7061]  ? __pfx___futex_wait+0x10/0x10
[  173.781118][ T7061]  ? futex_hash+0x311/0x400
[  173.781147][ T7061]  ? __pfx_futex_wake_mark+0x10/0x10
[  173.781173][ T7061]  ? find_held_lock+0x2b/0x80
[  173.781194][ T7061]  ? futex_wake+0x4ea/0x5e0
[  173.781213][ T7061]  ? futex_wake+0x4ea/0x5e0
[  173.781239][ T7061]  futex_wait+0xe6/0x370
[  173.781261][ T7061]  ? __pfx_futex_wait+0x10/0x10
[  173.781294][ T7061]  do_futex+0x265/0x440
[  173.781313][ T7061]  ? __pfx_do_futex+0x10/0x10
[  173.781332][ T7061]  ? __fget_files+0x21f/0x3d0
[  173.781361][ T7061]  __x64_sys_futex+0x34f/0x4d0
[  173.781382][ T7061]  ? __pfx___x64_sys_futex+0x10/0x10
[  173.781401][ T7061]  ? __pfx_do_writev+0x10/0x10
[  173.781432][ T7061]  do_syscall_64+0x115/0x840
[  173.781448][ T7061]  ? clear_bhb_loop+0x40/0x90
[  173.781470][ T7061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.781488][ T7061] RIP: 0033:0x7f3a8499de59
[  173.781504][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.781520][ T7061] RSP: 002b:00007f3a857840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  173.781538][ T7061] RAX: ffffffffffffffda RBX: 00007f3a84c25fa8 RCX: 00007f3a8499de59
[  173.781549][ T7061] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3a84c25fa8
[  173.781559][ T7061] RBP: 00007f3a84c25fa0 R08: 0000000000000000 R09: 0000000000000000
[  173.781570][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.781580][ T7061] R13: 00007f3a84c26038 R14: 00007fff05710f70 R15: 00007fff05711058
[  173.781602][ T7061]  </TASK>
[  174.123690][ T7074] team0 (unregistering): Port device team_slave_0 removed
[  174.141981][ T7074] team0 (unregistering): Port device team_slave_1 removed
[  174.543907][ T7090] FAULT_INJECTION: forcing a failure.
[  174.543907][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  174.734964][ T7090] CPU: 0 UID: 0 PID: 7090 Comm: syz.2.251 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  174.734996][ T7090] Tainted: [U]=USER
[  174.735002][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  174.735012][ T7090] Call Trace:
[  174.735018][ T7090]  <TASK>
[  174.735025][ T7090]  dump_stack_lvl+0x100/0x190
[  174.735052][ T7090]  should_fail_ex.cold+0x5/0xa
[  174.735073][ T7090]  _copy_to_user+0x32/0xd0
[  174.735100][ T7090]  simple_read_from_buffer+0xcb/0x170
[  174.735131][ T7090]  proc_fail_nth_read+0x1af/0x230
[  174.735154][ T7090]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  174.735179][ T7090]  ? rw_verify_area+0xce/0x6d0
[  174.735203][ T7090]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  174.735225][ T7090]  vfs_read+0x1e4/0xb40
[  174.735256][ T7090]  ? __pfx_vfs_read+0x10/0x10
[  174.735282][ T7090]  ? __fget_files+0x215/0x3d0
[  174.735314][ T7090]  ? __fget_files+0x21f/0x3d0
[  174.735347][ T7090]  ksys_read+0x12a/0x250
[  174.735374][ T7090]  ? __pfx_ksys_read+0x10/0x10
[  174.735485][ T7090]  do_syscall_64+0x115/0x840
[  174.735510][ T7090]  ? clear_bhb_loop+0x40/0x90
[  174.735533][ T7090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.735552][ T7090] RIP: 0033:0x7f4408f5e68e
[  174.735569][ T7090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  174.735587][ T7090] RSP: 002b:00007f4409d9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  174.735605][ T7090] RAX: ffffffffffffffda RBX: 00007f4409d9b6c0 RCX: 00007f4408f5e68e
[  174.735616][ T7090] RDX: 000000000000000f RSI: 00007f4409d9b0a0 RDI: 0000000000000003
[  174.735627][ T7090] RBP: 00007f4409d9b090 R08: 0000000000000000 R09: 0000000000000000
[  174.735643][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.735653][ T7090] R13: 00007f4409226128 R14: 00007f4409226090 R15: 00007fff8202d688
[  174.735676][ T7090]  </TASK>
[  175.811352][ T7101] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  175.825614][ T7089] nvme_fabrics: missing parameter 'transport=%s'
[  175.895732][ T7089] nvme_fabrics: missing parameter 'nqn=%s'
[  175.955228][ T7101] File: /dev/mtdblock0 PID: 7101 Comm: syz.3.255
[  177.023107][ T7130] netlink: 'syz.2.260': attribute type 16 has an invalid length.
[  177.057387][ T7130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.260'.
[  177.133867][ T7130] sit0: entered promiscuous mode
[  177.225431][ T7130] sit0: entered allmulticast mode
[  179.546238][ T7173] FAULT_INJECTION: forcing a failure.
[  179.546238][ T7173] name failslab, interval 1, probability 0, space 0, times 0
[  179.615312][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.1.270 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  179.615344][ T7173] Tainted: [U]=USER
[  179.615354][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  179.615365][ T7173] Call Trace:
[  179.615372][ T7173]  <TASK>
[  179.615379][ T7173]  dump_stack_lvl+0x100/0x190
[  179.615405][ T7173]  should_fail_ex.cold+0x5/0xa
[  179.615426][ T7173]  should_failslab+0xc2/0x120
[  179.615450][ T7173]  __kmalloc_node_track_caller_noprof+0xf9/0x830
[  179.615473][ T7173]  ? __kasan_kmalloc+0xaa/0xb0
[  179.615494][ T7173]  ? snd_timer_instance_new+0x65/0x350
[  179.615525][ T7173]  kstrdup+0x51/0xe0
[  179.615545][ T7173]  snd_timer_instance_new+0x65/0x350
[  179.615572][ T7173]  snd_seq_timer_open+0x1d4/0x5c0
[  179.615595][ T7173]  ? __pfx_snd_seq_timer_open+0x10/0x10
[  179.615616][ T7173]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  179.615640][ T7173]  ? mark_held_locks+0x40/0x70
[  179.615666][ T7173]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  179.615695][ T7173]  queue_use+0xdc/0x1f0
[  179.615724][ T7173]  snd_seq_queue_alloc+0x2e5/0x540
[  179.615756][ T7173]  snd_seq_ioctl_create_queue+0xa9/0x370
[  179.615779][ T7173]  call_seq_client_ctl+0xa3/0x130
[  179.615803][ T7173]  snd_seq_kernel_client_ctl+0x77/0xd0
[  179.615827][ T7173]  alloc_seq_queue+0xdb/0x180
[  179.615852][ T7173]  ? __pfx_alloc_seq_queue+0x10/0x10
[  179.615885][ T7173]  ? find_held_lock+0x2b/0x80
[  179.615908][ T7173]  ? mark_held_locks+0x40/0x70
[  179.615937][ T7173]  snd_seq_oss_open+0x2b2/0xa10
[  179.615967][ T7173]  odev_open+0x6f/0x90
[  179.615988][ T7173]  ? __pfx_odev_open+0x10/0x10
[  179.616010][ T7173]  soundcore_open+0x2e3/0x5a0
[  179.616035][ T7173]  ? __pfx_soundcore_open+0x10/0x10
[  179.616058][ T7173]  chrdev_open+0x234/0x6a0
[  179.616074][ T7173]  ? __pfx_apparmor_file_open+0x10/0x10
[  179.616093][ T7173]  ? __pfx_chrdev_open+0x10/0x10
[  179.616122][ T7173]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  179.616146][ T7173]  do_dentry_open+0x6ab/0x14d0
[  179.616174][ T7173]  ? __pfx_chrdev_open+0x10/0x10
[  179.616216][ T7173]  vfs_open+0x82/0x3f0
[  179.616240][ T7173]  path_openat+0x2873/0x4280
[  179.616278][ T7173]  ? __pfx_path_openat+0x10/0x10
[  179.616313][ T7173]  do_file_open+0x20e/0x430
[  179.616344][ T7173]  ? __pfx_do_file_open+0x10/0x10
[  179.616390][ T7173]  ? alloc_fd+0x471/0x7a0
[  179.616420][ T7173]  ? do_getname+0x191/0x390
[  179.616443][ T7173]  do_sys_openat2+0x10f/0x1e0
[  179.616466][ T7173]  ? __pfx_do_sys_openat2+0x10/0x10
[  179.616496][ T7173]  __x64_sys_openat+0x12d/0x210
[  179.616519][ T7173]  ? __pfx___x64_sys_openat+0x10/0x10
[  179.616549][ T7173]  do_syscall_64+0x115/0x840
[  179.616565][ T7173]  ? clear_bhb_loop+0x40/0x90
[  179.616587][ T7173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.616606][ T7173] RIP: 0033:0x7f3a8499de59
[  179.616622][ T7173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.616640][ T7173] RSP: 002b:00007f3a85784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  179.616657][ T7173] RAX: ffffffffffffffda RBX: 00007f3a84c25fa0 RCX: 00007f3a8499de59
[  179.616668][ T7173] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  179.616679][ T7173] RBP: 00007f3a84a33e6f R08: 0000000000000000 R09: 0000000000000000
[  179.616690][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.616700][ T7173] R13: 00007f3a84c26038 R14: 00007f3a84c25fa0 R15: 00007fff05711058
[  179.616723][ T7173]  </TASK>
[  180.558476][ T5639] Bluetooth: hci1: unexpected event for opcode 0x7c89
[  183.423189][ T7215] FAULT_INJECTION: forcing a failure.
