last executing test programs:

14.668317597s ago: executing program 2 (id=253):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8000008b72, r0, 0x8000)
r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480))
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5)
futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000)
ioctl$auto(0x3, 0x80045439, 0xffffffffffffffff)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0)
ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
clone$auto(0x1, 0x1, 0x0, 0x0, 0x2)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
ioprio_set$auto(0x3, 0x0, 0x4b34)

12.229865183s ago: executing program 3 (id=258):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000)
move_pages$auto(0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0)
sendfile$auto(r0, r0, 0x0, 0x8)
socket(0xa, 0x2, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x222080, 0x0)
sendfile$auto(r1, r1, 0x0, 0x1)
r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/sda/hctx0/busy\x00', 0x169100, 0x0)
pread64$auto(r2, 0x0, 0x1000f42d, 0x100)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x7ffe)
mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)={0x220000, 0x0, 0x10}, 0x18)
unlink$auto(&(0x7f00000001c0)='}[,&*}\x00')
write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c8001b5d399b63", 0x7)
r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0)
flock$auto(r4, 0xffff)
openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0)
io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x5)
r5 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x0)
socket(0xa, 0x1, 0x106)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "1200a9800300"}, 0x55)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
ioctl$auto_NVRAM_SETCKS(r5, 0x7041, 0x0)

11.464226776s ago: executing program 3 (id=260):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
r1 = getpid()
r2 = gettid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05082cbd7000fbdbdf257e000000000000ffe9ff00000000fbcdcf723761e464cc2327ce89ce96a5082aecdbbbdb9b60b1d9000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000480)={0x8d0, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_FILS_NONCES={0xe6, 0xf3, "365ba89c609867f2a6ec2a59f28ab3513b29b14bcc2f1a8c2c5279065d6c81a8dc87ce239911c5dfda96ef5a0d8729f41806c9dee6a2607cb6adc32c9276a2028d7dca797dab4dab36f263284a88b996e230412a69cca84ff0567fb0489fbae4f9c7957075f1f9c6be1d99b34bedefcf7bc1d10cac9a3265e968ab91cf571c820c9edd288d320da8090c5028f592ec91f170fbda17581c41655ae883c09d3e9382c9d70cc073d0b0245b7cfef85615ddc22b542b144678510d93a5c10fb3e0eed4b3fe55f3269b0158e9d8b9d5c65a3e08881feed651fe8bce56d03d4d0dfe3b259f"}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xf}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_PROBE_RESP={0x6af, 0x91, "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"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x109, 0x124, 0x0, 0x1, [@generic="0297520c3537aa6e774478c6152d913e6cb1f2f9609d712932529b082d91ee491b5c24e9941dce87e225f61f24227835dcc3be073345bae18a70dc81df5a478456f15ec0c58fcc990885f9fee54608c7842995b44cae53f99c7032a19f30d1f08f0cbe64121db3afdc5795e70de5be45ab", @generic="55e6ae6eb52a065a08dc8c7aabfda315293cd44af64c79666ad2066e01480aeb0cea5a35", @typed={0x41, 0xd4, 0x0, 0x0, @binary="14f172f2cdc730bf263010e92d6d29abb33cb8c499bf247157c91141943d85d9130c77ddb6f2a786e1e8292a010140a3200f76ac95068f32af956c572a"}, @nested={0x1c, 0xf7, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x13a}, @typed={0x4, 0x14c}, @typed={0x4, 0x145}, @nested={0x4, 0xe7}]}, @typed={0xd, 0x46, 0x0, 0x0, @str=')\xf3$}+\\/&\x00'}]}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x4c001}, 0x800)
prctl$auto_PR_SET_VMA_ANON_NAME(0x800, 0x0, r1, 0x10000, 0x2)
r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0)
fsconfig$auto_SHMEM_HUGE_DENY(r6, 0x2, &(0x7f0000000080)='/dev/raw-gadget\x00', &(0x7f00000000c0), 0xffffffffffffffff)
rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r1}}})
shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000200)={{0xffff, 0xee01, 0xee01, 0x32f, 0x5, 0xdc66, 0xfff9}, 0x6, 0xffffffffffffffff, 0x1ff, 0x80000000000, @raw=0x3, @inferred=r2, 0x8, 0x0, 0x0, 0x0})
r7 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r7, r7, 0x0)
poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81)
write$auto_proc_mem_operations_base(r0, &(0x7f0000000380)="719b420fbfdab7a25b1092d221e6830eb35c8e2956b5479e7b15a797fa5916f791051aaf877acabb2043eaa1c64d645f77f0118d69645c4fe75d7989de824fee146f724492980d8742480ac706a113eff2f4586689ac18f3b0c6d7f0b5a99b5dd41af135e75acf2a28b40df2844bbd273437e0c1c7156ee318d03e6db3ba35a465aa9c451efce81cf03659f32b2ef8cb89c64430739a1899bd97e8f1ea6e4ee9aca25544b6bcb5f31aa02595fa3fc4af04cdb9e642b185f923a7109de368d7174a71d52e7bf999f6f6fb1dceb3cdf3de9506cd8181ea703c3404cea94d9c25603beb0e71b3ad1e80de48920f1b067a7a9a", 0xf1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r8 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a)
unshare$auto(0x8000000)

11.176584716s ago: executing program 3 (id=262):
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
socket(0x10, 0x2, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
select$auto(0x7, 0x0, &(0x7f0000000080)={[0xb, 0x9, 0x8, 0x5, 0x1001, 0x1ff, 0xf, 0x1000, 0xb, 0x5, 0xced80000000001, 0x9, 0x3, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_OSS_ALSAEMULVER2(r0, 0x80044df9, &(0x7f00000006c0)="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")
unshare$auto(0x40000080)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7, 0xf0ee, 0x9, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000966, 0x0, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df576c85b023b6deb06dbb68aec3f51e29bcc8b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673e637f2f5fde573fa4d4328a9ea0be7eccec0adb4f642cbb53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"})
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0)
pread64$auto(r3, 0x0, 0x8, 0x8000)
pwrite64$auto(0xc8, 0x0, 0x9, 0xf79)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
madvise$auto(0x6016, 0x10001, 0x9)
r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000009eae44cce3d286bf219c0ead8127c036fff774ba08f1868900dda1d0397f0d45c62cce3e218b314d30a7e11f862cef5ad93c20a8b01d6755e5670473f01bd89a5d6274813c8eeb70b61c95dbef778659d9453405ef1536377b2ac18c693d34453aab5116c838a3fe123f6a3b7442d16858159a653d5c7fa5ab396241ea2a8aaf6fa25c94bc07a48c60d13746a5c4f5222c0dd98a4a693b2f9b18e16d312a06a200399dbec2606ca7205a37585bd633cf5fdae5d01c4882a08d7d3eea21c0cf55388ceb298b16d0183ee17aca62614d84a9db0daa6faae85ea8c12117113739d5d51189e96a624d33852c7bb2653bc47a74386c29", @ANYRES16=r4, @ANYBLOB="e3b72bbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008841}, 0x48000)
madvise$auto(0x110c230000, 0x8031ca, 0x9)
sendmsg$auto_NFSD_CMD_LISTENER_GET(0xffffffffffffffff, 0x0, 0x20004080)
bpf$auto(0x2, 0x0, 0x9)
syz_clone3(&(0x7f00000001c0)={0x80a00400, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clock_nanosleep$auto(0x2, 0x3e, &(0x7f0000000000)={0x80802, 0xdab}, 0xfffffffffffffffe)
syz_genetlink_get_family_id$auto_gtp(&(0x7f00000014c0), r1)
close_range$auto(0x2, 0x8, 0x0)
waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000240)={@_si_pad}, 0xfffffffc, &(0x7f00000002c0)={{0x6, 0x1ae}, {0x6, 0x6}, 0x7, 0x4, 0x2fff, 0x17, 0x4852, 0x0, 0x100000000082, 0x200000000f, 0x8, 0x6, 0x209c1, 0xb000000000000000, 0x4000000000000f, 0xd8})
r5 = prctl$auto(0xffffff0e, 0x0, 0x0, 0x4, 0x9)
ioctl$auto(r5, 0x541b, 0xffffffffffffffff)
r6 = getsid$auto(0x0)
rt_tgsigqueueinfo$auto(0x0, r6, 0x2, &(0x7f00000001c0)={@_si_pad})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x10100, 0x0)

10.191120666s ago: executing program 3 (id=263):
mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0x401, 0x10000)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700", 0x40000000001243}, 0x4, 0x0)
r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r4, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x40000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
ioctl$auto(0x3, 0x800005411, 0x38)
socket(0x8, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
listen$auto(0x3, 0x81)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
ioctl$auto_RTC_PIE_ON(r1, 0x7005, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x9)
r5 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r5, 0xb)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0)
read$auto_lowpan_control_fops_6lowpan(r6, 0x0, 0x0)
ioctl$auto_SG_SET_TIMEOUT2(r5, 0x2201, &(0x7f00000001c0)="82cb2ee3369a3018617df078cf4c2c16909425afdcaac5e833db38b41cb03d5f80a836fd8a25533bf52b1080712cf1da72d43c8efa5ac0c322a26e3b1e8f18855b68ed797476f95a468e3379468466c6314c006de5ab61fe44b4d2b08d771ff8bfac15f42e3c7a4df93d29a6992a35f9a660126b571b24419796a33b261ac454ae995dcc206050335dca73515aaca82ea53c10c22da2d524a06070d52ecf49e28fb2388b0f2ad7e5ef2b653a82a13ca9ea0704bfca301cc6178a61aec52bf71b0f27ae98d30e81e5da006d70706cfafdeef10710d1339ecb79648ce5d84df67f342d9b78871aaf86c7d4")

9.829590663s ago: executing program 3 (id=264):
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f00000010c0)={{0xc2, 0xee01, 0xee00, 0x10000, 0x6, 0x4, 0x1400}, &(0x7f0000001040)=0x9d, &(0x7f0000001080)=0x2, 0x5, 0xfffffffffffffff7, 0x10, 0xfff, 0x80, 0x3, 0x3ff, 0x8b49, @inferred, @raw=0x3})
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
socket(0x29, 0x2, 0x6)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/5/type\x00', 0x2400, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x82a02, 0x0)
openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
read$auto(r0, 0x0, 0x20)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, 0x0, 0x310, 0x70bd27, 0x25dfdbfe, {}, "ec3dcc0f2ea6e3c1d705719d4617ddd6aecc5385e61f58a3c47a8802f27790b782e9e3c99614f9593502f02d75121e488f54ed3453b8ffa948d0661ea1fca92b8d7ef3630e2587a5e4c47c7cd58552e81c6c69de23be883b0af261f2330b22131ccdf092072ab581e41b8da64e5b199b2abf092b112dbbbea608f5a726c6760189cf6d2129ad9cc10e6c2d5b6a9b382234b459c370d1cbe377b4a4fe041183966aecf87f7f687e5ecb0e1dcfc7178c74a572251cccbe195a66305f84df3f57afc0d6c10b"}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
unshare$auto(0x40000080)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
socket(0x2b, 0x1, 0x0)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x0)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840)
madvise$auto(0x110c230000, 0x1, 0x9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000)
prctl$auto(0x3, 0x800000000001, 0x4, 0x5, 0x7)

9.550962501s ago: executing program 2 (id=266):
getsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0xb29, 0x26, &(0x7f0000000100)='[(][+/:$!.\x00', 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, &(0x7f0000000200)="377e801348120307dff346c105474b3e5d34d5e27c408b7588864e08975403acffb3e88ae8b1e6785829fb2019b3a8f139d849302964d3ce3c4b37242b9b5beba69b3d20ed1b80c12006d42241b9e7100ac9255d1e7e86e6a9218090d8af4e339000df635edf18a514fc1d9baacc1b69b5bc4dbe037217b5d86c90fe927c370ad56df491", 0xe3, &(0x7f00000002c0)="efb16f3332d57d4794d571fda521b348453147ddcc6885f21ba8cee985396b71ef7a1dfe546c0da4d413e2dc85fc17810cefa492e24b440bbc037d3f56f42eeb070f49c50d41e660cc2e40f41ed7d4d8eb26e0b2962a49d82e650050ba0f67243c906aa1ff2ea9f58c3b2939617490f40732606209e216d1fea5b566e6c2125911baa66bd53f4cebde46be34061b93099ef4852ef9a86ff8bedb16ecf93661e8fdeb79c6646c5bfc259dc6f73a4b5ce5cf5ae233f612e81e1b51fab5df927f2d4e62c75139a6b5caa647", 0xff, &(0x7f00000004c0)="fd9faeb8be167bd268a1848cca0bab57ce5902d4d95f27a050527c522217c40834b1957ef0037c9849be87238a11c3f2a916360d95fa7ce461c3472e2453d08e868fdd2cb931b5c41907dad0fe455b777c615197cbf63134feefeab00d27d4a15cea83e7a576437a5b5a57ca7b7c9079f24cd6930d5035171ba9702e0fc7875ebbdf33fd73f5e8592aabee871ffea8ccca7c002445077d0f42612d9af1107a9dbe82310f389a12ec5be7b72628299d50c1db76d7f043", &(0x7f0000000580)=0x2})
ioctl$auto_EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000600)=0x1)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0)
sendfile$auto(r1, r1, 0x0, 0x7fffe000)
writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2b9)
r2 = io_uring_setup$auto(0x6, 0x0)
poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108)
mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0xa, 0xfffffbfd)
r3 = socket(0xa, 0x2, 0x3a)
setsockopt$auto(r3, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110)
bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "000000a3cecbbcb66633c200"}, 0x6a)
kexec_load$auto(0x100000000000000, 0x0, 0x0, 0xffffffff)
close_range$auto(0x2, r2, 0x0)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r4, 0x0, 0x5f)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000003c0)=""/231, 0xe7)
sendfile$auto(r5, r5, &(0x7f00000000c0)=0x1, 0xc9)
fcntl$auto(0x8000000000000001, 0x25, 0x8)
r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event1\x00', 0x2080, 0x0)
ioctl$auto_EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000080)=0x47e)
mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r6, 0x8000)
madvise$auto(0x0, 0x400053, 0x9)

8.160484297s ago: executing program 0 (id=268):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb)
mlockall$auto(0x7)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000085)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/xfrm_stat\x00', 0x80080, 0x0)
read$auto(r6, &(0x7f0000000040)='/,\x00', 0x5642)
r7 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r7, 0x0, 0x80000000006)
bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)=@bpf_attr_3={0x800, 0x1, 0x8, 0x8, 0xffffffff, 0x3, 0x2c, 0x80, 0x3d1f, "6e1b4e6ea164040259f19765ddd5903f", 0x0, 0xf, r6, 0xa, 0x7, 0x3ff, 0x200, 0x0, 0x3ff, 0xf, @attach_btf_obj_fd, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x101, r6, r7}, 0x80000001)
signalfd$auto(r7, 0x0, 0x8)
waitid$auto_P_PIDFD(0x3, r7, &(0x7f00000000c0)={@siginfo_0_0={0x80000001, 0xfff, 0x6, @_sigpoll={0x2, r5}}}, 0x9, &(0x7f0000000200)={{0xff, 0xc}, {0x2, 0x1}, 0x608, 0x8000000000000000, 0x9, 0x101, 0xfffffffffffffffa, 0x6, 0x8000, 0x9, 0x8, 0x2, 0x800, 0x9, 0x4, 0x7fff})
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r8 = socket(0x2, 0x1, 0x106)
open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
setreuid$auto(0xffffffffffffffff, 0x8)
setsockopt$auto(r8, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4)
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x62, 0x27dd)
ptrace$auto_PTRACE_GETSIGINFO(0x4202, r0, 0x5, 0x2)

6.870585159s ago: executing program 2 (id=271):
mmap$auto(0x20200000000000, 0x20007, 0x7, 0x90, 0x401, 0x7fff)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
memfd_secret$auto(0x0)
socket(0x11, 0x2, 0x7)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/power/runtime_active_time\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121281, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200), 0x0)
ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0)
openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
socket(0x10, 0xa, 0xc)
openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy17/netdev:wlan1/txpower\x00', 0x800, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0x10, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/team0/tag\x00', 0x42440, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/traceSMB\x00', 0x10be01, 0x0)
writev$auto(r3, &(0x7f0000000200)={0x0, 0x5}, 0xa)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0)
write$auto(r4, 0x0, 0x6)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
getitimer$auto(0x2, &(0x7f0000000040)={{0x8, 0x8001}, {0x0, 0x5}})

