last executing test programs:

5m21.168174979s ago: executing program 1 (id=3367):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff})
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0)
mknod$auto(&(0x7f0000000040)='./bus\x00', 0x5, 0x9)
close_range$auto(0x0, 0x5, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x2, 0x1)
socket(0x2, 0x801, 0x106)
socket(0x26, 0x80805, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)')
ioctl$auto_BLKGETSIZE(r1, 0x1260, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={@raw=0x800, 0xce, 0xfffc, 0x54c, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4})
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
socket(0x2, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240)=""/213, 0xd5)

5m18.891392182s ago: executing program 1 (id=3372):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/92, 0x5c)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x11, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4)
bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd=r1, @target_ifindex=r2, 0x0, 0x3f, @netfilter={0xffffffff, 0x1, 0x3, 0x6}}, 0x7)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x4}, 0x2, 0x100)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
socket(0x1, 0x1, 0x1)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x8ae36f82a2442f77, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x90)
sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "b555ad72688701d0f0de318889d2bb3733908c9c8ea7a188980cc0022b1ca9c0c73fe7b84d3dc3d07118543f18ddd96bfc06ef9c908951847173e3c008d7029367f8ab95a33388430be85685facd6d8afed8ff80841686986007fd4026108a4090c44c84178627e9552eee6a5671ecf4a2efdb"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xc5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/proc/sys/kernel/shm_next_id\x00', 0xe)

5m16.691708983s ago: executing program 1 (id=3377):
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf25040000"], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, <r4=>0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
read$auto(0x3, 0x0, 0x80)
setns(0xc9, 0x0)
socket(0x27, 0x2, 0x1)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
bind$auto(0x3, 0x0, 0x6a)
syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff)
read$auto(0xffffffffffffffff, &(0x7f0000000080)='/dev/cpu_dma_latency\x00', 0x86c1)
sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e1020a000036fb007f0f96c6021abbd9e0e04236ae90f93a866ad2da216b5a0af73924c80fbc243d66e302d73766da8ba5e1d1089149cd2bd3160e26f15fbddac158c93d52fc8d1d26101bc8ad30001751213a8ab7727878efadd74c5dd2370394507da9b3966a4718b2a6a225054fa45cc600bd80863c319af2c82eb41a2ca2ee9acd9f4b0d55e450d304a8", @ANYRESOCT, @ANYBLOB="01002ebd5100fbcbdf250100000004000180020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b8008002600", @ANYRES32=r3, @ANYRES64=r4, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="6000f68004004880f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a0400de8004004380040078800c00a700feffffffffffffff0000000000000000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x200100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x1, 0x1}, 0x3f9}, 0x5, 0x4)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek$auto(r0, 0x9, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0xa, 0x801, 0x106)
getsockopt$auto(r6, 0x6, 0x5, 0x0, 0x0)
ioctl$auto(r5, 0x4018620d, 0x9)

5m15.610740669s ago: executing program 1 (id=3383):
socket(0x2, 0x5, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/state\x00', 0x181c01, 0x0)
write$auto(r0, &(0x7f0000000040), 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x0)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000840)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\b\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\xb5\"\xe8\xe1x7\xa1b\x83?\x06r}u6\x1c\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\xdd\xd1\xfc\xfd\x9c\x04\xedW\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x8, 0x0)
lgetxattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x101)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x900, 0x0)
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x7fff)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00')
r2 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xffffffffffff0001)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000002780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000000480)={0x2288, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x224a, 0x3, 0x0, 0x1, [@typed={0x3b, 0x1f, 0x0, 0x0, @str='/sys/devices/virtual/net/ip6tnl0/statistics/collisions\x00'}, @generic="992e6a55e724ab093d87d69bfbdecd4a109f002a2e27101ed1527b2a7e9c414b84c4e7d0800d4127f7098169f4f665a4a83bd3ae5f5edd287cede5670aa3546de0ed66230a5c409453b4113b", @nested={0x8, 0xfb, 0x0, 0x1, [@typed={0x4, 0xff}]}, @generic="877c2131c23097763a68c05cc6347f60f918ab578eab34fc6cdb36d9a344c3a10db6da8e649f930bb0bcfb24bb1625f39b850d0bf3ffff92eefba577766b808d6d82", @typed={0x1004, 0x9b, 0x0, 0x0, @binary="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"}, @nested={0x18, 0x97, 0x0, 0x1, [@typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @generic="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", @typed={0x87, 0xf1, 0x0, 0x0, @binary="ee25e2a158976ec45f05ed064fbcf9788ea1c4e898396b092a24f85093122d597ff46e2af4e78d63e9a9242fe4c40a0712b22bd8e199b24578daafc85a1804d1af0e96f84fc8f078a7c2cceae233e61071635aba000d2d6699259b3e559c2036880a64e7b4a962a14ca5fb630589efb992bb3bf1c225c471b1baab6fe2372066c8955f"}, @typed={0x8, 0x63, 0x0, 0x0, @fd}, @typed={0xc7, 0x104, 0x0, 0x0, @binary="8a03e23abad3616e623c2374642f37f1892b6101d065d6f44d207e41f30a267e880ee30a3fa9d69b64058b415189f5867366d0de2f37a5f09a0880a2e40d49cd5ed7dde24de89770d3c0de4f00d1b3de2fc692fb61ba84e312afb327c49f7503af13885b1eacfb9e3c6c31e05f8a03ef65f7d9111c3e146e1e06718a73139cc06fad858363015e477740c345f813f8cdee1e9f31a80234a43a48a71789fd61b83634882b82a2058aa2a138c6f1cc5465f58b383b003bf4990bf307301de461a4835cb8"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x2288}, 0x1, 0x0, 0x0, 0x20}, 0x84)
r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r4, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}})
r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f00000027c0)={0x3ff, 0x0, 0x9, 0x80000000, 0x1, "0b606b2d15b8e1f1671cbdcd11de4285bf10809dcb6bee7e11cb8424807fd2205db212fda568d7d4a3d7dcdbcd4a041588c8b6200219c10207e2a41c36abeecc", "1e2d01e82061784a9e052cec329d321d560943a8e93a9cc47d8392c3249b5c2b6dd5955cf6065d69e7461e7aad8f146231fe9ce0aba06549c28f3e9719850ab4e81e485107e26d35409b2e49c87441c9", "6501530c24a42426ebd36eacfc63509841ee414456046c96d1e1ccf9ddef65e2", 0x9, 0x10000, 0x8, "68e7be6437426277d089f7550a8893c0a075418d24b48c3aa2eae05f116727ac4031719f138171ca7064b536499d8c797666f9db3945cc004f30e37e"})
socket(0x2, 0x1, 0x0)
mq_notify$auto(r5, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8)

5m15.429987486s ago: executing program 1 (id=3384):
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x29)
fgetxattr$auto(r0, &(0x7f00000001c0)='system.posix_acl_access\x00\x90\x82\xda\b\n\xf62\x1d\xe0)\xa5\xfd\x99_\xd5\x9c\xff\x04n\xc4A\x1b\n~\x19*\xf1a\x01\x93\x14\xe0\x0e\xe3\xc8\x8d\xe5\r\x0f\xa8g\x1f\x05\x9ey\xedE;\x0f}\xf3\x1dU\x1d\xca\x81<\xf1\x91D\xa4PQvD<\xd7\xf1\xdfpm$l\x99\x17\xe2\x055\xe6g\xab\xadKo\xf2\xbdS\x02H\xf1\x7f\x94t\xb7#\xe1\xb0\xf1@\x1c\xed\xfc\x06\xac>\x99\xda\xa1[c\xe7\xfeI\x1f%\xc4\x9b\xca\xea\xdee_\x82\xa6r\xfb\xf8\xf7\xd4', 0x0, 0x6)
ioctl$auto_FS_IOC_GET_ENCRYPTION_KEY_STATUS2(r2, 0xc080661a, &(0x7f0000000000)={{0x2, 0x0, @identifier="4df49cf9f69fadf626a7d68a687501e4"}, '\x00', 0x2, 0x80000000, 0x3})

5m15.351186671s ago: executing program 1 (id=3385):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4)
mmap$auto(0x5, 0x2020206, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
setfsuid$auto(0xee00)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x29, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(0xffffffffffffffff, 0xc2604111, &(0x7f0000000040)={0xffffffff, [{[0x411340e3, 0x1ff, 0x400, 0x9, 0x0, 0x8, 0x3ff, 0x9]}, {[0x3, 0x6, 0x0, 0xae, 0x401, 0xf, 0x0, 0x6]}, {[0x0, 0xfffffffe, 0x40, 0x4, 0x0, 0x10, 0x0, 0x4]}], [{[0x6, 0x3, 0x2, 0x7fff, 0x8000, 0x8, 0x80000001]}, {[0xc8, 0x5, 0x5, 0x1bf, 0x3, 0x698, 0x85, 0xe]}, {[0x7, 0x1cb7, 0x10, 0x7fff, 0x7, 0x0, 0x3dde, 0x80]}, {[0xfffffff7, 0x326635c8, 0x7fff, 0xffffff00, 0x5, 0xfffffff9, 0xffff, 0x8001]}, {[0x1, 0xfffffffd, 0x5, 0x5, 0x8, 0x1fc, 0x7fff, 0x2]}], [{0x8000, 0xfff}, {0x9619, 0x9}, {0xa, 0x2, 0x1, 0x0, 0x1}, {0xfffffbff, 0x8, 0x0, 0x0, 0x1}, {0xe, 0x8001, 0x0, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x6, 0xd55e, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40, 0x800, 0x1, 0x0, 0x1, 0x1}], [{0x4, 0x5, 0x1, 0x1, 0x1}, {0x800004, 0x9, 0x0, 0x1}, {0xfffffabf, 0x6d9, 0x0, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x0, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}], 0xfffff801, 0x6, 0x8, 0x7, 0x0, 0x5, 0x5, "ec2c9bcbd46405d68a0d8fd9ca099965", "537545b4903410f4a1f06cebed58bb6950fd914fdaeb291fcadeacb75fefdae2beed2167eefcc840cf4fda10b96010b1"})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$auto_SO_BSDCOMPAT(r3, 0x6, 0xe, &(0x7f0000000000), 0x80001)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x80802, 0x0)
socket(0xf, 0x80000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x2)

5m0.29209144s ago: executing program 32 (id=3385):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4)
mmap$auto(0x5, 0x2020206, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
setfsuid$auto(0xee00)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40010)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket(0x29, 0x2, 0x0)
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(0xffffffffffffffff, 0xc2604111, &(0x7f0000000040)={0xffffffff, [{[0x411340e3, 0x1ff, 0x400, 0x9, 0x0, 0x8, 0x3ff, 0x9]}, {[0x3, 0x6, 0x0, 0xae, 0x401, 0xf, 0x0, 0x6]}, {[0x0, 0xfffffffe, 0x40, 0x4, 0x0, 0x10, 0x0, 0x4]}], [{[0x6, 0x3, 0x2, 0x7fff, 0x8000, 0x8, 0x80000001]}, {[0xc8, 0x5, 0x5, 0x1bf, 0x3, 0x698, 0x85, 0xe]}, {[0x7, 0x1cb7, 0x10, 0x7fff, 0x7, 0x0, 0x3dde, 0x80]}, {[0xfffffff7, 0x326635c8, 0x7fff, 0xffffff00, 0x5, 0xfffffff9, 0xffff, 0x8001]}, {[0x1, 0xfffffffd, 0x5, 0x5, 0x8, 0x1fc, 0x7fff, 0x2]}], [{0x8000, 0xfff}, {0x9619, 0x9}, {0xa, 0x2, 0x1, 0x0, 0x1}, {0xfffffbff, 0x8, 0x0, 0x0, 0x1}, {0xe, 0x8001, 0x0, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x6, 0xd55e, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40, 0x800, 0x1, 0x0, 0x1, 0x1}], [{0x4, 0x5, 0x1, 0x1, 0x1}, {0x800004, 0x9, 0x0, 0x1}, {0xfffffabf, 0x6d9, 0x0, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x0, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}], 0xfffff801, 0x6, 0x8, 0x7, 0x0, 0x5, 0x5, "ec2c9bcbd46405d68a0d8fd9ca099965", "537545b4903410f4a1f06cebed58bb6950fd914fdaeb291fcadeacb75fefdae2beed2167eefcc840cf4fda10b96010b1"})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$auto_SO_BSDCOMPAT(r3, 0x6, 0xe, &(0x7f0000000000), 0x80001)
close_range$auto(0x2, 0x8000, 0x0)
socket(0x2, 0x80802, 0x0)
socket(0xf, 0x80000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0)
sendfile$auto(r4, r4, 0x0, 0x2)

3m16.172317271s ago: executing program 3 (id=3683):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/92, 0x5c)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x11, 0x3, 0x9)
r2 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4)
bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd=r1, @target_ifindex, 0x0, 0x3f, @netfilter={0xffffffff, 0x1, 0x3, 0x6}}, 0x7)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x4}, 0x2, 0x100)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(0x0, &(0x7f0000000580)={0x1, 0xdb36})
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
socket(0x1, 0x1, 0x1)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x8ae36f82a2442f77, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x90)
sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "b555ad72688701d0f0de318889d2bb3733908c9c8ea7a188980cc0022b1ca9c0c73fe7b84d3dc3d07118543f18ddd96bfc06ef9c908951847173e3c008d7029367f8ab95a33388430be85685facd6d8afed8ff80841686986007fd4026108a4090c44c84178627e9552eee6a5671ecf4a2efdb"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xc5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/proc/sys/kernel/shm_next_id\x00', 0xe)

3m14.193980606s ago: executing program 3 (id=3687):
swapon$auto(&(0x7f0000000000)='/dev/l%op7\x00', 0x4)

3m14.088894981s ago: executing program 3 (id=3688):
r0 = timerfd_create$auto(0x9, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setns(0xc9, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4)
close_range$auto(0x2, 0x8, 0x0)
timerfd_gettime$auto(r0, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}})
unshare$auto(0x40000080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/usb/usbmon/11s\x00', 0xc0280, 0x0)
lseek$auto(r2, 0x10000, 0x0)

3m12.090857297s ago: executing program 3 (id=3692):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dmmidi2\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0xc)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r1 = setfsuid$auto(0xee00)
r2 = io_uring_setup$auto(0x1, 0x0)
r3 = fcntl$auto_F_GETOWN(r2, 0x9, 0x3f3)
ptrace$auto_PTRACE_POKEDATA(0x5, r3, 0x5, 0x1)
msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, r1, <r4=>0x0, 0x3, 0x100, 0x5, 0x42}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8001, 0x8, 0x72, 0x4, 0x800000008, 0x3, 0x5, 0x7, @inferred=r3, @raw=0x9})
openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/tracing/buffer_total_size_kb\x00', 0x10200, 0x0)
clock_settime$auto(0x10, &(0x7f0000002d80)={0x9, 0x2})
setresgid$auto(r4, r4, r4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0)
sendfile$auto(0x3, 0x3, 0x0, 0x400000000006)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="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", 0x2f8)
ioctl$auto_SNDCTL_SEQ_SYNC(r5, 0x5101, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7da)
unshare$auto(0x40000080)
r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0)
pread64$auto(r6, 0x0, 0x8, 0x9)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)

3m10.156112659s ago: executing program 3 (id=3697):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/irq/default_smp_affinity\x00', 0x8080, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff})
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0)
mknod$auto(&(0x7f0000000040)='./bus\x00', 0x5, 0x9)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x2, 0x1)
socket(0x2, 0x801, 0x106)
open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)')
ioctl$auto_BLKGETSIZE(r2, 0x1260, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0)

3m8.345580114s ago: executing program 3 (id=3702):
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
getcwd$auto(0x0, 0x2)
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x1000000003, 0xeb1, 0xfffffffffffffffa, 0x5)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socketpair$auto(0xfffffffd, 0x8000, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket(0x8, 0x9, 0x0)
mmap$auto(0x0, 0x80000003, 0xffffffffffffffff, 0x40eb1, r0, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e)
flock$auto(r1, 0x6)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
acct$auto(0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x408080, 0x78e22799f4a46f8e)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r1, 0x5386, 0x0)
flock$auto(r2, 0x1)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
flock$auto(r3, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x0, 0x3, 0x10000000000003, 0x3da1, 0x7f, 0xffffffff, 0x10000, 0x140000000000, 0x0, 0x7fffffff, 0x6, 0x20001}, 0x171)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
modify_ldt$auto(0x2, 0x0, 0xfffffffffffffffb)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)

2m53.216777071s ago: executing program 33 (id=3702):
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
getcwd$auto(0x0, 0x2)
mmap$auto(0xfffffffffffffffc, 0x2020009, 0x1000000003, 0xeb1, 0xfffffffffffffffa, 0x5)
close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socketpair$auto(0xfffffffd, 0x8000, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket(0x8, 0x9, 0x0)
mmap$auto(0x0, 0x80000003, 0xffffffffffffffff, 0x40eb1, r0, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e)
flock$auto(r1, 0x6)
acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00')
acct$auto(0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x408080, 0x78e22799f4a46f8e)
openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r1, 0x5386, 0x0)
flock$auto(r2, 0x1)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
flock$auto(r3, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000)
bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x0, 0x3, 0x10000000000003, 0x3da1, 0x7f, 0xffffffff, 0x10000, 0x140000000000, 0x0, 0x7fffffff, 0x6, 0x20001}, 0x171)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
modify_ldt$auto(0x2, 0x0, 0xfffffffffffffffb)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)

2m38.973139522s ago: executing program 0 (id=3758):
unshare$auto(0x40000080)
quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0xff)
mmap$auto(0xfffffffffffffffd, 0x3fffff, 0x2000000000007, 0x11, 0xdd, 0x0)
pwrite64$auto(0xc8, 0x0, 0x4f, 0x7)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3b)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1)
r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1014a0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$auto_l2tp(0x0, r4)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRESOCT=r6, @ANYRES32=r5, @ANYRES8=r4, @ANYRESHEX=r2, @ANYRESDEC=r6, @ANYRESHEX], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0xc800)
sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r5, @ANYBLOB="01032cb57000fbdbdf250a0000000600010016000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x1, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4)
bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x1f, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92)
pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38)
unshare$auto(0x40000080)
r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
mknod$auto(&(0x7f0000000240)='./file0\x00', 0x1091, 0x9)

2m36.114623979s ago: executing program 0 (id=3760):
io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe, <r0=>0xffffffffffffffff})
openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0)
openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/dev_snmp6/sit0\x00', 0xa503, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/210, 0xd2)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154)
setns(0xc9, 0x0)
socket(0x1f, 0x1, 0x0)
write$auto_fops_u16_(0xffffffffffffffff, &(0x7f0000000840)="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", 0x1000)
execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket(0x5, 0x1, 0x0)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff})
ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xcc})
linkat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x6)
keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff)

2m33.986894909s ago: executing program 0 (id=3766):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/92, 0x5c)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x11, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4)
bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd=r1, @target_ifindex=r2, 0x0, 0x3f, @netfilter={0xffffffff, 0x1, 0x3, 0x6}}, 0x7)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x4}, 0x2, 0x100)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(0x0, &(0x7f0000000580)={0x1, 0xdb36})
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
socket(0x1, 0x1, 0x1)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x8ae36f82a2442f77, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x90)
sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "b555ad72688701d0f0de318889d2bb3733908c9c8ea7a188980cc0022b1ca9c0c73fe7b84d3dc3d07118543f18ddd96bfc06ef9c908951847173e3c008d7029367f8ab95a33388430be85685facd6d8afed8ff80841686986007fd4026108a4090c44c84178627e9552eee6a5671ecf4a2efdb"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xc5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/proc/sys/kernel/shm_next_id\x00', 0xe)

2m31.565482765s ago: executing program 0 (id=3769):
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x10001, 0x58dc, 0x101}]})
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyv2\x00', 0x2, 0x0)
ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000200)=0x6)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
request_key$auto(&(0x7f00000000c0)='keyring\x00', 0x0, &(0x7f0000000140)='\x00', 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, 0x0)
shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, <r1=>0xffffffffffffffff, <r2=>0x0, 0x1, 0x80, 0x3, 0x8}, 0x9, 0x1ff, 0x9, 0x2, @raw=0x2, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0})
r3 = setfsgid$auto(r2)
set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7c, 0x4)
sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14)
mseal$auto(0x0, 0x7dda, 0x0)
r4 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/pcmC1D0c\x00', 0x48000, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(r4, 0x80184153, 0x0)
r5 = socket(0x1, 0x1, 0x1)
setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x8002)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000003cafe956c899bb9cddfefd3b2c6ef4d2c8dff5134d197dbc47bc659c34db697c266d779b6168aab926225a452c85a713a79cddd6e4b979fe24bd47bd498f1d4e455f4ed5a0df5e4052a635b577e1f2d350319a44d2c60b70b060ca8bc06d07d95779f7116633c1c320240a96b25d0194b946fe99289d05bc80dcab4996a9e74d29efc02f57565f57e72c320601255a60a16d08000000debbe7dfdfd7d34cf52fe3838389b7b460f784220c76ffb1d1bd9154b09bcfb43a91356295ec26f923d8dc059e7a9b2047f4d306a0761ab73649a603d3bdca00778e56f6bc8c7da5d6c64afaffffff8e631449bfc6f47996bfc03a72a7c03dfb9759f8bc0a36c7c4db07304329dabb4d658a3080f0a8f9f4bb416f447bd8ad6d120091a12cebbd4df5302fe067547fbc10a54f769a87198669fcdc60a11e2595c9aa664723cb14c666395fd8a2a60702de70e26e0e3603dc5e903ae0c1dd5b47cac0a10abe789d90b0ef884bf97ad7d81e71641f48c440163369a0658557f0bca7edc2603a3f6edb35282ad0c1fd172cbee1bc6236acf51031e6c9bbeafbee0f19ebb0854708ebd956f3b09a9d7d1480ffa8d22d34eaa9c76a502a24cfaff3dc65611f28e0fe6a43b9e5a89bcda00feedfef57633f3bc2cae7652a5d56b6b0c9b6b76f722836dff23a3451486dcd83efcbae3ff97d92fab1a4da95540b05ac79b1dd207680b64f8e4f4e75faaabfc8ee07d87eb7b744f4db16c334ba5ad733af8abc7f88807738b41078434b6ce40079050f15184dd348a2eb34c5f7696c6b9977ddce0eec914421e401c9120193a854aa6b86fc152c8a5f2a55f36979926ca45de74ad2e32c284bc3e49bf7d5dc74305ea116b4af02", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf251300000008004000010000006d005b00b555ad72688701d0f0de318889d2bb3733908c9c8ea7a188980cc0022b1ca9c0c73fe7b84d3dc3d07118543f18ddd96bfc06ef9c908951847173e3c008d7029367f8ab95a33388430be85685facd6d8afed8ff80841686986007fd4026108a4090c44c84178627e95500000004003c000500d300c50000000800570005000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090)
socket(0x8, 0x3, 0x4)
keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff)
r6 = setfsuid$auto(0xee00)
r7 = setfsgid$auto(0xee01)
msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x3, <r8=>r6, <r9=>r7, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8001, 0x8, 0x7a, 0x4, 0x8, 0x3, 0x5, 0x7, @inferred, @raw=0x9})
keyctl$auto(0x5, r1, 0x6, r9, 0xffffffffffffffff)
keyctl$auto(0x1b, 0x1, r8, r7, 0x7)