[  183.423189][ T7215] name fail_futex, interval 1, probability 0, space 0, times 0
[  183.515477][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.3.279 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  183.515507][ T7215] Tainted: [U]=USER
[  183.515513][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  183.515523][ T7215] Call Trace:
[  183.515529][ T7215]  <TASK>
[  183.515536][ T7215]  dump_stack_lvl+0x100/0x190
[  183.515561][ T7215]  should_fail_ex.cold+0x5/0xa
[  183.515582][ T7215]  get_futex_key+0x295/0x14f0
[  183.515615][ T7215]  ? __pfx_get_futex_key+0x10/0x10
[  183.515644][ T7215]  ? lock_acquire+0x1b9/0x370
[  183.515677][ T7215]  futex_wake+0xf4/0x5e0
[  183.515701][ T7215]  ? __pfx_futex_wake+0x10/0x10
[  183.515723][ T7215]  ? find_held_lock+0x2b/0x80
[  183.515751][ T7215]  ? exit_mm_release+0x19/0x30
[  183.515777][ T7215]  do_futex+0x2b2/0x440
[  183.515795][ T7215]  ? __pfx_do_futex+0x10/0x10
[  183.515812][ T7215]  ? __might_fault+0xc5/0x140
[  183.515834][ T7215]  mm_release+0x24a/0x2f0
[  183.515852][ T7215]  do_exit+0x707/0x2ae0
[  183.515874][ T7215]  ? __pfx___might_resched+0x10/0x10
[  183.515904][ T7215]  ? __pfx_do_exit+0x10/0x10
[  183.515927][ T7215]  ? do_raw_spin_lock+0x128/0x260
[  183.515945][ T7215]  ? find_held_lock+0x2b/0x80
[  183.515965][ T7215]  ? get_signal+0x7e0/0x21e0
[  183.515985][ T7215]  do_group_exit+0xd5/0x2a0
[  183.516011][ T7215]  get_signal+0x1ec7/0x21e0
[  183.516036][ T7215]  ? __pfx_get_signal+0x10/0x10
[  183.516055][ T7215]  ? task_work_add+0x201/0x3b0
[  183.516084][ T7215]  arch_do_signal_or_restart+0x91/0x7a0
[  183.516114][ T7215]  ? sock_ioctl+0x2dc/0x6b0
[  183.516141][ T7215]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  183.516183][ T7215]  exit_to_user_mode_loop+0x139/0x6f0
[  183.516212][ T7215]  ? rcu_is_watching+0x12/0xc0
[  183.516234][ T7215]  do_syscall_64+0x652/0x840
[  183.516250][ T7215]  ? clear_bhb_loop+0x40/0x90
[  183.516272][ T7215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.516291][ T7215] RIP: 0033:0x7f656df9de59
[  183.516307][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.516324][ T7215] RSP: 002b:00007f656ee08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  183.516342][ T7215] RAX: ffffffffffffffed RBX: 00007f656e225fa0 RCX: 00007f656df9de59
[  183.516353][ T7215] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000004
[  183.516364][ T7215] RBP: 00007f656e033e6f R08: 0000000000000000 R09: 0000000000000000
[  183.516374][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.516384][ T7215] R13: 00007f656e226038 R14: 00007f656e225fa0 R15: 00007ffccb870988
[  183.516406][ T7215]  </TASK>
[  184.885625][ T7255] vivid-002: =================  START STATUS  =================
[  184.944094][ T7255] vivid-002: Test Pattern: 75% Colorbar
[  185.024431][ T7255] vivid-002: Fill Percentage of Frame: 100
[  185.086365][ T5639] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  185.126113][ T7255] vivid-002: Horizontal Movement: No Movement
[  185.171189][ T7255] vivid-002: Vertical Movement: No Movement
[  185.208051][ T7255] vivid-002: OSD Text Mode: All
[  185.240506][ T7255] vivid-002: Show Border: false
[  185.265099][ T7255] vivid-002: Show Square: false
[  185.297382][ T7255] vivid-002: Sensor Flipped Horizontally: false
[  185.349526][ T7255] vivid-002: Sensor Flipped Vertically: false
[  185.394382][ T7255] vivid-002: Insert SAV Code in Image: false
[  185.450959][ T7255] vivid-002: Insert EAV Code in Image: false
[  185.505861][ T7255] vivid-002: Insert Video Guard Band: false
[  185.559987][ T7255] vivid-002: Reduced Framerate: false
[  185.598958][ T7255] vivid-002: HDMI 002-0 Is Connected To: Test Pattern Generator
[  185.644976][ T7255] vivid-002: S-Video 002-0 Is Connected To: Test Pattern Generator
[  185.710845][ T7255] vivid-002: Enable Capture Cropping: true
[  185.742567][ T7255] vivid-002: Enable Capture Composing: true
[  185.770430][ T7241] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  185.776499][ T7255] vivid-002: Enable Capture Scaler: true
[  185.792919][ T7255] vivid-002: Timestamp Source: End of Frame
[  185.803800][ T7241] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  185.819517][ T7255] vivid-002: Colorspace: sRGB
[  185.826252][ T7241] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  185.839251][ T7255] vivid-002: Transfer Function: Default
[  185.846711][ T7241] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  185.856205][ T7255] vivid-002: Y'CbCr Encoding: Default
[  185.867105][ T7276] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  185.879944][ T7255] vivid-002: HSV Encoding: Hue 0-179
[  185.951483][ T7255] vivid-002: Quantization: Default
[  185.986167][ T7255] vivid-002: Apply Alpha To Red Only: false
[  186.029076][ T7255] vivid-002: Standard Aspect Ratio: 4x3
[  186.070364][ T7255] vivid-002: DV Timings Signal Mode: Current DV Timings inactive
[  186.105481][ T7255] vivid-002: DV Timings: 640x480p59 inactive
[  186.133596][ T7255] vivid-002: DV Timings Aspect Ratio: Source Width x Height
[  186.171559][ T7255] vivid-002: Maximum EDID Blocks: 2
[  186.195271][ T7255] vivid-002: Limited RGB Range (16-235): false
[  186.222273][ T7255] vivid-002: Rx RGB Quantization Range: Automatic
[  186.256354][ T7255] vivid-002: Power Present: 0x00000001
[  186.280887][ T7255] tpg source WxH: 320x240 (Y'CbCr)
[  186.300208][ T7255] tpg field: 1
[  186.315840][ T7255] tpg crop: (0,0)/320x240
[  186.337168][ T7255] tpg compose: (0,0)/320x240
[  186.355161][ T7255] tpg colorspace: 8
[  186.379798][ T7255] tpg transfer function: 0/0
[  186.395829][ T7255] tpg Y'CbCr encoding: 0/0
[  186.411212][ T7255] tpg quantization: 0/0
[  186.440390][ T7255] tpg RGB range: 0/2
[  186.457679][ T7255] vivid-002: ==================  END STATUS  ==================
[  186.858184][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  187.485596][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'.
[  187.532325][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  187.602552][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.300'.
[  187.648762][ T7323] bridge_slave_1: left allmulticast mode
[  187.675877][ T7323] bridge_slave_1: left promiscuous mode
[  187.704243][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.757767][ T7323] bridge_slave_0: left allmulticast mode
[  187.776727][ T7323] bridge_slave_0: left promiscuous mode
[  187.808488][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.817563][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[  187.896965][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  187.903478][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  188.772133][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'.
[  188.859915][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'.
[  189.247207][ T7347] FAULT_INJECTION: forcing a failure.
[  189.247207][ T7347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.304379][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.3.304 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  189.304410][ T7347] Tainted: [U]=USER
[  189.304416][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  189.304426][ T7347] Call Trace:
[  189.304432][ T7347]  <TASK>
[  189.304439][ T7347]  dump_stack_lvl+0x100/0x190
[  189.304465][ T7347]  should_fail_ex.cold+0x5/0xa
[  189.304486][ T7347]  _copy_to_user+0x32/0xd0
[  189.304514][ T7347]  simple_read_from_buffer+0xcb/0x170
[  189.304544][ T7347]  proc_fail_nth_read+0x1af/0x230
[  189.304568][ T7347]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  189.304592][ T7347]  ? rw_verify_area+0xce/0x6d0
[  189.304616][ T7347]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  189.304639][ T7347]  vfs_read+0x1e4/0xb40
[  189.304669][ T7347]  ? __pfx_vfs_read+0x10/0x10
[  189.304696][ T7347]  ? __fget_files+0x215/0x3d0
[  189.304736][ T7347]  ? __fget_files+0x21f/0x3d0
[  189.304770][ T7347]  ksys_read+0x12a/0x250
[  189.304797][ T7347]  ? __pfx_ksys_read+0x10/0x10
[  189.304834][ T7347]  do_syscall_64+0x115/0x840
[  189.304851][ T7347]  ? clear_bhb_loop+0x40/0x90
[  189.304873][ T7347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.304892][ T7347] RIP: 0033:0x7f656df5e68e
[  189.304908][ T7347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  189.304925][ T7347] RSP: 002b:00007f656ee07fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  189.304944][ T7347] RAX: ffffffffffffffda RBX: 00007f656ee086c0 RCX: 00007f656df5e68e
[  189.304955][ T7347] RDX: 000000000000000f RSI: 00007f656ee080a0 RDI: 0000000000000004
[  189.304966][ T7347] RBP: 00007f656ee08090 R08: 0000000000000000 R09: 0000000000000000
[  189.304976][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.304986][ T7347] R13: 00007f656e226038 R14: 00007f656e225fa0 R15: 00007ffccb870988
[  189.305009][ T7347]  </TASK>
[  190.431805][ T7354] FAULT_INJECTION: forcing a failure.
[  190.431805][ T7354] name failslab, interval 1, probability 0, space 0, times 0
[  190.604247][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.3.306 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  190.604287][ T7354] Tainted: [U]=USER
[  190.604294][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  190.604304][ T7354] Call Trace:
[  190.604311][ T7354]  <TASK>
[  190.604319][ T7354]  dump_stack_lvl+0x100/0x190
[  190.604345][ T7354]  should_fail_ex.cold+0x5/0xa
[  190.604367][ T7354]  should_failslab+0xc2/0x120
[  190.604392][ T7354]  __kmalloc_cache_noprof+0x91/0x6c0
[  190.604422][ T7354]  ? vhost_task_create+0xee/0x370
[  190.604449][ T7354]  ? __pfx_vhost_worker_killed+0x10/0x10
[  190.604475][ T7354]  ? __pfx_vhost_run_work_list+0x10/0x10
[  190.604503][ T7354]  vhost_task_create+0xee/0x370
[  190.604528][ T7354]  ? __pfx_vhost_task_create+0x10/0x10
[  190.604560][ T7354]  ? __pfx_vhost_task_fn+0x10/0x10
[  190.604591][ T7354]  ? snprintf+0xc7/0x100
[  190.604621][ T7354]  vhost_task_worker_create+0x8d/0x260
[  190.604651][ T7354]  ? __pfx_vhost_task_worker_create+0x10/0x10
[  190.604699][ T7354]  ? lockdep_init_map_type+0x5c/0x250
[  190.604729][ T7354]  ? lockdep_init_map_type+0x5c/0x250
[  190.604761][ T7354]  vhost_worker_create+0x240/0x300
[  190.604789][ T7354]  ? __pfx_vhost_worker_create+0x10/0x10
[  190.604818][ T7354]  ? vhost_dev_set_owner+0x190/0xa30
[  190.604851][ T7354]  vhost_dev_set_owner+0x719/0xa30
[  190.604889][ T7354]  vhost_net_ioctl+0xfa3/0x1910
[  190.604905][ T7354]  ? do_vfs_ioctl+0x226/0x13e0
[  190.604930][ T7354]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  190.604954][ T7354]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  190.604975][ T7354]  ? find_held_lock+0x2b/0x80
[  190.604995][ T7354]  ? __fget_files+0x215/0x3d0
[  190.605020][ T7354]  ? hook_file_ioctl_common+0x140/0x440
[  190.605046][ T7354]  ? __fget_files+0x21f/0x3d0
[  190.605075][ T7354]  ? __pfx_vhost_net_ioctl+0x10/0x10
[  190.605094][ T7354]  __x64_sys_ioctl+0x18e/0x210
[  190.605119][ T7354]  do_syscall_64+0x115/0x840
[  190.605135][ T7354]  ? clear_bhb_loop+0x40/0x90
[  190.605157][ T7354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.605175][ T7354] RIP: 0033:0x7f656df9de59
[  190.605192][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.605208][ T7354] RSP: 002b:00007f656ede7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  190.605226][ T7354] RAX: ffffffffffffffda RBX: 00007f656e226090 RCX: 00007f656df9de59
[  190.605237][ T7354] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003
[  190.605247][ T7354] RBP: 00007f656e033e6f R08: 0000000000000000 R09: 0000000000000000
[  190.605258][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.605268][ T7354] R13: 00007f656e226128 R14: 00007f656e226090 R15: 00007ffccb870988
[  190.605297][ T7354]  </TASK>
[  191.442687][ T7373] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjEùrõ£Ò„yù*›"¤l-ý¤ôy–ú„
[  194.621036][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  194.633139][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  195.083355][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[  195.112210][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[  195.486962][ T7450] netlink: 25 bytes leftover after parsing attributes in process `syz.1.327'.
[  195.521125][   T29] audit: type=1800 audit(1843104541.820:6): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.328" name="dbroot" dev="configfs" ino=18067 res=0 errno=0
[  196.442283][ T7460] netlink: 226 bytes leftover after parsing attributes in process `syz.0.329'.
[  196.833680][ T7446] Process accounting resumed
[  197.052771][ T7470] FAULT_INJECTION: forcing a failure.
