last executing test programs:

3m14.203207486s ago: executing program 0 (id=172):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r0, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x45090)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x2, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000040)={0x10000, 0x8, 0x7})
r1 = socket(0x2, 0x2, 0x6)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
open(0x0, 0xa22c0, 0x155)
r2 = socket(0x11, 0x80003, 0x3ff)
setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4004)
sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x3)
mmap$auto(0xf000, 0x8, 0x2, 0x9b72, 0x2, 0x8000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$auto(0x3, 0x0, 0x5)
mmap$auto(0xc, 0x5, 0x9b, 0x14, 0xffffffffffffffff, 0x473)

3m13.373196801s ago: executing program 0 (id=175):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x9)
r0 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0)
read$auto_fops_blob_file(r0, 0x0, 0x0)
r1 = fsopen$auto(0x0, 0x1)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
mmap$auto(0xfffffffffffff96c, 0x8c, 0x7fffffff, 0x7fffffff, 0x401, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
readv$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7}, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0)
read$auto(r0, 0x0, 0x20)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x2d2802, 0x48)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe4643, 0x0)
mmap$auto(0x0, 0x9, 0xe3, 0x15, 0xffffffffffffffff, 0x8000)
write$auto(0xffffffffffffffff, 0x0, 0x1ff)
read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0)
r4 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103)
unlink$auto(&(0x7f0000000640)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00')
ioctl$auto_LOOP_CTL_ADD(r4, 0x4c80, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x10180, 0x0)
read$auto(r2, 0x0, 0x2000000000000020)
r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x802, 0x0)
writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x8000000003, 0xfffffffffffffffd, 0x4000000000df, 0xe5b, 0x401, 0xffffffff80000000)
r6 = socket(0x26, 0x5, 0x0)
getsockopt$auto(r6, 0x114, 0x2716, 0xfffffffffffffffc, 0x0)

3m13.20363758s ago: executing program 0 (id=176):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x850)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40010)
syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff)
socket(0xa, 0x2, 0x73)
setsockopt$auto(0x4, 0x29, 0x1, 0x0, 0x8)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3m12.372412432s ago: executing program 0 (id=177):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x850)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYBLOB="1a00"], 0x1ac}, 0x1, 0x0, 0x0, 0x5422facc1a088d72}, 0x10)
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x800, 0x73)
socket(0xa, 0x1, 0x84)
setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
ioctl$auto_PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000140)=0x7f)
r5 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$auto_cachefiles_daemon_fops_internal(r5, &(0x7f0000000300)="a04f", 0x2)
sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x200)

3m11.459680251s ago: executing program 0 (id=181):
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye3\x00', 0x258000, 0x0)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
r0 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)

3m10.50715584s ago: executing program 0 (id=186):
mmap$auto(0x4, 0x80, 0x10000000000df, 0x14, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0x58, 0xeb1, 0x401, 0x6)
bind$auto(r0, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket(0x10, 0x2, 0x0)
mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0007, 0x8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x6, 0x40a7a9, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x400053, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2bee9fe3e6, 0x0)
read$auto_null_fops_mem(r1, &(0x7f0000000100)=""/98, 0x62)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b583, 0x0)
close_range$auto(0x2, r2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3)
mmap$auto(0x0, 0x8, 0x7, 0x10, 0xffffffffffffffff, 0x7fff)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4)
capset$auto(0x0, &(0x7f0000000000)={0xffff0000, 0x7f, 0x48})
sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000300)={0x0, 0x4a}, 0x5, 0x0, 0x5, 0x5}, 0x5}, 0x2, 0x100)

3m9.892176482s ago: executing program 32 (id=186):
mmap$auto(0x4, 0x80, 0x10000000000df, 0x14, 0x401, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x4020009, 0x58, 0xeb1, 0x401, 0x6)
bind$auto(r0, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x1)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
socket(0x10, 0x2, 0x0)
mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000)
madvise$auto(0x0, 0xffffffffffff0007, 0x8)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x6, 0x40a7a9, 0x1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x400053, 0x9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2bee9fe3e6, 0x0)
read$auto_null_fops_mem(r1, &(0x7f0000000100)=""/98, 0x62)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b583, 0x0)
close_range$auto(0x2, r2, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3)
mmap$auto(0x0, 0x8, 0x7, 0x10, 0xffffffffffffffff, 0x7fff)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
setgroups$auto(0xe32, 0x0)
madvise$auto(0x0, 0x200007, 0x19)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4)
capset$auto(0x0, &(0x7f0000000000)={0xffff0000, 0x7f, 0x48})
sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000300)={0x0, 0x4a}, 0x5, 0x0, 0x5, 0x5}, 0x5}, 0x2, 0x100)

1m19.82186035s ago: executing program 1 (id=522):
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x4, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xdd01, 0x0)
mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001)
mount$auto(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0)
r2 = socket(0x18, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x40047452, 0x0)
mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0)
ioctl$auto_BLKRRPART(r1, 0x125f, 0x0)
open(0x0, 0x161342, 0x100)
msync$auto(0x200000000000000, 0x1800000ff010000, 0x1)
r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2)
open_by_handle_at$auto(r3, &(0x7f0000000000)={0x1, 0x2, 'u'}, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0)
msgctl$auto(0x8000, 0x6, 0x0)
socket(0x21, 0x2, 0x2)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x34000, 0x948b, 0x3, 0x15f4da06, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
socket(0xa, 0x1, 0x84)
socket(0xa, 0x801, 0x84)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0xf, 0x10009})

1m18.771893551s ago: executing program 1 (id=524):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1c/sub5/hw_params\x00', 0xc00, 0x0)
r1 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x40000, 0x0)
pread64$auto(r1, 0x0, 0xd, 0x10000413c)
r2 = socket(0x200000000000011, 0x2, 0x0)
mmap$auto(0x0, 0x100000000e983, 0x1000000000000e1, 0xeb1, r0, 0x8000)
socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x89b0, &(0x7f0000000140)={'vlan0\x00'})
r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"})
mmap$auto(0x5, 0x1, 0x3, 0x17, 0xfffffffffffffffa, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0)
r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0)
read$auto(r5, 0x0, 0x1f40)
r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3)
pwritev2$auto(0xffffffffffffffff, 0x0, 0x8000000000000004, 0xffffffffffffffff, 0x4, 0x9)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a)
ioctl$auto_EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ifb1/duplex\x00', 0x2cb42, 0x0)
mmap$auto(0x0, 0x40006, 0xdf, 0x19, 0x7, 0x28000)
write$auto(r7, 0x0, 0x82)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r8 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x4c4000, 0x0)
read$auto(r8, 0x0, 0x1f40)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
socket(0x2, 0x1, 0x0)

1m17.408975938s ago: executing program 1 (id=528):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0xf4000000], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})

1m17.044239613s ago: executing program 1 (id=530):
r0 = fcntl$auto(0xff80000000000000, 0x409, 0x3f)
fallocate$auto(r0, 0x0, 0x7, 0xb)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0)
read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0)
lsm_get_self_attr$auto(0x80000000, 0x0, &(0x7f0000002440)=0x4, 0x2004)
socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
r1 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x10001}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

1m16.596883835s ago: executing program 1 (id=531):
open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40)
newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x5e9c, 0x400000000000, 0x7, 0x6, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x2, 0xfe3, 0x1, 0x800, 0x7e, 0x800, 0x5, 0x101, 0xb288}, 0x0)
r0 = socket(0xa, 0x1, 0x84)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
r1 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$auto(r0, 0x84, 0x1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})

1m15.625972873s ago: executing program 1 (id=534):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_gtp(0x0, r0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
ioctl$auto(r1, 0x227f, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r0, 0x0, 0x3)

1m0.454805625s ago: executing program 33 (id=534):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_gtp(0x0, r0)
r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0)
ioctl$auto(r1, 0x227f, 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
read$auto(r0, 0x0, 0x3)

9.903044011s ago: executing program 3 (id=678):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '.'}]}, 0x1c}, 0x1, 0x0, 0x28000000, 0x801}, 0x4044820)

9.532084724s ago: executing program 3 (id=680):
writev$auto(0x3, 0x0, 0x8009)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x4004)
r1 = ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000040)=0x7fffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid$auto(0x2, 0x0, 0x0, 0x3, 0x0)
sendmsg$auto_OVS_FLOW_CMD_DEL(r3, 0x0, 0x800)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000)
mmap$auto(0x3, 0x402000b, 0xa000006, 0xeb1, r3, 0xfff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'tunl0\x00', <r5=>0x0})
r6 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r7=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_macvtap\x00', <r9=>0x0})
sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b0, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2f1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf1b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}, @ETHTOOL_A_LINKSTATE_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2f2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd83}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r10 = io_uring_setup$auto(0x69, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3)
unshare$auto(0x40000080)
pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9)
read$auto(0x3, 0x0, 0xf34)
read$auto(r2, 0x0, 0x7)
read$auto(r10, 0x0, 0x5)

4.83507349s ago: executing program 2 (id=692):
r0 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0)
r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f0000000200)={{0x7, <r2=>0xee01, 0xee00, 0x8, 0x0, 0x2, 0x200}, 0xc, 0x7, 0x0, 0x7, @raw=0x1, @inferred, 0x7, 0x0, &(0x7f0000000100)="f7138e543b5e499d854df48d9721a75a7f60015df7d914388512076b4ee92db32086a770e1ce81cf678e9becbb753b37a0f3e5d8700adc2c720970062a47be575671ce3341221743ce1e6ca0e797b424a1f545e0796004e033a19cfa4c14206fcb5b88fcd0faf944e8613b267c4bcb4aa798827e70cc71ec7cde5a3ef6652c208a5b5339d5ae58d1f3883490ff154f9fe76e7ef5aeceacdd091edc9609c108f904e04b8d298d9c0b", &(0x7f00000001c0)="1617d7de4995d70381c4cb694eead685aa"})
ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000002c0)={0xce2, @inferred=r0, @raw=0x777, 0x4, 0x6, '\x00', {0xd54, 0x862, 0x8bb5, <r3=>0x0, 0xee00, 0x200, 0x4, 0xb25, {0x7fffffffffffffff, 0x2}, {0x9, 0x3}, {0x1, 0x3}, 0x7fff, 0x10001, 0xf, 0xffff, 0x1308, 0x800, 0xfff9, 0x4, 0x7fff, 0xfff8, '\x00', 0xff, 0xb16d, 0x4, 0x3}})
setreuid$auto(r2, r3)
ppoll$auto(&(0x7f0000000000)={r1, 0x81, 0x9}, 0x9, 0x0, 0x0, 0x8)
ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r1, 0x80044dfb, &(0x7f0000000000)="a297dcac93a2682623eed9fe5c50ce71c22f884e7082d1c436f42d41fe128e2b12117d2764d29a14bad515fcd7b9dacec7d14f94b94db69de90cac581bd7d0dbfa3e3baa518c2ae5d7eea2195f7ff2bb9ca4275e0c8effabe4ec2c27aea7b6b594ea948c36f3a919706ee66a799a7fa3fad7013e3071309da482c8a4d1c4252f7768df67c3372bbe38c65c51bb3ec26d0b908d8c372ed5c1b9c330e8ff609211af3b9a331b7b8f3fcf4b8f9778b83fbcde541c7933679e39a8fb0da26929f45a853f6821626faa21cc1a5fb723cfe5d11b71ade2c9f9adf2dff982985ff3e069da92f714296a34")
pread64$auto(r0, 0x0, 0xffffffff, 0xfff)
openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) (async)
mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) (async)
shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f0000000200)={{0x7, 0xee01, 0xee00, 0x8, 0x0, 0x2, 0x200}, 0xc, 0x7, 0x0, 0x7, @raw=0x1, @inferred, 0x7, 0x0, &(0x7f0000000100)="f7138e543b5e499d854df48d9721a75a7f60015df7d914388512076b4ee92db32086a770e1ce81cf678e9becbb753b37a0f3e5d8700adc2c720970062a47be575671ce3341221743ce1e6ca0e797b424a1f545e0796004e033a19cfa4c14206fcb5b88fcd0faf944e8613b267c4bcb4aa798827e70cc71ec7cde5a3ef6652c208a5b5339d5ae58d1f3883490ff154f9fe76e7ef5aeceacdd091edc9609c108f904e04b8d298d9c0b", &(0x7f00000001c0)="1617d7de4995d70381c4cb694eead685aa"}) (async)
ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f00000002c0)={0xce2, @inferred=r0, @raw=0x777, 0x4, 0x6, '\x00', {0xd54, 0x862, 0x8bb5, 0x0, 0xee00, 0x200, 0x4, 0xb25, {0x7fffffffffffffff, 0x2}, {0x9, 0x3}, {0x1, 0x3}, 0x7fff, 0x10001, 0xf, 0xffff, 0x1308, 0x800, 0xfff9, 0x4, 0x7fff, 0xfff8, '\x00', 0xff, 0xb16d, 0x4, 0x3}}) (async)
setreuid$auto(r2, r3) (async)
ppoll$auto(&(0x7f0000000000)={r1, 0x81, 0x9}, 0x9, 0x0, 0x0, 0x8) (async)
ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r1, 0x80044dfb, &(0x7f0000000000)="a297dcac93a2682623eed9fe5c50ce71c22f884e7082d1c436f42d41fe128e2b12117d2764d29a14bad515fcd7b9dacec7d14f94b94db69de90cac581bd7d0dbfa3e3baa518c2ae5d7eea2195f7ff2bb9ca4275e0c8effabe4ec2c27aea7b6b594ea948c36f3a919706ee66a799a7fa3fad7013e3071309da482c8a4d1c4252f7768df67c3372bbe38c65c51bb3ec26d0b908d8c372ed5c1b9c330e8ff609211af3b9a331b7b8f3fcf4b8f9778b83fbcde541c7933679e39a8fb0da26929f45a853f6821626faa21cc1a5fb723cfe5d11b71ade2c9f9adf2dff982985ff3e069da92f714296a34") (async)
pread64$auto(r0, 0x0, 0xffffffff, 0xfff) (async)

4.519144071s ago: executing program 2 (id=694):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0)
writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/sound/ctl-led/mic/card0/reset\x00', 0xa001, 0x0)
write$auto(r0, &(0x7f0000000000)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x7)
mmap$auto(0x0, 0x4020009, 0xdf, 0x10, r0, 0x8000)
swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x2, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1, r1, @relative_id=0x13, 0xe600}, 0xf)
r4 = open(0x0, 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0xc)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x430000, 0x0)
read$auto(r6, 0x0, 0x20)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r7 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
write$auto(r7, 0x0, 0x5)
r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3)
unshare$auto(0x8000000)
syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0)

4.440546151s ago: executing program 3 (id=696):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
getcwd$auto(0x0, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x88100, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x200fffffffd}, 0x6, 0x7fffffff, 0x1)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2)
io_uring_enter$auto(0xffffffffffffffff, 0x1, 0x401, 0x0, 0x0, 0x18)
creat$auto(0x0, 0x9)
socket(0x2, 0x80002, 0x73)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
ioctl$auto(0x3, 0x5412, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
inotify_init1$auto(0x3000000000000)
inotify_add_watch$auto(0x4, 0x0, 0xe6e)
read$auto(0x4, 0x0, 0x6)
open(&(0x7f0000000000)='./file0\x00', 0x24642, 0x0)

4.257902588s ago: executing program 5 (id=697):
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x8801, 0x0) (async)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x8801, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0xaa102, 0x0) (async)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/smbd_keep_alive_interval\x00', 0xaa102, 0x0)
lseek$auto(0x3, 0x7fffffffffffffff, 0x1)
socket(0x10, 0x2, 0xc) (async)
r0 = socket(0x10, 0x2, 0xc)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
socket(0x22, 0x2, 0x10) (async)
socket(0x22, 0x2, 0x10)
socket(0xa, 0x3, 0xff)
fanotify_init$auto(0x200, 0x1)
socket(0xa, 0x5, 0x84)
r1 = socket(0x10, 0x2, 0xc)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf2535493a2c040002"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4044) (async)
sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf2535493a2c040002"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4044)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80)

4.167189896s ago: executing program 4 (id=698):
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000)
socket(0x2, 0x3, 0x6)
r0 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6a)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x10001}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

4.019523834s ago: executing program 5 (id=699):
r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
socket(0x10, 0x2, 0x0)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x800)

