last executing test programs:

2m10.658157027s ago: executing program 1 (id=2609):
r0 = socket(0x2, 0x1, 0x106)
select$auto(0x32, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0x2, 0x1, 0x106)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
set_mempolicy$auto(0x2, 0x0, 0x4)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d)
mmap$auto(0x800000, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe)
r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0)
ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r3, 0x80085502, 0x0)
mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000)
syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000580), r2)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x1)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r4 = socket(0x2, 0x1, 0x106)
bind$auto(r4, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711}, 0x6a)
connect$auto(0x3, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x54)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
close_range$auto(r1, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0)
read$auto(0x3, 0x0, 0x80)
write$auto(r5, 0x0, 0x9)

2m9.596541697s ago: executing program 1 (id=2612):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffe, 0x8000)
r0 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x5, 0x0)
r1 = openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0)
read$auto(r1, 0x0, 0x80)
write$auto(r0, 0x0, 0x6)
r2 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r2, 0x84, 0x71, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = getuid()
sendmsg$auto_IPVS_CMD_GET_INFO(r2, &(0x7f0000001340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000000c0)={0x1220, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x48, 0x0, 0x0, @u64=0xaeb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x11d3, 0x3, 0x0, 0x1, [@nested={0x1162, 0xb4, 0x0, 0x1, [@nested={0x4, 0x15b}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="ece43488ed09501884ecb7cadfee", @generic="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", @nested={0x4, 0xe5}, @typed={0x8, 0x138, 0x0, 0x0, @u32=0xbc}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x144, 0x0, 0x0, @uid=r4}, @generic="68ffe365e4d3ea00c82feb946e7a22bb1fb91d86e00c5e5b8d52209b176cd13cd1cb1aa4c84a383c73261fab7e1fd27ff31e89d06f64cddbd72fad57c560409aa7d99af7b7d81f4db240ec5e1aa1bcca3330e376de6b3dfc7db9b009a52bc903153a73bf02857cd646c1c876fb01835994a6e8cd57d764c8243cc0dcfb45928d94b7287c4831c0d79d104ebdef123a2029987eeeb5", @generic="9ba578908ebb0402d44685c9a7385a7d60a0823addc2f5c07757698b7f601eee66c98eeb87c204b9f02bab6195997a83f9060719e369e5c92d4303a7bc6585477ced48b4afa90a067ae7e27d222cdab024a02f45719cf73a6485046822dae46d3eb3e6157bf7d3e8a87f29e62fbfab52233566811b1099ce5695b38d3259e3833dc7d7b0e6e3982fd4ae8f3c302e9c"]}, @typed={0x9, 0xdb, 0x0, 0x0, @str='$#-$\x00'}, @generic="eb6330f01fcce91ea08372058cbec3be7b547770ff35d092f6b3de56376e0d04767f83d04ab9664f3019618afe71627a0b745fd96dacbb8322955206f31cf6cfde41dcaf482aeb2a39fed0cb1805ad18b676d7e601bb8c61acd5a51f0f38e0"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1220}, 0x1, 0x0, 0x0, 0x240008d0}, 0x20000000)
r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x20342, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
write$auto(0x3, 0x0, 0x7fffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0)

2m9.186805333s ago: executing program 1 (id=2615):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, 0xffffffffffffffff, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}})
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef) (async)
write$auto(0x3, 0x0, 0xfdef)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
socket(0x15, 0x5, 0x0) (async)
r1 = socket(0x15, 0x5, 0x0)
bind$auto(r1, 0x0, 0x1)
ioctl$auto(0xffffffffffffffff, 0x5609, r0) (async)
ioctl$auto(0xffffffffffffffff, 0x5609, r0)
mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) (async)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\xce\x19\x86P\xa9\a\xd4l}\xc2\xd0\x19\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, 0x0, 0x800000001, 0x0, 0x7, 0xa505}, 0x4}, 0x2, 0x4048) (async)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, 0x0, 0x800000001, 0x0, 0x7, 0xa505}, 0x4}, 0x2, 0x4048)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x5}, 0xa) (async)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x5}, 0xa)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x340408c0}, 0x0)

2m8.732458547s ago: executing program 1 (id=2616):
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
sysfs$auto(0x2, 0x10000000000000b, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbdb00a0000df25200000000c000380080f0200b40300001800028014000200766c616e310001000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x4)
r2 = socket(0x28, 0x1, 0x0)
getsockopt$auto(r2, 0x28, 0x8, 0x0, 0x0)
r3 = socket(0x22, 0x2, 0x24)
getsockopt$auto(r3, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4)
unshare$auto(0x40000080)
r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r6 = prctl$auto(0xd7cdcf79, 0xfffffffffffffffc, 0x0, 0x220000000000001, 0xfe0000)
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
open_tree_attr$auto(0xffffffffffffffff, 0x0, 0xda45, &(0x7f0000000080)={0xd2, 0x4, 0x800, @raw=0x3}, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'})
r7 = socket(0x1e, 0xa, 0xa)
fstatfs$auto(r5, &(0x7f0000000380)={0x401, 0x6, 0xfffffffffffffff6, 0x4, 0x2c02ea72, 0x81, 0x4, {[0x7, 0xc]}, 0x1ff, 0x3, 0x6, [0xa6c, 0x3, 0x100000000, 0x840e]})
sendmmsg$auto(r7, &(0x7f0000000040)={{&(0x7f0000000380), 0xff, &(0x7f0000000280)={0x0, 0x4f}, 0x7, 0x0, 0x4000, 0x3}, 0x5}, 0x9, 0xf0)
r8 = pipe2$auto(0x0, 0x80)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
unshare$auto(0x40000080)
sendmsg$auto_NFC_CMD_STOP_POLL(r6, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4018080)
r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x0, 0x0)
write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
setsockopt$auto_SO_TIMESTAMP_NEW(r8, 0x5, 0x3f, &(0x7f0000000300)='/dev/snd/midiC2D0\x00', 0xc)

2m7.105674228s ago: executing program 1 (id=2623):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netpci0\x00', <r2=>0x0})
sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x88}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000014) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0)
ioctl$auto(r3, 0x2284, 0xffffffffffffffff) (async)
socket(0xa, 0x801, 0x84) (async, rerun: 32)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32)
mmap$auto(0x0, 0x2020009, 0x3, 0xef1, 0xffffffffffffffff, 0x8000) (async)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async, rerun: 64)
r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64)
clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2)
ioctl$auto(r4, 0x5602, r5) (async)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async)
r6 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0)
fcntl$auto_F_DUPFD_CLOEXEC(r6, 0x406, r4) (async)
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8)

2m6.266218816s ago: executing program 1 (id=2626):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D1c\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000)
preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2a, 0x2, 0x1)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r2, 0x4004550a, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0xc08c5332, 0x38)
close_range$auto(0x2, 0x8000, 0x0)
rename$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')

1m50.935562414s ago: executing program 32 (id=2626):
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D1c\x00', 0x2000, 0x0)
mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000)
r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000)
preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
socket(0x2a, 0x2, 0x1)
getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0)
ioctl$auto_USB_RAW_IOCTL_VBUS_DRAW(r2, 0x4004550a, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000)
ioctl$auto(0x3, 0xc08c5332, 0x38)
close_range$auto(0x2, 0x8000, 0x0)
rename$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')

34.930304563s ago: executing program 4 (id=2864):
mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8044)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80002, 0x73)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x2)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x80002, 0x73)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x103880, 0x0)
setresuid$auto(0x0, 0x7, 0x8080)
ioctl$auto(r2, 0x5607, 0x1)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)

34.904457674s ago: executing program 2 (id=2865):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
socket(0xa, 0x801, 0x84)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0)
r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5)
write$auto_proc_oom_score_adj_operations_base(r2, &(0x7f0000000000)="8da99da8ef86347d40444056845741c5490d29d0e9012aadbc2f53185fd62491ac59d838c612620e7772acc79b7a7b3045ce5f4d411604a60b10d5ac48ec767dc7d2683914810cfc9f541ff4d6ae288330acd551a29aecb0439b3976d5301b5ebac07d4045c331cd7b32dee8d02a33a3378db5d0527c5ceab0b20efca0", 0x7d)
ioctl$auto_SG_SET_TIMEOUT2(r2, 0x2201, &(0x7f0000001200)="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")
ioctl$auto(r1, 0x3b8e, r0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000})
lstat$auto(0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x6)
bind$auto(r3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6b)
modify_ldt$auto(0x1, 0x0, 0x10)
r4 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x4221c0, 0x0)
read$auto_mgts_fops_(r4, &(0x7f0000000180)=""/91, 0x5b)
shutdown$auto(0x200000003, 0x2)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sysfs$auto(0x2, 0x20, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0)
select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x2, 0x8000000000000203, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x1fe, 0x8, 0xc]}, 0x0, 0x0)

31.788275264s ago: executing program 4 (id=2869):
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x2100000, 0x7fffffff, 0xfffffffffffffffe, 0x1, 0x0, 0x2000000000000e8, 0x0, 0x4, 0x0, 0x8})
close_range$auto(0x2, 0x8, 0x0) (async)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/power/autosuspend\x00', 0xc0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) (async)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x40502, 0x0) (async)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f00000002c0)={{0x0, <r3=>0xffffffffffffffff, 0xee01, 0xe9, 0x4, 0x1, 0x2}, 0x8, 0x40, 0xf, 0x7, @inferred, @raw=0x3ddc, 0x3, 0x0, &(0x7f0000000200)="6cab38c71a0f8148f420139b0a58755e2c5241aa129f87004a35b6445f2b8a40ed7a5d6dc99befe1c33f04e32ece6f5cd6e9844f6cd46ee8768e5890785204920b7dc3dbf37b3ceaeff6634f039e719e3a2544ec6b27cab2c9e49ca453fec50be4717034fc65f1264195d8a63a0d380ab31b4529798fc6a32631d71a518d59938cf09ff04dff7f54bc3d40405d06acbddede28581e686583c32b14c0ea8543897f1f2abeb6f77b0298f6d16afbb951ddeca573dd5cb07a839f80858193254316", &(0x7f0000000040)}) (async)
msgctl$auto(0x80000000, 0x2, &(0x7f0000000340)={{0xfffffff7, <r4=>0xee00, 0xffffffffffffffff, 0x3, 0x0, 0x9, 0x9}, &(0x7f00000000c0)=0x2, &(0x7f0000000180)=0x2, 0xfffffffffffffff9, 0x915, 0x1, 0x1, 0xa9e8, 0x4, 0xc, 0x1, @raw=0x7fffffff, @raw=0x2})
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_PACKET={0x12, 0x1, "d0ede06d80966100e4e2eac9a64d"}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x6}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x3}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x6}, @OVS_PACKET_ATTR_ACTIONS={0x27b, 0x3, 0x0, 0x1, [@nested={0x1c, 0xf2, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x14, 0x2f, 0x0, 0x0, @ipv6=@empty}]}, @generic="94628c2b33c826ac5a53ac29db3012be96b8b876e9aaa39a94dea2334da9bfde2884925b5d27012ce404f90bb0d6e28a3c2b107061a4bf", @nested={0x72, 0x7d, 0x0, 0x1, [@generic="3c020139dd710eb90bc321186a62335c13418486a953be6f21b38207688a3a9283ccd02e1f790458c0dc15c5927dfe6a64421fead2f7ac8406daedd5ed945eac11f58017b321af7fbee391d3105c85f593aa6c1da351294570b620a5865c503ec3060a8b51e1143a35a2e3ced152"]}, @generic="2adc0a3f4bef", @nested={0xd3, 0x27, 0x0, 0x1, [@nested={0x4, 0x58}, @generic="581674ce17e3e775dca2d4dfbce2ea2036c65426204d6ca78eb7c79ff06c4aa5b9520d0cdcd6679b0bfed8755d967b49f6f1963ac70e0aa7416ad726c039e5226be0151631a4b8f7b2651619077db820c73567ac92304b5f38a80394daf1cf16c117624d8b43f0b4b01088defa589bc1107fdbec6237bc87", @nested={0x4, 0x13d}, @generic="4e41fea78888e61c0119444a4ab6eb1bbbc4e503902d8f271b88523b25c4ab46a5200d", @typed={0x8, 0x134, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x50}, @typed={0x14, 0x14c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @typed={0x8, 0xdf, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x129}]}, @nested={0xaa, 0x84, 0x0, 0x1, [@nested={0x4, 0x43}, @generic="70c430a897a2b215985b39f66008926d584f0f298791c76cf95db5fa2b8102e89115c20fde6fc7805afcf192927a7a953d3f2361fb23599f17f82ea6df120105d86235fdfc3f496ea80b20df2d94b83d3071cfd57aeb90134c7226596d1116ecdb6986bda3983c3f6bd7ef270dabcb7768ef2c731d11863a51323f44833469e23a97d39d4fbbd186b5d83ef5bdbd8c82d34420ae9deaf7aa44ba17062849c65df1ca"]}, @generic="0da4ec734b704f2744fd927867", @generic="aa3700776dde4830282190b1316e1884de25497c475b9a4f337de2b680"]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8104}, 0x0) (async)
ioctl$auto(0x3, 0xae41, r1)

31.432600357s ago: executing program 2 (id=2872):
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x20900, 0x0)
openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0)
openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim5/ports/2/ipsec\x00', 0x389100, 0x0)
r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
bpf$auto_BPF_TASK_FD_QUERY(0x14, 0x0, 0x3)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r5)
read$auto(r5, &(0x7f0000000100)='nl80211\x00', 0xbe62)
sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20048014)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="10"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001)
r6 = ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000380)=0x6)
r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000400), r4)
sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r6, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x228, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x40, 0x15, "6b0f26fc6114e09cbda3a6646133be01c073177e91e4a577279353b854c2572db03f1567fbd15efbce552f1f10ab73ee9850e99e486fd583057c9dae"}, @HWSIM_ATTR_CIPHER_SUPPORT={0x65, 0x18, "bd8ee0dac1524a2b76006ea380ae4b8612c46c30fbee8a928b8fc584aab56c72fd3d8ee2e0c3a29adf0396643635552dc571cc315e6f2fc7bc0be01ed25f53a8ab6b2386fe578dfca55d2e26c6b1368c37f038e8209da40eee1daec18b0406096e"}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_PMSR_SUPPORT={0x84, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x7}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x70, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x5f}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x8000}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}]}]}]}, @HWSIM_ATTR_CIPHER_SUPPORT={0xe1, 0x18, "ef3c753823363aeb232e152356412e7b5c9cc94c4948bdaf5c50daea3749311865854ab2945d5c45b6733d7e2584f4f3e12016c35f7f13a5d69de787dd65477beff1e17d55cf6e38b627e8d91d9f745addb50160e9a3b763ac88c88b3bcb3849a51cc2d64d9c8a7d1e129890d7b98b0c25d8e424155a11e96d6a2390711ee8339fec9c3596e811e605ec26fb14e2be827035e3b81e95a88d5374cdbd4f3a1e8c5f2a99e5b27153a4ce76eab34601901eaed6d5a9c6a060bd0cba72d64bc3ec2a707386386012ad4396e79e147a0f636b358cab69b635fdf573bb772c21"}]}, 0x228}, 0x1, 0x0, 0x0, 0x44080}, 0x8050)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x20004, 0x20d3e, 0x1, 0x6, 0x100000003, 0x800295f4da0d, 0x5, 0x3, 0x62, 0x80000001, 0x50a7, 0x33, 0x6, 0xfffffffffffffff8, 0x3]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)

31.260389173s ago: executing program 4 (id=2873):
fsconfig$auto(0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0)
connect$auto(0x3, 0x0, 0x54)
mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000)
mmap$auto(0x0, 0x20005, 0x4000000000df, 0xd7, 0x401, 0x8000)
r0 = socket(0x15, 0x5, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r1 = socket(0xa, 0x1, 0x84)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
ioctl$auto_FIOASYNC(r1, 0x5452, 0x6)
setsockopt$auto(r0, 0x114, 0xa, 0x0, 0x4)
close_range$auto(r0, r0, 0x2)
socket(0x2, 0x801, 0x106)
r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event1\x00', 0x2e49c1, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0xffffffffffffffff, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r4 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$auto_SO_RCVMARK(r3, 0x7, 0x4b, &(0x7f00000001c0)='#/](-*\xa6-,)@}\x00', 0xffe)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40841}, 0x40000)
ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r3)
ioctl$auto(0x3, 0xae41, r2)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r7, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92)
sendfile$auto(r5, 0x3, 0x0, 0xc01)
unshare$auto(0x40000080)

29.867706942s ago: executing program 0 (id=2876):
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
bpf$auto(0x6, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0xedf, 0x2, 0xfffeffff}, 0x1) (async)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20008000) (async)
write$auto(0xffffffffffffffff, 0x0, 0x1) (async)
unshare$auto(0x40000080) (async)
r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ppoll$auto(&(0x7f0000000140)={r0, 0x40, 0x2}, 0xb, &(0x7f0000000180)={0x1, 0x8}, 0x0, 0x8) (async)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x15) (async)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x6, 0x4000000200de, 0xeb1, 0x404, 0x8000)
sendmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x5925, &(0x7f0000000240)={0x0, 0x6371}, 0xb934, 0x0, 0x9, 0x7f}, 0xbc1) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async)
r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$auto(r3, 0x29, 0x16, 0x0, 0x2) (async)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) (async)
ioctl$auto(r2, 0x40246f4c, 0x38) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
read$auto(r1, 0x0, 0x8000) (async)
pwrite64$auto(r1, 0x0, 0x2, 0x1000000002)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4004040)

28.979870984s ago: executing program 2 (id=2877):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x3, 0x6)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
io_uring_setup$auto(0x2, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
socketpair$auto(0x5b, 0x1, 0x420000, 0x0)
r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setresuid$auto(0x2, 0x7, 0x8080)
r2 = pidfd_open$auto(0x1, 0x0)
process_madvise$auto(r2, 0x0, 0x3, 0x0, 0x8000000000000000)
ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0)
ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0)
keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7)
syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
socket(0x11, 0x80003, 0x300)
mmap$auto(0x4, 0x4, 0x7c, 0x40000000000eb4, 0x401, 0x7)
open(&(0x7f0000000800)='./file0\x00', 0x2a641, 0x154)

28.398675978s ago: executing program 2 (id=2879):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0)
sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "aaf7ebdee8a7f656"}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x7, 0x1f, "b9bbf3"}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x21, 0x14e, "5ebbe335e6c360a83b2df8fba5677a5e23ecb6b9a6a7cb504301d4aa8b"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x40440c1)
bpf$auto(0x3, &(0x7f0000000080)=@link_detach={<r3=>r0}, 0x7)
r4 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x40, 0x0)
ioctl$auto_EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x1df, r4, 0x7, 0xdd, 0x4b6b, 0x405})
sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f00000001c0)={0x20, r1, 0xbb484b3ccf0b22b, 0x70bd2b, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = pidfd_open$auto(0x1, 0x0)
setns(r6, 0x60020000)
umount2$auto(&(0x7f0000000080)='.\x00\x17\xe7\xcbK\x17\xa2\xa0\x9a\xf6\x81\xee\xbfB\x9d\x8cL\xc9 \f\xd5\x1f\xf5\xd0\xe2\xfb\x1bG[\x0e\v\xbcq\xa1(Gz\xd7\x02Viw@\x8c9 \xee\x8a\x04\xe7\xd6\xc5\xc6_\xb2\ndUsI\xd8o\x00\x00\x00\xff\xe4\xed^0\xed\xc5\tg\x91\x87\xb5\xa9\xcd\xde\xf2L\x10VL$\xb3\xd4\x89\x01Y@%v\xa2\a\x98G\xf1\x0eMg\xe1p5u\xb3E\xfc\x1c\xd2-\xe4\\;nQJ', 0x8)
r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r5)
ioprio_set$auto(0x1, 0x0, 0x80)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r8=>0x0})
sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000004ec0), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_NOOP(r9, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004f00)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40)
mmap$auto(0x0, 0x103, 0x327, 0xeb1, r0, 0x5)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x25, 0x1, 0x0)
r11 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0)
r12 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0)
write$auto(r12, 0x0, 0x6)
read$auto(r11, 0x0, 0x85)