2m30.5348412s ago: executing program 0 (id=3773):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/92, 0x5c)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x11, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4)
bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd=r1, @target_ifindex=r2, 0x0, 0x3f, @netfilter={0xffffffff, 0x1, 0x3, 0x6}}, 0x7)
sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x4}, 0x2, 0x100)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(0x0, &(0x7f0000000580)={0x1, 0xdb36})
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
socket(0x1, 0x1, 0x1)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x8ae36f82a2442f77, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x90)
sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "b555ad72688701d0f0de318889d2bb3733908c9c8ea7a188980cc0022b1ca9c0c73fe7b84d3dc3d07118543f18ddd96bfc06ef9c908951847173e3c008d7029367f8ab95a33388430be85685facd6d8afed8ff80841686986007fd4026108a4090c44c84178627e9552eee6a5671ecf4a2efdb"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xc5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/proc/sys/kernel/shm_next_id\x00', 0xe)

2m28.782168304s ago: executing program 0 (id=3775):
r0 = socket(0x15, 0x5, 0x0)
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001400), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB="00040000", @ANYRES16=r1, @ANYBLOB="000426bd7000fedbdf2500000000050015000700000005001500d9000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x40)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async)
r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', 0x20500, 0x0)
fsconfig$auto_SHMEM_HUGE_DENY(r3, 0x0, &(0x7f0000001280)='/dev/raw-gadget\x00', &(0x7f00000012c0)="f66393bb79a51650baf81413b4748d2beddb54a7c00ce3c10345aa631552eae0f8b4ee4ade07867f222bbd15932b9e74e218cffe7ab086526a3436ad19a100a1beca29a363048500960be6851df0a889dc9b3e0cd7f9367ae0a1bdd2d7cde0ce70b27b60702e033b2b3a7375987dbe22fcc179b4", 0xffffffffffffffff) (async)
r4 = socket(0x1f, 0x80805, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) (async)
getsockopt$auto_SO_PEERPIDFD(r3, 0x401, 0x4d, &(0x7f0000001340)='/dev/raw-gadget\x00', &(0x7f0000001380)=0x6) (async)
sendfile$auto(r4, r2, 0x0, 0x10001fd) (async)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x10d100, 0x0)
mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r7 = getpid()
process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0x2}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r8, 0x8, 0x1) (async)
fcntl$auto(r8, 0x10, 0x2) (async)
r9 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r9, 0x0, 0x10, 0x0, 0x17) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
inotify_init1$auto(0x3000000000000) (async)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)

2m13.634569777s ago: executing program 34 (id=3775):
r0 = socket(0x15, 0x5, 0x0)
sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001400), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB="00040000", @ANYRES16=r1, @ANYBLOB="000426bd7000fedbdf2500000000050015000700000005001500d9000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x40)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) (async)
r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/sockcreate\x00', 0x20500, 0x0)
fsconfig$auto_SHMEM_HUGE_DENY(r3, 0x0, &(0x7f0000001280)='/dev/raw-gadget\x00', &(0x7f00000012c0)="f66393bb79a51650baf81413b4748d2beddb54a7c00ce3c10345aa631552eae0f8b4ee4ade07867f222bbd15932b9e74e218cffe7ab086526a3436ad19a100a1beca29a363048500960be6851df0a889dc9b3e0cd7f9367ae0a1bdd2d7cde0ce70b27b60702e033b2b3a7375987dbe22fcc179b4", 0xffffffffffffffff) (async)
r4 = socket(0x1f, 0x80805, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) (async)
getsockopt$auto_SO_PEERPIDFD(r3, 0x401, 0x4d, &(0x7f0000001340)='/dev/raw-gadget\x00', &(0x7f0000001380)=0x6) (async)
sendfile$auto(r4, r2, 0x0, 0x10001fd) (async)
openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x10d100, 0x0)
mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r7 = getpid()
process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0x2}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$auto(r8, 0x8, 0x1) (async)
fcntl$auto(r8, 0x10, 0x2) (async)
r9 = socket(0x2, 0x1, 0x0)
setsockopt$auto(r9, 0x0, 0x10, 0x0, 0x17) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
inotify_init1$auto(0x3000000000000) (async)
mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000)
io_uring_setup$auto(0xa, 0x0)

19.370004478s ago: executing program 6 (id=4097):
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r1 = setfsuid$auto(0xee00)
r2 = io_uring_setup$auto(0x1, 0x0)
r3 = fcntl$auto_F_GETOWN(r2, 0x9, 0x3f3)
ptrace$auto_PTRACE_POKEDATA(0x5, r3, 0x5, 0x1)
msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, r1, <r4=>0x0, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8002, 0x8, 0x74, 0x4, 0x8, 0x3, 0x5, 0x7, @inferred=r3, @raw=0x9})
clock_settime$auto(0xf, &(0x7f0000000200)={0x9, 0x80000000})
setresgid$auto(r4, r4, r4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r5)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', <r7=>0x0})
sendmsg$auto_NET_SHAPER_CMD_GROUP(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000004000a800800", @ANYRES32=r7, @ANYBLOB="05000000"], 0x30}}, 0x14)
bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
setns(0xc9, 0x0)
pidfd_open$auto(0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_VPORT_CMD_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}}, 0x10)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)

17.337445244s ago: executing program 6 (id=4100):
socket(0x15, 0x5, 0xfffffffe)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9}, 0x92)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x5, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x100000000000026, 0x0)

15.232865705s ago: executing program 6 (id=4103):
mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x90)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x280, 0x0)
ioctl$auto(r2, 0xc0585605, r2)
bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000)
r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
sysfs$auto(0x2, 0x20000002a, 0x0)
ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0)
ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6)
ioctl$auto_IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, '!%\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video21\x00', 0x0, 0x0)
ioctl$auto(r6, 0x40085618, r6)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
ioctl$auto(r7, 0x8004b709, 0xffffffffffffffff)

13.56279553s ago: executing program 6 (id=4107):
socket(0x2, 0x5, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/state\x00', 0x181c01, 0x0)
write$auto(r0, &(0x7f0000000040), 0x9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb)
open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x0)
lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000840)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\b\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\xb5\"\xe8\xe1x7\xa1b\x83?\x06r}u6\x1c\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\xdd\xd1\xfc\xfd\x9c\x04\xedW\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x8, 0x0)
lgetxattr$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x101)
openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x900, 0x0)
mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x7fff)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r1)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00')
r2 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, 0x0)
ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, 0x0)
read$auto(0xffffffffffffffff, 0x0, 0xffffffffffff0001)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000002780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f0000000480)={0x40, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x84)
r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
mq_notify$auto(r4, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}})
r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0)
ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f00000027c0)={0x3ff, 0x0, 0x9, 0x80000000, 0x1, "0b606b2d15b8e1f1671cbdcd11de4285bf10809dcb6bee7e11cb8424807fd2205db212fda568d7d4a3d7dcdbcd4a041588c8b6200219c10207e2a41c36abeecc", "1e2d01e82061784a9e052cec329d321d560943a8e93a9cc47d8392c3249b5c2b6dd5955cf6065d69e7461e7aad8f146231fe9ce0aba06549c28f3e9719850ab4e81e485107e26d35409b2e49c87441c9", "6501530c24a42426ebd36eacfc63509841ee414456046c96d1e1ccf9ddef65e2", 0x9, 0x10000, 0x8, "68e7be6437426277d089f7550a8893c0a075418d24b48c3aa2eae05f116727ac4031719f138171ca7064b536499d8c797666f9db3945cc004f30e37e"})
socket(0x2, 0x1, 0x0)
mq_notify$auto(r5, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8)

13.422641448s ago: executing program 6 (id=4108):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/irq/default_smp_affinity\x00', 0x8080, 0x0)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff})
r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0)
mknod$auto(&(0x7f0000000040)='./bus\x00', 0x5, 0x9)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x2, 0x1)
socket(0x2, 0x801, 0x106)
open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)')
ioctl$auto_BLKGETSIZE(r2, 0x1260, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/213, 0xd5)

12.901018242s ago: executing program 4 (id=4111):
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff})
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0)
mknod$auto(&(0x7f0000000040)='./bus\x00', 0x5, 0x9)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x2, 0x1)
socket(0x2, 0x801, 0x106)
open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)')
ioctl$auto_BLKGETSIZE(r1, 0x1260, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240)=""/213, 0xd5)

11.215012282s ago: executing program 6 (id=4113):
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/92, 0x5c)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socket(0x11, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
r3 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4)
bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd=r1, @target_ifindex=r2, 0x0, 0x3f, @netfilter={0xffffffff, 0x1, 0x3, 0x6}}, 0x7)
sendmmsg$auto(r1, 0x0, 0x2, 0x100)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
settimeofday$auto(0x0, &(0x7f0000000580)={0x1, 0xdb36})
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0)
socket(0x1, 0x1, 0x1)
sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x8ae36f82a2442f77, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x90)
sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xa8, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "b555ad72688701d0f0de318889d2bb3733908c9c8ea7a188980cc0022b1ca9c0c73fe7b84d3dc3d07118543f18ddd96bfc06ef9c908951847173e3c008d7029367f8ab95a33388430be85685facd6d8afed8ff80841686986007fd4026108a4090c44c84178627e9552eee6a5671ecf4a2efdb"}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xc5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/proc/sys/kernel/shm_next_id\x00', 0xe)

10.844513617s ago: executing program 4 (id=4114):
mmap$auto(0x0, 0x2020006, 0xff, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x7fffffffffffffff, 0x400104, 0xffffffffffffffff, 0x9b71, 0xffffffffffffffff, 0x8000000007fff)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/nbd9/hctx0/dispatch_busy\x00', 0x2000, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000100)=""/169, 0xa9)
unshare$auto(0x40000080)
openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x525800, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
getpid()
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
lstat$auto(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f00000000c0)='1', 0x1)
msgctl$auto_IPC_INFO(0x33, 0x3, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
ioprio_set$auto(0x2, 0x0, 0x4b34)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0xf9)
open(&(0x7f0000000800)='./file0\x00', 0x1a3342, 0x24)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
ioctl$auto(0x3, 0xc0104d03, 0xffffffffffffffff)

7.732593653s ago: executing program 4 (id=4118):
r0 = fcntl$auto_F_RDLCK(0xffffffffffffffff, 0xff98, 0x0)
getsockopt$auto_SO_BUF_LOCK(r0, 0x4, 0x48, &(0x7f0000000000)='.}-,\x00', &(0x7f0000000140)=0xf)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x4001, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x440, 0x76c5, 0x8, 0x8000000000000000}})
close_range$auto(0x2, 0x8, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
flistxattr$auto(r1, 0x0, 0x2)
migrate_pages$auto(0x0, 0x9, &(0x7f0000000100)=0x7, &(0x7f0000000040)=0x101)

7.675972904s ago: executing program 5 (id=4119):
r0 = timerfd_create$auto(0x9, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x101000, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
setns(0xc9, 0x0)
r1 = socket(0x15, 0x5, 0x0)
setsockopt$auto(r1, 0x114, 0x8, 0x0, 0x4)
close_range$auto(0x2, 0x8, 0x0)
timerfd_gettime$auto(r0, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}})
unshare$auto(0x40000080)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xae9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0)
write$auto(0x3, 0x0, 0xfffffdef)
memfd_create$auto(0x0, 0xe)
write$auto(0xffffffffffffffff, 0x0, 0x7ffffffd)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000)
getdents$auto(0xffffffffffffffff, 0x0, 0xa2b0)
msync$auto(0x0, 0x2000000005, 0x6)
r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x0, 0x0)
read$auto_ftrace_system_enable_fops_trace_events(r3, 0x0, 0x0)
ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3)
r4 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4)

7.574701656s ago: executing program 2 (id=4120):
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x7f, 0x80, 0xffff, 0x5, 0x0, 0xfffffffe, 0x3, 0x3, @number_of_packets=0x8, 0x2004b, 0xc, 0x0})
r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/pp_hold\x00', 0x541a00, 0x0)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, r0, 0x0)
recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a33, &(0x7f0000000140)={0x0, 0x7b}, 0x2, 0x0, 0x0, 0x49}, 0xfffffffb}, 0x7f, 0xdb22, 0x0)
keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'})
r1 = socket(0x2, 0xa, 0x0)
sendmmsg$auto(r1, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000080)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d)

7.445623544s ago: executing program 4 (id=4121):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbeb1404"], 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000)
socket(0xa, 0x801, 0x84)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
sysfs$auto(0x2, 0xf, 0x0)
r2 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0)
mprotect$auto(0x200000000000, 0x806122, 0xc)
sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2})
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
close_range$auto(0x2, 0x8, 0x3f)
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
close_range$auto(r3, 0xfffffffffffff000, 0x108005)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x222c0, 0x354)
fcntl$auto(r4, 0x400, 0x1)
open(&(0x7f0000000000)='./file0\x00', 0x103000, 0x101)
sendmmsg$auto(0x3, 0x0, 0x3, 0x0)
statmount$auto(0x0, 0x0, 0x1fe, 0x9)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd8/queue/hw_sector_size\x00', 0x2c62, 0x0)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0)
read$auto(r5, 0x0, 0x9)
getegid()
write$auto(0x3, 0x0, 0xfdef)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r6)

7.317736645s ago: executing program 2 (id=4122):
mmap$auto(0x0, 0x200007, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
epoll_create$auto(0x8)
r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0)
ioctl$auto(r1, 0x92106406, r0)

7.116678516s ago: executing program 2 (id=4123):
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff})
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0)
mknod$auto(&(0x7f0000000040)='./bus\x00', 0x5, 0x9)
fanotify_init$auto(0x5, 0x2000000000002)
socket(0x2, 0x2, 0x1)
socket(0x2, 0x801, 0x106)
open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)')
ioctl$auto_BLKGETSIZE(r1, 0x1260, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x1, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240)=""/213, 0xd5)

6.949436985s ago: executing program 4 (id=4124):
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x0, 0x0)
unshare$auto(0x40000080)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
socket(0x2b, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
r0 = epoll_create$auto(0x7)
epoll_wait$auto(r0, 0x0, 0xe007, 0xe8a4e409)
clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7)

4.776496658s ago: executing program 5 (id=4125):
socket(0x15, 0x5, 0xfffffffe)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a)
mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x00\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write$auto(r0, 0x0, 0xe)
ioctl$auto(0x3, 0x89e0, 0x38)
unshare$auto(0x40000080)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x0, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9}, 0x92)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
io_uring_setup$auto(0x5, 0x0)
mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x0)
sysfs$auto(0x2, 0x100000000000026, 0x0)

3.740056898s ago: executing program 2 (id=4126):
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
close_range$auto(0x2, 0x8, 0x0)
r0 = socket(0x2, 0x80002, 0x73)
socket(0xa, 0x1, 0x84)
clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x4, 0x802b95}, 0x0)
bind$auto(r0, &(0x7f0000000180)=@rc={0x1f, @any, 0x6d}, 0x2)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
r1 = socket(0xa, 0x1, 0x84)
getsockopt$auto(r1, 0x84, 0x80, 0x0, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), r3)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
socket(0x28, 0x1, 0x0)
r4 = socket(0x15, 0x5, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0x2)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402)
epoll_ctl$auto(r4, 0x2, r4, 0x0)
io_uring_setup$auto(0x1, 0x0)
msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5})

3.221458306s ago: executing program 4 (id=4127):
mmap$auto(0x0, 0x2020006, 0xff, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
mmap$auto(0x7fffffffffffffff, 0x400104, 0xffffffffffffffff, 0x9b71, 0xffffffffffffffff, 0x8000000007fff)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi0\x00', 0x8302, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/block/nbd9/hctx0/dispatch_busy\x00', 0x2000, 0x0)
read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000100)=""/169, 0xa9)
unshare$auto(0x40000080)
openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x525800, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
getpid()
ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0)
lstat$auto(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000080), 0x141501, 0x0)
write$auto_split_huge_pages_fops_huge_memory(r2, &(0x7f00000000c0)='1', 0x1)
msgctl$auto_IPC_INFO(0x33, 0x3, 0x0)
setresuid$auto(0x0, 0x0, 0x0)
ioprio_set$auto(0x2, 0x0, 0x4b34)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0xf9)
open(&(0x7f0000000800)='./file0\x00', 0x1a3342, 0x24)
close_range$auto(0x2, 0x8, 0x0)
fanotify_init$auto(0x5, 0x2000000000002)
write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
ioctl$auto(0x3, 0xc0104d03, 0xffffffffffffffff)

3.179306845s ago: executing program 5 (id=4128):
read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0xfffffffffffffffd, 0x3fffff, 0x1, 0x11, 0xdd, 0x1000000000000000)
r0 = setfsgid$auto(0x0)
socket(0x2, 0x1, 0x106)
connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0xf, 0x6, 0x2, 0x4, 0xfa, @remote}, 0x51)
r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x448101, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:03.0/d3cold_allowed\x00', 0x8402, 0x0)
write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)="599dea32be", 0x5)
ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
poll$auto(0x0, 0x1, 0x6)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa2001, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.7/usb8/power/active_duration\x00', 0xc8080, 0x0)
socket(0xa, 0x3, 0x3a)
mmap$auto(0x2, 0x4020009, 0x2, 0xeb1, r1, 0x40000000008001)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
getdents$auto(r4, 0x0, 0xfffffffb)
setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/25, 0x19)
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/fail-nth\x00', 0x15b102, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zram0\x00', 0x443001f86ca34d07, 0x0)
getrandom$auto(0x0, 0x10000ffffffff, 0x80000400)
mmap$auto(0x0, 0x7f, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7)
madvise$auto(0x0, 0x3, 0x7)
syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
msgctl$auto_MSG_INFO(0x2, 0xc, &(0x7f0000000380)={{0x80000000, 0x0, r0, 0xd8, 0x4, 0x4, 0x5}, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x1, 0x2, 0x2, 0x4, 0x3, 0x7, 0x5, 0x5, 0xec, @raw})
r5 = socket(0x5, 0x5, 0x0)
shutdown$auto(r5, 0x2)

2.776388275s ago: executing program 5 (id=4129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', <r1=>0x0})
sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000fcdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

2.529688243s ago: executing program 5 (id=4130):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'})
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0)
openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x83, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0x0)
io_uring_setup$auto(0x6, 0x0)
unshare$auto(0x40000080)
socket$nl_generic(0x10, 0x3, 0x10)
unshare$auto(0x40000080)
clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0)
syz_clone3(&(0x7f0000000480)={0x8203100, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x57)
r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001e40), 0xffffffffffffffff)
sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001fc0)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@typed={0x7, 0x2, 0x0, 0x0, @str='{\x8b\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = setfsuid$auto(0xee00)
ioprio_set$auto(0x2, r3, 0x4b34)
sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x390, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x362, 0x2c, 0x0, 0x1, [@generic="a8d0976d14f336695bdce716e2789a7a9d4b80aadaacf1a7b5c41adfecc9ba4ad47cee91c04768da2d8c5cfd25e1882aa4611df9049a64c23630dd53a9065ae7d1dca12876b9f0c041d69a6e0daa775ce0b21d2fb74e8677431e87b692560b73414602e9b1c541375b6f254f88edfa7f7e3db590f7e2ec937c77881424121b5a7a5f76c481096d8187c00e4e641138919bfa", @generic="3d444680ee5efceb50a8775645a9bf095bc01ae1e25b5eba48296f84b3127071e226dcf2b91536a8565af89e7c00c01d34d638", @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@multicast1}, @generic="f2e308f16dbd7fa28eabaeccb1d2b5fae32c78eeaaec0467972f75118727e9bdff76ed18a0a02faac72153a347900e73236ab2f09438d9", @generic="1a21d3635ff26710bd0a45736d572136bb4326935f3f7f190491380d961bdab12aae211602f36edf1d34245512163a3b4174df893b2add03985f94a121b987c4bae8a15313ca9e78ac110b4e4f3fd55b795b4ff707cf95b55ea287eadae27e60b179f28e4ed41e39e7f46b5a6cff31ebfbbfa4380b77b4c70f8f9ecd179d80e381ffa31e334f0a236321ce6090953955ad7deb9470fa20714550eb7f41415664c94ea5abd785d4428fec33e2ab86e47e85505af1181bb5350592eee9f618f819bda1b2989b9fc8436fd697ab442cfc", @nested={0x10, 0x7e, 0x0, 0x1, [@typed={0xc, 0x15, 0x0, 0x0, @u64=0x4}]}, @generic="354c1cf6e8c2818b909b59c6fb9a13b79e65e03f95ed806d54bfceafea4ec600e213fded06b49903d1c75d74fe4d40ea29535fb4567a56b622b7c382ba80b14af500a974b8f9a5d5563a2dc07694d48787c41baf4b4a1d0b5bf01e18d2751b78493ba593d28ee50c9a6447a9a65adadea988fdf57b487003948ae387feeb1e1d53b8b868a6e5"]}, @NL80211_ATTR_SSID={0x18, 0x34, "0db402fb68d6250079a22b04359d6fd38f40f9f2"}]}, 0x390}, 0x1, 0x0, 0x0, 0x4000000}, 0x20001000)

877.131399ms ago: executing program 2 (id=4131):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0)