3.978117725s ago: executing program 2 (id=700):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a1842, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1)
write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4)
set_tid_address$auto(&(0x7f00000004c0)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), 0xffffffffffffffff)
sendmmsg$auto(r3, &(0x7f0000000480)={{&(0x7f0000000240)="e84658d9caeb0ba06c88fa7f1cf6e4660b6d416ed0e228cf7c66187f740a42c643724c852358b4bcc0e84a362f86b5af9cf3ece5d0b5c940f1f4ebba7a7c74a1f9ba87a2fad3d47804059c75197bb94523f89ee2cbb10a15ac011dd81ad30e035b25a78bd4b265290dc41d8ccc6f8a0e0962346b874e1f7d1849887a9081faa5f183db79682d", 0x5, &(0x7f00000003c0)={&(0x7f0000000300)="67264444ddc715adcfb545eff9fab60866c91aedceadc587b3d610c549ccd19e3a6e89234a17929abcf10b741b9d8df82badcf60c41333e62e31fa58f06efc06c451fd88061ede81b64776c013ed818503e9b70a5a1e00a2d965e5f917dc8392a3403fed4b1362d7a695fa218749745cf48c9c883840256810e6cc554393a337d3e0ba16baf7f1f900e4d7c998", 0xca3}, 0x9, &(0x7f0000000400)="bf4847d4f2eed0e20ee4d6c660b46674275cf4f9749a6136b3563aba573db5b1d0c103c664291fa11a0b872c1c758d994e62ba16b91773491586cc34aca9f777e5a788635c8d9bd1399602583ecfc1dc2949e29e", 0xfffffffffffff5dc, 0xfffffb1d}, 0x3c31517d}, 0xffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x4b66, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000001a80)={0x40, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, "7cc94cdc0e692184223731c162994248da730bbd648b63002aba23b825461539b678d760f59a"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20040054)
sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8a, 0xcd, "3a4b9edf7d19f3fbe81933d90ed9b5f3e7a57ac4c63cdf9571931057cab80b311cab5a383eca924fd86f22d1166d81e145d88fab1cafcc158578dffbe89d0de8b32f5fe3efa7366741f2d052f83e83d597f2bb308e1b07e1727a92283c0226c0bd189c582e2e52cb36bc2cc7c9c1b66545a59b27c6e92c7c9779bd07c0ac87984a3cb17c36bf"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20080080)

3.9467674s ago: executing program 4 (id=701):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0xfffffffffffff000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})

3.599105825s ago: executing program 4 (id=702):
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
timerfd_create$auto(0x9, 0x0)
semctl$auto(0x1ff, 0x2, 0x13, 0x4)
ioctl$auto(0x3, 0x40085400, 0x5)
r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
init_module$auto(0x0, 0xffff9, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x8000000000000000, 0x15)
madvise$auto(0x0, 0x2000000080000001, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
close_range$auto(r0, r0, 0xf)
move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
msgctl$auto_IPC_RMID(0x37, 0x0, &(0x7f0000000100)={{0x2, <r2=>0x0, 0x0, 0x100, 0x5, 0x8, 0xffff}, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1, 0x7, 0x6, 0x2, 0xdff, 0x15f, 0x6, 0xd, 0x7, @raw=0x1, @inferred=0xffffffffffffffff})
r3 = getuid()
newfstatat$auto(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4795, 0x40, 0x54dd, 0x2, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0x0, 0xfffffffffffffff9, 0x5, 0xffffffffffffff2d, 0x8, 0x10001, 0x54e, 0x4, 0x1, 0xc, 0x1}, 0x8)
keyctl$auto(0x8, r2, r3, r4, 0x2)
statmount$auto(0x0, 0x0, 0x1fe, 0xd)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r5)
sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r5, 0x0, 0x80)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800000008000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)

3.41069892s ago: executing program 3 (id=703):
futex$auto(&(0x7f0000000040)=0x9, 0x5, 0xf4, 0x0, &(0x7f00000002c0)=0x7, 0xc0040000) (async, rerun: 32)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async, rerun: 32)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0)
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async, rerun: 64)
r1 = socket(0x15, 0x5, 0x0) (rerun: 64)
getsockopt$auto(r1, 0x114, 0x271c, 0xfffffffffffffffc, 0x0) (async)
write$auto(r0, 0x0, 0x1)
unshare$auto(0x80000000)

2.999237945s ago: executing program 2 (id=704):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x40, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/dummy_hcd.1/usb2/bNumInterfaces\x00', 0x0, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x2001, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
io_uring_setup$auto(0x8, 0x0)
lseek$auto(0x3, 0x8, 0x3)
bpf$auto(0x0, 0x0, 0x6f3)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010101}, 0x54)
listen$auto(0x3, 0x83)
mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000)
sysfs$auto(0x2, 0x41, 0x0)
fsopen$auto(0x0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$auto(0x1, 0x100, 0xffffffff, 0x0)
openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0)
recvmmsg$auto(0x3, 0x0, 0x3, 0x0, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x0, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x800f)
sendmmsg$auto(0x3, 0x0, 0x400009a6, 0x7000000)
signalfd$auto(0xffffffff, 0x0, 0x8)

2.941334068s ago: executing program 5 (id=705):
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon35\x00', 0x400, 0x0)
mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x7)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x41)
rmdir$auto(&(0x7f0000000380)='./file0\x00')
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
madvise$auto(0x0, 0xffffffffffff0004, 0x19)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x200007, 0x8)
lseek$auto(0x3, 0x7ffffffffffffffd, 0x2)
mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000)
mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa)
execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1)
sched_setscheduler$auto(0x0, 0x2, &(0x7f00000012c0)={0xdd})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000)
sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x8}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x240000c0)
read$auto(0xffffffffffffffff, 0x0, 0x20)

2.631037709s ago: executing program 3 (id=706):
r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x200, 0x0)
read$auto_configfs_file_operations_configfs_internal(r0, &(0x7f0000000040)=""/139, 0x8b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000001380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000000180)={0x11bc, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x81}, @NL802154_ATTR_SEC_KEY={0x35, 0x30, 0x0, 0x1, [@typed={0x26, 0x140, 0x0, 0x0, @binary="873f2518d869872885a5faef19eb7d5921251a9d2d110cf0666400d0788f22a742c3"}, @generic="25e1584f23", @nested={0x4, 0x10c}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1158, 0x2b, 0x0, 0x1, [@nested={0x10, 0x14c, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0x8, 0x80, 0x0, 0x0, @u32=0x59}]}, @generic="6b2dfa5b32de0c722e63ad6aa072e9b103dd82dc6081eca690eacc6440a1f88e7601fde7aed372a6f4499bed6de8", @typed={0x1004, 0x6d, 0x0, 0x0, @binary="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"}, @typed={0xff, 0x1, 0x0, 0x0, @binary="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"}, @generic="1260bc70e7a93abf74bc", @typed={0x8, 0xc6, 0x0, 0x0, @u32=0x4}]}]}, 0x11bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400)
r3 = timerfd_create$auto(0x2, 0xf71)
ioctl$auto_TCFLSH2(r3, 0x540b, &(0x7f00000013c0)="c7f58467dc2b5d0aca706ac462573ebc0dd97e2d357153c7544eca9b44ae73ae339cb030f2484bfa0e821feab2e40329ae44ca7b5dfe55f44a095ce23765bff9ab8785c59376f827185b4025bd6d6c946b8a35621c92c7a25060db2c49a91dddbb816db1a6c8538c5240431271bdacc9bb8bb1cb1d30d517dfbc894f39177715c855960151c7c8c5")
r4 = open(&(0x7f0000001480)='./file0\x00', 0x202002, 0x5)
read$auto_uhid_fops_uhid(r4, &(0x7f00000014c0)=""/188, 0xbc)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000001580)="092ba973b81e454d0a8e42199eb400f939997ddcc847142af7667c02e529dad386afe3d05bfb5572e02d601aa0668dc7541d59bcb0c71415b216a262db55eb727d07e86eee3625ede483fe10c11adf4ce2c720097f3c11c20ce48a9e302c6df6ac96a72e112b8d606928b77bf853bca901025248a9b9875c42b04527e6884d2ec25183767eeed321225869246fa692d1182b93c88310a32490a46cae5c432e4538f9", 0xa2)
ioctl$auto_TCSBRK(r3, 0x5409, &(0x7f0000001640)="dacce481934342864f0763b44ea23001558fbdf90d1fbcce45d575cd8305ce3173aa48")
r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000001680), 0x420, 0x0)
ioctl$auto_VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f00000016c0)=<r6=>r4)
unshare$auto(0x4)
ioctl$auto_I2C_SMBUS(r3, 0x720, &(0x7f0000001700)="94e52451c789b96509d2863d3abebeb05d0f7023cde078ba0bfd5b7912a91d58f734d62a67e533e606ce0ee90a34f29ff5536472af5cefd45a759174c89ecda05d6b5f")
getcwd$auto(&(0x7f0000001780)='nl802154\x00', 0x7fffffff)
r7 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x200, 0x0)
r8 = ioctl$auto_TUNGETVNETHDRSZ2(r7, 0x800454d7, &(0x7f0000001800)=0x4)
mincore$auto(0x8001, 0x6, &(0x7f0000001840)='+-^\xd3\'^[\x00')
write$auto_nvram_misc_fops_nvram(r8, &(0x7f0000001880)="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", 0x1000)
r9 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x401, 0x0, 0xffffffffffffffff, 0x10, 0x7)
read$auto(r9, &(0x7f0000002880)='\x00', 0x0)
creat$auto(&(0x7f00000028c0)='./file0\x00', 0x200)
r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002940), r1)
sendmsg$auto_NL80211_CMD_VENDOR(r9, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r10, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xc}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "a9b4f7663a4987e764727abe44a5acb8bb3e4b4b59fb30afebb0"}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x8004)
io_uring_register$auto_IORING_UNREGISTER_FILES(r6, 0x3, &(0x7f0000002a80)="5f1ac88791530f05767b57c63c51aa64716c2580d070b338ece5431e43a0fe4b9a16210ccfe81142dd8e3c8f3210f17da550cd7073a77508eca1dbed41a4d7d9abf458b2fc46005da8908aea1d5d62c454c026e756f0850945e744547a732377e01032861aba8f374e8ff9a86c5fae1759ab4eb15330a7dc0acde7f33e542432acc3282ab5ee48f7955649a89c867cbfde43b84fe130ee79067b2858e4324a7fbd5ad246c030278a74575b9ddcc160c68d65aec4515752f511b83ecc0b4088818f468df403e741ce8777890b96326ef317568193c51167ab69cda5a8a54ad525564f915e7a51948466b2f3d1d0ad19e9fbc8d825b6", 0x80000001)
read$auto(r6, &(0x7f0000002b80)='/dev/vhost-net\x00', 0x69b)
brk$auto(0x6)
r11 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002c00), r9)
sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000002d00)={&(0x7f0000002bc0), 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x24, r11, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000)

2.347649194s ago: executing program 3 (id=707):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/modalias\x00', 0x80000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/53, 0x35)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) (async)
sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/mem\x00', 0x608100, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x204}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0) (async)
socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
r4 = socket(0x1e, 0x4, 0x0)
getsockname$auto(r4, 0x0, &(0x7f0000000180)=0xff)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040))

2.118756543s ago: executing program 5 (id=708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x5, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x2000c010)
r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000001c0), r1)
sendmsg$auto_OVS_METER_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) (async)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1) (async)
sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x5, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x2000c010) (async)
syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f00000001c0), r1) (async)
sendmsg$auto_OVS_METER_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@OVS_METER_ATTR_KBPS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4080) (async)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4) (async)

1.699169665s ago: executing program 5 (id=709):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto(0x27, 0x0, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040)
openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x202200, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e3b725bd7005fddbdf1920000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0)
pread64$auto(r1, 0x0, 0x800003, 0x800000000000e2a)
socket(0x2c, 0x2, 0x6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create$auto(&(0x7f0000000080)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe3\x1eA\xbb`\x0f\'\'!<\x82\x885\xc7\xfc.\xbb\x18\x81\xef\x99\xc9\xa4\xe2\nB\xb04\x17C\xc4U*`\x80\xf6\xa0X\xca<\x1d\xa6[\xcfU\x17\'\x16\xd0\xd1.\xfb\x97\xd9Q<\xc0z?\x8bf%k:P\x86 \x8f\beH\xcb\x1dGp{', 0x5)

1.636185843s ago: executing program 4 (id=710):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x1f4, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})

1.513956942s ago: executing program 2 (id=711):
mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040)="11ce06d2b8", 0x40000100000001}, 0x6, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
writev$auto(0xe, 0x0, 0x3)
ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
ioctl$auto(r3, 0x5609, r4)
ioctl$auto_dma_heap_fops_dma_heap(r4, 0x4, &(0x7f00000000c0)="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")
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto(r1, 0x89f0, r1)
socket(0x2a, 0x80000, 0x800)