28.277518331s ago: executing program 4 (id=2880):
unshare$auto(0x40000080)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
open_by_handle_at$auto(r0, &(0x7f0000001300)={0x3, 0xff, "412df4"}, 0xff)
close_range$auto(0x2, 0x8, 0x0)
r1 = open(0x0, 0x2a8500, 0x19f)
statx$auto(r1, 0x0, 0x1003, 0x4005, 0x0)
socket(0x1, 0x5, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
r2 = socket(0x1d, 0x3, 0x1)
bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a)
setsockopt$auto(r2, 0x65, 0x1, 0x0, 0x0)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xffe}, 0x1, 0x0, 0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x2a001, 0x0)
write$auto(r4, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
ioctl$auto(0x3, 0x4058534c, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r5)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c040}, 0x40001)

28.060452074s ago: executing program 2 (id=2881):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x2, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9)
mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000)
r0 = getpgrp(0x0)
ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r0)
read$auto(0xffffffffffffffff, 0x0, 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vgem/gem_names\x00', 0x62000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x22, 0x2, 0x2)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000)
socket(0x10, 0x2, 0x0)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0x100, 0x10003, 0x100000001, 0x4})
r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0)
ioctl$auto_FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000080)="252bf8abe8")

27.644391172s ago: executing program 2 (id=2882):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r1=>0x0})
r2 = clone$auto(0x200, 0xa, &(0x7f00000000c0)=0x9, &(0x7f0000000240)=0xdae, 0x1)
bpf$auto(0x7ff, &(0x7f0000000340)=@link_create={@map_fd=r0, @target_ifindex=r1, 0x8, 0x7, @uprobe_multi={0xf122, 0x9, 0x3, 0xffff, 0x9, 0x4, r2}}, 0x2d9a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0)
r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
getsockopt$auto_SO_RCVMARK(r3, 0x0, 0x4b, 0x0, 0x0)
sendto$auto(r4, &(0x7f0000000140)="c99b97a4a18833a72aff5c6edec12838e6c36aa3b8efa7e23eab4f993ce66256c3ee1fa1470cc34d0844ef66ea5db21196afca7b6062c22e25bd38ff3a8ffce75c51cd146c42cece3a3c2eb0447313f733c79892b36978f22e11d89e044a5b7bc7cdd5b31fdb70dc8e1742fcffaaf5320703e7538d2d3b504ec3a67c52bf6efbf9e534702706e6a69a3fede118ad99154fc7e5e32bfbee8042e6352c285efc95675ed362f8255371c3422c3232332f10f51ccf72cabaf2fe303f88bf7d5b99b4c4139c4450af0df371", 0x0, 0x1e71, &(0x7f0000000000)=@can, 0x2)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0)
mlockall$auto(0x7)

26.915498562s ago: executing program 4 (id=2883):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x2, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x5, 0x2000000000002)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x26, 0x80805, 0x0)
socket(0xa, 0x3, 0x6)
r3 = clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6)
bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_fd=r2, r1, 0x99, 0x2, 0x1, @relative_fd, 0x9}, 0xaf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6)
r4 = socket(0x840000000002, 0x3, 0xff)
fcntl$auto_F_OFD_GETLK(r4, 0x24, 0x2)
msgctl$auto(0x7ff, 0x1, &(0x7f0000000300)={{0xbc, <r5=>0xee01, 0xee00, 0x80000000, 0x3, 0x1, 0x5}, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x1, 0x7, 0x1b820dbd, 0x5, 0x9, 0x39, 0x1800, 0x200, 0x3, @raw=0x7, @inferred=r3})
r6 = clone$auto(0x9, 0x7ff, &(0x7f0000000180)=0x9, &(0x7f0000000280)=0x5, 0x9)
sendmsg$auto_ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000001880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000000380)={0x1490, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x13b6, 0x2, 0x0, 0x1, [@generic="cc6ae7315bfcbedb7ffc77f451048731f8ff9864cd21b884d8aff29dfc7c72c5fca10c20042f61e0d68b6273801eb0119ac3c0138401", @typed={0x8, 0x56, 0x0, 0x0, @uid=r5}, @typed={0x4, 0x4f}, @typed={0x8, 0x10c, 0x0, 0x0, @pid=r6}, @generic="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", @typed={0x8, 0x70, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x5c, 0x4, 0x0, 0x1, [@generic="0de857dc51a4a3b3ff425faa5cd8f322e613de6060d45ef88d558dbf8a2cdee97f5baff5de00802722dc3ca01626af8e9810e6f1c933488638781481ea998e8bb7d25cf8ce8dcdf3", @nested={0x4, 0x3f}, @nested={0x4, 0x10f}, @typed={0x8, 0x82, 0x0, 0x0, @pid}]}, @generic="8855c5900a838cbe3290e6a6bf252d9d02ab076fd93e896c31e60834bcea5bc8af8a167fb9621d9265cc8c22532665652f58d6c6d8b7c6a9e36592eb855a55e4c96a75de98be891679eb39453b4813535333462a06a0c463854db69bb2043fff9c0021dc0f5214d60616a9c07ed452d67f311d4ddd441b34427299cf336a53d36ffd8f1d582d20c79b8dc8cf6fe6300fa72c6ffbe869bf21b2dd3f62d716da2effaf72f012a636291a77dec7ad6e38d0de3f9ec7e579dbaa", @nested={0x24b, 0x13c, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @u32=0x3}, @generic="2f902e084c68326b09d4cf5f39f647816ac6b7f02e00e62c", @generic="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", @generic="e6267303edf58ae115238fe350e6f90a49d1cf6ee3a28dbbc6db45d401af17d4747a05f5bc04ef1fb474ff111668f56b8a2f3f6aaf61ce6feee2275b3142141d4652c423d9c762832ccadebb8ed00992038a30cc798bca7a55c262805e0aac20ae12bcfa4c04fda479f19bedb077f14888d9bbd67b780b6a55e37115f6bd11afdf85e11557658c5dbf3ef6c5f33bfa24826cf0985610d162f8b0b895d5b4c77f214b80a8b389a1a3bed4a28137b52697201a23acf41455a4bb9d21b913c0c3a039a7", @typed={0xa, 0xda, 0x0, 0x0, @str=',\\())\x00'}, @generic="4da73c75d5d3faa51f1e9a10f46e7260f7b0bc2191be49c4d45d1f5e1a72ae0e5f055f1e155e7e04a38df74e319d14252376de0731173e3d06c21894674319af0f0daa870696714a1d2fd62978df96366e5c2b4e28b28257aca7986114cb"]}]}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0x1490}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

26.50508113s ago: executing program 4 (id=2884):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
mmap$auto(0x0, 0x40000a, 0x80000001, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x121000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, 0x0, 0x68)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0)
write$auto(r2, 0x0, 0x1e1)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x2b, 0x1, 0x1)
statmount$auto(0x0, 0x0, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
read$auto(r3, 0x0, 0x1ff)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
fsconfig$auto_XFS_DAX_ALWAYS(r4, 0x0, 0x0, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4, 0x0)

26.268499707s ago: executing program 0 (id=2885):
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, 0x0, 0x1e1)

25.663431393s ago: executing program 0 (id=2886):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
r1 = socket(0x11, 0x3, 0x0)
mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000)
r2 = io_uring_setup$auto(0x89, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2)
sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="c0040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c0}, 0x1, 0x0, 0x0, 0x20000090}, 0x4891)
close_range$auto(0x2, 0xa, 0x0)
setsockopt$auto_SO_RCVTIMEO_NEW(r1, 0x1ff, 0x42, &(0x7f0000000040)=']J\x00', 0xc5dc)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r4)
sendmsg$auto_IPVS_CMD_GET_DEST(r4, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r5, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0x15, 0x5, 0x0)
getsockopt$auto(r6, 0x114, 0x2714, 0xfffffffffffffffc, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5)
read$auto(0x3, 0x0, 0x8080)
mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r7 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000)
recvmmsg$auto(r8, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0)
write$auto_proc_clear_refs_operations_internal(r7, 0x0, 0xffffff4b)

22.769272883s ago: executing program 0 (id=2892):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fcff26bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdb, 0x9b72, 0x2, 0x40000008000)
mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r2, 0x0, 0xe8)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000)
capget$auto(0x0, 0xfffffffffffffffe)
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
socket(0x29, 0xa, 0xaa)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
futex$auto(0x0, 0x5, 0xfffff05e, 0x0, 0x0, 0x80000001)
gettid()
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0)
close_range$auto(0x2, 0x8, 0x0)

19.99245288s ago: executing program 0 (id=2893):
close_range$auto(0x2, 0x8, 0x0)
acct$auto(&(0x7f0000000180)='/\xfb0[A\x94dal\xf7\x8ds\xaa\x06\x00\xf4\x97dev/fb0\x00>\x9a\"\xb2\x1e\xfa\xea_\xe2\xeeQ\x1e\xe1\x10\xa4\xd6P\x15K\xc4<\x85\x12\x8aT\xa5\xd7\xc5\xa2h\x94\xfd|\xc8h\v>\xf3=\xa8\xa4/\xe1\xe8m\xf9VY\x8a\xa8\x01\x16%\x8c\xd4\xfa\xe9\x1b\x14\x17\v\xbf\xd2\xb5\n\x9f;\x17\x96I\xe0\x8c\x80\xb9QBt\xd0\x11\xbe\x1e\x92sa\x92c\v\x7f\x17\xd2r\x819\x91')
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000)
socket(0xa, 0x801, 0x84)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket(0x2, 0x80802, 0x0)
setsockopt$auto(r0, 0x11, 0x64, 0x0, 0x8)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x202, 0x0)
r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0)
ioctl$auto(r1, 0x3b8e, r1)
shutdown$auto(0x200000003, 0x2)
select$auto(0x5, 0x0, &(0x7f0000000100)={[0x9, 0x200, 0x2, 0x8000000000000203, 0x9, 0x3, 0x6, 0x7, 0xd886, 0x5e58296b, 0x341, 0x41, 0x7, 0x1fe, 0x8, 0xc]}, 0x0, 0x0)

19.786912883s ago: executing program 0 (id=2894):
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, 0x0, 0x1e1)

11.058736273s ago: executing program 33 (id=2884):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
mmap$auto(0x0, 0x40000a, 0x80000001, 0x9b72, 0xffffffffffffffff, 0x8000)
openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sctp/eps\x00', 0x121000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, 0x0, 0x68)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0)
write$auto(r2, 0x0, 0x1e1)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
socket(0x2b, 0x1, 0x1)
statmount$auto(0x0, 0x0, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000)
socket(0x10, 0x2, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
read$auto(r3, 0x0, 0x1ff)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
fsconfig$auto_XFS_DAX_ALWAYS(r4, 0x0, 0x0, 0x0, 0x1)
sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x4)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4, 0x0)

4.719040237s ago: executing program 34 (id=2894):
r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
write$auto(r0, 0x0, 0x1e1)

3.347458339s ago: executing program 3 (id=2924):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0)
io_uring_setup$auto(0x9, 0x0)
ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r0, 0x8, 0x3)
fanotify_init$auto(0x65, 0x2)
openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x201, 0x6, 0x74, 0x6, 0x64, 0xa, 0x7, 0x8000000008, 0x80000000009, 0x8, 0x81000003, 0x3, 0x10004, 0x9, 0x1, 0xffffffffffffffff]}, 0x0)
writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x100000001}, 0xa78)
read$auto(0x3, 0x0, 0x80)
readv$auto(r0, &(0x7f0000000000)={0x0, 0x6}, 0x8)
io_uring_setup$auto(0x6, 0x0)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0)
ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c01, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/snd_dummy.0/sound/card0/mixer/power/runtime_active_time\x00', 0xa0000, 0x0)
unshare$auto(0x40000080)
pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc429)
mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
unshare$auto(0x200)
r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="375e0004", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250500000008000a0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010)

2.735117239s ago: executing program 3 (id=2925):
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
socket(0x2c, 0x1, 0x0)
listen$auto(0x3, 0x81)
socket(0x15, 0x2, 0x1)
mmap$auto(0x0, 0x400008, 0x5, 0x36, 0x2, 0x6) (async)
mmap$auto(0x0, 0x400008, 0x5, 0x36, 0x2, 0x6)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) (async)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) (async)
mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2)
mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000)
fsopen$auto(0x0, 0x1)
prctl$auto(0x3f, 0x1, 0x0, 0xd6f, 0x4)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffc)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
shutdown$auto(0x200000003, 0x2)
getpid() (async)
r3 = getpid()
process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0)
rt_sigqueueinfo$auto(r3, 0x8000, &(0x7f0000000040)={@_si_pad})
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async)
recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0)
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(0x0, r1)
mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000) (async)
mmap$auto(0x2, 0x1, 0x4000000000df, 0x78, r1, 0x300000000000)
socket(0x1d, 0x3, 0x1)
ioctl$auto_BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0)
sendfile$auto(r4, r4, 0x0, 0x3) (async)
sendfile$auto(r4, r4, 0x0, 0x3)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)

1.952463865s ago: executing program 3 (id=2926):
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x100, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x1800)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0)
close_range$auto(0xffffffffffffffff, 0x8, 0x2)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044)
ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
ioctl$auto(0x3, 0xae41, r0)
ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f0000000100)={0xdd, 0x0, [{0x1000, 0x8001, 0x1}, {0x2, 0x3ff, 0x100000000}, {0x8, 0x5, 0x2}]})
ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0x17, 0x401, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x1f40)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x49a300, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x28, 0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0)
ioctl$auto(r5, 0x545c, 0xffffffffffffffff)

1.028463026s ago: executing program 3 (id=2927):
mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000)
close_range$auto(0x0, 0x5, 0x0)
r0 = socket(0x2c, 0x80003, 0x0)
setsockopt$auto(r0, 0x11b, 0x4, 0xffffffffffffffff, 0x18)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/cpu/vulnerabilities/l1tf\x00', 0x0, 0x0)
read$auto(r1, &(0x7f0000000200)='\x00', 0xb)
sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000140)='\t', 0x1)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/hid/drivers/plantronics/bind\x00', 0x204800, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0)
mkdir$auto(0x0, 0x353)
sendfile$auto(r3, r3, 0x0, 0x7ff)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x400, 0x0)
socketpair$auto(0x1e, 0x40006, 0xc, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx2\x00', 0x202041, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

728.583046ms ago: executing program 3 (id=2928):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2b, 0x1, 0x1)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0)
openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0)
socket(0x29, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0)
socket(0x29, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc7c, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050)
setsockopt$auto_SO_BUSY_POLL_BUDGET(r1, 0x4, 0x46, &(0x7f0000000180)='/sys/devices/platform/vhci_hcd.3/usb16/authorized\x00', 0xfdb)
sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.3/usb16/authorized\x00', 0x202000, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/94, 0x5e)
acct$auto(&(0x7f0000000c40)='/sys/kernel/security/tomoyo/query\x00')
openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x0, 0x0)

332.451372ms ago: executing program 3 (id=2929):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)="9f85cf286e690a39c96ca787d660f842d79034b08e1d7c5f96c12f52800da8ae389ca711110ba077f1b3be9132bcce7cc14d582ce737ed70b457bf7cd0ba468fc49e277a902492c3eb630e4794b9447badc9fe5cd519b489fd8c92a89375fb230bb45431017558a2d7cb7a1b8d3587c08251aa8e25d316f4d82d7e8d2e9edf2fcb8523a57f589e1ab0")
ioctl$auto(0x3, 0xc0585605, 0x38)

0s ago: executing program 35 (id=2929):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0)
ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)="9f85cf286e690a39c96ca787d660f842d79034b08e1d7c5f96c12f52800da8ae389ca711110ba077f1b3be9132bcce7cc14d582ce737ed70b457bf7cd0ba468fc49e277a902492c3eb630e4794b9447badc9fe5cd519b489fd8c92a89375fb230bb45431017558a2d7cb7a1b8d3587c08251aa8e25d316f4d82d7e8d2e9edf2fcb8523a57f589e1ab0")
ioctl$auto(0x3, 0xc0585605, 0x38)

kernel console output (not intermixed with test programs):

