last executing test programs:

2m1.018860125s ago: executing program 0 (id=719):
mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000)
getrandom$auto(0x0, 0x6000000, 0x3)
madvise$auto(0x0, 0x9, 0x15)
sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyb2\x00', 0x480401, 0x0)
ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
close_range$auto(0xffffffffffffffff, r0, 0xfffffffd)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0)
socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/queue/stable_writes\x00', 0x183a41, 0x0)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
futex$auto(0x0, 0xfffffff9, 0x11, 0x0, 0x0, 0x8000fff7)
writev$auto(r2, &(0x7f00000002c0)={0x0, 0x5}, 0x9)
write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9)
r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
poll$auto(&(0x7f0000000000)={r4, 0xe7f1, 0x1723}, 0x8, 0x2)
ioctl$auto(0xffffffffffffffff, 0x900064b7, 0xffffffffffffffff)
r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.8/usb25/25-0:1.0/usb25-port5/power/runtime_suspended_time\x00', 0x40d00, 0x0)
write$auto(r5, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8)
mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(r1, 0x8, 0x6)
sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x844)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x1, 0x1000000)
sendto$auto(0x3, 0x0, 0x13, 0x7, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20)

2m0.625802339s ago: executing program 2 (id=721):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x8000400)
statmount$auto(&(0x7f0000000100)={0x2, @raw=0x3, 0x7, 0x54, 0x3}, &(0x7f00000008c0)={0x7, 0x2f, 0xc5d, 0x8, 0x2, 0x8000000000000000, 0xfffffff7, 0x653, 0x40, 0x9, 0x2, 0x7f, 0x5, 0x401, 0x8, 0xffff, 0x1, 0x7, 0x60, 0x99, 0x0, 0x2, 0xe4, 0x401, 0x77d4, 0x1, 0x5, 0x6, 0x7, 0x9, 0x5, [0x9, 0x88c9, 0x9a4, 0x8, 0x80, 0x0, 0x400000, 0x0, 0x4, 0xfffffffffffffa65, 0x9, 0x9, 0x8, 0x10001, 0x2, 0xf0df, 0x331, 0x401, 0xc, 0x3, 0x20000000000000, 0x8000000000000000, 0xfffffffffffffffa, 0x5, 0x0, 0xa, 0x5, 0x9, 0xdc57, 0x6, 0x3, 0x5, 0x9, 0x68, 0xc478, 0x7, 0x125948b1, 0x1, 0x1, 0x6, 0xfffffffffffffe00, 0x1000, 0x1], "3a47bf5b2a32701f633156f2b34a88984f9d66907df66ef5059675d52a478458dc86655a3c072daafe88d14ecef5d41506948d0167481d482a2d3e9eec4b6c0fcc5345a4f3d470ea4d77cdec3f0a92bc41e6ae3ce0fbe9bf83527d802abdc16a42c17a2475357231edbd37b88951334b9e220785ecb42b1932da8258e6792f4d3d6249c7b94229f275d003"}, 0x3, 0x80000001)
socket(0x2b, 0x1, 0x0)
r0 = socket(0x10, 0x2, 0xf)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000180)="213a2d75b4214607bd4ce3e3e92f", 0xe)
bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, <r2=>r0}, 0x210)
r3 = socket(0x2, 0x3, 0xa)
io_uring_setup$auto(0x1, 0x0)
unshare$auto(0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xac00, 0x0)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000001c0), r2)
sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="20b5c8549e244d0004faffb6ae5a83e4804aaa427dd4af30148ba4bfd0d9149db7d072284e5769f2b87c51e0ea65e0fec29c5bf2757edcfa2e81e86d92e645c8987f69fc1ab1f9674710f650cf374186d0392037d63d5c25e97007bfeb05e196aa15bb1010ca8201626d4dec6bbacc7222bbb5a96bc8ad2efc059ea1a77f36abf97bde447ac940f04894740c55d67f8368c42b48e1b000d3e446005a0adb", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250400000008000700923200000c000300cb00000000000000440009800800010000000000080002000800000008000100040000000800010004000000080002002d2d0000080001000f000000080002000001000008000200ffffff7f4400098008000100010100000800020000000000080001000e000000080001000800000008000100e00c00000800020003000000080001008100000008000200000000000c00040007000000000000000800020040000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0xc880)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/134, 0x86)
fcntl$auto(0x0, 0x407, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nvme/parameters/io_queue_depth\x00', 0x20001, 0x0)
write$auto(r6, 0x0, 0x81)
madvise$auto(0x0, 0x2003f2, 0x15)

1m59.99774087s ago: executing program 0 (id=722):
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x141083, 0x0)
unshare$auto(0x40000080)
sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0)
futex$auto(&(0x7f0000000600)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000680)=0xfff, 0xffffffff)
bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, <r0=>0xffffffffffffffff, 0x2, 0x8}, 0x100000cf)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), r0)
unshare$auto(0x40000080)
unshare$auto(0x8000000000000f31)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000)
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0)
r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0)
write$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0)
pread64$auto(r2, &(0x7f0000000040)='uete1\x00', 0x92, 0x7)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x6)
r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/uid_map\x00', 0x4002, 0x0)
read$auto_proc_uid_map_operations_base(r4, &(0x7f0000000180)=""/134, 0x86)
r5 = socket(0x2, 0x1, 0x0)
bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a)
sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000)

1m57.393597622s ago: executing program 2 (id=726):
close_range$auto(0x2, 0x8, 0x0)
socket(0x10, 0x2, 0x4)
ioprio_set$auto(0x2, 0x800000000, 0x8)
clone$auto(0x100519, 0x6, 0x0, 0xffffffffffffffff, 0x80000001)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
socket(0x10, 0x2, 0x14)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010)
write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b", 0x3)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r0 = socket(0x11, 0x80003, 0x300)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0x1d, 0x2, 0x7)
socket(0x2, 0x1, 0x0)
socket(0x1d, 0x2, 0x7)
socket(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x14)
socket(0x11, 0x80003, 0x300)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8], 0x1ac}}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51)

1m57.127037437s ago: executing program 2 (id=727):
close_range$auto(0x2, 0x8, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents64$auto(r0, 0x0, 0x40002)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
eventfd$auto(0x3)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video65\x00', 0xc0400, 0x0)
socket(0x2, 0x1, 0x106)
socketpair$auto(0x1a, 0x1, 0x8000000000000000, 0x0)
ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0)
ppoll$auto(0x0, 0x69, 0x0, 0x0, 0x8)

1m57.066896033s ago: executing program 0 (id=728):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async)
socket(0x10, 0x2, 0x14) (async, rerun: 32)
socket(0x1d, 0x2, 0x7) (rerun: 32)
socket(0x2, 0x1, 0x0)
socket(0x10, 0x2, 0x0)
socket(0x1d, 0x2, 0x7) (async)
r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x6, 0x7, 0x8}, 0x5, 0x1)
ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000300)="887612e698c911a4ad51e6e22aea77e5c7b2008779be38700f20de50e6a9c69b4f399194aad4febb7573fe1a9f054c01870d27c1e523fbb50607d17e8a9b2fa628e5bcdf1216698b35762e5531d1b813907584d6ac789306cad63f9749a79c98d94330a912dcd700333459c96cc943157295a8880ff892d5638da37d07145d05a81e493c800aa585a0b92a8c8443dd9ef959e7f48fb954102e32628a426f73cc2e6e34564870a3deaa7cb260aff80dfa551427cc7d65f97c5f5cc59bacd08f42938fe7112d7bb03592780b21c65ab71712a86f3c66b5662ed1d15ef684924578b5a9f5738969b188093c42ea2d")
clock_gettime$auto(0x6, &(0x7f0000000100)={0x8, 0x9}) (async)
socket(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0) (async)
socket(0x10, 0x2, 0x14) (async, rerun: 32)
socket(0x11, 0x80003, 0x300) (rerun: 32)
socket(0x1d, 0x2, 0x7) (async)
socket(0x2, 0x1, 0x0) (async, rerun: 32)
socket(0x10, 0x2, 0x0) (async, rerun: 32)
socket(0x1d, 0x2, 0x7) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x2, 0x14)
sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x40000) (async, rerun: 64)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) (async, rerun: 64)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0)

1m56.411298189s ago: executing program 2 (id=733):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e)
umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1)
ioperm$auto(0x3, 0xe, 0x2000000000000149)
r1 = getpid()
r2 = gettid()
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4)
flock$auto(r3, 0x1)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40)
flock$auto(r4, 0x2)
rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x3000, 0xfffffffe}}})
close_range$auto(0x2, 0x8, 0x0)
ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0)
write$auto(0xca, 0x0, 0x0)
r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408)
getdents$auto(r5, 0x0, 0x400018)
read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/186, 0xba)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r6)
r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x20, r7, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x4000000)

1m55.23795553s ago: executing program 0 (id=736):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
io_uring_setup$auto(0x6, 0x0) (async)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x30, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
close_range$auto(0x2, 0x8, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0)
sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) (async)
bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) (async)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) (async)
ioctl$auto(0x3, 0x40045542, 0xb551) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) (async)
close_range$auto(0x2, 0x8, 0x0)
r2 = socket(0x1d, 0x2, 0x6) (async)
close_range$auto(0x2, 0x8, 0x0) (async)
socket(0x2, 0x3, 0x100)
socket(0x1d, 0x2, 0x7)
r3 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1\x00', <r5=>0x0})
bind$auto(r2, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) (async)
semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1)

1m54.834916406s ago: executing program 0 (id=737):
close_range$auto(0x2, 0xa, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0)
r0 = socket(0x11, 0x3, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000)
io_uring_setup$auto(0x7, 0x0)
r1 = getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0)
mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x8001)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0)
sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x8008000000000001)
r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb1\x00', 0x4e8480, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x4611, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
sysfs$auto(0x2, 0x2000000000040, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff)
openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x103100, 0x0)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r6 = socket(0x27, 0x2, 0xfffffffc)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000)
write$auto(r1, 0x0, 0x8000100000001)
madvise$auto(0x0, 0xffffffffffff0001, 0xf)
sendmsg$auto_OVS_VPORT_CMD_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="015ce818bcea36d9351c3e4f27e35cb07339ec01f710629534e3b2179a", @ANYRES16=r5, @ANYBLOB="030329bd7000fbdbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010)
r7 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0)
mmap$auto(0x0, 0xf, 0x7f, 0xeb5, r6, 0x1c)
r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0)
pread64$auto(r8, 0x0, 0x392, 0x8)
open(&(0x7f0000000200)='}[,&*}\x00', 0x2000, 0x6f)

1m53.342567081s ago: executing program 0 (id=740):
semctl$auto_SETVAL(0x3, 0x6, 0x10, 0xfffffffffffffff7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
pwrite64$auto(r1, 0x0, 0x0, 0x2000000000040007)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
tgkill$auto(0x0, 0x0, 0x11)
readv$auto(0x3, 0x0, 0x7)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800300b0800c000200657468746f6f6c001800018014000200776c616e30"], 0x44}}, 0x24048084)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)