1.328302691s ago: executing program 4 (id=712):
socket(0x5, 0x1, 0x100)
pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x511200, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x201, 0x4000000a, 0xf, 0x8fd3, 0x7fff, 0x3, 0x6, 0x3, 0x3, 0x5, 0x80001ffd, 0x8, 0x1, 0x9, 0x1, 0xffdffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0xb, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x7, 0x5, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x81, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0)
mmap$auto(0xc, 0x400, 0x5, 0xeb1, 0x405, 0x4)
r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x40140, 0x0)
read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0xffffffffffffffff, 0x8, 0x0, 0xeb1, r0, 0x8000)
r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0)
pread64$auto(r3, 0x0, 0x20, 0x0)
msync$auto(0x6, 0x1800000000000fe, 0x40000004)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
ioctl$auto(r4, 0x5424, 0xffffffffffffffff)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
ioctl$auto(0x3, 0x2287, 0xffffffffffffffff)
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000240)={<r5=>r1, &(0x7f0000000340)="3818c3b693b64d66ceda49efab71eaa45b2ebd7b725af5fad4e1e709ab973ab9fa282b490ddf5cc8535ffe64bd1dc4f50a4e8c621c9a1c815af985ca7a39ea726d0feff12b6cc3e77c26383c73dcbcd0a664049f4ebc2a495310b0b6d7af823a00df79159c03ad8353c0c913993612d9e4ff4e60ad7a803c391de89938f42715f40346be0fab3b5a3942c7a8f9c816dc2c2cc7b92ab6cf67792f99cdcc5b82590d6ee4ecec0a856c34da089fd4d6fa26beba37664f62588c1273b23ffddb5944fa05369c8af276cde0f3dadb646b33774ea1dd4591ab77b9b788a6b7ffa0d408a3df0de88edf8ab31ba08fed854e475ebd0816df4994310f26bb8bbf0db168325b72eab8542bc68702cd580dade645355d4eb30861d9ae60b98afa3d9ede7a8f999f922cdb12c76c3422f0468bb02d4f282fc6a49e81a59e0ebdc7a5f9ee13367aabd0c314b53149af371dbb56d7e911c9a2a6e2c092b957720d0968d3306867068de7af905cf9a95c5f6387e6ffc74fb874a761c3aece2881c9ba61fc9ef769fb6be6d8fcd5198b9a6c792dbb083e99c43407f9984c5361a78f38a808cbd7ccc8279c53a8d81d30e9ea2c0c52662e8d9b07ebb0a09b63be319e8a175be82b63a2f61306e6ac65a407372e82a2324e8ef7209242b9fd3f1cffffc2068cea44dbc1cefdc6d9459177dd2d9ad9c4b9986fd50047d854b458b4da1b8e7ae1959430493b52da8c10ff5d01daf28a3418a1feab334b271e8a0e041d790320a2932d9899fe2082b61b8b2fa6e0f597f08316bd35f097cacc98ef4ebe06fcea2845b3d9a0569420beb1808634a6efb38af7f01db1734e7c3fcd0bd651028f81af457d22298d5839990ef98732bcfcb5d9bed4c395c4085a098656ce8b44690e1f21b8c277e4bdb44020772187802e777fc09402b787cd0373195673841f37f366a57baba8b42632665c33d087dfccab84c59c7d30cdc7ea0fd222714199a003bbd4a02f6c151d88b44d1eb67efab2234d6ec11062f056c08066e89ec1efd16677c94742923edfa2edf457795fc7a7bccfa3c770078988277ca8ad0ba676fb66354612a6ddb9ed34e3da218d8fe3bb6250dbbb53eb80a2a23ce59c12d1b31aef668d5c9c04e1d0d51a9557eef8f854678bd60b7b397644b12e2dd443b74c98f437c48bba9d43d826aa564c0aef4ef3823970a471e2b736ddb5f0c0a741c066fd64f2294c8f9c2ba2a706550ea4aa0f3c68f57adb70dc95b913476eb3122df99b93544e6e6328f0e46dd0f28bf07b8af5bf4d70e1f13d885c36e6be85df4f25276692f70fae874be1b8a46205aba2db8dca50b6454e4e96e6c51fb4a5dd9048a0dced2ca30b187c5846097c7ed0a4218703832359a31377e1368275a080395baec245d8bd7b49c953959af2830b3a1d8d6fb5630c77993777ee4056ff09986fb088a6709098a3dc30009ad897f5d3824dcc64d3aeaec86a8dcf4798532c19fb164b7c3f5e49fe86894ea289a4490036bc22b41c53bd972389d359b157eebaffe151d0b1cc49373d1df6bfa4b17151265cadd03461bae51b2ddb030b26267dc9d517cda1edac3491c3eeb44ec182344a9a1506f1d57fdac44a2db50a7387a7cab2d0958d13d9905f4bd59e76159407c4ea1eaa11835efbf3bc7c5d1fb192ed66b33a72261138855e470db76cf22ccf02b01f56afa982fc038aafc47bb4073b238ad34872e0d2a68830f4bea7e661d945225fb1b0c267147386df9dd707c23ab340a8bc459a3e61c8b801aea4fd20aeb0db6f57488f45484d3d6cec0d76a2432e8333eb610cc09dcb9ed42210dddfd544f4762423a05d608eec03220c1a3195d73e216d9340c4cc501edbeefe174dde3d49850d8ca24f9fbe07f037414b941b66ad866af6ae929c39117e2bd2111e9677ce841941b956d25ebac6a4ca4b286cb75ca3c076111aa819ff07fc909a0ae1e01ab1d3218c6d4ed7cda98ac71f759d23b12871a2f5b64fb0dee084a4036cdc0f5688db10c7891e428e79aae12e622cfbfcafaa64aec637219d13c8670f00866f9f23dee308c86e621338ce5eaeb392cc67a349a23f45ae9faa9005d21f5e17788b804d23e3bd67609b776372b9135b74d976ad2014eb58f8e157d129c8824d2f738e189e36d8c7bdfe9fc033834c46d6176d6666f617902a05e1cff2b9197ed0f9d4e930af5a578491bd88c8ee6e277620e1a3c72fb9d9b9d5f57fa0ddbe521cdac245c737543cad87a0518e7e50a98c008e5dcb07ec18f354a1e2ba4c86b1a8d662e9766d48c9142852d42adca98e46ff75f4a9da5d33025f549e3bbf1eaab984c0776f24da8436e9479f50bdb305f72c96f0316a8af4d82670322e111fac59456544c55f8cdad8833891dc92be6bbd61263aa85afec63b394d1d5c537f8888a9cce30b1f93e264fca01fef8d8dc95b876dc4cb903d593150c88690e1e2fd2ce16d941e221a0af9cd609b785ac729c948200d60fd731db3353aee7806c0d846938387317e0fde15753e7783bcb5e80069e5b429d6bc360ecbb60cb25f534ff6f56d1d10e9f31b1bdaca5d84faf43c09a34146ca0256e387794f656e2ac8b349d5d292662f432d609872cc8763177293c59707e005981df4af35444eae2d0185fc57d6ed105039555f40ae595d8fb534dbc2c4f5370b1468e84a63b109b1ed82bd249995063aeb1f068261b86c55f5e9dbf253b734f12aa311d745b69d9bf14e7d392392800a49fbc85db17ec32c8659e0af5cf357fcc6eb56ae0ba3fb28353a427a68f3ff2c5d8101dd186984bf37e42c6a43f425c8ade26bf931b9fa6f6de40c5a8e5039df1427dbdb8fa5067e06af5453108ad471cae8d952049ee436d67f512431d5ea1bb5ab2cdf1c1cda32bcd4f53de836f8b5307c293da586834225882347c9bdf2451f49469a14ba65f21fb7993f105c559893c6abdf9c7de2116cc789f16529876ab67fffdcc21e82863c8dc083f2a751873b0eb7699c940ab046e521de353eb8cc551b936f68c89bf50318f262becd04a07a3f372f336872db60ae08c5f274508f8fa5267012511f31270e6460ecc84fe0f3c01486223e77be72d0ab21b98a0c709eb2436265c4064728f1ddda042a7f99fd9d9caa17fd0574d55dbcc926ca3b2110ee3e2bd9e74d896f35af36234250322fbdd6a018d8872f79bca5a3da68ceaafe96290b49ee6d0067997afd8cf9db2eb73a970e0aa0c4b3d84c1599186f17af4a4e206b2e975c50f437a68ccc8cd4b157eff94a3b6f9b63bb66a1d84808cadb1a2c1d482d33134d9dacf5e8135afb4b777011cd2bf69d631e00242e5d32765f9160264758f7440bdab4e89652639da41decbaed54c8df5accd01148b471b6309cb04d2eed584af3b1b0cbd6080cfaeedb21d19f22c81bebecf9861073a8c11fbc550994b32d5caee404ef4f90f5ca341708f58bdf3d19d37bfde1f7c61b0b7c418b33e10d8655ea523767b301be2329644ee788b114f108cc2448b3c7147bb8ef5dde4b03758dbaa9b11f80bf5dd65089f839a1dce2983b0c2c5949cc2a7d3b51353f3759842e7c1855aef95a0e59f94d106e6fc2e78a5e4ee4d39e900d0324297f98488ccdcd4b0cb8fc728d6f6cdd9ba1fc2c0e29c0928b36b20e7fcbb9323259cc11b3c02fd348e7d0e4cd6ed077bd86264f0128a38131aa0783394c390f72524ba1723274a413735435b831a441486ab22be53c2d1b8a2cd91a6c3c7f53504acbd60a2ffb9b2ec10dfa7ead27e7acc5eef2b5709a707bd5f79594fa511a3822bce65a88ba3ba28538966cc84054e56734a611953ec8766df55579186080b416e5b7a961c356613b80d39e18a3478bf8f5cf7617379cd074159df2b98b7845f8bd50514c0af520bf870781ccb5f6f8268c11b37550ed68b27712f510ed65f5af694cf3fc14c04a718d45111b0b71fc66bc6275d143a04cc4766784667ef8ab9173d433c82eb24f2cbfd7c80fa601c1c62ab0469241a3a8c982223cc9917cccd9ccd5135bb32fc73a6dd550d0fee8f008f9e4ea3aefa88fed8bab4c9c19cf0ee7916f3d6e280a1baca7937c147af14a0960564137e54df0280d6ca4d0e1ef8f69d5e1c3428d225330b9a5a641eed64249940746a692b701cf9a560249884114c90e1c26c9be381d70bd0bef8f45c88a4aefe7ddf7ecd93bc7b495c9e328d1b50cae8d9d56a1197d5f0447b816bd7d6c6e04397f88bc8f2672833545554840f7d827e228c10ae84c9c4b1da9eda8669a1797df196c37f6eea6cffaaf42ec714b01bb403e102434f158010707bf44046eea3a49890cd08fbe2b6853611d984cfd2f48c9e8cabc96d8b4777826a78fe346931a24e824d1fbd798df86ec44c7955ea0122d25d34ceb55c74a428013191a75057aa9b8ac97c05c21843900ce0c4f1e2f3f526918b707fe3de6e6b9a69567df7d565356c8cc77eeef4a37a08038a470e352ec240f82f206ed9a9adc10ad7c918c95e40b83d41858053f38715f73212f0e5b47c77579db9fd2b468c4d3c146c73a190f44c94befe224f4f658289fb81ad6eb6119529cff4d8ffc6dc76d24703c683894c9cb712c4656797084376a0dc838450f697b24eb51346c02e26c3cf406e5cbdc53c33186bd4431e017fa07e08856fdf167d3a7da7c273d3cc3ef97d1d980a8cdd67dd89aa2e6ae7a1f6740f81b53a1e4ab4c6331cb3fff066c04642345f2ffbee11f678c0aed516931b120d4db04e36b71f219f1bb5e9f6153a23abfbcebb2c6a375c0b59dccd93f526e780ecadf516da6cc6de131e96795550c3f08b6da91b524adb804cc75a56a4c389e41f85351891c857a1ca3adc613464781fa6b9b93987f65b22abb8810d7636d8d7a555e61a840bfb29c53c6db90096f48632929f34582b71e08c82a7d0104dda2cf2d58a9567e6cd4669b8ab7700ad319eac27a2c2d98ff9f8c275afca13da85db4d9124afbd757edc45dfffc20b2720eac565c408bb5fb3225bbec8a6e4b6aad50be1402f2a611fc4ef67a4f206f5dc2912b783ddbe954ade3a230bd061fecc14dde880d4523779656f9a62d6691dce5ac67208d216c67dc8aa34e74445cb4445bfc6cd52780ec08b329560bfa57da18baec73e3fcd8a9e908988b594fa43f1486c1782bf0d6c7aab10e9fd4e1fe9773e7f90428db7a765c2b0c993dc8b2ed593c38fea47a80e04390b844edcb11dc1ce5d412783aaeed8051b48334b3570edcdf9a7dc8b86bcb5107f205cb91ea7d87027fd0081a54d77f0ebed700db5e15bf6693697c5c5d39bf1d45af1037a79a44824c84acff1e4be3c255e5c158f043778acd1467503c1bf1a57ac2f5d8b2eb25ee406ff7557eac6f45c99c376e7f25933ebbb1a408012ed6d2f86f544e420cb0758bd72446bcf101df72ea71a7490f15dd6716d9572d8553fa739e9d8474445cfeb6161dd71094a3dcad7317b29efbeaade5ac2ff69d91522ebe105157b098a94a41c74929ebb172c5f75a3623f45ebba110e9644bd08084652fd6c71c3e3c11ee066945016eaf624c98bc19f4493e908e3b9be9d328dea7276a0ba0a9cc16119e2f37bd859ae76d4e7e0aad1f7d32b1f7e9b77eea2cc8de3cb054e4875691ce99cb4d436c2e2c81eed4cc451dff638b52e2d13eaee7c1b8b0f8256c55e89d1d7541251fa00a163e8b92ea1a5d7046db3dd69d0ec884996786701cf8089f723de22561ade6b6ef46ac2e8a99594640657a4ca21737143149c20ca42c40dec789bd67aef726bf20369ffc7570592ce4dcdecd342ea2b390589c692a5b7c7a63fa", 0xccc, &(0x7f0000001440)="557040da2dd2f936100012f42efd5901dba993c924ada7400a2538e5f2d0b6ea1b497f9dc25e19bd571ebd5c63d29de9685e43baef3be7006940467ba680b7efe6194ec54e9f7d632695ecdde7080089ef7613af697904055cf2c61babd02febf7afc9bd563a05684b76df50fc5d11720e0b045f2272a39a96a58a0405f996ec9d6acdb4253d0639d82f9daf2e6928b06eeceb4165fcc0e76ece48", 0x0, &(0x7f0000001340)="09a388c66a179012f63d1933d8de8f8da8ad43b4724b85560aadb92443edc54a35ed1f4341d95674e6a09f804da7f6cf7fb62c3a8c2bb0504ed8bcb505eb1c09a4d050177c51d85fee1918b207f638b2fa1b84d6ce43e54a54bc6c0f9340079a0c808a569d2e1d27e30b55607e3d7c4e0dad17f3716728627a344ded9752ad822b824cc0f2edc7ecbfe4808e47738d3d4b49f3c552c03aa5085590a09d43239d131813efb8eb62f2ae2e3913c9a2ae7c7098c1a973d37440828a76e13cc67353b2eec5b6969457", &(0x7f0000000200)=0x2})
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/pcmC1D0p\x00', 0x8a00, 0x0)
mmap$auto(0x3, 0x400008, 0x202, 0x100000000002011, r5, 0x8000)
r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x40e440, 0x0)
write$auto_proc_mem_operations_base(r6, &(0x7f0000001680)="a7", 0x80000)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, 0x0, 0x4004000)
mmap$auto(0xfffffffffffffffd, 0x400008, 0xd6, 0x9b72, 0x2, 0x8000)

238.319969ms ago: executing program 5 (id=713):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a1842, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), r1)
write$auto(r0, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4)
set_tid_address$auto(&(0x7f00000004c0)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), 0xffffffffffffffff)
sendmmsg$auto(r3, &(0x7f0000000480)={{&(0x7f0000000240)="e84658d9caeb0ba06c88fa7f1cf6e4660b6d416ed0e228cf7c66187f740a42c643724c852358b4bcc0e84a362f86b5af9cf3ece5d0b5c940f1f4ebba7a7c74a1f9ba87a2fad3d47804059c75197bb94523f89ee2cbb10a15ac011dd81ad30e035b25a78bd4b265290dc41d8ccc6f8a0e0962346b874e1f7d1849887a9081faa5f183db79682d", 0x5, &(0x7f00000003c0)={&(0x7f0000000300)="67264444ddc715adcfb545eff9fab60866c91aedceadc587b3d610c549ccd19e3a6e89234a17929abcf10b741b9d8df82badcf60c41333e62e31fa58f06efc06c451fd88061ede81b64776c013ed818503e9b70a5a1e00a2d965e5f917dc8392a3403fed4b1362d7a695fa218749745cf48c9c883840256810e6cc554393a337d3e0ba16baf7f1f900e4d7c998", 0xca3}, 0x9, &(0x7f0000000400)="bf4847d4f2eed0e20ee4d6c660b46674275cf4f9749a6136b3563aba573db5b1d0c103c664291fa11a0b872c1c758d994e62ba16b91773491586cc34aca9f777e5a788635c8d9bd1399602583ecfc1dc2949e29e", 0xfffffffffffff5dc, 0xfffffb1d}, 0x3c31517d}, 0xffffffff, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r5, 0x4b66, 0x1)
sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000001a80)={0x40, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, "7cc94cdc0e692184223731c162994248da730bbd648b63002aba23b825461539b678d760f59a"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20040054)
sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8a, 0xcd, "3a4b9edf7d19f3fbe81933d90ed9b5f3e7a57ac4c63cdf9571931057cab80b311cab5a383eca924fd86f22d1166d81e145d88fab1cafcc158578dffbe89d0de8b32f5fe3efa7366741f2d052f83e83d597f2bb308e1b07e1727a92283c0226c0bd189c582e2e52cb36bc2cc7c9c1b66545a59b27c6e92c7c9779bd07c0ac87984a3cb17c36bf"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20080080)