5.287958959s ago: executing program 2 (id=272):
r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20005, 0xa, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
write$auto(0x3, 0x0, 0x5c8)
mmap$auto(0x0, 0x5810, 0xffa, 0x8000000008011, 0x3, 0x0)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/smaps_rollup\x00', 0x80000, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0xfffffffb, 0x40, &(0x7f0000000080)='$^#\x00', &(0x7f0000000180)=0x2)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0)
write$auto(r3, &(0x7f00000007c0)='f\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x181)
ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2})
syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080))
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0xd8c01, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
mbind$auto(0xfffffffffffff599, 0x7, 0x4, &(0x7f0000000000)=0x1ff, 0x472ead87, 0x1ff)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39)

5.283611051s ago: executing program 0 (id=280):
r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xa2)
write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x80000000)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0xc0403d11, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x11, 0x80003, 0x300)
socket(0x29, 0x5, 0x0)
open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
r2 = eventfd$auto(0x0)
readv$auto(r2, &(0x7f0000000380)={0x0, 0x8}, 0x100)
write$auto(r2, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8)
bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, 0x0, 0x1)
setgroups$auto(0x9, &(0x7f0000000000)=0xf309)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/net/rxrpc/bundles\x00', 0x100, 0x0)
pread64$auto(r3, 0x0, 0xf429, 0x100)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee)
fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0x2003f2, 0x15)
openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0xb0882, 0x0)
fchdir$auto(0xffffffffffffffff)
syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)

4.960454149s ago: executing program 1 (id=273):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0xa, 0x3, 0x3b)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x4a7)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0)
migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a33, &(0x7f0000000140)={0x0, 0x7f}, 0x4, 0x0, 0xfff, 0x84}, 0xfffffffb}, 0x7b, 0xdb22, 0x0)
close_range$auto(0x2, 0x8, 0x0)
prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0)
process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0x102, 0x0, 0xfffffffffffffffd)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000)
fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="24835bf7df3eee1adaba6471b590c523ba16e3d8026b6c4ee40c8b4792435a8671a3844fbdb990b37f7c40122cc599a0deb4d459de9b8a439758947e833f0bb58265a7a3c60d35faf7d0b7a706119cd7b3ae963d2289a39545cadb6a22ef67ce32308df925e3", 0xa, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'})
r1 = socket(0x2, 0xa, 0x0)
sendmmsg$auto(r1, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000005c0)={{@inferred, 0x0, 0x0, 0xffff, "4b4a626b43c4a765d95d3274c5642c3ac53ba92c4e5fe51644f2bd0abe9f04a15bb8c1652d717bbc18d3bc6e", @raw=0x6}, 0x0, @bytes=@data_ptr=&(0x7f00000004c0)='\x00', "25b60338140c3bcf30202f9d8a8c3cc7c784f5ff53b641c3cc96d83120d72771a3f71116766ecdf103d5ab77adc29577accadcb974336dd8fbdca7003bfa96dba7e1b4f49698e6eabda1b3c058dcded02158cee9b9d6a3c342fc2331fc611a69207015e6a84dbfba30fdb18c011bccfcd0ddfe5faf9b9ff14c10b7aba7e2d56d"})

3.741273593s ago: executing program 0 (id=274):
mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0x401, 0x10000)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700", 0x40000000001243}, 0x4, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r3, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
ioctl$auto(0x3, 0x800005411, 0x38)
socket(0x8, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
listen$auto(0x3, 0x81)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
write$auto(r4, 0x0, 0x9)
r5 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r5, 0xb)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0)
read$auto_lowpan_control_fops_6lowpan(r6, 0x0, 0x0)
ioctl$auto_SG_SET_TIMEOUT2(r5, 0x2201, &(0x7f00000001c0)="82cb2ee3369a3018617df078cf4c2c16909425afdcaac5e833db38b41cb03d5f80a836fd8a25533bf52b1080712cf1da72d43c8efa5ac0c322a26e3b1e8f18855b68ed797476f95a468e3379468466c6314c006de5ab61fe44b4d2b08d771ff8bfac15f42e3c7a4df93d29a6992a35f9a660126b571b24419796a33b261ac454ae995dcc206050335dca73515aaca82ea53c10c22da2d524a06070d52ecf49e28fb2388b0f2ad7e5ef2b653a82a13ca9ea0704bfca301cc6178a61aec52bf71b0f27ae98d30e81e5da006d70706cfafdeef10710d1339ecb79648ce5d84df67f342d9b78871aaf86c7d4")

3.431511267s ago: executing program 0 (id=275):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3)
acct$auto(0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x602c0, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0)
prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff)
execveat$auto(r0, 0x0, 0x0, 0x0, 0x11000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
modify_ldt$auto(0x11, 0x0, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
eventfd$auto(0x4)
r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0)
r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5)
ioctl$auto(r2, 0x4008af20, r1)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
rt_sigprocmask$auto(0x2, &(0x7f0000000000)={0x8}, 0x0, 0x8)
timerfd_create$auto(0x0, 0x0)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0)
msync$auto(0x110c230000, 0x200001, 0x6)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x3, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)

3.111229339s ago: executing program 1 (id=276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r1)
sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_RESPONSE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x510, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x200040c5)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9)
r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000000), r3)
sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="7d3f30bd7000fddbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880)
syz_genetlink_get_family_id$auto_ipvs(0x0, r3)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0x11, 0x3, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000000080))
r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5)
ioctl$auto(r5, 0x4008af03, 0x0)
ioctl$auto_VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r0)
waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x0, &(0x7f0000000300)={{0x5, 0x4}, {0x100000000, 0x6}, 0x3, 0x5, 0xfff, 0x9, 0x4, 0x1, 0xf, 0x10, 0x120000000, 0x6, 0x8000, 0xfffffffffffff001, 0x2, 0x84})
r6 = getpid()
process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0)
syz_clone(0x2c200, &(0x7f00000003c0)="2e079fc941d803f940e27d040c4272f08475d8700efc075746a0e7e10552cd3841aada2771718e9b48102016c5ea0120f263f6ae", 0x34, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)="3cc7df2317df54fa1a8f06c14e04f26b49e9faf282c5a9cb7f1d07efc68438c5f9ad9c4191ddf917e448b6aeabc9a9839aa02aaf44249ed525a197decbeff9ce926d2acc1b165aa3")
waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000005c0)={@_si_pad}, 0x5, &(0x7f0000000640)={{0x3, 0x3}, {0x3, 0x8}, 0x8000000000000001, 0x9, 0x3, 0x1000, 0x9, 0xff, 0x3, 0xfffffffffffffffb, 0x8, 0x8, 0x2f, 0x9, 0x3b5, 0x6})
getpid()

2.976183723s ago: executing program 3 (id=277):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2b, 0x1, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0)
mmap$auto(0x0, 0x9, 0xc00000072, 0x8000008b72, r0, 0x8000)
r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
ioctl$auto_VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480))
futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5)
futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000)
ioctl$auto(0x3, 0x80045439, 0xffffffffffffffff)
sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000)
io_uring_setup$auto(0x6, 0x0)
setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0)
ioctl$auto_UBI_IOCATT(r3, 0x40186f40, 0x0)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000)
clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006)
clone$auto(0x1, 0x1, 0x0, 0x0, 0x2)
madvise$auto(0x0, 0x200007, 0x19)
mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000)
ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0)
ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0)
syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff)
ioprio_set$auto(0x3, 0x0, 0x4b34)

2.473328235s ago: executing program 1 (id=278):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
r1 = getpid()
r2 = gettid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05082cbd7000fbdbdf257e000000000000ffe9ff00000000fbcdcf723761e464cc2327ce89ce96a5082aecdbbbdb9b60b1d9000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000480)={0x8e0, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_FILS_NONCES={0xe6, 0xf3, "365ba89c609867f2a6ec2a59f28ab3513b29b14bcc2f1a8c2c5279065d6c81a8dc87ce239911c5dfda96ef5a0d8729f41806c9dee6a2607cb6adc32c9276a2028d7dca797dab4dab36f263284a88b996e230412a69cca84ff0567fb0489fbae4f9c7957075f1f9c6be1d99b34bedefcf7bc1d10cac9a3265e968ab91cf571c820c9edd288d320da8090c5028f592ec91f170fbda17581c41655ae883c09d3e9382c9d70cc073d0b0245b7cfef85615ddc22b542b144678510d93a5c10fb3e0eed4b3fe55f3269b0158e9d8b9d5c65a3e08881feed651fe8bce56d03d4d0dfe3b259f"}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xf}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_PROBE_RESP={0x6af, 0x91, "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"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x119, 0x124, 0x0, 0x1, [@generic="0297520c3537aa6e774478c6152d913e6cb1f2f9609d712932529b082d91ee491b5c24e9941dce87e225f61f24227835dcc3be073345bae18a70dc81df5a478456f15ec0c58fcc990885f9fee54608c7842995b44cae53f99c7032a19f30d1f08f0cbe64121db3afdc5795e70de5be45ab", @generic="55e6ae6eb52a065a08dc8c7aabfda315293cd44af64c79666ad2066e01480aeb0cea5a35", @typed={0x53, 0xd4, 0x0, 0x0, @binary="14f172f2cdc730bf263010e92d6d29abb33cb8c499bf247157c91141943d85d9130c77ddb6f2a786e1e8292a010140a3200f76ac95068f32af956c572a5753ae3bb8d0f4379b588ea478136c098e66"}, @nested={0x1c, 0xf7, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x13a}, @typed={0x4, 0x14c}, @typed={0x4, 0x145}, @nested={0x4, 0xe7}]}, @typed={0xd, 0x46, 0x0, 0x0, @str=')\xf3$}+\\/&\x00'}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4c001}, 0x800)
prctl$auto_PR_SET_VMA_ANON_NAME(0x800, 0x0, r1, 0x10000, 0x2)
r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0)
fsconfig$auto_SHMEM_HUGE_DENY(r6, 0x2, &(0x7f0000000080)='/dev/raw-gadget\x00', &(0x7f00000000c0), 0xffffffffffffffff)
rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r1}}})
shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000200)={{0xffff, 0xee01, 0xee01, 0x32f, 0x5, 0xdc66, 0xfff9}, 0x6, 0xffffffffffffffff, 0x1ff, 0x80000000000, @raw=0x3, @inferred=r2, 0x8, 0x0, 0x0, 0x0})
r7 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r7, r7, 0x0)
poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81)
write$auto_proc_mem_operations_base(r0, &(0x7f0000000380)="719b420fbfdab7a25b1092d221e6830eb35c8e2956b5479e7b15a797fa5916f791051aaf877acabb2043eaa1c64d645f77f0118d69645c4fe75d7989de824fee146f724492980d8742480ac706a113eff2f4586689ac18f3b0c6d7f0b5a99b5dd41af135e75acf2a28b40df2844bbd273437e0c1c7156ee318d03e6db3ba35a465aa9c451efce81cf03659f32b2ef8cb89c64430739a1899bd97e8f1ea6e4ee9aca25544b6bcb5f31aa02595fa3fc4af04cdb9e642b185f923a7109de368d7174a71d52e7bf999f6f6fb1dceb3cdf3de9506cd8181ea703c3404cea94d9c25603beb0e71b3ad1e80de48920f1b067a7a9a", 0xf1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r8 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a)
unshare$auto(0x8000000)

2.126050421s ago: executing program 1 (id=279):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22)
r1 = getpid()
r2 = gettid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4)
sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="05082cbd7000fbdbdf257e000000000000ffe9ff00000000fbcdcf723761e464cc2327ce89ce96a5082aecdbbbdb9b60b1d9000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000)
sendmsg$auto_NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000480)={0x8d8, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_FILS_NONCES={0xe6, 0xf3, "365ba89c609867f2a6ec2a59f28ab3513b29b14bcc2f1a8c2c5279065d6c81a8dc87ce239911c5dfda96ef5a0d8729f41806c9dee6a2607cb6adc32c9276a2028d7dca797dab4dab36f263284a88b996e230412a69cca84ff0567fb0489fbae4f9c7957075f1f9c6be1d99b34bedefcf7bc1d10cac9a3265e968ab91cf571c820c9edd288d320da8090c5028f592ec91f170fbda17581c41655ae883c09d3e9382c9d70cc073d0b0245b7cfef85615ddc22b542b144678510d93a5c10fb3e0eed4b3fe55f3269b0158e9d8b9d5c65a3e08881feed651fe8bce56d03d4d0dfe3b259f"}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xf}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_PROBE_RESP={0x6af, 0x91, "c062cdddfbe44bb1069462a0a2266aa1e4360819bab71618e8c725c175fa0421834f3302ad83ed4bbb82a1f895228890aeb5909e473f4be189e6a67f937f9abf567631e4124c6d303b7a4bf9a20e7d5fc19ab853fc35dba261c272d0ae3046dae675eeed58755c676a24ad39af1e9ce17a106e7a21e3889fdeb3f9271bc58c630d9210e07df6c4093c7a79d3538d71ae14001e40521d49cfea9c1e404e2257108babdd2f04a18df6fe0b458c211c4f8459aca8d74f14c15c6a69c76e7db1d6803f86884c6acbe0db280675faad12cc0b8464253529fddd7e12dbe720d4a607d74fd12240748939ba65efb3e9c66eda3710f5b2508e049daa58bdd6ed55c0dcef394dd1c13b774acfd9533eda44f6063efb266769912292ad9fbb9b80cc2e6683e10e9af973604c8ab901cbf4670d7d2079c68ae7391de3ef7f328e27d8a474842ca55d48a0ee2e31af4fc33710d00d6392f30358ab134470ca1781d0024408a2c544129a8a57de7802fa2965779b5ba0cd702840288126a8339a3e3a650198a33fe7921657a8b2ac39f078d801b2b5e67195bc04f983bfa2f0dfdaf68a00519e418aa220cdd0e7c34c95eac97641857f5a1365741235e2b75fcbb4947d789c00cdf8668cd117a932d25c628d2c9a4a89cb2c7657c82b9dec88c339dbe315bd5ddadb81a742c7da060b45e88f29e0f62fcce2beb332e48513d2bd0bf54f21575df7ae3445d258dca96bcc8e8612b13cdae88f62ae8467cb75e41fcb8fe8d79bc84eaf06563d4521e7a1c5579cd9b5072058a768d801fb803a600b0056c3bedeba6e87c5c50cd950f968a5959e594690eb632cc54e56bffd0c4fe5a76dadf135cdc660d1fe3cf6c44b052db824f66ce6ecd9ce5ecc52a070c73f27bc9e5f7bbddff00173d5c316cde12bd593d35cee924659d085d955a28a3c93e0700c589c720c5da27ace5167b4fb1d3bd97d0508601338f9de9e56a9724985bf6698fabd1c6cf54901bde96e9c4ddb0d0563b3195917103b7387705ab788e5cb837e53b9fe581cdb0df34d8c34d96602968d6854c4d25ef91cd3c58c96c4a32a8537b280f182dbaa11c354bfdb841e174a2c119ea5b1099f85845a93b44713323a0b37e8317c6170dbcc7a6443f47c591a79a2b4e2202c73e42f531bc434c288e52b42e08c56f27be8dc623ab6e52914f5c6c59df5eeb020d754caaa83a8b73e92eb5e3536ca3834ed00c6a08fd7608dc0eb63b42f31f42ec96221cfa46306a0ae84535df0c7fb74c7d22d9e2b29c80a1c24acdd9b36a57ae8adf3a7054d13b9fd6c78d172beecb61826c884d4398b561880dc65ff04ff60fb25e295d87e139e0bdbc20eab25584a9468f635217544af24dd34555de9dc1d8a2a3e1016d0e81a476a644bbd98fea352ca2f2306f0795da3853008a06fedd9df07770c2f25b941f8218dbaf3055c0119e9a4ad50e25a8df4fc7938004c95401e24f837763b4fd3acc7a5ae9f73a96f2c579b04c587a375bf67a58172fda9d7c7a3f81750cbb7b534fd8f5f12bdfbad1b27f72d21d079ab180e0c39105939b02f1ac1e74e88a2340944e71dfbed9ce466a9aca753ee7545c4a49d9b0f1e599be37168921573f62c1da8c3fe7c7ee0fa8406a842b745295e3c873a5a7d496f634dc8cdadd88c35c961dfe38a980abd6b40f48643a06ef2a95756b309bcd6eab1046ee5c691231f33c3c5711133c665d05f381ca6e0ddabcbc30248a8fa85f4b716e60866fd609d004e8458f1354eeb50f34d400cf142a67ceea458f7921668837ca86db95f99d1ea69fb21a314fe1268a8316e2b074c6092bffe29eecd2bfe3a9f709316f7d6a1c026eeba95a4f59697fd08929585524854365fe1ffc5afaf1df79db1528dab5226f31220a4da8ed8b7cb14302df1b7cd4e429d52533170b61781e0b38ef2c4faffe3ca8ffebbeb034b7383d99c6b6da0ed611be38dce048d2269c13d61ee6621af51fc8dce18718f35685dd5ab8691cd11a5bf5ca61ea9f1c52ad8216c7779ce0f897f68c7b06fc45740b003839202a02a8f267dd879482a95c00a9e0aeb58ac8595b68be9d3f50bd7b2ca0f759df1b0df1e267aa14328f42f338007c10ae77d5950165f3870f6f9bb8943853390c66bb925fb61f427dbc8d3fde6f5465905fba3e96675cbb57ecc81a9452d41f3eaf0e96a456121a8145e0d8e8ac647a91aeb6c6d810cd514257593a296a6b48c3b85c69d5a44187f811320c13c18a9666e6c90bf9bab9e97c35201e727c0b7430709f6ab241bc114c868b8be42215f52aaf9c66fd05745588e71d001268e03714c51effc5c03904a512b226f6cbb50d8bb404cb406ca82007874b97904c603e891dce116f67d00cbc14857d9617526763d47020f341f6f631a570dec2105423cf025e61d"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x111, 0x124, 0x0, 0x1, [@generic="0297520c3537aa6e774478c6152d913e6cb1f2f9609d712932529b082d91ee491b5c24e9941dce87e225f61f24227835dcc3be073345bae18a70dc81df5a478456f15ec0c58fcc990885f9fee54608c7842995b44cae53f99c7032a19f30d1f08f0cbe64121db3afdc5795e70de5be45ab", @generic="55e6ae6eb52a065a08dc8c7aabfda315293cd44af64c79666ad2066e01480aeb0cea5a35", @typed={0x4b, 0xd4, 0x0, 0x0, @binary="14f172f2cdc730bf263010e92d6d29abb33cb8c499bf247157c91141943d85d9130c77ddb6f2a786e1e8292a010140a3200f76ac95068f32af956c572a5753ae3bb8d0f4379b58"}, @nested={0x1c, 0xf7, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x13a}, @typed={0x4, 0x14c}, @typed={0x4, 0x145}, @nested={0x4, 0xe7}]}, @typed={0xd, 0x46, 0x0, 0x0, @str=')\xf3$}+\\/&\x00'}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4c001}, 0x800)
prctl$auto_PR_SET_VMA_ANON_NAME(0x800, 0x0, r1, 0x10000, 0x2)
r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0)
fsconfig$auto_SHMEM_HUGE_DENY(r6, 0x2, &(0x7f0000000080)='/dev/raw-gadget\x00', &(0x7f00000000c0), 0xffffffffffffffff)
rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r1}}})
shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000200)={{0xffff, 0xee01, 0xee01, 0x32f, 0x5, 0xdc66, 0xfff9}, 0x6, 0xffffffffffffffff, 0x1ff, 0x80000000000, @raw=0x3, @inferred=r2, 0x8, 0x0, 0x0, 0x0})
r7 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
close_range$auto(r7, r7, 0x0)
poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x1)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81)
write$auto_proc_mem_operations_base(r0, &(0x7f0000000380)="719b420fbfdab7a25b1092d221e6830eb35c8e2956b5479e7b15a797fa5916f791051aaf877acabb2043eaa1c64d645f77f0118d69645c4fe75d7989de824fee146f724492980d8742480ac706a113eff2f4586689ac18f3b0c6d7f0b5a99b5dd41af135e75acf2a28b40df2844bbd273437e0c1c7156ee318d03e6db3ba35a465aa9c451efce81cf03659f32b2ef8cb89c64430739a1899bd97e8f1ea6e4ee9aca25544b6bcb5f31aa02595fa3fc4af04cdb9e642b185f923a7109de368d7174a71d52e7bf999f6f6fb1dceb3cdf3de9506cd8181ea703c3404cea94d9c25603beb0e71b3ad1e80de48920f1b067a7a9a", 0xf1)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r8 = socket(0x10, 0x2, 0x0)
sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a)
unshare$auto(0x8000000)