    L      syzkaller #0 PREEMPT(full) 
[  717.449249][T16701] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  717.449255][T16701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  717.449265][T16701] Call Trace:
[  717.449271][T16701]  <TASK>
[  717.449278][T16701]  dump_stack_lvl+0x100/0x190
[  717.449306][T16701]  should_fail_ex.cold+0x5/0xa
[  717.449322][T16701]  ? prepare_alloc_pages+0x16d/0x5f0
[  717.449340][T16701]  should_fail_alloc_page+0xeb/0x140
[  717.449358][T16701]  prepare_alloc_pages+0x1f0/0x5f0
[  717.449378][T16701]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  717.449400][T16701]  ? buffer_subbuf_size_write+0x182/0x280
[  717.449423][T16701]  ? do_writev+0x13e/0x340
[  717.449443][T16701]  ? do_syscall_64+0x106/0xf80
[  717.449460][T16701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.449485][T16701]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  717.449520][T16701]  ? rcu_is_watching+0x12/0xc0
[  717.449543][T16701]  ? trace_kmalloc+0x101/0x130
[  717.449558][T16701]  ? __kasan_kmalloc+0xaa/0xb0
[  717.449582][T16701]  __alloc_pages_noprof+0xb/0x1b0
[  717.449603][T16701]  alloc_cpu_data+0x60/0x130
[  717.449622][T16701]  __rb_allocate_pages+0x6a5/0xf50
[  717.449647][T16701]  ring_buffer_subbuf_order_set+0x3ef/0x18c0
[  717.449673][T16701]  ? tracing_stop_tr+0xf6/0x210
[  717.449695][T16701]  ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10
[  717.449715][T16701]  ? __pfx___might_resched+0x10/0x10
[  717.449738][T16701]  ? iovec_from_user+0xda/0x140
[  717.449757][T16701]  buffer_subbuf_size_write+0x182/0x280
[  717.449781][T16701]  ? __pfx_buffer_subbuf_size_write+0x10/0x10
[  717.449806][T16701]  ? iov_iter_advance+0xac/0x6d0
[  717.449831][T16701]  ? __pfx_buffer_subbuf_size_write+0x10/0x10
[  717.449854][T16701]  vfs_writev+0x5ea/0xe10
[  717.449875][T16701]  ? rcu_is_watching+0x12/0xc0
[  717.449900][T16701]  ? __pfx_vfs_writev+0x10/0x10
[  717.449920][T16701]  ? fdget_pos+0x2aa/0x380
[  717.449949][T16701]  ? __fget_files+0x21f/0x3d0
[  717.449967][T16701]  ? do_writev+0x13e/0x340
[  717.449986][T16701]  do_writev+0x13e/0x340
[  717.450008][T16701]  ? __pfx_do_writev+0x10/0x10
[  717.450035][T16701]  do_syscall_64+0x106/0xf80
[  717.450052][T16701]  ? clear_bhb_loop+0x40/0x90
[  717.450073][T16701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.450089][T16701] RIP: 0033:0x7fe78ab9c799
[  717.450103][T16701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  717.450118][T16701] RSP: 002b:00007fe78ba95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  717.450133][T16701] RAX: ffffffffffffffda RBX: 00007fe78ae15fa0 RCX: 00007fe78ab9c799
[  717.450143][T16701] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000008
[  717.450153][T16701] RBP: 00007fe78ac32c99 R08: 0000000000000000 R09: 0000000000000000
[  717.450162][T16701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  717.450171][T16701] R13: 00007fe78ae16038 R14: 00007fe78ae15fa0 R15: 00007ffc9c024ae8
[  717.450192][T16701]  </TASK>
[  718.831698][T16710] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32
[  719.553691][T16721] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff
[  720.396810][T16740] vivid-007: =================  START STATUS  =================
[  720.468131][T16740] vivid-007: Generate PTS: true
[  720.473054][T16740] vivid-007: Generate SCR: true
[  720.535970][T16740] tpg source WxH: 320x240 (Y'CbCr)
[  720.598186][T16740] tpg field: 1
[  720.641235][T16740] tpg crop: (0,0)/320x240
[  720.717022][T16740] tpg compose: (0,0)/320x240
[  720.815141][T16740] tpg colorspace: 8
[  720.881200][T16740] tpg transfer function: 0/0
[  720.977127][T16740] tpg Y'CbCr encoding: 0/0
[  720.998637][T16736] Invalid ELF header magic: != ELF
[  721.045858][T16740] tpg quantization: 0/0
[  721.104690][T16740] tpg RGB range: 0/2
[  721.183159][T16740] vivid-007: ==================  END STATUS  ==================
[  723.290072][T16803] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  726.287094][T16837] GUP no longer grows the stack in syz.1.2466 (16837): 14000-41000 (4000)
[  726.408246][T16837] CPU: 0 UID: 0 PID: 16837 Comm: syz.1.2466 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  726.408276][T16837] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  726.408281][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  726.408291][T16837] Call Trace:
[  726.408297][T16837]  <TASK>
[  726.408303][T16837]  dump_stack_lvl+0x100/0x190
[  726.408332][T16837]  gup_vma_lookup.cold+0x83/0x96
[  726.408355][T16837]  __get_user_pages+0x241/0x34d0
[  726.408378][T16837]  ? down_read_killable+0x30e/0x4c0
[  726.408400][T16837]  ? __lock_acquire+0x4a5/0x2630
[  726.408418][T16837]  ? __pfx___get_user_pages+0x10/0x10
[  726.408449][T16837]  __gup_longterm_locked+0x87d/0x16f0
[  726.408473][T16837]  ? __pfx___gup_longterm_locked+0x10/0x10
[  726.408492][T16837]  ? try_get_folio+0x262/0x750
[  726.408507][T16837]  ? find_held_lock+0x2b/0x80
[  726.408521][T16837]  ? sanity_check_pinned_pages+0x5f6/0x1250
[  726.408541][T16837]  gup_fast_fallback+0x18c6/0x2460
[  726.408572][T16837]  ? __pfx_gup_fast_fallback+0x10/0x10
[  726.408589][T16837]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  726.408605][T16837]  ? is_bpf_text_address+0x94/0x1a0
[  726.408629][T16837]  ? __kernel_text_address+0xd/0x30
[  726.408649][T16837]  ? unwind_get_return_address+0x59/0xa0
[  726.408669][T16837]  pin_user_pages_fast+0xa7/0xf0
[  726.408686][T16837]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  726.408708][T16837]  iov_iter_extract_pages+0xa0d/0x1ef0
[  726.408728][T16837]  ? __blkdev_direct_IO_simple+0x112/0x890
[  726.408817][T16837]  ? kasan_save_stack+0x3f/0x50
[  726.408839][T16837]  ? kasan_save_stack+0x30/0x50
[  726.408860][T16837]  ? kasan_save_track+0x14/0x30
[  726.408881][T16837]  ? __pfx_iov_iter_extract_pages+0x10/0x10
[  726.408896][T16837]  ? blkdev_direct_IO+0xc76/0x1fb0
[  726.408912][T16837]  ? blkdev_write_iter+0x703/0xd70
[  726.408929][T16837]  ? vfs_write+0x6ac/0x1070
[  726.408953][T16837]  ? __lock_acquire+0x4a5/0x2630
[  726.408975][T16837]  iov_iter_extract_bvecs+0x10e/0xf40
[  726.408994][T16837]  ? find_held_lock+0x2b/0x80
[  726.409007][T16837]  ? bio_associate_blkg_from_css+0x394/0x13f0
[  726.409058][T16837]  ? __pfx_iov_iter_extract_bvecs+0x10/0x10
[  726.409076][T16837]  ? bio_associate_blkg_from_css+0x550/0x13f0
[  726.409098][T16837]  bio_iov_iter_get_pages+0x26a/0x970
[  726.409153][T16837]  __blkdev_direct_IO_simple+0x3a7/0x890
[  726.409176][T16837]  ? __pfx___blkdev_direct_IO_simple+0x10/0x10
[  726.409212][T16837]  ? ktime_get_coarse_real_ts64_mg+0x249/0x300
[  726.409230][T16837]  ? ktime_get_coarse_real_ts64_mg+0x1e0/0x300
[  726.409254][T16837]  blkdev_direct_IO+0xc76/0x1fb0
[  726.409281][T16837]  ? __pfx_blkdev_direct_IO+0x10/0x10
[  726.409298][T16837]  ? rcu_is_watching+0x12/0xc0
[  726.409320][T16837]  ? __mark_inode_dirty+0x55c/0x1790
[  726.409340][T16837]  ? filemap_check_errors+0xa9/0x150
[  726.409362][T16837]  blkdev_write_iter+0x703/0xd70
[  726.409384][T16837]  vfs_write+0x6ac/0x1070
[  726.409407][T16837]  ? __pfx_blkdev_write_iter+0x10/0x10
[  726.409427][T16837]  ? __pfx_vfs_write+0x10/0x10
[  726.409456][T16837]  ? find_held_lock+0x2b/0x80
[  726.409483][T16837]  ksys_write+0x12a/0x250
[  726.409497][T16837]  ? __pfx_ksys_write+0x10/0x10
[  726.409516][T16837]  do_syscall_64+0x106/0xf80
[  726.409535][T16837]  ? clear_bhb_loop+0x40/0x90
[  726.409553][T16837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.409569][T16837] RIP: 0033:0x7f572ed9c799
[  726.409583][T16837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.409598][T16837] RSP: 002b:00007f572fc11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  726.409614][T16837] RAX: ffffffffffffffda RBX: 00007f572f015fa0 RCX: 00007f572ed9c799
[  726.409625][T16837] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000003
[  726.409634][T16837] RBP: 00007f572ee32c99 R08: 0000000000000000 R09: 0000000000000000
[  726.409643][T16837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  726.409652][T16837] R13: 00007f572f016038 R14: 00007f572f015fa0 R15: 00007ffe4c43fef8
[  726.409673][T16837]  </TASK>
[  729.094277][T16866] Process accounting paused
[  729.209345][T16885] random: crng reseeded on system resumption
[  729.300701][T16885] Unrecognized hibernate image header format!
[  729.340453][T16885] PM: hibernation: Image mismatch: architecture specific data
[  730.240358][T16902] Invalid ELF header magic: != ELF
[  732.375417][T16903] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  736.541286][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2490'.
[  739.259441][T16960] Bluetooth: hci4: command 0x0406 tx timeout
[  740.210665][T16991] bond0: no command found in slaves file - use +ifname or -ifname
[  740.454878][T16987] FAULT_INJECTION: forcing a failure.
[  740.454878][T16987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.619975][T16987] CPU: 0 UID: 0 PID: 16987 Comm: syz.3.2501 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  740.620003][T16987] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  740.620009][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  740.620019][T16987] Call Trace:
[  740.620024][T16987]  <TASK>
[  740.620030][T16987]  dump_stack_lvl+0x100/0x190
[  740.620057][T16987]  should_fail_ex.cold+0x5/0xa
[  740.620075][T16987]  _copy_from_user+0x2e/0xd0
[  740.620090][T16987]  get_timespec64+0x8b/0x1b0
[  740.620108][T16987]  ? __pfx_get_timespec64+0x10/0x10
[  740.620122][T16987]  ? ktime_get+0x200/0x300
[  740.620141][T16987]  __x64_sys_futex+0x21a/0x4d0
[  740.620162][T16987]  ? __pfx___x64_sys_futex+0x10/0x10
[  740.620188][T16987]  do_syscall_64+0x106/0xf80
[  740.620206][T16987]  ? clear_bhb_loop+0x40/0x90
[  740.620227][T16987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.620242][T16987] RIP: 0033:0x7fe78ab9c799
[  740.620262][T16987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.620277][T16987] RSP: 002b:00007ffc9c024c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  740.620292][T16987] RAX: ffffffffffffffda RBX: 00000000000b4bb5 RCX: 00007fe78ab9c799
[  740.620302][T16987] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe78ae1618c
[  740.620311][T16987] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000
[  740.620319][T16987] R10: 00007ffc9c024d50 R11: 0000000000000246 R12: 00007ffc9c024d70
[  740.620328][T16987] R13: 00007fe78ae1618c R14: 00000000000b4be7 R15: 00007ffc9c024d50
[  740.620347][T16987]  </TASK>
[  741.007074][T16998] zswap: compressor  not available
[  741.254111][T17017] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2504'.
[  741.265675][T17010] can: request_module (can-proto-0) failed.
[  746.164892][T17073] ima: policy update failed
[  746.198369][   T29] audit: type=1802 audit(2147483691.920:34): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2513" res=0 errno=0
[  746.768564][T17097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2518'.
[  746.834692][T17097] ipvlan0: entered promiscuous mode
[  746.879187][T17097] ipvlan0: entered allmulticast mode
[  746.933304][T17097] veth0_vlan: entered allmulticast mode
[  747.424840][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  747.431385][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  749.024629][T17142] vivid-007: =================  START STATUS  =================
[  749.144918][T17142] vivid-007: Generate PTS: true
[  749.278431][T17142] vivid-007: Generate SCR: true
[  749.334835][T17142] tpg source WxH: 320x240 (Y'CbCr)
[  749.453472][T17142] tpg field: 1
[  749.456892][T17142] tpg crop: (0,0)/320x240
[  749.530095][T17142] tpg compose: (0,0)/320x240
[  749.570620][T17142] tpg colorspace: 8
[  749.616381][T17142] tpg transfer function: 0/0
[  749.646395][T17142] tpg Y'CbCr encoding: 0/0
[  749.681815][T17156] can: request_module (can-proto-4) failed.
[  749.713733][T17142] tpg quantization: 0/0
[  749.742221][T17142] tpg RGB range: 0/2
[  749.781744][T17142] vivid-007: ==================  END STATUS  ==================
[  750.412679][T17168] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:1 is already present
[  750.959939][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2535'.
[  752.288581][T17210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2537'.
[  753.748210][T17244] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  753.954769][T17244] File: /dev/nullb0 PID: 17244 Comm: syz.2.2540
[  754.619391][T15669] Bluetooth: hci0: command 0x0406 tx timeout
[  755.784250][T17297] nfs: Unknown parameter 'nl802154'
[  756.392074][T17309] FAULT_INJECTION: forcing a failure.
[  756.392074][T17309] name failslab, interval 1, probability 0, space 0, times 0
[  756.723887][T17309] CPU: 0 UID: 0 PID: 17309 Comm: syz.0.2551 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  756.723915][T17309] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  756.723921][T17309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  756.723930][T17309] Call Trace:
[  756.723935][T17309]  <TASK>
[  756.723940][T17309]  dump_stack_lvl+0x100/0x190
[  756.723968][T17309]  should_fail_ex.cold+0x5/0xa
[  756.723986][T17309]  should_failslab+0xc2/0x120
[  756.724002][T17309]  __kmalloc_cache_noprof+0x7a/0x6f0
[  756.724021][T17309]  ? alloc_fs_context+0x57/0xf40
[  756.724042][T17309]  alloc_fs_context+0x57/0xf40
[  756.724061][T17309]  mq_init_ns+0x16e/0x820
[  756.724085][T17309]  copy_ipcs+0x3dd/0x7e0
[  756.724116][T17309]  create_new_namespaces+0x20a/0xac0
[  756.724132][T17309]  ? security_capable+0x80/0x260
[  756.724155][T17309]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  756.724173][T17309]  ksys_unshare+0x473/0xad0
[  756.724193][T17309]  ? __pfx_ksys_unshare+0x10/0x10
[  756.724218][T17309]  __x64_sys_unshare+0x31/0x40
[  756.724235][T17309]  do_syscall_64+0x106/0xf80
[  756.724253][T17309]  ? clear_bhb_loop+0x40/0x90
[  756.724272][T17309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.724287][T17309] RIP: 0033:0x7f1bd639c799
[  756.724300][T17309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.724314][T17309] RSP: 002b:00007f1bd45d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  756.724329][T17309] RAX: ffffffffffffffda RBX: 00007f1bd6616090 RCX: 00007f1bd639c799
[  756.724339][T17309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000
[  756.724348][T17309] RBP: 00007f1bd6432c99 R08: 0000000000000000 R09: 0000000000000000
[  756.724357][T17309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  756.724365][T17309] R13: 00007f1bd6616128 R14: 00007f1bd6616090 R15: 00007ffc0b217a08
[  756.724384][T17309]  </TASK>
[  758.409655][T15432] usb usb40-port4: attempt power cycle
[  759.000727][T17337] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2556'.
[  759.018828][T15432] usb usb40-port4: unable to enumerate USB device
[  759.411346][T17254] Process accounting resumed
[  760.212555][T17354] netlink: 'syz.3.2560': attribute type 1 has an invalid length.
[  760.696576][T17354] can0: slcan on pty72.
[  760.909443][T17352] can0 (unregistered): slcan off pty72.
[  761.368777][T17379] futex_wake_op: syz.1.2564 tries to shift op by -2048; fix this program
[  762.996979][T17428] input: jJǸ-�¶š9ã%vø“û¨l�ÐQ 	J86Ö‘ as /devices/virtual/input/input33
[  766.454805][T17496] FAULT_INJECTION: forcing a failure.
[  766.454805][T17496] name failslab, interval 1, probability 0, space 0, times 0
[  766.638044][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.2.2592 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  766.638073][T17496] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  766.638079][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  766.638088][T17496] Call Trace:
[  766.638094][T17496]  <TASK>
[  766.638100][T17496]  dump_stack_lvl+0x100/0x190
[  766.638129][T17496]  should_fail_ex.cold+0x5/0xa
[  766.638148][T17496]  should_failslab+0xc2/0x120
[  766.638164][T17496]  __kmalloc_cache_noprof+0x7a/0x6f0
[  766.638184][T17496]  ? io_uring_alloc_task_context+0xa7/0x54b
[  766.638211][T17496]  io_uring_alloc_task_context+0xa7/0x54b
[  766.638235][T17496]  ? file_init_path+0x48e/0x670
[  766.638252][T17496]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[  766.638275][T17496]  ? alloc_file_pseudo+0x1a5/0x230
[  766.638307][T17496]  __io_uring_add_tctx_node.cold+0x10/0x195
[  766.638331][T17496]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[  766.638356][T17496]  ? __anon_inode_getfile+0x17c/0x280
[  766.638376][T17496]  io_uring_setup.cold+0x1a25/0x1d09
[  766.638400][T17496]  ? __pfx_io_uring_setup+0x10/0x10
[  766.638421][T17496]  ? __pfx_do_futex+0x10/0x10
[  766.638449][T17496]  ? xfd_validate_state+0x129/0x190
[  766.638475][T17496]  __x64_sys_io_uring_setup+0xc2/0x170
[  766.638493][T17496]  do_syscall_64+0x106/0xf80
[  766.638511][T17496]  ? clear_bhb_loop+0x40/0x90
[  766.638529][T17496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.638545][T17496] RIP: 0033:0x7fd1fdb9c799
[  766.638558][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  766.638573][T17496] RSP: 002b:00007fd1fea48028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  766.638587][T17496] RAX: ffffffffffffffda RBX: 00007fd1fde15fa0 RCX: 00007fd1fdb9c799
[  766.638597][T17496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  766.638606][T17496] RBP: 00007fd1fdc32c99 R08: 0000000000000000 R09: 0000000000000000
[  766.638615][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  766.638624][T17496] R13: 00007fd1fde16038 R14: 00007fd1fde15fa0 R15: 00007ffcb98cafa8
[  766.638644][T17496]  </TASK>
[  768.854466][   T29] audit: type=1800 audit(2147483714.570:35): pid=17544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2601" name="dbroot" dev="configfs" ino=515862 res=0 errno=0
[  773.348715][T16960] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9
[  774.758840][T17608] tipc: Trying to set illegal importance in message
[  774.923733][T17616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'.
[  775.895607][T17633] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137
[  775.955596][T17615] delete_channel: no stack
[  776.027722][T17633] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138
[  776.158513][T17633] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum
[  777.006129][T15669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  777.021817][T15669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  777.033155][T15669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  777.041551][T15669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  777.050833][T15669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  777.578797][T17675] binder: 17668:17675 ioctl c018620c 0 returned -1
[  778.021446][T17686] sd 0:0:1:0: PR command failed: 1026
[  778.132705][T17686] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  778.276301][T17686] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  778.422779][T17692] Invalid ELF header magic: != ELF
[  778.562405][T15661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.108018][T15669] Bluetooth: hci1: command tx timeout
[  779.815928][T15661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.987716][T17659] chnl_net:caif_netlink_parms(): no params data found
[  780.192535][T15661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.640692][T15661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  781.082421][T17659] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.140674][T17659] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.180894][T15669] Bluetooth: hci1: command tx timeout
[  781.188629][T17659] bridge_slave_0: entered allmulticast mode
[  781.261346][T17659] bridge_slave_0: entered promiscuous mode
[  781.331495][T17659] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.368981][T17659] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.418091][T17659] bridge_slave_1: entered allmulticast mode
[  781.463427][T17659] bridge_slave_1: entered promiscuous mode
[  781.669790][T17659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  781.731221][T17659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  781.899433][T15661] gretap0: left allmulticast mode
[  781.904518][T15661] gretap0: left promiscuous mode
[  781.959012][T15661] bridge0: port 2(gretap0) entered disabled state
[  782.170894][T15661] bridge_slave_0: left allmulticast mode
[  782.176560][T15661] bridge_slave_0: left promiscuous mode
[  782.264999][T15661] bridge0: port 1(bridge_slave_0) entered disabled state
[  783.269036][T15669] Bluetooth: hci1: command tx timeout
[  783.852113][T15661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  783.954050][T15661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  784.040757][T15661] bond0 (unregistering): Released all slaves
[  784.256242][T15661] ovs_ÿþÿþ?: left promiscuous mode
[  784.416632][T17659] team0: Port device team_slave_0 added
[  784.479000][T17659] team0: Port device team_slave_1 added
[  784.670095][T17659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  784.727132][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  784.908138][T17756] nbd: couldn't find device at index 33904
[  784.914293][T17659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  784.988008][T17659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  785.053102][T17659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  785.211158][T17659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  785.342511][T15669] Bluetooth: hci1: command tx timeout
[  785.708926][T17659] hsr_slave_0: entered promiscuous mode
[  785.758245][T17659] hsr_slave_1: entered promiscuous mode
[  786.194451][T17770] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2637'.
[  786.941085][T17778] nbd: must specify at least one socket
[  787.927043][T15661] hsr_slave_0: left promiscuous mode
[  787.977762][T15661] hsr_slave_1: left promiscuous mode
[  788.026869][T15661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  788.140281][T15661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  788.274765][T15661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  788.337939][T15661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  788.561822][T15661] veth1_macvtap: left promiscuous mode
[  788.567331][T15661] veth0_macvtap: left promiscuous mode
[  788.637952][T15661] veth1_vlan: left promiscuous mode
[  788.678023][T15661] veth0_vlan: left promiscuous mode
[  789.871773][T15661] team0 (unregistering): Port device team_slave_1 removed