1m52.471941047s ago: executing program 2 (id=743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)
modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

1m51.193426329s ago: executing program 2 (id=746):
r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
setsockopt$auto_SO_NOFCS(r0, 0x7, 0x2b, &(0x7f0000000040)='#^!\'](**\xbd(*&((@\')&[--&*', 0x2) (async)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/pages_2m\x00', 0xf691d8259cf30157, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
read$auto(r2, 0x0, 0x1ff) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) (async)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x48c80, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8080, 0x0) (async)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) (async)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a)
read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0)
socket(0x10, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) (async)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1)
write$auto(r6, &(0x7f0000000080)=')@-!\x00', 0x1e1) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
r8 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x2c, r9, 0x200, 0x703d24, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8880) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0)

1m38.300642778s ago: executing program 32 (id=740):
semctl$auto_SETVAL(0x3, 0x6, 0x10, 0xfffffffffffffff7)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000)
mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000)
r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
pwrite64$auto(r1, 0x0, 0x0, 0x2000000000040007)
move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2)
tgkill$auto(0x0, 0x0, 0x11)
readv$auto(0x3, 0x0, 0x7)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010031bd7000fddbdf250c00000018000380140003800300b0800c000200657468746f6f6c001800018014000200776c616e30"], 0x44}}, 0x24048084)
write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45)

1m35.879582468s ago: executing program 33 (id=746):
r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
setsockopt$auto_SO_NOFCS(r0, 0x7, 0x2b, &(0x7f0000000040)='#^!\'](**\xbd(*&((@\')&[--&*', 0x2) (async)
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/kvm/pages_2m\x00', 0xf691d8259cf30157, 0x0) (async)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async)
r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0)
read$auto(r2, 0x0, 0x1ff) (async)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) (async)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x48c80, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc8080, 0x0) (async)
ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) (async)
writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3)
read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)=""/122, 0x7a)
read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0)
socket(0x10, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) (async)
r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0)
write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1)
write$auto(r6, &(0x7f0000000080)=')@-!\x00', 0x1e1) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async)
close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async)
r8 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x2c, r9, 0x200, 0x703d24, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8880) (async)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0)

1m14.393541935s ago: executing program 3 (id=861):
mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000)
syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x40eb1, 0x401, 0x300000000000)
socket(0xa, 0x3, 0x3b)
semctl$auto_SEM_STAT(0x0, 0x80000000, 0x12, 0x0)
connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66)
r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0)
ioctl$auto_LOOP_CTL_ADD(r0, 0x4c80, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
personality$auto(0xc)
seccomp$auto(0x3, 0x2, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1882c2, 0x78e22799f4a46f1c)
flock$auto(r1, 0x5)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
flock$auto(r2, 0x1)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abe0)
flock$auto(r3, 0x1)
r4 = socket(0x1d, 0x2, 0x6)
r5 = socket(0x1e, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
madvise$auto_MADV_GUARD_INSTALL(0x9, 0xffff, 0x66)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40)
sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="d490fd5f7000fddbdf25000000006c0c6fb605796bc84b42b177a12e39e6a629afb12c6dab5ad524b0eab459cc66ac8b029490b2b37af2948b3decf83bbd30fe2c2bd9a17f641df6271971a1747e3697ce0044af50a43a26029e2dc1a5b9224f9d602145843242b11d1564848c07ff3571b7d351cd424e87c9b63c192002885ba1c045c38336ab7e57b77d044c780fef620db36d570b60c0d2f8d550c9eb055b1470e18bbed32b"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x810)

1m13.401803976s ago: executing program 3 (id=865):
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0) (async)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0)
pread64$auto(r0, 0x0, 0x10001, 0x830) (async)
pread64$auto(r0, 0x0, 0x10001, 0x830)
r1 = socket(0x23, 0x2, 0x0)
shmctl$auto_SHM_INFO(0xfffffff8, 0xe, 0x0)
ioctl$auto(r1, 0x89ef, 0x74)
r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r1)
sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x188}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x101}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "f55602"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xfa}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x30068884)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1)
sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x10, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async)
r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async)
readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r4, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) (async)
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r4, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3)
r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x42000, 0x0)
readv$auto(r5, &(0x7f0000000180)={0x0, 0x40}, 0xa)

1m13.207001669s ago: executing program 3 (id=866):
mmap$auto(0x0, 0x20015, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
socket(0x1e, 0x2, 0x0) (async)
unshare$auto(0x40000080) (async)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) (async)
openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) (async)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/016/001\x00', 0xa901, 0x0) (async)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0)
setresuid$auto(0x0, 0x0, 0x0) (async)
ioctl$auto_BLKALIGNOFF(r1, 0x127a, 0x0) (async)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async)
sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0)
msync$auto(0x1ffff000, 0x17fffffffffffff, 0x400000004) (async)
mmap$auto(0x0, 0x7f, 0xdf, 0x15f, r2, 0x8000) (async)
ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000001300)="9d1a750b4b0e320b2068a67181ccf7d62d27f13768ef7e141f5b55fefbbeb8bdbf02d730c7f8484dc25bb290958c2eefa69e7fb6aa1c91e0e1a4dac730940a2702e29bec4395273c5d31c0f6f0970498dce462a4a9cbac5e974525ed851a535c8b6ed35bd6e2eda80e5ef5432600411536381c182e489fabf45e11a5d63c1db6e8b932203fb648742aed39a00629955d5c7dd8aefde0c1b31652a02f80ce80e74f938d472af4edac3a5e8bcee92a838a458eaaca520cbbbb5cce1349dcb31cf224297f02732ea516c3ddc355130b62d85169fe0862d1540bf8951e6f622a16bc3889fa21792c420261a4f6", 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0})
ioctl$auto_USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) (async)
socketcall$auto_SYS_SOCKETPAIR(0x8, 0x0) (async)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
ioctl$auto_TIOCGETD2(0xffffffffffffffff, 0x5424, &(0x7f0000001640)="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")
unshare$auto(0x8000000)
syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = gettid()
waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x401, 0xa2, @_sigchld={r3, 0x0, 0x2, 0x2d, 0x652c}}}, 0x5, &(0x7f0000000240)={{0xb, 0x2}, {0x34, 0x6}, 0x5, 0x100000000, 0x9, 0x6, 0x9, 0x1, 0xd, 0x6, 0x92f1, 0x7f, 0x6, 0x5e94, 0x8000d, 0x7})
migrate_pages$auto(r3, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x3) (async)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/3/smp_affinity_list\x00', 0x40, 0x0)
read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000300)=""/4096, 0x1000) (async)
futex$auto(0x0, 0xa, 0xf, 0x0, 0x0, 0x8)

1m12.981828295s ago: executing program 3 (id=867):
mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
connect$auto(0xffffffffffffffff, 0x0, 0x3a)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
socket(0x1e, 0x5, 0x0)
r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0)
pread64$auto(r0, &(0x7f0000000200)='\x00', 0x7, 0x6)
close_range$auto(0xffffffffffffffff, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0)
close_range$auto(0x0, 0xffffffffffffffff, 0x2)
socket(0x10, 0x2, 0x9)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
socket(0x1, 0x1, 0x0)
bind$auto(0x3, 0x0, 0x6b)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/type\x00', 0x101000, 0x0)
listen$auto(0x3, 0x81)
sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}}, 0x4000091)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c001)
r1 = socket(0x10, 0x2, 0x4)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0)
r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000001, 0x0, 0x2000000000000003, 0x0, 0x24, 0x1}, 0x401}, 0x800, 0xa0000000)
r3 = socket(0xa, 0x5, 0x84)
sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c)
ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xffffffff, 0x3ff, 0xc7, 0x80000001, 0x7]})

1m12.527288232s ago: executing program 3 (id=870):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000)
writev$auto(0x4, 0x0, 0x1)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r0, 0x1269, 0x0)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e)
r3 = fsopen$auto(0x0, 0x1)
keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff)
r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2)
msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000500)={{0x3, <r5=>0xee00, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x6}, &(0x7f0000000380)=0x83, &(0x7f00000003c0)=0x86, 0x8, 0x3, 0x8001, 0x2e, 0x80000001, 0xfff7, 0x6, 0x2a, @raw=0x6, @inferred=0xffffffffffffffff})
sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x84001248}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x3d0, r4, 0x800, 0x70bd25, 0x10001, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xf}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xa}, @NL80211_ATTR_MLO_TTLM_DLINK={0xc3, 0x148, "74744ce932b6d8a8de9d5f1ccc254f427e0f4dc3eb2f55429f991627eac2bbfa884548e1813e1513338616783451e10b25c40d3769d09d864fb997ae66826bdd8a5eb7198aadc2c7e1114ad3bef422eebd09da4c5180f654501a50d4648623a16d7bc405bfb359243f17f584747719b3d8fbd45a8a44c01f1ccea60ce03fb7fbd025776546d932bc548894e0f58b3c04c5a0ef514078e6df379ac6fc3b8408be08e763c9a121b008777afdb760209d6911d461612f3415406aafbd10b142ab"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}, @NL80211_ATTR_CSA_IES={0x22c, 0xb9, 0x0, 0x1, [@nested={0x129, 0x42, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x8}, @typed={0xa7, 0xab, 0x0, 0x0, @str='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc'}, @nested={0x4, 0x5}, @generic="400dee24d7564dd9f34b011257f0ae80b60e9942fee1dadc3bd4c4cb156b0b3ff47d7839505701438b7959c83ba6fcac9fe764e2f791f18ff923b79761dff849cd1a4560979a1494aa3c2b8a8a", @nested={0x4, 0x15a}, @nested={0x4, 0x6d}, @typed={0x8, 0x89, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xbc, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x11d}]}, @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @typed={0xe8, 0x116, 0x0, 0x0, @binary="daecf4cb9f65ca23c677094b36e2db98f6a6d1fba3f3a5aecc97d6e32d2dce0395adaf34be78abdd049756a3adac175e6d138ac031d9b9d5e484474b82e40928eaf4a40510e7e7788b72cbf164d083d82fb1b7f96b66c9375e3a6b33fb6b33bf487311318f841214f43da1ea1f5b533d535fe0416127c8d60ea04557438cf8839e55c06eac696f4ca007cc5f4019244e5f3f96ad7027a6d9f1d6df735906156ac9eef223c547b5dc8165845e4bc6f25795035399ecf6bbbb68018e01fa1e71edf40cc6dbe06dbf5a1e984f458a4809d227a7faecd739a1f270f977d379ed0d807b6e0fb6"}]}, @NL80211_ATTR_MAC_HINT={0xb3, 0xc8, "3ed6cab63f1e1ea6b55c9b022097acd6e6d42d0d8741acafd9ca2b121e174787dca1b1e75fece68840b375d51bf2a8c8f39d347705f09a9cbf489fb402882e59aff5ac5085ed6b47fd0e81d8e7ea26207f284847bb5498ae56b11022be77924d943cfad76baab39e52e6c95268ae9fb52fe5efe36fa53572a5b72038a2c6e58cc4a6dabcf512f896717ba4068436c4a2b6bc32359c2cfa86c2bf62eba34a8183ce16cf5b7e1566d715a71d2c62165a"}]}, 0x3d0}}, 0x4000080)
madvise$auto(0xfffffffffffffffa, 0x9, 0x19)
waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe64c6f0439d9294cee642b94067691cdb8738f2363b14d75159d50f1d2041552ec66151a9f701e52dbbc1da461754f08314b0d6bbb04733b1e75896aa1d04e8e80eeef31efb7c1d6d29923d10bb06fc202e8c6970da24c428b428a45a8146761b0799727aa98dee9a474d1ec2011619ef92795"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x82}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x9, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x9, 0xc, 0xfffffffffffffffa})
madvise$auto(0x0, 0x2003f2, 0x15)
socket$nl_generic(0x10, 0x3, 0x10)
madvise$auto(0x0, 0xffffffffffff0005, 0x3)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/napi_defer_hard_irqs\x00', 0xc2481, 0x0)
write$auto(r6, &(0x7f0000000200)='7\x00\\\xa0\x042\a\xc3\xd0\x11\x03\aKk+\xf4\xcd\x12\xa6\x85\xd6Y\xe6\xc3I)\xaa\x8f\xa5\xc3\x94\xaf\x18\xf9]\xdd\xc3\x91m\xc9{;\b\x04\x94\xf18', 0x2)