238.073886ms ago: executing program 2 (id=714):
unshare$auto(0x40000080)
close_range$auto(0x2, 0xfffffffffffff000, 0x2)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4)
flock$auto(r0, 0x1)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40)
flock$auto(r1, 0x2)
r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x1, 0x100)
setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b)
r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000003c0)="80e08ca631b90e5e9a4997a0a2f075172c2529fea5d2b4b06119e7cc493e3c68f5e114fe74f6ec1d4e94daec10b05cb281b0922bcba475cea32ccf0eda11471e9c15d15fbcc3bebe4bc005053b7459c5ecbae956634304a2b3c20d024a0df7b468626e493968743cc5ed35ab320b6ffd85d87720f947e83e96c03fca21e0c585095bf40d010cd4fba6c371232889fd43cb084df47b56ff93efb0f707d371175d4dcd1c13802f7a4550e4ef765842dadd3e2bc2df160655b78b5a9438f2f8be466e2b3782469b16c9310ff6307403770f5c225820d582ab93c7ca472e799fe10d61abbfc87ea3846f44cb04eef9ed7c16b2483588")
open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x10)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/suspend_stats/last_failed_dev\x00', 0x2000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000001c0)=""/229, 0xe5)
mmap$auto(0x450cecf1, 0x9, 0x3, 0xeb2, r1, 0x7ffe)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0)
sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)={0x880, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0xb}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0xfa}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x850, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x841, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3ff}]}, @NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x880}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008000)
setregid$auto(0x0, 0x3)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=715):
mmap$auto(0x3, 0x3, 0x1c0, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x880080, 0x0)
bpf$auto(0x40000e, &(0x7f00000002c0)=@bpf_attr_4={0x2, <r1=>r0, 0x1, r0}, 0x5)
read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
open(0x0, 0x222ac2, 0x5d745cb200ae4d73)
preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000)
r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/oom_adj\x00', 0x4000, 0x0)
read$auto(r2, 0x0, 0x1f40)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0)
mmap$auto(0x0, 0x4, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8002008000)
read$auto(r3, 0x0, 0xf30)
timer_delete$auto(0x3a3)
write$auto(0x3, 0x0, 0xffd8)
writev$auto(0xffffffffffffffff, 0x0, 0x3)
r4 = gettid()
r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/7u\x00', 0x28000, 0x0)
read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0)
kill$auto(r4, 0x11)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x2)
socket(0x6, 0x5, 0x4)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts.
[   91.372670][ T5818] cgroup: Unknown subsys name 'net'
[   91.550579][ T5818] cgroup: Unknown subsys name 'cpuset'
[   91.560303][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   93.549420][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   95.728376][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.737760][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.745496][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.754677][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.763086][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.784957][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.792351][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.800189][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.807857][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.817181][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.824810][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.867540][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.875436][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.896330][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.904479][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.915093][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.922401][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.930622][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.942450][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.952139][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.526919][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   96.552104][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   96.723831][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   96.810449][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   96.892838][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.900992][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.909104][ T5828] bridge_slave_0: entered allmulticast mode
[   96.916957][ T5828] bridge_slave_0: entered promiscuous mode
[   96.925354][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.932568][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.942649][ T5841] bridge_slave_0: entered allmulticast mode
[   96.950230][ T5841] bridge_slave_0: entered promiscuous mode
[   96.969208][  T124] cfg80211: failed to load regulatory.db
[   97.010119][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.017854][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.025086][ T5828] bridge_slave_1: entered allmulticast mode
[   97.032820][ T5828] bridge_slave_1: entered promiscuous mode
[   97.042130][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.049805][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.057141][ T5841] bridge_slave_1: entered allmulticast mode
[   97.064415][ T5841] bridge_slave_1: entered promiscuous mode
[   97.181057][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.194890][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.207767][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.221109][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.253040][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.260506][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.268253][ T5835] bridge_slave_0: entered allmulticast mode
[   97.275553][ T5835] bridge_slave_0: entered promiscuous mode
[   97.326607][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.333817][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.341790][ T5835] bridge_slave_1: entered allmulticast mode
[   97.350941][ T5835] bridge_slave_1: entered promiscuous mode
[   97.388258][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.395434][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.403046][ T5832] bridge_slave_0: entered allmulticast mode
[   97.410465][ T5832] bridge_slave_0: entered promiscuous mode
[   97.455063][ T5828] team0: Port device team_slave_0 added
[   97.464611][ T5841] team0: Port device team_slave_0 added
[   97.471174][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.478784][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.485969][ T5832] bridge_slave_1: entered allmulticast mode
[   97.493643][ T5832] bridge_slave_1: entered promiscuous mode
[   97.518872][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.533179][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.544586][ T5828] team0: Port device team_slave_1 added
[   97.566656][ T5841] team0: Port device team_slave_1 added
[   97.648345][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.662280][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.674743][ T5835] team0: Port device team_slave_0 added
[   97.684644][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.692125][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.719392][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.761758][ T5835] team0: Port device team_slave_1 added
[   97.776045][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.783377][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.810030][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.822262][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.829490][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.855593][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.868647][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.875644][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.901719][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.926698][ T5837] Bluetooth: hci1: command tx timeout
[   97.926722][ T5839] Bluetooth: hci0: command tx timeout
[   97.932777][ T5832] team0: Port device team_slave_0 added
[   97.973601][ T5832] team0: Port device team_slave_1 added
[   97.994702][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.001749][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.010662][ T5837] Bluetooth: hci3: command tx timeout
[   98.027779][ T5839] Bluetooth: hci2: command tx timeout
[   98.030111][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.052013][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.059316][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.085670][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.128795][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.135786][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.161931][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.211740][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.218988][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.245571][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.304047][ T5828] hsr_slave_0: entered promiscuous mode
[   98.311224][ T5828] hsr_slave_1: entered promiscuous mode
[   98.324562][ T5841] hsr_slave_0: entered promiscuous mode
[   98.331173][ T5841] hsr_slave_1: entered promiscuous mode
[   98.337609][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.345344][ T5841] Cannot create hsr debugfs directory
[   98.463183][ T5835] hsr_slave_0: entered promiscuous mode
[   98.469951][ T5835] hsr_slave_1: entered promiscuous mode
[   98.476046][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.484168][ T5835] Cannot create hsr debugfs directory
[   98.512168][ T5832] hsr_slave_0: entered promiscuous mode
[   98.519117][ T5832] hsr_slave_1: entered promiscuous mode
[   98.525308][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.532980][ T5832] Cannot create hsr debugfs directory
[   99.041469][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   99.058768][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.072451][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   99.088149][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.162764][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   99.180189][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   99.205100][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   99.231242][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   99.314467][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   99.337340][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   99.371384][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   99.384678][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.464680][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.487669][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.499601][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.523752][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.560170][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.621693][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   99.662926][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.670255][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.701408][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.708945][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.722229][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.819698][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   99.885632][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.892876][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.903086][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.910294][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.968701][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.004139][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.012552][ T5837] Bluetooth: hci0: command tx timeout
[  100.012564][ T5839] Bluetooth: hci1: command tx timeout
[  100.048184][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[  100.087080][ T5837] Bluetooth: hci2: command tx timeout
[  100.088448][ T5839] Bluetooth: hci3: command tx timeout
[  100.108305][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  100.119225][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.135668][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.142912][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.192679][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[  100.205603][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.212851][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.254795][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.262039][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.302498][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.310210][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.578346][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.632780][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.777928][ T5841] veth0_vlan: entered promiscuous mode
[  100.849740][ T5828] veth0_vlan: entered promiscuous mode
[  100.858607][ T5841] veth1_vlan: entered promiscuous mode
[  100.912696][ T5828] veth1_vlan: entered promiscuous mode
[  100.974609][ T5841] veth0_macvtap: entered promiscuous mode
[  101.010320][ T5841] veth1_macvtap: entered promiscuous mode
[  101.063200][ T5828] veth0_macvtap: entered promiscuous mode
[  101.075574][ T5828] veth1_macvtap: entered promiscuous mode
[  101.119301][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.142325][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.162448][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.183725][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.201561][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.218107][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.230282][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.239549][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.248656][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.261856][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.271208][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.280114][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.288970][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.303823][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.522315][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.539958][ T5835] veth0_vlan: entered promiscuous mode
[  101.554001][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.581399][  T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.584419][ T5832] veth0_vlan: entered promiscuous mode
[  101.605613][  T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.645053][ T5835] veth1_vlan: entered promiscuous mode
[  101.684958][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.695402][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.739417][ T5832] veth1_vlan: entered promiscuous mode
[  101.762068][  T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.783236][  T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.815347][ T5835] veth0_macvtap: entered promiscuous mode
[  101.845063][ T5835] veth1_macvtap: entered promiscuous mode
[  101.875902][ T5832] veth0_macvtap: entered promiscuous mode
[  101.878776][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  101.964041][ T5832] veth1_macvtap: entered promiscuous mode
[  101.991498][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.059897][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.086605][ T5839] Bluetooth: hci1: command tx timeout
[  102.087438][ T5837] Bluetooth: hci0: command tx timeout
[  102.128363][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.141619][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.163802][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.172867][ T5837] Bluetooth: hci3: command tx timeout
[  102.178884][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.180647][ T5837] Bluetooth: hci2: command tx timeout
[  102.297220][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.375456][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.452398][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.466301][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.482002][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.495250][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.709845][  T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.741594][  T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.924699][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.006675][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.250513][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.278214][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.484425][  T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.515207][  T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.544998][ T5915] process 'syz.0.6' launched './file0' with NULL argv: empty string added
[  104.166316][ T5837] Bluetooth: hci1: command tx timeout
[  104.176836][ T5837] Bluetooth: hci0: command tx timeout
[  104.247700][ T5837] Bluetooth: hci2: command tx timeout
[  104.253235][ T5837] Bluetooth: hci3: command tx timeout
[  104.886431][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.894789][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.904421][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  104.913858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.922285][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  105.026537][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.075036][ T5936] =======================================================
[  105.075036][ T5936] WARNING: The mand mount option has been deprecated and
[  105.075036][ T5936]          and is ignored by this kernel. Remove the mand
[  105.075036][ T5936]          option from the mount to silence this warning.
[  105.075036][ T5936] =======================================================
[  105.110013][    C0] vkms_vblank_simulate: vblank timer overrun
[  105.421023][ T5925] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  105.447208][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  105.486865][ T5925] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  105.550446][ T5925] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  105.615277][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  105.625744][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.756139][ T5925] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  105.766832][ T5925] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  105.816593][ T5925] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  105.916168][ T5925] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  105.932207][ T5925] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  105.971357][ T5925] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  106.013901][ T5925] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  106.040164][ T5925] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  106.096105][ T5925] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  106.407604][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  107.126738][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  107.381211][ T5948] syz.3.10 (5948) used greatest stack depth: 19912 bytes left
[  107.771956][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  107.927919][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  108.086357][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  108.486521][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  108.766523][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[  108.843726][ T5962] HfR: entered promiscuous mode
[  108.901653][ T5963] HfR: left promiscuous mode
[  108.974175][ T5965] ubi0: attaching mtd0
[  109.005308][ T5962] HfR: entered promiscuous mode
[  109.042738][ T5950] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  109.049487][ T5965] ubi0: scanning is finished
[  109.066180][ T5965] ubi0: empty MTD device detected
[  109.110422][ T5965] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  109.268158][ T5965] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  109.846587][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  110.006506][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.176233][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.566650][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout

syzkaller
syzkaller login: [  111.942283][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  112.090950][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  112.121954][ T6000] Zero length message leads to an empty skb
[  112.246190][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  112.321037][ T5988] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  113.327299][ T6016] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  113.439768][ T6001] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  113.948014][ T5839] Bluetooth: hci2: Unable to find connection for big 0xd2
[  114.032586][ T6024] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  114.284859][ T6009] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  114.484575][ T6031] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  114.520620][ T6019] random: crng reseeded on system resumption
[  115.402553][ T6035] FAULT_INJECTION: forcing a failure.
[  115.402553][ T6035] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  115.450245][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.0.30 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  115.450292][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  115.450315][ T6035] Call Trace:
[  115.450326][ T6035]  <TASK>
[  115.450342][ T6035]  dump_stack_lvl+0x16c/0x1f0
[  115.450413][ T6035]  should_fail_ex+0x512/0x640
[  115.450468][ T6035]  should_fail_alloc_page+0xe7/0x130
[  115.450521][ T6035]  prepare_alloc_pages+0x3c2/0x610
[  115.450574][ T6035]  ? rcu_is_watching+0x12/0xc0
[  115.450610][ T6035]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[  115.450652][ T6035]  ? kasan_save_stack+0x33/0x60
[  115.450693][ T6035]  ? cgroup_rstat_updated+0x2a/0xb20
[  115.450755][ T6035]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  115.450803][ T6035]  ? lru_gen_add_folio+0x1a4/0xef0
[  115.450849][ T6035]  ? __lock_acquire+0x5ca/0x1ba0
[  115.450892][ T6035]  ? __lock_acquire+0x5ca/0x1ba0
[  115.450932][ T6035]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  115.450978][ T6035]  ? policy_nodemask+0xea/0x4e0
[  115.451021][ T6035]  alloc_pages_mpol+0x1fb/0x550
[  115.451062][ T6035]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  115.451102][ T6035]  ? __lock_acquire+0x5ca/0x1ba0
[  115.451147][ T6035]  folio_alloc_mpol_noprof+0x36/0x2f0
[  115.451196][ T6035]  vma_alloc_folio_noprof+0xed/0x1e0
[  115.451245][ T6035]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  115.451307][ T6035]  do_pte_missing+0x223d/0x3fb0
[  115.451355][ T6035]  __handle_mm_fault+0x103d/0x2a40
[  115.451402][ T6035]  ? __pfx___handle_mm_fault+0x10/0x10
[  115.451435][ T6035]  ? __pte_offset_map_lock+0x155/0x2f0
[  115.451488][ T6035]  ? find_held_lock+0x2b/0x80
[  115.451517][ T6035]  ? find_held_lock+0x2b/0x80
[  115.451576][ T6035]  handle_mm_fault+0x3fe/0xad0
[  115.451618][ T6035]  __get_user_pages+0x771/0x36f0
[  115.451679][ T6035]  ? __pfx_mt_find+0x10/0x10
[  115.451710][ T6035]  ? __pfx___get_user_pages+0x10/0x10
[  115.451778][ T6035]  populate_vma_page_range+0x278/0x3a0
[  115.451814][ T6035]  ? __pfx_populate_vma_page_range+0x10/0x10
[  115.451846][ T6035]  ? __pfx_find_vma_intersection+0x10/0x10
[  115.451899][ T6035]  ? do_mmap+0x69c/0x11b0
[  115.451951][ T6035]  __mm_populate+0x1d8/0x380
[  115.451985][ T6035]  ? __pfx___mm_populate+0x10/0x10
[  115.452025][ T6035]  ? up_write+0x1b2/0x520
[  115.452077][ T6035]  vm_mmap_pgoff+0x362/0x450
[  115.452129][ T6035]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  115.452184][ T6035]  ? __x64_sys_futex+0x1e0/0x4c0
[  115.452220][ T6035]  ? __x64_sys_futex+0x1e9/0x4c0
[  115.452261][ T6035]  ksys_mmap_pgoff+0x7d/0x5c0
[  115.452309][ T6035]  ? rcu_is_watching+0x12/0xc0
[  115.452344][ T6035]  __x64_sys_mmap+0x125/0x190
[  115.452381][ T6035]  do_syscall_64+0xcd/0x230
[  115.452434][ T6035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.452466][ T6035] RIP: 0033:0x7f82b878e969
[  115.452500][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.452531][ T6035] RSP: 002b:00007f82b9632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  115.452561][ T6035] RAX: ffffffffffffffda RBX: 00007f82b89b5fa0 RCX: 00007f82b878e969
[  115.452583][ T6035] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  115.452602][ T6035] RBP: 00007f82b8810ab1 R08: 0000000000000002 R09: 0000000000008000
[  115.452622][ T6035] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  115.452642][ T6035] R13: 0000000000000000 R14: 00007f82b89b5fa0 R15: 00007ffcd2043cd8
[  115.452684][ T6035]  </TASK>
[  115.939738][ T6038] netlink: 186 bytes leftover after parsing attributes in process `syz.0.30'.
[  116.796881][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'.
[  116.849864][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'.
[  116.865826][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.962862][ T6051] bridge_slave_1 (unregistering): left allmulticast mode
[  116.989346][ T6051] bridge_slave_1 (unregistering): left promiscuous mode
[  117.018703][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.111938][ T6046] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  117.183578][ T6058] mmap: syz.3.35 (6058) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  117.250465][ T6060] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET)
[  117.292349][ T6057] bond0: (slave bond_slave_1): Releasing backup interface
[  117.723773][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'.
[  118.004567][ T6076] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6
[  118.319866][ T6078] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7
[  119.174920][ T6062] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  121.231090][ T6104] Process accounting resumed
[  122.973085][ T6136] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  123.950389][ T6150] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  123.986430][ T6150] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  124.009798][ T6150] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  124.064086][ T6150] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  124.500138][ T6142] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  125.606051][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  125.688528][ T6158] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  125.875581][ T5839] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  126.006095][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  126.086059][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  126.093044][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  126.476950][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.64'.
[  126.502839][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.661713][ T6182] bridge_slave_1 (unregistering): left allmulticast mode
[  126.669026][ T6182] bridge_slave_1 (unregistering): left promiscuous mode
[  126.677306][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.649077][ T6214] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  131.672563][ T6214] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  131.695495][ T6214] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  131.742621][ T6214] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  131.764277][ T6214] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  133.526200][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  133.696082][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  133.766148][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  133.772245][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  135.766139][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  137.801859][ T6275] FAULT_INJECTION: forcing a failure.
[  137.801859][ T6275] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  137.808154][ T6276] FAULT_INJECTION: forcing a failure.
[  137.808154][ T6276] name failslab, interval 1, probability 0, space 0, times 1
[  137.824027][ T6275] CPU: 0 UID: 0 PID: 6275 Comm: syz.3.85 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  137.824078][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  137.824099][ T6275] Call Trace:
[  137.824111][ T6275]  <TASK>
[  137.824125][ T6275]  dump_stack_lvl+0x16c/0x1f0
[  137.824184][ T6275]  should_fail_ex+0x512/0x640
[  137.824244][ T6275]  should_fail_alloc_page+0xe7/0x130
[  137.824293][ T6275]  prepare_alloc_pages+0x3c2/0x610
[  137.824356][ T6275]  __alloc_frozen_pages_noprof+0x18f/0x23a0
[  137.824404][ T6275]  ? psi_task_switch+0x2c1/0x8e0
[  137.824450][ T6275]  ? lock_acquire+0x179/0x350
[  137.824496][ T6275]  ? find_held_lock+0x2b/0x80
[  137.824532][ T6275]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  137.824579][ T6275]  ? finish_task_switch.isra.0+0x221/0xc10
[  137.824615][ T6275]  ? lockdep_hardirqs_on+0x7c/0x110
[  137.824666][ T6275]  ? finish_task_switch.isra.0+0x221/0xc10
[  137.824708][ T6275]  ? trace_sched_exit_tp+0xde/0x130
[  137.824752][ T6275]  ? __schedule+0x1186/0x5de0
[  137.824803][ T6275]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  137.824855][ T6275]  ? policy_nodemask+0xea/0x4e0
[  137.824910][ T6275]  alloc_pages_mpol+0x1fb/0x550
[  137.824957][ T6275]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  137.825006][ T6275]  ? aa_label_sk_perm+0x19b/0x5a0
[  137.825056][ T6275]  folio_alloc_mpol_noprof+0x36/0x2f0
[  137.825114][ T6275]  vma_alloc_folio_noprof+0xed/0x1e0
[  137.825167][ T6275]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  137.825217][ T6275]  ? find_held_lock+0x2b/0x80
[  137.825251][ T6275]  ? do_wp_page+0x229a/0x58e0
[  137.825310][ T6275]  do_wp_page+0x209a/0x58e0
[  137.825377][ T6275]  ? __pfx_do_wp_page+0x10/0x10
[  137.825435][ T6275]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  137.825487][ T6275]  ? ___pte_offset_map+0x1bc/0x540
[  137.825563][ T6275]  __handle_mm_fault+0x1ada/0x2a40
[  137.825615][ T6275]  ? __pfx___handle_mm_fault+0x10/0x10
[  137.825648][ T6275]  ? lock_vma_under_rcu+0x47d/0x970
[  137.825703][ T6275]  ? lock_vma_under_rcu+0x47d/0x970
[  137.825797][ T6275]  handle_mm_fault+0x3fe/0xad0
[  137.825842][ T6275]  do_user_addr_fault+0x60c/0x1370
[  137.825898][ T6275]  exc_page_fault+0x5c/0xc0
[  137.825948][ T6275]  asm_exc_page_fault+0x26/0x30
[  137.825983][ T6275] RIP: 0033:0x7fc3e2f48495
[  137.826010][ T6275] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b
[  137.826051][ T6275] RSP: 002b:00007fc3e3e34de0 EFLAGS: 00010293
[  137.826080][ T6275] RAX: 0000000000000008 RBX: 00007fc3e3ce7d60 RCX: 0000000000000000
[  137.826102][ T6275] RDX: 0000000000000000 RSI: 00007fc3e304e404 RDI: 00007fc3e3ce7d60
[  137.826123][ T6275] RBP: 00007fc3e3e34f00 R08: 0000000000000000 R09: 0000000000000005
[  137.826145][ T6275] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fc3e304db00
[  137.826167][ T6275] R13: 000000000000005f R14: 00007fc3e3183440 R15: 0000000000000000
[  137.826212][ T6275]  </TASK>
[  137.826580][ T6275] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  137.972206][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.136165][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.2.86 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  138.136208][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  138.136226][ T6276] Call Trace:
[  138.136236][ T6276]  <TASK>
[  138.136248][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.136248][ T6276]  dump_stack_lvl+0x16c/0x1f0
[  138.136304][ T6276]  should_fail_ex+0x512/0x640
[  138.136364][ T6276]  should_failslab+0xc2/0x120
[  138.136413][ T6276]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  138.136456][ T6276]  ? skb_clone+0x190/0x3f0
[  138.136507][ T6276]  skb_clone+0x190/0x3f0
[  138.136552][ T6276]  netlink_deliver_tap+0xabd/0xd30
[  138.136608][ T6276]  netlink_unicast+0x5df/0x7f0
[  138.136670][ T6276]  ? __pfx_netlink_unicast+0x10/0x10
[  138.136713][ T6276]  ? __lock_acquire+0xaa4/0x1ba0
[  138.136772][ T6276]  netlink_sendmsg+0x8d1/0xdd0
[  138.136825][ T6276]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.136918][ T6276]  ____sys_sendmsg+0xa98/0xc70
[  138.136975][ T6276]  ? copy_msghdr_from_user+0x10a/0x160
[  138.137019][ T6276]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.137080][ T6276]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  138.137143][ T6276]  ___sys_sendmsg+0x134/0x1d0
[  138.137189][ T6276]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.137290][ T6276]  __sys_sendmsg+0x16d/0x220
[  138.137333][ T6276]  ? __pfx___sys_sendmsg+0x10/0x10
[  138.137376][ T6276]  ? __x64_sys_futex+0x1e0/0x4c0
[  138.137427][ T6276]  ? rcu_is_watching+0x12/0xc0
[  138.137473][ T6276]  do_syscall_64+0xcd/0x230
[  138.137531][ T6276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.137566][ T6276] RIP: 0033:0x7f662e38e969
[  138.137594][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.137626][ T6276] RSP: 002b:00007f662f25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.137660][ T6276] RAX: ffffffffffffffda RBX: 00007f662e5b5fa0 RCX: 00007f662e38e969
[  138.137684][ T6276] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000008
[  138.137705][ T6276] RBP: 00007f662e410ab1 R08: 0000000000000000 R09: 0000000000000000
[  138.137727][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.137748][ T6276] R13: 0000000000000000 R14: 00007f662e5b5fa0 R15: 00007ffc5cd351a8
[  138.137795][ T6276]  </TASK>
[  138.667932][ T6276] netlink: 186 bytes leftover after parsing attributes in process `syz.2.86'.
[  138.762090][ T6275] netlink: 186 bytes leftover after parsing attributes in process `syz.3.85'.
[  140.781403][ T6294] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  140.787897][ T6294] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  140.793952][ T6294] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  140.806516][ T6294] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  142.006061][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  142.816244][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  142.822451][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.886164][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  145.412834][ T6388] openvswitch: netlink: Key type 29 is not supported
[  145.558209][ T6391] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  148.285756][ T6398] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  149.506323][ T6453] zswap: compressor  not available
[  149.513114][ T6455] Setting dangerous option i915.mitigations - tainting kernel
[  149.612271][ T5837] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  152.033970][ T6484] netlink: 206 bytes leftover after parsing attributes in process `syz.3.134'.
[  152.627169][ T6490] netlink: 206 bytes leftover after parsing attributes in process `syz.3.134'.
[  152.870274][ T6494] Process accounting paused
[  154.625118][ T6497] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  158.590399][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[  158.741433][ T6546] FAULT_INJECTION: forcing a failure.
[  158.741433][ T6546] name failslab, interval 1, probability 0, space 0, times 0
[  158.859235][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.1.145 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  158.859289][ T6546] Tainted: [U]=USER
[  158.859300][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  158.859318][ T6546] Call Trace:
[  158.859329][ T6546]  <TASK>
[  158.859340][ T6546]  dump_stack_lvl+0x16c/0x1f0
[  158.859394][ T6546]  should_fail_ex+0x512/0x640
[  158.859442][ T6546]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  158.859479][ T6546]  should_failslab+0xc2/0x120
[  158.859521][ T6546]  __kmalloc_cache_noprof+0x6a/0x3e0
[  158.859553][ T6546]  ? snd_ctl_get_preferred_subdevice+0x16c/0x1f0
[  158.859588][ T6546]  ? snd_pcm_attach_substream+0x441/0xd60
[  158.859632][ T6546]  snd_pcm_attach_substream+0x441/0xd60
[  158.859679][ T6546]  snd_pcm_open_substream+0x8d/0x17f0
[  158.859718][ T6546]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  158.859765][ T6546]  snd_pcm_oss_open+0x735/0x1400
[  158.859832][ T6546]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  158.859883][ T6546]  ? __lock_acquire+0xaa4/0x1ba0
[  158.859927][ T6546]  ? __pfx_default_wake_function+0x10/0x10
[  158.859962][ T6546]  ? __lock_acquire+0xaa4/0x1ba0
[  158.860015][ T6546]  ? do_raw_spin_lock+0x12c/0x2b0
[  158.860069][ T6546]  ? soundcore_open+0x35a/0x580
[  158.860112][ T6546]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  158.860215][ T6546]  soundcore_open+0x409/0x580
[  158.860262][ T6546]  ? __pfx_soundcore_open+0x10/0x10
[  158.860305][ T6546]  chrdev_open+0x231/0x6a0