[  793.039026][T16960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  793.049652][T16960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  793.057375][T16960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  793.065309][T16960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  793.073483][T16960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  794.961666][T17798] Process accounting paused
[  795.090613][T17659] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  795.177915][T16960] Bluetooth: hci2: command tx timeout
[  795.262477][T17659] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  795.547889][T17659] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  795.713000][T17659] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  795.911437][T16960] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[  796.656437][T17659] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.728104][T17828] chnl_net:caif_netlink_parms(): no params data found
[  796.804457][T17659] 8021q: adding VLAN 0 to HW filter on device team0
[  797.102488][T16612] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.109690][T16612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  797.219073][T16612] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.226189][T16612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  797.262081][T15669] Bluetooth: hci2: command tx timeout
[  797.455681][T17659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  797.579247][T17659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  797.635539][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'.
[  797.719692][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'.
[  797.829879][T17828] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.917093][T17828] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.978874][T15669] Bluetooth: hci4: command 0x0406 tx timeout
[  798.020363][T17828] bridge_slave_0: entered allmulticast mode
[  798.070095][T17828] bridge_slave_0: entered promiscuous mode
[  798.258569][T17828] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.265769][T17828] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.386025][T17828] bridge_slave_1: entered allmulticast mode
[  798.453345][T17828] bridge_slave_1: entered promiscuous mode
[  798.855500][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.925832][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.217149][T17659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  799.281647][T17828] team0: Port device team_slave_0 added
[  799.302602][T17828] team0: Port device team_slave_1 added
[  799.337962][T15669] Bluetooth: hci2: command tx timeout
[  799.652761][T17828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  799.702542][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  799.879540][T17828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  799.950330][T17828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  800.009832][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.069172][T15669] Bluetooth: hci4: command 0x0406 tx timeout
[  800.195055][T17828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  800.646562][T17659] veth0_vlan: entered promiscuous mode
[  800.827569][T17828] hsr_slave_0: entered promiscuous mode
[  800.853841][T17828] hsr_slave_1: entered promiscuous mode
[  800.909506][T17828] debugfs: 'hsr0' already exists in 'hsr'
[  800.915270][T17828] Cannot create hsr debugfs directory
[  800.992093][T17659] veth1_vlan: entered promiscuous mode
[  801.150293][T17931] sg_write: data in/out 1886744398/84 bytes for SCSI command 0x72-- guessing data in;
[  801.150293][T17931]    program syz.3.2656 not setting count and/or reply_len properly
[  801.418038][T16960] Bluetooth: hci2: command tx timeout
[  801.711805][T17659] veth0_macvtap: entered promiscuous mode
[  801.772316][T17659] veth1_macvtap: entered promiscuous mode
[  802.022992][T17659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  802.103368][T17659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.539659][T15646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  802.580273][T15646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.720513][T15646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.794471][T15646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  803.446993][T17828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  803.540794][T17828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  803.605363][T15691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  803.652322][T15691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  803.690654][T17828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  803.756337][T17828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  804.442848][T15691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.488562][T15691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  804.961332][T17828] 8021q: adding VLAN 0 to HW filter on device bond0
[  805.111291][T17828] 8021q: adding VLAN 0 to HW filter on device team0
[  805.189961][T15643] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.197150][T15643] bridge0: port 1(bridge_slave_0) entered forwarding state
[  805.303793][T15643] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.310990][T15643] bridge0: port 2(bridge_slave_1) entered forwarding state
[  805.543750][T17828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  805.729714][T17968] futex_wake_op: syz.2.2664 tries to shift op by -2048; fix this program
[  806.470833][T17828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  807.375810][T17991] bridge0: port 3(team0) entered blocking state
[  807.498072][T17991] bridge0: port 3(team0) entered disabled state
[  807.610131][T17988] FAULT_INJECTION: forcing a failure.
[  807.610131][T17988] name failslab, interval 1, probability 0, space 0, times 0
[  807.628151][T17991] team0: entered allmulticast mode
[  807.633289][T17991] team_slave_0: entered allmulticast mode
[  807.739805][T17991] team_slave_1: entered allmulticast mode
[  807.757919][T17988] CPU: 0 UID: 0 PID: 17988 Comm: syz.0.2667 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  807.757947][T17988] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  807.757953][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  807.757962][T17988] Call Trace:
[  807.757968][T17988]  <TASK>
[  807.757974][T17988]  dump_stack_lvl+0x100/0x190
[  807.758059][T17988]  should_fail_ex.cold+0x5/0xa
[  807.758080][T17988]  should_failslab+0xc2/0x120
[  807.758098][T17988]  __kvmalloc_node_noprof+0xfa/0xa00
[  807.758121][T17988]  ? alloc_fdtable+0x110/0x2d0
[  807.758148][T17988]  alloc_fdtable+0x110/0x2d0
[  807.758171][T17988]  dup_fd+0x995/0xd10
[  807.758187][T17988]  ? fd_statfs+0xdd/0x120
[  807.758210][T17988]  ksys_unshare+0x7ad/0xad0
[  807.758231][T17988]  ? __pfx_ksys_unshare+0x10/0x10
[  807.758250][T17988]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  807.758269][T17988]  ? syscall_user_dispatch+0x76/0x130
[  807.758292][T17988]  __x64_sys_unshare+0x31/0x40
[  807.758309][T17988]  do_syscall_64+0x106/0xf80
[  807.758329][T17988]  ? clear_bhb_loop+0x40/0x90
[  807.758347][T17988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  807.758363][T17988] RIP: 0033:0x7f27d519c799
[  807.758376][T17988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  807.758390][T17988] RSP: 002b:00007f27d60a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  807.758405][T17988] RAX: ffffffffffffffda RBX: 00007f27d5416180 RCX: 00007f27d519c799
[  807.758415][T17988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400
[  807.758423][T17988] RBP: 00007f27d5232c99 R08: 0000000000000000 R09: 0000000000000000
[  807.758432][T17988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  807.758441][T17988] R13: 00007f27d5416218 R14: 00007f27d5416180 R15: 00007ffcf9b48fa8
[  807.758460][T17988]  </TASK>
[  807.989137][T17991] team0: entered promiscuous mode
[  807.994193][T17991] team_slave_0: entered promiscuous mode
[  808.000062][T17991] team_slave_1: entered promiscuous mode
[  808.006145][T17991] bridge0: port 3(team0) entered blocking state
[  808.012488][T17991] bridge0: port 3(team0) entered forwarding state
[  808.868235][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  808.884505][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  809.075560][T17828] veth0_vlan: entered promiscuous mode
[  809.128092][T18001] zswap: compressor  not available
[  809.150091][T17828] veth1_vlan: entered promiscuous mode
[  809.558003][T17828] veth0_macvtap: entered promiscuous mode
[  809.723433][T17828] veth1_macvtap: entered promiscuous mode
[  810.393652][T15661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.707089][T17828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  810.807267][T15661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.113099][T15661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.202722][T17828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  811.278100][T15643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  811.340253][T15643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  811.564855][T15661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.664330][T15643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  811.757720][T15643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  811.953608][   T29] audit: type=1800 audit(2147483757.670:36): pid=18032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2679" name="lu_gp_id" dev="configfs" ino=546525 res=0 errno=0
[  812.192658][T15691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  812.268147][T15691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  812.496890][T15661] team0: left allmulticast mode
[  812.516766][T15661] team_slave_0: left allmulticast mode
[  812.552712][T15661] team_slave_1: left allmulticast mode
[  812.584424][T15661] team0: left promiscuous mode
[  812.612864][T15661] team_slave_0: left promiscuous mode
[  812.645832][T15661] team_slave_1: left promiscuous mode
[  812.680368][T15661] bridge0: port 3(team0) entered disabled state
[  812.805270][T15661] bridge_slave_1: left allmulticast mode
[  812.846026][T15661] bridge_slave_1: left promiscuous mode
[  812.881854][T15661] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.934599][T15661] bridge_slave_0: left allmulticast mode
[  812.972747][T15661] bridge_slave_0: left promiscuous mode
[  813.015055][T15661] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.252649][T18058] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2684'.
[  813.416322][T18065] Scaler: =================  START STATUS  =================
[  813.485842][T18065] Scaler: ==================  END STATUS  ==================
[  813.800970][T15661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  813.854142][T15661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  813.905291][T15661] bond0 (unregistering): Released all slaves
[  813.988636][T16612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.043432][T16612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.932998][T18089] FAULT_INJECTION: forcing a failure.
[  814.932998][T18089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  815.031457][T18089] CPU: 0 UID: 0 PID: 18089 Comm: syz.2.2689 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  815.031485][T18089] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  815.031490][T18089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  815.031500][T18089] Call Trace:
[  815.031505][T18089]  <TASK>
[  815.031510][T18089]  dump_stack_lvl+0x100/0x190
[  815.031537][T18089]  should_fail_ex.cold+0x5/0xa
[  815.031555][T18089]  _copy_from_user+0x2e/0xd0
[  815.031576][T18089]  core_sys_select+0x319/0xbb0
[  815.031604][T18089]  ? __pfx_core_sys_select+0x10/0x10
[  815.031626][T18089]  ? get_pid_task+0xfc/0x250
[  815.031648][T18089]  ? get_pid_task+0x106/0x250
[  815.031678][T18089]  ? __mutex_unlock_slowpath+0x15c/0x790
[  815.031697][T18089]  ? __fget_files+0x215/0x3d0
[  815.031712][T18089]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  815.031733][T18089]  kern_select+0x20c/0x270
[  815.031760][T18089]  ? __pfx_kern_select+0x10/0x10
[  815.031785][T18089]  ? __pfx_ksys_write+0x10/0x10
[  815.031801][T18089]  __x64_sys_select+0xbd/0x160
[  815.031823][T18089]  ? do_syscall_64+0x95/0xf80
[  815.031840][T18089]  ? lockdep_hardirqs_on+0x78/0x100
[  815.031858][T18089]  do_syscall_64+0x106/0xf80
[  815.031874][T18089]  ? clear_bhb_loop+0x40/0x90
[  815.031892][T18089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.031907][T18089] RIP: 0033:0x7fd1fdb9c799
[  815.031920][T18089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  815.031934][T18089] RSP: 002b:00007fd1fea48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  815.031948][T18089] RAX: ffffffffffffffda RBX: 00007fd1fde15fa0 RCX: 00007fd1fdb9c799
[  815.031958][T18089] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000005
[  815.031967][T18089] RBP: 00007fd1fea48090 R08: 0000000000000000 R09: 0000000000000000
[  815.031975][T18089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  815.031984][T18089] R13: 00007fd1fde16038 R14: 00007fd1fde15fa0 R15: 00007ffcb98cafa8
[  815.032003][T18089]  </TASK>
[  815.595475][T16960] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  815.879194][T18099] netlink: 'syz.3.2691': attribute type 1 has an invalid length.
[  815.948060][T18098] netlink: 'syz.3.2691': attribute type 1 has an invalid length.
[  816.016961][T18099] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2691'.
[  816.161920][T18098] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2691'.
[  816.462826][T15661] hsr_slave_0: left promiscuous mode
[  816.544326][T15661] hsr_slave_1: left promiscuous mode
[  816.576344][T15661] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  816.634880][T15661] batman_adv: batadv0: Removing interface: batadv_slave_0
[  816.794411][T15661] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  816.868201][T15661] batman_adv: batadv0: Removing interface: batadv_slave_1
[  816.958604][T18127] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  817.081104][T15661] veth0_macvtap: left promiscuous mode
[  817.124164][T15661] veth1_vlan: left promiscuous mode
[  817.168330][T15661] veth0_vlan: left promiscuous mode
[  817.190564][T18130] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  817.288502][T18130] FAULT_INJECTION: forcing a failure.
[  817.288502][T18130] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  817.407080][T18130] CPU: 0 UID: 0 PID: 18130 Comm: syz.4.2698 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  817.407108][T18130] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  817.407113][T18130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  817.407125][T18130] Call Trace:
[  817.407131][T18130]  <TASK>
[  817.407137][T18130]  dump_stack_lvl+0x100/0x190
[  817.407164][T18130]  should_fail_ex.cold+0x5/0xa
[  817.407183][T18130]  core_sys_select+0x9b9/0xbb0
[  817.407211][T18130]  ? __pfx_core_sys_select+0x10/0x10
[  817.407232][T18130]  ? get_pid_task+0xfc/0x250
[  817.407254][T18130]  ? get_pid_task+0x106/0x250
[  817.407291][T18130]  ? __mutex_unlock_slowpath+0x15c/0x790
[  817.407311][T18130]  ? __fget_files+0x215/0x3d0
[  817.407325][T18130]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  817.407347][T18130]  kern_select+0x20c/0x270
[  817.407371][T18130]  ? __pfx_kern_select+0x10/0x10
[  817.407396][T18130]  ? __pfx_ksys_write+0x10/0x10
[  817.407413][T18130]  __x64_sys_select+0xbd/0x160
[  817.407435][T18130]  ? do_syscall_64+0x95/0xf80
[  817.407452][T18130]  ? lockdep_hardirqs_on+0x78/0x100
[  817.407469][T18130]  do_syscall_64+0x106/0xf80
[  817.407485][T18130]  ? clear_bhb_loop+0x40/0x90
[  817.407503][T18130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.407518][T18130] RIP: 0033:0x7f691e59c799
[  817.407531][T18130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  817.407545][T18130] RSP: 002b:00007f691f526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017
[  817.407560][T18130] RAX: ffffffffffffffda RBX: 00007f691e815fa0 RCX: 00007f691e59c799
[  817.407570][T18130] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000005
[  817.407578][T18130] RBP: 00007f691f526090 R08: 0000000000000000 R09: 0000000000000000
[  817.407587][T18130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  817.407595][T18130] R13: 00007f691e816038 R14: 00007f691e815fa0 R15: 00007fffd7ff0908
[  817.407614][T18130]  </TASK>
[  818.308512][T18156] binder: BINDER_SET_CONTEXT_MGR already set
[  818.397359][T18156] binder: 18141:18156 ioctl 4018620d 9 returned -16
[  818.732574][T18165] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2703'.
[  818.813859][T18168] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2703'.
[  819.221343][T15661] team0 (unregistering): Port device team_slave_1 removed
[  819.381490][T15661] team0 (unregistering): Port device team_slave_0 removed
[  819.714500][T18177] Invalid ELF header magic: != ELF
[  820.552088][T18189] FAULT_INJECTION: forcing a failure.
[  820.552088][T18189] name fail_futex, interval 1, probability 0, space 0, times 0
[  820.688161][T18189] CPU: 0 UID: 0 PID: 18189 Comm: syz.0.2707 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  820.688190][T18189] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  820.688196][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  820.688205][T18189] Call Trace:
[  820.688211][T18189]  <TASK>
[  820.688217][T18189]  dump_stack_lvl+0x100/0x190
[  820.688245][T18189]  should_fail_ex.cold+0x5/0xa
[  820.688263][T18189]  get_futex_key+0x1d2/0x1620
[  820.688284][T18189]  ? __pfx_get_futex_key+0x10/0x10
[  820.688308][T18189]  futex_wait_setup+0x83/0x510
[  820.688334][T18189]  __futex_wait+0x19f/0x300
[  820.688358][T18189]  ? __pfx___futex_wait+0x10/0x10
[  820.688383][T18189]  ? __pfx_futex_wake_mark+0x10/0x10
[  820.688408][T18189]  ? find_held_lock+0x2b/0x80
[  820.688422][T18189]  ? futex_wake+0x456/0x530
[  820.688450][T18189]  futex_wait+0xed/0x380
[  820.688471][T18189]  ? __pfx_futex_wait+0x10/0x10
[  820.688496][T18189]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[  820.688515][T18189]  ? lockdep_hardirqs_on+0x78/0x100
[  820.688536][T18189]  do_futex+0x1ef/0x350
[  820.688555][T18189]  ? __pfx_do_futex+0x10/0x10
[  820.688579][T18189]  __x64_sys_futex+0x34f/0x4d0
[  820.688599][T18189]  ? __pfx___x64_sys_futex+0x10/0x10
[  820.688625][T18189]  do_syscall_64+0x106/0xf80
[  820.688642][T18189]  ? clear_bhb_loop+0x40/0x90
[  820.688660][T18189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.688675][T18189] RIP: 0033:0x7f27d519c799
[  820.688694][T18189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.688708][T18189] RSP: 002b:00007f27d60e50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  820.688723][T18189] RAX: ffffffffffffffda RBX: 00007f27d5415fa8 RCX: 00007f27d519c799
[  820.688733][T18189] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f27d5415fa8
[  820.688742][T18189] RBP: 00007f27d5415fa0 R08: 0000000000000000 R09: 0000000000000000
[  820.688751][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  820.688759][T18189] R13: 00007f27d5416038 R14: 00007ffcf9b48ec0 R15: 00007ffcf9b48fa8
[  820.688779][T18189]  </TASK>
[  822.265035][   T29] audit: type=1107 audit(2147483767.980:37): pid=18223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  822.521569][T18214] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  822.535457][T18214] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  822.685454][T18214] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  822.708598][T18214] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  822.769725][T18214] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  822.844443][T18214] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  822.902103][T18214] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  822.998707][T18214] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  823.046312][T18214] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  823.155794][T18214] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  823.693753][T16960] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  823.701402][T16960] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff
[  823.890814][T18256] netlink: Failed to add  helper -22
[  823.974260][T18258] can: request_module (can-proto-0) failed.
[  824.618306][T15669] Bluetooth: hci4: command 0x0406 tx timeout
[  824.778349][T15669] Bluetooth: hci1: command 0x0c1a tx timeout
[  824.784506][T15669] Bluetooth: hci0: command 0x0406 tx timeout
[  825.018223][T15669] Bluetooth: hci2: command 0x0c1a tx timeout
[  825.941888][T18247] Process accounting resumed
[  826.708972][T15669] Bluetooth: hci4: command 0x0406 tx timeout
[  826.861199][T15669] Bluetooth: hci0: command 0x0406 tx timeout
[  826.867259][T15669] Bluetooth: hci1: command 0x0c1a tx timeout
[  827.098563][T15669] Bluetooth: hci2: command 0x0c1a tx timeout
[  827.905278][T18319] zswap: compressor  not available
[  828.469066][T18306] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34
[  828.480871][T18328] zswap: compressor  not available
[  828.938272][T15669] Bluetooth: hci1: command 0x0c1a tx timeout
[  829.177923][T15669] Bluetooth: hci2: command 0x0c1a tx timeout
[  829.534917][T18307] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35
[  829.664960][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'.
[  829.722485][T18372] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2733'.
[  830.206284][T18378] FAULT_INJECTION: forcing a failure.
[  830.206284][T18378] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  830.320543][T18378] CPU: 0 UID: 0 PID: 18378 Comm: syz.3.2734 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  830.320572][T18378] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  830.320578][T18378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  830.320587][T18378] Call Trace:
[  830.320593][T18378]  <TASK>
[  830.320599][T18378]  dump_stack_lvl+0x100/0x190
[  830.320626][T18378]  should_fail_ex.cold+0x5/0xa
[  830.320641][T18378]  ? prepare_alloc_pages+0x16d/0x5f0
[  830.320661][T18378]  should_fail_alloc_page+0xeb/0x140
[  830.320679][T18378]  prepare_alloc_pages+0x1f0/0x5f0
[  830.320695][T18378]  ? __lock_acquire+0x4a5/0x2630
[  830.320716][T18378]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  830.320742][T18378]  ? lock_acquire+0x1cf/0x380