[  197.052771][ T7470] name failslab, interval 1, probability 0, space 0, times 0
[  197.088952][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.3.331 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  197.088982][ T7470] Tainted: [U]=USER
[  197.088989][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  197.088999][ T7470] Call Trace:
[  197.089005][ T7470]  <TASK>
[  197.089013][ T7470]  dump_stack_lvl+0x100/0x190
[  197.089039][ T7470]  should_fail_ex.cold+0x5/0xa
[  197.089061][ T7470]  should_failslab+0xc2/0x120
[  197.089085][ T7470]  kmem_cache_alloc_noprof+0x91/0x6a0
[  197.089108][ T7470]  ? vm_area_dup+0x27/0x8e0
[  197.089139][ T7470]  vm_area_dup+0x27/0x8e0
[  197.089168][ T7470]  __split_vma+0x18c/0xda0
[  197.089199][ T7470]  ? __pfx___split_vma+0x10/0x10
[  197.089234][ T7470]  ? __pfx___up_read+0x10/0x10
[  197.089251][ T7470]  ? validate_mm+0x261/0x4e0
[  197.089280][ T7470]  vms_gather_munmap_vmas+0x1d2/0x1720
[  197.089311][ T7470]  ? validate_mm+0x392/0x4e0
[  197.089340][ T7470]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  197.089369][ T7470]  ? __pfx_validate_mm+0x10/0x10
[  197.089411][ T7470]  do_vmi_align_munmap+0x287/0x5f0
[  197.089443][ T7470]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  197.089472][ T7470]  ? cap_mmap_addr+0x4b/0x120
[  197.089528][ T7470]  do_vmi_munmap+0x1f8/0x3e0
[  197.089548][ T7470]  __vm_munmap+0x196/0x390
[  197.089568][ T7470]  ? __pfx___vm_munmap+0x10/0x10
[  197.089604][ T7470]  __x64_sys_munmap+0x59/0x80
[  197.089628][ T7470]  do_syscall_64+0x115/0x840
[  197.089645][ T7470]  ? clear_bhb_loop+0x40/0x90
[  197.089673][ T7470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.089693][ T7470] RIP: 0033:0x7f656df9dc87
[  197.089710][ T7470] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.089727][ T7470] RSP: 002b:00007f656ede5d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[  197.089745][ T7470] RAX: ffffffffffffffda RBX: 00007f6564000000 RCX: 00007f656df9dc87
[  197.089756][ T7470] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 00007f6568000000
[  197.089766][ T7470] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  197.089777][ T7470] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[  197.089787][ T7470] R13: 0000000000001000 R14: 00007f6568000000 R15: 0000000000000000
[  197.089810][ T7470]  </TASK>
[  198.618449][ T5639] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  198.790361][ T7483] netlink: 330 bytes leftover after parsing attributes in process `syz.2.334'.
[  198.835050][ T7483] mac80211_hwsim hwsim6 ›: renamed from wlan0 (while UP)
[  198.865899][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'.
[  199.305417][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'.
[  200.218483][ T5639] Bluetooth: hci2: unexpected event for opcode 0x7c89
[  200.973735][ T5639] Bluetooth: hci3: unexpected subevent 0x01 length: 1 < 18
[  201.022902][ T7533] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  201.652638][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[  201.758671][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.347'.
[  202.412491][   T29] audit: type=1800 audit(1843106596.734:7): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.350" name="lu_gp_id" dev="configfs" ino=18759 res=0 errno=0
[  202.603504][ T7550] syz.3.349 (7550) used greatest stack depth: 18880 bytes left
[  203.065589][ T7558] netlink: 252 bytes leftover after parsing attributes in process `syz.0.351'.
[  203.118401][ T7558] netlink: 252 bytes leftover after parsing attributes in process `syz.0.351'.
[  204.283103][ T7592] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma?
[  204.996917][ T7604] netlink: 13 bytes leftover after parsing attributes in process `syz.0.363'.
[  209.472300][ T7667] netlink: 342 bytes leftover after parsing attributes in process `syz.0.374'.
[  211.556183][ T7718] FAULT_INJECTION: forcing a failure.
[  211.556183][ T7718] name failslab, interval 1, probability 0, space 0, times 0
[  211.615941][ T7718] CPU: 0 UID: 0 PID: 7718 Comm: syz.1.383 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  211.615972][ T7718] Tainted: [U]=USER
[  211.615978][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  211.615988][ T7718] Call Trace:
[  211.615994][ T7718]  <TASK>
[  211.616002][ T7718]  dump_stack_lvl+0x100/0x190
[  211.616027][ T7718]  should_fail_ex.cold+0x5/0xa
[  211.616048][ T7718]  should_failslab+0xc2/0x120
[  211.616072][ T7718]  __kmalloc_cache_noprof+0x91/0x6c0
[  211.616103][ T7718]  ? alloc_pipe_info+0x10e/0x590
[  211.616138][ T7718]  alloc_pipe_info+0x10e/0x590
[  211.616170][ T7718]  splice_direct_to_actor+0x78f/0xa30
[  211.616202][ T7718]  ? __pfx_direct_splice_actor+0x10/0x10
[  211.616241][ T7718]  ? __pfx_aa_file_perm+0x10/0x10
[  211.616268][ T7718]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  211.616306][ T7718]  do_splice_direct+0x174/0x240
[  211.616337][ T7718]  ? __pfx_do_splice_direct+0x10/0x10
[  211.616368][ T7718]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  211.616401][ T7718]  ? rw_verify_area+0xce/0x6d0
[  211.616428][ T7718]  do_sendfile+0xadc/0xe20
[  211.616458][ T7718]  ? __pfx_do_sendfile+0x10/0x10
[  211.616483][ T7718]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  211.616515][ T7718]  ? __fget_files+0x21f/0x3d0
[  211.616548][ T7718]  __x64_sys_sendfile64+0x1d8/0x220
[  211.616567][ T7718]  ? ksys_write+0x1ac/0x250
[  211.616594][ T7718]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  211.616619][ T7718]  do_syscall_64+0x115/0x840
[  211.616635][ T7718]  ? clear_bhb_loop+0x40/0x90
[  211.616657][ T7718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.616677][ T7718] RIP: 0033:0x7f3a8499de59
[  211.616693][ T7718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.616710][ T7718] RSP: 002b:00007f3a85784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  211.616728][ T7718] RAX: ffffffffffffffda RBX: 00007f3a84c25fa0 RCX: 00007f3a8499de59
[  211.616739][ T7718] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  211.616750][ T7718] RBP: 00007f3a85784090 R08: 0000000000000000 R09: 0000000000000000
[  211.616760][ T7718] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001
[  211.616771][ T7718] R13: 00007f3a84c26038 R14: 00007f3a84c25fa0 R15: 00007fff05711058
[  211.616793][ T7718]  </TASK>
[  213.441652][ T7739] binder: 7738:7739 ioctl 541b 0 returned -22
[  215.655209][ T7759] FAULT_INJECTION: forcing a failure.
[  215.655209][ T7759] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  215.718061][ T7759] CPU: 0 UID: 0 PID: 7759 Comm: syz.1.394 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  215.718093][ T7759] Tainted: [U]=USER
[  215.718100][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  215.718110][ T7759] Call Trace:
[  215.718116][ T7759]  <TASK>
[  215.718123][ T7759]  dump_stack_lvl+0x100/0x190
[  215.718148][ T7759]  should_fail_ex.cold+0x5/0xa
[  215.718166][ T7759]  ? prepare_alloc_pages+0x16d/0x5f0
[  215.718192][ T7759]  should_fail_alloc_page+0xeb/0x140
[  215.718225][ T7759]  prepare_alloc_pages+0x1f0/0x5f0
[  215.718253][ T7759]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  215.718280][ T7759]  ? reacquire_held_locks+0xce/0x1e0
[  215.718307][ T7759]  ? folio_lock_anon_vma_read+0x348/0xe30
[  215.718338][ T7759]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  215.718356][ T7759]  ? rcu_is_watching+0x12/0xc0
[  215.718383][ T7759]  ? __pfx___up_read+0x10/0x10
[  215.718398][ T7759]  ? rmap_walk_anon+0x561/0x870
[  215.718422][ T7759]  ? rmap_walk_anon+0x561/0x870
[  215.718465][ T7759]  __folio_alloc_noprof+0x13/0x260
[  215.718484][ T7759]  alloc_migration_target+0x1d7/0x6d0
[  215.718511][ T7759]  migrate_pages_batch+0x5dc/0x45c0
[  215.718540][ T7759]  ? __pfx_alloc_migration_target+0x10/0x10
[  215.718571][ T7759]  ? walk_pgd_range+0x1133/0x1dd0
[  215.718590][ T7759]  ? __pfx_migrate_pages_batch+0x10/0x10
[  215.718632][ T7759]  migrate_pages_sync+0x12c/0x880
[  215.718658][ T7759]  ? __pfx_alloc_migration_target+0x10/0x10
[  215.718685][ T7759]  ? vma_migratable+0x380/0x450
[  215.718712][ T7759]  ? __pfx_migrate_pages_sync+0x10/0x10
[  215.718736][ T7759]  ? __pfx_queue_pages_test_walk+0x10/0x10
[  215.718766][ T7759]  ? walk_page_range_mm_unsafe+0x32c/0xa10
[  215.718790][ T7759]  migrate_pages+0x1a83/0x2850
[  215.718819][ T7759]  ? __pfx_alloc_migration_target+0x10/0x10
[  215.718850][ T7759]  ? __pfx_migrate_pages+0x10/0x10
[  215.718876][ T7759]  ? queue_pages_range+0x11e/0x180
[  215.718898][ T7759]  ? rcu_is_watching+0x12/0xc0
[  215.718917][ T7759]  ? __up_read+0x333/0x980
[  215.718934][ T7759]  ? __pfx___up_read+0x10/0x10
[  215.718950][ T7759]  ? do_migrate_pages+0x451/0x740
[  215.718973][ T7759]  ? do_migrate_pages+0x451/0x740
[  215.719002][ T7759]  do_migrate_pages+0x488/0x740
[  215.719032][ T7759]  ? __pfx_do_migrate_pages+0x10/0x10
[  215.719061][ T7759]  ? rcu_is_watching+0x12/0xc0
[  215.719080][ T7759]  ? cap_capable+0x107/0x430
[  215.719106][ T7759]  ? get_task_mm+0xc2/0xf0
[  215.719135][ T7759]  ? security_capable+0xbd/0x260
[  215.719166][ T7759]  kernel_migrate_pages+0x560/0x700
[  215.719191][ T7759]  ? __pfx_kernel_migrate_pages+0x10/0x10
[  215.719221][ T7759]  ? xfd_validate_state+0x129/0x190
[  215.719246][ T7759]  __x64_sys_migrate_pages+0x96/0x100
[  215.719271][ T7759]  ? lockdep_hardirqs_on+0x78/0x100
[  215.719299][ T7759]  do_syscall_64+0x115/0x840
[  215.719315][ T7759]  ? clear_bhb_loop+0x40/0x90
[  215.719337][ T7759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.719357][ T7759] RIP: 0033:0x7f3a8499de59
[  215.719372][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.719390][ T7759] RSP: 002b:00007f3a85784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[  215.719407][ T7759] RAX: ffffffffffffffda RBX: 00007f3a84c25fa0 RCX: 00007f3a8499de59
[  215.719418][ T7759] RDX: 0000200000000100 RSI: 0000000000000004 RDI: 0000000000000000
[  215.719429][ T7759] RBP: 00007f3a84a33e6f R08: 0000000000000000 R09: 0000000000000000
[  215.719439][ T7759] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000
[  215.719449][ T7759] R13: 00007f3a84c26038 R14: 00007f3a84c25fa0 R15: 00007fff05711058
[  215.719471][ T7759]  </TASK>
[  217.510295][ T7773] FAULT_INJECTION: forcing a failure.
[  217.510295][ T7773] name failslab, interval 1, probability 0, space 0, times 0
[  217.648071][ T7773] CPU: 0 UID: 0 PID: 7773 Comm: syz.3.396 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  217.648102][ T7773] Tainted: [U]=USER
[  217.648108][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  217.648118][ T7773] Call Trace:
[  217.648125][ T7773]  <TASK>
[  217.648132][ T7773]  dump_stack_lvl+0x100/0x190
[  217.648158][ T7773]  should_fail_ex.cold+0x5/0xa
[  217.648185][ T7773]  should_failslab+0xc2/0x120
[  217.648214][ T7773]  __kmalloc_cache_noprof+0x91/0x6c0
[  217.648245][ T7773]  ? io_eventfd_register+0x129/0x480
[  217.648267][ T7773]  io_eventfd_register+0x129/0x480
[  217.648290][ T7773]  ? __pfx_io_eventfd_register+0x10/0x10
[  217.648315][ T7773]  __do_sys_io_uring_register+0x1122/0x1bc0
[  217.648341][ T7773]  ? __pfx___do_sys_io_uring_register+0x10/0x10
[  217.648369][ T7773]  ? ksys_write+0x1ac/0x250
[  217.648396][ T7773]  ? __pfx_ksys_write+0x10/0x10
[  217.648430][ T7773]  do_syscall_64+0x115/0x840
[  217.648447][ T7773]  ? clear_bhb_loop+0x40/0x90
[  217.648469][ T7773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.648488][ T7773] RIP: 0033:0x7f656df9de59
[  217.648504][ T7773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.648521][ T7773] RSP: 002b:00007f656ee08028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  217.648540][ T7773] RAX: ffffffffffffffda RBX: 00007f656e225fa0 RCX: 00007f656df9de59
[  217.648551][ T7773] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000002
[  217.648562][ T7773] RBP: 00007f656ee08090 R08: 0000000000000000 R09: 0000000000000000
[  217.648572][ T7773] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  217.648583][ T7773] R13: 00007f656e226038 R14: 00007f656e225fa0 R15: 00007ffccb870988
[  217.648605][ T7773]  </TASK>
[  219.496172][ T7775] Process accounting resumed
[  220.976507][ T7791] input input9: cannot allocate more than FF_MAX_EFFECTS effects
[  221.020668][ T5639] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5
[  221.869624][ T7804] FAULT_INJECTION: forcing a failure.