1m11.345733061s ago: executing program 3 (id=872):
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x7, 0x0)
socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/block/loop4/queue/dax\x00', 0x0, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1)
write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d70000180080001800000000090f30f042389800c0002000600000000000000185592afa10d0000314e00"/55], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x80202, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x4, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r6 = socket(0x2c, 0x4, 0x8000)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)

56.080321055s ago: executing program 34 (id=872):
write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sysfs$auto(0x2, 0x7, 0x0)
socketpair$auto(0x9, 0x2, 0x8000000000000000, 0x0)
r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0)
ioctl$auto_I2C_SMBUS(r0, 0x720, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68)
r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0)
write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18)
r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/block/loop4/queue/dax\x00', 0x0, 0x0)
write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1)
write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100253d70000180080001800000000090f30f042389800c0002000600000000000000185592afa10d0000314e00"/55], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x80202, 0x0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x4, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
r6 = socket(0x2c, 0x4, 0x8000)
sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008)

5.706573493s ago: executing program 1 (id=1012):
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0)
write$auto(r2, &(0x7f0000000040)='\x00'/13, 0x81)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
clock_getres$auto(0x2, 0x0)
alarm$auto(0x2)
sysfs$auto(0x2, 0x100000000000011, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = fsopen$auto(0x0, 0x7fff)
fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0)
r4 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r4, 0x6, 0x0, 0x0, 0x0)

3.070349481s ago: executing program 1 (id=1013):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
unshare$auto(0x8000400)
statmount$auto(&(0x7f0000000100)={0x2, @raw=0x3, 0x7, 0x54, 0x3}, &(0x7f00000008c0)={0x7, 0x2f, 0xc5d, 0x8, 0x2, 0x8000000000000000, 0xfffffff7, 0x653, 0x40, 0x9, 0x2, 0x7f, 0x5, 0x401, 0x8, 0xffff, 0x1, 0x7, 0x60, 0x99, 0x0, 0x2, 0xe4, 0x401, 0x77d4, 0x1, 0x5, 0x6, 0x7, 0x9, 0x5, [0x9, 0x88c9, 0x9a4, 0x8, 0x80, 0x0, 0x400000, 0x0, 0x4, 0xfffffffffffffa65, 0x9, 0x9, 0x8, 0x10001, 0x2, 0xf0df, 0x331, 0x401, 0xc, 0x3, 0x20000000000000, 0x8000000000000000, 0xfffffffffffffffa, 0x5, 0x0, 0xa, 0x5, 0x9, 0xdc57, 0x6, 0x3, 0x5, 0x9, 0x68, 0xc478, 0x7, 0x125948b1, 0x1, 0x1, 0x6, 0xfffffffffffffe00, 0x1000, 0x1], "3a47bf5b2a32701f633156f2b34a88984f9d66907df66ef5059675d52a478458dc86655a3c072daafe88d14ecef5d41506948d0167481d482a2d3e9eec4b6c0fcc5345a4f3d470ea4d77cdec3f0a92bc41e6ae3ce0fbe9bf83527d802abdc16a42c17a2475357231edbd37b88951334b9e220785ecb42b1932da8258e6792f4d3d6249c7b94229f275d003"}, 0x3, 0x80000001)
socket(0x2b, 0x1, 0x0)
r0 = socket(0x10, 0x2, 0xf)
r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0)
write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000180)="213a2d75b4214607bd4ce3e3e92f", 0xe)
bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r0, 0x24000000, <r2=>r0}, 0x210)
r3 = socket(0x2, 0x3, 0xa)
io_uring_setup$auto(0x1, 0x0)
unshare$auto(0x6)
sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/name\x00', 0xac00, 0x0)
r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000001c0), r2)
sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="20b5c8549e244d0004faffb6ae5a83e4804aaa427dd4af30148ba4bfd0d9149db7d072284e5769f2b87c51e0ea65e0fec29c5bf2757edcfa2e81e86d92e645c8987f69fc1ab1f9674710f650cf374186d0392037d63d5c25e97007bfeb05e196aa15bb1010ca8201626d4dec6bbacc7222bbb5a96bc8ad2efc059ea1a77f36abf97bde447ac940f04894740c55d67f8368c42b48e1b000d3e446005a0adb", @ANYRES16=r5, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0xc880)
read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000003c0)=""/134, 0x86)
fcntl$auto(0x0, 0x407, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
unshare$auto(0x40000080)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00)
mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nvme/parameters/io_queue_depth\x00', 0x20001, 0x0)
write$auto(r6, 0x0, 0x81)
madvise$auto(0x0, 0x2003f2, 0x15)

475.789119ms ago: executing program 1 (id=1014):
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100000, 0x0)
read$auto(0x3, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0)
r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, 0x0, 0xc0b02, 0x0)
syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
r2 = socket(0x11, 0x3, 0x9)
capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48})
sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03000000000000002c", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
setns(0xffffffffffffffff, 0x0)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984cb"], 0x14}}, 0x4000080)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
shmctl$auto_SHM_STAT(0x1, 0xd, &(0x7f0000000640)={{0x5, <r3=>0xee00, <r4=>0xee01, 0x1, 0xde7a, 0x2, 0x2}, 0x7, 0x4, 0x8000000080000001, 0xd, @raw=0x10001, @raw=0x2, 0x4, 0x0, &(0x7f00000004c0)="4089ae7c5d73fa8e7645efadbc85ca52f1d1e878053d2b0663bfffc3e7fcb221979e763740867699d866396aee69878f8a0e829e2496f612ceba39c2d0d48ab1c42d46f5aa57eba14574a9dc349b8bbb7ce33a4026d8034f6d49c7ac6834e124666d1eef8cbe61187806d233652cee02b79c9363e4897ccb11621eeb7d3cb87a7a58593f61480e0471e9c925ff072e1b9bb5345213468d887d6ba457052e39636062998fbf18d81d4b6301bfc8117f881daa47b00e85ebd18e8365", &(0x7f0000000580)="7cc2c650e25dac0a184c9d3508fee758ded7cf92846565b9abc8db6c51b73b9da3117ad89a3a88321d1b5e062a5728469ac56c4973a8fdd78246e305734d486073b1b8fc6cb512de75d77ce7542abbbe943462613307920e3665f50133e3603c8c13767ef42739a84c362311f25a6b9f0477bea62c6b1dba0b0d13a62c819b557eb13a382c09c8743e62061e3087353c64fe35307d9bba0c764e670d987ba3254802dad62e0e8f5399"})
r5 = setfsuid$auto(0xee00)
setreuid$auto(r5, 0x0)
setpriority$auto_PRIO_USER(0x2, r5, 0x3ff)
msgctl$auto_MSG_STAT(0x58, 0xb, &(0x7f0000000780)={{0x480, 0xffffffffffffffff, <r6=>0xee01, 0x0, 0x4, 0x3, 0x4}, &(0x7f0000000700)=0x75, &(0x7f0000000740)=0x9, 0xc0c0, 0x20000048, 0x4628637c, 0xe, 0xffffffff80000000, 0x8, 0x11, 0x101, @raw=0x1, @inferred=<r7=>0x0})
sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000002dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002e00)=ANY=[@ANYBLOB='P%\x00\x00', @ANYRES16=0x0, @ANYRES8=r3, @ANYBLOB="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", @ANYBLOB="4d9d6d68fdf8692cc3f8aade93d8cd947bb42cc3c25d7404e58e11e57c9647458affcb6822b09cafbc85cc157629f3616857145df980525310c893f8947b77255d0eda3d55cb05217de27b67df9a843d2824f183b15b7858f28da37cb8ceb28fbd", @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRES64=r6, @ANYRES8=r4, @ANYBLOB="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", @ANYBLOB="d516605ad3adb91bf8627204f5616848cc634a9f63f2604f73c51ad5b1d5527102835066e11ab961927f90d785f4a970ee5fb68e092f0b59cff3401edd886c7ea470dc6b92490c0e8f10a24a190840714a3f3fd9aa0e7d10fd45bf9d2510b101ccd72e53128ac13df133708dd3c8ea5fae948faa77c2689ec77fc5c1c5bd834e6c888acb126a3ca1b2ea2dc3210b4623d654280aa24fd03c225fc411461c138fe3212a4f4c0ae548227be0a96abe5a3e258eeb59f73e2469d3cc47f3e094d5c24883db8479ae80f8c4e5089cb137fa0ed8a6ff27df995cdbebae9988920008816ef17e9e340dd34ce6dafbf0dd1d", @ANYBLOB="09005c002d2a5cbf0000000008008a00", @ANYBLOB="bab354d4aa095014aae65f9252d68245f0ad9b520d65544dc28b6155403d50105357ffc3a86db00955341aa67f90a6da19a1756d035d634ad54be328750d4dab758a208c02cc118a34b42979b3a7022fd2b99115088bf4aa3310c46cac0c56aa4513e436db98d1588c73967e722b9ad09211ce88e79c03af849c6afd7dc88f85d2073267f8d50c942335edb401d5cf7fdb3c42dff3f23e7db8f4d0ab38250cd398b681c23e6d2e1c3156d12405c72e5686e735d220aa8af9eaa22ea4765a68f3f8e1c9b16678e5a5daa0423aa0714581d7e682b28177c275ac9f5542e76392409f540ea2", @ANYRES16=r7, @ANYRESHEX=r3, @ANYBLOB="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"], 0x2550}, 0x1, 0x0, 0x0, 0x4000}, 0x11)
r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r8, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0)
write$auto(r9, &(0x7f0000000000)='y\x8c', 0x2)
get_mempolicy$auto(&(0x7f0000000180)=0x6, 0x0, 0xa6, 0xfff, 0x3)
write$auto(r1, 0x0, 0xc70)
close_range$auto(r0, 0x8, 0x4)
ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cec16\x00', 0x103400, 0x0)
ioctl$auto(0x3, 0x4010ae67, r0)