[  830.320760][T18378]  ? find_held_lock+0x2b/0x80
[  830.320773][T18378]  ? page_table_check_set+0x49a/0xa10
[  830.320796][T18378]  ? page_table_check_set+0x49a/0xa10
[  830.320826][T18378]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  830.320853][T18378]  ? __page_table_check_ptes_set+0x1b5/0x4e0
[  830.320868][T18378]  ? xas_move_index+0xae/0x110
[  830.320975][T18378]  ? xas_find+0x32c/0x8e0
[  830.320996][T18378]  ? find_held_lock+0x2b/0x80
[  830.321010][T18378]  ? find_held_lock+0x2b/0x80
[  830.321023][T18378]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  830.321049][T18378]  ? policy_nodemask+0xed/0x4f0
[  830.321067][T18378]  alloc_pages_mpol+0x1fb/0x550
[  830.321083][T18378]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  830.321104][T18378]  folio_alloc_mpol_noprof+0x36/0x340
[  830.321123][T18378]  vma_alloc_folio_noprof+0xed/0x1d0
[  830.321141][T18378]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  830.321164][T18378]  do_anonymous_page+0xb3a/0x1fb0
[  830.321190][T18378]  __handle_mm_fault+0x1d42/0x2b60
[  830.321213][T18378]  ? reacquire_held_locks+0xce/0x1e0
[  830.321232][T18378]  ? __pfx___handle_mm_fault+0x10/0x10
[  830.321255][T18378]  ? lock_vma_under_rcu+0x17c/0x590
[  830.321292][T18378]  handle_mm_fault+0x36d/0xa20
[  830.321316][T18378]  do_user_addr_fault+0x5a3/0x12f0
[  830.321347][T18378]  exc_page_fault+0x6f/0xd0
[  830.321365][T18378]  asm_exc_page_fault+0x26/0x30
[  830.321380][T18378] RIP: 0033:0x7fe78aa5df4b
[  830.321394][T18378] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  830.321408][T18378] RSP: 002b:00007fe78ba93fa0 EFLAGS: 00010206
[  830.321421][T18378] RAX: 0000000000000000 RBX: 00007fe78ae15fa0 RCX: 0000000000000000
[  830.321430][T18378] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000001140
[  830.321440][T18378] RBP: 00007fe78ac32c99 R08: 0000000000000000 R09: 0000000000000000
[  830.321450][T18378] R10: 0000200000001140 R11: 0000000000000000 R12: 0000000000000000
[  830.321459][T18378] R13: 00007fe78ae16038 R14: 00007fe78ae15fa0 R15: 00007ffc9c024ae8
[  830.321479][T18378]  </TASK>
[  830.321648][T18378] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  831.470009][T18366] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  831.487040][T18366] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  831.562359][T18366] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  831.579269][T18366] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  831.899140][T16960] Bluetooth: hci4: command 0x0406 tx timeout
[  833.240167][T18405] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2738'.
[  833.556803][T18405] bridge0: port 3(team0) entered disabled state
[  833.577910][T16960] Bluetooth: hci0: command 0x0406 tx timeout
[  833.657911][T16960] Bluetooth: hci2: command 0x0c1a tx timeout
[  833.664022][T15669] Bluetooth: hci1: command 0x0c1a tx timeout
[  833.932903][T18425] FAULT_INJECTION: forcing a failure.
[  833.932903][T18425] name failslab, interval 1, probability 0, space 0, times 0
[  834.036789][T18425] CPU: 0 UID: 0 PID: 18425 Comm: syz.3.2744 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  834.036818][T18425] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  834.036824][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  834.036833][T18425] Call Trace:
[  834.036839][T18425]  <TASK>
[  834.036845][T18425]  dump_stack_lvl+0x100/0x190
[  834.036872][T18425]  should_fail_ex.cold+0x5/0xa
[  834.036891][T18425]  ? devlink_fmsg_put_name+0xf5/0x3b0
[  834.037007][T18425]  should_failslab+0xc2/0x120
[  834.037025][T18425]  __kmalloc_noprof+0xe0/0x850
[  834.037051][T18425]  devlink_fmsg_put_name+0xf5/0x3b0
[  834.037071][T18425]  devlink_fmsg_string_pair_put+0xb6/0x1c0
[  834.037094][T18425]  nsim_dev_dummy_reporter_dump+0x54/0xa0
[  834.037174][T18425]  devlink_health_do_dump+0x243/0x5f0
[  834.037197][T18425]  devlink_health_report+0x690/0xb50
[  834.037221][T18425]  ? __pfx_devlink_health_report+0x10/0x10
[  834.037244][T18425]  ? _copy_from_user+0x59/0xd0
[  834.037260][T18425]  nsim_dev_health_break_write+0x166/0x210
[  834.037284][T18425]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  834.037313][T18425]  full_proxy_write+0x135/0x1a0
[  834.037374][T18425]  vfs_write+0x2aa/0x1070
[  834.037397][T18425]  ? __pfx_full_proxy_write+0x10/0x10
[  834.037418][T18425]  ? __pfx_vfs_write+0x10/0x10
[  834.037439][T18425]  ? __fget_files+0x215/0x3d0
[  834.037458][T18425]  ? __fget_files+0x21f/0x3d0
[  834.037477][T18425]  ksys_write+0x12a/0x250
[  834.037490][T18425]  ? __pfx_ksys_write+0x10/0x10
[  834.037509][T18425]  do_syscall_64+0x106/0xf80
[  834.037527][T18425]  ? clear_bhb_loop+0x40/0x90
[  834.037545][T18425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.037561][T18425] RIP: 0033:0x7fe78ab9c799
[  834.037574][T18425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.037589][T18425] RSP: 002b:00007fe78ba95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  834.037604][T18425] RAX: ffffffffffffffda RBX: 00007fe78ae15fa0 RCX: 00007fe78ab9c799
[  834.037614][T18425] RDX: 00000000000001e1 RSI: 0000000000000000 RDI: 0000000000000009
[  834.037622][T18425] RBP: 00007fe78ac32c99 R08: 0000000000000000 R09: 0000000000000000
[  834.037631][T18425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  834.037640][T18425] R13: 00007fe78ae16038 R14: 00007fe78ae15fa0 R15: 00007ffc9c024ae8
[  834.037661][T18425]  </TASK>
[  834.828442][T16960] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  835.222587][T18439] FAULT_INJECTION: forcing a failure.
[  835.222587][T18439] name failslab, interval 1, probability 0, space 0, times 0
[  835.474825][T18439] CPU: 0 UID: 0 PID: 18439 Comm: syz.3.2744 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  835.474862][T18439] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  835.474868][T18439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  835.474877][T18439] Call Trace:
[  835.474883][T18439]  <TASK>
[  835.474890][T18439]  dump_stack_lvl+0x100/0x190
[  835.474919][T18439]  should_fail_ex.cold+0x5/0xa
[  835.474937][T18439]  should_failslab+0xc2/0x120
[  835.474953][T18439]  __kmalloc_cache_noprof+0x7a/0x6f0
[  835.474972][T18439]  ? bpf_prog_store_orig_filter+0x7b/0x1d0
[  835.475057][T18439]  bpf_prog_store_orig_filter+0x7b/0x1d0
[  835.475076][T18439]  bpf_prog_create_from_user+0x1c3/0x2f0
[  835.475121][T18439]  ? __pfx_seccomp_check_filter+0x10/0x10
[  835.475141][T18439]  do_seccomp+0x7f7/0x2740
[  835.475164][T18439]  ? __pfx_do_seccomp+0x10/0x10
[  835.475182][T18439]  ? __x64_sys_openat+0x12d/0x210
[  835.475202][T18439]  ? xfd_validate_state+0x129/0x190
[  835.475230][T18439]  do_syscall_64+0x106/0xf80
[  835.475248][T18439]  ? clear_bhb_loop+0x40/0x90
[  835.475266][T18439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.475282][T18439] RIP: 0033:0x7fe78ab9c799
[  835.475296][T18439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.475310][T18439] RSP: 002b:00007fe78ba74028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  835.475325][T18439] RAX: ffffffffffffffda RBX: 00007fe78ae16090 RCX: 00007fe78ab9c799
[  835.475335][T18439] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001
[  835.475344][T18439] RBP: 00007fe78ac32c99 R08: 0000000000000000 R09: 0000000000000000
[  835.475356][T18439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.475367][T18439] R13: 00007fe78ae16128 R14: 00007fe78ae16090 R15: 00007ffc9c024ae8
[  835.475387][T18439]  </TASK>
[  835.969368][T18453] netlink: 286 bytes leftover after parsing attributes in process `syz.3.2750'.
[  836.201273][T18453] FAULT_INJECTION: forcing a failure.
[  836.201273][T18453] name fail_futex, interval 1, probability 0, space 0, times 0
[  836.214570][T18453] CPU: 0 UID: 0 PID: 18453 Comm: syz.3.2750 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  836.214597][T18453] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  836.214603][T18453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  836.214612][T18453] Call Trace:
[  836.214617][T18453]  <TASK>
[  836.214623][T18453]  dump_stack_lvl+0x100/0x190
[  836.214649][T18453]  should_fail_ex.cold+0x5/0xa
[  836.214668][T18453]  should_fail_futex+0x4c/0x60
[  836.214686][T18453]  futex_lock_pi_atomic+0xe7/0xaf0
[  836.214711][T18453]  futex_lock_pi+0x246/0x7b0
[  836.214734][T18453]  ? __pfx_futex_lock_pi+0x10/0x10
[  836.214756][T18453]  ? __pfx___futex_wait+0x10/0x10
[  836.214801][T18453]  ? __pfx_futex_wake_mark+0x10/0x10
[  836.214828][T18453]  ? ksys_write+0x190/0x250
[  836.214842][T18453]  ? ksys_write+0x190/0x250
[  836.214859][T18453]  do_futex+0x18a/0x350
[  836.214878][T18453]  ? __pfx_do_futex+0x10/0x10
[  836.214902][T18453]  __x64_sys_futex+0x34f/0x4d0
[  836.214923][T18453]  ? __pfx___x64_sys_futex+0x10/0x10
[  836.214949][T18453]  do_syscall_64+0x106/0xf80
[  836.214967][T18453]  ? clear_bhb_loop+0x40/0x90
[  836.214985][T18453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.215000][T18453] RIP: 0033:0x7fe78ab9c799
[  836.215014][T18453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  836.215028][T18453] RSP: 002b:00007fe78ba95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  836.215042][T18453] RAX: ffffffffffffffda RBX: 00007fe78ae15fa0 RCX: 00007fe78ab9c799
[  836.215052][T18453] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000200000000080
[  836.215062][T18453] RBP: 00007fe78ac32c99 R08: 0000000000000000 R09: 00000000fffffffa
[  836.215071][T18453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  836.215080][T18453] R13: 00007fe78ae16038 R14: 00007fe78ae15fa0 R15: 00007ffc9c024ae8
[  836.215101][T18453]  </TASK>
[  838.979096][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2758'.
[  839.081573][T18509] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2758'.
[  839.490089][T18514] ubi0: attaching mtd0
[  839.537770][T18514] ubi0: scanning is finished
[  839.576181][T18514] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  840.049387][T18514] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  840.384672][T18535] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2762'.
[  840.571788][T18541] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  840.650770][T18541] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  840.774179][T18541] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  840.884534][T18541] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  840.990892][T18544] futex_wake_op: syz.0.2764 tries to shift op by -2048; fix this program
[  841.057255][T18544] futex_wake_op: syz.0.2764 tries to shift op by -2048; fix this program
[  842.617935][T16960] Bluetooth: hci4: command 0x0406 tx timeout
[  842.702085][T16960] Bluetooth: hci0: command 0x0406 tx timeout
[  842.779459][T16960] Bluetooth: hci1: command 0x0c1a tx timeout
[  842.938479][T16960] Bluetooth: hci2: command 0x0c1a tx timeout
[  843.593250][T18610] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  843.645504][T18607] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2776'.
[  844.118527][T18623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2774'.
[  844.248780][T18616] zswap: compressor  not available
[  847.355429][T16960] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  849.422072][T16960] Bluetooth: hci1: command 0x0c1a tx timeout
[  850.430810][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2787'.
[  851.502074][T16960] Bluetooth: hci1: command 0x0c1a tx timeout
[  851.952902][T18727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2793'.
[  852.913355][T18744] device-mapper: ioctl: Invalid ioctl structure: uuid ž, name , dev 500000000
[  853.020348][T18723] FAULT_INJECTION: forcing a failure.
[  853.020348][T18723] name failslab, interval 1, probability 0, space 0, times 0
[  853.257755][T18723] CPU: 0 UID: 0 PID: 18723 Comm: syz.4.2792 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  853.257784][T18723] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  853.257790][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  853.257800][T18723] Call Trace:
[  853.257805][T18723]  <TASK>
[  853.257811][T18723]  dump_stack_lvl+0x100/0x190
[  853.257840][T18723]  should_fail_ex.cold+0x5/0xa
[  853.257859][T18723]  ? memcg_list_lru_alloc+0x4ec/0x740
[  853.257880][T18723]  should_failslab+0xc2/0x120
[  853.257896][T18723]  __kmalloc_noprof+0xe0/0x850
[  853.257917][T18723]  ? ipcget+0xee/0xf50
[  853.257937][T18723]  memcg_list_lru_alloc+0x4ec/0x740
[  853.257963][T18723]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[  853.257984][T18723]  ? rcu_read_unlock+0x17/0x60
[  853.258005][T18723]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[  853.258028][T18723]  __memcg_slab_post_alloc_hook+0x130/0x990
[  853.258048][T18723]  ? kasan_save_track+0x14/0x30
[  853.258072][T18723]  kmem_cache_alloc_lru_noprof+0x592/0x6e0
[  853.258094][T18723]  ? hugetlbfs_alloc_inode+0x8c/0x1d0
[  853.258114][T18723]  hugetlbfs_alloc_inode+0x8c/0x1d0
[  853.258129][T18723]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  853.258144][T18723]  alloc_inode+0x68/0x250
[  853.258186][T18723]  new_inode+0x22/0x1c0
[  853.258208][T18723]  hugetlbfs_get_inode+0x313/0x750
[  853.258227][T18723]  hugetlb_file_setup+0x3cc/0x5b0
[  853.258246][T18723]  newseg+0xabb/0xed0
[  853.258265][T18723]  ? __pfx_newseg+0x10/0x10
[  853.258281][T18723]  ? down_write+0x146/0x1f0
[  853.258303][T18723]  ? ksys_write+0x190/0x250
[  853.258317][T18723]  ? ksys_write+0x190/0x250
[  853.258332][T18723]  ipcget+0xee/0xf50
[  853.258348][T18723]  ? do_futex+0x192/0x350
[  853.258368][T18723]  ? __pfx_do_futex+0x10/0x10
[  853.258389][T18723]  ? __pfx_ipcget+0x10/0x10
[  853.258406][T18723]  ? __x64_sys_futex+0x34f/0x4d0
[  853.258423][T18723]  ? __x64_sys_futex+0x358/0x4d0
[  853.258444][T18723]  __x64_sys_shmget+0x13b/0x1b0
[  853.258461][T18723]  ? __pfx___x64_sys_shmget+0x10/0x10
[  853.258489][T18723]  do_syscall_64+0x106/0xf80
[  853.258507][T18723]  ? clear_bhb_loop+0x40/0x90
[  853.258526][T18723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.258542][T18723] RIP: 0033:0x7f691e59c799
[  853.258556][T18723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  853.258571][T18723] RSP: 002b:00007f691f4e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  853.258585][T18723] RAX: ffffffffffffffda RBX: 00007f691e816180 RCX: 00007f691e59c799
[  853.258596][T18723] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[  853.258606][T18723] RBP: 00007f691e632c99 R08: 0000000000000000 R09: 0000000000000000
[  853.258615][T18723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  853.258624][T18723] R13: 00007f691e816218 R14: 00007f691e816180 R15: 00007fffd7ff0908
[  853.258644][T18723]  </TASK>
[  855.889084][T18795] random: crng reseeded on system resumption
[  856.449862][T18797] zswap: compressor  not available
[  856.701019][T18810] FAULT_INJECTION: forcing a failure.
[  856.701019][T18810] name failslab, interval 1, probability 0, space 0, times 0
[  856.793065][T18810] CPU: 0 UID: 0 PID: 18810 Comm: syz.4.2810 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  856.793094][T18810] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  856.793100][T18810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  856.793110][T18810] Call Trace:
[  856.793115][T18810]  <TASK>
[  856.793122][T18810]  dump_stack_lvl+0x100/0x190
[  856.793150][T18810]  should_fail_ex.cold+0x5/0xa
[  856.793169][T18810]  should_failslab+0xc2/0x120
[  856.793185][T18810]  __kmalloc_cache_noprof+0x7a/0x6f0
[  856.793205][T18810]  ? syslog_print_all+0xed/0x3f0
[  856.793227][T18810]  syslog_print_all+0xed/0x3f0
[  856.793245][T18810]  ? futex_wait+0x125/0x380
[  856.793268][T18810]  ? __pfx_syslog_print_all+0x10/0x10
[  856.793295][T18810]  ? bpf_lsm_capable+0x9/0x10
[  856.793310][T18810]  ? security_capable+0x80/0x260
[  856.793334][T18810]  do_syslog+0x350/0x6d0
[  856.793355][T18810]  ? __pfx_do_syslog+0x10/0x10
[  856.793387][T18810]  __x64_sys_syslog+0x74/0xb0
[  856.793407][T18810]  ? lockdep_hardirqs_on+0x78/0x100
[  856.793426][T18810]  do_syscall_64+0x106/0xf80
[  856.793442][T18810]  ? clear_bhb_loop+0x40/0x90
[  856.793460][T18810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.793476][T18810] RIP: 0033:0x7f691e59c799
[  856.793489][T18810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.793503][T18810] RSP: 002b:00007f691f526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  856.793518][T18810] RAX: ffffffffffffffda RBX: 00007f691e815fa0 RCX: 00007f691e59c799
[  856.793528][T18810] RDX: 00000000000000f4 RSI: 0000200000000040 RDI: 0000000000000004
[  856.793537][T18810] RBP: 00007f691e632c99 R08: 0000000000000000 R09: 0000000000000000
[  856.793545][T18810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  856.793554][T18810] R13: 00007f691e816038 R14: 00007f691e815fa0 R15: 00007fffd7ff0908
[  856.793573][T18810]  </TASK>
[  857.634680][T18760] Process accounting paused
[  857.700552][T18815] FAULT_INJECTION: forcing a failure.
[  857.700552][T18815] name failslab, interval 1, probability 0, space 0, times 0
[  857.792959][T18815] CPU: 0 UID: 0 PID: 18815 Comm: syz.4.2811 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  857.792988][T18815] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  857.792994][T18815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  857.793003][T18815] Call Trace:
[  857.793009][T18815]  <TASK>
[  857.793016][T18815]  dump_stack_lvl+0x100/0x190
[  857.793044][T18815]  should_fail_ex.cold+0x5/0xa
[  857.793063][T18815]  ? devlink_fmsg_put_value+0xaf/0x2c0
[  857.793083][T18815]  should_failslab+0xc2/0x120
[  857.793109][T18815]  __kmalloc_noprof+0xe0/0x850
[  857.793131][T18815]  ? __kmalloc_noprof+0x320/0x850
[  857.793155][T18815]  devlink_fmsg_put_value+0xaf/0x2c0
[  857.793177][T18815]  devlink_fmsg_u8_pair_put+0x19c/0x2f0
[  857.793198][T18815]  ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10
[  857.793219][T18815]  ? devlink_fmsg_nest_common.part.0+0x14d/0x1f0
[  857.793242][T18815]  nsim_dev_dummy_fmsg_put+0x39/0x1e0
[  857.793268][T18815]  devlink_health_do_dump+0x243/0x5f0
[  857.793290][T18815]  devlink_health_report+0x690/0xb50
[  857.793314][T18815]  ? __pfx_devlink_health_report+0x10/0x10
[  857.793337][T18815]  ? _copy_from_user+0x59/0xd0
[  857.793354][T18815]  nsim_dev_health_break_write+0x166/0x210
[  857.793378][T18815]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  857.793407][T18815]  full_proxy_write+0x135/0x1a0
[  857.793428][T18815]  vfs_write+0x2aa/0x1070
[  857.793451][T18815]  ? __pfx_full_proxy_write+0x10/0x10
[  857.793470][T18815]  ? __pfx_vfs_write+0x10/0x10
[  857.793491][T18815]  ? __fget_files+0x215/0x3d0
[  857.793510][T18815]  ? __fget_files+0x21f/0x3d0
[  857.793529][T18815]  ksys_write+0x12a/0x250
[  857.793543][T18815]  ? __pfx_ksys_write+0x10/0x10
[  857.793562][T18815]  do_syscall_64+0x106/0xf80
[  857.793580][T18815]  ? clear_bhb_loop+0x40/0x90
[  857.793598][T18815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.793613][T18815] RIP: 0033:0x7f691e59c799
[  857.793627][T18815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.793641][T18815] RSP: 002b:00007f691f526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  857.793656][T18815] RAX: ffffffffffffffda RBX: 00007f691e815fa0 RCX: 00007f691e59c799
[  857.793667][T18815] RDX: 00000000000001e1 RSI: 0000000000000000 RDI: 0000000000000009
[  857.793676][T18815] RBP: 00007f691e632c99 R08: 0000000000000000 R09: 0000000000000000
[  857.793686][T18815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  857.793694][T18815] R13: 00007f691e816038 R14: 00007f691e815fa0 R15: 00007fffd7ff0908
[  857.793715][T18815]  </TASK>
[  859.899119][   T29] audit: type=1807 audit(2147484828.611:38): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0
[  860.029834][   T29] audit: type=1802 audit(2147484828.611:39): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2817" res=0 errno=0
[  860.892268][T15669] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  860.892293][T15669] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260
[  860.908910][T15669] bt_err_ratelimited: 55 callbacks suppressed
[  860.908923][T15669] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  860.915335][T15669] Bluetooth: hci0: adv larger than maximum supported
[  860.923388][T15669] Bluetooth: hci0: adv larger than maximum supported
[  860.930347][T15669] Bluetooth: hci0: Malformed LE Event: 0x0d
[  861.136271][T18836] ima: policy update failed
[  861.140906][   T29] audit: type=1802 audit(2147484829.850:40): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2817" res=0 errno=0
[  861.266003][T18879] : Can't lookup blockdev
[  861.767361][T18887] FAULT_INJECTION: forcing a failure.
[  861.767361][T18887] name failslab, interval 1, probability 0, space 0, times 0
[  861.870191][T18887] CPU: 0 UID: 0 PID: 18887 Comm: syz.0.2825 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  861.870220][T18887] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  861.870226][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  861.870235][T18887] Call Trace:
[  861.870241][T18887]  <TASK>
[  861.870247][T18887]  dump_stack_lvl+0x100/0x190
[  861.870275][T18887]  should_fail_ex.cold+0x5/0xa
[  861.870293][T18887]  should_failslab+0xc2/0x120
[  861.870309][T18887]  __kmalloc_cache_noprof+0x7a/0x6f0
[  861.870328][T18887]  ? devlink_fmsg_nest_common.part.0+0x48/0x1f0
[  861.870352][T18887]  devlink_fmsg_nest_common.part.0+0x48/0x1f0
[  861.870373][T18887]  devlink_fmsg_u32_pair_put+0x284/0x2f0
[  861.870394][T18887]  ? __pfx_devlink_fmsg_u32_pair_put+0x10/0x10
[  861.870416][T18887]  ? devlink_fmsg_nest_common.part.0+0x14d/0x1f0
[  861.870439][T18887]  nsim_dev_dummy_fmsg_put+0x4d/0x1e0
[  861.870464][T18887]  devlink_health_do_dump+0x243/0x5f0
[  861.870487][T18887]  devlink_health_report+0x690/0xb50
[  861.870510][T18887]  ? __pfx_devlink_health_report+0x10/0x10
[  861.870533][T18887]  ? _copy_from_user+0x59/0xd0
[  861.870549][T18887]  nsim_dev_health_break_write+0x166/0x210
[  861.870573][T18887]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  861.870603][T18887]  full_proxy_write+0x135/0x1a0
[  861.870624][T18887]  vfs_write+0x2aa/0x1070
[  861.870647][T18887]  ? __pfx_full_proxy_write+0x10/0x10
[  861.870671][T18887]  ? __pfx_vfs_write+0x10/0x10
[  861.870692][T18887]  ? __fget_files+0x215/0x3d0
[  861.870711][T18887]  ? __fget_files+0x21f/0x3d0
[  861.870732][T18887]  ksys_write+0x12a/0x250