[  221.869624][ T7804] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  221.990028][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.1.405 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  221.990059][ T7804] Tainted: [U]=USER
[  221.990065][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  221.990075][ T7804] Call Trace:
[  221.990081][ T7804]  <TASK>
[  221.990088][ T7804]  dump_stack_lvl+0x100/0x190
[  221.990113][ T7804]  should_fail_ex.cold+0x5/0xa
[  221.990130][ T7804]  ? prepare_alloc_pages+0x16d/0x5f0
[  221.990157][ T7804]  should_fail_alloc_page+0xeb/0x140
[  221.990182][ T7804]  prepare_alloc_pages+0x1f0/0x5f0
[  221.990210][ T7804]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  221.990240][ T7804]  ? stack_trace_save+0x8e/0xc0
[  221.990264][ T7804]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  221.990284][ T7804]  ? bpf_ksym_find+0x124/0x1c0
[  221.990305][ T7804]  ? kasan_save_stack+0x3f/0x50
[  221.990325][ T7804]  ? kasan_save_stack+0x30/0x50
[  221.990344][ T7804]  ? kasan_save_track+0x14/0x30
[  221.990364][ T7804]  ? __kasan_kmalloc+0xaa/0xb0
[  221.990382][ T7804]  ? __kmalloc_noprof+0x322/0x820
[  221.990401][ T7804]  ? copy_splice_read+0x1a3/0xbb0
[  221.990428][ T7804]  ? do_splice_read+0x285/0x370
[  221.990455][ T7804]  ? splice_direct_to_actor+0x2a1/0xa30
[  221.990484][ T7804]  ? do_splice_direct+0x174/0x240
[  221.990512][ T7804]  ? do_sendfile+0xadc/0xe20
[  221.990536][ T7804]  ? __x64_sys_sendfile64+0x1d8/0x220
[  221.990569][ T7804]  alloc_pages_bulk_noprof+0x5de/0x13c0
[  221.990604][ T7804]  ? __pfx_alloc_pages_bulk_noprof+0x10/0x10
[  221.990623][ T7804]  ? rcu_is_watching+0x12/0xc0
[  221.990643][ T7804]  ? trace_kmalloc+0xeb/0x110
[  221.990665][ T7804]  ? __kasan_kmalloc+0xaa/0xb0
[  221.990688][ T7804]  ? copy_splice_read+0x1a3/0xbb0
[  221.990723][ T7804]  copy_splice_read+0x1e1/0xbb0
[  221.990758][ T7804]  ? __pfx_copy_splice_read+0x10/0x10
[  221.990789][ T7804]  ? look_up_lock_class+0x55/0x120
[  221.990823][ T7804]  ? lockdep_init_map_type+0x5c/0x250
[  221.990852][ T7804]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[  221.990880][ T7804]  ? __pfx_copy_splice_read+0x10/0x10
[  221.990909][ T7804]  do_splice_read+0x285/0x370
[  221.990941][ T7804]  splice_direct_to_actor+0x2a1/0xa30
[  221.990973][ T7804]  ? __pfx_direct_splice_actor+0x10/0x10
[  221.991006][ T7804]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  221.991043][ T7804]  do_splice_direct+0x174/0x240
[  221.991077][ T7804]  ? __pfx_do_splice_direct+0x10/0x10
[  221.991107][ T7804]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  221.991140][ T7804]  ? rw_verify_area+0xce/0x6d0
[  221.991166][ T7804]  do_sendfile+0xadc/0xe20
[  221.991197][ T7804]  ? __pfx_do_sendfile+0x10/0x10
[  221.991221][ T7804]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  221.991252][ T7804]  ? __fget_files+0x21f/0x3d0
[  221.991285][ T7804]  __x64_sys_sendfile64+0x1d8/0x220
[  221.991303][ T7804]  ? ksys_write+0x1ac/0x250
[  221.991330][ T7804]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  221.991356][ T7804]  do_syscall_64+0x115/0x840
[  221.991371][ T7804]  ? clear_bhb_loop+0x40/0x90
[  221.991394][ T7804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.991412][ T7804] RIP: 0033:0x7f3a8499de59
[  221.991428][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.991445][ T7804] RSP: 002b:00007f3a85784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  221.991463][ T7804] RAX: ffffffffffffffda RBX: 00007f3a84c25fa0 RCX: 00007f3a8499de59
[  221.991475][ T7804] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  221.991485][ T7804] RBP: 00007f3a85784090 R08: 0000000000000000 R09: 0000000000000000
[  221.991495][ T7804] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001
[  221.991506][ T7804] R13: 00007f3a84c26038 R14: 00007f3a84c25fa0 R15: 00007fff05711058
[  221.991528][ T7804]  </TASK>
[  224.259419][ T7814] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  230.778326][ T7902] vhci_hcd vhci_hcd.2: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub
[  231.517783][ T7912] futex_wake_op: syz.1.429 tries to shift op by -2048; fix this program
[  231.608952][ T7925] sg_write: data in/out 1648850815/151 bytes for SCSI command 0x71-- guessing data in;
[  231.608952][ T7925]    program syz.0.432 not setting count and/or reply_len properly
[  231.635797][ T7916] 0x004100000001-0x004500000004 : ""
[  231.779515][ T7916] mtd: partition "" is out of reach -- disabled
[  231.990837][ T7932] vivid-011: =================  START STATUS  =================
[  232.032180][ T7932] vivid-011: Radio HW Seek Mode: Bounded
[  232.075779][ T7932] vivid-011: Radio Programmable HW Seek: false
[  232.157847][ T7932] vivid-011: RDS Rx I/O Mode: Block I/O
[  232.195266][ T7932] vivid-011: Generate RBDS Instead of RDS: false
[  232.278926][ T7932] vivid-011: RDS Reception: true
[  232.306400][ T7932] vivid-011: RDS Program Type: 0 inactive
[  232.352217][ T7932] vivid-011: RDS PS Name:  inactive
[  232.386493][ T7932] vivid-011: RDS Radio Text:  inactive
[  232.423046][ T7932] vivid-011: RDS Traffic Announcement: false inactive
[  232.431147][ T7916] ftl_cs: FTL header not found.
[  232.470781][ T7932] vivid-011: RDS Traffic Program: false inactive
[  232.510308][ T7932] vivid-011: RDS Music: false inactive
[  232.541880][ T7932] vivid-011: ==================  END STATUS  ==================
[  232.550726][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[  232.656807][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.436'.
[  232.811979][ T7947] bridge_slave_1: left allmulticast mode
[  232.845967][ T7947] bridge_slave_1: left promiscuous mode
[  232.868788][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.949154][ T7947] bridge_slave_0: left allmulticast mode
[  232.989408][ T7947] bridge_slave_0: left promiscuous mode
[  233.020715][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.065411][ T7956] can: request_module (can-proto-0) failed.
[  233.706964][ T7967] random: crng reseeded on system resumption
[  235.030020][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'.
[  235.851885][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'.
[  237.131692][ T8029] nvme_fcloop: unknown parameter or missing value '7'

getty: ttyS0: read error: Resource temporarily unavailable
[  238.092121][ T8025] kexec: Could not allocate control_code_buffer
[  238.299281][ T8034] FAULT_INJECTION: forcing a failure.
[  238.299281][ T8034] name failslab, interval 1, probability 0, space 0, times 0
[  238.365235][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.1.451 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  238.365265][ T8034] Tainted: [U]=USER
[  238.365271][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  238.365280][ T8034] Call Trace:
[  238.365287][ T8034]  <TASK>
[  238.365294][ T8034]  dump_stack_lvl+0x100/0x190
[  238.365318][ T8034]  should_fail_ex.cold+0x5/0xa
[  238.365339][ T8034]  should_failslab+0xc2/0x120
[  238.365364][ T8034]  __kmalloc_noprof+0xfc/0x820
[  238.365385][ T8034]  ? do_handle_open+0x62b/0xf20
[  238.365409][ T8034]  do_handle_open+0x62b/0xf20
[  238.365432][ T8034]  ? __pfx_do_handle_open+0x10/0x10
[  238.365451][ T8034]  ? __x64_sys_futex+0x34f/0x4d0
[  238.365473][ T8034]  ? xfd_validate_state+0x129/0x190
[  238.365500][ T8034]  ? do_syscall_64+0x115/0x840
[  238.365515][ T8034]  do_syscall_64+0x115/0x840
[  238.365530][ T8034]  ? clear_bhb_loop+0x40/0x90
[  238.365552][ T8034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.365580][ T8034] RIP: 0033:0x7f3a8499de59
[  238.365596][ T8034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.365614][ T8034] RSP: 002b:00007f3a85784028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  238.365632][ T8034] RAX: ffffffffffffffda RBX: 00007f3a84c25fa0 RCX: 00007f3a8499de59
[  238.365643][ T8034] RDX: 0000000000100004 RSI: 0000200000000200 RDI: 0000000000000009
[  238.365654][ T8034] RBP: 00007f3a84a33e6f R08: 0000000000000000 R09: 0000000000000000
[  238.365664][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.365674][ T8034] R13: 00007f3a84c26038 R14: 00007f3a84c25fa0 R15: 00007fff05711058
[  238.365697][ T8034]  </TASK>

syzkaller
syzkaller login: [  240.146940][ T8081] FAULT_INJECTION: forcing a failure.
[  240.146940][ T8081] name failslab, interval 1, probability 0, space 0, times 0
[  240.296079][ T8081] CPU: 0 UID: 0 PID: 8081 Comm: syz.0.458 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  240.296111][ T8081] Tainted: [U]=USER
[  240.296117][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  240.296128][ T8081] Call Trace:
[  240.296135][ T8081]  <TASK>
[  240.296143][ T8081]  dump_stack_lvl+0x100/0x190
[  240.296178][ T8081]  should_fail_ex.cold+0x5/0xa
[  240.296200][ T8081]  should_failslab+0xc2/0x120
[  240.296225][ T8081]  kmem_cache_alloc_noprof+0x91/0x6a0
[  240.296244][ T8081]  ? __proc_create+0xc1/0x8f0
[  240.296273][ T8081]  ? __proc_create+0xc1/0x8f0
[  240.296301][ T8081]  ? __proc_create+0x247/0x8f0
[  240.296333][ T8081]  __proc_create+0x247/0x8f0
[  240.296362][ T8081]  ? __pfx___proc_create+0x10/0x10
[  240.296396][ T8081]  ? _raw_spin_unlock+0x28/0x50
[  240.296424][ T8081]  proc_create_reg+0x75/0x170
[  240.296444][ T8081]  proc_create_net_data+0x8e/0x1c0
[  240.296475][ T8081]  ? __pfx_proc_create_net_data+0x10/0x10
[  240.296509][ T8081]  ? __pfx_arp_net_init+0x10/0x10
[  240.296529][ T8081]  arp_net_init+0x53/0x80
[  240.296547][ T8081]  ops_init+0x1e2/0x5f0
[  240.296571][ T8081]  setup_net+0x118/0x3a0
[  240.296594][ T8081]  ? __pfx_setup_net+0x10/0x10
[  240.296616][ T8081]  ? mutex_init_lockdep+0xf1/0x120
[  240.296650][ T8081]  copy_net_ns+0x46f/0x7c0
[  240.296679][ T8081]  create_new_namespaces+0x3ea/0xac0
[  240.296714][ T8081]  unshare_nsproxy_namespaces+0xf2/0x220
[  240.296734][ T8081]  ksys_unshare+0x438/0xab0
[  240.296757][ T8081]  ? __pfx_ksys_unshare+0x10/0x10
[  240.296786][ T8081]  __x64_sys_unshare+0x31/0x40
[  240.296807][ T8081]  do_syscall_64+0x115/0x840
[  240.296823][ T8081]  ? clear_bhb_loop+0x40/0x90
[  240.296845][ T8081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.296864][ T8081] RIP: 0033:0x7f3cd619de59
[  240.296879][ T8081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.296896][ T8081] RSP: 002b:00007f3cd43d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  240.296914][ T8081] RAX: ffffffffffffffda RBX: 00007f3cd6426090 RCX: 00007f3cd619de59
[  240.296925][ T8081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  240.296935][ T8081] RBP: 00007f3cd6233e6f R08: 0000000000000000 R09: 0000000000000000
[  240.296946][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.296956][ T8081] R13: 00007f3cd6426128 R14: 00007f3cd6426090 R15: 00007ffdb4f356e8
[  240.296985][ T8081]  </TASK>
[  241.005451][ T8079] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  241.036037][ T8079] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  241.051635][ T8079] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  241.082864][ T8079] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  241.443797][ T8104] netlink: 'syz.0.464': attribute type 10 has an invalid length.