128.419988ms ago: executing program 1 (id=1015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0)
mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) (async)
mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000)
ioctl$auto(r1, 0x40a85321, 0x38)
r2 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/tracing/trace_options\x00', 0x80442, 0x0)
preadv$auto(r2, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x3, 0x7ffffffd, 0x5)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c0005f40410590c02c1c423935fb2e6b38771f1c19f17790485908208dd000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800)

6.866745ms ago: executing program 1 (id=1016):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x106)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
close_range$auto(r0, 0xffffffffffffffff, 0x6)
socket(0x28, 0x1, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10000000000007, 0x0, 0x1, 0x36, 0x8, 0x15f4da07, 0x6, 0x0, 0x64, 0x80000020, 0x1003, 0xb, 0x9, 0x47fff, 0xd8]}, 0x0)

0s ago: executing program 1 (id=1017):
bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4)
close_range$auto(0x2, 0xa, 0x0)
socket(0xa, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000108, 0x400, 0xfffffffffffffffc}]})
mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

8 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.480387][ T9117] RSP: 002b:00007fb110b07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  277.480403][ T9117] RAX: ffffffffffffffda RBX: 00007fb10fe16090 RCX: 00007fb10fb9cdd9
[  277.480412][ T9117] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000
[  277.480421][ T9117] RBP: 00007fb10fc32d69 R08: 00040000000000a5 R09: 0000000000008000
[  277.480430][ T9117] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000
[  277.480439][ T9117] R13: 00007fb10fe16128 R14: 00007fb10fe16090 R15: 00007ffdec324968
[  277.480458][ T9117]  </TASK>
[  280.186255][ T9140] futex_wake_op: syz.0.694 tries to shift op by -2048; fix this program
[  280.384780][ T9140] futex_wake_op: syz.0.694 tries to shift op by -2048; fix this program
[  280.673180][ T5629] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5
[  280.758557][ T9151] FAULT_INJECTION: forcing a failure.
[  280.758557][ T9151] name failslab, interval 1, probability 0, space 0, times 0
[  280.830250][ T9151] CPU: 0 UID: 0 PID: 9151 Comm: syz.2.698 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.830276][ T9151] Tainted: [L]=SOFTLOCKUP
[  280.830282][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  280.830291][ T9151] Call Trace:
[  280.830297][ T9151]  <TASK>
[  280.830303][ T9151]  dump_stack_lvl+0x100/0x190
[  280.830325][ T9151]  should_fail_ex.cold+0x5/0xa
[  280.830345][ T9151]  ? lsm_blob_alloc+0x68/0x90
[  280.830365][ T9151]  should_failslab+0xc2/0x120
[  280.830382][ T9151]  __kmalloc_noprof+0xe0/0x850
[  280.830396][ T9151]  ? trace_kmalloc+0xe3/0x110
[  280.830428][ T9151]  lsm_blob_alloc+0x68/0x90
[  280.830449][ T9151]  security_sk_alloc+0x2d/0x290
[  280.830473][ T9151]  sk_prot_alloc+0x12a/0x2a0
[  280.830495][ T9151]  sk_alloc+0x36/0xe80
[  280.830575][ T9151]  __netlink_create+0x5e/0x2c0
[  280.830593][ T9151]  ? __wake_up+0x3f/0x60
[  280.830615][ T9151]  netlink_create+0x29b/0x610
[  280.830633][ T9151]  ? __pfx_genl_bind+0x10/0x10
[  280.830669][ T9151]  ? __pfx_genl_unbind+0x10/0x10
[  280.830692][ T9151]  ? __pfx_genl_release+0x10/0x10
[  280.830729][ T9151]  __sock_create+0x339/0x860
[  280.830754][ T9151]  __sys_socket+0x14d/0x260
[  280.830775][ T9151]  ? exc_page_fault+0x6f/0xd0
[  280.830795][ T9151]  ? __pfx___sys_socket+0x10/0x10
[  280.830821][ T9151]  __x64_sys_socket+0x72/0xb0
[  280.830845][ T9151]  ? lockdep_hardirqs_on+0x78/0x100
[  280.830887][ T9151]  do_syscall_64+0x10b/0xf80
[  280.830908][ T9151]  ? clear_bhb_loop+0x40/0x90
[  280.830927][ T9151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.830942][ T9151] RIP: 0033:0x7f712c79e647
[  280.830957][ T9151] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.830971][ T9151] RSP: 002b:00007f712d58ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  280.830986][ T9151] RAX: ffffffffffffffda RBX: 00007f712ca15fa0 RCX: 00007f712c79e647
[  280.830996][ T9151] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  280.831004][ T9151] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  280.831013][ T9151] R10: 0000200000000240 R11: 0000000000000286 R12: 0000000000000000
[  280.831026][ T9151] R13: 00007f712ca16038 R14: 00007f712ca15fa0 R15: 00007ffded9c5e18
[  280.831045][ T9151]  </TASK>
[  281.861705][ T9153] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  281.927288][ T9153] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  281.957536][ T9153] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  282.523733][ T9172] vhci_hcd vhci_hcd.2: invalid port number 16
[  282.555103][ T9172] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub
[  284.984018][ T9214] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  285.009964][ T9214] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  285.034012][ T9214] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  285.357417][ T9220] NFSD: Failed to start, no listeners configured.
[  285.867669][ T9225] futex_wake_op: syz.1.708 tries to shift op by -2048; fix this program
[  285.949891][ T9225] futex_wake_op: syz.1.708 tries to shift op by -2048; fix this program
[  286.874515][ T9243] random: crng reseeded on system resumption
[  287.034775][ T5629] Bluetooth: hci2: command 0x2016 tx timeout
[  287.040850][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout
[  287.046910][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  287.259753][ T9244] hub 1-0:1.0: USB hub found
[  287.438777][ T9244] hub 1-0:1.0: 1 port detected
[  288.983413][ T9268] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  289.056730][ T9268] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  289.161886][ T9268] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  289.631971][ T9280] FAULT_INJECTION: forcing a failure.
[  289.631971][ T9280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.852122][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.0.719 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  289.852149][ T9280] Tainted: [L]=SOFTLOCKUP
[  289.852155][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  289.852163][ T9280] Call Trace:
[  289.852169][ T9280]  <TASK>
[  289.852175][ T9280]  dump_stack_lvl+0x100/0x190
[  289.852205][ T9280]  should_fail_ex.cold+0x5/0xa
[  289.852225][ T9280]  _copy_from_iter+0x43a/0x1690
[  289.852246][ T9280]  ? __pfx__copy_from_iter+0x10/0x10
[  289.852261][ T9280]  ? rcu_is_watching+0x12/0xc0
[  289.852280][ T9280]  ? trace_kmalloc+0xe3/0x110
[  289.852297][ T9280]  ? __kasan_kmalloc+0xaa/0xb0
[  289.852312][ T9280]  ? __kmalloc_noprof+0x320/0x850
[  289.852330][ T9280]  kernfs_fop_write_iter+0x186/0x5f0
[  289.852354][ T9280]  do_iter_readv_writev+0x6ee/0x920
[  289.852372][ T9280]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  289.852396][ T9280]  vfs_writev+0x360/0xe10
[  289.852413][ T9280]  ? trace_contention_end+0x122/0x170
[  289.852431][ T9280]  ? __pfx_vfs_writev+0x10/0x10
[  289.852448][ T9280]  ? ksys_write+0x190/0x250
[  289.852475][ T9280]  ? __fget_files+0x21f/0x3d0
[  289.852497][ T9280]  ? do_writev+0x13e/0x340
[  289.852511][ T9280]  do_writev+0x13e/0x340
[  289.852526][ T9280]  ? __pfx_do_writev+0x10/0x10
[  289.852543][ T9280]  ? rcu_is_watching+0x12/0xc0
[  289.852563][ T9280]  do_syscall_64+0x10b/0xf80
[  289.852583][ T9280]  ? clear_bhb_loop+0x40/0x90
[  289.852601][ T9280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.852616][ T9280] RIP: 0033:0x7f301259cdd9
[  289.852629][ T9280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.852643][ T9280] RSP: 002b:00007f30133ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  289.852657][ T9280] RAX: ffffffffffffffda RBX: 00007f3012815fa0 RCX: 00007f301259cdd9
[  289.852667][ T9280] RDX: 0000000000000009 RSI: 00002000000002c0 RDI: 0000000000000007
[  289.852675][ T9280] RBP: 00007f3012632d69 R08: 0000000000000000 R09: 0000000000000000
[  289.852684][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.852693][ T9280] R13: 00007f3012816038 R14: 00007f3012815fa0 R15: 00007ffc0790b198
[  289.852712][ T9280]  </TASK>
[  291.089414][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout
[  291.135185][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout
[  291.216330][ T5638] Bluetooth: hci2: command 0x2016 tx timeout
[  294.358431][ T9345] sctp: [Deprecated]: syz.3.732 (pid 9345) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.358431][ T9345] Use struct sctp_sack_info instead
[  297.823155][ T9385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.115240][ T9394] FAULT_INJECTION: forcing a failure.
[  298.115240][ T9394] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  298.266717][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.2.743 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  298.266743][ T9394] Tainted: [L]=SOFTLOCKUP
[  298.266748][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  298.266758][ T9394] Call Trace:
[  298.266763][ T9394]  <TASK>
[  298.266769][ T9394]  dump_stack_lvl+0x100/0x190
[  298.266791][ T9394]  should_fail_ex.cold+0x5/0xa
[  298.266809][ T9394]  ? prepare_alloc_pages+0x16d/0x5f0
[  298.266831][ T9394]  should_fail_alloc_page+0xeb/0x140
[  298.266850][ T9394]  prepare_alloc_pages+0x1f0/0x5f0
[  298.266868][ T9394]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  298.266891][ T9394]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  298.266915][ T9394]  ? unwind_get_return_address+0x59/0xa0
[  298.266935][ T9394]  ? arch_stack_walk+0xa6/0xf0
[  298.266961][ T9394]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  298.266984][ T9394]  ? __pfx_stack_trace_save+0x10/0x10
[  298.267003][ T9394]  ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0
[  298.267032][ T9394]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  298.267054][ T9394]  ? __pmd_alloc+0xbf/0x950
[  298.267071][ T9394]  ? __handle_mm_fault+0xa9c/0x2a00