631.580533ms ago: executing program 2 (id=4132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0)
unshare$auto(0x40000080)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2001, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000034c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003480)={0x0}, 0x1, 0x0, 0x0, 0x20044400}, 0x4000000)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085)
msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred, @raw=0x7fffffff})
r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0)
ioctl$auto_BLKGETSIZE(r3, 0x1260, 0x0)
r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0)
ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4})
r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$auto_FS_IOC_MEASURE_VERITY2(r4, 0xc0046686, &(0x7f00000003c0)={0xc827, 0x9, "e0406756600ebc9d"})
fchown$auto(r5, 0x0, 0x0)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)=""/213, 0xd5)
r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0)
r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
bpf$auto(0x6, &(0x7f0000000000)=@test={r7, 0x6, 0x8, 0x4, 0x5, 0x7, 0x7, 0x2, 0x80000000, 0x274, 0x3, 0x3, 0x7, 0x5, 0x7}, 0x6)
mremap$auto(0x0, 0xb, 0x4, 0x3, 0x400000200000)

0s ago: executing program 5 (id=4133):
ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
futex$auto(0x0, 0xa, 0x9, 0x0, 0x0, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x3)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)

kernel console output (not intermixed with test programs):

25094][T30280]  populate_vma_page_range+0x267/0x3f0
[ 1375.525130][T30280]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1375.525164][T30280]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1375.525197][T30280]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1375.525230][T30280]  __mm_populate+0x107/0x3a0
[ 1375.525267][T30280]  ? __pfx___mm_populate+0x10/0x10
[ 1375.525305][T30280]  ? up_write+0x2dc/0x5b0
[ 1375.525339][T30280]  do_mlock+0x3f0/0x7f0
[ 1375.525372][T30280]  ? __pfx_do_mlock+0x10/0x10
[ 1375.525398][T30280]  ? __x64_sys_futex+0x34f/0x4d0
[ 1375.525429][T30280]  ? __x64_sys_futex+0x358/0x4d0
[ 1375.525466][T30280]  ? xfd_validate_state+0x129/0x190
[ 1375.525509][T30280]  __x64_sys_mlock+0x59/0x80
[ 1375.525539][T30280]  do_syscall_64+0x121/0x770
[ 1375.525568][T30280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1375.525596][T30280] RIP: 0033:0x7f0981f9e0d9
[ 1375.525617][T30280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1375.525640][T30280] RSP: 002b:00007f0982dc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1375.525666][T30280] RAX: ffffffffffffffda RBX: 00007f0982226090 RCX: 00007f0981f9e0d9
[ 1375.525684][T30280] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1375.525700][T30280] RBP: 00007f0982035024 R08: 0000000000000000 R09: 0000000000000000
[ 1375.525715][T30280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1375.525731][T30280] R13: 00007f0982226128 R14: 00007f0982226090 R15: 00007ffd93d91a78
[ 1375.525767][T30280]  </TASK>
[ 1380.115348][T30356] random: crng reseeded on system resumption
[ 1386.676256][T30486] FAULT_INJECTION: forcing a failure.
[ 1386.676256][T30486] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1386.716059][T30486] CPU: 0 UID: 0 PID: 30486 Comm: syz.0.3308 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1386.716099][T30486] Tainted: [L]=SOFTLOCKUP
[ 1386.716109][T30486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1386.716125][T30486] Call Trace:
[ 1386.716133][T30486]  <TASK>
[ 1386.716143][T30486]  dump_stack_lvl+0x100/0x190
[ 1386.716180][T30486]  should_fail_ex.cold+0x5/0xa
[ 1386.716206][T30486]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1386.716246][T30486]  should_fail_alloc_page+0xeb/0x140
[ 1386.716283][T30486]  prepare_alloc_pages+0x1f0/0x5f0
[ 1386.716319][T30486]  ? __lock_acquire+0x4c5/0x1ec0
[ 1386.716351][T30486]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1386.716409][T30486]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1386.716444][T30486]  ? __lock_acquire+0x4c5/0x1ec0
[ 1386.716479][T30486]  ? __lock_acquire+0x4c5/0x1ec0
[ 1386.716530][T30486]  ? __lock_acquire+0x4c5/0x1ec0
[ 1386.716556][T30486]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1386.716588][T30486]  ? policy_nodemask+0xed/0x4f0
[ 1386.716628][T30486]  alloc_pages_mpol+0x1fb/0x540
[ 1386.716666][T30486]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1386.716702][T30486]  ? do_raw_spin_lock+0x128/0x260
[ 1386.716732][T30486]  ? find_held_lock+0x2b/0x80
[ 1386.716766][T30486]  ? swap_cache_alloc_folio+0x374/0xc50
[ 1386.716801][T30486]  folio_alloc_mpol_noprof+0x36/0x260
[ 1386.716830][T30486]  swap_cache_alloc_folio+0x3d7/0xc50
[ 1386.716866][T30486]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[ 1386.716896][T30486]  ? swap_cache_get_folio+0x28d/0x360
[ 1386.716926][T30486]  ? __pfx_swap_cache_get_folio+0x10/0x10
[ 1386.716951][T30486]  ? __lock_acquire+0x4c5/0x1ec0
[ 1386.716977][T30486]  ? __lock_acquire+0x4c5/0x1ec0
[ 1386.717008][T30486]  swap_cache_read_folio+0x47/0x140
[ 1386.717041][T30486]  swap_cluster_readahead+0x387/0x5f0
[ 1386.717077][T30486]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1386.717132][T30486]  shmem_swapin_folio+0x217f/0x2a80
[ 1386.717162][T30486]  ? find_held_lock+0x2b/0x80
[ 1386.717195][T30486]  ? filemap_get_entry+0x22d/0x450
[ 1386.717229][T30486]  ? filemap_get_entry+0x237/0x450
[ 1386.717254][T30486]  ? __pfx_shmem_swapin_folio+0x10/0x10
[ 1386.717280][T30486]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1386.717313][T30486]  ? xas_load+0x44/0x5c0
[ 1386.717338][T30486]  ? xas_move_index+0xae/0x110
[ 1386.717370][T30486]  shmem_get_folio_gfp+0x56e/0x1910
[ 1386.717408][T30486]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1386.717436][T30486]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1386.717462][T30486]  ? filemap_map_pages+0x1137/0x1f80
[ 1386.717492][T30486]  shmem_fault+0x1f9/0xa20
[ 1386.717532][T30486]  ? __pfx_shmem_fault+0x10/0x10
[ 1386.717564][T30486]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1386.717595][T30486]  ? find_held_lock+0x2b/0x80
[ 1386.717632][T30486]  __do_fault+0x10b/0x440
[ 1386.717664][T30486]  do_fault+0xa99/0x1750
[ 1386.717702][T30486]  __handle_mm_fault+0x187d/0x2a00
[ 1386.717732][T30486]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1386.717768][T30486]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1386.717797][T30486]  ? pte_offset_map_lock+0x174/0x320
[ 1386.717828][T30486]  ? find_held_lock+0x2b/0x80
[ 1386.717872][T30486]  ? follow_page_pte+0x4d0/0x13f0
[ 1386.717912][T30486]  handle_mm_fault+0x37b/0xa30
[ 1386.717945][T30486]  __get_user_pages+0x1178/0x32a0
[ 1386.717991][T30486]  ? __pfx___get_user_pages+0x10/0x10
[ 1386.718035][T30486]  populate_vma_page_range+0x267/0x3f0
[ 1386.718073][T30486]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1386.718108][T30486]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1386.718143][T30486]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1386.718178][T30486]  __mm_populate+0x107/0x3a0
[ 1386.718214][T30486]  ? __pfx___mm_populate+0x10/0x10
[ 1386.718253][T30486]  ? up_write+0x2dc/0x5b0
[ 1386.718286][T30486]  do_mlock+0x3f0/0x7f0
[ 1386.718319][T30486]  ? __pfx_do_mlock+0x10/0x10
[ 1386.718345][T30486]  ? __x64_sys_futex+0x34f/0x4d0
[ 1386.718375][T30486]  ? __x64_sys_futex+0x358/0x4d0
[ 1386.718409][T30486]  ? xfd_validate_state+0x129/0x190
[ 1386.718452][T30486]  __x64_sys_mlock+0x59/0x80
[ 1386.718479][T30486]  do_syscall_64+0x121/0x770
[ 1386.718517][T30486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1386.718544][T30486] RIP: 0033:0x7f4e6099e0d9
[ 1386.718565][T30486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1386.718590][T30486] RSP: 002b:00007f4e61876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1386.718615][T30486] RAX: ffffffffffffffda RBX: 00007f4e60c26090 RCX: 00007f4e6099e0d9
[ 1386.718632][T30486] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1386.718648][T30486] RBP: 00007f4e60a35024 R08: 0000000000000000 R09: 0000000000000000
[ 1386.718663][T30486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1386.718678][T30486] R13: 00007f4e60c26128 R14: 00007f4e60c26090 R15: 00007ffdcfae5288
[ 1386.718714][T30486]  </TASK>
[ 1391.157402][T30561] FAULT_INJECTION: forcing a failure.
[ 1391.157402][T30561] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1391.186876][T30561] CPU: 1 UID: 0 PID: 30561 Comm: syz.1.3320 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1391.186918][T30561] Tainted: [L]=SOFTLOCKUP
[ 1391.186927][T30561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1391.186943][T30561] Call Trace:
[ 1391.186951][T30561]  <TASK>
[ 1391.186961][T30561]  dump_stack_lvl+0x100/0x190
[ 1391.186999][T30561]  should_fail_ex.cold+0x5/0xa
[ 1391.187025][T30561]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1391.187065][T30561]  should_fail_alloc_page+0xeb/0x140
[ 1391.187103][T30561]  prepare_alloc_pages+0x1f0/0x5f0
[ 1391.187146][T30561]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1391.187189][T30561]  ? __lock_acquire+0x4c5/0x1ec0
[ 1391.187215][T30561]  ? __css_rstat_updated+0x1ce/0x590
[ 1391.187245][T30561]  ? __pfx___css_rstat_updated+0x10/0x10
[ 1391.187274][T30561]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1391.187313][T30561]  ? rcu_is_watching+0x13/0xc0
[ 1391.187345][T30561]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[ 1391.187377][T30561]  ? find_held_lock+0x2b/0x80
[ 1391.187421][T30561]  ? vma_is_special_huge+0x23f/0x2d0
[ 1391.187456][T30561]  ? __pfx_vma_is_special_huge+0x10/0x10
[ 1391.187490][T30561]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1391.187520][T30561]  ? policy_nodemask+0xed/0x4f0
[ 1391.187557][T30561]  alloc_pages_mpol+0x1fb/0x540
[ 1391.187593][T30561]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1391.187634][T30561]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[ 1391.187665][T30561]  alloc_pages_noprof+0x1a/0x160
[ 1391.187690][T30561]  __pmd_alloc+0x3b/0x950
[ 1391.187740][T30561]  __handle_mm_fault+0xa9c/0x2a00
[ 1391.187774][T30561]  ? mt_find+0x45e/0x8e0
[ 1391.187805][T30561]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1391.187831][T30561]  ? __pfx_mt_find+0x10/0x10
[ 1391.187889][T30561]  handle_mm_fault+0x37b/0xa30
[ 1391.187925][T30561]  __get_user_pages+0x1178/0x32a0
[ 1391.187970][T30561]  ? __pfx___get_user_pages+0x10/0x10
[ 1391.188010][T30561]  populate_vma_page_range+0x267/0x3f0
[ 1391.188046][T30561]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1391.188079][T30561]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1391.188114][T30561]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1391.188149][T30561]  __mm_populate+0x107/0x3a0
[ 1391.188186][T30561]  ? __pfx___mm_populate+0x10/0x10
[ 1391.188225][T30561]  ? up_write+0x2dc/0x5b0
[ 1391.188258][T30561]  do_mlock+0x3f0/0x7f0
[ 1391.188290][T30561]  ? __pfx_do_mlock+0x10/0x10
[ 1391.188314][T30561]  ? __x64_sys_futex+0x34f/0x4d0
[ 1391.188344][T30561]  ? __x64_sys_futex+0x358/0x4d0
[ 1391.188379][T30561]  ? xfd_validate_state+0x129/0x190
[ 1391.188420][T30561]  __x64_sys_mlock+0x59/0x80
[ 1391.188444][T30561]  do_syscall_64+0x121/0x770
[ 1391.188473][T30561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1391.188498][T30561] RIP: 0033:0x7fdcf119e0d9
[ 1391.188520][T30561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1391.188543][T30561] RSP: 002b:00007fdcf2044028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1391.188568][T30561] RAX: ffffffffffffffda RBX: 00007fdcf1425fa0 RCX: 00007fdcf119e0d9
[ 1391.188586][T30561] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1391.188601][T30561] RBP: 00007fdcf1235024 R08: 0000000000000000 R09: 0000000000000000
[ 1391.188617][T30561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1391.188632][T30561] R13: 00007fdcf1426038 R14: 00007fdcf1425fa0 R15: 00007ffead371988
[ 1391.188668][T30561]  </TASK>
[ 1394.428559][  T141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1394.557912][T13641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1394.573311][T13641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1394.584459][T13641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1394.593338][T13641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1394.602870][T13641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1394.730652][  T141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1394.903511][  T141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1395.014812][  T141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1395.361758][  T141] bridge_slave_1: left allmulticast mode
[ 1395.376995][  T141] bridge_slave_1: left promiscuous mode
[ 1395.390248][  T141] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1395.445186][  T141] bridge_slave_0: left allmulticast mode
[ 1395.476927][  T141] bridge_slave_0: left promiscuous mode
[ 1395.501042][  T141] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1396.185796][  T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1396.226972][  T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1396.244799][  T141] bond0 (unregistering): Released all slaves
[ 1396.421764][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1396.638075][T20377] Bluetooth: hci2: command tx timeout
[ 1397.120107][  T141] hsr_slave_0: left promiscuous mode
[ 1397.142206][  T141] hsr_slave_1: left promiscuous mode
[ 1397.153952][  T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1397.174763][  T141] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1397.193262][  T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1397.203991][  T141] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1397.233027][  T141] veth1_macvtap: left promiscuous mode
[ 1397.246321][  T141] veth0_macvtap: left promiscuous mode
[ 1397.260100][  T141] veth1_vlan: left promiscuous mode
[ 1397.270771][  T141] veth0_vlan: left promiscuous mode
[ 1397.546741][  T141] team0 (unregistering): Port device team_slave_1 removed
[ 1397.563552][  T141] team0 (unregistering): Port device team_slave_0 removed
[ 1397.756024][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1398.304645][T30636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1398.331594][T30636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1398.344530][T30636] bridge_slave_0: entered allmulticast mode
[ 1398.353174][T30636] bridge_slave_0: entered promiscuous mode
[ 1398.362353][T30636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1398.370642][T30636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1398.384465][T30636] bridge_slave_1: entered allmulticast mode
[ 1398.392541][T30636] bridge_slave_1: entered promiscuous mode
[ 1398.531323][T30636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1398.694398][T30636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1398.718288][T20377] Bluetooth: hci2: command tx timeout
[ 1398.867468][T30636] team0: Port device team_slave_0 added
[ 1399.071224][T30636] team0: Port device team_slave_1 added
[ 1399.472103][T30636] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1399.486026][T30636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1399.564440][T30636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1399.618714][T30636] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1399.643986][T30636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1399.701034][T30636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1399.865631][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1400.109285][T30636] hsr_slave_0: entered promiscuous mode
[ 1400.115460][T30636] hsr_slave_1: entered promiscuous mode
[ 1400.121624][T30636] debugfs: 'hsr0' already exists in 'hsr'
[ 1400.127349][T30636] Cannot create hsr debugfs directory
[ 1400.797800][T20377] Bluetooth: hci2: command tx timeout
[ 1402.878203][T20377] Bluetooth: hci2: command tx timeout
[ 1403.007355][T30837] FAULT_INJECTION: forcing a failure.
[ 1403.007355][T30837] name failslab, interval 1, probability 0, space 0, times 0
[ 1403.022168][T30837] CPU: 1 UID: 0 PID: 30837 Comm: syz.0.3349 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1403.022209][T30837] Tainted: [L]=SOFTLOCKUP
[ 1403.022219][T30837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1403.022234][T30837] Call Trace:
[ 1403.022242][T30837]  <TASK>
[ 1403.022252][T30837]  dump_stack_lvl+0x100/0x190
[ 1403.022290][T30837]  should_fail_ex.cold+0x5/0xa
[ 1403.022316][T30837]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1403.022475][T30837]  should_failslab+0xc2/0x120
[ 1403.022509][T30837]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1403.022542][T30837]  ? skb_clone+0x190/0x400
[ 1403.022613][T30837]  skb_clone+0x190/0x400
[ 1403.022640][T30837]  netlink_deliver_tap+0xaed/0xcc0
[ 1403.022741][T30837]  netlink_unicast+0x62b/0x850
[ 1403.022807][T30837]  ? __pfx_netlink_unicast+0x10/0x10
[ 1403.022861][T30837]  netlink_sendmsg+0x8b0/0xda0
[ 1403.022903][T30837]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1403.022943][T30837]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1403.022974][T30837]  __sys_sendto+0x48b/0x4e0
[ 1403.023011][T30837]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1403.023045][T30837]  ? __pfx___sys_sendto+0x10/0x10
[ 1403.023091][T30837]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1403.023133][T30837]  ? xfd_validate_state+0x129/0x190
[ 1403.023173][T30837]  __x64_sys_sendto+0xe0/0x1c0
[ 1403.023208][T30837]  ? do_syscall_64+0xae/0x770
[ 1403.023232][T30837]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1403.023256][T30837]  do_syscall_64+0x121/0x770
[ 1403.023282][T30837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1403.023307][T30837] RIP: 0033:0x7f4e6095e90e
[ 1403.023328][T30837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1403.023353][T30837] RSP: 002b:00007f4e61895e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1403.023377][T30837] RAX: ffffffffffffffda RBX: 00007f4e618976c0 RCX: 00007f4e6095e90e
[ 1403.023395][T30837] RDX: 0000000000000028 RSI: 00007f4e61896000 RDI: 0000000000000005
[ 1403.023410][T30837] RBP: 0000000000000000 R08: 00007f4e61895f04 R09: 000000000000000c
[ 1403.023427][T30837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 1403.023442][T30837] R13: 00007f4e61895f58 R14: 00007f4e61896000 R15: 0000000000000000
[ 1403.023476][T30837]  </TASK>
[ 1403.082296][T30636] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1403.282943][T30636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1403.295406][T30636] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1403.316523][T30636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1403.324565][T30636] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1403.345352][T30636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1403.810226][T30636] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1403.893800][T30636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1403.985934][T30836] ima: policy update failed
[ 1404.021972][   T30] audit: type=1802 audit(4294968045.994:85): pid=30836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3349" res=0 errno=0
[ 1404.969509][T30882] FAULT_INJECTION: forcing a failure.
[ 1404.969509][T30882] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1405.003956][T30882] CPU: 0 UID: 0 PID: 30882 Comm: syz.1.3351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1405.003981][T30882] Tainted: [L]=SOFTLOCKUP
[ 1405.003988][T30882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1405.003997][T30882] Call Trace:
[ 1405.004001][T30882]  <TASK>
[ 1405.004007][T30882]  dump_stack_lvl+0x100/0x190
[ 1405.004030][T30882]  should_fail_ex.cold+0x5/0xa
[ 1405.004047][T30882]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1405.004069][T30882]  should_fail_alloc_page+0xeb/0x140
[ 1405.004091][T30882]  prepare_alloc_pages+0x1f0/0x5f0
[ 1405.004111][T30882]  ? __lock_acquire+0x4c5/0x1ec0
[ 1405.004130][T30882]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1405.004150][T30882]  ? __lock_acquire+0x4c5/0x1ec0
[ 1405.004172][T30882]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1405.004190][T30882]  ? __lock_acquire+0x4c5/0x1ec0
[ 1405.004209][T30882]  ? __lock_acquire+0x4c5/0x1ec0
[ 1405.004232][T30882]  ? __lock_acquire+0x4c5/0x1ec0
[ 1405.004246][T30882]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1405.004270][T30882]  ? policy_nodemask+0xed/0x4f0
[ 1405.004292][T30882]  alloc_pages_mpol+0x1fb/0x540
[ 1405.004314][T30882]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1405.004334][T30882]  ? do_raw_spin_lock+0x128/0x260
[ 1405.004352][T30882]  ? find_held_lock+0x2b/0x80
[ 1405.004372][T30882]  ? swap_cache_alloc_folio+0x374/0xc50
[ 1405.004391][T30882]  folio_alloc_mpol_noprof+0x36/0x260
[ 1405.004406][T30882]  swap_cache_alloc_folio+0x3d7/0xc50
[ 1405.004426][T30882]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[ 1405.004443][T30882]  ? swap_cache_get_folio+0x28d/0x360
[ 1405.004459][T30882]  ? __pfx_swap_cache_get_folio+0x10/0x10
[ 1405.004474][T30882]  ? __lock_acquire+0x4c5/0x1ec0
[ 1405.004490][T30882]  ? __lock_acquire+0x4c5/0x1ec0
[ 1405.004508][T30882]  swap_cache_read_folio+0x47/0x140
[ 1405.004526][T30882]  swap_cluster_readahead+0x387/0x5f0
[ 1405.004547][T30882]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1405.004575][T30882]  shmem_swapin_folio+0x217f/0x2a80
[ 1405.004593][T30882]  ? find_held_lock+0x2b/0x80
[ 1405.004613][T30882]  ? filemap_get_entry+0x22d/0x450
[ 1405.004631][T30882]  ? filemap_get_entry+0x237/0x450
[ 1405.004646][T30882]  ? __pfx_shmem_swapin_folio+0x10/0x10
[ 1405.004660][T30882]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1405.004678][T30882]  ? xas_move_index+0xae/0x110
[ 1405.004696][T30882]  shmem_get_folio_gfp+0x56e/0x1910
[ 1405.004716][T30882]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1405.004732][T30882]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1405.004746][T30882]  ? filemap_map_pages+0x1137/0x1f80
[ 1405.004762][T30882]  shmem_fault+0x1f9/0xa20
[ 1405.004780][T30882]  ? __pfx_shmem_fault+0x10/0x10
[ 1405.004799][T30882]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1405.004816][T30882]  ? find_held_lock+0x2b/0x80
[ 1405.004838][T30882]  __do_fault+0x10b/0x440
[ 1405.004857][T30882]  do_fault+0xa99/0x1750
[ 1405.004880][T30882]  __handle_mm_fault+0x187d/0x2a00
[ 1405.004897][T30882]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1405.004917][T30882]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1405.004933][T30882]  ? pte_offset_map_lock+0x174/0x320
[ 1405.004952][T30882]  ? find_held_lock+0x2b/0x80
[ 1405.004977][T30882]  ? follow_page_pte+0x4d0/0x13f0