[  241.479913][ T8104] netlink: 230 bytes leftover after parsing attributes in process `syz.0.464'.
[  241.585526][ T8104] vhci_hcd vhci_hcd.1: invalid port number 50
[  241.619389][ T8104] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub.
[  241.664720][ T8107] __vm_enough_memory: pid: 8107, comm: syz.0.464, bytes: 4398046457856 not enough memory for the allocation
[  242.313946][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  243.109738][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  243.115915][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  243.122806][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  247.614544][ T8176] netlink: 'syz.0.476': attribute type 33 has an invalid length.
[  250.077389][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'.
[  250.225452][ T8215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'.
[  250.688643][ T8184] Process accounting paused
[  251.654750][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'.
[  251.713997][ T8227] bond0: entered promiscuous mode
[  251.757417][ T8227] bond_slave_0: entered promiscuous mode
[  251.795979][ T8227] bond_slave_1: entered promiscuous mode
[  253.717901][ T8271] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  253.786905][ T8271] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[  255.771872][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  255.783032][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  255.813232][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'.
[  260.071020][ T8381] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  260.078846][ T8381] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  260.282279][ T8386] mmap: syz.3.517 (8386) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  260.673814][ T8398] openvswitch: netlink: Message has 4 unknown bytes.
[  263.544976][ T5639] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18
[  264.988821][ T8446] futex_wake_op: syz.0.529 tries to shift op by -2048; fix this program
[  265.151801][ T8446] futex_wake_op: syz.0.529 tries to shift op by -2048; fix this program
[  267.054736][ T5639] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  267.425053][ T8474] syz.3.536 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  267.842431][ T8477] FAULT_INJECTION: forcing a failure.
[  267.842431][ T8477] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  268.004726][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.0.537 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  268.004758][ T8477] Tainted: [U]=USER
[  268.004764][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  268.004774][ T8477] Call Trace:
[  268.004781][ T8477]  <TASK>
[  268.004788][ T8477]  dump_stack_lvl+0x100/0x190
[  268.004813][ T8477]  should_fail_ex.cold+0x5/0xa
[  268.004831][ T8477]  ? prepare_alloc_pages+0x16d/0x5f0
[  268.004858][ T8477]  should_fail_alloc_page+0xeb/0x140
[  268.004883][ T8477]  prepare_alloc_pages+0x1f0/0x5f0
[  268.004908][ T8477]  ? __pfx_perf_event_mmap+0x10/0x10
[  268.004938][ T8477]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  268.004966][ T8477]  ? vma_set_page_prot+0xb1/0x120
[  268.004992][ T8477]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  268.005015][ T8477]  ? __pfx___mmap_region+0x10/0x10
[  268.005048][ T8477]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  268.005088][ T8477]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  268.005114][ T8477]  ? policy_nodemask+0xed/0x4f0
[  268.005140][ T8477]  alloc_pages_mpol+0x1fb/0x540
[  268.005166][ T8477]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  268.005196][ T8477]  alloc_pages_noprof+0x1a/0x160
[  268.005225][ T8477]  __pmd_alloc+0x3b/0x950
[  268.005251][ T8477]  __handle_mm_fault+0xa9c/0x2a00
[  268.005285][ T8477]  ? mt_find+0x45e/0x8e0
[  268.005306][ T8477]  ? __pfx___handle_mm_fault+0x10/0x10
[  268.005333][ T8477]  ? __pfx_mt_find+0x10/0x10
[  268.005369][ T8477]  handle_mm_fault+0x37b/0xa30
[  268.005402][ T8477]  __get_user_pages+0x1178/0x32a0
[  268.005435][ T8477]  ? __pfx___get_user_pages+0x10/0x10
[  268.005465][ T8477]  populate_vma_page_range+0x267/0x3f0
[  268.005491][ T8477]  ? __pfx_populate_vma_page_range+0x10/0x10
[  268.005515][ T8477]  ? __pfx_find_vma_intersection+0x10/0x10
[  268.005539][ T8477]  ? do_mmap+0x93f/0x12f0
[  268.005565][ T8477]  __mm_populate+0x107/0x3a0
[  268.005591][ T8477]  ? __pfx___mm_populate+0x10/0x10
[  268.005619][ T8477]  ? up_write+0x2e5/0x5c0
[  268.005638][ T8477]  vm_mmap_pgoff+0x37f/0x470
[  268.005664][ T8477]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  268.005690][ T8477]  ? __pfx_do_futex+0x10/0x10
[  268.005713][ T8477]  ksys_mmap_pgoff+0xe4/0x610
[  268.005736][ T8477]  ? __x64_sys_futex+0x358/0x4d0
[  268.005754][ T8477]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  268.005778][ T8477]  ? xfd_validate_state+0x129/0x190
[  268.005802][ T8477]  __x64_sys_mmap+0x125/0x190
[  268.005824][ T8477]  do_syscall_64+0x115/0x840
[  268.005840][ T8477]  ? clear_bhb_loop+0x40/0x90
[  268.005861][ T8477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.005880][ T8477] RIP: 0033:0x7f3cd619de59
[  268.005897][ T8477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  268.005913][ T8477] RSP: 002b:00007f3cd43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  268.005931][ T8477] RAX: ffffffffffffffda RBX: 00007f3cd6425fa0 RCX: 00007f3cd619de59
[  268.005943][ T8477] RDX: ffffffffffffffff RSI: 0000000000040009 RDI: 0000000000000000
[  268.005953][ T8477] RBP: 00007f3cd6233e6f R08: 0000000000000007 R09: 0000000000028000
[  268.005964][ T8477] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  268.005974][ T8477] R13: 00007f3cd6426038 R14: 00007f3cd6425fa0 R15: 00007ffdb4f356e8
[  268.005997][ T8477]  </TASK>
[  269.032087][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'.
[  269.635858][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.006077][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.282935][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.488912][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.634619][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.647055][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.656994][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.680241][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  270.693247][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  272.061139][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.108083][   T35] bond0 (unregistering): Released all slaves
[  272.308326][ T8503] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  272.402362][ T8503] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  272.459190][ T8503] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  272.716345][   T50] Bluetooth: hci0: command tx timeout
[  273.020353][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  273.644634][   T35] hsr_slave_0: left promiscuous mode
[  273.687887][   T35] hsr_slave_1: left promiscuous mode
[  273.716151][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.752305][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.800463][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.850029][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.022578][   T35] veth1_macvtap: left promiscuous mode
[  274.065283][   T35] veth0_macvtap: left promiscuous mode
[  274.112182][   T35] veth1_vlan: left promiscuous mode
[  274.153423][   T35] veth0_vlan: left promiscuous mode
[  274.785006][   T50] Bluetooth: hci0: command tx timeout
[  275.447510][   T35] team0 (unregistering): Port device team_slave_1 removed
[  275.518725][   T35] team0 (unregistering): Port device team_slave_0 removed
[  276.113508][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[  276.134856][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  276.147877][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  276.157156][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  276.168152][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  276.184273][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  276.864238][ T5639] Bluetooth: hci0: command tx timeout
[  277.869451][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.922025][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.977618][ T8484] bridge_slave_0: entered allmulticast mode
[  278.020217][ T8484] bridge_slave_0: entered promiscuous mode
[  278.067470][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.121186][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.163403][ T8484] bridge_slave_1: entered allmulticast mode
[  278.204916][ T8484] bridge_slave_1: entered promiscuous mode
[  278.286991][ T5639] Bluetooth: hci4: command tx timeout
[  278.473405][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.534517][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.763337][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3
[  278.866847][ T8484] team0: Port device team_slave_0 added
[  278.896745][ T8484] team0: Port device team_slave_1 added
[  278.924100][ T5639] Bluetooth: hci0: command tx timeout
[  279.241903][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.291811][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.381579][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.474473][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.522291][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.701152][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.093360][ T8592] random: crng reseeded on system resumption
[  280.189403][ T8592] Unrecognized hibernate image header format!
[  280.234365][ T8592] PM: hibernation: Image mismatch: architecture specific data
[  280.356105][ T5639] Bluetooth: hci4: command tx timeout
[  280.493347][ T8484] hsr_slave_0: entered promiscuous mode
[  280.521668][ T8484] hsr_slave_1: entered promiscuous mode
[  281.521701][ T8583] Process accounting resumed
[  281.982342][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4
[  282.103294][ T8546] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.141889][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.171465][ T8546] bridge_slave_0: entered allmulticast mode
[  282.202012][ T8546] bridge_slave_0: entered promiscuous mode
[  282.426211][ T5639] Bluetooth: hci4: command tx timeout
[  282.528227][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.567058][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.594146][ T8546] bridge_slave_1: entered allmulticast mode
[  282.617431][ T8546] bridge_slave_1: entered promiscuous mode
[  282.784176][ T8546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.860010][ T8546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.213567][ T8546] team0: Port device team_slave_0 added
[  283.276019][ T8546] team0: Port device team_slave_1 added
[  283.573920][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.608861][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  283.741000][ T8546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.804709][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.837616][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  283.954608][ T8546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.250412][ T8546] hsr_slave_0: entered promiscuous mode
[  284.278293][ T8546] hsr_slave_1: entered promiscuous mode
[  284.310572][ T8546] debugfs: 'hsr0' already exists in 'hsr'
[  284.333884][ T8546] Cannot create hsr debugfs directory
[  284.494837][ T5639] Bluetooth: hci4: command tx timeout
[  285.180743][   T64] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.527887][   T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.742691][   T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.831099][ T8671] netlink: 504 bytes leftover after parsing attributes in process `syz.0.556'.
[  285.869154][ T8671] netlink: 350 bytes leftover after parsing attributes in process `syz.0.556'.
[  285.880927][   T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.915137][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'.
[  286.022425][   T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.924959][   T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  286.966680][   T64] bond_slave_0: left promiscuous mode
[  286.993869][   T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.022649][   T64] bond_slave_1: left promiscuous mode
[  287.049133][   T64] bond0 (unregistering): Released all slaves
[  287.742089][   T64] hsr_slave_0: left promiscuous mode
[  287.765441][   T64] hsr_slave_1: left promiscuous mode
[  287.783975][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  287.817475][   T64] batman_adv: batadv0: Removing interface: batadv_slave_0
[  287.834648][   T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.860416][   T64] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.910959][   T64] veth1_macvtap: left promiscuous mode
[  287.929251][   T64] veth0_macvtap: left promiscuous mode
[  287.947221][   T64] veth1_vlan: left promiscuous mode
[  287.964355][   T64] veth0_vlan: left promiscuous mode
[  288.757234][ T8715] usbip-vudc usbip-vudc.0: gadget not bound
[  291.094039][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1
[  291.956308][ T8792] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  291.979254][ T8792] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  292.023993][ T8792] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  292.076223][ T8792] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  292.107535][ T8792] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  292.139155][ T8792] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  292.150881][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2
[  292.170938][ T8792] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  292.196614][ T8792] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  292.212805][ T8792] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  292.789351][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3
[  293.282676][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4
[  293.965333][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  294.044863][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  294.124404][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  294.205492][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  294.318851][ T5639] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  294.329075][ T5639] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff
[  294.345209][ T8850] random: crng reseeded on system resumption
[  294.502251][ T8850] hub 1-0:1.0: USB hub found
[  294.517436][ T8850] hub 1-0:1.0: 1 port detected
[  296.114119][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  296.200898][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  296.281086][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  296.303124][ T8895] FAULT_INJECTION: forcing a failure.