[  298.267090][ T9394]  ? handle_mm_fault+0x36d/0xa20
[  298.267109][ T9394]  ? __get_user_pages+0x1178/0x32a0
[  298.267126][ T9394]  ? populate_vma_page_range+0x267/0x3f0
[  298.267143][ T9394]  ? __mm_populate+0x107/0x3a0
[  298.267160][ T9394]  ? vm_mmap_pgoff+0x37f/0x470
[  298.267176][ T9394]  ? ksys_mmap_pgoff+0xe4/0x610
[  298.267192][ T9394]  ? __x64_sys_mmap+0x125/0x190
[  298.267206][ T9394]  ? do_syscall_64+0x10b/0xf80
[  298.267226][ T9394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.267241][ T9394]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  298.267264][ T9394]  ? policy_nodemask+0xed/0x4f0
[  298.267281][ T9394]  alloc_pages_mpol+0x1fb/0x540
[  298.267299][ T9394]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  298.267318][ T9394]  ? __lock_acquire+0x4a5/0x2630
[  298.267334][ T9394]  alloc_pages_noprof+0x1a/0x160
[  298.267353][ T9394]  pte_alloc_one+0x1c/0x3d0
[  298.267373][ T9394]  __pte_alloc+0x6d/0x3e0
[  298.267389][ T9394]  ? __pfx___pte_alloc+0x10/0x10
[  298.267405][ T9394]  ? do_raw_spin_lock+0x128/0x260
[  298.267421][ T9394]  ? find_held_lock+0x2b/0x80
[  298.267441][ T9394]  do_anonymous_page+0x13c6/0x2050
[  298.267465][ T9394]  ? __pmd_alloc+0x3fb/0x950
[  298.267484][ T9394]  __handle_mm_fault+0x1d2c/0x2a00
[  298.267509][ T9394]  ? mt_find+0x45e/0x8e0
[  298.267531][ T9394]  ? __pfx___handle_mm_fault+0x10/0x10
[  298.267550][ T9394]  ? __pfx_mt_find+0x10/0x10
[  298.267587][ T9394]  handle_mm_fault+0x36d/0xa20
[  298.267620][ T9394]  __get_user_pages+0x1178/0x32a0
[  298.267645][ T9394]  ? __pfx___get_user_pages+0x10/0x10
[  298.267669][ T9394]  populate_vma_page_range+0x267/0x3f0
[  298.267690][ T9394]  ? __pfx_populate_vma_page_range+0x10/0x10
[  298.267708][ T9394]  ? __pfx_find_vma_intersection+0x10/0x10
[  298.267726][ T9394]  ? do_mmap+0x93f/0x12f0
[  298.267748][ T9394]  __mm_populate+0x107/0x3a0
[  298.267768][ T9394]  ? __pfx___mm_populate+0x10/0x10
[  298.267787][ T9394]  ? up_write+0x28c/0x4f0
[  298.267805][ T9394]  vm_mmap_pgoff+0x37f/0x470
[  298.267826][ T9394]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  298.267845][ T9394]  ? do_futex+0x192/0x350
[  298.267861][ T9394]  ? __pfx_do_futex+0x10/0x10
[  298.267880][ T9394]  ksys_mmap_pgoff+0xe4/0x610
[  298.267898][ T9394]  ? __x64_sys_futex+0x358/0x4d0
[  298.267914][ T9394]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  298.267931][ T9394]  ? xfd_validate_state+0x129/0x190
[  298.267945][ T9394]  ? ksys_write+0x1ac/0x250
[  298.267965][ T9394]  __x64_sys_mmap+0x125/0x190
[  298.267983][ T9394]  do_syscall_64+0x10b/0xf80
[  298.268003][ T9394]  ? clear_bhb_loop+0x40/0x90
[  298.268020][ T9394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.268035][ T9394] RIP: 0033:0x7f712c79cdd9
[  298.268048][ T9394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.268062][ T9394] RSP: 002b:00007f712d591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  298.268077][ T9394] RAX: ffffffffffffffda RBX: 00007f712ca15fa0 RCX: 00007f712c79cdd9
[  298.268087][ T9394] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000
[  298.268095][ T9394] RBP: 00007f712c832d69 R08: 0000000000000002 R09: 0000000000008000
[  298.268104][ T9394] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  298.268113][ T9394] R13: 00007f712ca16038 R14: 00007f712ca15fa0 R15: 00007ffded9c5e18
[  298.268132][ T9394]  </TASK>
[  299.139347][ T9385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.553274][ T9385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.689076][ T9385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.161018][ T9392] Process accounting resumed
[  301.762181][ T9423] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[  302.166465][ T9436] zram: Removed device: zram0
[  302.479745][ T9440] FAULT_INJECTION: forcing a failure.
[  302.479745][ T9440] name fail_futex, interval 1, probability 0, space 0, times 0
[  302.507996][ T9440] CPU: 0 UID: 0 PID: 9440 Comm: syz.1.754 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  302.508022][ T9440] Tainted: [L]=SOFTLOCKUP
[  302.508027][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  302.508036][ T9440] Call Trace:
[  302.508041][ T9440]  <TASK>
[  302.508046][ T9440]  dump_stack_lvl+0x100/0x190
[  302.508067][ T9440]  should_fail_ex.cold+0x5/0xa
[  302.508095][ T9440]  get_futex_key+0x1d2/0x1510
[  302.508112][ T9440]  ? __pfx_get_futex_key+0x10/0x10
[  302.508125][ T9440]  ? pick_eevdf+0x4d3/0x860
[  302.508147][ T9440]  ? update_se+0x94/0x770
[  302.508172][ T9440]  futex_wait_setup+0x83/0x510
[  302.508196][ T9440]  __futex_wait+0x19f/0x300
[  302.508216][ T9440]  ? __pfx___futex_wait+0x10/0x10
[  302.508234][ T9440]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  302.508257][ T9440]  ? __pfx_futex_wake_mark+0x10/0x10
[  302.508285][ T9440]  ? find_held_lock+0x2b/0x80
[  302.508303][ T9440]  ? futex_wake+0x456/0x530
[  302.508325][ T9440]  futex_wait+0xe6/0x370
[  302.508344][ T9440]  ? __pfx_futex_wait+0x10/0x10
[  302.508367][ T9440]  ? errseq_sample+0x51/0x70
[  302.508381][ T9440]  ? file_init_path+0x48e/0x670
[  302.508404][ T9440]  do_futex+0x1ef/0x350
[  302.508420][ T9440]  ? __pfx_do_futex+0x10/0x10
[  302.508435][ T9440]  ? fd_install+0x223/0x580
[  302.508455][ T9440]  __x64_sys_futex+0x34f/0x4d0
[  302.508471][ T9440]  ? __sys_socket+0xac/0x260
[  302.508492][ T9440]  ? __pfx___x64_sys_futex+0x10/0x10
[  302.508507][ T9440]  ? ksys_read+0x1ac/0x250
[  302.508525][ T9440]  ? rcu_is_watching+0x12/0xc0
[  302.508545][ T9440]  do_syscall_64+0x10b/0xf80
[  302.508568][ T9440]  ? clear_bhb_loop+0x40/0x90
[  302.508586][ T9440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.508600][ T9440] RIP: 0033:0x7fb10fb9cdd9
[  302.508613][ T9440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.508626][ T9440] RSP: 002b:00007fb110b280e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  302.508640][ T9440] RAX: ffffffffffffffda RBX: 00007fb10fe15fa8 RCX: 00007fb10fb9cdd9
[  302.508650][ T9440] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb10fe15fa8
[  302.508659][ T9440] RBP: 00007fb10fe15fa0 R08: 0000000000000000 R09: 0000000000000000
[  302.508667][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.508675][ T9440] R13: 00007fb10fe16038 R14: 00007ffdec324880 R15: 00007ffdec324968
[  302.508693][ T9440]  </TASK>
[  306.106435][ T9498] syz_tun: refused to change device tx_queue_len
[  306.122152][ T9498] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  306.181826][ T9498] CIFS mount error: No usable UNC path provided in device string!
[  306.181826][ T9498] 
[  306.204134][ T9498] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  309.115539][ T9539] binder: 9538:9539 ioctl c00c620f 200000000080 returned -22
[  310.085239][ T9564] synth uevent: /devices/virtual/tty/ptypf: unknown uevent action string
[  310.104298][ T9564] tty ptypf: uevent: failed to send synthetic uevent: -22
[  310.590060][ T9560] ptp: physical clock is free running
[  311.890029][ T9620] MTRR 1 not used
[  312.297671][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  312.310957][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  312.318925][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  312.327798][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  312.337269][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  313.486482][ T9645] random: crng reseeded on system resumption
[  314.074650][ T9626] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.107149][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.142426][ T9626] bridge_slave_0: entered allmulticast mode
[  314.168358][ T9626] bridge_slave_0: entered promiscuous mode
[  314.199230][ T9626] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.228252][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.252096][ T9626] bridge_slave_1: entered allmulticast mode
[  314.273737][ T9626] bridge_slave_1: entered promiscuous mode
[  314.381283][ T5629] Bluetooth: hci4: command tx timeout
[  314.389680][ T9626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.433504][ T9626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.623841][ T9626] team0: Port device team_slave_0 added
[  314.695360][ T9626] team0: Port device team_slave_1 added
[  314.847482][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.864110][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.875649][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.883408][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.893913][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.042425][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.073202][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.192438][ T9626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.227229][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.251984][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  315.336459][ T9626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.629550][ T9626] hsr_slave_0: entered promiscuous mode
[  315.692021][ T9626] hsr_slave_1: entered promiscuous mode
[  315.716656][ T9626] debugfs: 'hsr0' already exists in 'hsr'
[  315.738967][ T9626] Cannot create hsr debugfs directory
[  316.461570][ T5638] Bluetooth: hci4: command tx timeout
[  316.939777][ T5638] Bluetooth: hci5: command tx timeout
[  317.106139][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  317.114108][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  317.762790][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.796716][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.827112][ T9676] bridge_slave_0: entered allmulticast mode
[  317.857320][ T9676] bridge_slave_0: entered promiscuous mode
[  317.890754][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.934092][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.974188][ T9676] bridge_slave_1: entered allmulticast mode
[  318.009267][ T9676] bridge_slave_1: entered promiscuous mode
[  318.125657][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.180998][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.314919][ T9676] team0: Port device team_slave_0 added