[ 1405.005001][T30882]  handle_mm_fault+0x37b/0xa30
[ 1405.005019][T30882]  __get_user_pages+0x1178/0x32a0
[ 1405.005046][T30882]  ? __pfx___get_user_pages+0x10/0x10
[ 1405.005071][T30882]  populate_vma_page_range+0x267/0x3f0
[ 1405.005093][T30882]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1405.005113][T30882]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1405.005134][T30882]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1405.005152][T30882]  __mm_populate+0x107/0x3a0
[ 1405.005173][T30882]  ? __pfx___mm_populate+0x10/0x10
[ 1405.005196][T30882]  ? up_write+0x2dc/0x5b0
[ 1405.005215][T30882]  do_mlock+0x3f0/0x7f0
[ 1405.005233][T30882]  ? __pfx_do_mlock+0x10/0x10
[ 1405.005247][T30882]  ? __x64_sys_futex+0x34f/0x4d0
[ 1405.005272][T30882]  ? __x64_sys_futex+0x358/0x4d0
[ 1405.005294][T30882]  ? xfd_validate_state+0x129/0x190
[ 1405.005319][T30882]  __x64_sys_mlock+0x59/0x80
[ 1405.005339][T30882]  do_syscall_64+0x121/0x770
[ 1405.005355][T30882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.005371][T30882] RIP: 0033:0x7fdcf119e0d9
[ 1405.005383][T30882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1405.005397][T30882] RSP: 002b:00007fdcf2023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1405.005412][T30882] RAX: ffffffffffffffda RBX: 00007fdcf1426090 RCX: 00007fdcf119e0d9
[ 1405.005421][T30882] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1405.005430][T30882] RBP: 00007fdcf1235024 R08: 0000000000000000 R09: 0000000000000000
[ 1405.005439][T30882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1405.005448][T30882] R13: 00007fdcf1426128 R14: 00007fdcf1426090 R15: 00007ffead371988
[ 1405.005467][T30882]  </TASK>
[ 1406.045578][T30636] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1406.119922][T30636] 8021q: adding VLAN 0 to HW filter on device team0
[ 1406.177255][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1406.184402][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1406.224861][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1406.232066][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1406.552978][T30636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1409.155723][T30636] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1409.810348][T30988] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[ 1409.964931][T30988] NFSD: Failed to start, no listeners configured.
[ 1410.147497][T30636] veth0_vlan: entered promiscuous mode
[ 1410.422276][T30636] veth1_vlan: entered promiscuous mode
[ 1410.510186][T30636] veth0_macvtap: entered promiscuous mode
[ 1410.556381][T30990] hub 1-0:1.0: USB hub found
[ 1410.579797][T30990] hub 1-0:1.0: 1 port detected
[ 1410.590473][T30636] veth1_macvtap: entered promiscuous mode
[ 1411.024045][T30636] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1411.151260][T30636] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1412.259561][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1412.289873][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1412.709981][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1412.730649][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1413.080896][T31041] FAULT_INJECTION: forcing a failure.
[ 1413.080896][T31041] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1413.094482][T31041] CPU: 0 UID: 0 PID: 31041 Comm: syz.3.3332 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1413.094523][T31041] Tainted: [L]=SOFTLOCKUP
[ 1413.094531][T31041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1413.094548][T31041] Call Trace:
[ 1413.094556][T31041]  <TASK>
[ 1413.094565][T31041]  dump_stack_lvl+0x100/0x190
[ 1413.094603][T31041]  should_fail_ex.cold+0x5/0xa
[ 1413.094627][T31041]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1413.094668][T31041]  should_fail_alloc_page+0xeb/0x140
[ 1413.094704][T31041]  prepare_alloc_pages+0x1f0/0x5f0
[ 1413.094756][T31041]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1413.094800][T31041]  ? mas_prev_slot+0x760/0x1d20
[ 1413.094839][T31041]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1413.094875][T31041]  ? mas_prev+0x9b/0xf0
[ 1413.094985][T31041]  ? __pfx_mas_prev+0x10/0x10
[ 1413.095016][T31041]  ? vma_adjust_trans_huge+0x2e4/0x560
[ 1413.095060][T31041]  ? vma_is_special_huge+0x23f/0x2d0
[ 1413.095097][T31041]  ? __pfx_vma_is_special_huge+0x10/0x10
[ 1413.095131][T31041]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1413.095162][T31041]  ? policy_nodemask+0xed/0x4f0
[ 1413.095199][T31041]  alloc_pages_mpol+0x1fb/0x540
[ 1413.095235][T31041]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1413.095273][T31041]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[ 1413.095303][T31041]  alloc_pages_noprof+0x1a/0x160
[ 1413.095329][T31041]  __pmd_alloc+0x3b/0x950
[ 1413.095367][T31041]  __handle_mm_fault+0xa9c/0x2a00
[ 1413.095399][T31041]  ? mt_find+0x45e/0x8e0
[ 1413.095442][T31041]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1413.095468][T31041]  ? __pfx_mt_find+0x10/0x10
[ 1413.095525][T31041]  handle_mm_fault+0x37b/0xa30
[ 1413.095560][T31041]  __get_user_pages+0x1178/0x32a0
[ 1413.095611][T31041]  ? __pfx___get_user_pages+0x10/0x10
[ 1413.095656][T31041]  populate_vma_page_range+0x267/0x3f0
[ 1413.095695][T31041]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1413.095730][T31041]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1413.095773][T31041]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1413.095813][T31041]  __mm_populate+0x107/0x3a0
[ 1413.095849][T31041]  ? __pfx___mm_populate+0x10/0x10
[ 1413.095891][T31041]  ? up_write+0x2dc/0x5b0
[ 1413.095923][T31041]  do_mlock+0x3f0/0x7f0
[ 1413.095954][T31041]  ? __pfx_do_mlock+0x10/0x10
[ 1413.095979][T31041]  ? __x64_sys_futex+0x34f/0x4d0
[ 1413.096009][T31041]  ? __x64_sys_futex+0x358/0x4d0
[ 1413.096045][T31041]  ? xfd_validate_state+0x129/0x190
[ 1413.096080][T31041]  __x64_sys_mlock+0x59/0x80
[ 1413.096104][T31041]  do_syscall_64+0x121/0x770
[ 1413.096131][T31041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.096156][T31041] RIP: 0033:0x7f936439e0d9
[ 1413.096175][T31041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1413.096197][T31041] RSP: 002b:00007f9365332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1413.096218][T31041] RAX: ffffffffffffffda RBX: 00007f9364625fa0 RCX: 00007f936439e0d9
[ 1413.096234][T31041] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1413.096247][T31041] RBP: 00007f9364435024 R08: 0000000000000000 R09: 0000000000000000
[ 1413.096263][T31041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1413.096276][T31041] R13: 00007f9364626038 R14: 00007f9364625fa0 R15: 00007ffed6415088
[ 1413.096309][T31041]  </TASK>
[ 1414.220204][T31065] random: crng reseeded on system resumption
[ 1414.361670][T28001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.407971][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.189475][T28001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1415.287764][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1419.006058][T31147] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock
[ 1423.046562][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.054645][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.148215][T31196] FAULT_INJECTION: forcing a failure.
[ 1423.148215][T31196] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1423.161891][T31196] CPU: 0 UID: 0 PID: 31196 Comm: syz.0.3391 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1423.161930][T31196] Tainted: [L]=SOFTLOCKUP
[ 1423.161940][T31196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1423.161954][T31196] Call Trace:
[ 1423.161962][T31196]  <TASK>
[ 1423.161972][T31196]  dump_stack_lvl+0x100/0x190
[ 1423.162010][T31196]  should_fail_ex.cold+0x5/0xa
[ 1423.162034][T31196]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1423.162074][T31196]  should_fail_alloc_page+0xeb/0x140
[ 1423.162112][T31196]  prepare_alloc_pages+0x1f0/0x5f0
[ 1423.162154][T31196]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1423.162189][T31196]  ? __pfx___up_read+0x10/0x10
[ 1423.162217][T31196]  ? validate_mm+0x261/0x4e0
[ 1423.162242][T31196]  ? validate_mm+0x261/0x4e0
[ 1423.162277][T31196]  ? __lock_acquire+0x4c5/0x1ec0
[ 1423.162305][T31196]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1423.162335][T31196]  ? __pfx___css_rstat_updated+0x10/0x10
[ 1423.162365][T31196]  ? mas_prev_setup.constprop.0+0xb6/0x9c0
[ 1423.162403][T31196]  ? rcu_is_watching+0x13/0xc0
[ 1423.162437][T31196]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[ 1423.162484][T31196]  ? __lock_acquire+0x4c5/0x1ec0
[ 1423.162513][T31196]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1423.162542][T31196]  ? policy_nodemask+0xed/0x4f0
[ 1423.162580][T31196]  alloc_pages_mpol+0x1fb/0x540
[ 1423.162615][T31196]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1423.162647][T31196]  ? __thp_vma_allowable_orders+0x1d9/0xf00
[ 1423.162678][T31196]  alloc_pages_noprof+0x1a/0x160
[ 1423.162702][T31196]  pte_alloc_one+0x1c/0x3d0
[ 1423.162731][T31196]  do_fault+0x86c/0x1750
[ 1423.162775][T31196]  __handle_mm_fault+0x187d/0x2a00
[ 1423.162808][T31196]  ? mt_find+0x45e/0x8e0
[ 1423.162837][T31196]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1423.162864][T31196]  ? __pfx_mt_find+0x10/0x10
[ 1423.162922][T31196]  handle_mm_fault+0x37b/0xa30
[ 1423.162959][T31196]  __get_user_pages+0x1178/0x32a0
[ 1423.163009][T31196]  ? __pfx___get_user_pages+0x10/0x10
[ 1423.163056][T31196]  populate_vma_page_range+0x267/0x3f0
[ 1423.163095][T31196]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1423.163130][T31196]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1423.163166][T31196]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1423.163201][T31196]  __mm_populate+0x107/0x3a0
[ 1423.163238][T31196]  ? __pfx___mm_populate+0x10/0x10
[ 1423.163278][T31196]  ? up_write+0x2dc/0x5b0
[ 1423.163311][T31196]  do_mlock+0x3f0/0x7f0
[ 1423.163344][T31196]  ? __pfx_do_mlock+0x10/0x10
[ 1423.163370][T31196]  ? __x64_sys_futex+0x34f/0x4d0
[ 1423.163400][T31196]  ? __x64_sys_futex+0x358/0x4d0
[ 1423.163436][T31196]  ? xfd_validate_state+0x129/0x190
[ 1423.163488][T31196]  __x64_sys_mlock+0x59/0x80
[ 1423.163517][T31196]  do_syscall_64+0x121/0x770
[ 1423.163548][T31196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1423.163574][T31196] RIP: 0033:0x7f4e6099e0d9
[ 1423.163595][T31196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1423.163619][T31196] RSP: 002b:00007f4e61876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1423.163643][T31196] RAX: ffffffffffffffda RBX: 00007f4e60c26090 RCX: 00007f4e6099e0d9
[ 1423.163660][T31196] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1423.163676][T31196] RBP: 00007f4e60a35024 R08: 0000000000000000 R09: 0000000000000000
[ 1423.163692][T31196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1423.163707][T31196] R13: 00007f4e60c26128 R14: 00007f4e60c26090 R15: 00007ffdcfae5288
[ 1423.163743][T31196]  </TASK>
[ 1424.096811][T31201] FAULT_INJECTION: forcing a failure.
[ 1424.096811][T31201] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1424.140003][T31201] CPU: 0 UID: 0 PID: 31201 Comm: syz.3.3392 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1424.140044][T31201] Tainted: [L]=SOFTLOCKUP
[ 1424.140054][T31201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1424.140069][T31201] Call Trace:
[ 1424.140077][T31201]  <TASK>
[ 1424.140086][T31201]  dump_stack_lvl+0x100/0x190
[ 1424.140125][T31201]  should_fail_ex.cold+0x5/0xa
[ 1424.140152][T31201]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1424.140193][T31201]  should_fail_alloc_page+0xeb/0x140
[ 1424.140230][T31201]  prepare_alloc_pages+0x1f0/0x5f0
[ 1424.140266][T31201]  ? __lock_acquire+0x4c5/0x1ec0
[ 1424.140299][T31201]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1424.140334][T31201]  ? __lock_acquire+0x4c5/0x1ec0
[ 1424.140377][T31201]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1424.140411][T31201]  ? __lock_acquire+0x4c5/0x1ec0
[ 1424.140449][T31201]  ? __lock_acquire+0x4c5/0x1ec0
[ 1424.140492][T31201]  ? __lock_acquire+0x4c5/0x1ec0
[ 1424.140518][T31201]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1424.140551][T31201]  ? policy_nodemask+0xed/0x4f0
[ 1424.140599][T31201]  alloc_pages_mpol+0x1fb/0x540
[ 1424.140637][T31201]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1424.140671][T31201]  ? do_raw_spin_lock+0x128/0x260
[ 1424.140701][T31201]  ? find_held_lock+0x2b/0x80
[ 1424.140734][T31201]  ? swap_cache_alloc_folio+0x374/0xc50
[ 1424.140768][T31201]  folio_alloc_mpol_noprof+0x36/0x260
[ 1424.140797][T31201]  swap_cache_alloc_folio+0x3d7/0xc50
[ 1424.140833][T31201]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[ 1424.140864][T31201]  ? swap_cache_get_folio+0x28d/0x360
[ 1424.140893][T31201]  ? __pfx_swap_cache_get_folio+0x10/0x10
[ 1424.140921][T31201]  ? __lock_acquire+0x4c5/0x1ec0
[ 1424.140950][T31201]  ? __lock_acquire+0x4c5/0x1ec0
[ 1424.140981][T31201]  swap_cache_read_folio+0x47/0x140
[ 1424.141015][T31201]  swap_cluster_readahead+0x387/0x5f0
[ 1424.141052][T31201]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1424.141104][T31201]  shmem_swapin_folio+0x217f/0x2a80
[ 1424.141134][T31201]  ? find_held_lock+0x2b/0x80
[ 1424.141168][T31201]  ? filemap_get_entry+0x22d/0x450
[ 1424.141199][T31201]  ? filemap_get_entry+0x237/0x450
[ 1424.141225][T31201]  ? __pfx_shmem_swapin_folio+0x10/0x10
[ 1424.141247][T31201]  ? __pfx_filemap_get_entry+0x10/0x10
[ 1424.141274][T31201]  ? xas_load+0x44/0x5c0
[ 1424.141298][T31201]  ? xas_move_index+0xae/0x110
[ 1424.141330][T31201]  shmem_get_folio_gfp+0x56e/0x1910
[ 1424.141364][T31201]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1424.141388][T31201]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1424.141412][T31201]  ? filemap_map_pages+0x1137/0x1f80
[ 1424.141442][T31201]  shmem_fault+0x1f9/0xa20
[ 1424.141472][T31201]  ? __pfx_shmem_fault+0x10/0x10
[ 1424.141506][T31201]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1424.141534][T31201]  ? find_held_lock+0x2b/0x80
[ 1424.141581][T31201]  __do_fault+0x10b/0x440
[ 1424.141615][T31201]  do_fault+0xa99/0x1750
[ 1424.141655][T31201]  __handle_mm_fault+0x187d/0x2a00
[ 1424.141686][T31201]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1424.141721][T31201]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1424.141751][T31201]  ? pte_offset_map_lock+0x174/0x320
[ 1424.141783][T31201]  ? find_held_lock+0x2b/0x80
[ 1424.141826][T31201]  ? follow_page_pte+0x4d0/0x13f0
[ 1424.141866][T31201]  handle_mm_fault+0x37b/0xa30
[ 1424.141899][T31201]  __get_user_pages+0x1178/0x32a0
[ 1424.141947][T31201]  ? __pfx___get_user_pages+0x10/0x10
[ 1424.141990][T31201]  populate_vma_page_range+0x267/0x3f0
[ 1424.142028][T31201]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1424.142062][T31201]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1424.142095][T31201]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1424.142129][T31201]  __mm_populate+0x107/0x3a0
[ 1424.142166][T31201]  ? __pfx___mm_populate+0x10/0x10
[ 1424.142204][T31201]  ? up_write+0x2dc/0x5b0
[ 1424.142236][T31201]  do_mlock+0x3f0/0x7f0
[ 1424.142268][T31201]  ? __pfx_do_mlock+0x10/0x10
[ 1424.142295][T31201]  ? __x64_sys_futex+0x34f/0x4d0
[ 1424.142325][T31201]  ? __x64_sys_futex+0x358/0x4d0
[ 1424.142359][T31201]  ? xfd_validate_state+0x129/0x190
[ 1424.142400][T31201]  __x64_sys_mlock+0x59/0x80
[ 1424.142428][T31201]  do_syscall_64+0x121/0x770
[ 1424.142458][T31201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1424.142485][T31201] RIP: 0033:0x7f936439e0d9
[ 1424.142506][T31201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1424.142529][T31201] RSP: 002b:00007f9365311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1424.142553][T31201] RAX: ffffffffffffffda RBX: 00007f9364626090 RCX: 00007f936439e0d9
[ 1424.142579][T31201] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1424.142594][T31201] RBP: 00007f9364435024 R08: 0000000000000000 R09: 0000000000000000
[ 1424.142610][T31201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1424.142625][T31201] R13: 00007f9364626128 R14: 00007f9364626090 R15: 00007ffed6415088
[ 1424.142660][T31201]  </TASK>
[ 1428.628987][T31278] FAULT_INJECTION: forcing a failure.
[ 1428.628987][T31278] name failslab, interval 1, probability 0, space 0, times 0
[ 1428.669764][T31278] CPU: 0 UID: 0 PID: 31278 Comm: syz.3.3403 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1428.669796][T31278] Tainted: [L]=SOFTLOCKUP
[ 1428.669803][T31278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1428.669815][T31278] Call Trace:
[ 1428.669822][T31278]  <TASK>
[ 1428.669830][T31278]  dump_stack_lvl+0x100/0x190
[ 1428.669863][T31278]  should_fail_ex.cold+0x5/0xa
[ 1428.669890][T31278]  should_failslab+0xc2/0x120
[ 1428.669921][T31278]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1428.669949][T31278]  ? __pfx_acct_collect+0x10/0x10
[ 1428.669981][T31278]  ? taskstats_exit+0x6d3/0xca0
[ 1428.670009][T31278]  taskstats_exit+0x6d3/0xca0
[ 1428.670041][T31278]  ? __pfx_acct_update_integrals+0x10/0x10
[ 1428.670067][T31278]  ? __pfx_taskstats_exit+0x10/0x10
[ 1428.670093][T31278]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1428.670132][T31278]  do_exit+0x65c/0x2ae0
[ 1428.670171][T31278]  ? __pfx_do_exit+0x10/0x10
[ 1428.670205][T31278]  ? do_raw_spin_lock+0x128/0x260
[ 1428.670235][T31278]  ? find_held_lock+0x2b/0x80
[ 1428.670266][T31278]  ? get_signal+0x7e0/0x21e0
[ 1428.670298][T31278]  do_group_exit+0xd5/0x2a0
[ 1428.670336][T31278]  get_signal+0x1ec7/0x21e0
[ 1428.670378][T31278]  ? __pfx_get_signal+0x10/0x10
[ 1428.670410][T31278]  ? do_futex+0x190/0x440
[ 1428.670444][T31278]  arch_do_signal_or_restart+0x91/0x7a0
[ 1428.670471][T31278]  ? do_sigaltstack.constprop.0+0x4c0/0x670
[ 1428.670507][T31278]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1428.670553][T31278]  exit_to_user_mode_loop+0x139/0x700
[ 1428.670584][T31278]  ? rcu_is_watching+0x13/0xc0
[ 1428.670619][T31278]  do_syscall_64+0x603/0x770
[ 1428.670648][T31278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1428.670673][T31278] RIP: 0033:0x7f936439e0d9
[ 1428.670693][T31278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1428.670715][T31278] RSP: 002b:00007f93653320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1428.670738][T31278] RAX: fffffffffffffe00 RBX: 00007f9364625fa8 RCX: 00007f936439e0d9
[ 1428.670754][T31278] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9364625fa8
[ 1428.670768][T31278] RBP: 00007f9364625fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1428.670782][T31278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1428.670796][T31278] R13: 00007f9364626038 R14: 00007ffed6414fa0 R15: 00007ffed6415088
[ 1428.670830][T31278]  </TASK>
[ 1429.111741][T31290] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1434.351083][T13641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1434.371338][T13641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1434.380211][T13641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1434.390904][T13641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1434.401634][T13641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1436.478030][T13641] Bluetooth: hci4: command tx timeout
[ 1436.567336][   T30] audit: type=1800 audit(4294968078.534:86): pid=31433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3427" name="members" dev="configfs" ino=291442 res=0 errno=0
[ 1437.336981][T31381] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1437.347781][T31381] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1437.354927][T31381] bridge_slave_0: entered allmulticast mode
[ 1437.365781][T31381] bridge_slave_0: entered promiscuous mode
[ 1437.437705][T31381] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1437.449007][T31381] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1437.456233][T31381] bridge_slave_1: entered allmulticast mode
[ 1437.463391][T31381] bridge_slave_1: entered promiscuous mode
[ 1437.525818][T31381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1437.555431][T31381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1437.641197][T31381] team0: Port device team_slave_0 added
[ 1437.659906][T31381] team0: Port device team_slave_1 added
[ 1437.705635][T31381] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1437.714480][T31381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1437.751810][T31381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1437.770242][T31381] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1437.777432][T31381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1437.805112][T31381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1437.926030][T31381] hsr_slave_0: entered promiscuous mode
[ 1437.948697][T31381] hsr_slave_1: entered promiscuous mode
[ 1437.954867][T31381] debugfs: 'hsr0' already exists in 'hsr'
[ 1437.968562][T31381] Cannot create hsr debugfs directory
[ 1438.558037][T13641] Bluetooth: hci4: command tx timeout
[ 1439.515225][T31381] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1439.533763][T31381] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1439.563860][T31381] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1439.606590][T31381] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1439.630385][T31381] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1439.659779][T31381] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1439.711839][T31381] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1439.734376][T31381] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1440.622517][T31381] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1440.639365][T13641] Bluetooth: hci4: command tx timeout
[ 1441.550186][T31381] 8021q: adding VLAN 0 to HW filter on device team0
[ 1441.786497][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1441.793728][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1441.916028][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1441.923157][ T9890] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1442.717823][T13641] Bluetooth: hci4: command tx timeout
[ 1444.100257][T31381] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1445.396979][T31381] veth0_vlan: entered promiscuous mode
[ 1445.435431][T31381] veth1_vlan: entered promiscuous mode
[ 1445.514772][T31381] veth0_macvtap: entered promiscuous mode
[ 1445.544286][T31381] veth1_macvtap: entered promiscuous mode