[  158.860341][ T6546]  ? __pfx_apparmor_file_open+0x10/0x10
[  158.860386][ T6546]  ? __pfx_chrdev_open+0x10/0x10
[  158.860426][ T6546]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  158.860486][ T6546]  do_dentry_open+0x741/0x1c10
[  158.860521][ T6546]  ? __pfx_chrdev_open+0x10/0x10
[  158.860565][ T6546]  vfs_open+0x82/0x3f0
[  158.860615][ T6546]  path_openat+0x1e5e/0x2d40
[  158.860663][ T6546]  ? __pfx_path_openat+0x10/0x10
[  158.860707][ T6546]  do_filp_open+0x20b/0x470
[  158.860741][ T6546]  ? __pfx_do_filp_open+0x10/0x10
[  158.860804][ T6546]  ? alloc_fd+0x471/0x7d0
[  158.860846][ T6546]  do_sys_openat2+0x11b/0x1d0
[  158.860890][ T6546]  ? __pfx_do_sys_openat2+0x10/0x10
[  158.860937][ T6546]  ? __sys_sendmsg+0x199/0x220
[  158.860986][ T6546]  __x64_sys_openat+0x174/0x210
[  158.861032][ T6546]  ? __pfx___x64_sys_openat+0x10/0x10
[  158.861080][ T6546]  ? rcu_is_watching+0x12/0xc0
[  158.861122][ T6546]  do_syscall_64+0xcd/0x230
[  158.861186][ T6546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.861220][ T6546] RIP: 0033:0x7f5695b8e969
[  158.861246][ T6546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.861277][ T6546] RSP: 002b:00007f56969c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  158.861308][ T6546] RAX: ffffffffffffffda RBX: 00007f5695db6080 RCX: 00007f5695b8e969
[  158.861341][ T6546] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  158.861360][ T6546] RBP: 00007f5695c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  158.861380][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.861397][ T6546] R13: 0000000000000000 R14: 00007f5695db6080 R15: 00007ffde55f2be8
[  158.861439][ T6546]  </TASK>
[  160.440723][ T6565] FAULT_INJECTION: forcing a failure.
[  160.440723][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  160.491892][ T6565] CPU: 0 UID: 0 PID: 6565 Comm: syz.2.151 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  160.491946][ T6565] Tainted: [U]=USER
[  160.491957][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  160.491976][ T6565] Call Trace:
[  160.491986][ T6565]  <TASK>
[  160.491997][ T6565]  dump_stack_lvl+0x16c/0x1f0
[  160.492060][ T6565]  should_fail_ex+0x512/0x640
[  160.492107][ T6565]  _copy_from_user+0x2e/0xd0
[  160.492145][ T6565]  copy_msghdr_from_user+0x98/0x160
[  160.492174][ T6565]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  160.492208][ T6565]  ? __lock_acquire+0x5ca/0x1ba0
[  160.492243][ T6565]  ___sys_recvmsg+0xdb/0x1a0
[  160.492271][ T6565]  ? __pfx____sys_recvmsg+0x10/0x10
[  160.492302][ T6565]  ? find_held_lock+0x2b/0x80
[  160.492341][ T6565]  do_recvmmsg+0x2fe/0x740
[  160.492372][ T6565]  ? __pfx_do_recvmmsg+0x10/0x10
[  160.492398][ T6565]  ? fd_install+0x225/0x750
[  160.492416][ T6565]  ? putname+0x154/0x1a0
[  160.492448][ T6565]  ? do_futex+0x122/0x350
[  160.492483][ T6565]  ? __x64_sys_futex+0x1e0/0x4c0
[  160.492511][ T6565]  __x64_sys_recvmmsg+0x22a/0x280
[  160.492542][ T6565]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  160.492570][ T6565]  ? rcu_is_watching+0x12/0xc0
[  160.492605][ T6565]  do_syscall_64+0xcd/0x230
[  160.492652][ T6565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.492676][ T6565] RIP: 0033:0x7f662e38e969
[  160.492694][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.492716][ T6565] RSP: 002b:00007f662f25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  160.492738][ T6565] RAX: ffffffffffffffda RBX: 00007f662e5b5fa0 RCX: 00007f662e38e969
[  160.492755][ T6565] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003
[  160.492768][ T6565] RBP: 00007f662e410ab1 R08: 0000000000000000 R09: 0000000000000000
[  160.492782][ T6565] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  160.492795][ T6565] R13: 0000000000000000 R14: 00007f662e5b5fa0 R15: 00007ffc5cd351a8
[  160.492823][ T6565]  </TASK>
[  161.189359][ T6561] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  163.061002][ T6554] ima: policy update failed
[  163.125970][   T30] audit: type=1802 audit(4294969389.014:2): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.148" res=0 errno=0
[  166.837258][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[  167.094449][ T6634] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  167.206312][ T6664] zswap: compressor  not available
[  167.296196][ T6667] Setting dangerous option i915.mitigations - tainting kernel
[  169.774129][ T6707] FAULT_INJECTION: forcing a failure.
[  169.774129][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.812578][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.1.180 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  169.812626][ T6707] Tainted: [U]=USER
[  169.812635][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  169.812651][ T6707] Call Trace:
[  169.812659][ T6707]  <TASK>
[  169.812669][ T6707]  dump_stack_lvl+0x16c/0x1f0
[  169.812721][ T6707]  should_fail_ex+0x512/0x640
[  169.812774][ T6707]  _copy_from_user+0x2e/0xd0
[  169.812826][ T6707]  copy_msghdr_from_user+0x98/0x160
[  169.812864][ T6707]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  169.812922][ T6707]  ___sys_sendmsg+0xfe/0x1d0
[  169.812962][ T6707]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.813052][ T6707]  __sys_sendmsg+0x16d/0x220
[  169.813087][ T6707]  ? __pfx___sys_sendmsg+0x10/0x10
[  169.813129][ T6707]  ? rcu_is_watching+0x12/0xc0
[  169.813166][ T6707]  do_syscall_64+0xcd/0x230
[  169.813211][ T6707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.813239][ T6707] RIP: 0033:0x7f5695b8e969
[  169.813261][ T6707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.813287][ T6707] RSP: 002b:00007f56969e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.813312][ T6707] RAX: ffffffffffffffda RBX: 00007f5695db5fa0 RCX: 00007f5695b8e969
[  169.813330][ T6707] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003
[  169.813347][ T6707] RBP: 00007f56969e4090 R08: 0000000000000000 R09: 0000000000000000
[  169.813363][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.813379][ T6707] R13: 0000000000000000 R14: 00007f5695db5fa0 R15: 00007ffde55f2be8
[  169.813427][ T6707]  </TASK>
[  170.421806][ T6716] blkio.reset_stats is deprecated
[  170.430177][ T6716] netlink: 330 bytes leftover after parsing attributes in process `syz.3.184'.
[  171.590810][  T992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.665569][ T6723] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  171.889601][  T992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.471438][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.481144][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.496993][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.505702][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.516316][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.615500][  T992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.032496][  T992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.133590][ T6741] FAULT_INJECTION: forcing a failure.
[  173.133590][ T6741] name failslab, interval 1, probability 0, space 0, times 0
[  173.175994][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.3.191 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  173.176044][ T6741] Tainted: [U]=USER
[  173.176053][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  173.176069][ T6741] Call Trace:
[  173.176079][ T6741]  <TASK>
[  173.176088][ T6741]  dump_stack_lvl+0x16c/0x1f0
[  173.176139][ T6741]  should_fail_ex+0x512/0x640
[  173.176193][ T6741]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  173.176222][ T6741]  should_failslab+0xc2/0x120
[  173.176257][ T6741]  __kmalloc_cache_noprof+0x6a/0x3e0
[  173.176285][ T6741]  ? trace_kmalloc+0x2b/0xd0
[  173.176324][ T6741]  ? snd_virmidi_output_open+0xc4/0x670
[  173.176369][ T6741]  snd_virmidi_output_open+0xc4/0x670
[  173.176417][ T6741]  open_substream+0x47b/0x9b0
[  173.176473][ T6741]  rawmidi_open_priv+0x543/0x6e0
[  173.176521][ T6741]  snd_rawmidi_open+0x4cc/0xbf0
[  173.176558][ T6741]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  173.176586][ T6741]  ? __pfx_default_wake_function+0x10/0x10
[  173.176619][ T6741]  ? kobject_get_unless_zero+0x156/0x1e0
[  173.176671][ T6741]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  173.176704][ T6741]  snd_open+0x201/0x450
[  173.176747][ T6741]  ? __pfx_snd_open+0x10/0x10
[  173.176790][ T6741]  chrdev_open+0x231/0x6a0
[  173.176826][ T6741]  ? __pfx_apparmor_file_open+0x10/0x10
[  173.176872][ T6741]  ? __pfx_chrdev_open+0x10/0x10
[  173.176911][ T6741]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  173.176990][ T6741]  do_dentry_open+0x741/0x1c10
[  173.177028][ T6741]  ? __pfx_chrdev_open+0x10/0x10
[  173.177076][ T6741]  vfs_open+0x82/0x3f0
[  173.177126][ T6741]  path_openat+0x1e5e/0x2d40
[  173.177193][ T6741]  ? __pfx_path_openat+0x10/0x10
[  173.177240][ T6741]  do_filp_open+0x20b/0x470
[  173.177275][ T6741]  ? __pfx_do_filp_open+0x10/0x10
[  173.177342][ T6741]  ? alloc_fd+0x471/0x7d0
[  173.177387][ T6741]  do_sys_openat2+0x11b/0x1d0
[  173.177433][ T6741]  ? __pfx_do_sys_openat2+0x10/0x10
[  173.177482][ T6741]  ? find_held_lock+0x2b/0x80
[  173.177526][ T6741]  __x64_sys_openat+0x174/0x210
[  173.177574][ T6741]  ? __pfx___x64_sys_openat+0x10/0x10
[  173.177626][ T6741]  ? rcu_is_watching+0x12/0xc0
[  173.177671][ T6741]  do_syscall_64+0xcd/0x230
[  173.177728][ T6741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.177762][ T6741] RIP: 0033:0x7fc3e2f8e969
[  173.177788][ T6741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.177820][ T6741] RSP: 002b:00007fc3e3e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  173.177852][ T6741] RAX: ffffffffffffffda RBX: 00007fc3e31b5fa0 RCX: 00007fc3e2f8e969
[  173.177874][ T6741] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  173.177895][ T6741] RBP: 00007fc3e3010ab1 R08: 0000000000000000 R09: 0000000000000000
[  173.177916][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.177936][ T6741] R13: 0000000000000000 R14: 00007fc3e31b5fa0 R15: 00007ffeae288ac8
[  173.177979][ T6741]  </TASK>
[  173.479786][    C1] vkms_vblank_simulate: vblank timer overrun
[  174.439768][  T992] bridge_slave_0: left allmulticast mode
[  174.457001][  T992] bridge_slave_0: left promiscuous mode
[  174.464128][  T992] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.475346][ T6750] FAULT_INJECTION: forcing a failure.
[  174.475346][ T6750] name failslab, interval 1, probability 0, space 0, times 0
[  174.568625][ T6750] CPU: 1 UID: 0 PID: 6750 Comm: syz.3.192 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  174.568674][ T6750] Tainted: [U]=USER
[  174.568684][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  174.568700][ T6750] Call Trace:
[  174.568709][ T6750]  <TASK>
[  174.568720][ T6750]  dump_stack_lvl+0x16c/0x1f0
[  174.568772][ T6750]  should_fail_ex+0x512/0x640
[  174.568819][ T6750]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  174.568861][ T6750]  should_failslab+0xc2/0x120
[  174.568901][ T6750]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  174.568939][ T6750]  ? __alloc_skb+0x2b2/0x380
[  174.568980][ T6750]  __alloc_skb+0x2b2/0x380
[  174.569015][ T6750]  ? __pfx___alloc_skb+0x10/0x10
[  174.569056][ T6750]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  174.569110][ T6750]  ? __lock_acquire+0xaa4/0x1ba0
[  174.569158][ T6750]  netlink_alloc_large_skb+0x69/0x130
[  174.569227][ T6750]  netlink_sendmsg+0x6a1/0xdd0
[  174.569279][ T6750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  174.569346][ T6750]  ____sys_sendmsg+0xa98/0xc70
[  174.569397][ T6750]  ? copy_msghdr_from_user+0x10a/0x160
[  174.569436][ T6750]  ? __pfx_____sys_sendmsg+0x10/0x10
[  174.569510][ T5839] Bluetooth: hci0: command tx timeout
[  174.569503][ T6750]  ___sys_sendmsg+0x134/0x1d0
[  174.569543][ T6750]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.569626][ T6750]  __sys_sendmsg+0x16d/0x220
[  174.569667][ T6750]  ? __pfx___sys_sendmsg+0x10/0x10
[  174.569715][ T6750]  ? rcu_is_watching+0x12/0xc0
[  174.569762][ T6750]  do_syscall_64+0xcd/0x230
[  174.569826][ T6750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.569856][ T6750] RIP: 0033:0x7fc3e2f8e969
[  174.569882][ T6750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.569913][ T6750] RSP: 002b:00007fc3e3e36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.569943][ T6750] RAX: ffffffffffffffda RBX: 00007fc3e31b5fa0 RCX: 00007fc3e2f8e969
[  174.569965][ T6750] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003
[  174.569986][ T6750] RBP: 00007fc3e3e36090 R08: 0000000000000000 R09: 0000000000000000
[  174.570005][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.570025][ T6750] R13: 0000000000000000 R14: 00007fc3e31b5fa0 R15: 00007ffeae288ac8
[  174.570067][ T6750]  </TASK>
[  175.008955][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'.
[  176.670333][  T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.686378][  T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.707340][  T992] bond0 (unregistering): Released all slaves
[  176.843486][ T6737] chnl_net:caif_netlink_parms(): no params data found
[  176.886927][ T5839] Bluetooth: hci0: command tx timeout
[  176.921964][  T992] HfR: left promiscuous mode
[  176.965314][ T6784] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations!
[  177.999522][ T5839] Bluetooth: hci1: Malformed LE Event: 0x1b
[  178.966124][ T5839] Bluetooth: hci0: command tx timeout
[  179.754499][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.770990][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.798670][ T6737] bridge_slave_0: entered allmulticast mode
[  179.826616][ T6737] bridge_slave_0: entered promiscuous mode
[  180.121703][ T6828] Invalid ELF header magic: != ELF
[  180.308831][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.327930][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.335679][ T6737] bridge_slave_1: entered allmulticast mode
[  180.357286][ T6737] bridge_slave_1: entered promiscuous mode
[  180.673677][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.720254][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.047703][ T5839] Bluetooth: hci0: command tx timeout
[  181.177193][ T6737] team0: Port device team_slave_0 added
[  181.200223][ T6737] team0: Port device team_slave_1 added
[  181.411104][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.440469][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.477686][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.561932][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.569293][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.604274][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.690902][  T992] hsr_slave_0: left promiscuous mode
[  181.715715][  T992] hsr_slave_1: left promiscuous mode
[  181.723359][  T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.733406][  T992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.746968][  T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.754417][  T992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.851032][  T992] veth1_macvtap: left promiscuous mode
[  181.864061][  T992] veth0_macvtap: left promiscuous mode
[  181.885638][  T992] veth1_vlan: left promiscuous mode
[  181.892159][  T992] veth0_vlan: left promiscuous mode
[  182.572289][  T992] team0 (unregistering): Port device team_slave_1 removed
[  182.610852][  T992] team0 (unregistering): Port device team_slave_0 removed
[  182.977740][ T6844] Process accounting resumed
[  183.045012][ T6737] hsr_slave_0: entered promiscuous mode
[  183.053892][ T6737] hsr_slave_1: entered promiscuous mode
[  184.154060][ T6737] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  184.202891][ T6737] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  184.296539][ T6737] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  184.367445][ T6737] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  184.390006][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'.
[  184.866869][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.913600][ T6737] 8021q: adding VLAN 0 to HW filter on device team0
[  184.931152][  T992] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.938410][  T992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.058908][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.066177][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.241398][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'.
[  185.382689][ T6904] 
[  185.662526][ T6737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  186.675426][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0