[  318.347722][ T9676] team0: Port device team_slave_1 added
[  318.450960][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  318.482230][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.542523][ T5638] Bluetooth: hci4: command tx timeout
[  318.612118][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  318.662153][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.687528][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.822180][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.902839][ T9721] synth uevent: /module/dm_thin_pool: unknown uevent action string
[  319.000542][ T9722] synth uevent: /module/dm_thin_pool: unknown uevent action string
[  319.020694][ T5638] Bluetooth: hci5: command tx timeout
[  319.032018][ T9676] hsr_slave_0: entered promiscuous mode
[  319.061817][ T9676] hsr_slave_1: entered promiscuous mode
[  319.088822][ T9676] debugfs: 'hsr0' already exists in 'hsr'
[  319.114854][ T9676] Cannot create hsr debugfs directory
[  320.535148][ T5638] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18
[  320.542878][ T5638] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff
[  320.621546][ T5629] Bluetooth: hci4: command tx timeout
[  321.098152][ T5629] Bluetooth: hci5: command tx timeout
[  322.116097][ T9762] futex_wake_op: syz.1.813 tries to shift op by -2048; fix this program
[  322.148561][ T9761] futex_wake_op: syz.1.813 tries to shift op by -2048; fix this program
[  322.175946][ T9763] 0x000700000001-0x00070063736a : ""
[  322.194693][ T9763] mtd: partition "" is out of reach -- disabled
[  322.252439][ T9763] ftl_cs: FTL header not found.
[  322.773503][ T9780] tc_dump_action: action bad kind
[  323.178718][ T5629] Bluetooth: hci5: command tx timeout
[  324.668875][ T9818] FAULT_INJECTION: forcing a failure.
[  324.668875][ T9818] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  324.728298][ T9818] CPU: 0 UID: 0 PID: 9818 Comm: syz.1.822 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  324.728324][ T9818] Tainted: [L]=SOFTLOCKUP
[  324.728330][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  324.728338][ T9818] Call Trace:
[  324.728344][ T9818]  <TASK>
[  324.728350][ T9818]  dump_stack_lvl+0x100/0x190
[  324.728372][ T9818]  should_fail_ex.cold+0x5/0xa
[  324.728389][ T9818]  ? prepare_alloc_pages+0x16d/0x5f0
[  324.728409][ T9818]  should_fail_alloc_page+0xeb/0x140
[  324.728428][ T9818]  prepare_alloc_pages+0x1f0/0x5f0
[  324.728449][ T9818]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  324.728474][ T9818]  ? rcu_is_watching+0x12/0xc0
[  324.728494][ T9818]  ? __lock_acquire+0x4a5/0x2630
[  324.728507][ T9818]  ? css_rstat_updated+0x1ce/0x5a0
[  324.728530][ T9818]  ? __pfx_css_rstat_updated+0x10/0x10
[  324.728553][ T9818]  ? xas_create+0x1f4/0x14e0
[  324.728575][ T9818]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  324.728600][ T9818]  ? rcu_is_watching+0x12/0xc0
[  324.728617][ T9818]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[  324.728641][ T9818]  ? find_held_lock+0x2b/0x80
[  324.728666][ T9818]  ? __lock_acquire+0x4a5/0x2630
[  324.728680][ T9818]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  324.728702][ T9818]  ? policy_nodemask+0xed/0x4f0
[  324.728720][ T9818]  alloc_pages_mpol+0x1fb/0x540
[  324.728744][ T9818]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  324.728762][ T9818]  ? filemap_get_entry+0x22d/0x450
[  324.728777][ T9818]  ? filemap_get_entry+0x22d/0x450
[  324.728794][ T9818]  folio_alloc_noprof+0x22/0x250
[  324.728815][ T9818]  filemap_alloc_folio_noprof.part.0+0x377/0x450
[  324.728839][ T9818]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  324.728861][ T9818]  ? rcu_is_watching+0x12/0xc0
[  324.728880][ T9818]  __filemap_get_folio_mpol+0x6a4/0xe70
[  324.728900][ T9818]  ioctx_alloc+0x7e1/0x21a0
[  324.728928][ T9818]  ? __pfx_ioctx_alloc+0x10/0x10
[  324.728953][ T9818]  __x64_sys_io_setup+0xc9/0x220
[  324.728974][ T9818]  do_syscall_64+0x10b/0xf80
[  324.728994][ T9818]  ? clear_bhb_loop+0x40/0x90
[  324.729012][ T9818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.729026][ T9818] RIP: 0033:0x7fb10fb9cdd9
[  324.729040][ T9818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.729053][ T9818] RSP: 002b:00007fb110b28028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  324.729068][ T9818] RAX: ffffffffffffffda RBX: 00007fb10fe15fa0 RCX: 00007fb10fb9cdd9
[  324.729078][ T9818] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe
[  324.729086][ T9818] RBP: 00007fb10fc32d69 R08: 0000000000000000 R09: 0000000000000000
[  324.729094][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.729103][ T9818] R13: 00007fb10fe16038 R14: 00007fb10fe15fa0 R15: 00007ffdec324968
[  324.729121][ T9818]  </TASK>
[  325.017814][ T9818] binder: 9817:9818 ioctl c00c620f 0 returned -22
[  329.419513][ T9839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.828'.
[  329.496844][ T9839] bond0: (slave bond_slave_1): Releasing backup interface
[  329.902432][ T9848] ubi0: attaching mtd0
[  329.952161][ T9848] ubi0: scanning is finished
[  329.996582][ T9848] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  330.276188][ T9848] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  331.020502][   T29] audit: type=1800 audit(4294985799.183:19): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.834" name="dbroot" dev="configfs" ino=31705 res=0 errno=0
[  331.574521][ T9872] Process accounting paused
[  332.808022][ T9908] ubi0: attaching mtd0
[  332.838868][ T9908] ubi0: scanning is finished
[  332.857611][ T9908] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  333.013721][ T9908] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  333.429855][ T9905] Process accounting resumed
[  334.642357][ T9946] bond0: invalid ARP target specified
[  334.797441][ T9951] netlink: 'syz.3.853': attribute type 1 has an invalid length.
[  335.966983][ T9985] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  336.390135][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'.
[  338.018085][T10032] futex_wake_op: syz.3.870 tries to shift op by -2048; fix this program
[  338.056929][T10032] 0x000000000001-0x000000020000 : ""
[  338.085603][T10032] ftl_cs: FTL header corrupt!
[  339.184807][T10046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.872'.
[  339.214561][T10046] nbd: must specify at least one socket
[  340.388931][T10058] kafs: addr_prefs: Invalid Command
[  341.904654][T10084] can0: slcan on pty238.
[  343.467551][T10084] can0 (unregistered): slcan off pty238.
[  344.305260][T10127] random: crng reseeded on system resumption
[  345.411003][T10171] overlayfs: "check_copy_up" module option is obsolete
[  345.648596][T10174] FAULT_INJECTION: forcing a failure.
[  345.648596][T10174] name failslab, interval 1, probability 0, space 0, times 0
[  345.662218][T10174] CPU: 0 UID: 0 PID: 10174 Comm: syz.1.890 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  345.662244][T10174] Tainted: [L]=SOFTLOCKUP
[  345.662249][T10174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  345.662258][T10174] Call Trace:
[  345.662264][T10174]  <TASK>
[  345.662270][T10174]  dump_stack_lvl+0x100/0x190
[  345.662292][T10174]  should_fail_ex.cold+0x5/0xa
[  345.662312][T10174]  should_failslab+0xc2/0x120
[  345.662330][T10174]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  345.662353][T10174]  ? vm_area_alloc+0x1f/0x160
[  345.662376][T10174]  vm_area_alloc+0x1f/0x160
[  345.662405][T10174]  __mmap_region+0x104d/0x2da0
[  345.662432][T10174]  ? __pfx___mmap_region+0x10/0x10
[  345.662458][T10174]  ? rcu_is_watching+0x12/0xc0
[  345.662476][T10174]  ? trace_pelt_se_tp+0x13b/0x190
[  345.662495][T10174]  ? do_raw_spin_lock+0x128/0x260
[  345.662514][T10174]  ? __lock_acquire+0x4a5/0x2630
[  345.662529][T10174]  ? do_raw_spin_unlock+0x145/0x1e0
[  345.662556][T10174]  ? rcu_is_watching+0x12/0xc0
[  345.662584][T10174]  ? mark_held_locks+0x40/0x70
[  345.662597][T10174]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  345.662648][T10174]  mmap_region+0x527/0x620
[  345.662663][T10174]  ? __pfx_mmap_region+0x10/0x10
[  345.662679][T10174]  ? cap_mmap_addr+0x4b/0x120
[  345.662700][T10174]  ? bpf_lsm_mmap_addr+0x9/0x30
[  345.662714][T10174]  ? security_mmap_addr+0x71/0x1e0
[  345.662731][T10174]  ? __get_unmapped_area+0x255/0x3e0
[  345.662751][T10174]  do_mmap+0xc63/0x12f0
[  345.662773][T10174]  ? __pfx_do_mmap+0x10/0x10
[  345.662790][T10174]  ? __pfx_down_write_killable+0x10/0x10
[  345.662809][T10174]  vm_mmap_pgoff+0x29e/0x470
[  345.662831][T10174]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  345.662848][T10174]  ? __fget_files+0x215/0x3d0
[  345.662869][T10174]  ? __fget_files+0x21f/0x3d0
[  345.662890][T10174]  ksys_mmap_pgoff+0x3cb/0x610
[  345.662908][T10174]  ? __x64_sys_futex+0x358/0x4d0
[  345.662924][T10174]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  345.662941][T10174]  ? xfd_validate_state+0x129/0x190
[  345.662955][T10174]  ? ksys_write+0x1ac/0x250
[  345.662975][T10174]  __x64_sys_mmap+0x125/0x190
[  345.662993][T10174]  do_syscall_64+0x10b/0xf80
[  345.663013][T10174]  ? clear_bhb_loop+0x40/0x90
[  345.663031][T10174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.663045][T10174] RIP: 0033:0x7fb10fb9cdd9
[  345.663059][T10174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  345.663077][T10174] RSP: 002b:00007fb110b07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  345.663092][T10174] RAX: ffffffffffffffda RBX: 00007fb10fe16090 RCX: 00007fb10fb9cdd9
[  345.663101][T10174] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000
[  345.663110][T10174] RBP: 00007fb10fc32d69 R08: 00000000000000dd R09: 0000000000000000
[  345.663119][T10174] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000
[  345.663128][T10174] R13: 00007fb10fe16128 R14: 00007fb10fe16090 R15: 00007ffdec324968
[  345.663148][T10174]  </TASK>
[  346.840138][T10184] FAULT_INJECTION: forcing a failure.
[  346.840138][T10184] name fail_futex, interval 1, probability 0, space 0, times 0
[  346.853988][T10184] CPU: 0 UID: 0 PID: 10184 Comm: syz.1.893 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  346.854014][T10184] Tainted: [L]=SOFTLOCKUP