1.769985667s ago: executing program 1 (id=281):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0)
read$auto(r0, &(0x7f0000000000)=']-#:-.:\x00', 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close_range$auto(0x0, 0xfffffffffffff001, 0x2)
socket(0x2, 0x1, 0x0)
socket(0x1e, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4)
mmap$auto(0x400000000000, 0x9, 0x8, 0x800000000c812, 0x3, 0x0)
ftruncate$auto(0x3, 0x0)
r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100253d7000fddbdf2501000000140007800c0001800800018000000000040089800c0002000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), 0xffffffffffffffff)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0x7, 0x8000000008011, 0x3, 0x8000)
r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0)
r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800)
madvise$auto(0x0, 0xff7fffffffff0001, 0x15)
close_range$auto(r4, 0x8, 0x0)
ioctl$auto_TIOCMGET(r3, 0x5415, &(0x7f0000000240)="8c138e73727869c37e2acac4cbc59e67e0a89f4da083ec710956a8173e9d7143ba1ecb9d37fd8722c3f8c176c1cd150b4f6f866a34e2520e27f58a19e206acd35cb910742d280916f3650bf401e1f2bdd73929a3210e1f216ce5179acff73330045a851373ef9915a21c09ce72ec04c574ca")
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r7, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)

1.76970012s ago: executing program 2 (id=282):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb)
mlockall$auto(0x7)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000085)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/xfrm_stat\x00', 0x80080, 0x0)
read$auto(r6, &(0x7f0000000040)='/,\x00', 0x5642)
r7 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r7, 0x0, 0x80000000006)
bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)=@bpf_attr_3={0x800, 0x1, 0x8, 0x8, 0xffffffff, 0x3, 0x2c, 0x80, 0x3d1f, "6e1b4e6ea164040259f19765ddd5903f", 0x0, 0xf, r6, 0xa, 0x7, 0x3ff, 0x200, 0x0, 0x3ff, 0xf, @attach_btf_obj_fd, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x101, r6, r7}, 0x80000001)
signalfd$auto(r7, 0x0, 0x8)
waitid$auto_P_PIDFD(0x3, r7, &(0x7f00000000c0)={@siginfo_0_0={0x80000001, 0xfff, 0x6, @_sigpoll={0x2, r5}}}, 0x9, &(0x7f0000000200)={{0xff, 0xc}, {0x2, 0x1}, 0x608, 0x8000000000000000, 0x9, 0x101, 0xfffffffffffffffa, 0x6, 0x8000, 0x9, 0x8, 0x2, 0x800, 0x9, 0x4, 0x7fff})
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r8 = socket(0x2, 0x1, 0x106)
open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
setreuid$auto(0xffffffffffffffff, 0x8)
setsockopt$auto(r8, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4)
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x62, 0x27dd)

1.70850111s ago: executing program 0 (id=283):
mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0x401, 0x10000)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700", 0x40000000001243}, 0x4, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r3, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
ioctl$auto(0x3, 0x800005411, 0x38)
socket(0x8, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
listen$auto(0x3, 0x81)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
write$auto(r4, 0x0, 0x9)
r5 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r5, 0xb)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0)
read$auto_lowpan_control_fops_6lowpan(r6, 0x0, 0x0)
ioctl$auto_SG_SET_TIMEOUT2(r5, 0x2201, &(0x7f00000001c0)="82cb2ee3369a3018617df078cf4c2c16909425afdcaac5e833db38b41cb03d5f80a836fd8a25533bf52b1080712cf1da72d43c8efa5ac0c322a26e3b1e8f18855b68ed797476f95a468e3379468466c6314c006de5ab61fe44b4d2b08d771ff8bfac15f42e3c7a4df93d29a6992a35f9a660126b571b24419796a33b261ac454ae995dcc206050335dca73515aaca82ea53c10c22da2d524a06070d52ecf49e28fb2388b0f2ad7e5ef2b653a82a13ca9ea0704bfca301cc6178a61aec52bf71b0f27ae98d30e81e5da006d70706cfafdeef10710d1339ecb79648ce5d84df67f342d9b78871aaf86c7d4")

948.682199ms ago: executing program 0 (id=284):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb)
mlockall$auto(0x7)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000085)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/xfrm_stat\x00', 0x80080, 0x0)
read$auto(r6, &(0x7f0000000040)='/,\x00', 0x5642)
r7 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r7, 0x0, 0x80000000006)
bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)=@bpf_attr_3={0x800, 0x1, 0x8, 0x8, 0xffffffff, 0x3, 0x2c, 0x80, 0x3d1f, "6e1b4e6ea164040259f19765ddd5903f", 0x0, 0xf, r6, 0xa, 0x7, 0x3ff, 0x200, 0x0, 0x3ff, 0xf, @attach_btf_obj_fd, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x101, r6, r7}, 0x80000001)
signalfd$auto(r7, 0x0, 0x8)
waitid$auto_P_PIDFD(0x3, r7, &(0x7f00000000c0)={@siginfo_0_0={0x80000001, 0xfff, 0x6, @_sigpoll={0x2, r5}}}, 0x9, &(0x7f0000000200)={{0xff, 0xc}, {0x2, 0x1}, 0x608, 0x8000000000000000, 0x9, 0x101, 0xfffffffffffffffa, 0x6, 0x8000, 0x9, 0x8, 0x2, 0x800, 0x9, 0x4, 0x7fff})
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r8 = socket(0x2, 0x1, 0x106)
open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
setreuid$auto(0xffffffffffffffff, 0x8)
setsockopt$auto(r8, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4)
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x62, 0x27dd)
ptrace$auto_PTRACE_GETSIGINFO(0x4202, r0, 0x5, 0x2)

144.719246ms ago: executing program 1 (id=285):
mmap$auto(0x0, 0x3000f, 0x4000000000df, 0x4000eb1, 0x401, 0x10000)
r0 = getpid()
process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700", 0x40000000001243}, 0x4, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r3, 0x1, 0x70bd25, 0x25dfdbf7, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x1, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55)
ioctl$auto(0x3, 0x800005411, 0x38)
socket(0x8, 0x801, 0x0)
connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51)
listen$auto(0x3, 0x81)
readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
write$auto(r4, 0x0, 0x9)
r5 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0)
landlock_restrict_self$auto(r5, 0xb)
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0)
read$auto_lowpan_control_fops_6lowpan(r6, 0x0, 0x0)
ioctl$auto_SG_SET_TIMEOUT2(r5, 0x2201, &(0x7f00000001c0)="82cb2ee3369a3018617df078cf4c2c16909425afdcaac5e833db38b41cb03d5f80a836fd8a25533bf52b1080712cf1da72d43c8efa5ac0c322a26e3b1e8f18855b68ed797476f95a468e3379468466c6314c006de5ab61fe44b4d2b08d771ff8bfac15f42e3c7a4df93d29a6992a35f9a660126b571b24419796a33b261ac454ae995dcc206050335dca73515aaca82ea53c10c22da2d524a06070d52ecf49e28fb2388b0f2ad7e5ef2b653a82a13ca9ea0704bfca301cc6178a61aec52bf71b0f27ae98d30e81e5da006d70706cfafdeef10710d1339ecb79648ce5d84df67f342d9b78871aaf86c7d4")

0s ago: executing program 2 (id=286):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$auto(0x10, r0, 0x1, 0x7ff)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r2, 0x0, 0x9)
write$auto(0x3, 0x0, 0xfdef)
write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb)
mlockall$auto(0x7)
mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000085)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/xfrm_stat\x00', 0x80080, 0x0)
read$auto(r6, &(0x7f0000000040)='/,\x00', 0x5642)
r7 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0)
read$auto(r7, 0x0, 0x80000000006)
bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)=@bpf_attr_3={0x800, 0x1, 0x8, 0x8, 0xffffffff, 0x3, 0x2c, 0x80, 0x3d1f, "6e1b4e6ea164040259f19765ddd5903f", 0x0, 0xf, r6, 0xa, 0x7, 0x3ff, 0x200, 0x0, 0x3ff, 0xf, @attach_btf_obj_fd, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x101, r6, r7}, 0x80000001)
signalfd$auto(r7, 0x0, 0x8)
waitid$auto_P_PIDFD(0x3, r7, &(0x7f00000000c0)={@siginfo_0_0={0x80000001, 0xfff, 0x6, @_sigpoll={0x2, r5}}}, 0x9, &(0x7f0000000200)={{0xff, 0xc}, {0x2, 0x1}, 0x608, 0x8000000000000000, 0x9, 0x101, 0xfffffffffffffffa, 0x6, 0x8000, 0x9, 0x8, 0x2, 0x800, 0x9, 0x4, 0x7fff})
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r8 = socket(0x2, 0x1, 0x106)
open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154)
setreuid$auto(0xffffffffffffffff, 0x8)
setsockopt$auto(r8, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4)
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x62, 0x27dd)
ptrace$auto_PTRACE_GETSIGINFO(0x4202, r0, 0x5, 0x2)