[  296.303124][ T8895] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  296.318352][ T8895] CPU: 0 UID: 0 PID: 8895 Comm: syz.0.571 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  296.318383][ T8895] Tainted: [U]=USER
[  296.318389][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  296.318399][ T8895] Call Trace:
[  296.318405][ T8895]  <TASK>
[  296.318412][ T8895]  dump_stack_lvl+0x100/0x190
[  296.318437][ T8895]  should_fail_ex.cold+0x5/0xa
[  296.318454][ T8895]  ? prepare_alloc_pages+0x16d/0x5f0
[  296.318482][ T8895]  should_fail_alloc_page+0xeb/0x140
[  296.318510][ T8895]  prepare_alloc_pages+0x1f0/0x5f0
[  296.318540][ T8895]  ? do_raw_spin_unlock+0x145/0x1e0
[  296.318561][ T8895]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[  296.318591][ T8895]  ? trace_hrtimer_start+0x77/0x220
[  296.318612][ T8895]  ? hrtimer_start_range_ns_common+0x78e/0x18b0
[  296.318638][ T8895]  ? find_held_lock+0x2b/0x80
[  296.318659][ T8895]  ? finish_task_switch.isra.0+0x2c0/0x10c0
[  296.318677][ T8895]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  296.318698][ T8895]  ? finish_task_switch.isra.0+0x2c5/0x10c0
[  296.318718][ T8895]  ? finish_task_switch.isra.0+0x3b6/0x10c0
[  296.318739][ T8895]  ? rcu_is_watching+0x12/0xc0
[  296.318759][ T8895]  ? trace_sched_exit_tp+0x120/0x160
[  296.318788][ T8895]  ? try_to_wake_up+0x158/0x1c90
[  296.318804][ T8895]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  296.318830][ T8895]  ? policy_nodemask+0xed/0x4f0
[  296.318856][ T8895]  alloc_pages_mpol+0x1fb/0x540
[  296.318881][ T8895]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  296.318915][ T8895]  folio_alloc_mpol_noprof+0x36/0x260
[  296.318945][ T8895]  vma_alloc_folio_noprof+0xed/0x1d0
[  296.318972][ T8895]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  296.319006][ T8895]  do_anonymous_page+0xb2b/0x2080
[  296.319035][ T8895]  ? rcu_read_unlock+0x2d/0xb0
[  296.319056][ T8895]  __handle_mm_fault+0x1d2c/0x2a00
[  296.319090][ T8895]  ? reacquire_held_locks+0xce/0x1e0
[  296.319117][ T8895]  ? __pfx___handle_mm_fault+0x10/0x10
[  296.319149][ T8895]  ? lock_vma_under_rcu+0x17c/0x590
[  296.319190][ T8895]  handle_mm_fault+0x37b/0xa30
[  296.319223][ T8895]  do_user_addr_fault+0x5a3/0x12f0
[  296.319253][ T8895]  exc_page_fault+0x6f/0xd0
[  296.319283][ T8895]  asm_exc_page_fault+0x26/0x30
[  296.319300][ T8895] RIP: 0033:0x7f3cd605f60b
[  296.319317][ T8895] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  296.319335][ T8895] RSP: 002b:00007f3cd43f4fa0 EFLAGS: 00010206
[  296.319350][ T8895] RAX: 0000000000000000 RBX: 00007f3cd6425fa0 RCX: 0000000000000000
[  296.319362][ T8895] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000140
[  296.319373][ T8895] RBP: 00007f3cd6233e6f R08: 0000000000000000 R09: 0000000000000000
[  296.319384][ T8895] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000
[  296.319395][ T8895] R13: 00007f3cd6426038 R14: 00007f3cd6425fa0 R15: 00007ffdb4f356e8
[  296.319419][ T8895]  </TASK>
[  296.319594][ T8895] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  296.724411][ T8900] netlink: 354 bytes leftover after parsing attributes in process `syz.0.572'.
[  296.746446][ T8900] syz.0.572: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  296.771136][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.0.572 Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  296.771168][ T8900] Tainted: [U]=USER
[  296.771175][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  296.771186][ T8900] Call Trace:
[  296.771192][ T8900]  <TASK>
[  296.771200][ T8900]  dump_stack_lvl+0x100/0x190
[  296.771229][ T8900]  warn_alloc.cold+0x94/0xa8
[  296.771251][ T8900]  ? __pfx_warn_alloc+0x10/0x10
[  296.771274][ T8900]  ? __bfs+0x150/0x2a0
[  296.771305][ T8900]  ? check_noncircular+0x97/0x160
[  296.771348][ T8900]  __vmalloc_node_range_noprof+0x136c/0x1630
[  296.771377][ T8900]  ? check_prev_add+0xfe/0xe60
[  296.771403][ T8900]  ? check_prev_add+0xfe/0xe60
[  296.771433][ T8900]  ? __lock_acquire+0xd5b/0x1a40
[  296.771461][ T8900]  ? disksize_store+0x11a/0x4d0
[  296.771488][ T8900]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  296.771519][ T8900]  ? __pfx___might_resched+0x10/0x10
[  296.771545][ T8900]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  296.771579][ T8900]  ? disksize_store+0x11a/0x4d0
[  296.771597][ T8900]  __vmalloc_node_noprof+0xad/0xf0
[  296.771623][ T8900]  ? disksize_store+0x11a/0x4d0
[  296.771644][ T8900]  disksize_store+0x11a/0x4d0
[  296.771664][ T8900]  ? sysfs_file_kobj+0xe4/0x290
[  296.771689][ T8900]  ? __pfx_disksize_store+0x10/0x10
[  296.771707][ T8900]  dev_attr_store+0x58/0x80
[  296.771733][ T8900]  ? __pfx_dev_attr_store+0x10/0x10
[  296.771757][ T8900]  sysfs_kf_write+0xf2/0x150
[  296.771782][ T8900]  kernfs_fop_write_iter+0x3e0/0x5f0
[  296.771801][ T8900]  ? __pfx_sysfs_kf_write+0x10/0x10
[  296.771826][ T8900]  vfs_write+0x6ac/0x1050
[  296.771854][ T8900]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  296.771876][ T8900]  ? __pfx_vfs_write+0x10/0x10
[  296.771919][ T8900]  ksys_write+0x12a/0x250
[  296.771946][ T8900]  ? __pfx_ksys_write+0x10/0x10
[  296.771971][ T8900]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  296.772000][ T8900]  ? syscall_user_dispatch+0x76/0x130
[  296.772023][ T8900]  do_syscall_64+0x115/0x840
[  296.772040][ T8900]  ? clear_bhb_loop+0x40/0x90
[  296.772062][ T8900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.772083][ T8900] RIP: 0033:0x7f3cd619de59
[  296.772101][ T8900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  296.772118][ T8900] RSP: 002b:00007f3cd43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  296.772138][ T8900] RAX: ffffffffffffffda RBX: 00007f3cd6425fa0 RCX: 00007f3cd619de59
[  296.772150][ T8900] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000007
[  296.772161][ T8900] RBP: 00007f3cd6233e6f R08: 0000000000000000 R09: 0000000000000000
[  296.772172][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  296.772184][ T8900] R13: 00007f3cd6426038 R14: 00007f3cd6425fa0 R15: 00007ffdb4f356e8
[  296.772208][ T8900]  </TASK>
[  296.775211][ T8900] Mem-Info:
[  297.201446][ T8900] active_anon:9936 inactive_anon:73 isolated_anon:0
[  297.201446][ T8900]  active_file:392 inactive_file:54691 isolated_file:0
[  297.201446][ T8900]  unevictable:768 dirty:223 writeback:0
[  297.201446][ T8900]  slab_reclaimable:11076 slab_unreclaimable:89426
[  297.201446][ T8900]  mapped:27193 shmem:3319 pagetables:1163
[  297.201446][ T8900]  sec_pagetables:0 bounce:0
[  297.201446][ T8900]  kernel_misc_reclaimable:0
[  297.201446][ T8900]  free:1322106 free_pcp:12880 free_cma:0
[  297.248944][ T8900] Node 0 active_anon:39744kB inactive_anon:292kB active_file:1568kB inactive_file:218412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108628kB dirty:884kB writeback:0kB shmem:11740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12096kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  297.284590][ T8900] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  297.321920][ T8900] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  297.353845][ T8900] lowmem_reserve[]: 0 2473 2473 2473 2473
[  297.360033][ T8900] Node 0 DMA32 free:1351864kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39744kB inactive_anon:292kB active_file:1568kB inactive_file:218412kB unevictable:1536kB writepending:884kB zspages:0kB present:3129332kB managed:2532572kB mlocked:0kB bounce:0kB free_pcp:32148kB local_pcp:32148kB free_cma:0kB
[  297.394095][ T8900] lowmem_reserve[]: 0 0 0 0 0
[  297.399459][ T8900] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:396kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  297.432260][ T8900] lowmem_reserve[]: 0 0 0 0 0
[  297.437458][ T8900] Node 1 Normal free:3921200kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:352kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19524kB local_pcp:19524kB free_cma:0kB
[  297.471903][ T8900] lowmem_reserve[]: 0 0 0 0 0
[  297.477126][ T8900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  297.490478][ T8900] Node 0 DMA32: 3340*4kB (UME) 2095*8kB (ME) 1399*16kB (UME) 1175*32kB (UME) 639*64kB (UME) 338*128kB (UM) 212*256kB (UME) 104*512kB (UME) 35*1024kB (UM) 11*2048kB (UME) 247*4096kB (UM) = 1351864kB
[  297.510726][ T8900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  297.523482][ T8900] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 2*16kB (M) 1*32kB (M) 3*64kB (M) 2*128kB (M) 1*256kB (U) 1*512kB (M) 2*1024kB (UM) 1*2048kB (M) 956*4096kB (UM) = 3921200kB
[  297.554496][ T8900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  297.574877][ T8900] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.593021][ T8900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  297.605331][ T8900] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  297.618464][ T8900] 58400 total pagecache pages
[  297.623959][ T8900] 2 pages in swap cache
[  297.630648][ T8900] Free swap  = 124988kB
[  297.634991][ T8900] Total swap = 124996kB
[  297.639718][ T8900] 2097051 pages RAM
[  297.643830][ T8900] 0 pages HighMem/MovableOnly
[  297.651107][ T8900] 432194 pages reserved
[  297.655489][ T8900] 0 pages cma reserved
[  297.830395][ T8904] base or size exceeds the MTRR width
[  297.952749][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.964086][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.973722][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.983722][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.991702][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.266067][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  298.345254][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[  298.902558][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.909998][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.917467][ T8907] bridge_slave_0: entered allmulticast mode
[  298.925578][ T8907] bridge_slave_0: entered promiscuous mode
[  298.934161][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.941587][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.950328][ T8907] bridge_slave_1: entered allmulticast mode
[  298.957792][ T8907] bridge_slave_1: entered promiscuous mode
[  298.995349][ T8907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.007693][ T8907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.043815][ T8907] team0: Port device team_slave_0 added
[  299.054694][ T8907] team0: Port device team_slave_1 added
[  299.090336][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.097568][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.124623][ T8907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.137125][ T8907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.145689][ T8907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  299.173228][ T8907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.222409][ T8907] hsr_slave_0: entered promiscuous mode
[  299.230132][ T8907] hsr_slave_1: entered promiscuous mode
[  299.239308][ T8907] debugfs: 'hsr0' already exists in 'hsr'
[  299.245260][ T8907] Cannot create hsr debugfs directory
[  300.013729][   T50] Bluetooth: hci2: command tx timeout
[  302.082984][   T50] Bluetooth: hci2: command tx timeout
[  304.153724][   T50] Bluetooth: hci2: command tx timeout
[  304.838214][   T50] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260
[  304.838244][   T50] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260
[  304.853904][   T50] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  304.853928][   T50] Bluetooth: hci1: adv larger than maximum supported
[  304.863660][   T50] Bluetooth: hci1: Unknown advertising packet type: 0x3b
[  304.873398][   T50] Bluetooth: hci1: Malformed LE Event: 0x0d
[  305.642372][ T8980] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off
[  305.683428][ T8980] pci 0000:00:01.3: PCI INT A: no GSI
[  306.221852][   T50] Bluetooth: hci2: command tx timeout
[  316.890961][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  316.900259][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  318.666254][ T9113] netlink: 13 bytes leftover after parsing attributes in process `syz.0.598'.