[  346.854020][T10184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  346.854028][T10184] Call Trace:
[  346.854033][T10184]  <TASK>
[  346.854039][T10184]  dump_stack_lvl+0x100/0x190
[  346.854059][T10184]  should_fail_ex.cold+0x5/0xa
[  346.854086][T10184]  get_futex_key+0x1d2/0x1510
[  346.854103][T10184]  ? __pfx_get_futex_key+0x10/0x10
[  346.854124][T10184]  futex_wake+0xea/0x530
[  346.854145][T10184]  ? __pfx_futex_wake+0x10/0x10
[  346.854166][T10184]  ? errseq_sample+0x51/0x70
[  346.854181][T10184]  ? file_init_path+0x48e/0x670
[  346.854204][T10184]  do_futex+0x32b/0x350
[  346.854220][T10184]  ? __pfx_do_futex+0x10/0x10
[  346.854236][T10184]  ? fd_install+0x223/0x580
[  346.854256][T10184]  __x64_sys_futex+0x34f/0x4d0
[  346.854273][T10184]  ? __sys_socket+0xac/0x260
[  346.854294][T10184]  ? __pfx___x64_sys_futex+0x10/0x10
[  346.854311][T10184]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  346.854333][T10184]  ? syscall_user_dispatch+0x76/0x130
[  346.854352][T10184]  do_syscall_64+0x10b/0xf80
[  346.854372][T10184]  ? clear_bhb_loop+0x40/0x90
[  346.854390][T10184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.854404][T10184] RIP: 0033:0x7fb10fb9cdd9
[  346.854418][T10184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.854431][T10184] RSP: 002b:00007fb110b280e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  346.854445][T10184] RAX: ffffffffffffffda RBX: 00007fb10fe15fa8 RCX: 00007fb10fb9cdd9
[  346.854455][T10184] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb10fe15fac
[  346.854464][T10184] RBP: 00007fb10fe15fa0 R08: 0000000000000001 R09: 0000000000000000
[  346.854472][T10184] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  346.854480][T10184] R13: 00007fb10fe16038 R14: 00007ffdec324880 R15: 00007ffdec324968
[  346.854498][T10184]  </TASK>
[  347.283510][T10190] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  347.655392][T10197] zswap: compressor  not available
[  348.236360][T10206] netlink: 21 bytes leftover after parsing attributes in process `syz.1.897'.
[  349.563702][T10212] ecryptfs_miscdev_write: Error while inspecting packet size
[  354.558647][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  354.571844][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  354.582016][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  354.590414][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  354.606507][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  355.036879][T10318] netlink: 'syz.1.910': attribute type 2 has an invalid length.
[  355.060593][T10318] netlink: 'syz.1.910': attribute type 3 has an invalid length.
[  355.077337][T10318] netlink: 158 bytes leftover after parsing attributes in process `syz.1.910'.
[  355.101044][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'.
[  355.644497][T10302] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.662400][T10302] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.673737][T10302] bridge_slave_0: entered allmulticast mode
[  355.680946][T10302] bridge_slave_0: entered promiscuous mode
[  355.688722][T10302] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.697519][T10302] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.704976][T10302] bridge_slave_1: entered allmulticast mode
[  355.712293][T10302] bridge_slave_1: entered promiscuous mode
[  355.754371][T10302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.766765][T10302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.798628][T10302] team0: Port device team_slave_0 added
[  355.807544][T10302] team0: Port device team_slave_1 added
[  355.831952][T10302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.838995][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.867196][T10302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.879584][T10302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.887701][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.915156][T10302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.959517][T10302] hsr_slave_0: entered promiscuous mode
[  355.966207][T10302] hsr_slave_1: entered promiscuous mode
[  355.974678][T10302] debugfs: 'hsr0' already exists in 'hsr'
[  355.980636][T10302] Cannot create hsr debugfs directory
[  356.679942][ T5638] Bluetooth: hci6: command tx timeout
[  357.275815][ T5638] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260
[  357.275839][ T5638] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15
[  357.292034][ T5638] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f
[  357.307672][T10345] netlink: 36 bytes leftover after parsing attributes in process `syz.1.914'.
[  358.758795][ T5638] Bluetooth: hci6: command tx timeout
[  360.094666][T10392] Process accounting resumed
[  360.837808][ T5638] Bluetooth: hci6: command tx timeout
[  361.447763][T10407] syz.1.922 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  361.504252][T10407] CPU: 0 UID: 0 PID: 10407 Comm: syz.1.922 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  361.504278][T10407] Tainted: [L]=SOFTLOCKUP
[  361.504284][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  361.504293][T10407] Call Trace:
[  361.504299][T10407]  <TASK>
[  361.504305][T10407]  dump_stack_lvl+0x100/0x190
[  361.504326][T10407]  dump_header+0xfb/0x606
[  361.504344][T10407]  oom_kill_process.cold+0xd/0x330
[  361.504362][T10407]  out_of_memory+0x340/0x14f0
[  361.504389][T10407]  ? __pfx_out_of_memory+0x10/0x10
[  361.504417][T10407]  mem_cgroup_out_of_memory+0xc6/0x130
[  361.504440][T10407]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  361.504460][T10407]  ? find_held_lock+0x2b/0x80
[  361.504486][T10407]  ? do_raw_spin_unlock+0x145/0x1e0
[  361.504504][T10407]  ? _raw_spin_unlock+0x28/0x50
[  361.504525][T10407]  try_charge_memcg+0x6e5/0xdf0
[  361.504547][T10407]  ? __pfx_try_charge_memcg+0x10/0x10
[  361.504563][T10407]  ? find_held_lock+0x2b/0x80
[  361.504581][T10407]  ? rcu_read_unlock+0x17/0x60
[  361.504598][T10407]  ? rcu_read_unlock+0x17/0x60
[  361.504615][T10407]  ? find_held_lock+0x2b/0x80
[  361.504634][T10407]  ? rcu_read_unlock+0x17/0x60
[  361.504655][T10407]  charge_memcg+0x19f/0x210
[  361.504673][T10407]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  361.504696][T10407]  __swap_cache_prepare_and_add+0x842/0xa20
[  361.504719][T10407]  ? alloc_pages_mpol+0x25a/0x540
[  361.504741][T10407]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  361.504762][T10407]  ? __pfx_swap_entry_swapped+0x10/0x10
[  361.504785][T10407]  swap_cache_alloc_folio+0x1cb/0x300
[  361.504808][T10407]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  361.504837][T10407]  swap_cluster_readahead+0x411/0x770
[  361.504864][T10407]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  361.504892][T10407]  ? lru_gen_add_folio+0x20f/0x13d0
[  361.504913][T10407]  ? get_vma_policy+0x23d/0x3b0
[  361.504932][T10407]  swapin_readahead+0x160/0x12c0
[  361.504960][T10407]  ? __pfx_swapin_readahead+0x10/0x10
[  361.504989][T10407]  ? find_held_lock+0x2b/0x80
[  361.505007][T10407]  ? swap_table_get+0x103/0x2c0
[  361.505032][T10407]  ? swap_table_get+0x10d/0x2c0
[  361.505053][T10407]  ? swap_cache_get_folio+0x286/0x350
[  361.505075][T10407]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  361.505096][T10407]  ? __pfx_get_swap_device+0x10/0x10
[  361.505116][T10407]  ? do_swap_page+0x931/0x6180
[  361.505136][T10407]  do_swap_page+0x931/0x6180
[  361.505165][T10407]  ? __pfx_do_swap_page+0x10/0x10
[  361.505187][T10407]  ? __free_object+0x2a8/0x3f0
[  361.505208][T10407]  ? lockdep_hardirqs_on+0x78/0x100
[  361.505230][T10407]  ? rcu_is_watching+0x12/0xc0
[  361.505248][T10407]  ? __pte_offset_map+0x179/0x310
[  361.505267][T10407]  __handle_mm_fault+0x192f/0x2a00
[  361.505292][T10407]  ? reacquire_held_locks+0xce/0x1e0
[  361.505307][T10407]  ? __pfx___handle_mm_fault+0x10/0x10
[  361.505331][T10407]  ? lock_vma_under_rcu+0x17c/0x590
[  361.505364][T10407]  handle_mm_fault+0x36d/0xa20
[  361.505389][T10407]  do_user_addr_fault+0x5a3/0x12f0
[  361.505412][T10407]  exc_page_fault+0x6f/0xd0
[  361.505433][T10407]  asm_exc_page_fault+0x26/0x30
[  361.505447][T10407] RIP: 0033:0x7fb10fb5d5e0
[  361.505462][T10407] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89
[  361.505476][T10407] RSP: 002b:00007ffdec324a48 EFLAGS: 00010246
[  361.505488][T10407] RAX: 0000000000000000 RBX: 00005555718cd500 RCX: 0000000000000000
[  361.505497][T10407] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 00005555718cd808
[  361.505506][T10407] RBP: 00007fb10fe17da0 R08: 00007ffdec324aa0 R09: 0000000000000000
[  361.505515][T10407] R10: 0000000000000000 R11: 00005555718cd808 R12: 0000000000058477
[  361.505524][T10407] R13: 00007fb10fe1609c R14: 000000000005829b R15: 00007fb10fe16090
[  361.505543][T10407]  </TASK>
[  361.882495][T10407] memory: usage 307200kB, limit 307200kB, failcnt 9694
[  361.889427][T10407] memory+swap: usage 307884kB, limit 9007199254740988kB, failcnt 0
[  361.897334][T10407] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0
[  361.905172][T10407] Memory cgroup stats for /syz1:
[  361.905501][T10407] cache 0
[  361.913392][T10407] rss 0
[  361.916130][T10407] rss_huge 0
[  361.920486][T10407] shmem 0
[  361.923412][T10407] mapped_file 0
[  361.926847][T10407] dirty 0
[  361.929800][T10407] writeback 0
[  361.933063][T10407] workingset_refault_anon 4929
[  361.938467][T10407] workingset_refault_file 6139
[  361.943213][T10407] swap 700416
[  361.946477][T10407] swapcached 62906368
[  361.950465][T10407] pgpgin 421079
[  361.953907][T10407] pgpgout 423810
[  361.957546][T10407] pgfault 269688
[  361.961072][T10407] pgmajfault 1053
[  361.964680][T10407] inactive_anon 57344
[  361.968678][T10407] active_anon 0
[  361.972116][T10407] inactive_file 0
[  361.975723][T10407] active_file 0
[  361.979289][T10407] unevictable 0
[  361.982724][T10407] hierarchical_memory_limit 314572800
[  361.988090][T10407] hierarchical_memsw_limit 9223372036854771712
[  361.994219][T10407] total_cache 0
[  361.997692][T10407] total_rss 0