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   61.255598][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.275943][ T5287] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts.
syzkaller login: [   88.651129][ T5609] cgroup: Unknown subsys name 'net'
[   88.782702][ T5609] cgroup: Unknown subsys name 'cpuset'
[   88.791647][ T5609] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   90.563908][ T5609] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.351869][ T1222] cfg80211: failed to load regulatory.db
[   92.548673][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.559645][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.581466][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.591372][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.600949][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.611691][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.616728][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.622261][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.636036][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.641451][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.644171][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.653489][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.659817][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.674130][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.675114][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.681933][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.691732][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.706789][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.708568][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.726478][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.442981][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.451723][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.459117][ T5622] bridge_slave_0: entered allmulticast mode
[   94.467051][ T5622] bridge_slave_0: entered promiscuous mode
[   94.519766][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.527262][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.535190][ T5622] bridge_slave_1: entered allmulticast mode
[   94.542949][ T5622] bridge_slave_1: entered promiscuous mode
[   94.562777][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.570483][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.577908][ T5624] bridge_slave_0: entered allmulticast mode
[   94.585667][ T5624] bridge_slave_0: entered promiscuous mode
[   94.634683][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.642328][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.650029][ T5624] bridge_slave_1: entered allmulticast mode
[   94.657338][ T5624] bridge_slave_1: entered promiscuous mode
[   94.686368][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.721809][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.739523][   T50] Bluetooth: hci2: command tx timeout
[   94.746430][ T5632] Bluetooth: hci0: command tx timeout
[   94.775630][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.817009][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.819654][   T50] Bluetooth: hci3: command tx timeout
[   94.832968][ T5632] Bluetooth: hci1: command tx timeout
[   94.866712][ T5622] team0: Port device team_slave_0 added
[   94.894903][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.902547][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.912002][ T5625] bridge_slave_0: entered allmulticast mode
[   94.919726][ T5625] bridge_slave_0: entered promiscuous mode
[   94.929776][ T5622] team0: Port device team_slave_1 added
[   94.937374][ T5624] team0: Port device team_slave_0 added
[   94.943967][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.951539][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.959126][ T5623] bridge_slave_0: entered allmulticast mode
[   94.966570][ T5623] bridge_slave_0: entered promiscuous mode
[   94.975380][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.983708][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.991574][ T5625] bridge_slave_1: entered allmulticast mode
[   94.999343][ T5625] bridge_slave_1: entered promiscuous mode
[   95.019336][ T5624] team0: Port device team_slave_1 added
[   95.025566][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.033747][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.042457][ T5623] bridge_slave_1: entered allmulticast mode
[   95.049950][ T5623] bridge_slave_1: entered promiscuous mode
[   95.116249][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.123516][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.150232][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.187151][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.197470][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.205189][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.232113][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.244039][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.252076][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.278549][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.293597][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.306280][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.324037][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.331432][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.357700][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.372045][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.437469][ T5625] team0: Port device team_slave_0 added
[   95.446834][ T5625] team0: Port device team_slave_1 added
[   95.464835][ T5623] team0: Port device team_slave_0 added
[   95.504044][ T5623] team0: Port device team_slave_1 added
[   95.540728][ T5622] hsr_slave_0: entered promiscuous mode
[   95.548285][ T5622] hsr_slave_1: entered promiscuous mode
[   95.572081][ T5624] hsr_slave_0: entered promiscuous mode
[   95.578539][ T5624] hsr_slave_1: entered promiscuous mode
[   95.585357][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   95.591525][ T5624] Cannot create hsr debugfs directory
[   95.597922][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.605322][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.632443][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.646252][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.653418][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.680797][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.748031][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.755370][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.783030][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.797777][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.805378][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.831813][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.917149][ T5625] hsr_slave_0: entered promiscuous mode
[   95.924123][ T5625] hsr_slave_1: entered promiscuous mode
[   95.930870][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   95.936775][ T5625] Cannot create hsr debugfs directory
[   96.027870][ T5623] hsr_slave_0: entered promiscuous mode
[   96.034486][ T5623] hsr_slave_1: entered promiscuous mode
[   96.040910][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   96.046957][ T5623] Cannot create hsr debugfs directory
[   96.429157][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.447681][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   96.456375][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.467047][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   96.477644][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.488033][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   96.496252][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.507192][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   96.602050][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.613649][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   96.622993][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.634373][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   96.646049][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.657750][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   96.682339][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.692602][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   96.785249][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.795997][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   96.804764][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.816780][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   96.824376][   T50] Bluetooth: hci2: command tx timeout
[   96.829066][   T50] Bluetooth: hci0: command tx timeout
[   96.840591][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.852510][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   96.876047][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.888640][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   96.900597][ T5632] Bluetooth: hci1: command tx timeout
[   96.905477][   T50] Bluetooth: hci3: command tx timeout
[   96.992258][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.003122][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.020465][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.029549][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.042014][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.058561][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.069514][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.090046][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.102250][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.135747][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   97.190646][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.198647][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.226804][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.234041][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.277905][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.360134][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   97.394202][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.414502][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.421667][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.448338][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.456104][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.488084][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   97.537984][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.545332][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.592062][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.599254][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.649687][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.725144][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   97.781827][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.789261][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.827942][ T3353] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.835620][ T3353] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.607989][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.636240][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.835091][ T5625] veth0_vlan: entered promiscuous mode
[   98.862361][ T5624] veth0_vlan: entered promiscuous mode
[   98.887163][ T5625] veth1_vlan: entered promiscuous mode
[   98.899988][   T50] Bluetooth: hci0: command tx timeout
[   98.900491][ T5632] Bluetooth: hci2: command tx timeout
[   98.941662][ T5624] veth1_vlan: entered promiscuous mode
[   98.979785][ T5632] Bluetooth: hci3: command tx timeout
[   98.989086][ T5632] Bluetooth: hci1: command tx timeout
[   99.083525][ T5624] veth0_macvtap: entered promiscuous mode
[   99.106925][ T5625] veth0_macvtap: entered promiscuous mode
[   99.127978][ T5624] veth1_macvtap: entered promiscuous mode
[   99.165891][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.174913][ T5625] veth1_macvtap: entered promiscuous mode
[   99.211368][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.236675][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.264254][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.292687][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.303725][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.316376][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.331534][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.340818][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.368024][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.405024][  T741] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.416576][  T741] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.442777][  T741] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.452398][  T741] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.524147][ T5623] veth0_vlan: entered promiscuous mode
[   99.559006][ T5622] veth0_vlan: entered promiscuous mode
[   99.621304][ T5623] veth1_vlan: entered promiscuous mode
[   99.639415][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.642054][ T5622] veth1_vlan: entered promiscuous mode
[   99.653385][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.742305][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.759846][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.783977][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.801489][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.848054][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.864448][ T5622] veth0_macvtap: entered promiscuous mode
[   99.870635][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.895464][ T5623] veth0_macvtap: entered promiscuous mode
[   99.923763][ T5622] veth1_macvtap: entered promiscuous mode
[   99.954096][ T5623] veth1_macvtap: entered promiscuous mode
[   99.990797][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.007244][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.086120][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.140310][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.169033][  T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.191959][  T143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.238431][  T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.257203][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.274176][  T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.298372][ T3353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.342596][ T3353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.366164][ T3353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.416225][ T3353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.724307][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.750216][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.962930][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.979019][ T5632] Bluetooth: hci2: command tx timeout
[  100.980867][   T50] Bluetooth: hci0: command tx timeout
[  101.008082][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.051777][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.060253][   T50] Bluetooth: hci1: command tx timeout
[  101.066579][ T5632] Bluetooth: hci3: command tx timeout
[  101.075574][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.214101][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.238417][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.555296][ T5790] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  101.782431][ T5790] process 'syz.1.3' launched ':,' with NULL argv: empty string added
[  102.510770][ T5790] syz.1.3 (5790) used greatest stack depth: 19720 bytes left
[  103.361589][   T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18
[  103.677293][ T5800] futex_wake_op: syz.1.6 tries to shift op by -2048; fix this program
[  103.705863][ T5800] futex_wake_op: syz.1.6 tries to shift op by -2048; fix this program
[  103.834623][ T5800] FAULT_INJECTION: forcing a failure.
[  103.834623][ T5800] name failslab, interval 1, probability 0, space 0, times 1
[  103.928357][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) 
[  103.928402][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  103.928421][ T5800] Call Trace:
[  103.928432][ T5800]  <TASK>
[  103.928444][ T5800]  dump_stack_lvl+0x100/0x190
[  103.928484][ T5800]  should_fail_ex.cold+0x5/0xa
[  103.928526][ T5800]  should_failslab+0xc2/0x120
[  103.928563][ T5800]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  103.928618][ T5800]  ? jbd2__journal_start+0x194/0x6a0
[  103.928670][ T5800]  jbd2__journal_start+0x194/0x6a0
[  103.928717][ T5800]  __ext4_journal_start_sb+0x36d/0x670
[  103.928749][ T5800]  ? ext4_do_writepages+0xc21/0x3f20
[  103.928784][ T5800]  ext4_do_writepages+0xc21/0x3f20
[  103.928813][ T5800]  ? do_raw_spin_lock+0x128/0x260
[  103.928851][ T5800]  ? tick_program_event+0xb0/0x140
[  103.928905][ T5800]  ? hrtimer_start_range_ns+0x860/0x1a50
[  103.928949][ T5800]  ? __pfx_ext4_do_writepages+0x10/0x10
[  103.929001][ T5800]  ? ext4_writepages+0x347/0x790
[  103.929032][ T5800]  ext4_writepages+0x347/0x790
[  103.929064][ T5800]  ? __pfx_ext4_writepages+0x10/0x10
[  103.929127][ T5800]  ? __pfx_ext4_writepages+0x10/0x10
[  103.929162][ T5800]  do_writepages+0x278/0x600
[  103.929206][ T5800]  ? __pfx_do_writepages+0x10/0x10
[  103.929241][ T5800]  ? do_raw_spin_unlock+0x145/0x1e0
[  103.929277][ T5800]  ? _raw_spin_unlock+0x28/0x50
[  103.929313][ T5800]  filemap_writeback+0x22d/0x2e0
[  103.929356][ T5800]  ? __pfx_filemap_writeback+0x10/0x10
[  103.929442][ T5800]  ? mt_find+0x45e/0x8e0
[  103.929485][ T5800]  ? __pfx_mt_find+0x10/0x10
[  103.929529][ T5800]  file_write_and_wait_range+0xcd/0x140
[  103.929578][ T5800]  ext4_sync_file+0x358/0xb90
[  103.929631][ T5800]  ? __pfx_ext4_sync_file+0x10/0x10
[  103.929677][ T5800]  ? __up_read+0x230/0x6e0
[  103.929712][ T5800]  ? __pfx___up_read+0x10/0x10
[  103.929740][ T5800]  ? __do_sys_msync+0x39b/0x590
[  103.929787][ T5800]  ? __pfx_ext4_sync_file+0x10/0x10
[  103.929834][ T5800]  vfs_fsync_range+0x9b/0x190
[  103.929878][ T5800]  __do_sys_msync+0x3ca/0x590
[  103.929935][ T5800]  do_syscall_64+0x10b/0xf80
[  103.929971][ T5800]  ? clear_bhb_loop+0x40/0x90
[  103.930010][ T5800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.930040][ T5800] RIP: 0033:0x7f914bd9cdd9
[  103.930067][ T5800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.930095][ T5800] RSP: 002b:00007f914cc31028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a
[  103.930134][ T5800] RAX: ffffffffffffffda RBX: 00007f914c015fa0 RCX: 00007f914bd9cdd9
[  103.930155][ T5800] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000
[  103.930175][ T5800] RBP: 00007f914be32d69 R08: 0000000000000000 R09: 0000000000000000
[  103.930192][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.930209][ T5800] R13: 00007f914c016038 R14: 00007f914c015fa0 R15: 00007ffc4ad65b68
[  103.930252][ T5800]  </TASK>
[  104.347826][ T5800] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 2021; err -12
[  104.768596][ T5815] binder: 5810:5815 ioctl c0306201 2000000000c0 returned -14
[  104.777003][ T5816] Zero length message leads to an empty skb
[  104.841630][ T5809] netlink: 338 bytes leftover after parsing attributes in process `syz.2.7'.
[  104.897743][ T5812] zram: Added device: zram1
[  105.757094][ T5828] zram0: detected capacity change from 0 to 16
[  106.452838][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'.
[  106.780187][ T5835] ptrace attach of "./syz-executor exec"[5622] was attempted by ""[5835]
[  106.931523][ T5835] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET)
[  107.844478][ T5855] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  107.950859][ T5855] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.273402][ T5855] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  108.391831][ T5855] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  108.414633][ T5855] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  108.464542][ T5855] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  108.559938][ T5855] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  108.597067][ T5855] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  108.671447][ T5855] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  108.726727][ T5855] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  108.749785][ T5855] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  108.776042][ T5855] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  108.802427][ T5855] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  109.869006][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.153184][ T5899] nvme_fcloop: unknown parameter or missing value '7�="����;��&L�=j�"Yq'R"'
[  110.419156][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.589782][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.740173][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  111.939045][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  111.951802][   T50] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260
[  111.951843][   T50] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260
[  111.969441][   T50] Bluetooth: hci2: Dropping invalid advertising data
[  111.976636][   T50] Bluetooth: hci2: unknown advertising packet type: 0xe9
[  112.051688][ T5942] ptrace attach of "./syz-executor exec"[5622] was attempted by ""[5942]
[  112.240783][ T5929] can: request_module (can-proto-0) failed.
[  112.501011][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  112.668868][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  112.823220][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout
[  112.839052][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'.
[  113.292572][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'.
[  114.013349][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'.
[  114.028940][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout
[  114.172302][ T5978] syz.0.31(5978): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  114.525995][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'.
[  114.591854][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout
[  114.744002][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout
[  114.900501][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout
[  115.852374][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'.
[  116.399231][ T6022] ptrace attach of "./syz-executor exec"[5625] was attempted by ""[6022]
[  116.980425][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout
[  117.172161][ T6036] nvme_fcloop: unknown parameter or missing value '7�="����;��&L�=j�"Yq'R"'
[  120.004652][ T6070] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  121.534639][ T6083] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  121.999081][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  123.155407][ T6085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.295129][ T6085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.377733][ T6085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.457075][ T6085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.255194][ T6091] ptrace attach of "./syz-executor exec"[5623] was attempted by ""[6091]
[  124.950263][ T6114] smpboot: CPU 1 is now offline
[  124.973662][ T6114] crash hp: kexec_trylock() failed, kdump image may be inaccurate
[  125.018500][ T6121] zram: Cannot change disksize for initialized device
[  125.820250][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.54'.
[  126.292955][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'.
[  126.944767][   T30] audit: type=1800 audit(1777500331.617:2): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  127.454108][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.60'.
[  128.847326][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.65'.
[  129.102171][ T6184] random: crng reseeded on system resumption
[  129.280608][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'.
[  131.907863][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.76'.
[  132.285178][ T6236] ubi0: attaching mtd0
[  132.381725][ T6236] ubi0: scanning is finished
[  132.482131][ T6236] ubi0: empty MTD device detected
[  132.902283][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'.
[  133.250888][ T6258] ptrace attach of "./syz-executor exec"[5625] was attempted by "./syz-executor exec"[6258]
[  133.303991][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  133.311794][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  133.848393][ T6236] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  134.103155][ T6236] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  134.286581][ T6236] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  134.463211][ T6236] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  134.609624][ T6236] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  134.728587][ T6236] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  134.792565][ T6271] netlink: 'syz.2.84': attribute type 10 has an invalid length.
[  134.824192][ T6271] netlink: 230 bytes leftover after parsing attributes in process `syz.2.84'.
[  134.834200][ T6236] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1286559866
[  134.905066][ T6236] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  134.982145][ T6267] ubi0: background thread "ubi_bgt0d" started, PID 6267
[  134.992859][ T6241] ubi0: detaching mtd0
[  135.047558][ T6241] ubi0: mtd0 is detached
[  136.580050][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  137.046490][ T6279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  137.827463][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'.
[  138.309289][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[  138.956151][ T6315] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  139.199036][ T6321] smpboot: CPU 1 is now offline
[  139.383537][ T6320] can: request_module (can-proto-0) failed.
[  140.309213][ T6337] ksmbd: Unknown IPC event: 14, ignore.
[  141.106412][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.99'.
[  141.633480][   T30] audit: type=1800 audit(1777500346.307:3): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.100" name="dbroot" dev="configfs" ino=11141 res=0 errno=0
[  141.901062][ T6354] FAULT_INJECTION: forcing a failure.
[  141.901062][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  142.163221][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz.0.101 Not tainted syzkaller #0 PREEMPT(full) 
[  142.163246][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  142.163258][ T6354] Call Trace:
[  142.163264][ T6354]  <TASK>
[  142.163271][ T6354]  dump_stack_lvl+0x100/0x190
[  142.163297][ T6354]  should_fail_ex.cold+0x5/0xa
[  142.163320][ T6354]  _copy_from_user+0x2e/0xd0
[  142.163352][ T6354]  snd_rawmidi_kernel_write1+0x390/0x7c0
[  142.163389][ T6354]  snd_rawmidi_write+0x2dc/0xc60
[  142.163421][ T6354]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  142.163451][ T6354]  ? __pfx_default_wake_function+0x10/0x10
[  142.163485][ T6354]  ? bpf_lsm_file_permission+0x9/0x10
[  142.163503][ T6354]  ? security_file_permission+0x76/0x210
[  142.163524][ T6354]  ? rw_verify_area+0xce/0x6d0
[  142.163545][ T6354]  vfs_write+0x2aa/0x1070
[  142.163566][ T6354]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  142.163599][ T6354]  ? __pfx_vfs_write+0x10/0x10
[  142.163624][ T6354]  ? find_held_lock+0x2b/0x80
[  142.163647][ T6354]  ? __fget_files+0x215/0x3d0
[  142.163667][ T6354]  ? __fget_files+0x215/0x3d0
[  142.163690][ T6354]  ? __fget_files+0x21f/0x3d0
[  142.163716][ T6354]  ksys_write+0x1f8/0x250
[  142.163737][ T6354]  ? __pfx_ksys_write+0x10/0x10
[  142.163760][ T6354]  ? rcu_is_watching+0x12/0xc0
[  142.163785][ T6354]  do_syscall_64+0x10b/0xf80
[  142.163806][ T6354]  ? clear_bhb_loop+0x40/0x90
[  142.163828][ T6354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.163847][ T6354] RIP: 0033:0x7f8cbcf9cdd9
[  142.163863][ T6354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.163879][ T6354] RSP: 002b:00007f8cbde79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  142.163897][ T6354] RAX: ffffffffffffffda RBX: 00007f8cbd215fa0 RCX: 00007f8cbcf9cdd9
[  142.163908][ T6354] RDX: 000000100000a3da RSI: 00002000000003c0 RDI: 0000000000000004
[  142.163918][ T6354] RBP: 00007f8cbd032d69 R08: 0000000000000000 R09: 0000000000000000
[  142.163929][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.163939][ T6354] R13: 00007f8cbd216038 R14: 00007f8cbd215fa0 R15: 00007fff5e15d198
[  142.163962][ T6354]  </TASK>
[  142.391132][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'.
[  143.265339][ T6375] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  143.519263][ T6377] smpboot: CPU 1 is now offline
[  143.701794][ T6383] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  143.742519][ T6383] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[  143.772165][ T6384] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  143.877576][ T6385] smpboot: CPU 1 is now offline
[  145.432721][ T6404] can: request_module (can-proto-0) failed.
[  145.570362][ T6416] ptrace attach of "./syz-executor exec"[5625] was attempted by "
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
 
[  147.098142][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[  148.103768][ T6447] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  148.280443][ T6449] smpboot: CPU 1 is now offline
[  150.346409][ T6464] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  150.397617][ T6464] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[  150.499206][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  151.375218][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'.
[  151.751869][ T6473] can: request_module (can-proto-0) failed.
[  152.859323][ T6494] ptrace attach of "./syz-executor exec"[5622] was attempted by ""[6494]
[  155.206067][ T6526] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  155.285857][ T6526] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details.
[  155.304456][ T6526] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details.
[  155.320465][ T6526] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details.
[  155.429583][ T6528] smpboot: CPU 1 is now offline
[  156.392703][ T6540] ovs_: entered promiscuous mode
[  157.099877][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'.
[  157.145478][ T6555] Zero length message leads to an empty skb
[  157.154732][ T6549] ptrace attach of "./syz-executor exec"[5623] was attempted by ""[6549]
[  157.568197][ T6549] syz.1.141 uses obsolete (PF_INET,SOCK_PACKET)
[  157.816277][ T6565] ptrace attach of "./syz-executor exec"[5624] was attempted by "
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
 