[ 1445.614087][T31381] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1445.644953][T31381] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1445.698590][  T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.736247][  T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.758752][  T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.790451][  T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1445.872020][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.898120][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1446.164584][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1446.205257][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1447.793176][T13641] Bluetooth: hci1: Unexpected cc 0x7c89 with no status
[ 1448.292078][T31646] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1453.503141][T31734] FAULT_INJECTION: forcing a failure.
[ 1453.503141][T31734] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1453.572157][T31734] CPU: 1 UID: 0 PID: 31734 Comm: syz.3.3469 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1453.572200][T31734] Tainted: [L]=SOFTLOCKUP
[ 1453.572210][T31734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1453.572226][T31734] Call Trace:
[ 1453.572235][T31734]  <TASK>
[ 1453.572244][T31734]  dump_stack_lvl+0x100/0x190
[ 1453.572283][T31734]  should_fail_ex.cold+0x5/0xa
[ 1453.572318][T31734]  ? __get_user_pages+0xa9/0x32a0
[ 1453.572358][T31734]  get_futex_key+0x1d0/0x14f0
[ 1453.572394][T31734]  ? __pfx_get_futex_key+0x10/0x10
[ 1453.572422][T31734]  ? mlock_drain_local+0x254/0x4e0
[ 1453.572450][T31734]  ? mlock_drain_local+0x254/0x4e0
[ 1453.572491][T31734]  futex_wake+0xf4/0x5e0
[ 1453.572527][T31734]  ? __pfx___up_read+0x10/0x10
[ 1453.572559][T31734]  ? __pfx_futex_wake+0x10/0x10
[ 1453.572599][T31734]  ? __mm_populate+0x2b0/0x3a0
[ 1453.572642][T31734]  do_futex+0x2b2/0x440
[ 1453.572675][T31734]  ? __pfx_do_futex+0x10/0x10
[ 1453.572705][T31734]  ? do_mlock+0x33a/0x7f0
[ 1453.572739][T31734]  __x64_sys_futex+0x34f/0x4d0
[ 1453.572776][T31734]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1453.572809][T31734]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[ 1453.572848][T31734]  ? syscall_user_dispatch+0x76/0x130
[ 1453.572883][T31734]  do_syscall_64+0x121/0x770
[ 1453.572914][T31734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1453.572940][T31734] RIP: 0033:0x7f936439e0d9
[ 1453.572962][T31734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1453.572987][T31734] RSP: 002b:00007f93653110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1453.573010][T31734] RAX: ffffffffffffffda RBX: 00007f9364626098 RCX: 00007f936439e0d9
[ 1453.573027][T31734] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f936462609c
[ 1453.573043][T31734] RBP: 00007f9364626090 R08: 0000000000000001 R09: 0000000000000000
[ 1453.573059][T31734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1453.573073][T31734] R13: 00007f9364626128 R14: 00007ffed6414fa0 R15: 00007ffed6415088
[ 1453.573107][T31734]  </TASK>
[ 1455.743806][T31763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1466.827894][T31979] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[ 1476.257337][T32137] FAULT_INJECTION: forcing a failure.
[ 1476.257337][T32137] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1476.320340][T32137] CPU: 0 UID: 0 PID: 32137 Comm: syz.2.3531 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1476.320380][T32137] Tainted: [L]=SOFTLOCKUP
[ 1476.320388][T32137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1476.320403][T32137] Call Trace:
[ 1476.320411][T32137]  <TASK>
[ 1476.320421][T32137]  dump_stack_lvl+0x100/0x190
[ 1476.320458][T32137]  should_fail_ex.cold+0x5/0xa
[ 1476.320483][T32137]  ? prepare_alloc_pages+0x16d/0x5f0
[ 1476.320522][T32137]  should_fail_alloc_page+0xeb/0x140
[ 1476.320560][T32137]  prepare_alloc_pages+0x1f0/0x5f0
[ 1476.320600][T32137]  __alloc_frozen_pages_noprof+0x1af/0x2dc0
[ 1476.320635][T32137]  ? __kfree_rcu_sheaf+0x199/0x730
[ 1476.320672][T32137]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1476.320711][T32137]  ? mas_next_node+0x29c/0x1020
[ 1476.320741][T32137]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1476.320779][T32137]  ? mt_validate_nulls+0x1b3/0xa10
[ 1476.320814][T32137]  ? __pfx_mt_validate_nulls+0x10/0x10
[ 1476.320858][T32137]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1476.320887][T32137]  ? policy_nodemask+0xed/0x4f0
[ 1476.320924][T32137]  alloc_pages_mpol+0x1fb/0x540
[ 1476.320961][T32137]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1476.321003][T32137]  folio_alloc_mpol_noprof+0x36/0x260
[ 1476.321031][T32137]  shmem_alloc_folio+0x135/0x160
[ 1476.321058][T32137]  shmem_alloc_and_add_folio+0x371/0xd40
[ 1476.321093][T32137]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1476.321124][T32137]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 1476.321160][T32137]  shmem_get_folio_gfp+0x6ad/0x1910
[ 1476.321192][T32137]  ? filemap_map_pages+0x112d/0x1f80
[ 1476.321218][T32137]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1476.321250][T32137]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1476.321276][T32137]  ? filemap_map_pages+0x1137/0x1f80
[ 1476.321308][T32137]  shmem_fault+0x1f9/0xa20
[ 1476.321339][T32137]  ? __pfx_shmem_fault+0x10/0x10
[ 1476.321371][T32137]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1476.321399][T32137]  ? find_held_lock+0x2b/0x80
[ 1476.321439][T32137]  __do_fault+0x10b/0x440
[ 1476.321474][T32137]  do_fault+0xa99/0x1750
[ 1476.321514][T32137]  __handle_mm_fault+0x187d/0x2a00
[ 1476.321545][T32137]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1476.321579][T32137]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1476.321608][T32137]  ? pte_offset_map_lock+0x174/0x320
[ 1476.321640][T32137]  ? find_held_lock+0x2b/0x80
[ 1476.321684][T32137]  ? follow_page_pte+0x4d0/0x13f0
[ 1476.321733][T32137]  handle_mm_fault+0x37b/0xa30
[ 1476.321767][T32137]  __get_user_pages+0x1178/0x32a0
[ 1476.321816][T32137]  ? __pfx___get_user_pages+0x10/0x10
[ 1476.321857][T32137]  populate_vma_page_range+0x267/0x3f0
[ 1476.321894][T32137]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1476.321927][T32137]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1476.321960][T32137]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1476.321993][T32137]  __mm_populate+0x107/0x3a0
[ 1476.322030][T32137]  ? __pfx___mm_populate+0x10/0x10
[ 1476.322067][T32137]  ? up_write+0x2dc/0x5b0
[ 1476.322101][T32137]  do_mlock+0x3f0/0x7f0
[ 1476.322132][T32137]  ? __pfx_do_mlock+0x10/0x10
[ 1476.322158][T32137]  ? __x64_sys_futex+0x34f/0x4d0
[ 1476.322188][T32137]  ? __x64_sys_futex+0x358/0x4d0
[ 1476.322221][T32137]  ? xfd_validate_state+0x129/0x190
[ 1476.322252][T32137]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[ 1476.322296][T32137]  __x64_sys_mlock+0x59/0x80
[ 1476.322325][T32137]  do_syscall_64+0x121/0x770
[ 1476.322355][T32137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.322381][T32137] RIP: 0033:0x7f9eb259e0d9
[ 1476.322402][T32137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1476.322425][T32137] RSP: 002b:00007f9eb07f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1476.322449][T32137] RAX: ffffffffffffffda RBX: 00007f9eb2825fa0 RCX: 00007f9eb259e0d9
[ 1476.322466][T32137] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1476.322481][T32137] RBP: 00007f9eb2635024 R08: 0000000000000000 R09: 0000000000000000
[ 1476.322496][T32137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1476.322512][T32137] R13: 00007f9eb2826038 R14: 00007f9eb2825fa0 R15: 00007ffe62e22d48
[ 1476.322548][T32137]  </TASK>
[ 1477.860746][T32165] binder: 32164:32165 ioctl c018620b 0 returned -14
[ 1482.129582][T32228] binder: 32227:32228 ioctl c018620b 0 returned -14
[ 1482.264597][T32236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3543'.
[ 1482.343447][T32239] Unable to find swap-space signature
[ 1484.480117][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.488895][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.621632][T32268] FAULT_INJECTION: forcing a failure.
[ 1484.621632][T32268] name failslab, interval 1, probability 0, space 0, times 0
[ 1484.685316][T32268] CPU: 0 UID: 0 PID: 32268 Comm: syz.3.3550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1484.685357][T32268] Tainted: [L]=SOFTLOCKUP
[ 1484.685366][T32268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1484.685380][T32268] Call Trace:
[ 1484.685388][T32268]  <TASK>
[ 1484.685397][T32268]  dump_stack_lvl+0x100/0x190
[ 1484.685434][T32268]  should_fail_ex.cold+0x5/0xa
[ 1484.685468][T32268]  should_failslab+0xc2/0x120
[ 1484.685505][T32268]  __kmalloc_node_noprof+0x101/0x830
[ 1484.685537][T32268]  ? lockdep_init_map_type+0x5c/0x250
[ 1484.685569][T32268]  ? mempool_init_node+0x11b/0x6e0
[ 1484.685603][T32268]  ? __pfx_mempool_free_slab+0x10/0x10
[ 1484.685631][T32268]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1484.685661][T32268]  mempool_init_node+0x11b/0x6e0
[ 1484.685700][T32268]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1484.685726][T32268]  ? __pfx_mempool_free_slab+0x10/0x10
[ 1484.685756][T32268]  mempool_init_noprof+0x3a/0x50
[ 1484.685790][T32268]  bioset_init+0x37e/0x8a0
[ 1484.685944][T32268]  ? __pfx_bioset_init+0x10/0x10
[ 1484.685974][T32268]  ? kasan_save_track+0x14/0x30
[ 1484.686004][T32268]  ? __kasan_kmalloc+0xaa/0xb0
[ 1484.686037][T32268]  ? __kmalloc_cache_node_noprof+0x300/0x6c0
[ 1484.686071][T32268]  ? __alloc_disk_node+0x5a/0x6b0
[ 1484.686153][T32268]  __alloc_disk_node+0x83/0x6b0
[ 1484.686197][T32268]  __blk_alloc_disk+0xd2/0x170
[ 1484.686241][T32268]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1484.686295][T32268]  ? __pfx_idr_alloc+0x10/0x10
[ 1484.686337][T32268]  ? lockdep_init_map_type+0x5c/0x250
[ 1484.686369][T32268]  ? __raw_spin_lock_init+0x3a/0x110
[ 1484.686405][T32268]  ? __pfx_hot_add_show+0x10/0x10
[ 1484.686480][T32268]  zram_add+0x1bf/0x5d0
[ 1484.686503][T32268]  ? __pfx_zram_add+0x10/0x10
[ 1484.686550][T32268]  ? find_held_lock+0x2b/0x80
[ 1484.686582][T32268]  ? sysfs_file_kobj+0xe4/0x290
[ 1484.686606][T32268]  ? sysfs_file_kobj+0xe4/0x290
[ 1484.686633][T32268]  ? __pfx_hot_add_show+0x10/0x10
[ 1484.686655][T32268]  hot_add_show+0x21/0x80
[ 1484.686678][T32268]  class_attr_show+0x72/0xa0
[ 1484.686711][T32268]  ? __pfx_class_attr_show+0x10/0x10
[ 1484.686738][T32268]  sysfs_kf_seq_show+0x217/0x3f0
[ 1484.686771][T32268]  seq_read_iter+0x32f/0x1270
[ 1484.686812][T32268]  kernfs_fop_read_iter+0x46c/0x610
[ 1484.686848][T32268]  ? rw_verify_area+0xce/0x6d0
[ 1484.686883][T32268]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 1484.686921][T32268]  vfs_read+0x82e/0xb40
[ 1484.686951][T32268]  ? __pfx_vfs_read+0x10/0x10
[ 1484.686973][T32268]  ? find_held_lock+0x2b/0x80
[ 1484.687028][T32268]  ksys_read+0x12a/0x250
[ 1484.687051][T32268]  ? __pfx_ksys_read+0x10/0x10
[ 1484.687084][T32268]  do_syscall_64+0x121/0x770
[ 1484.687115][T32268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1484.687142][T32268] RIP: 0033:0x7f936439e0d9
[ 1484.687164][T32268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1484.687187][T32268] RSP: 002b:00007f9365332028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1484.687211][T32268] RAX: ffffffffffffffda RBX: 00007f9364625fa0 RCX: 00007f936439e0d9
[ 1484.687239][T32268] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005
[ 1484.687254][T32268] RBP: 00007f9364435024 R08: 0000000000000000 R09: 0000000000000000
[ 1484.687269][T32268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1484.687284][T32268] R13: 00007f9364626038 R14: 00007f9364625fa0 R15: 00007ffed6415088
[ 1484.687323][T32268]  </TASK>
[ 1485.054611][T32268] zram: Error allocating disk structure for device 1
[ 1487.953590][T13641] Bluetooth: hci1: ACL packet too small
[ 1488.080255][T32350] FAULT_INJECTION: forcing a failure.
[ 1488.080255][T32350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1488.094372][T32350] CPU: 0 UID: 0 PID: 32350 Comm: syz.0.3560 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1488.094417][T32350] Tainted: [L]=SOFTLOCKUP
[ 1488.094426][T32350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1488.094440][T32350] Call Trace:
[ 1488.094449][T32350]  <TASK>
[ 1488.094457][T32350]  dump_stack_lvl+0x100/0x190
[ 1488.094491][T32350]  should_fail_ex.cold+0x5/0xa
[ 1488.094521][T32350]  _copy_from_iter+0x1f4/0x1690
[ 1488.094555][T32350]  ? __pfx__copy_from_iter+0x10/0x10
[ 1488.094587][T32350]  ? __pfx___might_resched+0x10/0x10
[ 1488.094623][T32350]  ? kfree+0x1e5/0x6c0
[ 1488.094653][T32350]  file_tty_write.isra.0+0x45b/0x890
[ 1488.094689][T32350]  redirected_tty_write+0xd4/0x120
[ 1488.094715][T32350]  vfs_write+0x6af/0x1050
[ 1488.094740][T32350]  ? __pfx_redirected_tty_write+0x10/0x10
[ 1488.094772][T32350]  ? __pfx_vfs_write+0x10/0x10
[ 1488.094793][T32350]  ? find_held_lock+0x2b/0x80
[ 1488.094849][T32350]  ksys_write+0x12a/0x250
[ 1488.094872][T32350]  ? __pfx_ksys_write+0x10/0x10
[ 1488.094905][T32350]  do_syscall_64+0x121/0x770
[ 1488.094934][T32350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.094958][T32350] RIP: 0033:0x7f4e6099e0d9
[ 1488.094978][T32350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1488.094999][T32350] RSP: 002b:00007f4e61834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1488.095021][T32350] RAX: ffffffffffffffda RBX: 00007f4e60c26270 RCX: 00007f4e6099e0d9
[ 1488.095037][T32350] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000007
[ 1488.095052][T32350] RBP: 00007f4e61834090 R08: 0000000000000000 R09: 0000000000000000
[ 1488.095066][T32350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1488.095079][T32350] R13: 00007f4e60c26308 R14: 00007f4e60c26270 R15: 00007ffdcfae5288
[ 1488.095112][T32350]  </TASK>
[ 1488.111619][T32343] FAULT_INJECTION: forcing a failure.
[ 1488.111619][T32343] name failslab, interval 1, probability 0, space 0, times 0
[ 1488.333258][T32343] CPU: 1 UID: 0 PID: 32343 Comm: syz.4.3561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1488.333302][T32343] Tainted: [L]=SOFTLOCKUP
[ 1488.333313][T32343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1488.333328][T32343] Call Trace:
[ 1488.333338][T32343]  <TASK>
[ 1488.333348][T32343]  dump_stack_lvl+0x100/0x190
[ 1488.333386][T32343]  should_fail_ex.cold+0x5/0xa
[ 1488.333417][T32343]  should_failslab+0xc2/0x120
[ 1488.333453][T32343]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1488.333486][T32343]  ? mempool_init_node+0x2f7/0x6e0
[ 1488.333522][T32343]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1488.333555][T32343]  mempool_init_node+0x2f7/0x6e0
[ 1488.333593][T32343]  ? __pfx_mempool_alloc_slab+0x10/0x10
[ 1488.333622][T32343]  ? __pfx_mempool_free_slab+0x10/0x10
[ 1488.333652][T32343]  mempool_init_noprof+0x3a/0x50
[ 1488.333687][T32343]  bioset_init+0x37e/0x8a0
[ 1488.333723][T32343]  ? __pfx_bioset_init+0x10/0x10
[ 1488.333753][T32343]  ? kasan_save_track+0x14/0x30
[ 1488.333784][T32343]  ? __kasan_kmalloc+0xaa/0xb0
[ 1488.333817][T32343]  ? __kmalloc_cache_node_noprof+0x300/0x6c0
[ 1488.333853][T32343]  ? __alloc_disk_node+0x5a/0x6b0
[ 1488.333903][T32343]  __alloc_disk_node+0x83/0x6b0
[ 1488.333946][T32343]  __blk_alloc_disk+0xd2/0x170
[ 1488.333982][T32343]  ? __pfx___blk_alloc_disk+0x10/0x10
[ 1488.334038][T32343]  ? __pfx_idr_alloc+0x10/0x10
[ 1488.334065][T32343]  ? lockdep_init_map_type+0x5c/0x250
[ 1488.334095][T32343]  ? __raw_spin_lock_init+0x3a/0x110
[ 1488.334131][T32343]  ? __pfx_hot_add_show+0x10/0x10
[ 1488.334156][T32343]  zram_add+0x1bf/0x5d0
[ 1488.334178][T32343]  ? __pfx_zram_add+0x10/0x10
[ 1488.334224][T32343]  ? find_held_lock+0x2b/0x80
[ 1488.334256][T32343]  ? sysfs_file_kobj+0xe4/0x290
[ 1488.334279][T32343]  ? sysfs_file_kobj+0xe4/0x290
[ 1488.334305][T32343]  ? __pfx_hot_add_show+0x10/0x10
[ 1488.334328][T32343]  hot_add_show+0x21/0x80
[ 1488.334352][T32343]  class_attr_show+0x72/0xa0
[ 1488.334382][T32343]  ? __pfx_class_attr_show+0x10/0x10
[ 1488.334411][T32343]  sysfs_kf_seq_show+0x217/0x3f0
[ 1488.334443][T32343]  seq_read_iter+0x32f/0x1270
[ 1488.334486][T32343]  kernfs_fop_read_iter+0x46c/0x610
[ 1488.334522][T32343]  ? rw_verify_area+0xce/0x6d0
[ 1488.334556][T32343]  ? __pfx_kernfs_fop_read_iter+0x10/0x10
[ 1488.334608][T32343]  vfs_read+0x82e/0xb40
[ 1488.334638][T32343]  ? __pfx_vfs_read+0x10/0x10
[ 1488.334662][T32343]  ? find_held_lock+0x2b/0x80
[ 1488.334724][T32343]  ksys_read+0x12a/0x250
[ 1488.334751][T32343]  ? __pfx_ksys_read+0x10/0x10
[ 1488.334788][T32343]  do_syscall_64+0x121/0x770
[ 1488.334818][T32343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1488.334849][T32343] RIP: 0033:0x7f8d1cb9e0d9
[ 1488.334870][T32343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1488.334900][T32343] RSP: 002b:00007f8d1db44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1488.334924][T32343] RAX: ffffffffffffffda RBX: 00007f8d1ce25fa0 RCX: 00007f8d1cb9e0d9
[ 1488.334941][T32343] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005
[ 1488.334956][T32343] RBP: 00007f8d1cc35024 R08: 0000000000000000 R09: 0000000000000000
[ 1488.334972][T32343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1488.334985][T32343] R13: 00007f8d1ce26038 R14: 00007f8d1ce25fa0 R15: 00007ffd1ab8c328
[ 1488.335022][T32343]  </TASK>
[ 1488.742277][T32343] zram: Error allocating disk structure for device 1
[ 1491.887247][T32405] vhci_hcd vhci_hcd.0: invalid port number 13
[ 1491.897722][T32405] vhci_hcd vhci_hcd.0: invalid port number 13
[ 1492.326186][T32427] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1492.382861][T32429] random: crng reseeded on system resumption
[ 1492.400976][T32427] CIFS mount error: No usable UNC path provided in device string!
[ 1492.400976][T32427] 
[ 1492.443432][T32427] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1497.091072][T32512] binder: 32511:32512 ioctl c018620b 0 returned -14
[ 1498.867853][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[ 1501.613069][T32584] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3599'.
[ 1501.948897][T32599] binder: 32598:32599 ioctl c018620b 0 returned -14
[ 1502.076466][T13641] Bluetooth: hci2: ACL packet too small
[ 1517.279100][T13641] Bluetooth: hci2: command 0x0406 tx timeout
[ 1520.015570][  T442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'.
[ 1521.576246][T13641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1521.588146][T13641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1521.611893][T13641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1521.621366][T13641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1521.631544][T13641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1521.705777][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1522.315011][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1522.609940][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1522.843746][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1523.066697][   T13] bridge_slave_1: left allmulticast mode
[ 1523.075045][   T13] bridge_slave_1: left promiscuous mode
[ 1523.081191][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1523.091682][   T13] bridge_slave_0: left allmulticast mode
[ 1523.097364][   T13] bridge_slave_0: left promiscuous mode
[ 1523.103692][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1523.363135][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1523.373661][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1523.383514][   T13] bond0 (unregistering): Released all slaves
[ 1523.678143][T13641] Bluetooth: hci2: command tx timeout
[ 1523.980024][  T520] random: crng reseeded on system resumption
[ 1524.613310][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1524.858666][T20377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1524.873062][T20377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1524.882644][T20377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1524.894597][   T13] hsr_slave_0: left promiscuous mode
[ 1524.904855][T20377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1524.911885][   T13] hsr_slave_1: left promiscuous mode
[ 1524.921419][T20377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1524.922011][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1524.936584][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1524.951466][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1524.960014][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1524.975273][   T13] veth1_macvtap: left promiscuous mode
[ 1524.989229][   T13] veth0_macvtap: left promiscuous mode
[ 1525.004610][   T13] veth1_vlan: left promiscuous mode
[ 1525.011053][   T13] veth0_vlan: left promiscuous mode
[ 1525.207644][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1525.221907][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1525.501171][  T469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1525.510061][  T469] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1525.517245][  T469] bridge_slave_0: entered allmulticast mode
[ 1525.525162][  T469] bridge_slave_0: entered promiscuous mode
[ 1525.544993][  T469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1525.581751][  T469] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1525.605899][  T469] bridge_slave_1: entered allmulticast mode
[ 1525.639519][  T469] bridge_slave_1: entered promiscuous mode
[ 1525.732861][  T469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1525.760079][T20377] Bluetooth: hci2: command tx timeout
[ 1525.777524][  T469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1525.931985][  T469] team0: Port device team_slave_0 added
[ 1525.954207][  T469] team0: Port device team_slave_1 added
[ 1526.092629][  T469] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1526.108410][  T469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1526.150094][  T469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1526.275168][  T469] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1526.306650][  T469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1526.387163][  T469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1526.573937][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1526.603871][   T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1526.779597][  T469] hsr_slave_0: entered promiscuous mode
[ 1526.785785][  T469] hsr_slave_1: entered promiscuous mode
[ 1526.792019][  T469] debugfs: 'hsr0' already exists in 'hsr'
[ 1526.798375][  T469] Cannot create hsr debugfs directory
[ 1526.913920][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1526.957754][T20377] Bluetooth: hci3: command tx timeout
[ 1527.096808][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1527.198813][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1527.475882][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1527.837850][T20377] Bluetooth: hci2: command tx timeout