[  330.252013][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  330.263246][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  330.271549][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  330.279668][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  330.289533][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  330.819867][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.827360][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.836413][ T9127] bridge_slave_0: entered allmulticast mode
[  330.843854][ T9127] bridge_slave_0: entered promiscuous mode
[  330.852156][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.859601][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.867467][ T9127] bridge_slave_1: entered allmulticast mode
[  330.874997][ T9127] bridge_slave_1: entered promiscuous mode
[  330.908972][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.920954][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.952588][ T9127] team0: Port device team_slave_0 added
[  330.960739][ T9127] team0: Port device team_slave_1 added
[  330.986287][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.994143][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.022837][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.037009][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.044312][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.071849][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.115416][ T9127] hsr_slave_0: entered promiscuous mode
[  331.123644][ T9127] hsr_slave_1: entered promiscuous mode
[  331.129927][ T9127] debugfs: 'hsr0' already exists in 'hsr'
[  331.140246][ T9127] Cannot create hsr debugfs directory
[  332.325756][   T50] Bluetooth: hci5: command tx timeout
[  334.395007][   T50] Bluetooth: hci5: command tx timeout
[  334.876100][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  334.886728][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  334.900603][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  334.909707][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  334.920705][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  335.448518][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.455920][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.463726][ T9148] bridge_slave_0: entered allmulticast mode
[  335.471259][ T9148] bridge_slave_0: entered promiscuous mode
[  335.481181][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.488372][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.496100][ T9148] bridge_slave_1: entered allmulticast mode
[  335.504857][ T9148] bridge_slave_1: entered promiscuous mode
[  335.537353][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.550700][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.581817][ T9148] team0: Port device team_slave_0 added
[  335.592004][ T9148] team0: Port device team_slave_1 added
[  335.617714][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.625592][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.652398][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.666055][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.673978][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.701319][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.746657][ T9148] hsr_slave_0: entered promiscuous mode
[  335.754291][ T9148] hsr_slave_1: entered promiscuous mode
[  335.761268][ T9148] debugfs: 'hsr0' already exists in 'hsr'
[  335.767082][ T9148] Cannot create hsr debugfs directory
[  336.272956][   T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  336.285657][   T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  336.296027][   T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  336.304051][   T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  336.318143][   T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  336.465634][ T5639] Bluetooth: hci5: command tx timeout
[  336.834521][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.841786][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.850663][ T9168] bridge_slave_0: entered allmulticast mode
[  336.858363][ T9168] bridge_slave_0: entered promiscuous mode
[  336.867694][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.875083][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.883162][ T9168] bridge_slave_1: entered allmulticast mode
[  336.890463][ T9168] bridge_slave_1: entered promiscuous mode
[  336.922681][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.934610][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.945177][ T5639] Bluetooth: hci6: command tx timeout
[  336.977108][ T9168] team0: Port device team_slave_0 added
[  336.985069][ T9168] team0: Port device team_slave_1 added
[  337.011985][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.018989][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.046104][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.059426][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.067286][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.094867][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.142658][ T9168] hsr_slave_0: entered promiscuous mode
[  337.149817][ T9168] hsr_slave_1: entered promiscuous mode
[  337.157186][ T9168] debugfs: 'hsr0' already exists in 'hsr'
[  337.163514][ T9168] Cannot create hsr debugfs directory
[  338.374298][ T5639] Bluetooth: hci7: command tx timeout
[  338.533658][ T5639] Bluetooth: hci5: command tx timeout
[  339.011057][ T5639] Bluetooth: hci6: command tx timeout
[  340.443592][ T5639] Bluetooth: hci7: command tx timeout
[  341.080355][ T5639] Bluetooth: hci6: command tx timeout
[  342.512901][ T5639] Bluetooth: hci7: command tx timeout
[  343.149511][ T5639] Bluetooth: hci6: command tx timeout
[  344.582061][ T5639] Bluetooth: hci7: command tx timeout
[  357.846585][   T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  357.860832][   T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  357.871384][   T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  357.882345][   T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  357.890571][   T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  358.425766][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.434720][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.443422][ T9186] bridge_slave_0: entered allmulticast mode
[  358.451236][ T9186] bridge_slave_0: entered promiscuous mode
[  358.460517][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.467793][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.475529][ T9186] bridge_slave_1: entered allmulticast mode
[  358.483178][ T9186] bridge_slave_1: entered promiscuous mode
[  358.518557][ T9186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.531202][ T9186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.562009][ T9186] team0: Port device team_slave_0 added
[  358.570889][ T9186] team0: Port device team_slave_1 added
[  358.600009][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_0
[  358.607017][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  358.633839][ T9186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.646850][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.654902][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  358.683596][ T9186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.731199][ T9186] hsr_slave_0: entered promiscuous mode
[  358.737969][ T9186] hsr_slave_1: entered promiscuous mode
[  358.746027][ T9186] debugfs: 'hsr0' already exists in 'hsr'
[  358.752524][ T9186] Cannot create hsr debugfs directory
[  359.942459][ T5639] Bluetooth: hci8: command tx timeout
[  362.011353][ T5639] Bluetooth: hci8: command tx timeout
[  364.080608][ T5639] Bluetooth: hci8: command tx timeout
[  366.149881][ T5639] Bluetooth: hci8: command tx timeout
[  378.011877][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.018946][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  390.913479][   T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  390.926977][   T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  390.938309][   T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  390.947965][   T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  390.957258][   T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  391.469697][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.477003][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.484812][ T9211] bridge_slave_0: entered allmulticast mode
[  391.493259][ T9211] bridge_slave_0: entered promiscuous mode
[  391.501416][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.509589][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.517006][ T9211] bridge_slave_1: entered allmulticast mode
[  391.525061][ T9211] bridge_slave_1: entered promiscuous mode
[  391.559417][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.572879][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.603654][ T9211] team0: Port device team_slave_0 added
[  391.612038][ T9211] team0: Port device team_slave_1 added
[  391.640072][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.647787][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.674996][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.688207][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.695234][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.722733][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.771628][ T9211] hsr_slave_0: entered promiscuous mode
[  391.779449][ T9211] hsr_slave_1: entered promiscuous mode
[  391.785671][ T9211] debugfs: 'hsr0' already exists in 'hsr'
[  391.792008][ T9211] Cannot create hsr debugfs directory
[  393.050011][ T5639] Bluetooth: hci9: command tx timeout
[  395.119331][ T5639] Bluetooth: hci9: command tx timeout
[  395.408731][   T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  395.422557][   T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  395.434637][   T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  395.446177][   T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  395.454316][   T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  395.976142][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.983399][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.991790][ T9232] bridge_slave_0: entered allmulticast mode
[  396.000378][ T9232] bridge_slave_0: entered promiscuous mode
[  396.008735][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.016043][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.023423][ T9232] bridge_slave_1: entered allmulticast mode
[  396.032738][ T9232] bridge_slave_1: entered promiscuous mode
[  396.062112][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.076236][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.107678][ T9232] team0: Port device team_slave_0 added
[  396.116352][ T9232] team0: Port device team_slave_1 added
[  396.145638][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.152644][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.179452][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.192101][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.199461][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.227292][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.273674][ T9232] hsr_slave_0: entered promiscuous mode
[  396.280153][ T9232] hsr_slave_1: entered promiscuous mode
[  396.287055][ T9232] debugfs: 'hsr0' already exists in 'hsr'
[  396.293120][ T9232] Cannot create hsr debugfs directory
[  396.911923][ T5639] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  396.923441][ T5639] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  396.934417][ T5639] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  396.942717][ T5639] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  396.955081][ T5639] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  397.189163][   T50] Bluetooth: hci9: command tx timeout
[  397.463713][ T9253] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.471044][ T9253] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.479050][ T9253] bridge_slave_0: entered allmulticast mode
[  397.486474][ T9253] bridge_slave_0: entered promiscuous mode
[  397.495295][ T9253] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.502978][ T9253] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.510682][   T50] Bluetooth: hci10: command tx timeout
[  397.518091][ T9253] bridge_slave_1: entered allmulticast mode
[  397.525435][ T9253] bridge_slave_1: entered promiscuous mode
[  397.560631][ T9253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.572639][ T9253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.607915][ T9253] team0: Port device team_slave_0 added
[  397.616541][ T9253] team0: Port device team_slave_1 added
[  397.642852][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.651725][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.681536][ T9253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.693980][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.701973][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.728894][ T9253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.781073][ T9253] hsr_slave_0: entered promiscuous mode
[  397.789028][ T9253] hsr_slave_1: entered promiscuous mode
[  397.795830][ T9253] debugfs: 'hsr0' already exists in 'hsr'
[  397.801622][ T9253] Cannot create hsr debugfs directory
[  399.019104][   T50] Bluetooth: hci11: command tx timeout
[  399.257913][   T50] Bluetooth: hci9: command tx timeout
[  399.576114][   T50] Bluetooth: hci10: command tx timeout
[  401.088234][   T50] Bluetooth: hci11: command tx timeout
[  401.645559][   T50] Bluetooth: hci10: command tx timeout
[  403.157563][   T50] Bluetooth: hci11: command tx timeout
[  403.714579][   T50] Bluetooth: hci10: command tx timeout
[  405.226711][   T50] Bluetooth: hci11: command tx timeout
[  418.451337][ T5639] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  418.466501][ T5639] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  418.474896][ T5639] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  418.486502][ T5639] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  418.494238][ T5639] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  419.028772][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.036137][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.043547][ T9271] bridge_slave_0: entered allmulticast mode
[  419.051369][ T9271] bridge_slave_0: entered promiscuous mode
[  419.061831][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.069540][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.078765][ T9271] bridge_slave_1: entered allmulticast mode
[  419.086400][ T9271] bridge_slave_1: entered promiscuous mode
[  419.121444][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.133408][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.170916][ T9271] team0: Port device team_slave_0 added
[  419.179118][ T9271] team0: Port device team_slave_1 added
[  419.207096][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.214877][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.242173][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.256837][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.264278][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.290947][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.337714][ T9271] hsr_slave_0: entered promiscuous mode
[  419.344511][ T9271] hsr_slave_1: entered promiscuous mode
[  419.350695][ T9271] debugfs: 'hsr0' already exists in 'hsr'
[  419.356938][ T9271] Cannot create hsr debugfs directory
[  420.507266][   T50] Bluetooth: hci12: command tx timeout
[  420.828301][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  422.576456][ T5639] Bluetooth: hci12: command tx timeout
[  424.645758][ T5639] Bluetooth: hci12: command tx timeout
[  426.397026][   T30] INFO: task syz-executor:8484 blocked for more than 143 seconds.