[  158.134362][ T6566] can: request_module (can-proto-0) failed.
[  158.714468][ T6578] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  158.933957][ T6580] smpboot: CPU 1 is now offline
[  161.064553][   T30] audit: type=1800 audit(1777500365.737:4): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.151" name="dbroot" dev="configfs" ino=12365 res=0 errno=0
[  161.370799][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'.
[  161.827670][ T6611] futex_wake_op: syz.1.155 tries to shift op by -2048; fix this program
[  161.880664][ T6611] 0x5b5b1b0000000001-0x5b5b1b0000000042 : ""
[  161.912780][ T6611] mtd: partition "" is out of reach -- disabled
[  161.951574][ T5632] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260
[  161.951602][ T5632] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15
[  161.969687][ T5632] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  162.143914][ T6611] ftl_cs: FTL header not found.
[  163.534781][ T6632] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  163.808349][ T6638] smpboot: CPU 1 is now offline
[  165.270374][ T6654] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  165.320071][ T6654] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[  165.833574][ T6664] input: jJǸ-���9�%v����l��Q�	J86�� as /devices/virtual/input/input5
[  166.806815][ T6668] ptrace attach of "./syz-executor exec"[5623] was attempted by ""[6668]
[  168.146253][ T6700] Zero length message leads to an empty skb
[  168.436899][ T6705] kernel profiling enabled (shift: 0)
[  169.185980][ T6716] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  169.310065][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'.
[  169.327949][ T6716] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details.
[  169.451408][ T6716] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details.
[  169.519663][ T6716] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details.
[  169.564079][ T6698] bond0: (slave bond_slave_0): Releasing backup interface
[  169.680567][ T6722] smpboot: CPU 1 is now offline
[  170.742340][ T6731] ptrace attach of "./syz-executor exec"[5625] was attempted by ""[6731]
[  170.860676][ T6737] syz.3.179 uses obsolete (PF_INET,SOCK_PACKET)
[  171.247484][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'.
[  174.453861][ T6773] ptrace attach of "./syz-executor exec"[5622] was attempted by ""[6773]
[  175.061283][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.191'.
[  175.414493][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'.
[  175.438204][ T6796] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  175.629525][ T6805] smpboot: CPU 1 is now offline
[  176.535100][ T6824] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  176.784268][ T6830] smpboot: CPU 1 is now offline
[  177.993190][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'.
[  178.367607][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'.
[  178.827515][ T6863] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  178.941111][ T6865] smpboot: CPU 1 is now offline
[  180.125136][ T6877] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  180.470825][ T6881] smpboot: CPU 1 is now offline
[  181.013921][ T6887] bridge0: port 3(gretap0) entered blocking state
[  181.077524][ T6887] bridge0: port 3(gretap0) entered disabled state
[  181.124322][ T6887] gretap0: entered allmulticast mode
[  181.152323][ T6887] gretap0: entered promiscuous mode
[  181.170742][ T6887] FAULT_INJECTION: forcing a failure.
[  181.170742][ T6887] name failslab, interval 1, probability 0, space 0, times 0
[  181.214031][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.1.209 Not tainted syzkaller #0 PREEMPT(full) 
[  181.214058][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  181.214069][ T6887] Call Trace:
[  181.214075][ T6887]  <TASK>
[  181.214083][ T6887]  dump_stack_lvl+0x100/0x190
[  181.214109][ T6887]  should_fail_ex.cold+0x5/0xa
[  181.214133][ T6887]  should_failslab+0xc2/0x120
[  181.214155][ T6887]  __kmalloc_cache_noprof+0x7a/0x6f0
[  181.214182][ T6887]  ? nbp_vlan_add+0x1eb/0x3e0
[  181.214212][ T6887]  nbp_vlan_add+0x1eb/0x3e0
[  181.214240][ T6887]  nbp_vlan_init+0x373/0x500
[  181.214266][ T6887]  ? __pfx_nbp_vlan_init+0x10/0x10
[  181.214295][ T6887]  ? __local_bh_enable_ip+0x9e/0x120
[  181.214320][ T6887]  ? lockdep_hardirqs_on+0x78/0x100
[  181.214351][ T6887]  ? br_fdb_add_local+0x43/0x60
[  181.214374][ T6887]  ? __local_bh_enable_ip+0x9e/0x120
[  181.214401][ T6887]  br_add_if+0xf79/0x1b40
[  181.214428][ T6887]  ? veth_get_iflink+0x2a3/0x2c0
[  181.214454][ T6887]  add_del_if+0x114/0x160
[  181.214483][ T6887]  br_dev_siocdevprivate+0x8ac/0x1650
[  181.214515][ T6887]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  181.214543][ T6887]  ? __lock_acquire+0x4a5/0x2630
[  181.214569][ T6887]  ? lock_acquire+0x1b1/0x370
[  181.214593][ T6887]  ? netdev_name_node_lookup+0x107/0x150
[  181.214623][ T6887]  dev_ifsioc+0xc2f/0x1f10
[  181.214654][ T6887]  ? __pfx_dev_ifsioc+0x10/0x10
[  181.214681][ T6887]  ? __pfx___mutex_lock+0x10/0x10
[  181.214712][ T6887]  ? dev_load+0x8e/0x240
[  181.214737][ T6887]  ? dev_load+0x8e/0x240
[  181.214769][ T6887]  dev_ioctl+0x70e/0x1070
[  181.214799][ T6887]  sock_ioctl+0x494/0x6b0
[  181.214824][ T6887]  ? __pfx_sock_ioctl+0x10/0x10
[  181.214847][ T6887]  ? hook_file_ioctl_common+0x149/0x410
[  181.214871][ T6887]  ? __fget_files+0x21f/0x3d0
[  181.214895][ T6887]  ? __pfx_sock_ioctl+0x10/0x10
[  181.214920][ T6887]  __x64_sys_ioctl+0x18e/0x210
[  181.214939][ T6887]  do_syscall_64+0x10b/0xf80
[  181.214961][ T6887]  ? clear_bhb_loop+0x40/0x90
[  181.214983][ T6887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.215002][ T6887] RIP: 0033:0x7f914bd9cdd9
[  181.215018][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.215035][ T6887] RSP: 002b:00007f914cc10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  181.215053][ T6887] RAX: ffffffffffffffda RBX: 00007f914c016090 RCX: 00007f914bd9cdd9
[  181.215064][ T6887] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000009
[  181.215074][ T6887] RBP: 00007f914be32d69 R08: 0000000000000000 R09: 0000000000000000
[  181.215085][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.215095][ T6887] R13: 00007f914c016128 R14: 00007f914c016090 R15: 00007ffc4ad65b68
[  181.215117][ T6887]  </TASK>
[  182.530699][ T6887] gretap0: failed to initialize vlan filtering on this port
[  182.676700][ T6887] gretap0: left allmulticast mode
[  184.710254][ T6919] FAULT_INJECTION: forcing a failure.
[  184.710254][ T6919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.001419][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT(full) 
[  185.001446][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  185.001457][ T6919] Call Trace:
[  185.001463][ T6919]  <TASK>
[  185.001471][ T6919]  dump_stack_lvl+0x100/0x190
[  185.001496][ T6919]  should_fail_ex.cold+0x5/0xa
[  185.001519][ T6919]  _copy_from_user+0x2e/0xd0
[  185.001554][ T6919]  snd_rawmidi_kernel_write1+0x390/0x7c0
[  185.001592][ T6919]  snd_rawmidi_write+0x2dc/0xc60
[  185.001626][ T6919]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  185.001661][ T6919]  ? __pfx_default_wake_function+0x10/0x10
[  185.001695][ T6919]  ? bpf_lsm_file_permission+0x9/0x10
[  185.001712][ T6919]  ? security_file_permission+0x76/0x210
[  185.001734][ T6919]  ? rw_verify_area+0xce/0x6d0
[  185.001754][ T6919]  vfs_write+0x2aa/0x1070
[  185.001775][ T6919]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  185.001804][ T6919]  ? __pfx_vfs_write+0x10/0x10
[  185.001823][ T6919]  ? find_held_lock+0x2b/0x80
[  185.001846][ T6919]  ? __fget_files+0x215/0x3d0
[  185.001866][ T6919]  ? __fget_files+0x215/0x3d0
[  185.001890][ T6919]  ? __fget_files+0x21f/0x3d0
[  185.001917][ T6919]  ksys_write+0x1f8/0x250
[  185.001937][ T6919]  ? __pfx_ksys_write+0x10/0x10
[  185.001959][ T6919]  ? rcu_is_watching+0x12/0xc0
[  185.001984][ T6919]  do_syscall_64+0x10b/0xf80
[  185.002005][ T6919]  ? clear_bhb_loop+0x40/0x90
[  185.002028][ T6919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.002046][ T6919] RIP: 0033:0x7f914bd9cdd9
[  185.002063][ T6919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.002079][ T6919] RSP: 002b:00007f914cc31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  185.002097][ T6919] RAX: ffffffffffffffda RBX: 00007f914c015fa0 RCX: 00007f914bd9cdd9
[  185.002108][ T6919] RDX: 000000100000a3da RSI: 00002000000003c0 RDI: 0000000000000004
[  185.002119][ T6919] RBP: 00007f914be32d69 R08: 0000000000000000 R09: 0000000000000000
[  185.002130][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.002140][ T6919] R13: 00007f914c016038 R14: 00007f914c015fa0 R15: 00007ffc4ad65b68
[  185.002163][ T6919]  </TASK>
[  186.031601][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[  187.724058][ T6940] netlink: 504 bytes leftover after parsing attributes in process `syz.3.217'.
[  187.893603][ T6937] netlink: 350 bytes leftover after parsing attributes in process `syz.3.217'.
[  188.423741][   T30] audit: type=1800 audit(1777500393.097:5): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.219" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[  190.375582][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'.
[  190.700430][ T6969] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  190.837894][ T6969] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub
[  191.955398][ T6987] process 'syz.0.226' launched './file0' with NULL argv: empty string added
[  193.077151][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'.
[  194.742166][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  194.754499][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  195.865115][ T7012] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0d88a (__mcheck_cpu_init_prepare_banks+0x18a/0x380)
[  195.881045][ T7012] Call Trace:
[  195.884333][ T7012]  <TASK>
[  195.887305][ T7012]  ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10
[  195.894341][ T7012]  ? __pfx___schedule+0x10/0x10
[  195.899227][ T7012]  mce_cpu_restart+0xd5/0x1f0
[  195.904088][ T7012]  ? __pfx_mce_cpu_restart+0x10/0x10
[  195.909553][ T7012]  smp_call_function_many_cond+0x13d4/0x1700
[  195.915553][ T7012]  ? __pfx_mce_cpu_restart+0x10/0x10
[  195.920848][ T7012]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  195.927193][ T7012]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  195.933712][ T7012]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[  195.939803][ T7012]  ? __timer_delete_sync+0x151/0x1c0
[  195.945274][ T7012]  ? __pfx_mce_cpu_restart+0x10/0x10
[  195.950758][ T7012]  on_each_cpu_cond_mask+0x40/0x90
[  195.955886][ T7012]  set_bank+0x240/0x3a0
[  195.960250][ T7012]  ? __pfx_set_bank+0x10/0x10
[  195.965154][ T7012]  ? find_held_lock+0x2b/0x80
[  195.969862][ T7012]  ? sysfs_file_kobj+0xe4/0x290
[  195.974861][ T7012]  ? sysfs_file_kobj+0xe4/0x290
[  195.979907][ T7012]  ? __pfx_set_bank+0x10/0x10
[  195.984692][ T7012]  dev_attr_store+0x58/0x80
[  195.989215][ T7012]  ? __pfx_dev_attr_store+0x10/0x10
[  195.994514][ T7012]  sysfs_kf_write+0xf2/0x150
[  195.999125][ T7012]  kernfs_fop_write_iter+0x3e0/0x5f0
[  196.004425][ T7012]  ? __pfx_sysfs_kf_write+0x10/0x10
[  196.009657][ T7012]  vfs_write+0x6ac/0x1070
[  196.014015][ T7012]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  196.019872][ T7012]  ? __pfx_vfs_write+0x10/0x10
[  196.025054][ T7012]  ksys_write+0x12a/0x250
[  196.029402][ T7012]  ? __pfx_ksys_write+0x10/0x10
[  196.034416][ T7012]  ? rcu_is_watching+0x12/0xc0
[  196.039300][ T7012]  do_syscall_64+0x10b/0xf80
[  196.043925][ T7012]  ? clear_bhb_loop+0x40/0x90
[  196.048813][ T7012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.054716][ T7012] RIP: 0033:0x7f8cbcf9cdd9
[  196.059231][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.078846][ T7012] RSP: 002b:00007f8cbde58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  196.087357][ T7012] RAX: ffffffffffffffda RBX: 00007f8cbd216090 RCX: 00007f8cbcf9cdd9
[  196.095435][ T7012] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000002
[  196.103755][ T7012] RBP: 00007f8cbd032d69 R08: 0000000000000000 R09: 0000000000000000
[  196.111829][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.119823][ T7012] R13: 00007f8cbd216128 R14: 00007f8cbd216090 R15: 00007fff5e15d198
[  196.127991][ T7012]  </TASK>
[  196.450317][ T7021] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  196.905608][ T7028] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  199.106920][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'.
[  199.865921][ T7062] FAULT_INJECTION: forcing a failure.
[  199.865921][ T7062] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  199.904774][ T7062] CPU: 1 UID: 0 PID: 7062 Comm: syz.2.241 Not tainted syzkaller #0 PREEMPT(full) 
[  199.904817][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  199.904836][ T7062] Call Trace:
[  199.904845][ T7062]  <TASK>
[  199.904855][ T7062]  dump_stack_lvl+0x100/0x190
[  199.904895][ T7062]  should_fail_ex.cold+0x5/0xa
[  199.904926][ T7062]  ? prepare_alloc_pages+0x16d/0x5f0
[  199.904967][ T7062]  should_fail_alloc_page+0xeb/0x140
[  199.905002][ T7062]  prepare_alloc_pages+0x1f0/0x5f0
[  199.905043][ T7062]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  199.905097][ T7062]  ? __lock_acquire+0x4a5/0x2630
[  199.905132][ T7062]  ? __lock_acquire+0x4a5/0x2630
[  199.905159][ T7062]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  199.905220][ T7062]  ? find_held_lock+0x2b/0x80
[  199.905255][ T7062]  ? is_bpf_text_address+0x8a/0x1a0
[  199.905290][ T7062]  ? is_bpf_text_address+0x8a/0x1a0
[  199.905326][ T7062]  ? bpf_ksym_find+0x124/0x1c0
[  199.905366][ T7062]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  199.905404][ T7062]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  199.905447][ T7062]  ? policy_nodemask+0xed/0x4f0
[  199.905484][ T7062]  alloc_pages_mpol+0x1fb/0x540
[  199.905519][ T7062]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  199.905563][ T7062]  folio_alloc_mpol_noprof+0x36/0x260
[  199.905602][ T7062]  shmem_alloc_folio+0x135/0x160
[  199.905642][ T7062]  shmem_alloc_and_add_folio+0x371/0xd40
[  199.905694][ T7062]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  199.905740][ T7062]  ? shmem_allowable_huge_orders+0x2bd/0x400
[  199.905793][ T7062]  shmem_get_folio_gfp+0x6ab/0x1900
[  199.905844][ T7062]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  199.905884][ T7062]  ? __lock_acquire+0x4a5/0x2630
[  199.905921][ T7062]  shmem_fault+0x1f9/0xa20
[  199.905950][ T7062]  ? __pfx_shmem_fault+0x10/0x10
[  199.905994][ T7062]  ? rcu_read_unlock+0x17/0x60
[  199.906026][ T7062]  ? ptlock_alloc+0x1f/0x70
[  199.906070][ T7062]  ? __pfx_filemap_map_pages+0x10/0x10
[  199.906109][ T7062]  ? lruvec_stat_mod_folio+0x224/0x2b0
[  199.906145][ T7062]  ? __pfx_filemap_map_pages+0x10/0x10
[  199.906189][ T7062]  __do_fault+0x10b/0x440
[  199.906220][ T7062]  do_fault+0x2db/0x1750
[  199.906252][ T7062]  ? __pmd_alloc+0x3fb/0x950
[  199.906289][ T7062]  __handle_mm_fault+0x187d/0x2a00
[  199.906344][ T7062]  ? mt_find+0x45e/0x8e0
[  199.906381][ T7062]  ? __pfx___handle_mm_fault+0x10/0x10
[  199.906416][ T7062]  ? __pfx_mt_find+0x10/0x10
[  199.906470][ T7062]  ? find_vma+0xbf/0x140
[  199.906498][ T7062]  ? __pfx_find_vma+0x10/0x10
[  199.906533][ T7062]  handle_mm_fault+0x36d/0xa20
[  199.906580][ T7062]  do_user_addr_fault+0x74c/0x12f0
[  199.906617][ T7062]  ? trace_page_fault_kernel+0x7a/0x200
[  199.906655][ T7062]  exc_page_fault+0x6f/0xd0
[  199.906691][ T7062]  asm_exc_page_fault+0x26/0x30
[  199.906720][ T7062] RIP: 0010:rep_movs_alternative+0x33/0x90
[  199.906764][ T7062] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb
[  199.906790][ T7062] RSP: 0018:ffffc900033e7d68 EFLAGS: 00050216
[  199.906813][ T7062] RAX: 000040000007d000 RBX: 0000000000000020 RCX: 0000000000000020
[  199.906831][ T7062] RDX: 0000000000000001 RSI: ffffc900033e7dd0 RDI: 0000000000000000
[  199.906847][ T7062] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff5200067cfbd
[  199.906864][ T7062] R10: ffffc900033e7def R11: 0000000000000000 R12: ffffc900033e7dd0
[  199.906883][ T7062] R13: 0000000000000020 R14: 00007ffffffff000 R15: 0000000000000000
[  199.906923][ T7062]  _copy_to_user+0xa4/0xd0
[  199.906976][ T7062]  ksys_msgctl.constprop.0+0x2cc/0x340
[  199.907021][ T7062]  ? __pfx_ksys_msgctl.constprop.0+0x10/0x10
[  199.907092][ T7062]  ? rcu_is_watching+0x12/0xc0
[  199.907137][ T7062]  do_syscall_64+0x10b/0xf80
[  199.907172][ T7062]  ? clear_bhb_loop+0x40/0x90
[  199.907210][ T7062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.907241][ T7062] RIP: 0033:0x7f9b0139cdd9
[  199.907268][ T7062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.907295][ T7062] RSP: 002b:00007f9b022e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000047
[  199.907323][ T7062] RAX: ffffffffffffffda RBX: 00007f9b01615fa0 RCX: 00007f9b0139cdd9
[  199.907352][ T7062] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000000049e1
[  199.907370][ T7062] RBP: 00007f9b01432d69 R08: 0000000000000000 R09: 0000000000000000
[  199.907388][ T7062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.907405][ T7062] R13: 00007f9b01616038 R14: 00007f9b01615fa0 R15: 00007fff74696088
[  199.907446][ T7062]  </TASK>
[  200.862863][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'.
[  201.136160][ T7082] misc userio: Invalid payload size
[  201.242925][ T7059] ptrace attach of "./syz-executor exec"[5622] was attempted by "
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
 