[  861.870746][T18887]  ? __pfx_ksys_write+0x10/0x10
[  861.870766][T18887]  do_syscall_64+0x106/0xf80
[  861.870791][T18887]  ? clear_bhb_loop+0x40/0x90
[  861.870811][T18887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.870826][T18887] RIP: 0033:0x7f27d519c799
[  861.870840][T18887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  861.870854][T18887] RSP: 002b:00007f27d60e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  861.870870][T18887] RAX: ffffffffffffffda RBX: 00007f27d5415fa0 RCX: 00007f27d519c799
[  861.870880][T18887] RDX: 00000000000001e1 RSI: 0000000000000000 RDI: 0000000000000009
[  861.870888][T18887] RBP: 00007f27d5232c99 R08: 0000000000000000 R09: 0000000000000000
[  861.870897][T18887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  861.870906][T18887] R13: 00007f27d5416038 R14: 00007f27d5415fa0 R15: 00007ffcf9b48fa8
[  861.870926][T18887]  </TASK>
[  862.307830][T18894] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2827'.
[  863.959585][T18929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2838'.
[  864.077258][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2838'.
[  864.682694][T18948] ACPI: Can not change Invalid GPE/Fixed Event status
[  865.523264][T18977] vcan0: tx drop: invalid da for name 0x000000000000003f
[  865.887920][T18986] bridge0: port 3(ipvlan0) entered blocking state
[  865.924942][T18986] bridge0: port 3(ipvlan0) entered disabled state
[  865.961477][T18986] ipvlan0: entered allmulticast mode
[  866.010863][T18986] veth0_vlan: entered allmulticast mode
[  866.052571][T18986] ipvlan0: left allmulticast mode
[  866.088046][T18986] veth0_vlan: left allmulticast mode
[  868.544200][T19054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2859'.
[  868.844393][T19062] FAULT_INJECTION: forcing a failure.
[  868.844393][T19062] name fail_futex, interval 1, probability 0, space 0, times 0
[  868.980177][T19062] CPU: 0 UID: 7 PID: 19062 Comm: syz.4.2864 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  868.980208][T19062] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  868.980213][T19062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  868.980222][T19062] Call Trace:
[  868.980228][T19062]  <TASK>
[  868.980234][T19062]  dump_stack_lvl+0x100/0x190
[  868.980261][T19062]  should_fail_ex.cold+0x5/0xa
[  868.980280][T19062]  get_futex_key+0x1d2/0x1620
[  868.980301][T19062]  ? __pfx_get_futex_key+0x10/0x10
[  868.980333][T19062]  futex_wake+0xea/0x530
[  868.980357][T19062]  ? __pfx_futex_wake+0x10/0x10
[  868.980382][T19062]  ? errseq_sample+0x51/0x70
[  868.980396][T19062]  ? file_init_path+0x48e/0x670
[  868.980416][T19062]  do_futex+0x32b/0x350
[  868.980435][T19062]  ? __pfx_do_futex+0x10/0x10
[  868.980452][T19062]  ? fd_install+0x223/0x580
[  868.980470][T19062]  __x64_sys_futex+0x34f/0x4d0
[  868.980490][T19062]  ? __sys_socket+0xac/0x260
[  868.980504][T19062]  ? __pfx___x64_sys_futex+0x10/0x10
[  868.980530][T19062]  do_syscall_64+0x106/0xf80
[  868.980548][T19062]  ? clear_bhb_loop+0x40/0x90
[  868.980566][T19062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.980581][T19062] RIP: 0033:0x7f691e59c799
[  868.980594][T19062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.980609][T19062] RSP: 002b:00007f691f5260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  868.980624][T19062] RAX: ffffffffffffffda RBX: 00007f691e815fa8 RCX: 00007f691e59c799
[  868.980634][T19062] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f691e815fac
[  868.980643][T19062] RBP: 00007f691e815fa0 R08: 0000000000000000 R09: 0000000000000000
[  868.980651][T19062] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  868.980660][T19062] R13: 00007f691e816038 R14: 00007fffd7ff0820 R15: 00007fffd7ff0908
[  868.980679][T19062]  </TASK>
[  870.313292][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  870.313364][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  872.492990][T19088] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  872.971696][T19097] FAULT_INJECTION: forcing a failure.
[  872.971696][T19097] name failslab, interval 1, probability 0, space 0, times 0
[  873.061817][T19097] CPU: 0 UID: 0 PID: 19097 Comm: syz.0.2875 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  873.061846][T19097] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  873.061852][T19097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  873.061861][T19097] Call Trace:
[  873.061867][T19097]  <TASK>
[  873.061873][T19097]  dump_stack_lvl+0x100/0x190
[  873.061899][T19097]  should_fail_ex.cold+0x5/0xa
[  873.061926][T19097]  ? devlink_fmsg_put_value+0xaf/0x2c0
[  873.061945][T19097]  should_failslab+0xc2/0x120
[  873.061961][T19097]  __kmalloc_noprof+0xe0/0x850
[  873.061982][T19097]  ? __kmalloc_noprof+0x320/0x850
[  873.062007][T19097]  devlink_fmsg_put_value+0xaf/0x2c0
[  873.062028][T19097]  devlink_fmsg_u8_pair_put+0x19c/0x2f0
[  873.062049][T19097]  ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10
[  873.062071][T19097]  ? devlink_fmsg_nest_common.part.0+0x14d/0x1f0
[  873.062093][T19097]  nsim_dev_dummy_fmsg_put+0x39/0x1e0
[  873.062118][T19097]  devlink_health_do_dump+0x243/0x5f0
[  873.062141][T19097]  devlink_health_report+0x690/0xb50
[  873.062164][T19097]  ? __pfx_devlink_health_report+0x10/0x10
[  873.062186][T19097]  ? _copy_from_user+0x59/0xd0
[  873.062203][T19097]  nsim_dev_health_break_write+0x166/0x210
[  873.062227][T19097]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  873.062256][T19097]  full_proxy_write+0x135/0x1a0
[  873.062277][T19097]  vfs_write+0x2aa/0x1070
[  873.062300][T19097]  ? __pfx_full_proxy_write+0x10/0x10
[  873.062319][T19097]  ? __pfx_vfs_write+0x10/0x10
[  873.062341][T19097]  ? __fget_files+0x215/0x3d0
[  873.062360][T19097]  ? __fget_files+0x21f/0x3d0
[  873.062378][T19097]  ksys_write+0x12a/0x250
[  873.062392][T19097]  ? __pfx_ksys_write+0x10/0x10
[  873.062411][T19097]  do_syscall_64+0x106/0xf80
[  873.062429][T19097]  ? clear_bhb_loop+0x40/0x90
[  873.062447][T19097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.062462][T19097] RIP: 0033:0x7f27d519c799
[  873.062475][T19097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.062490][T19097] RSP: 002b:00007f27d60e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  873.062505][T19097] RAX: ffffffffffffffda RBX: 00007f27d5415fa0 RCX: 00007f27d519c799
[  873.062515][T19097] RDX: 00000000000001e1 RSI: 0000000000000000 RDI: 0000000000000009
[  873.062526][T19097] RBP: 00007f27d5232c99 R08: 0000000000000000 R09: 0000000000000000
[  873.062535][T19097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  873.062543][T19097] R13: 00007f27d5416038 R14: 00007f27d5415fa0 R15: 00007ffcf9b48fa8
[  873.062563][T19097]  </TASK>
[  873.752945][T19106] nbd: must specify an index to disconnect
[  873.791427][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'.
[  873.914270][T19111] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  875.841912][T19123] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36
[  876.692252][T19130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37
[  876.709903][T19132] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 2, inode_bitmap = 139
[  876.843549][T19132] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum
[  877.103876][T19138] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum
[  877.155078][T18222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.332567][T19139] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 3: bad block bitmap checksum
[  877.598238][T18222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.781487][T18222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.009751][T18222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.425107][T18719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  878.440638][T18719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  878.448776][T18719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  878.457625][T18719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  878.465192][T18719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  879.297032][T19161] chnl_net:caif_netlink_parms(): no params data found
[  879.616315][T18719] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260
[  879.616340][T18719] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260
[  879.633152][T18719] Bluetooth: hci4: Unknown advertising packet type: 0x7f
[  879.633212][T18719] Bluetooth: hci4: Malformed LE Event: 0x0d
[  879.797564][T19161] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.827834][T19161] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.862292][T19161] bridge_slave_0: entered allmulticast mode
[  879.906852][T19161] bridge_slave_0: entered promiscuous mode
[  879.989006][T19161] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.027074][T19161] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.067653][T19161] bridge_slave_1: entered allmulticast mode
[  880.110806][T19161] bridge_slave_1: entered promiscuous mode
[  880.293171][T19161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.350668][T19161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.564385][T18719] Bluetooth: hci0: command tx timeout
[  880.643830][T19161] team0: Port device team_slave_0 added
[  880.700835][T19161] team0: Port device team_slave_1 added
[  880.869431][T19161] batman_adv: batadv0: Adding interface: batadv_slave_0
[  880.912561][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.097480][T19161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  881.241019][T19195] bridge0: port 3(gretap0) entered blocking state
[  881.331458][T19195] bridge0: port 3(gretap0) entered disabled state
[  881.446199][T19195] gretap0: entered allmulticast mode
[  881.525319][T19195] gretap0: entered promiscuous mode
[  881.600974][T19195] FAULT_INJECTION: forcing a failure.
[  881.600974][T19195] name failslab, interval 1, probability 0, space 0, times 0
[  881.613782][T19195] CPU: 0 UID: 0 PID: 19195 Comm: syz.0.2892 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  881.613811][T19195] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  881.613817][T19195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  881.613826][T19195] Call Trace:
[  881.613832][T19195]  <TASK>
[  881.613839][T19195]  dump_stack_lvl+0x100/0x190
[  881.613866][T19195]  should_fail_ex.cold+0x5/0xa
[  881.613885][T19195]  ? switchdev_deferred_enqueue+0x3e/0x2d0
[  881.613960][T19195]  should_failslab+0xc2/0x120
[  881.613977][T19195]  __kmalloc_noprof+0xe0/0x850
[  881.614002][T19195]  ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10
[  881.614021][T19195]  switchdev_deferred_enqueue+0x3e/0x2d0
[  881.614040][T19195]  switchdev_port_attr_set+0xb5/0x100
[  881.614058][T19195]  br_set_state+0x235/0x610
[  881.614128][T19195]  ? __pfx_br_set_state+0x10/0x10
[  881.614150][T19195]  ? do_raw_spin_lock+0x128/0x260
[  881.614172][T19195]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  881.614195][T19195]  br_init_port+0xc9/0x210
[  881.614214][T19195]  br_stp_enable_port+0x15/0x50
[  881.614233][T19195]  br_add_if+0x1781/0x1b40
[  881.614248][T19195]  ? veth_get_iflink+0x253/0x2c0
[  881.614324][T19195]  add_del_if+0x114/0x160
[  881.614362][T19195]  br_dev_siocdevprivate+0x8ac/0x1650
[  881.614381][T19195]  ? __lock_acquire+0x4a5/0x2630
[  881.614400][T19195]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  881.614427][T19195]  ? do_raw_spin_lock+0x128/0x260
[  881.614452][T19195]  ? mark_held_locks+0x40/0x70
[  881.614473][T19195]  ? netdev_name_node_lookup+0x107/0x150
[  881.614515][T19195]  ? __mutex_lock+0x26a/0x1b90
[  881.614537][T19195]  dev_ifsioc+0xc1e/0x1e90
[  881.614578][T19195]  ? __pfx_dev_ifsioc+0x10/0x10
[  881.614593][T19195]  ? __pfx___mutex_lock+0x10/0x10
[  881.614618][T19195]  ? dev_load+0x8e/0x240
[  881.614633][T19195]  ? dev_load+0x8e/0x240
[  881.614652][T19195]  dev_ioctl+0x70e/0x1070
[  881.614670][T19195]  sock_ioctl+0x494/0x6b0
[  881.614693][T19195]  ? __pfx_sock_ioctl+0x10/0x10
[  881.614714][T19195]  ? hook_file_ioctl_common+0x146/0x410
[  881.614742][T19195]  ? __fget_files+0x21f/0x3d0
[  881.614758][T19195]  ? __pfx_sock_ioctl+0x10/0x10
[  881.614782][T19195]  __x64_sys_ioctl+0x18e/0x210
[  881.614804][T19195]  do_syscall_64+0x106/0xf80
[  881.614821][T19195]  ? clear_bhb_loop+0x40/0x90
[  881.614839][T19195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  881.614855][T19195] RIP: 0033:0x7f27d519c799
[  881.614870][T19195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  881.614884][T19195] RSP: 002b:00007f27d60a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  881.614900][T19195] RAX: ffffffffffffffda RBX: 00007f27d5416180 RCX: 00007f27d519c799
[  881.614911][T19195] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008
[  881.614920][T19195] RBP: 00007f27d5232c99 R08: 0000000000000000 R09: 0000000000000000
[  881.614929][T19195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  881.614938][T19195] R13: 00007f27d5416218 R14: 00007f27d5416180 R15: 00007ffcf9b48fa8
[  881.614958][T19195]  </TASK>
[  881.914404][T19195] bridge0: error setting offload STP state on port 3(gretap0)
[  881.921950][T19195] bridge0: port 3(gretap0) entered forwarding state
[  882.695240][T18719] Bluetooth: hci0: command tx timeout
[  883.418440][T19161] batman_adv: batadv0: Adding interface: batadv_slave_1
[  883.462004][T19161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  883.611645][T19161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  883.914345][T19161] hsr_slave_0: entered promiscuous mode
[  883.951977][T19161] hsr_slave_1: entered promiscuous mode
[  883.984503][T19161] debugfs: 'hsr0' already exists in 'hsr'
[  884.010911][T19161] Cannot create hsr debugfs directory
[  884.393810][T16612] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1377 with max blocks 3 with error 117
[  884.493398][T16612] EXT4-fs (sda1): This should not happen!! Data will be lost
[  884.493398][T16612] 
[  884.716127][T18719] Bluetooth: hci0: command tx timeout
[  886.797764][T18719] Bluetooth: hci0: command tx timeout
[  889.242328][T19247] Process accounting resumed
[  889.411304][T19282] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  889.481609][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  889.528997][T19282] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  889.568606][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  889.611560][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  889.668258][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  889.720159][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  889.742265][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  889.781545][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  889.820458][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  889.860387][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  889.899279][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  889.949173][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  889.979070][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  890.018937][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  890.052324][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  890.103662][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  890.152900][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  890.192922][T19280] netlink: 'syz.3.2905': attribute type 16 has an invalid length.
[  890.230354][T19280] netlink: 50 bytes leftover after parsing attributes in process `syz.3.2905'.
[  892.798197][T15669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  892.817836][T15669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  892.825760][T15669] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  892.833651][T15669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  892.841249][T15669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  893.427009][T19321] chnl_net:caif_netlink_parms(): no params data found
[  893.696457][T19321] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.732784][T19321] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.770739][T19321] bridge_slave_0: entered allmulticast mode
[  893.802091][T19321] bridge_slave_0: entered promiscuous mode
[  893.833881][T19321] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.870716][T19321] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.900979][T19321] bridge_slave_1: entered allmulticast mode
[  893.926497][T19321] bridge_slave_1: entered promiscuous mode
[  894.042115][T19321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  894.094565][T19321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  894.225152][T19321] team0: Port device team_slave_0 added
[  894.253454][T19321] team0: Port device team_slave_1 added
[  894.387038][T19321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  894.424435][T19321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  894.527772][T19321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  894.578950][T19321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  894.614102][T19321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  894.719450][T19321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  894.881703][T15669] Bluetooth: hci3: command tx timeout
[  894.915863][T19321] hsr_slave_0: entered promiscuous mode
[  894.942879][T19341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2912'.
[  894.961954][T19321] hsr_slave_1: entered promiscuous mode
[  894.977703][T19321] debugfs: 'hsr0' already exists in 'hsr'
[  895.004454][T19321] Cannot create hsr debugfs directory
[  896.963837][T15669] Bluetooth: hci3: command tx timeout
[  898.945672][T19390] usbip-vudc usbip-vudc.0: gadget not bound
[  899.044553][T15669] Bluetooth: hci3: command tx timeout
[  899.210153][T18719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  899.221900][T18719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  899.230522][T18719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  899.239291][T18719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  899.248066][T18719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  899.327705][T19395] FAULT_INJECTION: forcing a failure.
[  899.327705][T19395] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  899.388359][T19395] CPU: 0 UID: 0 PID: 19395 Comm: syz.3.2923 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  899.388387][T19395] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  899.388393][T19395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  899.388403][T19395] Call Trace:
[  899.388408][T19395]  <TASK>
[  899.388415][T19395]  dump_stack_lvl+0x100/0x190
[  899.388443][T19395]  should_fail_ex.cold+0x5/0xa
[  899.388458][T19395]  ? prepare_alloc_pages+0x16d/0x5f0
[  899.388477][T19395]  should_fail_alloc_page+0xeb/0x140
[  899.388494][T19395]  prepare_alloc_pages+0x1f0/0x5f0
[  899.388515][T19395]  __alloc_frozen_pages_noprof+0x19a/0x2ba0
[  899.388538][T19395]  ? __pfx_stack_trace_save+0x10/0x10
[  899.388552][T19395]  ? __pfx_validate_mm+0x10/0x10
[  899.388571][T19395]  ? stack_depot_save_flags+0x27/0x9d0
[  899.388592][T19395]  ? kasan_save_stack+0x3f/0x50
[  899.388615][T19395]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  899.388640][T19395]  ? __lock_acquire+0x4a5/0x2630
[  899.388665][T19395]  ? lock_acquire+0x1cf/0x380
[  899.388683][T19395]  ? find_held_lock+0x2b/0x80
[  899.388696][T19395]  ? page_table_check_set+0x49a/0xa10
[  899.388719][T19395]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  899.388744][T19395]  ? policy_nodemask+0xed/0x4f0
[  899.388761][T19395]  alloc_pages_mpol+0x1fb/0x550
[  899.388778][T19395]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  899.388798][T19395]  folio_alloc_mpol_noprof+0x36/0x340
[  899.388817][T19395]  vma_alloc_folio_noprof+0xed/0x1d0
[  899.388835][T19395]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  899.388869][T19395]  do_anonymous_page+0xb3a/0x1fb0
[  899.388896][T19395]  __handle_mm_fault+0x1d42/0x2b60
[  899.388922][T19395]  ? __pfx___handle_mm_fault+0x10/0x10
[  899.388942][T19395]  ? pte_offset_map_lock+0x174/0x320
[  899.388958][T19395]  ? find_held_lock+0x2b/0x80
[  899.388977][T19395]  ? follow_page_pte+0x5b3/0x1400
[  899.388997][T19395]  handle_mm_fault+0x36d/0xa20
[  899.389020][T19395]  __get_user_pages+0xf9c/0x34d0
[  899.389044][T19395]  ? __pfx___get_user_pages+0x10/0x10
[  899.389066][T19395]  populate_vma_page_range+0x267/0x3f0
[  899.389085][T19395]  ? __pfx_populate_vma_page_range+0x10/0x10
[  899.389102][T19395]  ? __pfx_find_vma_intersection+0x10/0x10
[  899.389118][T19395]  ? do_mmap+0x93f/0x12f0
[  899.389136][T19395]  __mm_populate+0x107/0x3a0
[  899.389153][T19395]  ? __pfx___mm_populate+0x10/0x10
[  899.389171][T19395]  ? up_write+0x290/0x4f0
[  899.389193][T19395]  vm_mmap_pgoff+0x37f/0x470
[  899.389212][T19395]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  899.389229][T19395]  ? do_futex+0x192/0x350
[  899.389248][T19395]  ? __pfx_do_futex+0x10/0x10
[  899.389265][T19395]  ? __pfx_do_sys_openat2+0x10/0x10
[  899.389287][T19395]  ksys_mmap_pgoff+0xe1/0x650
[  899.389302][T19395]  ? __x64_sys_futex+0x34f/0x4d0
[  899.389320][T19395]  ? __x64_sys_futex+0x358/0x4d0
[  899.389338][T19395]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  899.389353][T19395]  ? xfd_validate_state+0x129/0x190
[  899.389377][T19395]  __x64_sys_mmap+0x125/0x190
[  899.389400][T19395]  do_syscall_64+0x106/0xf80
[  899.389418][T19395]  ? clear_bhb_loop+0x40/0x90
[  899.389437][T19395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.389453][T19395] RIP: 0033:0x7fe78ab9c799
[  899.389467][T19395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  899.389481][T19395] RSP: 002b:00007fe78ba95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  899.389497][T19395] RAX: ffffffffffffffda RBX: 00007fe78ae15fa0 RCX: 00007fe78ab9c799
[  899.389507][T19395] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[  899.389516][T19395] RBP: 00007fe78ac32c99 R08: 0000000000000007 R09: 0000000000028000
[  899.389525][T19395] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  899.389534][T19395] R13: 00007fe78ae16038 R14: 00007fe78ae15fa0 R15: 00007ffc9c024ae8
[  899.389555][T19395]  </TASK>
[  899.870940][T19395] FAULT_INJECTION: forcing a failure.
[  899.870940][T19395] name fail_futex, interval 1, probability 0, space 0, times 0