syzkaller
syzkaller login: [  188.454591][ T6737] veth0_vlan: entered promiscuous mode
[  188.471207][ T6737] veth1_vlan: entered promiscuous mode
[  188.522904][ T6737] veth0_macvtap: entered promiscuous mode
[  188.539632][ T6737] veth1_macvtap: entered promiscuous mode
[  188.675664][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.738372][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.836771][ T6737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.852523][ T6737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.888459][ T6737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.903400][ T6737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.222576][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.241648][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.320606][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.344316][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.510515][ T7025] capability: warning: `syz.3.233' uses 32-bit capabilities (legacy support in use)
[  190.601793][ T7025] HfR: entered promiscuous mode
[  190.664920][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'.
[  190.684804][ T7025] HfR: left promiscuous mode
[  190.717549][ T7029] device-mapper: ioctl: Unable to rename non-existent device,  to �
[  190.972924][ T7014] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  197.666249][ T7130] can: request_module (can-proto-0) failed.
[  197.909203][ T7149] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input9
[  199.370451][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.377491][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  204.597196][ T7256] netlink: 350 bytes leftover after parsing attributes in process `syz.2.266'.
[  204.702974][ T7235] cgroup: fork rejected by pids controller in /syz2
[  209.548072][ T7379] netlink: 338 bytes leftover after parsing attributes in process `syz.3.275'.
[  210.358265][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'.
[  212.105194][ T7414] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  212.210030][ T7414] CIFS mount error: No usable UNC path provided in device string!
[  212.210030][ T7414] 
[  212.221695][ T7414] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  213.010999][ T7384] Process accounting paused
[  214.592709][ T7411] kexec: Could not allocate control_code_buffer
[  214.641619][ T7446] bridge0: port 2(netdevsim1) entered blocking state
[  214.649462][ T7446] bridge0: port 2(netdevsim1) entered disabled state
[  214.685039][ T7446] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  214.813654][ T7446] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  214.901392][ T7446] bridge0: port 2(netdevsim1) entered blocking state
[  214.908328][ T7446] bridge0: port 2(netdevsim1) entered forwarding state
[  215.782619][ T7470] mkiss: ax0: crc mode is auto.
[  216.097582][ T7475] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  216.104322][ T7475] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  216.221989][ T7475] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  216.272153][ T7475] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  216.282714][ T7470] can: request_module (can-proto-4) failed.
[  216.335795][ T7475] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  216.650369][ T7475] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  218.195927][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout
[  218.202125][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  218.255986][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout
[  218.336544][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  218.622572][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'.
[  219.499187][ T7555] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.305: bg 4: bad block bitmap checksum
[  219.514649][ T7555] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74
[  219.527708][ T7555] EXT4-fs (sda1): This should not happen!! Data will be lost
[  219.527708][ T7555] 
[  220.413563][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  221.049010][ T7319] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  221.063994][ T7319] EXT4-fs (sda1): This should not happen!! Data will be lost
[  221.063994][ T7319] 
[  221.344435][ T7580] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  221.451676][ T7568] could not allocate digest TFM handle 
[  221.555364][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[  222.487072][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  222.900803][ T7612] MTRR 1 not used
[  226.842099][ T7695] bond0: option all_slaves_active: invalid value ()
[  227.312709][ T7734] netlink: 342 bytes leftover after parsing attributes in process `syz.3.332'.
[  229.346868][ T7765] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.1.338: Error -117 reading block bitmap for 4
[  230.108185][ T7787] netlink: 346 bytes leftover after parsing attributes in process `syz.4.343'.
[  230.171599][ T7782] ima: policy update failed
[  230.216200][   T30] audit: type=1802 audit(4294970105.109:3): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.342" res=0 errno=0
[  230.848715][ T7792] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  230.886215][ T7792] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  230.892716][ T7792] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  230.908028][ T7792] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  232.885999][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout
[  232.966228][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  232.972274][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  232.978336][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout
[  235.729913][ T7851] netlink: 314 bytes leftover after parsing attributes in process `syz.3.355'.
[  237.924852][ T7871] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  237.936092][ T7890] warning: `syz.2.366' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  238.184752][ T7897] FAULT_INJECTION: forcing a failure.
[  238.184752][ T7897] name failslab, interval 1, probability 0, space 0, times 0
[  238.225772][ T7897] CPU: 1 UID: 0 PID: 7897 Comm: syz.4.365 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  238.225835][ T7897] Tainted: [U]=USER
[  238.225846][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  238.225870][ T7897] Call Trace:
[  238.225881][ T7897]  <TASK>
[  238.225898][ T7897]  dump_stack_lvl+0x16c/0x1f0
[  238.225954][ T7897]  should_fail_ex+0x512/0x640
[  238.226004][ T7897]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  238.226049][ T7897]  should_failslab+0xc2/0x120
[  238.226094][ T7897]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  238.226135][ T7897]  ? __kernfs_new_node+0xd2/0x8a0
[  238.226174][ T7897]  __kernfs_new_node+0xd2/0x8a0
[  238.226212][ T7897]  ? __pfx___kernfs_new_node+0x10/0x10
[  238.226256][ T7897]  ? find_held_lock+0x2b/0x80
[  238.226291][ T7897]  ? kernfs_root+0xee/0x2a0
[  238.226332][ T7897]  kernfs_new_node+0x13c/0x1e0
[  238.226379][ T7897]  __kernfs_create_file+0x53/0x350
[  238.226431][ T7897]  sysfs_add_file_mode_ns+0x207/0x3c0
[  238.226496][ T7897]  internal_create_group+0x578/0xf30
[  238.226541][ T7897]  ? __pfx_internal_create_group+0x10/0x10
[  238.226583][ T7897]  ? kernfs_create_link+0x1bd/0x240
[  238.226636][ T7897]  internal_create_groups+0x9d/0x150
[  238.226673][ T7897]  device_add+0xf30/0x1a70
[  238.226724][ T7897]  ? __pfx_device_add+0x10/0x10
[  238.226770][ T7897]  ? lockdep_init_map_type+0x5c/0x280
[  238.226822][ T7897]  ? __init_waitqueue_head+0xca/0x150
[  238.226870][ T7897]  netdev_register_kobject+0x182/0x3a0
[  238.226925][ T7897]  register_netdevice+0x13dc/0x2270
[  238.226976][ T7897]  ? __pfx_register_netdevice+0x10/0x10
[  238.227042][ T7897]  internal_dev_create+0x2d3/0x520
[  238.227088][ T7897]  ovs_vport_add+0x144/0x4d0
[  238.227118][ T7897]  new_vport+0x16/0x1d0
[  238.227163][ T7897]  ovs_dp_cmd_new+0x6ba/0xe60
[  238.227224][ T7897]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  238.227282][ T7897]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  238.227343][ T7897]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  238.227408][ T7897]  genl_family_rcv_msg_doit+0x209/0x2f0
[  238.227464][ T7897]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  238.227517][ T7897]  ? trace_cap_capable+0x18d/0x200
[  238.227566][ T7897]  ? bpf_lsm_capable+0x9/0x10
[  238.227603][ T7897]  ? security_capable+0x7e/0x260
[  238.227640][ T7897]  ? ns_capable+0xd7/0x110
[  238.227681][ T7897]  genl_rcv_msg+0x55c/0x800
[  238.227739][ T7897]  ? __pfx_genl_rcv_msg+0x10/0x10
[  238.227789][ T7897]  ? __pfx___dev_queue_xmit+0x10/0x10
[  238.227829][ T7897]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  238.227882][ T7897]  ? __lock_acquire+0xaa4/0x1ba0
[  238.227937][ T7897]  netlink_rcv_skb+0x16d/0x440
[  238.227984][ T7897]  ? __pfx_genl_rcv_msg+0x10/0x10
[  238.228039][ T7897]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  238.228109][ T7897]  ? __pfx_down_read+0x10/0x10
[  238.228144][ T7897]  ? netlink_deliver_tap+0x1ae/0xd30
[  238.228194][ T7897]  genl_rcv+0x28/0x40
[  238.228239][ T7897]  netlink_unicast+0x53a/0x7f0
[  238.228290][ T7897]  ? __pfx_netlink_unicast+0x10/0x10
[  238.228333][ T7897]  ? __lock_acquire+0xaa4/0x1ba0
[  238.228391][ T7897]  netlink_sendmsg+0x8d1/0xdd0
[  238.228445][ T7897]  ? __pfx_netlink_sendmsg+0x10/0x10
[  238.228509][ T7897]  ____sys_sendmsg+0xa98/0xc70
[  238.228563][ T7897]  ? copy_msghdr_from_user+0x10a/0x160
[  238.228605][ T7897]  ? __pfx_____sys_sendmsg+0x10/0x10
[  238.228680][ T7897]  ___sys_sendmsg+0x134/0x1d0
[  238.228726][ T7897]  ? __pfx____sys_sendmsg+0x10/0x10
[  238.228830][ T7897]  __sys_sendmsg+0x16d/0x220
[  238.228874][ T7897]  ? __pfx___sys_sendmsg+0x10/0x10
[  238.228914][ T7897]  ? __x64_sys_futex+0x1e0/0x4c0
[  238.228966][ T7897]  ? rcu_is_watching+0x12/0xc0
[  238.229013][ T7897]  do_syscall_64+0xcd/0x230
[  238.229069][ T7897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.229103][ T7897] RIP: 0033:0x7fe4f538e969
[  238.229131][ T7897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.229164][ T7897] RSP: 002b:00007fe4f61c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  238.229196][ T7897] RAX: ffffffffffffffda RBX: 00007fe4f55b6160 RCX: 00007fe4f538e969
[  238.229218][ T7897] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000008
[  238.229239][ T7897] RBP: 00007fe4f5410ab1 R08: 0000000000000000 R09: 0000000000000000
[  238.229259][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.229278][ T7897] R13: 0000000000000000 R14: 00007fe4f55b6160 R15: 00007ffda6a7dee8
[  238.229324][ T7897]  </TASK>
[  238.821843][ T7908] Setting dangerous option i915.mitigations - tainting kernel
[  244.543025][ T7968] Process accounting resumed
[  245.361587][ T7966] nvme_fcloop: unknown parameter or missing value '7'
[  245.833211][ T7997] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  246.895495][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'.
[  248.818948][ T8062] Invalid ELF header magic: != ELF
[  249.273683][ T8055] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  250.030015][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'.
[  250.631958][ T8109] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string
[  250.664113][ T8108] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string
[  251.485226][ T7315] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:15: bg 5: bad block bitmap checksum
[  251.578866][ T7315] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74
[  251.680876][ T7315] EXT4-fs (sda1): This should not happen!! Data will be lost
[  251.680876][ T7315] 
[  253.134708][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'.
[  253.376194][ T8145] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  253.457445][ T8145] EXT4-fs (sda1): This should not happen!! Data will be lost
[  253.457445][ T8145] 
[  254.490704][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'.
[  254.520551][ T8166] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  258.643511][ T7318] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  258.674260][ T7318] EXT4-fs (sda1): This should not happen!! Data will be lost
[  258.674260][ T7318] 
[  260.811409][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  260.817965][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  261.269078][ T8248] FAULT_INJECTION: forcing a failure.
[  261.269078][ T8248] name failslab, interval 1, probability 0, space 0, times 0
[  261.296008][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.2.441 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  261.296070][ T8248] Tainted: [U]=USER
[  261.296081][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  261.296101][ T8248] Call Trace:
[  261.296111][ T8248]  <TASK>
[  261.296124][ T8248]  dump_stack_lvl+0x16c/0x1f0
[  261.296194][ T8248]  should_fail_ex+0x512/0x640
[  261.296247][ T8248]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  261.296286][ T8248]  should_failslab+0xc2/0x120
[  261.296333][ T8248]  __kmalloc_cache_noprof+0x6a/0x3e0
[  261.296368][ T8248]  ? devlink_fmsg_nest_common.part.0+0x48/0x1e0
[  261.296422][ T8248]  devlink_fmsg_nest_common.part.0+0x48/0x1e0
[  261.296474][ T8248]  devlink_fmsg_bool_pair_put+0x270/0x2f0
[  261.296525][ T8248]  ? __pfx_devlink_fmsg_bool_pair_put+0x10/0x10
[  261.296572][ T8248]  ? kasan_disable_current+0x10/0x20
[  261.296612][ T8248]  ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0
[  261.296667][ T8248]  nsim_dev_dummy_fmsg_put+0xe7/0x1e0
[  261.296711][ T8248]  devlink_health_do_dump+0x240/0x620
[  261.296783][ T8248]  devlink_health_report+0x3c9/0x9c0
[  261.296838][ T8248]  ? __pfx_devlink_health_report+0x10/0x10
[  261.296890][ T8248]  ? _copy_from_user+0x59/0xd0
[  261.296953][ T8248]  nsim_dev_health_break_write+0x166/0x210
[  261.296996][ T8248]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  261.297055][ T8248]  full_proxy_write+0x13c/0x200
[  261.297105][ T8248]  vfs_write+0x25c/0x1180
[  261.297142][ T8248]  ? __pfx_full_proxy_write+0x10/0x10
[  261.297196][ T8248]  ? __pfx_vfs_write+0x10/0x10
[  261.297226][ T8248]  ? do_futex+0x122/0x350
[  261.297268][ T8248]  ? __pfx_do_futex+0x10/0x10
[  261.297318][ T8248]  ? __x64_sys_futex+0x1e0/0x4c0
[  261.297353][ T8248]  ? __x64_sys_futex+0x1e9/0x4c0
[  261.297401][ T8248]  ksys_write+0x12a/0x240
[  261.297435][ T8248]  ? __pfx_ksys_write+0x10/0x10
[  261.297469][ T8248]  ? rcu_is_watching+0x12/0xc0
[  261.297514][ T8248]  do_syscall_64+0xcd/0x230
[  261.297572][ T8248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.297606][ T8248] RIP: 0033:0x7f662e38e969
[  261.297637][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.297669][ T8248] RSP: 002b:00007f662f25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  261.297700][ T8248] RAX: ffffffffffffffda RBX: 00007f662e5b5fa0 RCX: 00007f662e38e969
[  261.297726][ T8248] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000003
[  261.297745][ T8248] RBP: 00007f662e410ab1 R08: 0000000000000000 R09: 0000000000000000
[  261.297765][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.297785][ T8248] R13: 0000000000000000 R14: 00007f662e5b5fa0 R15: 00007ffc5cd351a8
[  261.297834][ T8248]  </TASK>
[  262.468509][ T8240] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  262.842057][ T8265] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  262.934116][ T8265] EXT4-fs (sda1): This should not happen!! Data will be lost
[  262.934116][ T8265] 
[  263.300543][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'.
[  264.527044][ T8305] program syz.4.457 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.560065][ T8305] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  264.576201][ T8305] EXT4-fs (sda1): This should not happen!! Data will be lost
[  264.576201][ T8305] 
[  264.862670][ T8318] random: crng reseeded on system resumption
[  265.031859][ T8314] Invalid ELF header magic: != ELF
[  265.056034][ T8319] Invalid ELF header magic: != ELF
[  265.230390][ T8311] zswap: compressor Ȯ9Q��z%;0*l��H`Bk�j�wj�ӳ<85��'.Y[�`��2�Y$�`�Yv�gִ�q�"b%�z�N[O	EiF�i�
�(Sh��3Kx�>ԝ�RS=��kH�ɟ���{�?B����b��ޝ4)�>��� not available
[  266.215669][ T8318] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  266.244767][ T8318] EXT4-fs (sda1): This should not happen!! Data will be lost
[  266.244767][ T8318] 
[  266.389508][ T8318] Unrecognized hibernate image header format!
[  266.449784][ T8318] PM: hibernation: Image mismatch: architecture specific data
[  268.939546][ T8395] block2mtd: illegal erase size
[  269.034287][ T8393] block2mtd: error: cannot open device 
[  269.101341][ T8395] block2mtd: error: cannot open device 
[  272.820261][ T8477] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117
[  272.864686][ T8477] EXT4-fs (sda1): This should not happen!! Data will be lost
[  272.864686][ T8477] 
[  273.344499][ T8479] sp0: Synchronizing with TNC
[  273.355989][ T8478] [U] �
[  274.900409][ T8511] Process accounting paused
[  275.376216][ T8518] nvme_fcloop: unknown parameter or missing value '^/]'
[  277.528515][ T8561] random: crng reseeded on system resumption
	