[  201.961272][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'.
[  202.064180][ T7099] ptrace attach of "./syz-executor exec"[5624] was attempted by "
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
"[7099]
[  202.541993][ T7105] FAULT_INJECTION: forcing a failure.
[  202.541993][ T7105] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.591688][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) 
[  202.591728][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  202.591744][ T7105] Call Trace:
[  202.591754][ T7105]  <TASK>
[  202.591765][ T7105]  dump_stack_lvl+0x100/0x190
[  202.591805][ T7105]  should_fail_ex.cold+0x5/0xa
[  202.591842][ T7105]  _copy_from_user+0x2e/0xd0
[  202.591890][ T7105]  snd_rawmidi_kernel_write1+0x390/0x7c0
[  202.591957][ T7105]  snd_rawmidi_write+0x2dc/0xc60
[  202.592009][ T7105]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  202.592052][ T7105]  ? __pfx_default_wake_function+0x10/0x10
[  202.592093][ T7105]  ? bpf_lsm_file_permission+0x9/0x10
[  202.592121][ T7105]  ? security_file_permission+0x76/0x210
[  202.592147][ T7105]  ? rw_verify_area+0xce/0x6d0
[  202.592167][ T7105]  vfs_write+0x2aa/0x1070
[  202.592189][ T7105]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  202.592218][ T7105]  ? __pfx_vfs_write+0x10/0x10
[  202.592237][ T7105]  ? find_held_lock+0x2b/0x80
[  202.592270][ T7105]  ? __fget_files+0x215/0x3d0
[  202.592290][ T7105]  ? __fget_files+0x215/0x3d0
[  202.592313][ T7105]  ? __fget_files+0x21f/0x3d0
[  202.592339][ T7105]  ksys_write+0x1f8/0x250
[  202.592361][ T7105]  ? __pfx_ksys_write+0x10/0x10
[  202.592383][ T7105]  ? rcu_is_watching+0x12/0xc0
[  202.592409][ T7105]  do_syscall_64+0x10b/0xf80
[  202.592432][ T7105]  ? clear_bhb_loop+0x40/0x90
[  202.592454][ T7105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.592472][ T7105] RIP: 0033:0x7f538cb9cdd9
[  202.592488][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.592506][ T7105] RSP: 002b:00007f538da3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  202.592527][ T7105] RAX: ffffffffffffffda RBX: 00007f538ce15fa0 RCX: 00007f538cb9cdd9
[  202.592539][ T7105] RDX: 000000100000a3da RSI: 00002000000003c0 RDI: 0000000000000004
[  202.592549][ T7105] RBP: 00007f538cc32d69 R08: 0000000000000000 R09: 0000000000000000
[  202.592559][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.592569][ T7105] R13: 00007f538ce16038 R14: 00007f538ce15fa0 R15: 00007ffc6cbc01c8
[  202.592591][ T7105]  </TASK>
[  203.252560][   T30] audit: type=1800 audit(1843104521.210:6): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.251" name="dbroot" dev="configfs" ino=14787 res=0 errno=0
[  203.660550][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.255'.
[  203.769158][ T7118] ubi0: attaching mtd0
[  203.870040][ T7118] ubi0: scanning is finished
[  204.387622][ T7118] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  204.532917][ T7118] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  204.562225][ T7118] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  204.587863][ T7118] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  204.601575][ T7118] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  204.637958][ T7118] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  204.676282][ T7118] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1286559866
[  204.723323][ T7118] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  204.767195][ T7137] ubi0: background thread "ubi_bgt0d" started, PID 7137
[  204.846792][ T7127] ptrace attach of "./syz-executor exec"[5622] was attempted by ""[7127]
[  204.910578][ T7125] ubi0: detaching mtd0
[  205.066042][ T7125] ubi0: mtd0 is detached
[  205.927768][ T7147] syz.3.258(7147): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  205.957584][ T7153] =======================================================
[  205.957584][ T7153] WARNING: The mand mount option has been deprecated and
[  205.957584][ T7153]          and is ignored by this kernel. Remove the mand
[  205.957584][ T7153]          option from the mount to silence this warning.
[  205.957584][ T7153] =======================================================
[  206.336712][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'.
[  207.179960][ T7169] ptrace attach of "./syz-executor exec"[5622] was attempted by "
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
 