[ 1528.354910][  T531] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1528.377895][  T531] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1528.390681][  T531] bridge_slave_0: entered allmulticast mode
[ 1528.410182][  T531] bridge_slave_0: entered promiscuous mode
[ 1528.493672][  T531] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1528.506291][  T531] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1528.516106][  T531] bridge_slave_1: entered allmulticast mode
[ 1528.523195][  T531] bridge_slave_1: entered promiscuous mode
[ 1528.686576][  T531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1528.727769][  T531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1528.745638][   T13] bridge_slave_1: left allmulticast mode
[ 1528.751456][   T13] bridge_slave_1: left promiscuous mode
[ 1528.757311][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1528.782048][   T13] bridge_slave_0: left allmulticast mode
[ 1528.788482][   T13] bridge_slave_0: left promiscuous mode
[ 1528.794831][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1528.911336][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1528.923489][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1528.933300][   T13] bond0 (unregistering): Released all slaves
[ 1529.038204][T20377] Bluetooth: hci3: command tx timeout
[ 1529.045803][  T531] team0: Port device team_slave_0 added
[ 1529.122705][  T531] team0: Port device team_slave_1 added
[ 1529.211609][  T531] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1529.223290][  T531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1529.253311][  T531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1529.317415][  T531] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1529.325387][  T531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1529.355932][  T613] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1529.378967][  T531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1529.696698][  T531] hsr_slave_0: entered promiscuous mode
[ 1529.724149][  T531] hsr_slave_1: entered promiscuous mode
[ 1529.738418][  T531] debugfs: 'hsr0' already exists in 'hsr'
[ 1529.745007][  T531] Cannot create hsr debugfs directory
[ 1529.763315][   T13] hsr_slave_0: left promiscuous mode
[ 1529.771271][   T13] hsr_slave_1: left promiscuous mode
[ 1529.784345][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1529.793199][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1529.803922][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1529.819560][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1529.853152][   T13] veth1_macvtap: left promiscuous mode
[ 1529.863272][   T13] veth0_macvtap: left promiscuous mode
[ 1529.875865][   T13] veth1_vlan: left promiscuous mode
[ 1529.885885][   T13] veth0_vlan: left promiscuous mode
[ 1529.922460][T20377] Bluetooth: hci2: command tx timeout
[ 1530.244202][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1530.258597][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1530.356267][  T469] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1530.389600][  T469] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1530.397558][  T469] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1530.409995][  T469] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1530.419816][  T469] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1530.435049][  T469] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1530.448042][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1530.516317][  T469] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1530.546392][  T469] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1531.117790][T20377] Bluetooth: hci3: command tx timeout
[ 1531.215751][  T469] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1531.263007][  T469] 8021q: adding VLAN 0 to HW filter on device team0
[ 1531.306373][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1531.313605][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1531.354761][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1531.361959][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1531.650781][  T679] FAULT_INJECTION: forcing a failure.
[ 1531.650781][  T679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1531.680521][  T679] CPU: 1 UID: 0 PID: 679 Comm: syz.0.3668 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1531.680557][  T679] Tainted: [L]=SOFTLOCKUP
[ 1531.680566][  T679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1531.680579][  T679] Call Trace:
[ 1531.680587][  T679]  <TASK>
[ 1531.680595][  T679]  dump_stack_lvl+0x100/0x190
[ 1531.680633][  T679]  should_fail_ex.cold+0x5/0xa
[ 1531.680664][  T679]  _copy_to_user+0x32/0xd0
[ 1531.680693][  T679]  keyctl_capabilities+0x5a/0x160
[ 1531.680725][  T679]  __do_sys_keyctl+0x427/0x5a0
[ 1531.680752][  T679]  do_syscall_64+0x121/0x770
[ 1531.680783][  T679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1531.680808][  T679] RIP: 0033:0x7f4e6099e0d9
[ 1531.680837][  T679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1531.680859][  T679] RSP: 002b:00007f4e617f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1531.680882][  T679] RAX: ffffffffffffffda RBX: 00007f4e60c26450 RCX: 00007f4e6099e0d9
[ 1531.680898][  T679] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000000000000001f
[ 1531.680912][  T679] RBP: 00007f4e617f2090 R08: 00000000000003ff R09: 0000000000000000
[ 1531.680926][  T679] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 1531.680940][  T679] R13: 00007f4e60c264e8 R14: 00007f4e60c26450 R15: 00007ffdcfae5288
[ 1531.680973][  T679]  </TASK>
[ 1532.620679][  T531] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1532.637117][  T531] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1532.677079][  T531] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1532.694564][  T531] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1532.703881][  T531] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1532.722410][  T531] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1532.736126][  T531] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1532.746295][  T531] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1532.942368][  T531] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1532.993855][  T531] 8021q: adding VLAN 0 to HW filter on device team0
[ 1533.015293][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1533.022495][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1533.080377][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1533.087615][ T9890] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1533.208565][T20377] Bluetooth: hci3: command tx timeout
[ 1533.980767][  T469] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1534.464174][  T469] veth0_vlan: entered promiscuous mode
[ 1534.532372][  T469] veth1_vlan: entered promiscuous mode
[ 1534.654529][  T469] veth0_macvtap: entered promiscuous mode
[ 1534.688627][  T469] veth1_macvtap: entered promiscuous mode
[ 1534.768446][  T469] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1534.812784][  T469] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1534.850906][  T531] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1534.999852][T32691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.094247][ T9890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1535.111834][ T9890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1535.215766][  T531] veth0_vlan: entered promiscuous mode
[ 1535.362684][T32691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.574683][  T531] veth1_vlan: entered promiscuous mode
[ 1535.667772][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.727677][ T1093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.750048][T32691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1535.767498][T32691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1536.268024][  T531] veth0_macvtap: entered promiscuous mode
[ 1536.294652][  T531] veth1_macvtap: entered promiscuous mode
[ 1536.501608][  T531] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1536.750929][  T531] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1537.840783][T32691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.859283][T32691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1538.005608][ T9890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1538.013945][ T9890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1538.023406][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1538.857827][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1539.521351][   T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1539.861164][ T1093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1545.896238][ T1004] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1545.923726][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.932462][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.041070][T31022] Process accounting resumed
[ 1549.950809][ T1073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'.
[ 1552.133189][ T1104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3716'.
[ 1552.517268][ T1116] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1552.528119][ T1116] vhci_hcd vhci_hcd.2: invalid port number 0
[ 1558.237972][T13641] Bluetooth: hci4: command 0x0406 tx timeout
[ 1559.001912][ T1207] FAULT_INJECTION: forcing a failure.
[ 1559.001912][ T1207] name failslab, interval 1, probability 0, space 0, times 0
[ 1559.036682][ T1207] CPU: 1 UID: 0 PID: 1207 Comm: syz.2.3730 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1559.036717][ T1207] Tainted: [L]=SOFTLOCKUP
[ 1559.036726][ T1207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1559.036739][ T1207] Call Trace:
[ 1559.036746][ T1207]  <TASK>
[ 1559.036754][ T1207]  dump_stack_lvl+0x100/0x190
[ 1559.036787][ T1207]  should_fail_ex.cold+0x5/0xa
[ 1559.036816][ T1207]  should_failslab+0xc2/0x120
[ 1559.036849][ T1207]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1559.036881][ T1207]  ? do_getname+0x35/0x390
[ 1559.036919][ T1207]  do_getname+0x35/0x390
[ 1559.036951][ T1207]  do_sys_openat2+0xc7/0x1e0
[ 1559.036983][ T1207]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1559.037013][ T1207]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1559.037040][ T1207]  ? __fget_files+0x21f/0x3d0
[ 1559.037071][ T1207]  __x64_sys_openat+0x12d/0x210
[ 1559.037112][ T1207]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1559.037142][ T1207]  ? ksys_write+0x1ac/0x250
[ 1559.037177][ T1207]  do_syscall_64+0x121/0x770
[ 1559.037205][ T1207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.037229][ T1207] RIP: 0033:0x7f765f99e0d9
[ 1559.037249][ T1207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1559.037269][ T1207] RSP: 002b:00007f765dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1559.037292][ T1207] RAX: ffffffffffffffda RBX: 00007f765fc25fa0 RCX: 00007f765f99e0d9
[ 1559.037307][ T1207] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1559.037323][ T1207] RBP: 00007f765dbf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1559.037337][ T1207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1559.037350][ T1207] R13: 00007f765fc26038 R14: 00007f765fc25fa0 R15: 00007fff599a6b98
[ 1559.037383][ T1207]  </TASK>
[ 1561.133188][T13641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1561.144500][T13641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1561.161568][T13641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1561.170156][T13641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1561.178555][T13641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1563.278633][T20377] Bluetooth: hci5: command tx timeout
[ 1565.357730][T20377] Bluetooth: hci5: command tx timeout
[ 1566.411652][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1566.442550][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1566.467762][ T1234] bridge_slave_0: entered allmulticast mode
[ 1566.480983][ T1234] bridge_slave_0: entered promiscuous mode
[ 1566.526227][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1566.551565][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1566.572026][ T1234] bridge_slave_1: entered allmulticast mode
[ 1566.592378][ T1234] bridge_slave_1: entered promiscuous mode
[ 1566.724331][ T1234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1566.767175][ T1234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1566.874245][ T1234] team0: Port device team_slave_0 added
[ 1566.894855][ T1234] team0: Port device team_slave_1 added
[ 1566.928472][ T1323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3744'.
[ 1567.011524][ T1234] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1567.030694][ T1234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1567.129974][ T1234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1567.180787][ T1234] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1567.205016][ T1234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1567.257713][ T1234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1567.424034][ T1234] hsr_slave_0: entered promiscuous mode
[ 1567.432059][ T1234] hsr_slave_1: entered promiscuous mode
[ 1567.438298][T20377] Bluetooth: hci5: command tx timeout
[ 1569.259879][   T30] audit: type=1800 audit(4294968211.234:87): pid=1358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3748" name="members" dev="configfs" ino=316808 res=0 errno=0
[ 1569.518009][T20377] Bluetooth: hci5: command tx timeout
[ 1569.867000][ T1234] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1569.882746][ T1234] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1570.154250][ T1234] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1570.165710][ T1234] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1570.580948][ T1234] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1570.593090][ T1234] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1570.743585][ T1234] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1570.773118][ T1234] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1571.201341][ T1234] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1571.235241][ T1234] 8021q: adding VLAN 0 to HW filter on device team0
[ 1571.250544][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1571.257777][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1571.301244][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1571.308459][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1573.156290][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.365808][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.536925][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.595606][ T1414] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3756'.
[ 1573.726964][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1573.859058][ T1415] bonding: unable to delete non-existent )
[ 1573.904572][ T1422] bonding: no command found in bonding_masters - use +ifname or -ifname
[ 1573.930476][ T1234] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1575.012382][   T12] bridge_slave_1: left allmulticast mode
[ 1575.019172][   T12] bridge_slave_1: left promiscuous mode
[ 1575.027076][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1575.046145][   T12] bridge_slave_0: left allmulticast mode
[ 1575.077614][   T12] bridge_slave_0: left promiscuous mode
[ 1575.089847][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1575.283120][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1575.295273][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1575.305629][   T12] bond0 (unregistering): Released all slaves
[ 1576.421160][ T1234] veth0_vlan: entered promiscuous mode
[ 1576.619584][   T12] hsr_slave_0: left promiscuous mode
[ 1576.652205][   T12] hsr_slave_1: left promiscuous mode
[ 1576.676846][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1576.703905][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1576.736365][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1576.744332][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1576.785031][   T12] veth1_macvtap: left promiscuous mode
[ 1576.804061][   T12] veth0_macvtap: left promiscuous mode
[ 1576.820322][   T12] veth1_vlan: left promiscuous mode
[ 1576.830181][   T12] veth0_vlan: left promiscuous mode
[ 1577.091766][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1577.114772][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1577.303818][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1577.397319][ T1234] veth1_vlan: entered promiscuous mode
[ 1577.563887][ T1234] veth0_macvtap: entered promiscuous mode
[ 1577.614682][ T1234] veth1_macvtap: entered promiscuous mode
[ 1577.665714][ T1234] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1577.699592][ T1234] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1577.774677][ T9890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1577.798389][ T9890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1577.900855][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1577.944429][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1578.159111][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1578.282424][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1578.301299][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1578.402254][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1578.973336][ T1517] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1579.035482][ T1517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3735'.
[ 1579.119421][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1580.782709][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1582.226084][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1587.114132][   T30] audit: type=1800 audit(4294968229.084:88): pid=1707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3784" name="members" dev="configfs" ino=319752 res=0 errno=0
[ 1600.831236][T13641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1600.846499][T13641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1600.856350][T13641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1600.871116][T13641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1600.879369][T13641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1602.957806][T20377] Bluetooth: hci2: command tx timeout
[ 1605.014338][ T1976] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1605.021779][ T1976] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1605.029352][ T1976] bridge_slave_0: entered allmulticast mode
[ 1605.037275][ T1976] bridge_slave_0: entered promiscuous mode
[ 1605.043240][T20377] Bluetooth: hci2: command tx timeout
[ 1605.162193][ T1976] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1605.187979][ T1976] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1605.221691][ T1976] bridge_slave_1: entered allmulticast mode
[ 1605.251084][ T1976] bridge_slave_1: entered promiscuous mode
[ 1605.909281][ T1976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1605.934116][ T1976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1606.187215][ T1976] team0: Port device team_slave_0 added
[ 1606.220041][ T1976] team0: Port device team_slave_1 added
[ 1606.430181][ T1976] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1606.437482][ T1976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1606.464324][ T1976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1606.482147][ T1976] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1606.491410][ T1976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1606.518022][ T1976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1606.779943][ T1976] hsr_slave_0: entered promiscuous mode
[ 1606.791880][ T1976] hsr_slave_1: entered promiscuous mode
[ 1606.801225][ T1976] debugfs: 'hsr0' already exists in 'hsr'
[ 1606.806996][ T1976] Cannot create hsr debugfs directory
[ 1607.117756][T20377] Bluetooth: hci2: command tx timeout
[ 1607.360566][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.367005][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.382796][T31147] NFSD: Failed to start, no listeners configured.
[ 1608.901779][ T1976] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1608.931333][ T1976] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1608.939650][ T1976] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1608.955564][ T1976] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1608.967030][ T1976] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1608.981496][ T1976] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1608.990860][ T1976] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1609.004257][ T1976] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1609.197128][T20377] Bluetooth: hci2: command tx timeout
[ 1611.134279][ T1976] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1611.693772][ T1976] 8021q: adding VLAN 0 to HW filter on device team0
[ 1611.805800][ T9890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1611.813025][ T9890] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1611.851499][ T9890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1611.858722][ T9890] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1614.256375][ T1976] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1615.010880][ T1976] veth0_vlan: entered promiscuous mode
[ 1615.283541][ T1976] veth1_vlan: entered promiscuous mode
[ 1616.094323][ T2202] random: crng reseeded on system resumption
[ 1616.783324][ T1976] veth0_macvtap: entered promiscuous mode
[ 1616.815288][ T1976] veth1_macvtap: entered promiscuous mode
[ 1616.878924][ T1976] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1616.912311][ T1976] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1617.013852][ T1093] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1617.054964][ T1093] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1617.096986][ T1093] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1617.151886][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1617.169019][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1617.210040][T32691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1617.220567][T32691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1617.229423][ T1093] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1617.349084][T20377] Bluetooth: hci5: Unexpected cc 0x7c89 with no status
[ 1619.010717][ T2242] program syz.2.3850 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1624.223416][T20377] Bluetooth: hci2: Unexpected cc 0x7c89 with no status
[ 1626.830668][T20377] Bluetooth: hci4: Unexpected cc 0x7c89 with no status
[ 1629.909252][T20377] Bluetooth: hci2: Unexpected cc 0x7c89 with no status