[  899.886334][T19395] CPU: 0 UID: 0 PID: 19395 Comm: syz.3.2923 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  899.886361][T19395] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  899.886367][T19395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  899.886376][T19395] Call Trace:
[  899.886381][T19395]  <TASK>
[  899.886387][T19395]  dump_stack_lvl+0x100/0x190
[  899.886413][T19395]  should_fail_ex.cold+0x5/0xa
[  899.886430][T19395]  get_futex_key+0x1d2/0x1620
[  899.886451][T19395]  ? __pfx_get_futex_key+0x10/0x10
[  899.886467][T19395]  ? lock_acquire+0x1cf/0x380
[  899.886491][T19395]  futex_wake+0xea/0x530
[  899.886513][T19395]  ? __pfx_futex_wake+0x10/0x10
[  899.886535][T19395]  ? exit_mm_release+0x19/0x30
[  899.886557][T19395]  do_futex+0x32b/0x350
[  899.886575][T19395]  ? __pfx_do_futex+0x10/0x10
[  899.886592][T19395]  ? __might_fault+0xc5/0x140
[  899.886617][T19395]  mm_release+0x24a/0x2f0
[  899.886632][T19395]  do_exit+0x704/0x2b60
[  899.886653][T19395]  ? __pfx_do_exit+0x10/0x10
[  899.886671][T19395]  ? do_raw_spin_lock+0x128/0x260
[  899.886692][T19395]  ? find_held_lock+0x2b/0x80
[  899.886705][T19395]  ? get_signal+0x7e0/0x21e0
[  899.886721][T19395]  do_group_exit+0xd5/0x2a0
[  899.886742][T19395]  get_signal+0x1ec7/0x21e0
[  899.886763][T19395]  ? __pfx_get_signal+0x10/0x10
[  899.886779][T19395]  ? do_futex+0x192/0x350
[  899.886800][T19395]  arch_do_signal_or_restart+0x91/0x770
[  899.886824][T19395]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  899.886847][T19395]  ? __pfx___x64_sys_futex+0x10/0x10
[  899.886870][T19395]  exit_to_user_mode_loop+0x86/0x4a0
[  899.886891][T19395]  do_syscall_64+0x668/0xf80
[  899.886909][T19395]  ? clear_bhb_loop+0x40/0x90
[  899.886927][T19395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.886942][T19395] RIP: 0033:0x7fe78ab9c799
[  899.886956][T19395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  899.886970][T19395] RSP: 002b:00007fe78ba950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  899.886984][T19395] RAX: fffffffffffffe00 RBX: 00007fe78ae15fa8 RCX: 00007fe78ab9c799
[  899.886994][T19395] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe78ae15fa8
[  899.887003][T19395] RBP: 00007fe78ae15fa0 R08: 0000000000000000 R09: 0000000000000000
[  899.887011][T19395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  899.887020][T19395] R13: 00007fe78ae16038 R14: 00007ffc9c024a00 R15: 00007ffc9c024ae8
[  899.887039][T19395]  </TASK>
[  900.237402][T19392] chnl_net:caif_netlink_parms(): no params data found
[  900.320944][T19392] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.328397][T19392] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.337651][T19392] bridge_slave_0: entered allmulticast mode
[  900.345847][T19392] bridge_slave_0: entered promiscuous mode
[  900.353667][T19392] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.361083][T19392] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.369455][T19392] bridge_slave_1: entered allmulticast mode
[  900.379390][T19392] bridge_slave_1: entered promiscuous mode
[  900.479976][T19392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  900.568970][T19392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  900.679322][T19392] team0: Port device team_slave_0 added
[  900.717360][T19392] team0: Port device team_slave_1 added
[  900.847268][T19392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  900.873540][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.977377][T19392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  901.040275][T19392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  901.073706][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  901.124913][T18719] Bluetooth: hci3: command tx timeout
[  901.157596][T19392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.284654][T18719] Bluetooth: hci5: command tx timeout
[  901.377855][T19392] hsr_slave_0: entered promiscuous mode
[  901.398004][T19392] hsr_slave_1: entered promiscuous mode
[  901.418112][T19392] debugfs: 'hsr0' already exists in 'hsr'
[  901.423862][T19392] Cannot create hsr debugfs directory
[  902.723944][T19418] zswap: compressor  not available
[  903.365743][T18719] Bluetooth: hci5: command tx timeout
[  903.759302][T15669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  903.771054][T15669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  903.778887][T15669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  903.786844][T15669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  903.794226][T15669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  904.201861][T19423] chnl_net:caif_netlink_parms(): no params data found
[  904.412688][T19423] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.442491][T19423] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.470151][T19423] bridge_slave_0: entered allmulticast mode
[  904.493760][T19423] bridge_slave_0: entered promiscuous mode
[  904.518689][T19423] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.540590][T19423] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.562789][T19423] bridge_slave_1: entered allmulticast mode
[  904.589704][T19423] bridge_slave_1: entered promiscuous mode
[  904.708519][T19423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  904.738808][T19423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  904.838220][T19423] team0: Port device team_slave_0 added
[  904.871265][T19423] team0: Port device team_slave_1 added
[  904.958440][T19423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  904.965403][T19423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  905.054864][T19423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  905.092369][T19423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  905.113646][T19423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  905.195640][T19423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  905.331479][T19423] hsr_slave_0: entered promiscuous mode
[  905.351719][T19423] hsr_slave_1: entered promiscuous mode
[  905.381535][T19423] debugfs: 'hsr0' already exists in 'hsr'
[  905.401191][T19423] Cannot create hsr debugfs directory
[  905.446783][T15669] Bluetooth: hci5: command tx timeout
[  905.846736][T15669] Bluetooth: hci4: command tx timeout
[  907.527783][T15669] Bluetooth: hci5: command tx timeout
[  907.929571][T15669] Bluetooth: hci4: command tx timeout
[  910.008933][T15669] Bluetooth: hci4: command tx timeout
[  912.090237][T15669] Bluetooth: hci4: command tx timeout
[  931.784144][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  931.790532][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  938.965136][T18719] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  938.976760][T18719] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  938.985996][T18719] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  938.994818][T18719] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  939.002197][T18719] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  939.592417][T19435] chnl_net:caif_netlink_parms(): no params data found
[  939.858310][T19435] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.895074][T19435] bridge0: port 1(bridge_slave_0) entered disabled state
[  939.902291][T19435] bridge_slave_0: entered allmulticast mode
[  939.974023][T19435] bridge_slave_0: entered promiscuous mode
[  940.005863][T19435] bridge0: port 2(bridge_slave_1) entered blocking state
[  940.040604][T19435] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.061526][T19435] bridge_slave_1: entered allmulticast mode
[  940.096055][T19435] bridge_slave_1: entered promiscuous mode
[  940.211923][T19435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  940.296828][T19435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  940.405293][T19435] team0: Port device team_slave_0 added
[  940.435663][T19435] team0: Port device team_slave_1 added
[  940.564407][T19435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  940.571377][T19435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  940.684074][T19435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  940.740644][T19435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  940.775346][T19435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  940.887314][T19435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.057122][T19435] hsr_slave_0: entered promiscuous mode
[  941.065470][T18719] Bluetooth: hci6: command tx timeout
[  941.094873][T19435] hsr_slave_1: entered promiscuous mode
[  941.121294][T19435] debugfs: 'hsr0' already exists in 'hsr'
[  941.147289][T19435] Cannot create hsr debugfs directory
[  943.148072][T18719] Bluetooth: hci6: command tx timeout
[  945.226584][T18719] Bluetooth: hci6: command tx timeout
[  947.307608][T18719] Bluetooth: hci6: command tx timeout
[  953.486782][T15669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  953.499348][T15669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  953.507498][T15669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  953.518663][T15669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  953.527025][T15669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  953.924406][T19449] chnl_net:caif_netlink_parms(): no params data found
[  954.172029][T19449] bridge0: port 1(bridge_slave_0) entered blocking state
[  954.179166][T19449] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.201384][T19449] bridge_slave_0: entered allmulticast mode
[  954.222482][T19449] bridge_slave_0: entered promiscuous mode
[  954.256847][T19449] bridge0: port 2(bridge_slave_1) entered blocking state
[  954.293051][T19449] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.300287][T19449] bridge_slave_1: entered allmulticast mode
[  954.337554][T19449] bridge_slave_1: entered promiscuous mode
[  954.425177][T19449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  954.460598][T19449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  954.550496][T19449] team0: Port device team_slave_0 added
[  954.586672][T19449] team0: Port device team_slave_1 added
[  954.667269][T19449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  954.689857][T19449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.769650][T19449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  954.808055][T19449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  954.834628][T19449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  954.923203][T19449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  955.063291][T19449] hsr_slave_0: entered promiscuous mode
[  955.083835][T19449] hsr_slave_1: entered promiscuous mode
[  955.102713][T19449] debugfs: 'hsr0' already exists in 'hsr'
[  955.108467][T19449] Cannot create hsr debugfs directory
[  955.553228][T15669] Bluetooth: hci7: command tx timeout
[  957.632868][T15669] Bluetooth: hci7: command tx timeout
[  959.505948][T18719] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  959.516548][T18719] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  959.524642][T18719] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  959.532219][T18719] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  959.539981][T18719] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  959.716418][T18719] Bluetooth: hci7: command tx timeout
[  959.909007][T19463] chnl_net:caif_netlink_parms(): no params data found
[  960.127128][T19463] bridge0: port 1(bridge_slave_0) entered blocking state
[  960.156695][T19463] bridge0: port 1(bridge_slave_0) entered disabled state
[  960.176581][T19463] bridge_slave_0: entered allmulticast mode
[  960.199162][T19463] bridge_slave_0: entered promiscuous mode
[  960.225766][T19463] bridge0: port 2(bridge_slave_1) entered blocking state
[  960.234947][T19463] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.242154][T19463] bridge_slave_1: entered allmulticast mode
[  960.282981][T19463] bridge_slave_1: entered promiscuous mode
[  960.368805][T19463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  960.410268][T19463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  960.499956][T19463] team0: Port device team_slave_0 added
[  960.540421][T19463] team0: Port device team_slave_1 added
[  960.612900][T19463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  960.635888][T19463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  960.731868][T19463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  960.768909][T19463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  960.795804][T19463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  960.865278][T19463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  960.981942][T19463] hsr_slave_0: entered promiscuous mode
[  961.018364][T19463] hsr_slave_1: entered promiscuous mode
[  961.037709][T19463] debugfs: 'hsr0' already exists in 'hsr'
[  961.056346][T19463] Cannot create hsr debugfs directory
[  961.635659][T18719] Bluetooth: hci8: command tx timeout
[  961.795258][T18719] Bluetooth: hci7: command tx timeout
[  963.715631][T18719] Bluetooth: hci8: command tx timeout
[  963.987163][T15669] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  963.997424][T15669] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  964.005348][T15669] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  964.016380][T15669] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  964.023757][T15669] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  964.438018][T19474] chnl_net:caif_netlink_parms(): no params data found
[  964.740873][T19474] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.776571][T19474] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.816650][T19474] bridge_slave_0: entered allmulticast mode
[  964.851026][T19474] bridge_slave_0: entered promiscuous mode
[  964.884629][T19474] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.916797][T19474] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.924035][T19474] bridge_slave_1: entered allmulticast mode
[  964.985256][T19474] bridge_slave_1: entered promiscuous mode
[  965.111848][T19474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  965.161750][T19474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  965.290979][T19474] team0: Port device team_slave_0 added
[  965.330801][T19474] team0: Port device team_slave_1 added
[  965.433882][T19474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  965.466547][T19474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.577911][T19474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  965.628288][T19474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  965.635256][T19474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.782125][T19474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  965.797082][T15669] Bluetooth: hci8: command tx timeout
[  965.957861][T19474] hsr_slave_0: entered promiscuous mode
[  965.987083][T19474] hsr_slave_1: entered promiscuous mode
[  966.006925][T19474] debugfs: 'hsr0' already exists in 'hsr'
[  966.059154][T19474] Cannot create hsr debugfs directory
[  966.118605][T15669] Bluetooth: hci9: command tx timeout
[  967.877793][T15669] Bluetooth: hci8: command tx timeout
[  968.197919][T15669] Bluetooth: hci9: command tx timeout
[  970.279191][T15669] Bluetooth: hci9: command tx timeout
[  972.359996][T15669] Bluetooth: hci9: command tx timeout
[  993.255077][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  993.261451][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  999.634222][T18719] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  999.645595][T18719] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  999.654077][T18719] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  999.664679][T18719] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  999.672153][T18719] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1000.119124][T19489] chnl_net:caif_netlink_parms(): no params data found
[ 1000.429598][T19489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1000.464309][T19489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1000.471733][T19489] bridge_slave_0: entered allmulticast mode
[ 1000.536874][T19489] bridge_slave_0: entered promiscuous mode
[ 1000.559130][T19489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1000.596139][T19489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1000.603380][T19489] bridge_slave_1: entered allmulticast mode
[ 1000.658615][T19489] bridge_slave_1: entered promiscuous mode
[ 1000.770543][T19489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.813526][T19489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1000.910215][T19489] team0: Port device team_slave_0 added
[ 1000.937966][T19489] team0: Port device team_slave_1 added
[ 1001.028489][T19489] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1001.050642][T19489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.117927][T19489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1001.159121][T19489] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1001.183428][T19489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1001.268838][T19489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1001.429215][T19489] hsr_slave_0: entered promiscuous mode
[ 1001.456544][T19489] hsr_slave_1: entered promiscuous mode
[ 1001.475657][T19489] debugfs: 'hsr0' already exists in 'hsr'
[ 1001.481421][T19489] Cannot create hsr debugfs directory
[ 1001.735321][T18719] Bluetooth: hci10: command tx timeout
[ 1003.816318][T18719] Bluetooth: hci10: command tx timeout
[ 1005.580501][T18719] Bluetooth: hci0: command 0x0406 tx timeout
[ 1005.897297][T15669] Bluetooth: hci10: command tx timeout
[ 1007.978502][T15669] Bluetooth: hci10: command tx timeout
[ 1014.027393][T15638] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1014.037684][T15638] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1014.048790][T15638] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1014.056668][T15638] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1014.066083][T15638] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1014.454039][T19504] chnl_net:caif_netlink_parms(): no params data found
[ 1014.685691][T19504] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1014.722486][T19504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.729740][T19504] bridge_slave_0: entered allmulticast mode
[ 1014.766030][T19504] bridge_slave_0: entered promiscuous mode
[ 1014.788915][T19504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.814118][T19504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.836830][T19504] bridge_slave_1: entered allmulticast mode
[ 1014.863545][T19504] bridge_slave_1: entered promiscuous mode
[ 1014.960837][T19504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1015.014752][T19504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1015.103067][T19504] team0: Port device team_slave_0 added
[ 1015.128867][T19504] team0: Port device team_slave_1 added
[ 1015.210056][T19504] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1015.233076][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1015.320954][T19504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1015.360422][T19504] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1015.382460][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1015.458064][T19504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1015.587047][T19504] hsr_slave_0: entered promiscuous mode
[ 1015.609838][T19504] hsr_slave_1: entered promiscuous mode
[ 1015.636506][T19504] debugfs: 'hsr0' already exists in 'hsr'
[ 1015.654377][T19504] Cannot create hsr debugfs directory
[ 1015.825055][T15638] Bluetooth: hci3: command 0x0406 tx timeout
[ 1016.143277][T18719] Bluetooth: hci11: command tx timeout
[ 1018.224002][T18719] Bluetooth: hci11: command tx timeout
[ 1020.055127][T18719] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1020.066153][T18719] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1020.074345][T18719] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1020.083505][T18719] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1020.091302][T18719] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1020.304184][T18719] Bluetooth: hci11: command tx timeout
[ 1020.664699][T19518] chnl_net:caif_netlink_parms(): no params data found
[ 1020.922782][T19518] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1020.953815][T19518] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1020.976553][T19518] bridge_slave_0: entered allmulticast mode
[ 1020.998742][T19518] bridge_slave_0: entered promiscuous mode
[ 1021.022051][T19518] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1021.053812][T19518] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.076728][T19518] bridge_slave_1: entered allmulticast mode
[ 1021.099294][T19518] bridge_slave_1: entered promiscuous mode
[ 1021.192437][T19518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1021.227490][T19518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1021.320226][T19518] team0: Port device team_slave_0 added
[ 1021.357711][T19518] team0: Port device team_slave_1 added
[ 1021.437499][T19518] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1021.458858][T19518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1021.528540][T19518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1021.572229][T19518] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1021.594248][T19518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1021.715330][T19518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1021.839448][T19518] hsr_slave_0: entered promiscuous mode
[ 1021.859841][T19518] hsr_slave_1: entered promiscuous mode
[ 1021.880764][T19518] debugfs: 'hsr0' already exists in 'hsr'
[ 1021.900964][T19518] Cannot create hsr debugfs directory
[ 1022.145093][T18719] Bluetooth: hci12: command tx timeout
[ 1022.385273][T18719] Bluetooth: hci11: command tx timeout
[ 1024.226906][T16960] Bluetooth: hci12: command tx timeout
[ 1024.564174][T15669] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1024.574730][T15669] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1024.582926][T15669] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1024.593862][T15669] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1024.601702][T15669] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1025.014681][T19531] chnl_net:caif_netlink_parms(): no params data found
[ 1025.220172][T19531] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1025.250560][T19531] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.290068][T19531] bridge_slave_0: entered allmulticast mode