[  208.153201][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'.
[  208.754811][ T7189] smpboot: CPU 1 is now offline
[  209.837693][ T7197] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  210.092155][ T7200] smpboot: CPU 1 is now offline
[  211.266821][ T7210] random: crng reseeded on system resumption
[  211.618835][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  211.652993][ T7208] FAULT_INJECTION: forcing a failure.
[  211.652993][ T7208] name failslab, interval 1, probability 0, space 0, times 0
[  211.746419][ T7208] CPU: 0 UID: 0 PID: 7208 Comm: syz.1.270 Not tainted syzkaller #0 PREEMPT(full) 
[  211.746458][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  211.746469][ T7208] Call Trace:
[  211.746475][ T7208]  <TASK>
[  211.746483][ T7208]  dump_stack_lvl+0x100/0x190
[  211.746508][ T7208]  should_fail_ex.cold+0x5/0xa
[  211.746532][ T7208]  should_failslab+0xc2/0x120
[  211.746554][ T7208]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  211.746583][ T7208]  ? security_file_alloc+0x34/0x2c0
[  211.746604][ T7208]  ? trace_kmem_cache_alloc+0xd5/0x100
[  211.746631][ T7208]  security_file_alloc+0x34/0x2c0
[  211.746653][ T7208]  init_file+0x95/0x480
[  211.746678][ T7208]  alloc_empty_file+0x79/0x1c0
[  211.746706][ T7208]  dentry_open+0x46/0xd0
[  211.746733][ T7208]  pidfs_alloc_file+0x18f/0x290
[  211.746754][ T7208]  ? __pfx_pidfs_alloc_file+0x10/0x10
[  211.746781][ T7208]  pidfd_prepare+0x10c/0x1b0
[  211.746808][ T7208]  __x64_sys_pidfd_open+0x105/0x1a0
[  211.746826][ T7208]  ? __pfx___x64_sys_pidfd_open+0x10/0x10
[  211.746845][ T7208]  ? rcu_is_watching+0x12/0xc0
[  211.746870][ T7208]  do_syscall_64+0x10b/0xf80
[  211.746892][ T7208]  ? clear_bhb_loop+0x40/0x90
[  211.746914][ T7208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.746933][ T7208] RIP: 0033:0x7f914bd9cdd9
[  211.746948][ T7208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.746965][ T7208] RSP: 002b:00007f914cc10028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2
[  211.746983][ T7208] RAX: ffffffffffffffda RBX: 00007f914c016090 RCX: 00007f914bd9cdd9
[  211.746994][ T7208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  211.747004][ T7208] RBP: 00007f914be32d69 R08: 0000000000000000 R09: 0000000000000000
[  211.747014][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.747024][ T7208] R13: 00007f914c016128 R14: 00007f914c016090 R15: 00007ffc4ad65b68
[  211.747046][ T7208]  </TASK>
[  212.510042][ T7217] FAULT_INJECTION: forcing a failure.
[  212.510042][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.727436][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) 
[  212.727464][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  212.727474][ T7217] Call Trace:
[  212.727481][ T7217]  <TASK>
[  212.727489][ T7217]  dump_stack_lvl+0x100/0x190
[  212.727529][ T7217]  should_fail_ex.cold+0x5/0xa
[  212.727553][ T7217]  _copy_from_user+0x2e/0xd0
[  212.727585][ T7217]  snd_rawmidi_kernel_write1+0x390/0x7c0
[  212.727622][ T7217]  snd_rawmidi_write+0x2dc/0xc60
[  212.727655][ T7217]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  212.727684][ T7217]  ? __pfx_default_wake_function+0x10/0x10
[  212.727710][ T7217]  ? bpf_lsm_file_permission+0x9/0x10
[  212.727727][ T7217]  ? security_file_permission+0x76/0x210
[  212.727749][ T7217]  ? rw_verify_area+0xce/0x6d0
[  212.727768][ T7217]  vfs_write+0x2aa/0x1070
[  212.727789][ T7217]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  212.727818][ T7217]  ? __pfx_vfs_write+0x10/0x10
[  212.727836][ T7217]  ? find_held_lock+0x2b/0x80
[  212.727859][ T7217]  ? __fget_files+0x215/0x3d0
[  212.727878][ T7217]  ? __fget_files+0x215/0x3d0
[  212.727902][ T7217]  ? __fget_files+0x21f/0x3d0
[  212.727929][ T7217]  ksys_write+0x1f8/0x250
[  212.727949][ T7217]  ? __pfx_ksys_write+0x10/0x10
[  212.727972][ T7217]  ? rcu_is_watching+0x12/0xc0
[  212.727996][ T7217]  do_syscall_64+0x10b/0xf80
[  212.728018][ T7217]  ? clear_bhb_loop+0x40/0x90
[  212.728040][ T7217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.728059][ T7217] RIP: 0033:0x7f8cbcf9cdd9
[  212.728075][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.728091][ T7217] RSP: 002b:00007f8cbde79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  212.728109][ T7217] RAX: ffffffffffffffda RBX: 00007f8cbd215fa0 RCX: 00007f8cbcf9cdd9
[  212.728120][ T7217] RDX: 000000100000a3da RSI: 00002000000003c0 RDI: 0000000000000004
[  212.728138][ T7217] RBP: 00007f8cbd032d69 R08: 0000000000000000 R09: 0000000000000000
[  212.728149][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.728166][ T7217] R13: 00007f8cbd216038 R14: 00007f8cbd215fa0 R15: 00007fff5e15d198
[  212.728189][ T7217]  </TASK>
[  213.809646][ T7226] ptrace attach of "./syz-executor exec"[5623] was attempted by ""[7226]
[  214.637429][ T7236] ksmbd: Unknown IPC event: 14, ignore.
[  215.353193][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.278'.
[  215.522321][ T7243] ubi0: attaching mtd0
[  215.591395][ T7243] ubi0: scanning is finished
[  215.723807][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'.
[  216.041635][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'.
[  216.062936][ T7243] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  216.215796][ T7259] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  216.232473][ T7243] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  216.374840][ T7243] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  216.546626][ T7243] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  216.605205][ T7265] smpboot: CPU 1 is now offline
[  216.746012][ T7243] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  216.911523][ T7243] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  217.000883][ T7271] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  217.043247][ T7243] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1286559866
[  217.198004][ T7273] smpboot: CPU 1 is now offline
[  217.225783][ T7243] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  217.426858][ T7260] ubi0: background thread "ubi_bgt0d" started, PID 7260
[  217.434624][ T7246] ubi0: detaching mtd0
[  217.836849][ T7246] ubi0: mtd0 is detached
[  218.067510][ T7281] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  218.115052][ T7132] ------------[ cut here ]------------
[  218.116148][ T7132] 
[  218.116155][ T7132] ======================================================
[  218.116163][ T7132] WARNING: possible circular locking dependency detected
[  218.116189][ T7132] syzkaller #0 Not tainted
[  218.116200][ T7132] ------------------------------------------------------
[  218.116208][ T7132] syz.2.253/7132 is trying to acquire lock:
[  218.116219][ T7132] ffffffff8e6f1420 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[  218.116281][ T7132] 
[  218.116281][ T7132] but task is already holding lock:
[  218.116288][ T7132] ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  218.116342][ T7132] 
[  218.116342][ T7132] which lock already depends on the new lock.
[  218.116342][ T7132] 
[  218.116349][ T7132] 
[  218.116349][ T7132] the existing dependency chain (in reverse order) is:
[  218.116356][ T7132] 
[  218.116356][ T7132] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  218.116384][ T7132]        _raw_spin_lock_nested+0x31/0x40
[  218.116407][ T7132]        raw_spin_rq_lock_nested+0x2c/0x140
[  218.116436][ T7132]        _task_rq_lock+0xcf/0x510
[  218.116464][ T7132]        cgroup_move_task+0x81/0x320
[  218.116497][ T7132]        css_set_move_task+0x285/0x600
[  218.116528][ T7132]        cgroup_post_fork+0x202/0x9b0
[  218.116559][ T7132]        copy_process+0x5b21/0x7fa0
[  218.116590][ T7132]        kernel_clone+0x12e/0x9c0
[  218.116618][ T7132]        user_mode_thread+0xcc/0x110
[  218.116648][ T7132]        rest_init+0x21/0x260
[  218.116678][ T7132]        start_kernel+0x484/0x490
[  218.116698][ T7132]        x86_64_start_reservations+0x24/0x30
[  218.116720][ T7132]        x86_64_start_kernel+0x12b/0x130
[  218.116740][ T7132]        common_startup_64+0x13e/0x148
[  218.116769][ T7132] 
[  218.116769][ T7132] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  218.116796][ T7132]        _raw_spin_lock_irqsave+0x3a/0x60
[  218.116818][ T7132]        try_to_wake_up+0xb5/0x1900
[  218.116845][ T7132]        __wake_up_common+0x135/0x1f0
[  218.116864][ T7132]        __wake_up+0x31/0x60
[  218.116894][ T7132]        tty_port_default_wakeup+0x52/0x70
[  218.116929][ T7132]        serial8250_tx_chars+0x68f/0x860
[  218.116963][ T7132]        serial8250_handle_irq_locked+0x5e6/0x7e0
[  218.116999][ T7132]        serial8250_handle_irq.part.0+0xb4/0x530
[  218.117034][ T7132]        serial8250_default_handle_irq+0xc2/0x290
[  218.117070][ T7132]        serial8250_interrupt+0xf8/0x1c0
[  218.117093][ T7132]        __handle_irq_event_percpu+0x235/0x8c0
[  218.117121][ T7132]        handle_irq_event+0xab/0x1e0
[  218.117147][ T7132]        handle_edge_irq+0x35e/0x960
[  218.117179][ T7132]        __common_interrupt+0xd8/0x2f0
[  218.117213][ T7132]        common_interrupt+0xb9/0xe0
[  218.117245][ T7132]        asm_common_interrupt+0x26/0x40
[  218.117266][ T7132]        _raw_spin_unlock_irq+0x29/0x50
[  218.117288][ T7132]        __rpm_callback+0x272/0x620
[  218.117309][ T7132]        rpm_callback+0x16a/0x1b0
[  218.117329][ T7132]        rpm_resume+0xd22/0x1330
[  218.117349][ T7132]        rpm_resume+0x721/0x1330
[  218.117369][ T7132]        pm_runtime_work+0x10c/0x150
[  218.117393][ T7132]        process_one_work+0xa0e/0x1980
[  218.117414][ T7132]        worker_thread+0x5ef/0xe50
[  218.117435][ T7132]        kthread+0x370/0x450
[  218.117452][ T7132]        ret_from_fork+0x72b/0xd50
[  218.117474][ T7132]        ret_from_fork_asm+0x1a/0x30
[  218.117503][ T7132] 
[  218.117503][ T7132] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[  218.117531][ T7132]        _raw_spin_lock_irqsave+0x3a/0x60
[  218.117553][ T7132]        __wake_up+0x1c/0x60
[  218.117582][ T7132]        tty_port_default_wakeup+0x52/0x70
[  218.117615][ T7132]        serial8250_tx_chars+0x68f/0x860
[  218.117649][ T7132]        serial8250_handle_irq_locked+0x5e6/0x7e0
[  218.117685][ T7132]        serial8250_handle_irq.part.0+0xb4/0x530
[  218.117720][ T7132]        serial8250_default_handle_irq+0xc2/0x290
[  218.117756][ T7132]        serial8250_interrupt+0xf8/0x1c0
[  218.117778][ T7132]        __handle_irq_event_percpu+0x235/0x8c0
[  218.117806][ T7132]        handle_irq_event+0xab/0x1e0
[  218.117832][ T7132]        handle_edge_irq+0x35e/0x960
[  218.117855][ T7132]        __common_interrupt+0xd8/0x2f0
[  218.117889][ T7132]        common_interrupt+0xb9/0xe0
[  218.117921][ T7132]        asm_common_interrupt+0x26/0x40
[  218.117942][ T7132]        _raw_spin_unlock_irqrestore+0x31/0x80
[  218.117965][ T7132]        uart_write+0x29d/0xb20
[  218.117996][ T7132]        n_tty_write+0x431/0x11c0
[  218.118017][ T7132]        file_tty_write.isra.0+0x4d2/0x890
[  218.118048][ T7132]        redirected_tty_write+0xd4/0x120
[  218.118078][ T7132]        vfs_write+0x6ac/0x1070
[  218.118101][ T7132]        ksys_write+0x12a/0x250
[  218.118123][ T7132]        do_syscall_64+0x10b/0xf80
[  218.118148][ T7132]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.118177][ T7132] 
[  218.118177][ T7132] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  218.118205][ T7132]        _raw_spin_lock_irqsave+0x3a/0x60
[  218.118227][ T7132]        serial8250_console_write+0x17e/0x1900
[  218.118249][ T7132]        console_flush_one_record+0x790/0xe50
[  218.118276][ T7132]        console_unlock+0x103/0x260
[  218.118301][ T7132]        vprintk_emit+0x407/0x6b0
[  218.118327][ T7132]        _printk+0xcf/0x110
[  218.118347][ T7132]        register_console.cold+0xc0/0x248
[  218.118369][ T7132]        univ8250_console_init+0x6f/0x80
[  218.118399][ T7132]        console_init+0x3f7/0x5e0
[  218.118425][ T7132]        start_kernel+0x30a/0x490
[  218.118443][ T7132]        x86_64_start_reservations+0x24/0x30
[  218.118464][ T7132]        x86_64_start_kernel+0x12b/0x130
[  218.118485][ T7132]        common_startup_64+0x13e/0x148
[  218.118512][ T7132] 
[  218.118512][ T7132] -> #0 (console_owner){-...}-{0:0}:
[  218.118540][ T7132]        __lock_acquire+0x14b8/0x2630
[  218.118560][ T7132]        lock_acquire+0x1b1/0x370
[  218.118578][ T7132]        console_lock_spinning_enable+0x72/0x80
[  218.118604][ T7132]        console_flush_one_record+0x739/0xe50
[  218.118631][ T7132]        console_unlock+0x103/0x260
[  218.118656][ T7132]        vprintk_emit+0x407/0x6b0
[  218.118682][ T7132]        _printk+0xcf/0x110
[  218.118701][ T7132]        __report_bug.cold+0x15/0x137
[  218.118721][ T7132]        report_bug+0xb2/0x220
[  218.118743][ T7132]        handle_bug+0x16a/0x2a0
[  218.118771][ T7132]        exc_invalid_op+0x17/0x50
[  218.118799][ T7132]        asm_exc_invalid_op+0x1a/0x20
[  218.118820][ T7132]        update_rq_clock+0x40a/0xd20
[  218.118849][ T7132]        __schedule+0x1cd8/0x6820
[  218.118871][ T7132]        preempt_schedule_irq+0x50/0x90
[  218.118894][ T7132]        irqentry_exit+0x1fe/0x790
[  218.118919][ T7132]        asm_sysvec_reschedule_ipi+0x1a/0x20
[  218.118942][ T7132]        __update_page_owner_free_handle.isra.0+0x1ff/0x4d0
[  218.118969][ T7132]        __reset_page_owner+0x93/0x190
[  218.118992][ T7132]        free_unref_folios+0xa0d/0x16f0
[  218.119025][ T7132]        folios_put_refs+0x571/0xa90
[  218.119044][ T7132]        shmem_undo_range+0x5e5/0x1570
[  218.119064][ T7132]        shmem_evict_inode+0x3f3/0xc40
[  218.119084][ T7132]        evict+0x3c2/0xad0
[  218.119113][ T7132]        iput.part.0+0x605/0xf50
[  218.119143][ T7132]        iput+0x35/0x40
[  218.119178][ T7132]        dentry_unlink_inode+0x2c0/0x4c0
[  218.119206][ T7132]        __dentry_kill+0x1d0/0x690
[  218.119236][ T7132]        finish_dput+0x76/0x480
[  218.119267][ T7132]        dput.part.0+0x456/0x570
[  218.119298][ T7132]        dput+0x1f/0x30
[  218.119327][ T7132]        __fput+0x519/0xb50
[  218.119355][ T7132]        task_work_run+0x150/0x240
[  218.119375][ T7132]        do_exit+0x8d2/0x2a60
[  218.119407][ T7132]        do_group_exit+0xd5/0x2a0
[  218.119440][ T7132]        get_signal+0x1ec7/0x21e0
[  218.119466][ T7132]        arch_do_signal_or_restart+0x91/0x770
[  218.119499][ T7132]        irqentry_exit+0x403/0x790
[  218.119523][ T7132]        asm_exc_page_fault+0x26/0x30
[  218.119544][ T7132] 
[  218.119544][ T7132] other info that might help us debug this:
[  218.119544][ T7132] 
[  218.119550][ T7132] Chain exists of:
[  218.119550][ T7132]   console_owner --> &p->pi_lock --> &rq->__lock
[  218.119550][ T7132] 
[  218.119582][ T7132]  Possible unsafe locking scenario:
[  218.119582][ T7132] 
[  218.119588][ T7132]        CPU0                    CPU1
[  218.119594][ T7132]        ----                    ----
[  218.119600][ T7132]   lock(&rq->__lock);
[  218.119613][ T7132]                                lock(&p->pi_lock);
[  218.119627][ T7132]                                lock(&rq->__lock);
[  218.119642][ T7132]   lock(console_owner);
[  218.119655][ T7132] 
[  218.119655][ T7132]  *** DEADLOCK ***
[  218.119655][ T7132] 
[  218.119660][ T7132] 4 locks held by syz.2.253/7132:
[  218.119673][ T7132]  #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle.isra.0+0x3c/0x4d0
[  218.119730][ T7132]  #1: ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[  218.119788][ T7132]  #2: ffffffff8e7d1860 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110
[  218.119837][ T7132]  #3: ffffffff8e7d18d8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50
[  218.119893][ T7132] 
[  218.119893][ T7132] stack backtrace:
[  218.119903][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) 
[  218.119929][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  218.119944][ T7132] Call Trace:
[  218.119952][ T7132]  <TASK>
[  218.119960][ T7132]  dump_stack_lvl+0x100/0x190
[  218.119984][ T7132]  print_circular_bug.cold+0x178/0x1c7
[  218.120021][ T7132]  check_noncircular+0x146/0x160
[  218.120059][ T7132]  __lock_acquire+0x14b8/0x2630
[  218.120084][ T7132]  lock_acquire+0x1b1/0x370
[  218.120104][ T7132]  ? console_lock_spinning_enable+0x61/0x80
[  218.120133][ T7132]  ? console_lock_spinning_enable+0x4a/0x80
[  218.120170][ T7132]  console_lock_spinning_enable+0x72/0x80
[  218.120198][ T7132]  ? console_lock_spinning_enable+0x61/0x80
[  218.120226][ T7132]  console_flush_one_record+0x739/0xe50
[  218.120257][ T7132]  ? __pfx_console_flush_one_record+0x10/0x10
[  218.120290][ T7132]  ? is_printk_cpu_sync_owner+0x32/0x40
[  218.120324][ T7132]  console_unlock+0x103/0x260
[  218.120352][ T7132]  ? __pfx_console_unlock+0x10/0x10
[  218.120381][ T7132]  ? do_raw_spin_unlock+0x145/0x1e0
[  218.120408][ T7132]  ? _printk+0xcf/0x110
[  218.120431][ T7132]  vprintk_emit+0x407/0x6b0
[  218.120460][ T7132]  ? __pfx_vprintk_emit+0x10/0x10
[  218.120488][ T7132]  ? hrtimer_force_reprogram+0x180/0x290
[  218.120517][ T7132]  ? hrtimer_start_range_ns+0x860/0x1a50
[  218.120547][ T7132]  _printk+0xcf/0x110
[  218.120568][ T7132]  ? __pfx__printk+0x10/0x10
[  218.120591][ T7132]  ? __lock_acquire+0x4a5/0x2630
[  218.120612][ T7132]  ? __report_bug.cold+0x5/0x137
[  218.120633][ T7132]  ? __report_bug+0x377/0x3d0
[  218.120657][ T7132]  __report_bug.cold+0x15/0x137
[  218.120677][ T7132]  ? update_rq_clock+0x40a/0xd20
[  218.120709][ T7132]  ? __pfx___report_bug+0x10/0x10
[  218.120736][ T7132]  ? __lock_acquire+0x4a5/0x2630
[  218.120758][ T7132]  ? update_rq_clock+0x40a/0xd20
[  218.120789][ T7132]  report_bug+0xb2/0x220
[  218.120812][ T7132]  ? update_rq_clock+0x40a/0xd20
[  218.120842][ T7132]  handle_bug+0x16a/0x2a0
[  218.120872][ T7132]  exc_invalid_op+0x17/0x50