[ 1635.765333][ T2545] FAULT_INJECTION: forcing a failure.
[ 1635.765333][ T2545] name failslab, interval 1, probability 0, space 0, times 0
[ 1635.851505][ T2545] CPU: 1 UID: 0 PID: 2545 Comm: syz.4.3896 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1635.851552][ T2545] Tainted: [L]=SOFTLOCKUP
[ 1635.851561][ T2545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1635.851575][ T2545] Call Trace:
[ 1635.851584][ T2545]  <TASK>
[ 1635.851593][ T2545]  dump_stack_lvl+0x100/0x190
[ 1635.851629][ T2545]  should_fail_ex.cold+0x5/0xa
[ 1635.851659][ T2545]  should_failslab+0xc2/0x120
[ 1635.851693][ T2545]  __kmalloc_cache_noprof+0x91/0x6b0
[ 1635.851721][ T2545]  ? proc_thread_self_get_link+0x1a6/0x210
[ 1635.851758][ T2545]  proc_thread_self_get_link+0x1a6/0x210
[ 1635.851790][ T2545]  pick_link+0xac2/0x13c0
[ 1635.851826][ T2545]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[ 1635.851860][ T2545]  step_into_slowpath+0x9ba/0xf90
[ 1635.851892][ T2545]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1635.851922][ T2545]  ? lookup_fast+0x2da/0x600
[ 1635.851942][ T2545]  ? inode_permission+0x374/0x620
[ 1635.851978][ T2545]  link_path_walk+0xf28/0x1cc0
[ 1635.852016][ T2545]  path_openat+0x1ac/0x2440
[ 1635.852048][ T2545]  ? __pfx_path_openat+0x10/0x10
[ 1635.852085][ T2545]  do_file_open+0x20e/0x430
[ 1635.852115][ T2545]  ? __pfx_do_file_open+0x10/0x10
[ 1635.852166][ T2545]  ? _raw_spin_unlock+0x28/0x50
[ 1635.852204][ T2545]  ? alloc_fd+0x471/0x7a0
[ 1635.852240][ T2545]  do_sys_openat2+0x10f/0x1e0
[ 1635.852273][ T2545]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1635.852306][ T2545]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1635.852341][ T2545]  __x64_sys_openat+0x12d/0x210
[ 1635.852374][ T2545]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1635.852405][ T2545]  ? ksys_write+0x1ac/0x250
[ 1635.852441][ T2545]  do_syscall_64+0x121/0x770
[ 1635.852470][ T2545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1635.852494][ T2545] RIP: 0033:0x7f8d1cb5e90e
[ 1635.852514][ T2545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1635.852544][ T2545] RSP: 002b:00007f8d1db22f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1635.852567][ T2545] RAX: ffffffffffffffda RBX: 00007f8d1db236c0 RCX: 00007f8d1cb5e90e
[ 1635.852583][ T2545] RDX: 0000000000000002 RSI: 00007f8d1cc3492b RDI: ffffffffffffff9c
[ 1635.852598][ T2545] RBP: 00007f8d1cc35024 R08: 0000000000000000 R09: 0000000000000000
[ 1635.852612][ T2545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1635.852625][ T2545] R13: 00007f8d1ce26128 R14: 00007f8d1ce26090 R15: 00007ffd1ab8c328
[ 1635.852659][ T2545]  </TASK>
[ 1635.970992][ T2545] FAULT_INJECTION: forcing a failure.
[ 1635.970992][ T2545] name failslab, interval 1, probability 0, space 0, times 0
[ 1636.211705][ T2545] CPU: 0 UID: 0 PID: 2545 Comm: syz.4.3896 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1636.211743][ T2545] Tainted: [L]=SOFTLOCKUP
[ 1636.211751][ T2545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1636.211764][ T2545] Call Trace:
[ 1636.211772][ T2545]  <TASK>
[ 1636.211781][ T2545]  dump_stack_lvl+0x100/0x190
[ 1636.211815][ T2545]  should_fail_ex.cold+0x5/0xa
[ 1636.211842][ T2545]  should_failslab+0xc2/0x120
[ 1636.211876][ T2545]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1636.211904][ T2545]  ? find_held_lock+0x2b/0x80
[ 1636.211937][ T2545]  ? vm_area_dup+0x27/0x8e0
[ 1636.211967][ T2545]  vm_area_dup+0x27/0x8e0
[ 1636.211993][ T2545]  __split_vma+0x18c/0xda0
[ 1636.212023][ T2545]  ? __pfx___split_vma+0x10/0x10
[ 1636.212065][ T2545]  vma_modify+0x1cf4/0x25c0
[ 1636.212102][ T2545]  ? hrtimer_start_range_ns_common+0x78e/0x18b0
[ 1636.212137][ T2545]  ? __pfx_vma_modify+0x10/0x10
[ 1636.212166][ T2545]  ? find_held_lock+0x2b/0x80
[ 1636.212214][ T2545]  vma_modify_flags+0x257/0x3d0
[ 1636.212242][ T2545]  ? __pfx_vma_modify_flags+0x10/0x10
[ 1636.212298][ T2545]  mlock_fixup+0x496/0xb50
[ 1636.212330][ T2545]  ? __pfx_mlock_fixup+0x10/0x10
[ 1636.212375][ T2545]  apply_vma_lock_flags+0x256/0x370
[ 1636.212407][ T2545]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1636.212435][ T2545]  ? __pfx___might_resched+0x10/0x10
[ 1636.212470][ T2545]  ? __pfx_down_write_killable+0x10/0x10
[ 1636.212508][ T2545]  do_mlock+0x261/0x7f0
[ 1636.212544][ T2545]  ? __fget_files+0x21f/0x3d0
[ 1636.212569][ T2545]  ? __pfx_do_mlock+0x10/0x10
[ 1636.212599][ T2545]  ? fput+0x7c/0x100
[ 1636.212626][ T2545]  ? ksys_write+0x1ac/0x250
[ 1636.212649][ T2545]  ? __pfx_ksys_write+0x10/0x10
[ 1636.212679][ T2545]  __x64_sys_mlock+0x59/0x80
[ 1636.212706][ T2545]  do_syscall_64+0x121/0x770
[ 1636.212734][ T2545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.212759][ T2545] RIP: 0033:0x7f8d1cb9e0d9
[ 1636.212779][ T2545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1636.212801][ T2545] RSP: 002b:00007f8d1db23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1636.212824][ T2545] RAX: ffffffffffffffda RBX: 00007f8d1ce26090 RCX: 00007f8d1cb9e0d9
[ 1636.212840][ T2545] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1636.212854][ T2545] RBP: 00007f8d1db23090 R08: 0000000000000000 R09: 0000000000000000
[ 1636.212867][ T2545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1636.212881][ T2545] R13: 00007f8d1ce26128 R14: 00007f8d1ce26090 R15: 00007ffd1ab8c328
[ 1636.212914][ T2545]  </TASK>
[ 1636.890372][ T2560] bridge0: port 3(veth1_macvtap) entered blocking state
[ 1636.925468][ T2560] bridge0: port 3(veth1_macvtap) entered disabled state
[ 1636.944441][ T2560] veth1_macvtap: entered allmulticast mode
[ 1636.968389][ T2560] veth1_macvtap: left allmulticast mode
[ 1645.226676][ T2734] __vm_enough_memory: pid: 2734, comm: syz.6.3922, bytes: 4398046457856 not enough memory for the allocation
[ 1650.394638][T13641] Bluetooth: hci3: command 0x0406 tx timeout
[ 1651.813831][   T30] audit: type=1800 audit(4294967341.674:89): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3936" name="members" dev="configfs" ino=330408 res=0 errno=0
[ 1655.943646][ T2940] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1656.905930][T20377] Bluetooth: hci4: ACL packet too small
[ 1657.038819][ T2976] FAULT_INJECTION: forcing a failure.
[ 1657.038819][ T2976] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1657.073737][ T2976] CPU: 0 UID: 0 PID: 2976 Comm: syz.4.3955 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1657.073775][ T2976] Tainted: [L]=SOFTLOCKUP
[ 1657.073784][ T2976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1657.073797][ T2976] Call Trace:
[ 1657.073805][ T2976]  <TASK>
[ 1657.073814][ T2976]  dump_stack_lvl+0x100/0x190
[ 1657.073852][ T2976]  should_fail_ex.cold+0x5/0xa
[ 1657.073882][ T2976]  _copy_from_iter+0x1f4/0x1690
[ 1657.073918][ T2976]  ? __pfx__copy_from_iter+0x10/0x10
[ 1657.073951][ T2976]  ? __pfx___might_resched+0x10/0x10
[ 1657.073978][ T2976]  ? kfree+0x1e5/0x6c0
[ 1657.074008][ T2976]  file_tty_write.isra.0+0x45b/0x890
[ 1657.074046][ T2976]  redirected_tty_write+0xd4/0x120
[ 1657.074072][ T2976]  vfs_write+0x6af/0x1050
[ 1657.074099][ T2976]  ? __pfx_redirected_tty_write+0x10/0x10
[ 1657.074127][ T2976]  ? __pfx_vfs_write+0x10/0x10
[ 1657.074149][ T2976]  ? find_held_lock+0x2b/0x80
[ 1657.074205][ T2976]  ksys_write+0x12a/0x250
[ 1657.074228][ T2976]  ? __pfx_ksys_write+0x10/0x10
[ 1657.074263][ T2976]  do_syscall_64+0x121/0x770
[ 1657.074294][ T2976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.074319][ T2976] RIP: 0033:0x7f8d1cb9e0d9
[ 1657.074339][ T2976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1657.074361][ T2976] RSP: 002b:00007f8d1dae1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1657.074383][ T2976] RAX: ffffffffffffffda RBX: 00007f8d1ce26270 RCX: 00007f8d1cb9e0d9
[ 1657.074399][ T2976] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000007
[ 1657.074414][ T2976] RBP: 00007f8d1dae1090 R08: 0000000000000000 R09: 0000000000000000
[ 1657.074427][ T2976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1657.074441][ T2976] R13: 00007f8d1ce26308 R14: 00007f8d1ce26270 R15: 00007ffd1ab8c328
[ 1657.074475][ T2976]  </TASK>
[ 1658.362138][ T2982] HfR: entered promiscuous mode
[ 1661.712022][T20377] Bluetooth: hci2: ACL packet too small
[ 1665.876002][ T3125] __vm_enough_memory: pid: 3125, comm: syz.2.3980, bytes: 4398046457856 not enough memory for the allocation
[ 1665.895991][ T3126] __vm_enough_memory: pid: 3126, comm: syz.2.3980, bytes: 4398046457856 not enough memory for the allocation
[ 1665.915748][   T30] audit: type=1800 audit(4294967355.774:90): pid=3125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3980" name="members" dev="configfs" ino=333386 res=0 errno=0
[ 1666.324064][ T3126] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1668.799107][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.805625][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.255425][   T30] audit: type=1800 audit(4294967359.114:91): pid=3189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3990" name="members" dev="configfs" ino=333653 res=0 errno=0
[ 1670.184936][ T3193] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[ 1670.728509][ T3202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1686.234280][T20377] Bluetooth: hci5: command 0x0406 tx timeout
[ 1694.789940][ T3562] random: crng reseeded on system resumption
[ 1700.013240][ T3636] FAULT_INJECTION: forcing a failure.
[ 1700.013240][ T3636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1700.149396][ T3636] CPU: 1 UID: 0 PID: 3636 Comm: syz.2.4051 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1700.149434][ T3636] Tainted: [L]=SOFTLOCKUP
[ 1700.149442][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1700.149456][ T3636] Call Trace:
[ 1700.149464][ T3636]  <TASK>
[ 1700.149473][ T3636]  dump_stack_lvl+0x100/0x190
[ 1700.149508][ T3636]  should_fail_ex.cold+0x5/0xa
[ 1700.149537][ T3636]  _copy_to_user+0x32/0xd0
[ 1700.149563][ T3636]  simple_read_from_buffer+0xcb/0x170
[ 1700.149592][ T3636]  proc_fail_nth_read+0x1af/0x230
[ 1700.149619][ T3636]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1700.149646][ T3636]  ? rw_verify_area+0xce/0x6d0
[ 1700.149678][ T3636]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1700.149703][ T3636]  vfs_read+0x1e4/0xb40
[ 1700.149731][ T3636]  ? __pfx_vfs_read+0x10/0x10
[ 1700.149752][ T3636]  ? find_held_lock+0x2b/0x80
[ 1700.149785][ T3636]  ? __fget_files+0x215/0x3d0
[ 1700.149821][ T3636]  ? __fget_files+0x21f/0x3d0
[ 1700.149856][ T3636]  ksys_read+0x12a/0x250
[ 1700.149880][ T3636]  ? __pfx_ksys_read+0x10/0x10
[ 1700.149913][ T3636]  do_syscall_64+0x121/0x770
[ 1700.149941][ T3636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1700.149966][ T3636] RIP: 0033:0x7f765f95e90e
[ 1700.149986][ T3636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1700.150009][ T3636] RSP: 002b:00007f765db71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1700.150031][ T3636] RAX: ffffffffffffffda RBX: 00007f765db726c0 RCX: 00007f765f95e90e
[ 1700.150046][ T3636] RDX: 000000000000000f RSI: 00007f765db720a0 RDI: 0000000000000004
[ 1700.150068][ T3636] RBP: 00007f765db72090 R08: 0000000000000000 R09: 0000000000000000
[ 1700.150082][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1700.150096][ T3636] R13: 00007f765fc263f8 R14: 00007f765fc26360 R15: 00007fff599a6b98
[ 1700.150129][ T3636]  </TASK>
[ 1706.890510][ T3753] FAULT_INJECTION: forcing a failure.
[ 1706.890510][ T3753] name failslab, interval 1, probability 0, space 0, times 0
[ 1706.909453][ T3753] CPU: 1 UID: 0 PID: 3753 Comm: syz.4.4073 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1706.909489][ T3753] Tainted: [L]=SOFTLOCKUP
[ 1706.909498][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1706.909512][ T3753] Call Trace:
[ 1706.909520][ T3753]  <TASK>
[ 1706.909536][ T3753]  dump_stack_lvl+0x100/0x190
[ 1706.909571][ T3753]  should_fail_ex.cold+0x5/0xa
[ 1706.909599][ T3753]  should_failslab+0xc2/0x120
[ 1706.909632][ T3753]  __kmalloc_noprof+0xfc/0x820
[ 1706.909661][ T3753]  ? aa_file_perm+0x7f3/0x14d0
[ 1706.909695][ T3753]  ? mtd_kmalloc_up_to+0x152/0x190
[ 1706.909825][ T3753]  mtd_kmalloc_up_to+0x152/0x190
[ 1706.909851][ T3753]  mtdchar_write+0x195/0x5d0
[ 1706.909886][ T3753]  ? __pfx_mtdchar_write+0x10/0x10
[ 1706.909915][ T3753]  ? __pfx___might_resched+0x10/0x10
[ 1706.909940][ T3753]  ? get_pid_task+0xfc/0x250
[ 1706.909982][ T3753]  ? apparmor_file_permission+0x13f/0x1c0
[ 1706.910010][ T3753]  ? bpf_lsm_file_permission+0x9/0x10
[ 1706.910043][ T3753]  ? security_file_permission+0x76/0x210
[ 1706.910109][ T3753]  ? rw_verify_area+0xce/0x6d0
[ 1706.910146][ T3753]  vfs_write+0x2aa/0x1050
[ 1706.910171][ T3753]  ? __pfx_mtdchar_write+0x10/0x10
[ 1706.910205][ T3753]  ? __pfx_vfs_write+0x10/0x10
[ 1706.910226][ T3753]  ? find_held_lock+0x2b/0x80
[ 1706.910258][ T3753]  ? __fget_files+0x215/0x3d0
[ 1706.910282][ T3753]  ? __fget_files+0x215/0x3d0
[ 1706.910312][ T3753]  ? __fget_files+0x21f/0x3d0
[ 1706.910346][ T3753]  ksys_write+0x12a/0x250
[ 1706.910370][ T3753]  ? __pfx_ksys_write+0x10/0x10
[ 1706.910403][ T3753]  do_syscall_64+0x121/0x770
[ 1706.910431][ T3753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.910456][ T3753] RIP: 0033:0x7f8d1cb9e0d9
[ 1706.910477][ T3753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1706.910498][ T3753] RSP: 002b:00007f8d1db44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1706.910520][ T3753] RAX: ffffffffffffffda RBX: 00007f8d1ce25fa0 RCX: 00007f8d1cb9e0d9
[ 1706.910543][ T3753] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003
[ 1706.910557][ T3753] RBP: 00007f8d1db44090 R08: 0000000000000000 R09: 0000000000000000
[ 1706.910571][ T3753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1706.910585][ T3753] R13: 00007f8d1ce26038 R14: 00007f8d1ce25fa0 R15: 00007ffd1ab8c328
[ 1706.910617][ T3753]  </TASK>
[ 1709.659641][ T3816] FAULT_INJECTION: forcing a failure.
[ 1709.659641][ T3816] name failslab, interval 1, probability 0, space 0, times 0
[ 1709.672526][ T3816] CPU: 0 UID: 0 PID: 3816 Comm: syz.5.4083 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1709.672562][ T3816] Tainted: [L]=SOFTLOCKUP
[ 1709.672570][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1709.672583][ T3816] Call Trace:
[ 1709.672591][ T3816]  <TASK>
[ 1709.672600][ T3816]  dump_stack_lvl+0x100/0x190
[ 1709.672626][ T3816]  should_fail_ex.cold+0x5/0xa
[ 1709.672644][ T3816]  should_failslab+0xc2/0x120
[ 1709.672664][ T3816]  __kmalloc_noprof+0xfc/0x820
[ 1709.672682][ T3816]  ? rcu_is_watching+0x13/0xc0
[ 1709.672702][ T3816]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1709.672726][ T3816]  tomoyo_realpath_from_path+0xb6/0x690
[ 1709.672751][ T3816]  tomoyo_path_number_perm+0x23c/0x580
[ 1709.672767][ T3816]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1709.672785][ T3816]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1709.672820][ T3816]  ? find_held_lock+0x2b/0x80
[ 1709.672840][ T3816]  ? hook_file_ioctl_common+0x140/0x440
[ 1709.672863][ T3816]  ? __fget_files+0x21f/0x3d0
[ 1709.672881][ T3816]  security_file_ioctl+0xd3/0x230
[ 1709.672906][ T3816]  __x64_sys_ioctl+0xb7/0x210
[ 1709.672929][ T3816]  do_syscall_64+0x121/0x770
[ 1709.672946][ T3816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1709.672961][ T3816] RIP: 0033:0x7f2058f9e0d9
[ 1709.672973][ T3816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1709.672986][ T3816] RSP: 002b:00007f2059e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1709.672999][ T3816] RAX: ffffffffffffffda RBX: 00007f2059225fa0 RCX: 00007f2058f9e0d9
[ 1709.673009][ T3816] RDX: 0000000000000000 RSI: 00000000c018620b RDI: 0000000000000003
[ 1709.673018][ T3816] RBP: 00007f2059e24090 R08: 0000000000000000 R09: 0000000000000000
[ 1709.673025][ T3816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1709.673033][ T3816] R13: 00007f2059226038 R14: 00007f2059225fa0 R15: 00007ffc515f89d8
[ 1709.673051][ T3816]  </TASK>
[ 1709.673067][ T3816] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1710.042313][ T3819] binder: 3817:3819 ioctl c018620b 0 returned -14
[ 1723.089080][   T47] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1723.288115][   T47] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1723.556674][T20377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1723.569191][T20377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1723.577036][T20377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1723.587427][T20377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1723.595450][T20377] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1723.627511][   T47] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1723.865221][ T4028] FAULT_INJECTION: forcing a failure.
[ 1723.865221][ T4028] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.004326][ T4028] CPU: 0 UID: 0 PID: 4028 Comm: syz.2.4116 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1724.004365][ T4028] Tainted: [L]=SOFTLOCKUP
[ 1724.004374][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1724.004387][ T4028] Call Trace:
[ 1724.004396][ T4028]  <TASK>
[ 1724.004405][ T4028]  dump_stack_lvl+0x100/0x190
[ 1724.004441][ T4028]  should_fail_ex.cold+0x5/0xa
[ 1724.004470][ T4028]  should_failslab+0xc2/0x120
[ 1724.004504][ T4028]  __kmalloc_cache_noprof+0x91/0x6b0
[ 1724.004532][ T4028]  ? proc_thread_self_get_link+0x1a6/0x210
[ 1724.004568][ T4028]  proc_thread_self_get_link+0x1a6/0x210
[ 1724.004599][ T4028]  pick_link+0xac2/0x13c0
[ 1724.004635][ T4028]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[ 1724.004670][ T4028]  step_into_slowpath+0x9ba/0xf90
[ 1724.004701][ T4028]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1724.004731][ T4028]  ? lookup_fast+0x2da/0x600
[ 1724.004750][ T4028]  ? inode_permission+0x374/0x620
[ 1724.004786][ T4028]  link_path_walk+0xf28/0x1cc0
[ 1724.004822][ T4028]  path_openat+0x1ac/0x2440
[ 1724.004858][ T4028]  ? __pfx_path_openat+0x10/0x10
[ 1724.004896][ T4028]  do_file_open+0x20e/0x430
[ 1724.004926][ T4028]  ? __pfx_do_file_open+0x10/0x10
[ 1724.004979][ T4028]  ? _raw_spin_unlock+0x28/0x50
[ 1724.005012][ T4028]  ? alloc_fd+0x471/0x7a0
[ 1724.005049][ T4028]  do_sys_openat2+0x10f/0x1e0
[ 1724.005082][ T4028]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1724.005114][ T4028]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1724.005150][ T4028]  __x64_sys_openat+0x12d/0x210
[ 1724.005183][ T4028]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1724.005228][ T4028]  do_syscall_64+0x121/0x770
[ 1724.005257][ T4028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1724.005282][ T4028] RIP: 0033:0x7f765f95e90e
[ 1724.005303][ T4028] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1724.005331][ T4028] RSP: 002b:00007f765dbd4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1724.005355][ T4028] RAX: ffffffffffffffda RBX: 00007f765dbd56c0 RCX: 00007f765f95e90e
[ 1724.005371][ T4028] RDX: 0000000000000002 RSI: 00007f765fa3492b RDI: ffffffffffffff9c
[ 1724.005385][ T4028] RBP: 00007f765fa35024 R08: 0000000000000000 R09: 0000000000000000
[ 1724.005399][ T4028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1724.005413][ T4028] R13: 00007f765fc26128 R14: 00007f765fc26090 R15: 00007fff599a6b98
[ 1724.005447][ T4028]  </TASK>
[ 1724.513617][ T4028] FAULT_INJECTION: forcing a failure.
[ 1724.513617][ T4028] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.534405][ T4028] CPU: 1 UID: 0 PID: 4028 Comm: syz.2.4116 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1724.534444][ T4028] Tainted: [L]=SOFTLOCKUP
[ 1724.534452][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1724.534466][ T4028] Call Trace:
[ 1724.534474][ T4028]  <TASK>
[ 1724.534483][ T4028]  dump_stack_lvl+0x100/0x190
[ 1724.534519][ T4028]  should_fail_ex.cold+0x5/0xa
[ 1724.534548][ T4028]  should_failslab+0xc2/0x120
[ 1724.534581][ T4028]  kmem_cache_alloc_noprof+0x91/0x6a0
[ 1724.534611][ T4028]  ? find_held_lock+0x2b/0x80
[ 1724.534644][ T4028]  ? vm_area_dup+0x27/0x8e0
[ 1724.534675][ T4028]  vm_area_dup+0x27/0x8e0
[ 1724.534702][ T4028]  __split_vma+0x18c/0xda0
[ 1724.534732][ T4028]  ? __pfx___split_vma+0x10/0x10
[ 1724.534777][ T4028]  vma_modify+0x1cf4/0x25c0
[ 1724.534814][ T4028]  ? hrtimer_start_range_ns_common+0x78e/0x18b0
[ 1724.534849][ T4028]  ? __pfx_vma_modify+0x10/0x10
[ 1724.534878][ T4028]  ? find_held_lock+0x2b/0x80
[ 1724.534933][ T4028]  vma_modify_flags+0x257/0x3d0
[ 1724.534962][ T4028]  ? __pfx_vma_modify_flags+0x10/0x10
[ 1724.535019][ T4028]  mlock_fixup+0x496/0xb50
[ 1724.535051][ T4028]  ? __pfx_mlock_fixup+0x10/0x10
[ 1724.535096][ T4028]  apply_vma_lock_flags+0x256/0x370
[ 1724.535127][ T4028]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[ 1724.535154][ T4028]  ? __pfx___might_resched+0x10/0x10
[ 1724.535189][ T4028]  ? __pfx_down_write_killable+0x10/0x10
[ 1724.535227][ T4028]  do_mlock+0x261/0x7f0
[ 1724.535256][ T4028]  ? __fget_files+0x21f/0x3d0
[ 1724.535282][ T4028]  ? __pfx_do_mlock+0x10/0x10
[ 1724.535311][ T4028]  ? fput+0x7c/0x100
[ 1724.535339][ T4028]  ? ksys_write+0x1ac/0x250
[ 1724.535362][ T4028]  ? __pfx_ksys_write+0x10/0x10
[ 1724.535395][ T4028]  __x64_sys_mlock+0x59/0x80
[ 1724.535422][ T4028]  do_syscall_64+0x121/0x770
[ 1724.535450][ T4028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1724.535475][ T4028] RIP: 0033:0x7f765f99e0d9
[ 1724.535495][ T4028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1724.535518][ T4028] RSP: 002b:00007f765dbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1724.535541][ T4028] RAX: ffffffffffffffda RBX: 00007f765fc26090 RCX: 00007f765f99e0d9
[ 1724.535557][ T4028] RDX: 0000000000000000 RSI: 0000000000007fff RDI: 0000000000007c88
[ 1724.535571][ T4028] RBP: 00007f765dbd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1724.535585][ T4028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1724.535599][ T4028] R13: 00007f765fc26128 R14: 00007f765fc26090 R15: 00007fff599a6b98
[ 1724.535634][ T4028]  </TASK>
[ 1724.825677][   T47] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1725.516709][ T4044] FAULT_INJECTION: forcing a failure.
[ 1725.516709][ T4044] name failslab, interval 1, probability 0, space 0, times 0
[ 1725.573438][ T4044] CPU: 0 UID: 0 PID: 4044 Comm: syz.2.4117 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1725.573476][ T4044] Tainted: [L]=SOFTLOCKUP
[ 1725.573486][ T4044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1725.573499][ T4044] Call Trace:
[ 1725.573508][ T4044]  <TASK>
[ 1725.573517][ T4044]  dump_stack_lvl+0x100/0x190
[ 1725.573554][ T4044]  should_fail_ex.cold+0x5/0xa
[ 1725.573585][ T4044]  should_failslab+0xc2/0x120