		


	
		


	
		

	


	
	

		
	
		
	
	

	



			








	




	





	

	

	

	
	





	


	



	

	
		
		


	










	





		











	










	




	




		






	

	
		
	

	
		
	

	
		
	

	
		


	
	




syzkaller
syzkaller login: [  298.414405][ T8830] tty tty1: ldisc open failed (-12), clearing slot 0
[  300.868558][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'.
[  301.454295][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.463699][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.480602][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.536520][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.570115][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.575316][ T8893] zswap: compressor Ȯ9Q��z%;0*l��H`Bk�j�wj�ӳ<85��'.Y[�`��2�Y$�`�Yv�gִ�q�"b%�z�N[O	EiF�i�
�(Sh��3Kx�>ԝ�RS=��kH�ɟ���{�?B����b��ޝ4)�>��� not available
[  303.606511][ T5839] Bluetooth: hci4: command tx timeout
[  303.854463][ T7313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.674827][ T7313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.709338][ T8870] chnl_net:caif_netlink_parms(): no params data found
[  304.993537][ T7313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.228155][ T7313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.506589][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.534352][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.552543][ T8870] bridge_slave_0: entered allmulticast mode
[  305.572297][ T8870] bridge_slave_0: entered promiscuous mode
[  305.617982][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.625591][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.640391][ T8870] bridge_slave_1: entered allmulticast mode
[  305.660881][ T8870] bridge_slave_1: entered promiscuous mode
[  305.686160][ T5839] Bluetooth: hci4: command tx timeout
[  306.142037][ T8847] Process accounting resumed
[  306.372405][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'.
[  306.431283][ T8870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.496998][ T8870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.740314][ T7313] bridge_slave_1: left allmulticast mode
[  306.755346][ T7313] bridge_slave_1: left promiscuous mode
[  306.772973][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.804324][ T8930] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  306.820541][ T7313] bridge_slave_0: left allmulticast mode
[  306.856884][ T7313] bridge_slave_0: left promiscuous mode
[  306.871698][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.767568][ T5839] Bluetooth: hci4: command tx timeout
[  308.790572][ T7313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.833340][ T7313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.877932][ T7313] bond0 (unregistering): Released all slaves
[  309.132206][ T8870] team0: Port device team_slave_0 added
[  309.266856][ T8870] team0: Port device team_slave_1 added
[  309.601125][ T8939] sysfs_service_op_store: Client not running :-5:
[  309.841230][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.848711][ T5839] Bluetooth: hci4: command tx timeout
[  309.869631][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.901536][ T8870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.164933][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.195917][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.303709][ T8870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.623158][ T7313] hsr_slave_0: left promiscuous mode
[  310.671207][ T7313] hsr_slave_1: left promiscuous mode
[  310.678709][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.688608][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.697515][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.708523][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.753868][ T7313] veth1_macvtap: left promiscuous mode
[  310.769912][ T7313] veth0_macvtap: left promiscuous mode
[  310.775688][ T7313] veth1_vlan: left promiscuous mode
[  310.793799][ T7313] veth0_vlan: left promiscuous mode
[  312.377691][ T7313] team0 (unregistering): Port device team_slave_1 removed
[  312.419122][ T7313] team0 (unregistering): Port device team_slave_0 removed
[  313.031556][ T8870] hsr_slave_0: entered promiscuous mode
[  313.038786][ T8870] hsr_slave_1: entered promiscuous mode
[  313.045303][ T8870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.053603][ T8870] Cannot create hsr debugfs directory
[  314.286906][ T8870] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  314.360793][ T8870] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  314.420296][ T8870] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  314.490150][ T8870] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  314.886364][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.974157][ T8870] 8021q: adding VLAN 0 to HW filter on device team0
[  315.013278][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.020587][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.098652][ T8997] Invalid ELF header magic: != ELF
[  315.130229][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.137526][ T7313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.590742][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.320771][ T9054] random: crng reseeded on system resumption
[  317.926110][ T8870] veth0_vlan: entered promiscuous mode
[  317.981186][ T8870] veth1_vlan: entered promiscuous mode
[  318.109315][ T8870] veth0_macvtap: entered promiscuous mode
[  318.137231][ T8870] veth1_macvtap: entered promiscuous mode
[  318.227442][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.258585][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.319961][ T8870] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.367092][ T8870] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.386219][ T8870] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.411141][ T8870] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.578930][ T9069] can: request_module (can-proto-0) failed.
[  318.829701][ T7312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.863096][ T7312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.007087][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.020777][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.435668][ T9086] delete_channel: no stack
[  320.561189][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'.
[  321.747965][ T9123] random: crng reseeded on system resumption
[  322.254845][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  322.261320][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  325.760324][ T9181] ubi0: attaching mtd0
[  325.767528][ T9181] ubi0: scanning is finished
[  325.772207][ T9181] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  326.150513][ T9181] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  326.196413][ T9180] ubi0: attaching mtd0
[  326.204195][ T9180] ubi0: scanning is finished
[  326.216220][ T9180] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record
[  326.441799][ T9193] : Can't lookup blockdev
[  326.497254][ T9180] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  326.860763][ T9202] FAULT_INJECTION: forcing a failure.
[  326.860763][ T9202] name failslab, interval 1, probability 0, space 0, times 0
[  326.910807][ T9202] CPU: 1 UID: 0 PID: 9202 Comm: syz.3.619 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  326.910863][ T9202] Tainted: [U]=USER
[  326.910875][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  326.910894][ T9202] Call Trace:
[  326.910904][ T9202]  <TASK>
[  326.910917][ T9202]  dump_stack_lvl+0x16c/0x1f0
[  326.910974][ T9202]  should_fail_ex+0x512/0x640
[  326.911026][ T9202]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  326.911070][ T9202]  should_failslab+0xc2/0x120
[  326.911113][ T9202]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  326.911153][ T9202]  ? find_held_lock+0x2b/0x80
[  326.911183][ T9202]  ? alloc_vfsmnt+0x23/0x6f0
[  326.911231][ T9202]  alloc_vfsmnt+0x23/0x6f0
[  326.911284][ T9202]  clone_mnt+0x6d/0xff0
[  326.911335][ T9202]  ? is_subdir+0x1a8/0x3e0
[  326.911381][ T9202]  copy_tree+0x38d/0xa20
[  326.911428][ T9202]  copy_mnt_ns+0x1ac/0xac0
[  326.911462][ T9202]  ? trace_kmem_cache_alloc+0x28/0xc0
[  326.911510][ T9202]  ? trace_cap_capable+0x18d/0x200
[  326.911544][ T9202]  ? create_new_namespaces+0x30/0xad0
[  326.911588][ T9202]  create_new_namespaces+0xd3/0xad0
[  326.911622][ T9202]  ? bpf_lsm_capable+0x9/0x10
[  326.911658][ T9202]  ? security_capable+0x7e/0x260
[  326.911699][ T9202]  unshare_nsproxy_namespaces+0xc0/0x1f0
[  326.911742][ T9202]  ksys_unshare+0x45b/0xa40
[  326.911789][ T9202]  ? __pfx_ksys_unshare+0x10/0x10
[  326.911831][ T9202]  ? xfd_validate_state+0x5d/0x180
[  326.911859][ T9202]  ? rcu_is_watching+0x12/0xc0
[  326.911893][ T9202]  __x64_sys_unshare+0x31/0x40
[  326.911931][ T9202]  do_syscall_64+0xcd/0x230
[  326.911975][ T9202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.912002][ T9202] RIP: 0033:0x7fc3e2f8e969
[  326.912024][ T9202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.912050][ T9202] RSP: 002b:00007fc3e3e36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  326.912091][ T9202] RAX: ffffffffffffffda RBX: 00007fc3e31b5fa0 RCX: 00007fc3e2f8e969
[  326.912110][ T9202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000
[  326.912128][ T9202] RBP: 00007fc3e3010ab1 R08: 0000000000000000 R09: 0000000000000000
[  326.912145][ T9202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  326.912161][ T9202] R13: 0000000000000000 R14: 00007fc3e31b5fa0 R15: 00007ffeae288ac8
[  326.912196][ T9202]  </TASK>
[  330.506060][ T9260] zswap: compressor  not available
[  330.718127][ T9263] Setting dangerous option i915.mitigations - tainting kernel
[  331.374163][ T9280] netlink: 'syz.4.630': attribute type 16 has an invalid length.
[  331.409452][ T9280] netlink: 326 bytes leftover after parsing attributes in process `syz.4.630'.
[  331.488424][ T9280] veth1_macvtap: left promiscuous mode
[  333.838409][ T9325] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.721864][ T9377] Process accounting paused
[  336.988100][ T9384] sock: sock_timestamping_bind_phc: sock not bind to device
[  340.911980][ T9446] netlink: zone id is out of range
[  340.976019][ T9446] netlink: zone id is out of range
[  340.981221][ T9446] netlink: zone id is out of range
[  341.076824][ T9446] netlink: zone id is out of range
[  341.090645][ T9446] netlink: zone id is out of range
[  341.140164][ T9446] netlink: zone id is out of range
[  341.145367][ T9446] netlink: zone id is out of range
[  341.175893][ T9446] netlink: zone id is out of range
[  341.194056][ T9446] netlink: zone id is out of range
[  341.253948][ T9446] netlink: zone id is out of range
[  342.722776][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  345.659298][ T5839] Bluetooth: hci0: Unable to find connection for big 0xd2
[  345.950358][ T9493] vivid-003: =================  START STATUS  =================
[  345.969017][ T9493] vivid-003: Radio HW Seek Mode: Bounded
[  345.981230][ T9493] vivid-003: Radio Programmable HW Seek: false
[  345.988047][ T9493] vivid-003: RDS Rx I/O Mode: Block I/O
[  345.993689][ T9493] vivid-003: Generate RBDS Instead of RDS: false
[  345.993726][ T9493] vivid-003: RDS Reception: true
[  345.993758][ T9493] vivid-003: RDS Program Type: 0 inactive
[  345.993797][ T9493] vivid-003: RDS PS Name:  inactive
[  345.993832][ T9493] vivid-003: RDS Radio Text:  inactive
[  345.993871][ T9493] vivid-003: RDS Traffic Announcement: false inactive
[  345.993908][ T9493] vivid-003: RDS Traffic Program: false inactive
[  345.993946][ T9493] vivid-003: RDS Music: false inactive
[  345.993984][ T9493] vivid-003: ==================  END STATUS  ==================
[  349.668556][ T9588] netlink: 342 bytes leftover after parsing attributes in process `syz.4.673'.
[  350.130515][ T8426] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:19: bg 2: bad block bitmap checksum
[  350.158786][ T8426] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1355 with max blocks 5 with error 74
[  350.182729][ T8426] EXT4-fs (sda1): This should not happen!! Data will be lost
[  350.182729][ T8426] 
[  351.142115][ T9617] i2c i2c-0: new_device: Can't parse I2C address
[  353.868688][ T9674] net_ratelimit: 3 callbacks suppressed
[  353.868706][ T9674] netlink: zone id is out of range
[  353.920197][ T9674] netlink: zone id is out of range
[  353.977976][ T9674] netlink: zone id is out of range
[  353.985381][ T9674] netlink: zone id is out of range
@[  353.997859][ T9674] netlink: zone id is out of range
[  354.003162][ T9674] netlink: zone id is out of range
[  354.008841][ T9674] netlink: zone id is out of range
[  354.015531][ T9674] netlink: zone id is out of range
[  354.028319][ T9674] netlink: zone id is out of range
[  354.036394][ T9674] netlink: zone id is out of range
[  356.740378][ T9729] Unable to find swap-space signature
[  356.980726][ T9746] delete_channel: no stack
[  357.012274][ T9746] delete_channel: no stack
[  357.786399][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  357.831179][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  357.875941][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  357.904584][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  357.947299][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  357.955634][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  358.077038][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  358.114836][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  358.183313][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  358.246050][ T9776] futex_wake_op: syz.3.703 tries to shift op by 64; fix this program
[  358.266310][ T9770] Invalid ELF header magic: != ELF
[  358.606370][   T30] audit: type=1800 audit(4294970241.489:4): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.706" name="features" dev="configfs" ino=23732 res=0 errno=0
[  358.913370][ T9799] .SR: entered promiscuous mode
[  358.919498][ T9800] openvswitch: .SR: Dropping previously announced user features
[  361.226319][ T9841] 
[  361.228726][ T9841] ======================================================
[  361.235773][ T9841] WARNING: possible circular locking dependency detected
[  361.242838][ T9841] 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 Tainted: G     U             
[  361.251542][ T9841] ------------------------------------------------------
[  361.258588][ T9841] syz.4.715/9841 is trying to acquire lock:
[  361.264521][ T9841] ffff888143f78f98 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310
[  361.274443][ T9841] 
[  361.274443][ T9841] but task is already holding lock:
[  361.281831][ T9841] ffff888143f78a68 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  361.293124][ T9841] 
[  361.293124][ T9841] which lock already depends on the new lock.
[  361.293124][ T9841] 
[  361.303541][ T9841] 
[  361.303541][ T9841] the existing dependency chain (in reverse order) is:
[  361.312653][ T9841] 
[  361.312653][ T9841] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}:
[  361.321303][ T9841]        blk_alloc_queue+0x619/0x760
[  361.326623][ T9841]        blk_mq_alloc_queue+0x179/0x290
[  361.332205][ T9841]        __blk_mq_alloc_disk+0x29/0x120
[  361.337795][ T9841]        loop_add+0x496/0xb70
[  361.342507][ T9841]        loop_init+0x164/0x270
[  361.347395][ T9841]        do_one_initcall+0x120/0x6e0
[  361.352714][ T9841]        kernel_init_freeable+0x5c2/0x900
[  361.358481][ T9841]        kernel_init+0x1c/0x2b0
[  361.363357][ T9841]        ret_from_fork+0x48/0x80
[  361.368317][ T9841]        ret_from_fork_asm+0x1a/0x30
[  361.373634][ T9841] 
[  361.373634][ T9841] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  361.380877][ T9841]        fs_reclaim_acquire+0x102/0x150
[  361.386463][ T9841]        kmem_cache_alloc_noprof+0x53/0x3b0
[  361.392383][ T9841]        __kernfs_new_node+0xd2/0x8a0
[  361.397773][ T9841]        kernfs_new_node+0x13c/0x1e0
[  361.403176][ T9841]        kernfs_create_dir_ns+0x4c/0x1a0
[  361.408840][ T9841]        sysfs_create_dir_ns+0x13a/0x2b0
[  361.414517][ T9841]        kobject_add_internal+0x2c4/0x9b0
[  361.420261][ T9841]        kobject_add+0x16e/0x240
[  361.425222][ T9841]        elv_register_queue+0xd3/0x2a0
[  361.430709][ T9841]        blk_register_queue+0x3c4/0x560
[  361.436277][ T9841]        add_disk_fwnode+0x911/0x13a0
[  361.441683][ T9841]        nbd_dev_add+0x78e/0xbb0
[  361.446639][ T9841]        nbd_init+0x181/0x320
[  361.451353][ T9841]        do_one_initcall+0x120/0x6e0
[  361.456670][ T9841]        kernel_init_freeable+0x5c2/0x900
[  361.462424][ T9841]        kernel_init+0x1c/0x2b0
[  361.467297][ T9841]        ret_from_fork+0x48/0x80
[  361.472263][ T9841]        ret_from_fork_asm+0x1a/0x30
[  361.477601][ T9841] 
[  361.477601][ T9841] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  361.485474][ T9841]        __lock_acquire+0x1173/0x1ba0
[  361.490889][ T9841]        lock_acquire+0x179/0x350
[  361.495971][ T9841]        __mutex_lock+0x199/0xb90
[  361.501038][ T9841]        queue_requests_store+0x1c7/0x310
[  361.506785][ T9841]        queue_attr_store+0x270/0x310
[  361.512224][ T9841]        sysfs_kf_write+0xef/0x150
[  361.517371][ T9841]        kernfs_fop_write_iter+0x354/0x510
[  361.523205][ T9841]        vfs_write+0x5bd/0x1180
[  361.528080][ T9841]        ksys_write+0x12a/0x240
[  361.532954][ T9841]        do_syscall_64+0xcd/0x230
[  361.538018][ T9841]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.544459][ T9841] 
[  361.544459][ T9841] other info that might help us debug this:
[  361.544459][ T9841] 
[  361.554705][ T9841] Chain exists of:
[  361.554705][ T9841]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29
[  361.554705][ T9841] 
[  361.568484][ T9841]  Possible unsafe locking scenario:
[  361.568484][ T9841] 
[  361.575939][ T9841]        CPU0                    CPU1
[  361.581311][ T9841]        ----                    ----
[  361.586685][ T9841]   lock(&q->q_usage_counter(io)#29);
[  361.592092][ T9841]                                lock(fs_reclaim);
[  361.598617][ T9841]                                lock(&q->q_usage_counter(io)#29);
[  361.606642][ T9841]   lock(&q->elevator_lock);
[  361.611264][ T9841] 
[  361.611264][ T9841]  *** DEADLOCK ***
[  361.611264][ T9841] 
[  361.619422][ T9841] 6 locks held by syz.4.715/9841:
[  361.624457][ T9841]  #0: ffff888063b600f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  361.633553][ T9841]  #1: ffff888035276420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[  361.642589][ T9841]  #2: ffff88804f485888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[  361.652395][ T9841]  #3: ffff888143f4a1e8 (kn->active#178){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510
[  361.662550][ T9841]  #4: ffff888143f78a68 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  361.674291][ T9841]  #5: ffff888143f78aa0 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  361.686291][ T9841] 
[  361.686291][ T9841] stack backtrace:
[  361.692195][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.4.715 Tainted: G     U              6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) 
[  361.692234][ T9841] Tainted: [U]=USER
[  361.692242][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  361.692257][ T9841] Call Trace:
[  361.692267][ T9841]  <TASK>
[  361.692277][ T9841]  dump_stack_lvl+0x116/0x1f0
[  361.692319][ T9841]  print_circular_bug+0x275/0x350
[  361.692353][ T9841]  check_noncircular+0x14c/0x170
[  361.692391][ T9841]  __lock_acquire+0x1173/0x1ba0
[  361.692430][ T9841]  lock_acquire+0x179/0x350
[  361.692463][ T9841]  ? queue_requests_store+0x1c7/0x310
[  361.692490][ T9841]  ? __pfx___might_resched+0x10/0x10
[  361.692519][ T9841]  ? do_raw_spin_lock+0x12c/0x2b0
[  361.692560][ T9841]  __mutex_lock+0x199/0xb90
[  361.692599][ T9841]  ? queue_requests_store+0x1c7/0x310
[  361.692626][ T9841]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  361.692662][ T9841]  ? queue_requests_store+0x1c7/0x310
[  361.692686][ T9841]  ? lockdep_hardirqs_on+0x7c/0x110
[  361.692724][ T9841]  ? __pfx___mutex_lock+0x10/0x10
[  361.692776][ T9841]  ? __pfx_autoremove_wake_function+0x10/0x10
[  361.692812][ T9841]  ? queue_requests_store+0x1c7/0x310
[  361.692837][ T9841]  queue_requests_store+0x1c7/0x310
[  361.692864][ T9841]  ? __pfx_queue_requests_store+0x10/0x10
[  361.692893][ T9841]  ? __mutex_trylock_common+0xe9/0x250
[  361.692929][ T9841]  ? __pfx_queue_requests_store+0x10/0x10
[  361.692956][ T9841]  queue_attr_store+0x270/0x310
[  361.692981][ T9841]  ? __pfx_queue_attr_store+0x10/0x10
[  361.693013][ T9841]  ? find_held_lock+0x2b/0x80
[  361.693037][ T9841]  ? sysfs_file_kobj+0xe4/0x290
[  361.693077][ T9841]  ? __pfx_queue_attr_store+0x10/0x10
[  361.693100][ T9841]  sysfs_kf_write+0xef/0x150
[  361.693138][ T9841]  kernfs_fop_write_iter+0x354/0x510
[  361.693171][ T9841]  ? __pfx_sysfs_kf_write+0x10/0x10
[  361.693210][ T9841]  vfs_write+0x5bd/0x1180
[  361.693235][ T9841]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  361.693270][ T9841]  ? __pfx___mutex_lock+0x10/0x10
[  361.693308][ T9841]  ? __pfx_vfs_write+0x10/0x10
[  361.693342][ T9841]  ksys_write+0x12a/0x240
[  361.693366][ T9841]  ? __pfx_ksys_write+0x10/0x10
[  361.693390][ T9841]  ? rcu_is_watching+0x12/0xc0
[  361.693418][ T9841]  do_syscall_64+0xcd/0x230
[  361.693458][ T9841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.693485][ T9841] RIP: 0033:0x7fe4f538e969
[  361.693505][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.693529][ T9841] RSP: 002b:00007fe4f620a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  361.693552][ T9841] RAX: ffffffffffffffda RBX: 00007fe4f55b5fa0 RCX: 00007fe4f538e969
[  361.693570][ T9841] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003
[  361.693585][ T9841] RBP: 00007fe4f5410ab1 R08: 0000000000000000 R09: 0000000000000000
[  361.693600][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.693615][ T9841] R13: 0000000000000000 R14: 00007fe4f55b5fa0 R15: 00007ffda6a7dee8
[  361.693639][ T9841]  </TASK>
[  361.693717][    C1] vkms_vblank_simulate: vblank timer overrun
[  361.997356][    C1] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  362.829776][ T9730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.891654][ T9730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.956706][ T9840] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.4.715: Error -117 reading block bitmap for 2
[  362.970104][ T8870] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz-executor: Error -117 reading block bitmap for 2
[  362.987286][ T9730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.004698][ T9840] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.4.715: Error -117 reading block bitmap for 2
[  363.064088][ T9730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.169483][ T9730] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.236953][ T9730] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.296766][ T9730] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.351785][ T9730] bridge0: port 2(netdevsim1) entered disabled state
[  363.361959][ T9730] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode
[  363.373040][ T9730] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode
[  363.382721][ T9730] bridge0: port 2(netdevsim1) entered disabled state
[  363.391646][ T9730] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.432549][ T9730] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.597617][ T9730] bridge_slave_1: left allmulticast mode
[  363.603331][ T9730] bridge_slave_1: left promiscuous mode
[  363.611817][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.621166][ T9730] bridge_slave_0: left allmulticast mode
[  363.627353][ T9730] bridge_slave_0: left promiscuous mode
[  363.633023][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.644210][ T9730] bridge_slave_0: left allmulticast mode
[  363.650831][ T9730] bridge_slave_0: left promiscuous mode
[  363.657332][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.891349][ T9730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.901309][ T9730] bond0 (unregistering): Released all slaves
[  363.913978][ T9730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.924036][ T9730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  363.936245][ T9730] bond0 (unregistering): Released all slaves
[  364.038714][ T9730] .SR: left promiscuous mode
[  364.710944][ T9730] hsr_slave_0: left promiscuous mode
[  364.716661][ T9730] hsr_slave_1: left promiscuous mode
[  364.722320][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.729803][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.740836][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.748339][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.758067][ T9730] hsr_slave_0: left promiscuous mode
[  364.763749][ T9730] hsr_slave_1: left promiscuous mode
[  364.769573][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  364.777905][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_0
[  364.785516][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  364.793573][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.807149][ T9730] veth1_macvtap: left promiscuous mode
[  364.812768][ T9730] veth0_macvtap: left promiscuous mode
[  364.818517][ T9730] veth1_vlan: left promiscuous mode
[  364.823818][ T9730] veth0_vlan: left promiscuous mode
[  364.830177][ T9730] veth1_macvtap: left promiscuous mode
[  364.835691][ T9730] veth0_macvtap: left promiscuous mode
[  364.841311][ T9730] veth1_vlan: left promiscuous mode
[  364.848862][ T9730] veth0_vlan: left promiscuous mode
[  365.044507][ T9730] team0 (unregistering): Port device team_slave_1 removed
[  365.072163][ T9730] team0 (unregistering): Port device team_slave_0 removed
[  365.248655][ T9730] team0 (unregistering): Port device team_slave_1 removed
[  365.274406][ T9730] team0 (unregistering): Port device team_slave_0 removed
[  365.853653][ T9730] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.902121][ T9730] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.963305][ T9730] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.023602][ T9730] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.163525][ T9730] bridge_slave_1: left allmulticast mode
[  366.173259][ T9730] bridge_slave_1: left promiscuous mode
[  366.179203][ T9730] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.188746][ T9730] bridge_slave_0: left allmulticast mode
[  366.194403][ T9730] bridge_slave_0: left promiscuous mode
[  366.200617][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.307711][ T9730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.318786][ T9730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.328842][ T9730] bond0 (unregistering): Released all slaves
[  366.691160][ T9730] hsr_slave_0: left promiscuous mode
[  366.699162][ T9730] hsr_slave_1: left promiscuous mode
[  366.704846][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.715402][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.726117][ T9730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.733525][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.744395][ T9730] veth1_macvtap: left promiscuous mode
[  366.750005][ T9730] veth0_macvtap: left promiscuous mode
[  366.755587][ T9730] veth1_vlan: left promiscuous mode
[  366.761500][ T9730] veth0_vlan: left promiscuous mode
[  366.914010][ T9730] team0 (unregistering): Port device team_slave_1 removed
[  366.935748][ T9730] team0 (unregistering): Port device team_slave_0 removed