[ 1025.331521][T19531] bridge_slave_0: entered promiscuous mode
[ 1025.348664][T19531] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1025.374971][T19531] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1025.400434][T19531] bridge_slave_1: entered allmulticast mode
[ 1025.420722][T19531] bridge_slave_1: entered promiscuous mode
[ 1025.515569][T19531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1025.554448][T19531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1025.648476][T19531] team0: Port device team_slave_0 added
[ 1025.672080][T19531] team0: Port device team_slave_1 added
[ 1025.751140][T19531] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1025.773262][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1025.858208][T19531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1025.899038][T19531] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1025.906180][T19531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1025.999299][T19531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1026.072884][T15669] Bluetooth: hci5: command 0x0406 tx timeout
[ 1026.079005][T16960] Bluetooth: hci4: command 0x0406 tx timeout
[ 1026.168993][T19531] hsr_slave_0: entered promiscuous mode
[ 1026.188322][T19531] hsr_slave_1: entered promiscuous mode
[ 1026.208452][T19531] debugfs: 'hsr0' already exists in 'hsr'
[ 1026.214227][T19531] Cannot create hsr debugfs directory
[ 1026.309288][T18719] Bluetooth: hci12: command tx timeout
[ 1026.627154][T18719] Bluetooth: hci13: command tx timeout
[ 1028.388026][T18719] Bluetooth: hci12: command tx timeout
[ 1028.708573][T18719] Bluetooth: hci13: command tx timeout
[ 1030.790139][T18719] Bluetooth: hci13: command tx timeout
[ 1032.870434][T18719] Bluetooth: hci13: command tx timeout
[ 1038.072971][   T30] INFO: task kworker/u11:8:18222 blocked for more than 143 seconds.
[ 1038.080984][   T30]       Tainted: G     U       L      syzkaller #0
[ 1038.088136][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1038.112827][   T30] task:kworker/u11:8   state:D stack:25848 pid:18222 tgid:18222 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1038.173134][   T30] Workqueue: netns cleanup_net
[ 1038.177946][   T30] Call Trace:
[ 1038.181213][   T30]  <TASK>
[ 1038.213119][   T30]  __schedule+0xfee/0x6120
[ 1038.217621][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1038.222592][   T30]  ? __pfx___schedule+0x10/0x10
[ 1038.313452][   T30]  ? find_held_lock+0x2b/0x80
[ 1038.318180][   T30]  ? schedule+0x2bf/0x390
[ 1038.322513][   T30]  schedule+0xdd/0x390
[ 1038.373205][   T30]  schedule_timeout+0x1b2/0x280
[ 1038.378122][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1038.402247][   T30]  ? mark_held_locks+0x40/0x70
[ 1038.419294][   T30]  __wait_for_common+0x2e7/0x4c0
[ 1038.433565][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1038.438980][   T30]  ? __pfx___wait_for_common+0x10/0x10
[ 1038.467270][   T30]  remove_one+0x312/0x420
[ 1038.486467][   T30]  ? find_next_child+0x18f/0x280
[ 1038.491453][   T30]  __simple_recursive_removal+0x148/0x5c0
[ 1038.520116][   T30]  ? __pfx_remove_one+0x10/0x10
[ 1038.536712][   T30]  debugfs_remove+0x5d/0x80
[ 1038.541271][   T30]  nsim_dev_health_exit+0x3b/0xe0
[ 1038.572894][   T30]  nsim_dev_reload_destroy+0x144/0x4a0
[ 1038.578708][   T30]  nsim_dev_reload_down+0x66/0xd0
[ 1038.609001][   T30]  devlink_reload+0x173/0x790
[ 1038.625678][   T30]  ? __pfx_devlink_reload+0x10/0x10
[ 1038.630931][   T30]  devlink_pernet_pre_exit+0x222/0x330
[ 1038.659825][   T30]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[ 1038.680329][   T30]  ? kobject_put+0xb9/0x640
[ 1038.697195][   T30]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[ 1038.717809][   T30]  ops_undo_list+0x187/0xab0
[ 1038.722472][   T30]  ? __pfx_ops_undo_list+0x10/0x10
[ 1038.759058][   T30]  ? cleanup_net+0x332/0x920
[ 1038.773138][   T30]  ? cleanup_net+0x332/0x920
[ 1038.786140][   T30]  ? idr_destroy+0x62/0x2e0
[ 1038.790715][   T30]  cleanup_net+0x499/0x920
[ 1038.814282][   T30]  ? __pfx_cleanup_net+0x10/0x10
[ 1038.819293][   T30]  ? rcu_is_watching+0x12/0xc0
[ 1038.842069][   T30]  process_one_work+0x9d7/0x1920
[ 1038.857161][   T30]  ? __pfx_process_one_work+0x10/0x10
[ 1038.862600][   T30]  ? __pfx_cleanup_net+0x10/0x10
[ 1038.886527][   T30]  worker_thread+0x5da/0xe40
[ 1038.891167][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1038.917110][   T30]  ? kthread+0x13a/0x450
[ 1038.921400][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1038.943175][   T30]  kthread+0x370/0x450
[ 1038.947287][   T30]  ? __pfx_kthread+0x10/0x10
[ 1038.951874][   T30]  ret_from_fork+0x754/0xd80
[ 1038.981811][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1038.997224][   T30]  ? rcu_is_watching+0x12/0xc0
[ 1039.002032][   T30]  ? __switch_to+0x7b4/0x1120
[ 1039.023019][   T30]  ? __pfx_kthread+0x10/0x10
[ 1039.040040][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1039.054302][   T30]  </TASK>
[ 1039.125916][   T30] INFO: task syz.4.2884:19141 blocked for more than 144 seconds.
[ 1039.163568][   T30]       Tainted: G     U       L      syzkaller #0
[ 1039.170107][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1039.207540][   T30] task:syz.4.2884      state:D stack:24664 pid:19141 tgid:19140 ppid:17828  task_flags:0x400140 flags:0x00080002
[ 1039.243593][   T30] Call Trace:
[ 1039.246917][   T30]  <TASK>
[ 1039.249905][   T30]  __schedule+0xfee/0x6120
[ 1039.276500][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1039.281486][   T30]  ? __pfx___schedule+0x10/0x10
[ 1039.310685][   T30]  ? find_held_lock+0x2b/0x80
[ 1039.325225][   T30]  ? schedule+0x2bf/0x390
[ 1039.339593][   T30]  schedule+0xdd/0x390
[ 1039.351937][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1039.374425][   T30]  __mutex_lock+0xc9a/0x1b90
[ 1039.379076][   T30]  ? netlink_has_listeners+0x20f/0x430
[ 1039.409696][   T30]  ? devlink_health_report+0x681/0xb50
[ 1039.426037][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1039.431109][   T30]  ? devlink_recover_notify.constprop.0+0x200/0x670
[ 1039.460061][   T30]  ? __lock_acquire+0x481/0x2630
[ 1039.479217][   T30]  ? devlink_health_report+0x681/0xb50
[ 1039.495611][   T30]  devlink_health_report+0x681/0xb50
[ 1039.500947][   T30]  ? __pfx_devlink_health_report+0x10/0x10
[ 1039.528100][   T30]  ? _copy_from_user+0x59/0xd0
[ 1039.532905][   T30]  nsim_dev_health_break_write+0x166/0x210
[ 1039.558948][   T30]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[ 1039.579064][   T30]  full_proxy_write+0x135/0x1a0
[ 1039.599394][   T30]  vfs_write+0x2aa/0x1070
[ 1039.612701][   T30]  ? __pfx_full_proxy_write+0x10/0x10
[ 1039.629257][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1039.643526][   T30]  ? __fget_files+0x215/0x3d0
[ 1039.648274][   T30]  ? __fget_files+0x21f/0x3d0
[ 1039.652948][   T30]  ksys_write+0x12a/0x250
[ 1039.703677][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1039.708574][   T30]  do_syscall_64+0x106/0xf80
[ 1039.713177][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1039.743013][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1039.764249][   T30] RIP: 0033:0x7f691e59c799
[ 1039.768697][   T30] RSP: 002b:00007f691f526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1039.808797][   T30] RAX: ffffffffffffffda RBX: 00007f691e815fa0 RCX: 00007f691e59c799
[ 1039.836700][   T30] RDX: 00000000000001e1 RSI: 0000000000000000 RDI: 0000000000000009
[ 1039.862115][   T30] RBP: 00007f691e632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1039.888509][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1039.917667][   T30] R13: 00007f691e816038 R14: 00007f691e815fa0 R15: 00007fffd7ff0908
[ 1039.942900][   T30]  </TASK>
[ 1039.952561][   T30] INFO: task syz-executor:19161 blocked for more than 145 seconds.
[ 1040.047347][   T30]       Tainted: G     U       L      syzkaller #0
[ 1040.066176][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1040.104624][   T30] task:syz-executor    state:D stack:24984 pid:19161 tgid:19161 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1040.144055][   T30] Call Trace:
[ 1040.147389][   T30]  <TASK>
[ 1040.150311][   T30]  __schedule+0xfee/0x6120
[ 1040.177140][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1040.182135][   T30]  ? __pfx___schedule+0x10/0x10
[ 1040.212353][   T30]  ? find_held_lock+0x2b/0x80
[ 1040.227012][   T30]  ? schedule+0x2bf/0x390
[ 1040.231408][   T30]  schedule+0xdd/0x390
[ 1040.255999][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1040.261542][   T30]  __mutex_lock+0xc9a/0x1b90
[ 1040.286268][   T30]  ? device_del+0xa0/0x9b0
[ 1040.306968][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1040.312051][   T30]  ? mark_held_locks+0x40/0x70
[ 1040.337386][   T30]  ? device_del+0xa0/0x9b0
[ 1040.341864][   T30]  device_del+0xa0/0x9b0
[ 1040.365296][   T30]  ? __pfx_ida_free+0x10/0x10
[ 1040.370018][   T30]  ? __pfx_device_del+0x10/0x10
[ 1040.394602][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1040.399643][   T30]  device_unregister+0x1d/0xe0
[ 1040.423757][   T30]  del_device_store+0x346/0x480
[ 1040.438801][   T30]  ? __pfx_del_device_store+0x10/0x10
[ 1040.455445][   T30]  ? find_held_lock+0x2b/0x80
[ 1040.460173][   T30]  ? sysfs_file_kobj+0xe4/0x290
[ 1040.504433][   T30]  ? sysfs_file_kobj+0xe4/0x290
[ 1040.509325][   T30]  ? __pfx_del_device_store+0x10/0x10
[ 1040.538212][   T30]  bus_attr_store+0x74/0xb0
[ 1040.542785][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[ 1040.578199][   T30]  sysfs_kf_write+0xf2/0x150
[ 1040.582841][   T30]  kernfs_fop_write_iter+0x3e0/0x5f0
[ 1040.610356][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1040.629273][   T30]  vfs_write+0x6ac/0x1070
[ 1040.633651][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1040.664161][   T30]  ? __pfx_vfs_write+0x10/0x10
[ 1040.669061][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1040.698507][   T30]  ksys_write+0x12a/0x250
[ 1040.702969][   T30]  ? __pfx_ksys_write+0x10/0x10
[ 1040.727757][   T30]  do_syscall_64+0x106/0xf80
[ 1040.732428][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1040.758314][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.775639][   T30] RIP: 0033:0x7f08eb95cfce
[ 1040.780090][   T30] RSP: 002b:00007ffd1816c208 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1040.817557][   T30] RAX: ffffffffffffffda RBX: 000055557f1f7500 RCX: 00007f08eb95cfce
[ 1040.844877][   T30] RDX: 0000000000000001 RSI: 00007ffd1816c290 RDI: 0000000000000005
[ 1040.852892][   T30] RBP: 00007f08eba3351c R08: 0000000000000000 R09: 0000000000000000
[ 1040.894213][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1040.925517][   T30] R13: 00007ffd1816c290 R14: 00007f08ec744620 R15: 0000000000000003
[ 1040.952379][   T30]  </TASK>
[ 1040.965741][   T30] INFO: task syz.0.2894:19202 blocked for more than 146 seconds.
[ 1040.973558][   T30]       Tainted: G     U       L      syzkaller #0
[ 1041.084260][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1041.092972][   T30] task:syz.0.2894      state:D stack:29000 pid:19202 tgid:19201 ppid:17659  task_flags:0x400040 flags:0x00080002
[ 1041.144316][   T30] Call Trace:
[ 1041.147654][   T30]  <TASK>
[ 1041.150580][   T30]  __schedule+0xfee/0x6120
[ 1041.175044][   T30]  ? __lock_acquire+0x4a5/0x2630
[ 1041.180034][   T30]  ? __pfx___schedule+0x10/0x10
[ 1041.230196][   T30]  ? find_held_lock+0x2b/0x80
[ 1041.245576][   T30]  ? schedule+0x2bf/0x390
[ 1041.249946][   T30]  schedule+0xdd/0x390
[ 1041.254011][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1041.286514][   T30]  rwsem_down_read_slowpath+0x5dc/0xb30
[ 1041.292115][   T30]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[ 1041.318201][   T30]  ? __pfx___might_resched+0x10/0x10
[ 1041.323550][   T30]  down_read+0xed/0x460
[ 1041.352197][   T30]  ? __pfx_down_read+0x10/0x10
[ 1041.368161][   T30]  ? mnt_get_write_access+0x1e9/0x2f0
[ 1041.373593][   T30]  path_openat+0xa16/0x31a0
[ 1041.397468][   T30]  ? __pfx_path_openat+0x10/0x10
[ 1041.402455][   T30]  do_file_open+0x20e/0x430
[ 1041.428102][   T30]  ? __pfx_do_file_open+0x10/0x10
[ 1041.433196][   T30]  ? alloc_fd+0x476/0x790
[ 1041.462993][   T30]  ? do_getname+0x191/0x390
[ 1041.484521][   T30]  do_sys_openat2+0x10d/0x1e0
[ 1041.489250][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1041.516417][   T30]  ? do_raw_spin_lock+0x128/0x260
[ 1041.535683][   T30]  ? kcov_ioctl+0x16a/0x720
[ 1041.540242][   T30]  __x64_sys_openat+0x12d/0x210
[ 1041.576377][   T30]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1041.581799][   T30]  ? kcov_ioctl+0x16a/0x720
[ 1041.608960][   T30]  do_syscall_64+0x106/0xf80
[ 1041.613594][   T30]  ? clear_bhb_loop+0x40/0x90
[ 1041.637914][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.643843][   T30] RIP: 0033:0x7f27d519c799
[ 1041.669296][   T30] RSP: 002b:00007f27d60e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1041.695888][   T30] RAX: ffffffffffffffda RBX: 00007f27d5415fa0 RCX: 00007f27d519c799
[ 1041.703897][   T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1041.743129][   T30] RBP: 00007f27d5232c99 R08: 0000000000000000 R09: 0000000000000000
[ 1041.768715][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1041.791052][   T30] R13: 00007f27d5416038 R14: 00007f27d5415fa0 R15: 00007ffcf9b48fa8
[ 1041.831222][   T30]  </TASK>
[ 1041.901622][   T30] 
[ 1041.901622][   T30] Showing all locks held in the system:
[ 1041.924329][   T30] 1 lock held by khungtaskd/30:
[ 1041.944099][   T30]  #0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1041.984929][   T30] 6 locks held by kworker/u11:8/18222:
[ 1041.990458][   T30]  #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[ 1042.033899][   T30]  #1: ffffc900030e7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[ 1042.070043][   T30]  #2: ffffffff905fac50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[ 1042.095415][   T30]  #3: ffff88802da480e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330
[ 1042.132665][   T30]  #4: ffff88802da4e250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x18f/0x330
[ 1042.174954][   T30]  #5: ffff888053b1d060 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[ 1042.209820][   T30] 2 locks held by kworker/u11:9/19015:
[ 1042.229136][   T30] 3 locks held by syz.4.2884/19141:
[ 1042.245366][   T30]  #0: ffff888079cded38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1042.254468][   T30]  #1: ffff8880202a2420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1042.298830][   T30]  #2: ffff88802da4e250 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50
[ 1042.329638][   T30] 5 locks held by syz-executor/19161:
[ 1042.348248][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1042.374649][   T30]  #1: ffff8880263a3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1042.402967][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1042.430707][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1042.463823][   T30]  #4: ffff88802da480e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0
[ 1042.490002][   T30] 2 locks held by syz.0.2894/19202:
[ 1042.505277][   T30]  #0: ffff8880202a2420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0
[ 1042.514566][   T30]  #1: ffff888053b1d060 (&sb->s_type->i_mutex_key#18){++++}-{4:4}, at: path_openat+0xa16/0x31a0
[ 1042.563086][   T30] 4 locks held by syz-executor/19321:
[ 1042.580741][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1042.608613][   T30]  #1: ffff88805be83488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1042.637217][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1042.670034][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1042.699529][   T30] 4 locks held by syz-executor/19392:
[ 1042.704934][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1042.743287][   T30]  #1: ffff888034009088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1042.772364][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1042.802797][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1042.831493][   T30] 4 locks held by syz-executor/19423:
[ 1042.846449][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1042.877691][   T30]  #1: ffff888056c99088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1042.912960][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1042.959597][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1042.991704][   T30] 4 locks held by syz-executor/19435:
[ 1043.011836][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1043.048852][   T30]  #1: ffff88802d9cc088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1043.078057][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1043.117556][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1043.146445][   T30] 4 locks held by syz-executor/19449:
[ 1043.151850][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1043.188284][   T30]  #1: ffff88802a89b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1043.222746][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1043.248032][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1043.277327][   T30] 4 locks held by syz-executor/19463:
[ 1043.282738][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1043.318047][   T30]  #1: ffff888034fa1088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1043.348176][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1043.382132][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1043.414593][   T30] 4 locks held by syz-executor/19474:
[ 1043.438524][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1043.466563][   T30]  #1: ffff88802b0cfc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1043.510270][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1043.541215][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1043.580320][   T30] 4 locks held by syz-executor/19489:
[ 1043.597653][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1043.625866][   T30]  #1: ffff88808c25b888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1043.653127][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1043.688512][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1043.722392][   T30] 4 locks held by syz-executor/19504:
[ 1043.738167][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1043.773044][   T30]  #1: ffff88805b42c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1043.819040][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1043.848234][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1043.879901][   T30] 4 locks held by syz-executor/19518:
[ 1043.899522][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1043.955698][   T30]  #1: ffff888077031888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1043.965492][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1044.021244][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1044.053205][   T30] 4 locks held by syz-executor/19531:
[ 1044.070582][   T30]  #0: ffff8880370f4420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[ 1044.101913][   T30]  #1: ffff88805d5b8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[ 1044.134611][   T30]  #2: ffff88802a7d60f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[ 1044.164921][   T30]  #3: ffffffff8fb6bbe8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[ 1044.197937][   T30] 
[ 1044.200292][   T30] =============================================
[ 1044.200292][   T30] 
[ 1044.430583][   T30] NMI backtrace for cpu 0
[ 1044.430602][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1044.430629][   T30] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1044.430635][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1044.430647][   T30] Call Trace:
[ 1044.430661][   T30]  <TASK>
[ 1044.430668][   T30]  dump_stack_lvl+0x100/0x190
[ 1044.430700][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1044.430726][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1044.430752][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1044.430780][   T30]  sys_info+0x141/0x190
[ 1044.430800][   T30]  watchdog+0xd25/0x1050
[ 1044.430819][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1044.430834][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1044.430852][   T30]  ? kthread+0x13a/0x450
[ 1044.430869][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1044.430882][   T30]  kthread+0x370/0x450
[ 1044.430900][   T30]  ? __pfx_kthread+0x10/0x10
[ 1044.430919][   T30]  ret_from_fork+0x754/0xd80
[ 1044.430943][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1044.430965][   T30]  ? __switch_to+0x7b4/0x1120
[ 1044.430981][   T30]  ? __pfx_kthread+0x10/0x10
[ 1044.431000][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1044.431025][   T30]  </TASK>
[ 1044.807623][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1044.814532][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1044.825221][   T30] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1044.830401][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1044.840454][   T30] Call Trace:
[ 1044.843722][   T30]  <TASK>
[ 1044.846653][   T30]  dump_stack_lvl+0x100/0x190
[ 1044.851332][   T30]  vpanic+0x552/0x970
[ 1044.855301][   T30]  ? __pfx_vpanic+0x10/0x10
[ 1044.859789][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1044.865939][   T30]  panic+0xd1/0xe0
[ 1044.869645][   T30]  ? __pfx_panic+0x10/0x10
[ 1044.874047][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1044.880195][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1044.886339][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1044.892486][   T30]  ? watchdog.cold+0x198/0x1ca
[ 1044.897249][   T30]  ? watchdog+0xd35/0x1050
[ 1044.901659][   T30]  watchdog.cold+0x1a9/0x1ca
[ 1044.906259][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1044.910918][   T30]  ? __kthread_parkme+0x18c/0x230
[ 1044.915946][   T30]  ? kthread+0x13a/0x450
[ 1044.920177][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1044.924835][   T30]  kthread+0x370/0x450
[ 1044.928905][   T30]  ? __pfx_kthread+0x10/0x10
[ 1044.933492][   T30]  ret_from_fork+0x754/0xd80
[ 1044.938075][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[ 1044.943183][   T30]  ? __switch_to+0x7b4/0x1120
[ 1044.947874][   T30]  ? __pfx_kthread+0x10/0x10
[ 1044.952457][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1044.957222][   T30]  </TASK>
[ 1044.960315][   T30] Kernel Offset: disabled
[ 1044.964627][   T30] Rebooting in 86400 seconds..