[  218.120903][ T7132]  asm_exc_invalid_op+0x1a/0x20
[  218.120925][ T7132] RIP: 0010:update_rq_clock+0x40a/0xd20
[  218.120958][ T7132] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 05 b5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00
[  218.120980][ T7132] RSP: 0000:ffffc90003b06ec8 EFLAGS: 00010046
[  218.120997][ T7132] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001
[  218.121012][ T7132] RDX: 0000000000000046 RSI: ffffffff8def4647 RDI: ffffffff8c1c2380
[  218.121026][ T7132] RBP: ffffc90003b07078 R08: 0000000000000001 R09: 0000000000000001
[  218.121040][ T7132] R10: ffffffff90d7b457 R11: 0000000000000000 R12: ffffffff90d7e7c4
[  218.121055][ T7132] R13: ffff8880b853c220 R14: ffff88801e681ec0 R15: ffff8880b853b380
[  218.121076][ T7132]  ? update_rq_clock+0x9c/0xd20
[  218.121109][ T7132]  __schedule+0x1cd8/0x6820
[  218.121132][ T7132]  ? unwind_next_frame+0x3c8/0x2090
[  218.121175][ T7132]  ? __pfx___schedule+0x10/0x10
[  218.121200][ T7132]  ? rcu_is_watching+0x12/0xc0
[  218.121229][ T7132]  preempt_schedule_irq+0x50/0x90
[  218.121255][ T7132]  irqentry_exit+0x1fe/0x790
[  218.121282][ T7132]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  218.121307][ T7132] RIP: 0010:__update_page_owner_free_handle.isra.0+0x1ff/0x4d0
[  218.121337][ T7132] Code: 84 d2 0f 85 cd 02 00 00 45 89 6f 0c e8 da cc 88 ff 49 8d 7f 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 8a 02 00 00 48 8b 44 24 10 48 8b 4c 24 20 49 89 47 18 48 b8
[  218.121359][ T7132] RSP: 0000:ffffc90003b07180 EFLAGS: 00000246
[  218.121375][ T7132] RAX: dffffc0000000000 RBX: ffff88801e40c9e0 RCX: ffffffff827f0aaa
[  218.121390][ T7132] RDX: 1ffff11003c81940 RSI: ffffffff827f0ae6 RDI: ffff88801e40ca00
[  218.121405][ T7132] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1003c8193c
[  218.121419][ T7132] R10: ffff88801e40c9e7 R11: 0000000000000000 R12: ffff888031cd5c40
[  218.121433][ T7132] R13: 0000000005240288 R14: 0000000000000001 R15: ffff88801e40c9e8
[  218.121451][ T7132]  ? __update_page_owner_free_handle.isra.0+0x1aa/0x4d0
[  218.121479][ T7132]  ? __update_page_owner_free_handle.isra.0+0x1e6/0x4d0
[  218.121512][ T7132]  __reset_page_owner+0x93/0x190
[  218.121538][ T7132]  free_unref_folios+0xa0d/0x16f0
[  218.121574][ T7132]  ? __print_lock_name+0x20/0x80
[  218.121603][ T7132]  ? folios_put_refs+0x50a/0xa90
[  218.121623][ T7132]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  218.121650][ T7132]  folios_put_refs+0x571/0xa90
[  218.121672][ T7132]  ? __pfx_folios_put_refs+0x10/0x10
[  218.121711][ T7132]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[  218.121740][ T7132]  shmem_undo_range+0x5e5/0x1570
[  218.121766][ T7132]  ? __pfx_shmem_undo_range+0x10/0x10
[  218.121819][ T7132]  ? percpu_counter_add_batch+0xb9/0x230
[  218.121844][ T7132]  shmem_evict_inode+0x3f3/0xc40
[  218.121867][ T7132]  ? inode_wait_for_writeback+0x171/0x390
[  218.121892][ T7132]  ? __pfx_shmem_evict_inode+0x10/0x10
[  218.121915][ T7132]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  218.121940][ T7132]  ? find_held_lock+0x2b/0x80
[  218.121968][ T7132]  ? evict+0x37e/0xad0
[  218.121998][ T7132]  ? evict+0x37e/0xad0
[  218.122030][ T7132]  ? __pfx_shmem_evict_inode+0x10/0x10
[  218.122053][ T7132]  evict+0x3c2/0xad0
[  218.122083][ T7132]  ? find_held_lock+0x2b/0x80
[  218.122112][ T7132]  ? __pfx_evict+0x10/0x10
[  218.122145][ T7132]  ? iput.part.0+0x5fd/0xf50
[  218.122186][ T7132]  iput.part.0+0x605/0xf50
[  218.122217][ T7132]  ? __pfx_inode_just_drop+0x10/0x10
[  218.122242][ T7132]  iput+0x35/0x40
[  218.122272][ T7132]  dentry_unlink_inode+0x2c0/0x4c0
[  218.122304][ T7132]  __dentry_kill+0x1d0/0x690
[  218.122336][ T7132]  finish_dput+0x76/0x480
[  218.122370][ T7132]  dput.part.0+0x456/0x570
[  218.122403][ T7132]  dput+0x1f/0x30
[  218.122435][ T7132]  __fput+0x519/0xb50
[  218.122468][ T7132]  task_work_run+0x150/0x240
[  218.122490][ T7132]  ? __pfx_task_work_run+0x10/0x10
[  218.122513][ T7132]  ? do_raw_spin_unlock+0x145/0x1e0
[  218.122541][ T7132]  do_exit+0x8d2/0x2a60
[  218.122577][ T7132]  ? __pfx_do_exit+0x10/0x10
[  218.122610][ T7132]  ? __pfx_proc_coredump_connector+0x10/0x10
[  218.122649][ T7132]  do_group_exit+0xd5/0x2a0
[  218.122685][ T7132]  get_signal+0x1ec7/0x21e0
[  218.122718][ T7132]  ? __pfx_get_signal+0x10/0x10
[  218.122750][ T7132]  arch_do_signal_or_restart+0x91/0x770
[  218.122785][ T7132]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  218.122825][ T7132]  ? rcu_is_watching+0x12/0xc0
[  218.122853][ T7132]  irqentry_exit+0x403/0x790
[  218.122881][ T7132]  asm_exc_page_fault+0x26/0x30
[  218.122903][ T7132] RIP: 0033:0x4021000
[  218.122919][ T7132] Code: Unable to access opcode bytes at 0x4020fd6.
[  218.122929][ T7132] RSP: 002b:0000000000000011 EFLAGS: 00010246
[  218.122945][ T7132] RAX: 0000000000000000 RBX: 00007f9b01616360 RCX: 00007f9b0139cdd9
[  218.122959][ T7132] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000100000008
[  218.122973][ T7132] RBP: 00007f9b01432d69 R08: 0000000004000006 R09: 0000000000000000
[  218.122988][ T7132] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000
[  218.123002][ T7132] R13: 00007f9b016163f8 R14: 00007f9b01616360 R15: 00007fff74696088
[  218.123018][ T7132]  ? 0xffffffff81000000
[  218.123037][ T7132]  </TASK>
[  219.703412][ T7132] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
[  219.703431][ T7132] WARNING: kernel/sched/sched.h:1612 at update_rq_clock+0x40a/0xd20, CPU#0: syz.2.253/7132
[  219.721329][ T7132] Modules linked in:
[  219.725262][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) 
[  219.734585][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.744759][ T7132] RIP: 0010:update_rq_clock+0x40a/0xd20
[  219.750445][ T7132] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 05 b5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00
[  219.770436][ T7132] RSP: 0000:ffffc90003b06ec8 EFLAGS: 00010046
[  219.776536][ T7132] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001
[  219.784523][ T7132] RDX: 0000000000000046 RSI: ffffffff8def4647 RDI: ffffffff8c1c2380
[  219.792601][ T7132] RBP: ffffc90003b07078 R08: 0000000000000001 R09: 0000000000000001
[  219.800594][ T7132] R10: ffffffff90d7b457 R11: 0000000000000000 R12: ffffffff90d7e7c4
[  219.808585][ T7132] R13: ffff8880b853c220 R14: ffff88801e681ec0 R15: ffff8880b853b380
[  219.816661][ T7132] FS:  0000000000000000(0000) GS:ffff888124380000(0000) knlGS:0000000000000000
[  219.825794][ T7132] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  219.832479][ T7132] CR2: 00000000007d5000 CR3: 000000003579a000 CR4: 00000000003526f0
[  219.840556][ T7132] Call Trace:
[  219.844020][ T7132]  <TASK>
[  219.847223][ T7132]  __schedule+0x1cd8/0x6820
[  219.852100][ T7132]  ? unwind_next_frame+0x3c8/0x2090
[  219.857338][ T7132]  ? __pfx___schedule+0x10/0x10
[  219.862386][ T7132]  ? rcu_is_watching+0x12/0xc0
[  219.867352][ T7132]  preempt_schedule_irq+0x50/0x90
[  219.872487][ T7132]  irqentry_exit+0x1fe/0x790
[  219.877186][ T7132]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  219.882664][ T7132] RIP: 0010:__update_page_owner_free_handle.isra.0+0x1ff/0x4d0
[  219.890417][ T7132] Code: 84 d2 0f 85 cd 02 00 00 45 89 6f 0c e8 da cc 88 ff 49 8d 7f 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 8a 02 00 00 48 8b 44 24 10 48 8b 4c 24 20 49 89 47 18 48 b8
[  219.910153][ T7132] RSP: 0000:ffffc90003b07180 EFLAGS: 00000246
[  219.916252][ T7132] RAX: dffffc0000000000 RBX: ffff88801e40c9e0 RCX: ffffffff827f0aaa
[  219.924433][ T7132] RDX: 1ffff11003c81940 RSI: ffffffff827f0ae6 RDI: ffff88801e40ca00
[  219.932445][ T7132] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1003c8193c
[  219.940624][ T7132] R10: ffff88801e40c9e7 R11: 0000000000000000 R12: ffff888031cd5c40
[  219.948724][ T7132] R13: 0000000005240288 R14: 0000000000000001 R15: ffff88801e40c9e8
[  219.956997][ T7132]  ? __update_page_owner_free_handle.isra.0+0x1aa/0x4d0
[  219.964159][ T7132]  ? __update_page_owner_free_handle.isra.0+0x1e6/0x4d0
[  219.971238][ T7132]  __reset_page_owner+0x93/0x190
[  219.976200][ T7132]  free_unref_folios+0xa0d/0x16f0
[  219.981263][ T7132]  ? __print_lock_name+0x20/0x80
[  219.986424][ T7132]  ? folios_put_refs+0x50a/0xa90
[  219.991482][ T7132]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  219.997311][ T7132]  folios_put_refs+0x571/0xa90
[  220.002353][ T7132]  ? __pfx_folios_put_refs+0x10/0x10
[  220.007759][ T7132]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[  220.014196][ T7132]  shmem_undo_range+0x5e5/0x1570
[  220.019173][ T7132]  ? __pfx_shmem_undo_range+0x10/0x10
[  220.024608][ T7132]  ? percpu_counter_add_batch+0xb9/0x230
[  220.030366][ T7132]  shmem_evict_inode+0x3f3/0xc40
[  220.035336][ T7132]  ? inode_wait_for_writeback+0x171/0x390
[  220.041259][ T7132]  ? __pfx_shmem_evict_inode+0x10/0x10
[  220.046822][ T7132]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  220.053055][ T7132]  ? find_held_lock+0x2b/0x80
[  220.057962][ T7132]  ? evict+0x37e/0xad0
[  220.062063][ T7132]  ? evict+0x37e/0xad0
[  220.066188][ T7132]  ? __pfx_shmem_evict_inode+0x10/0x10
[  220.071757][ T7132]  evict+0x3c2/0xad0
[  220.075682][ T7132]  ? find_held_lock+0x2b/0x80
[  220.080562][ T7132]  ? __pfx_evict+0x10/0x10
[  220.085026][ T7132]  ? iput.part.0+0x5fd/0xf50
[  220.089684][ T7132]  iput.part.0+0x605/0xf50
[  220.094242][ T7132]  ? __pfx_inode_just_drop+0x10/0x10
[  220.099725][ T7132]  iput+0x35/0x40
[  220.103403][ T7132]  dentry_unlink_inode+0x2c0/0x4c0
[  220.108924][ T7132]  __dentry_kill+0x1d0/0x690
[  220.113724][ T7132]  finish_dput+0x76/0x480
[  220.118094][ T7132]  dput.part.0+0x456/0x570
[  220.122635][ T7132]  dput+0x1f/0x30
[  220.126388][ T7132]  __fput+0x519/0xb50
[  220.130402][ T7132]  task_work_run+0x150/0x240
[  220.135051][ T7132]  ? __pfx_task_work_run+0x10/0x10
[  220.140278][ T7132]  ? do_raw_spin_unlock+0x145/0x1e0
[  220.145602][ T7132]  do_exit+0x8d2/0x2a60
[  220.149948][ T7132]  ? __pfx_do_exit+0x10/0x10
[  220.154667][ T7132]  ? __pfx_proc_coredump_connector+0x10/0x10
[  220.160689][ T7132]  do_group_exit+0xd5/0x2a0
[  220.165454][ T7132]  get_signal+0x1ec7/0x21e0
[  220.170100][ T7132]  ? __pfx_get_signal+0x10/0x10
[  220.175165][ T7132]  arch_do_signal_or_restart+0x91/0x770
[  220.180860][ T7132]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  220.187056][ T7132]  ? rcu_is_watching+0x12/0xc0
[  220.192383][ T7132]  irqentry_exit+0x403/0x790
[  220.197202][ T7132]  asm_exc_page_fault+0x26/0x30
[  220.202261][ T7132] RIP: 0033:0x4021000
[  220.206341][ T7132] Code: Unable to access opcode bytes at 0x4020fd6.
[  220.213019][ T7132] RSP: 002b:0000000000000011 EFLAGS: 00010246
[  220.219100][ T7132] RAX: 0000000000000000 RBX: 00007f9b01616360 RCX: 00007f9b0139cdd9
[  220.227103][ T7132] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000100000008
[  220.235141][ T7132] RBP: 00007f9b01432d69 R08: 0000000004000006 R09: 0000000000000000
[  220.243217][ T7132] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000
[  220.251291][ T7132] R13: 00007f9b016163f8 R14: 00007f9b01616360 R15: 00007fff74696088
[  220.259365][ T7132]  ? 0xffffffff81000000
[  220.263628][ T7132]  </TASK>
[  220.266677][ T7132] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  220.274071][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) 
[  220.283743][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  220.294150][ T7132] Call Trace:
[  220.297640][ T7132]  <TASK>
[  220.300602][ T7132]  dump_stack_lvl+0x100/0x190
[  220.305582][ T7132]  vpanic+0x552/0x970
[  220.309790][ T7132]  ? __pfx_vpanic+0x10/0x10
[  220.314313][ T7132]  ? lock_release+0x245/0x310
[  220.319019][ T7132]  panic+0xd1/0xe0
[  220.322861][ T7132]  ? __pfx_panic+0x10/0x10
[  220.327473][ T7132]  ? check_panic_on_warn+0x1f/0x90
[  220.332642][ T7132]  check_panic_on_warn.cold+0x19/0x34
[  220.338123][ T7132]  ? update_rq_clock+0x40a/0xd20
[  220.343099][ T7132]  __warn.cold+0x191/0x328
[  220.347541][ T7132]  __report_bug+0x296/0x3d0
[  220.352070][ T7132]  ? update_rq_clock+0x40a/0xd20
[  220.357041][ T7132]  ? __pfx___report_bug+0x10/0x10
[  220.362411][ T7132]  ? __lock_acquire+0x4a5/0x2630
[  220.367815][ T7132]  ? update_rq_clock+0x40a/0xd20
[  220.372911][ T7132]  report_bug+0xb2/0x220
[  220.377552][ T7132]  ? update_rq_clock+0x40a/0xd20
[  220.382713][ T7132]  handle_bug+0x16a/0x2a0
[  220.387177][ T7132]  exc_invalid_op+0x17/0x50
[  220.391798][ T7132]  asm_exc_invalid_op+0x1a/0x20
[  220.397031][ T7132] RIP: 0010:update_rq_clock+0x40a/0xd20
[  220.402690][ T7132] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 05 b5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00
[  220.423224][ T7132] RSP: 0000:ffffc90003b06ec8 EFLAGS: 00010046
[  220.429455][ T7132] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001
[  220.437819][ T7132] RDX: 0000000000000046 RSI: ffffffff8def4647 RDI: ffffffff8c1c2380
[  220.445815][ T7132] RBP: ffffc90003b07078 R08: 0000000000000001 R09: 0000000000000001
[  220.454159][ T7132] R10: ffffffff90d7b457 R11: 0000000000000000 R12: ffffffff90d7e7c4
[  220.462236][ T7132] R13: ffff8880b853c220 R14: ffff88801e681ec0 R15: ffff8880b853b380
[  220.470777][ T7132]  ? update_rq_clock+0x9c/0xd20
[  220.475765][ T7132]  __schedule+0x1cd8/0x6820
[  220.480377][ T7132]  ? unwind_next_frame+0x3c8/0x2090
[  220.485613][ T7132]  ? __pfx___schedule+0x10/0x10
[  220.490497][ T7132]  ? rcu_is_watching+0x12/0xc0
[  220.495580][ T7132]  preempt_schedule_irq+0x50/0x90
[  220.500724][ T7132]  irqentry_exit+0x1fe/0x790
[  220.505482][ T7132]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  220.511175][ T7132] RIP: 0010:__update_page_owner_free_handle.isra.0+0x1ff/0x4d0
[  220.518780][ T7132] Code: 84 d2 0f 85 cd 02 00 00 45 89 6f 0c e8 da cc 88 ff 49 8d 7f 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 8a 02 00 00 48 8b 44 24 10 48 8b 4c 24 20 49 89 47 18 48 b8
[  220.539300][ T7132] RSP: 0000:ffffc90003b07180 EFLAGS: 00000246
[  220.545752][ T7132] RAX: dffffc0000000000 RBX: ffff88801e40c9e0 RCX: ffffffff827f0aaa
[  220.553840][ T7132] RDX: 1ffff11003c81940 RSI: ffffffff827f0ae6 RDI: ffff88801e40ca00
[  220.561933][ T7132] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1003c8193c
[  220.570180][ T7132] R10: ffff88801e40c9e7 R11: 0000000000000000 R12: ffff888031cd5c40
[  220.578256][ T7132] R13: 0000000005240288 R14: 0000000000000001 R15: ffff88801e40c9e8
[  220.586376][ T7132]  ? __update_page_owner_free_handle.isra.0+0x1aa/0x4d0
[  220.593341][ T7132]  ? __update_page_owner_free_handle.isra.0+0x1e6/0x4d0
[  220.600307][ T7132]  __reset_page_owner+0x93/0x190
[  220.605360][ T7132]  free_unref_folios+0xa0d/0x16f0
[  220.610512][ T7132]  ? __print_lock_name+0x20/0x80
[  220.615475][ T7132]  ? folios_put_refs+0x50a/0xa90
[  220.620430][ T7132]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  220.626268][ T7132]  folios_put_refs+0x571/0xa90
[  220.631052][ T7132]  ? __pfx_folios_put_refs+0x10/0x10
[  220.636726][ T7132]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[  220.643082][ T7132]  shmem_undo_range+0x5e5/0x1570
[  220.648401][ T7132]  ? __pfx_shmem_undo_range+0x10/0x10
[  220.654529][ T7132]  ? percpu_counter_add_batch+0xb9/0x230
[  220.660397][ T7132]  shmem_evict_inode+0x3f3/0xc40
[  220.665567][ T7132]  ? inode_wait_for_writeback+0x171/0x390
[  220.671419][ T7132]  ? __pfx_shmem_evict_inode+0x10/0x10
[  220.676903][ T7132]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  220.683173][ T7132]  ? find_held_lock+0x2b/0x80
[  220.687964][ T7132]  ? evict+0x37e/0xad0
[  220.692418][ T7132]  ? evict+0x37e/0xad0
[  220.696519][ T7132]  ? __pfx_shmem_evict_inode+0x10/0x10
[  220.702105][ T7132]  evict+0x3c2/0xad0
[  220.706453][ T7132]  ? find_held_lock+0x2b/0x80
[  220.711536][ T7132]  ? __pfx_evict+0x10/0x10
[  220.716355][ T7132]  ? iput.part.0+0x5fd/0xf50
[  220.721090][ T7132]  iput.part.0+0x605/0xf50
[  220.725654][ T7132]  ? __pfx_inode_just_drop+0x10/0x10
[  220.730987][ T7132]  iput+0x35/0x40
[  220.734924][ T7132]  dentry_unlink_inode+0x2c0/0x4c0
[  220.740607][ T7132]  __dentry_kill+0x1d0/0x690
[  220.745381][ T7132]  finish_dput+0x76/0x480
[  220.750006][ T7132]  dput.part.0+0x456/0x570
[  220.754556][ T7132]  dput+0x1f/0x30
[  220.758388][ T7132]  __fput+0x519/0xb50
[  220.762575][ T7132]  task_work_run+0x150/0x240
[  220.767466][ T7132]  ? __pfx_task_work_run+0x10/0x10
[  220.772958][ T7132]  ? do_raw_spin_unlock+0x145/0x1e0
[  220.778607][ T7132]  do_exit+0x8d2/0x2a60
[  220.783100][ T7132]  ? __pfx_do_exit+0x10/0x10
[  220.787906][ T7132]  ? __pfx_proc_coredump_connector+0x10/0x10
[  220.794017][ T7132]  do_group_exit+0xd5/0x2a0
[  220.798574][ T7132]  get_signal+0x1ec7/0x21e0
[  220.803230][ T7132]  ? __pfx_get_signal+0x10/0x10
[  220.808238][ T7132]  arch_do_signal_or_restart+0x91/0x770
[  220.814011][ T7132]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  220.820210][ T7132]  ? rcu_is_watching+0x12/0xc0
[  220.825010][ T7132]  irqentry_exit+0x403/0x790
[  220.829815][ T7132]  asm_exc_page_fault+0x26/0x30
[  220.834712][ T7132] RIP: 0033:0x4021000
[  220.838831][ T7132] Code: Unable to access opcode bytes at 0x4020fd6.
[  220.845599][ T7132] RSP: 002b:0000000000000011 EFLAGS: 00010246
[  220.851694][ T7132] RAX: 0000000000000000 RBX: 00007f9b01616360 RCX: 00007f9b0139cdd9
[  220.860092][ T7132] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000100000008
[  220.868195][ T7132] RBP: 00007f9b01432d69 R08: 0000000004000006 R09: 0000000000000000
[  220.876459][ T7132] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000
[  220.884461][ T7132] R13: 00007f9b016163f8 R14: 00007f9b01616360 R15: 00007fff74696088
[  220.892560][ T7132]  ? 0xffffffff81000000
[  220.896758][ T7132]  </TASK>
[  220.899885][ T7132] Kernel Offset: disabled
[  220.904316][ T7132] Rebooting in 86400 seconds..