[  426.414824][   T30]       Tainted: G     U              syzkaller #0
[  426.421638][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  426.431440][   T30] task:syz-executor    state:D stack:24248 pid:8484  tgid:8484  ppid:1      task_flags:0x480140 flags:0x00080002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  426.444459][   T30] Call Trace:
[  426.448208][   T30]  <TASK>
[  426.451615][   T30]  __schedule+0x125c/0x6730
[  426.466960][   T30]  ? __pfx___schedule+0x10/0x10
[  426.471983][   T30]  ? find_held_lock+0x2b/0x80
[  426.486451][   T30]  ? schedule+0x225/0x2c0
[  426.496717][   T30]  schedule+0xdd/0x2c0
[  426.503260][   T30]  schedule_timeout+0x1b2/0x280
[  426.534646][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  426.571076][   T30]  ? mark_held_locks+0x40/0x70
[  426.590719][   T30]  __wait_for_common+0x2e7/0x4c0
[  426.605605][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  426.611783][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  426.617868][   T30]  remove_one+0x312/0x420
[  426.622245][   T30]  ? up_write+0x2e5/0x5c0
[  426.626937][   T30]  __simple_recursive_removal+0x148/0x5c0
[  426.632700][   T30]  ? __pfx_remove_one+0x10/0x10
[  426.639462][   T30]  debugfs_remove+0x5d/0x80
[  426.644003][   T30]  nsim_dev_health_exit+0x3b/0xe0
[  426.649965][   T30]  nsim_dev_reload_destroy+0x144/0x4a0
[  426.656076][   T30]  nsim_drv_remove+0x52/0x1e0
[  426.660797][   T30]  ? __pfx_nsim_bus_remove+0x10/0x10
[  426.666434][   T30]  device_remove+0xcb/0x180
[  426.670976][   T30]  device_release_driver_internal+0x44e/0x620
[  426.677419][   T30]  bus_remove_device+0x2bc/0x560
[  426.682409][   T30]  ? __pfx_bus_remove_device+0x10/0x10
[  426.688646][   T30]  ? __pfx_device_remove_attrs+0x10/0x10
[  426.695958][   T30]  device_del+0x376/0x9b0
[  426.700506][   T30]  ? __pfx_device_del+0x10/0x10
[  426.705775][   T30]  device_unregister+0x1d/0xe0
[  426.710584][   T30]  del_device_store+0x346/0x480
[  426.715610][ T5639] Bluetooth: hci12: command tx timeout
[  426.723483][   T30]  ? __pfx_del_device_store+0x10/0x10
[  426.729439][   T30]  ? find_held_lock+0x2b/0x80
[  426.734255][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  426.739744][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  426.744916][   T30]  ? __pfx_del_device_store+0x10/0x10
[  426.750426][   T30]  bus_attr_store+0x74/0xb0
[  426.755851][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[  426.761122][   T30]  sysfs_kf_write+0xf2/0x150
[  426.766508][   T30]  kernfs_fop_write_iter+0x3e0/0x5f0
[  426.771821][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[  426.777317][   T30]  vfs_write+0x6ac/0x1050
[  426.781733][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  426.788119][   T30]  ? __pfx_vfs_write+0x10/0x10
[  426.793493][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  426.800675][   T30]  ksys_write+0x12a/0x250
[  426.806057][   T30]  ? __pfx_ksys_write+0x10/0x10
[  426.810994][   T30]  do_syscall_64+0x115/0x840
[  426.816009][   T30]  ? clear_bhb_loop+0x40/0x90
[  426.820749][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.827045][   T30] RIP: 0033:0x7f8b89d5e68e
[  426.831497][   T30] RSP: 002b:00007fff95c82418 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  426.840310][   T30] RAX: ffffffffffffffda RBX: 000055557678a500 RCX: 00007f8b89d5e68e
[  426.848572][   T30] RDX: 0000000000000001 RSI: 00007fff95c824a0 RDI: 0000000000000005
[  426.856763][   T30] RBP: 00007f8b89e346f2 R08: 0000000000000000 R09: 0000000000000000
[  426.865812][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.874887][   T30] R13: 00007fff95c824a0 R14: 00007f8b8ab54620 R15: 0000000000000003
[  426.883197][   T30]  </TASK>
[  426.886870][   T30] INFO: task syz.3.551:8625 blocked for more than 143 seconds.
[  426.907621][   T30]       Tainted: G     U              syzkaller #0
[  426.915093][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  426.924090][   T30] task:syz.3.551       state:D stack:26424 pid:8625  tgid:8624  ppid:5629   task_flags:0x400140 flags:0x00080002
[  426.936441][   T30] Call Trace:
[  426.939747][   T30]  <TASK>
[  426.942684][   T30]  __schedule+0x125c/0x6730
[  426.947721][   T30]  ? do_raw_spin_lock+0x128/0x260
[  426.952779][   T30]  ? __pfx___schedule+0x10/0x10
[  426.959281][   T30]  ? find_held_lock+0x2b/0x80
[  426.964213][   T30]  ? schedule+0x225/0x2c0
[  426.968580][   T30]  schedule+0xdd/0x2c0
[  426.972675][   T30]  schedule_preempt_disabled+0x13/0x30
[  426.979231][   T30]  __mutex_lock+0xccc/0x1bd0
[  426.984516][   T30]  ? devlink_health_report+0x656/0xb00
[  426.990010][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  426.995333][   T30]  ? devlink_recover_notify.constprop.0+0x1e3/0x550
[  427.003030][   T30]  ? devlink_health_report+0x656/0xb00
[  427.008922][   T30]  devlink_health_report+0x656/0xb00
[  427.014798][   T30]  ? __pfx_devlink_health_report+0x10/0x10
[  427.020633][   T30]  ? _copy_from_user+0x59/0xd0
[  427.026342][   T30]  nsim_dev_health_break_write+0x166/0x210
[  427.032225][   T30]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  427.041555][   T30]  full_proxy_write+0x135/0x1a0
[  427.047221][   T30]  vfs_write+0x2aa/0x1050
[  427.051700][   T30]  ? __pfx_full_proxy_write+0x10/0x10
[  427.057623][   T30]  ? __pfx_vfs_write+0x10/0x10
[  427.062430][   T30]  ? __fget_files+0x215/0x3d0
[  427.067471][   T30]  ? __fget_files+0x21f/0x3d0
[  427.072202][   T30]  ksys_write+0x12a/0x250
[  427.076898][   T30]  ? __pfx_ksys_write+0x10/0x10
[  427.081806][   T30]  do_syscall_64+0x115/0x840
[  427.087334][   T30]  ? clear_bhb_loop+0x40/0x90
[  427.092069][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.098696][   T30] RIP: 0033:0x7f656df9de59
[  427.104009][   T30] RSP: 002b:00007f656ee08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  427.114030][   T30] RAX: ffffffffffffffda RBX: 00007f656e225fa0 RCX: 00007f656df9de59
[  427.122037][   T30] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006
[  427.130535][   T30] RBP: 00007f656e033e6f R08: 0000000000000000 R09: 0000000000000000
[  427.139654][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  427.147940][   T30] R13: 00007f656e226038 R14: 00007f656e225fa0 R15: 00007ffccb870988
[  427.156240][   T30]  </TASK>
[  427.159420][   T30] 
[  427.159420][   T30] Showing all locks held in the system:
[  427.168241][   T30] 1 lock held by khungtaskd/30:
[  427.173529][   T30]  #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  427.183837][   T30] 2 locks held by getty/8063:
[  427.188537][   T30]  #0: ffff8880368470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  427.199577][   T30]  #1: ffffc900032532e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  427.211100][   T30] 7 locks held by syz-executor/8484:
[  427.216620][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.225968][   T30]  #1: ffff88805a890080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.236142][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.247447][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.257946][   T30]  #4: ffff88807c55c128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[  427.268739][   T30]  #5: ffff88807c55b258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0
[  427.279843][   T30]  #6: ffff88805b28b160 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[  427.291839][   T30] 4 locks held by syz-executor/8546:
[  427.297146][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.307653][   T30]  #1: ffff88802c236c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.318125][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.328513][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.339076][   T30] 3 locks held by syz.3.551/8625:
[  427.344306][   T30]  #0: ffff888037123270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  427.355343][   T30]  #1: ffff888020aaa450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.365081][   T30]  #2: ffff88807c55b258 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00
[  427.376177][   T30] 2 locks held by kworker/u8:39/8892:
[  427.381931][   T30]  #0: ffff88801ebad940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940
[  427.392862][   T30]  #1: ffffc90003b5fd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940
[  427.404597][   T30] 4 locks held by syz-executor/8907:
[  427.410543][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.420612][   T30]  #1: ffff8880207ed880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.434789][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.445568][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.456158][   T30] 5 locks held by syz.0.599/9117:
[  427.462376][   T30]  #0: ffff88802ad4cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  427.471704][   T30]  #1: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.480919][   T30]  #2: ffff888029730c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.490968][   T30]  #3: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.501206][   T30]  #4: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.513785][   T30] 1 lock held by syz.0.599/9118:
[  427.518753][   T30]  #0: ffff88802ad4cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  427.528728][   T30] 4 locks held by syz-executor/9127:
[  427.534359][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.544156][   T30]  #1: ffff88807ed10080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.554349][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.564752][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.576408][   T30] 4 locks held by syz-executor/9148:
[  427.581998][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.595871][   T30]  #1: ffff88807c288080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.606479][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.617792][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.628822][   T30] 4 locks held by syz-executor/9168:
[  427.635660][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.644944][   T30]  #1: ffff88805af90880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.655426][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.665843][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.678379][   T30] 4 locks held by syz-executor/9186:
[  427.684932][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.694265][   T30]  #1: ffff88807e8e9880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.704267][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.715262][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.725821][   T30] 4 locks held by syz-executor/9211:
[  427.731348][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.741374][   T30]  #1: ffff88807ab23080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.752716][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.763483][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.774033][   T30] 4 locks held by syz-executor/9232:
[  427.779540][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.788556][   T30]  #1: ffff8880356c0080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.799859][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.810282][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.821658][   T30] 4 locks held by syz-executor/9253:
[  427.826977][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.836985][   T30]  #1: ffff88805a95f880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.847066][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.858040][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.869498][   T30] 4 locks held by syz-executor/9271:
[  427.874817][   T30]  #0: ffff888012c14450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  427.884341][   T30]  #1: ffff888091a8b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  427.894376][   T30]  #2: ffff88802901a3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  427.904961][   T30]  #3: ffffffff9000ca60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  427.918784][   T30] 
[  427.921155][   T30] =============================================
[  427.921155][   T30] 
[  427.930833][   T30] NMI backtrace for cpu 0
[  427.930853][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  427.930879][   T30] Tainted: [U]=USER
[  427.930885][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  427.930896][   T30] Call Trace:
[  427.930902][   T30]  <TASK>
[  427.930909][   T30]  dump_stack_lvl+0x100/0x190
[  427.930934][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  427.930971][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  427.930993][   T30]  nmi_trigger_cpumask_backtrace+0x21c/0x2a0
[  427.931023][   T30]  sys_info+0x141/0x190
[  427.931044][   T30]  watchdog+0xcb1/0x1030
[  427.931078][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  427.931107][   T30]  ? __pfx_watchdog+0x10/0x10
[  427.931137][   T30]  ? __kthread_parkme+0x18c/0x230
[  427.931159][   T30]  ? kthread+0x13a/0x450
[  427.931180][   T30]  ? __pfx_watchdog+0x10/0x10
[  427.931210][   T30]  kthread+0x370/0x450
[  427.931232][   T30]  ? __pfx_kthread+0x10/0x10
[  427.931256][   T30]  ret_from_fork+0x72b/0xd50
[  427.931278][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  427.931300][   T30]  ? __switch_to+0x800/0x10f0
[  427.931325][   T30]  ? __switch_to_asm+0x39/0x70
[  427.931350][   T30]  ? __pfx_kthread+0x10/0x10
[  427.931374][   T30]  ret_from_fork_asm+0x1a/0x30
[  427.931409][   T30]  </TASK>
[  428.070125][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  428.077056][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U              syzkaller #0 PREEMPT(full) 
[  428.087758][   T30] Tainted: [U]=USER
[  428.091587][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  428.101676][   T30] Call Trace:
[  428.104972][   T30]  <TASK>
[  428.107929][   T30]  dump_stack_lvl+0x100/0x190
[  428.112619][   T30]  vpanic+0x552/0x970
[  428.116606][   T30]  ? __pfx_vpanic+0x10/0x10
[  428.121114][   T30]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[  428.127280][   T30]  panic+0xd1/0xe0
[  428.131009][   T30]  ? __pfx_panic+0x10/0x10
[  428.135431][   T30]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0
[  428.141592][   T30]  ? nmi_trigger_cpumask_backtrace+0x260/0x2a0
[  428.147789][   T30]  ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0
[  428.153969][   T30]  ? watchdog.cold+0x1ec/0x234
[  428.158784][   T30]  ? watchdog+0xcc1/0x1030
[  428.163240][   T30]  watchdog.cold+0x1fd/0x234
[  428.167857][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  428.173677][   T30]  ? __pfx_watchdog+0x10/0x10
[  428.178361][   T30]  ? __kthread_parkme+0x18c/0x230
[  428.183404][   T30]  ? kthread+0x13a/0x450
[  428.187654][   T30]  ? __pfx_watchdog+0x10/0x10
[  428.192343][   T30]  kthread+0x370/0x450
[  428.196433][   T30]  ? __pfx_kthread+0x10/0x10
[  428.201033][   T30]  ret_from_fork+0x72b/0xd50
[  428.205634][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  428.210764][   T30]  ? __switch_to+0x800/0x10f0
[  428.215469][   T30]  ? __switch_to_asm+0x39/0x70
[  428.220267][   T30]  ? __pfx_kthread+0x10/0x10
[  428.224882][   T30]  ret_from_fork_asm+0x1a/0x30
[  428.229689][   T30]  </TASK>
[  428.232857][   T30] Kernel Offset: disabled
[  428.237185][   T30] Rebooting in 86400 seconds..