[ 1725.573620][ T4044]  __kmalloc_cache_noprof+0x91/0x6b0
[ 1725.573649][ T4044]  ? proc_thread_self_get_link+0x1a6/0x210
[ 1725.573685][ T4044]  proc_thread_self_get_link+0x1a6/0x210
[ 1725.573717][ T4044]  pick_link+0xac2/0x13c0
[ 1725.573753][ T4044]  ? __pfx_proc_thread_self_get_link+0x10/0x10
[ 1725.573788][ T4044]  step_into_slowpath+0x9ba/0xf90
[ 1725.573820][ T4044]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1725.573849][ T4044]  ? lookup_fast+0x2da/0x600
[ 1725.573869][ T4044]  ? inode_permission+0x374/0x620
[ 1725.573907][ T4044]  link_path_walk+0xf28/0x1cc0
[ 1725.573944][ T4044]  path_openat+0x1ac/0x2440
[ 1725.573977][ T4044]  ? __pfx_path_openat+0x10/0x10
[ 1725.574016][ T4044]  do_file_open+0x20e/0x430
[ 1725.574047][ T4044]  ? __pfx_do_file_open+0x10/0x10
[ 1725.574101][ T4044]  ? _raw_spin_unlock+0x28/0x50
[ 1725.574134][ T4044]  ? alloc_fd+0x471/0x7a0
[ 1725.574172][ T4044]  do_sys_openat2+0x10f/0x1e0
[ 1725.574206][ T4044]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1725.574240][ T4044]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1725.574277][ T4044]  __x64_sys_openat+0x12d/0x210
[ 1725.574311][ T4044]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1725.574367][ T4044]  do_syscall_64+0x121/0x770
[ 1725.574396][ T4044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1725.574423][ T4044] RIP: 0033:0x7f765f99e0d9
[ 1725.574444][ T4044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1725.574467][ T4044] RSP: 002b:00007f765dbb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1725.574492][ T4044] RAX: ffffffffffffffda RBX: 00007f765fc26180 RCX: 00007f765f99e0d9
[ 1725.574509][ T4044] RDX: 00000000000aa102 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1725.574526][ T4044] RBP: 00007f765fa35024 R08: 0000000000000000 R09: 0000000000000000
[ 1725.574542][ T4044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1725.574556][ T4044] R13: 00007f765fc26218 R14: 00007f765fc26180 R15: 00007fff599a6b98
[ 1725.574591][ T4044]  </TASK>
[ 1725.884387][T20377] Bluetooth: hci2: command tx timeout
[ 1726.184957][   T47] bridge_slave_1: left allmulticast mode
[ 1726.210478][   T47] bridge_slave_1: left promiscuous mode
[ 1726.236352][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1726.276481][   T47] bridge_slave_0: left allmulticast mode
[ 1726.298306][   T47] bridge_slave_0: left promiscuous mode
[ 1726.315205][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1726.751646][ T4065] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4121'.
[ 1726.847613][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1726.872645][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1726.915972][   T47] bond0 (unregistering): Released all slaves
[ 1727.000027][   T47] HfR: left promiscuous mode
[ 1727.730359][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1727.913878][T20377] Bluetooth: hci2: command tx timeout
[ 1728.056947][   T47] hsr_slave_0: left promiscuous mode
[ 1728.087246][   T47] hsr_slave_1: left promiscuous mode
[ 1728.093528][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1728.100922][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1728.145422][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1728.162615][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1728.189286][   T47] veth1_macvtap: left promiscuous mode
[ 1728.203571][   T47] veth0_macvtap: left promiscuous mode
[ 1728.213625][   T47] veth1_vlan: left promiscuous mode
[ 1728.224814][   T47] veth0_vlan: left promiscuous mode
[ 1728.730789][   T47] team0 (unregistering): Port device team_slave_1 removed
[ 1728.759721][   T47] team0 (unregistering): Port device team_slave_0 removed
[ 1729.994668][T20377] Bluetooth: hci2: command tx timeout
[ 1730.236892][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.243273][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.568312][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1731.000851][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1731.010919][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1731.018747][ T4025] bridge_slave_0: entered allmulticast mode
[ 1731.026919][ T4025] bridge_slave_0: entered promiscuous mode
[ 1731.040468][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1731.053555][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1731.062359][ T4025] bridge_slave_1: entered allmulticast mode
[ 1731.072656][ T4025] bridge_slave_1: entered promiscuous mode
[ 1731.366053][ T4138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4129'.
[ 1731.675471][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1731.712327][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1732.068461][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1732.073518][T20377] Bluetooth: hci2: command tx timeout
[ 1732.226512][ T4025] team0: Port device team_slave_0 added
[ 1732.250498][ T4025] team0: Port device team_slave_1 added
[ 1732.749441][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1732.763784][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1732.823964][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1732.860875][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1732.884527][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1732.943497][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1733.500572][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1733.711554][ T4025] hsr_slave_0: entered promiscuous mode
[ 1733.742187][ T4025] hsr_slave_1: entered promiscuous mode
[ 1733.766951][ T4025] debugfs: 'hsr0' already exists in 'hsr'
[ 1733.783239][ T4025] Cannot create hsr debugfs directory
[ 1734.074068][   T31] INFO: task syz.0.3775:1660 blocked for more than 143 seconds.
[ 1734.090436][   T31]       Tainted: G             L      syzkaller #0
[ 1734.103250][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1734.112545][   T31] task:syz.0.3775      state:D stack:27320 pid:1660  tgid:1657  ppid:27609  task_flags:0x400140 flags:0x00080002
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1734.125389][   T31] Call Trace:
[ 1734.133713][   T31]  <TASK>
[ 1734.139019][   T31]  __schedule+0x125c/0x6740
[ 1734.147559][   T31]  ? __lock_acquire+0x4c5/0x1ec0
[ 1734.160706][   T31]  ? __pfx___schedule+0x10/0x10
[ 1734.169779][   T31]  ? find_held_lock+0x2b/0x80
[ 1734.180759][   T31]  ? schedule+0x225/0x2c0
[ 1734.185498][   T31]  schedule+0xdd/0x2c0
[ 1734.192051][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1734.202053][   T31]  __mutex_lock+0xcbf/0x1bc0
[ 1734.209964][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1734.220086][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1734.226476][   T31]  ? net_generic+0xea/0x2a0
[ 1734.232116][   T31]  ? net_generic+0xea/0x2a0
[ 1734.244724][   T31]  ? nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1734.250628][   T31]  nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1734.257170][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[ 1734.262828][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1734.271347][   T31]  ? genl_get_cmd+0x3e7/0x760
[ 1734.276391][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 1734.285284][   T31]  ? security_capable+0x80/0x260
[ 1734.290333][   T31]  genl_rcv_msg+0x560/0x800
[ 1734.303522][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1734.315152][   T31]  ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10
[ 1734.326444][   T31]  netlink_rcv_skb+0x159/0x420
[ 1734.334592][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1734.343739][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1734.354341][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[ 1734.366436][   T31]  genl_rcv+0x28/0x40
[ 1734.387980][   T31]  netlink_unicast+0x585/0x850
[ 1734.404500][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1734.419454][   T31]  netlink_sendmsg+0x8b0/0xda0
[ 1734.432416][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1734.449770][   T31]  ? apparmor_socket_sendmsg+0x15b/0x270
[ 1734.465630][   T31]  ____sys_sendmsg+0xa4d/0xbe0
[ 1734.478479][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1734.498448][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1734.512284][   T31]  ___sys_sendmsg+0x190/0x1e0
[ 1734.523539][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1734.528900][   T31]  ? futex_wait+0x11e/0x370
[ 1734.534587][   T31]  ? find_held_lock+0x2b/0x80
[ 1734.539454][   T31]  __sys_sendmsg+0x160/0x210
[ 1734.544772][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1734.550045][   T31]  do_syscall_64+0x121/0x770
[ 1734.555069][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1734.561111][   T31] RIP: 0033:0x7f4e6099e0d9
[ 1734.566030][   T31] RSP: 002b:00007f4e61897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1734.574829][   T31] RAX: ffffffffffffffda RBX: 00007f4e60c25fa0 RCX: 00007f4e6099e0d9
[ 1734.582901][   T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000004
[ 1734.593211][   T31] RBP: 00007f4e60a35024 R08: 0000000000000000 R09: 0000000000000000
[ 1734.601896][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1734.610423][   T31] R13: 00007f4e60c26038 R14: 00007f4e60c25fa0 R15: 00007ffdcfae5288
[ 1734.622190][   T31]  </TASK>
[ 1734.630489][   T31] 
[ 1734.630489][   T31] Showing all locks held in the system:
[ 1734.645019][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[ 1734.656446][   T31]  #0: ffffffff8ede98c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1734.671582][   T31] locks held by dhcpcd/5272: 1, on CPU#0:
[ 1734.684707][   T31]  #0: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4a6/0x1bb0
[ 1734.711444][   T31] locks held by syz-executor/5596: 2, last CPU#1:
[ 1734.743489][   T31]  #0: ffff888036a836b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00
[ 1734.754092][   T31]  #1: ffffffff8ede98c0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[ 1734.766185][   T31] locks held by syz.1.3385/31147: 2, on CPU#1:
[ 1734.772363][   T31]  #0: ffffffff90d5e5e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1734.780649][   T31]  #1: ffffffff8f27d4e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1734.790817][   T31] locks held by syz-executor/31371: 2, last CPU#0:
[ 1734.811880][   T31]  #0: ffff88807efd29f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[ 1734.838397][   T31]  #1: ffff8880b843ba20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1734.859247][   T31] locks held by syz-executor/31381: 3, last CPU#0:
[ 1734.877385][   T31]  #0: ffff88807efd1078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00
[ 1734.891813][   T31]  #1: ffff8880b8424568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6740
[ 1734.901264][   T31]  #2: ffff888036c840d8 (&sighand->siglock){..-.}-{3:3}, at: lock_task_sighand+0xc2/0x340
[ 1734.911280][   T31] locks held by syz.0.3775/1660: 2, on CPU#0:
[ 1734.917399][   T31]  #0: ffffffff90d5e5e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1734.925631][   T31]  #1: ffffffff8f27d4e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100
[ 1734.935780][   T31] locks held by syz-executor/4025: 2, on CPU#0:
[ 1734.942004][   T31]  #0: ffffffff90030ba8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0
[ 1734.951906][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620
[ 1734.961288][   T31] locks held by syz.4.4127/4155: 2, on CPU#0:
[ 1734.967425][   T31]  #0: ffffffff90c96648 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1734.976962][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x15/0xa0
[ 1734.986864][   T31] locks held by syz.2.4132/4180: 3, on CPU#0:
[ 1734.992932][   T31]  #0: ffffffff90c96648 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1735.002991][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[ 1735.012211][   T31]  #2: ffffffff8edf5368 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1735.022290][   T31] locks held by syz.2.4132/4182: 2, on CPU#0:
[ 1735.028374][   T31]  #0: ffffffff90c96648 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1735.038015][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[ 1735.047271][   T31] locks held by syz.2.4132/4184: 2, on CPU#0:
[ 1735.053358][   T31]  #0: ffffffff90c96648 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1735.062808][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0
[ 1735.071962][   T31] locks held by syz.5.4133/4190: 2, on CPU#0:
[ 1735.078059][   T31]  #0: ffffffff90c96648 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1735.087523][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780
[ 1735.097178][   T31] locks held by syz.5.4133/4191: 2, on CPU#0:
[ 1735.104037][   T31]  #0: ffffffff90c96648 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1735.113648][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780
[ 1735.123186][   T31] locks held by syz.5.4133/4192: 2, on CPU#0:
[ 1735.129373][   T31]  #0: ffffffff90c96648 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1735.138854][   T31]  #1: ffffffff90caf140 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780
[ 1735.148358][   T31] locks held by dhcpcd/4196: 2, on CPU#0:
[ 1735.154141][   T31]  #0: ffff888034180260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50
[ 1735.163929][   T31]  #1: ffffffff8edf5368 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1735.174101][   T31] 
[ 1735.176453][   T31] =============================================
[ 1735.176453][   T31] 
[ 1735.184992][   T31] NMI backtrace for cpu 1
[ 1735.185012][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1735.185045][   T31] Tainted: [L]=SOFTLOCKUP
[ 1735.185053][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1735.185074][   T31] Call Trace:
[ 1735.185082][   T31]  <TASK>
[ 1735.185091][   T31]  dump_stack_lvl+0x100/0x190
[ 1735.185124][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1735.185155][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1735.185202][   T31]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[ 1735.185238][   T31]  sys_info+0x141/0x190
[ 1735.185264][   T31]  watchdog+0xcb1/0x1030
[ 1735.185293][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1735.185324][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1735.185346][   T31]  ? __kthread_parkme+0x18f/0x230
[ 1735.185373][   T31]  ? kthread+0x13a/0x450
[ 1735.185400][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1735.185418][   T31]  kthread+0x373/0x450
[ 1735.185446][   T31]  ? __pfx_kthread+0x10/0x10
[ 1735.185477][   T31]  ret_from_fork+0x730/0xd60
[ 1735.185502][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1735.185526][   T31]  ? __switch_to+0x800/0x10f0
[ 1735.185542][   T31]  ? __switch_to_asm+0x39/0x70
[ 1735.185566][   T31]  ? __pfx_kthread+0x10/0x10
[ 1735.185594][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1735.185629][   T31]  </TASK>
[ 1735.185636][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1735.323538][    C0] NMI backtrace for cpu 0
[ 1735.323569][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1735.323602][    C0] Tainted: [L]=SOFTLOCKUP
[ 1735.323611][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1735.323624][    C0] RIP: 0010:kernel_text_address+0x5f/0x100
[ 1735.323653][    C0] Code: 85 c0 75 e5 48 c7 c0 84 d4 42 91 48 ba 00 00 00 00 00 fc ff df 48 89 c1 83 e0 07 48 c1 e9 03 83 c0 03 0f b6 14 11 38 d0 7c 08 <84> d2 0f 85 85 00 00 00 83 3d 96 d3 71 0f 01 76 2a e8 5b 30 1d 00
[ 1735.323675][    C0] RSP: 0018:ffffc900000077e8 EFLAGS: 00000002
[ 1735.323694][    C0] RAX: 0000000000000007 RBX: ffffffff92d1b704 RCX: 1ffffffff2285a90
[ 1735.323709][    C0] RDX: 0000000000000000 RSI: ffffffff81760618 RDI: ffffffff8ea91500
[ 1735.323725][    C0] RBP: ffffc90000007870 R08: 0000000000000007 R09: ffffffffff600000
[ 1735.323740][    C0] R10: ffffffff92d1b000 R11: 0000000000000001 R12: ffffffff81f43cb0
[ 1735.323756][    C0] R13: ffffc900000078e8 R14: 0000000000000000 R15: ffffffff8ea91500
[ 1735.323771][    C0] FS:  0000000000000000(0000) GS:ffff888123bbd000(0000) knlGS:0000000000000000
[ 1735.323794][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1735.323809][    C0] CR2: 00007fff026d6500 CR3: 000000007f274000 CR4: 00000000003526f0
[ 1735.323825][    C0] Call Trace:
[ 1735.323832][    C0]  <IRQ>
[ 1735.323840][    C0]  ? x86_64_start_reservations+0x24/0x30
[ 1735.323992][    C0]  __kernel_text_address+0xd/0x30
[ 1735.324015][    C0]  unwind_get_return_address+0x59/0xa0
[ 1735.324039][    C0]  arch_stack_walk+0xa6/0xf0
[ 1735.324134][    C0]  ? x86_64_start_reservations+0x24/0x30
[ 1735.324173][    C0]  stack_trace_save+0x8e/0xc0
[ 1735.324196][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1735.324233][    C0]  ? __lock_acquire+0x4c5/0x1ec0
[ 1735.324258][    C0]  kasan_save_stack+0x30/0x50
[ 1735.324287][    C0]  ? kasan_save_stack+0x30/0x50
[ 1735.324314][    C0]  ? kasan_record_aux_stack+0xa7/0xc0
[ 1735.324336][    C0]  ? insert_work+0x36/0x230
[ 1735.324368][    C0]  ? __queue_work+0x9bc/0x12b0
[ 1735.324388][    C0]  ? call_timer_fn+0x198/0x5f0
[ 1735.324408][    C0]  ? __run_timers+0x570/0xb00
[ 1735.324430][    C0]  ? run_timer_base+0x114/0x190
[ 1735.324452][    C0]  ? run_timer_softirq+0x1a/0x50
[ 1735.324475][    C0]  ? handle_softirqs+0x1e6/0x9d0
[ 1735.324502][    C0]  ? __irq_exit_rcu+0x194/0x210
[ 1735.324528][    C0]  ? irq_exit_rcu+0x9/0x30
[ 1735.324563][    C0]  ? sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1735.324598][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1735.324623][    C0]  ? pv_native_safe_halt+0xf/0x20
[ 1735.324643][    C0]  ? default_idle+0x9/0x10
[ 1735.324666][    C0]  ? default_idle_call+0x6c/0xb0
[ 1735.324691][    C0]  ? do_idle+0x3ae/0x5b0
[ 1735.324717][    C0]  ? cpu_startup_entry+0x4f/0x60
[ 1735.324745][    C0]  ? rest_init+0x2d3/0x2e0
[ 1735.324771][    C0]  ? start_kernel+0x48e/0x490
[ 1735.324818][    C0]  kasan_record_aux_stack+0xa7/0xc0
[ 1735.324841][    C0]  insert_work+0x36/0x230
[ 1735.324871][    C0]  ? rcu_is_watching+0x13/0xc0
[ 1735.324909][    C0]  __queue_work+0x9bc/0x12b0
[ 1735.324935][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1735.324958][    C0]  call_timer_fn+0x198/0x5f0
[ 1735.324980][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1735.325004][    C0]  ? __run_timers+0x560/0xb00
[ 1735.325026][    C0]  ? __run_timers+0x560/0xb00
[ 1735.325051][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1735.325074][    C0]  __run_timers+0x570/0xb00
[ 1735.325101][    C0]  ? __pfx___run_timers+0x10/0x10
[ 1735.325131][    C0]  ? _raw_spin_lock_irq+0x45/0x50
[ 1735.325166][    C0]  run_timer_base+0x114/0x190
[ 1735.325189][    C0]  ? __pfx_run_timer_base+0x10/0x10
[ 1735.325215][    C0]  run_timer_softirq+0x1a/0x50
[ 1735.325238][    C0]  handle_softirqs+0x1e6/0x9d0
[ 1735.325268][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1735.325295][    C0]  ? _raw_spin_unlock+0x28/0x50
[ 1735.325326][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[ 1735.325360][    C0]  __irq_exit_rcu+0x194/0x210
[ 1735.325388][    C0]  irq_exit_rcu+0x9/0x30
[ 1735.325414][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1735.325448][    C0]  </IRQ>
[ 1735.325455][    C0]  <TASK>
[ 1735.325463][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1735.325488][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1735.325511][    C0] Code: a8 a8 02 e9 03 4d 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 e1 2a 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1735.325548][    C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000242
[ 1735.325567][    C0] RAX: 00000000006c9a3b RBX: ffffffff8ea91500 RCX: ffffffff8bc0c115
[ 1735.325582][    C0] RDX: 0000000000000001 RSI: ffffffff8e3d02b7 RDI: ffffffff8c613680
[ 1735.325597][    C0] RBP: fffffbfff1d522a0 R08: 0000000000000001 R09: ffffed101708678d
[ 1735.325612][    C0] R10: ffff8880b8433c6b R11: 0000000000000001 R12: 0000000000000000
[ 1735.325626][    C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000
[ 1735.325646][    C0]  ? ct_kernel_exit+0x125/0x180
[ 1735.325672][    C0]  default_idle+0x9/0x10
[ 1735.325695][    C0]  default_idle_call+0x6c/0xb0
[ 1735.325719][    C0]  do_idle+0x3ae/0x5b0
[ 1735.325746][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1735.325779][    C0]  cpu_startup_entry+0x4f/0x60
[ 1735.325808][    C0]  rest_init+0x2d3/0x2e0
[ 1735.325834][    C0]  ? __pfx_rest_init+0x10/0x10
[ 1735.325859][    C0]  ? __pfx_acpi_read_bit_register+0x10/0x10
[ 1735.325976][    C0]  ? __pfx_kernel_init+0x10/0x10
[ 1735.326004][    C0]  ? acpi_ut_status_exit+0x111/0x1c0
[ 1735.326089][    C0]  ? acpi_ut_status_exit+0x111/0x1c0
[ 1735.326122][    C0]  ? acpi_enable_subsystem+0x4d9/0x4f0
[ 1735.326216][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1735.326248][    C0]  start_kernel+0x48e/0x490
[ 1735.326277][    C0]  x86_64_start_reservations+0x24/0x30
[ 1735.326308][    C0]  x86_64_start_kernel+0x12b/0x130
[ 1735.326338][    C0]  common_startup_64+0x13e/0x158
[ 1735.326368][    C0]  </TASK>
[ 1735.916570][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1735.923458][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1735.934141][   T31] Tainted: [L]=SOFTLOCKUP
[ 1735.938448][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1735.948483][   T31] Call Trace:
[ 1735.951745][   T31]  <TASK>
[ 1735.954669][   T31]  dump_stack_lvl+0x100/0x190
[ 1735.959338][   T31]  vpanic+0x553/0x970
[ 1735.963302][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1735.967804][   T31]  ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0
[ 1735.973995][   T31]  panic+0xd1/0xe0
[ 1735.977731][   T31]  ? __pfx_panic+0x10/0x10
[ 1735.982170][   T31]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[ 1735.988355][   T31]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[ 1735.994528][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1735.999309][   T31]  watchdog.cold+0x1fd/0x234
[ 1736.003893][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1736.009688][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1736.014353][   T31]  ? __kthread_parkme+0x18f/0x230
[ 1736.019387][   T31]  ? kthread+0x13a/0x450
[ 1736.023638][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1736.028319][   T31]  kthread+0x373/0x450
[ 1736.032398][   T31]  ? __pfx_kthread+0x10/0x10
[ 1736.036994][   T31]  ret_from_fork+0x730/0xd60
[ 1736.041591][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1736.046709][   T31]  ? __switch_to+0x800/0x10f0
[ 1736.051385][   T31]  ? __switch_to_asm+0x39/0x70
[ 1736.056154][   T31]  ? __pfx_kthread+0x10/0x10
[ 1736.060760][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1736.065544][   T31]  </TASK>
[ 1736.068820][   T31] Kernel Offset: disabled
[ 1736.073131][   T31] Rebooting in 86400 seconds..