[  362.000954][T10407] total_rss_huge 0
[  362.004652][T10407] total_shmem 0
[  362.008689][T10407] total_mapped_file 0
[  362.012654][T10407] total_dirty 0
[  362.016087][T10407] total_writeback 0
[  362.019926][T10407] total_workingset_refault_anon 4929
[  362.025194][T10407] total_workingset_refault_file 6139
[  362.030511][T10407] total_swap 700416
[  362.034301][T10407] total_swapcached 62906368
[  362.039593][T10407] total_pgpgin 421079
[  362.043562][T10407] total_pgpgout 423810
[  362.047655][T10407] total_pgfault 269688
[  362.051703][T10407] total_pgmajfault 1053
[  362.055838][T10407] total_inactive_anon 57344
[  362.060375][T10407] total_active_anon 0
[  362.064334][T10407] total_inactive_file 0
[  362.068501][T10407] total_active_file 0
[  362.072462][T10407] total_unevictable 0
[  362.076419][T10407] anon_cost 0
[  362.079709][T10407] file_cost 0
[  362.082974][T10407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.922,pid=10407,uid=0
[  362.100424][T10407] Memory cgroup out of memory: Killed process 10407 (syz.1.922) total-vm:172400kB, anon-rss:1244kB, file-rss:25816kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  362.523428][ T5625] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  362.583362][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  362.583386][ T5625] Tainted: [L]=SOFTLOCKUP
[  362.583391][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  362.583400][ T5625] Call Trace:
[  362.583405][ T5625]  <TASK>
[  362.583411][ T5625]  dump_stack_lvl+0x100/0x190
[  362.583435][ T5625]  dump_header+0xfb/0x606
[  362.583453][ T5625]  oom_kill_process.cold+0xd/0x330
[  362.583471][ T5625]  out_of_memory+0x340/0x14f0
[  362.583498][ T5625]  ? __pfx_out_of_memory+0x10/0x10
[  362.583525][ T5625]  mem_cgroup_out_of_memory+0xc6/0x130
[  362.583548][ T5625]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  362.583569][ T5625]  ? find_held_lock+0x2b/0x80
[  362.583592][ T5625]  ? do_raw_spin_unlock+0x145/0x1e0
[  362.583609][ T5625]  ? _raw_spin_unlock+0x28/0x50
[  362.583630][ T5625]  try_charge_memcg+0x6e5/0xdf0
[  362.583652][ T5625]  ? __pfx_try_charge_memcg+0x10/0x10
[  362.583669][ T5625]  ? find_held_lock+0x2b/0x80
[  362.583686][ T5625]  ? rcu_read_unlock+0x17/0x60
[  362.583704][ T5625]  ? rcu_read_unlock+0x17/0x60
[  362.583721][ T5625]  ? find_held_lock+0x2b/0x80
[  362.583740][ T5625]  ? rcu_read_unlock+0x17/0x60
[  362.583761][ T5625]  charge_memcg+0x19f/0x210
[  362.583780][ T5625]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  362.583802][ T5625]  __swap_cache_prepare_and_add+0x842/0xa20
[  362.583826][ T5625]  ? alloc_pages_mpol+0x25a/0x540
[  362.583847][ T5625]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  362.583869][ T5625]  ? __pfx_swap_entry_swapped+0x10/0x10
[  362.583897][ T5625]  swap_cache_alloc_folio+0x1cb/0x300
[  362.583921][ T5625]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  362.583943][ T5625]  ? mark_held_locks+0x40/0x70
[  362.583956][ T5625]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  362.583981][ T5625]  swap_cluster_readahead+0x53b/0x770
[  362.584008][ T5625]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  362.584040][ T5625]  ? do_raw_spin_unlock+0x145/0x1e0
[  362.584059][ T5625]  ? get_vma_policy+0x23d/0x3b0
[  362.584078][ T5625]  swapin_readahead+0x160/0x12c0
[  362.584099][ T5625]  ? do_raw_spin_lock+0x128/0x260
[  362.584121][ T5625]  ? __pfx_swapin_readahead+0x10/0x10
[  362.584143][ T5625]  ? find_held_lock+0x2b/0x80
[  362.584161][ T5625]  ? swap_table_get+0x103/0x2c0
[  362.584185][ T5625]  ? swap_table_get+0x10d/0x2c0
[  362.584207][ T5625]  ? swap_cache_get_folio+0x286/0x350
[  362.584229][ T5625]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  362.584249][ T5625]  ? __pfx_get_swap_device+0x10/0x10
[  362.584270][ T5625]  ? do_swap_page+0x931/0x6180
[  362.584289][ T5625]  do_swap_page+0x931/0x6180
[  362.584319][ T5625]  ? __pfx_do_swap_page+0x10/0x10
[  362.584341][ T5625]  ? __free_object+0x2a8/0x3f0
[  362.584362][ T5625]  ? lockdep_hardirqs_on+0x78/0x100
[  362.584384][ T5625]  ? rcu_is_watching+0x12/0xc0
[  362.584401][ T5625]  ? __pte_offset_map+0x179/0x310
[  362.584421][ T5625]  __handle_mm_fault+0x192f/0x2a00
[  362.584446][ T5625]  ? reacquire_held_locks+0xce/0x1e0
[  362.584461][ T5625]  ? __pfx___handle_mm_fault+0x10/0x10
[  362.584485][ T5625]  ? lock_vma_under_rcu+0x17c/0x590
[  362.584518][ T5625]  handle_mm_fault+0x36d/0xa20
[  362.584543][ T5625]  do_user_addr_fault+0x5a3/0x12f0
[  362.584567][ T5625]  exc_page_fault+0x6f/0xd0
[  362.584587][ T5625]  asm_exc_page_fault+0x26/0x30
[  362.584602][ T5625] RIP: 0033:0x7fb10fb5d60e
[  362.584615][ T5625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  362.584628][ T5625] RSP: 002b:00007ffdec324c48 EFLAGS: 00010246
[  362.584640][ T5625] RAX: 0000000000000000 RBX: 00005555718cd500 RCX: 00007fb10fb5d60e
[  362.584649][ T5625] RDX: 00007ffdec324ca0 RSI: 0000000000000000 RDI: 0000000000000000
[  362.584657][ T5625] RBP: 00007ffdec324d0c R08: 0000000000000000 R09: 0000000000000000
[  362.584666][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  362.584674][ T5625] R13: 00000000000927c0 R14: 0000000000058296 R15: 00007ffdec324d60
[  362.584693][ T5625]  </TASK>
[  362.584706][ T5625] memory: usage 307200kB, limit 307200kB, failcnt 10317
[  363.000651][ T5638] Bluetooth: hci6: command tx timeout
[  363.516394][ T5625] memory+swap: usage 181784kB, limit 9007199254740988kB, failcnt 0
[  363.526708][ T5625] kmem: usage 180308kB, limit 9007199254740988kB, failcnt 0
[  363.542353][ T5625] Memory cgroup stats for /syz1:
[  363.542462][ T5625] cache 0
[  363.567842][ T5625] rss 0
[  363.570644][ T5625] rss_huge 0
[  363.574733][ T5625] shmem 0
[  363.581532][ T5625] mapped_file 0
[  363.596607][ T5625] dirty 0
[  363.599572][ T5625] writeback 0
[  363.602839][ T5625] workingset_refault_anon 4929
[  363.616322][ T5625] workingset_refault_file 6139
[  363.621119][ T5625] swap 700416
[  363.624384][ T5625] swapcached 62906368
[  363.637523][ T5625] pgpgin 421079
[  363.643931][ T5625] pgpgout 423810
[  363.656307][ T5625] pgfault 269698
[  363.659881][ T5625] pgmajfault 1053
[  363.663494][ T5625] inactive_anon 0
[  363.674519][ T5625] active_anon 57344
[  363.686681][ T5625] inactive_file 0
[  363.691816][ T5625] active_file 0
[  363.706239][ T5625] unevictable 0
[  363.709726][ T5625] hierarchical_memory_limit 314572800
[  363.715073][ T5625] hierarchical_memsw_limit 9223372036854771712
[  363.736273][ T5625] total_cache 0
[  363.739764][ T5625] total_rss 0
[  363.743029][ T5625] total_rss_huge 0
[  363.756259][ T5625] total_shmem 0
[  363.761226][ T5625] total_mapped_file 0
[  363.776950][ T5625] total_dirty 0
[  363.780457][ T5625] total_writeback 0
[  363.784244][ T5625] total_workingset_refault_anon 4929
[  363.798155][ T5625] total_workingset_refault_file 6139
[  363.816237][ T5625] total_swap 700416
[  363.820079][ T5625] total_swapcached 62906368
[  363.824644][ T5625] total_pgpgin 421079
[  363.836215][ T5625] total_pgpgout 423810
[  363.846318][ T5625] total_pgfault 269698
[  363.852707][ T5625] total_pgmajfault 1053
[  363.866171][ T5625] total_inactive_anon 0
[  363.870344][ T5625] total_active_anon 57344
[  363.874650][ T5625] total_inactive_file 0
[  363.897741][ T5625] total_active_file 0
[  363.901763][ T5625] total_unevictable 0
[  363.905729][ T5625] anon_cost 0
[  363.916361][ T5625] file_cost 0
[  363.921078][ T5625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.876,pid=10067,uid=0
[  363.951815][ T5625] Memory cgroup out of memory: Killed process 10067 (syz.1.876) total-vm:102496kB, anon-rss:1244kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000
[  364.682742][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'.
[  366.542846][T10433] random: crng reseeded on system resumption
[  366.570718][T10433] hub 1-0:1.0: USB hub found
[  366.577471][T10433] hub 1-0:1.0: 1 port detected
[  368.126275][T10447] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  370.572394][T10466] syz.1.936 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  370.607941][T10466] CPU: 0 UID: 0 PID: 10466 Comm: syz.1.936 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  370.607967][T10466] Tainted: [L]=SOFTLOCKUP
[  370.607973][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  370.607982][T10466] Call Trace:
[  370.607987][T10466]  <TASK>
[  370.607992][T10466]  dump_stack_lvl+0x100/0x190
[  370.608014][T10466]  dump_header+0xfb/0x606
[  370.608031][T10466]  oom_kill_process.cold+0xd/0x330
[  370.608049][T10466]  out_of_memory+0x340/0x14f0
[  370.608076][T10466]  ? __pfx_out_of_memory+0x10/0x10
[  370.608103][T10466]  mem_cgroup_out_of_memory+0xc6/0x130
[  370.608126][T10466]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  370.608150][T10466]  ? find_held_lock+0x2b/0x80
[  370.608173][T10466]  ? do_raw_spin_unlock+0x145/0x1e0
[  370.608191][T10466]  ? _raw_spin_unlock+0x28/0x50
[  370.608211][T10466]  try_charge_memcg+0x6e5/0xdf0
[  370.608233][T10466]  ? __pfx_try_charge_memcg+0x10/0x10
[  370.608249][T10466]  ? find_held_lock+0x2b/0x80
[  370.608267][T10466]  ? rcu_read_unlock+0x17/0x60
[  370.608284][T10466]  ? rcu_read_unlock+0x17/0x60
[  370.608302][T10466]  ? find_held_lock+0x2b/0x80
[  370.608321][T10466]  ? rcu_read_unlock+0x17/0x60
[  370.608342][T10466]  charge_memcg+0x19f/0x210
[  370.608360][T10466]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  370.608383][T10466]  __swap_cache_prepare_and_add+0x842/0xa20
[  370.608406][T10466]  ? alloc_pages_mpol+0x25a/0x540
[  370.608427][T10466]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  370.608449][T10466]  ? __pfx_swap_entry_swapped+0x10/0x10
[  370.608471][T10466]  swap_cache_alloc_folio+0x1cb/0x300
[  370.608495][T10466]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  370.608523][T10466]  swap_cluster_readahead+0x411/0x770
[  370.608545][T10466]  ? __schedule+0x12a7/0x67a0
[  370.608567][T10466]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  370.608602][T10466]  ? get_vma_policy+0x23d/0x3b0
[  370.608626][T10466]  swapin_readahead+0x160/0x12c0
[  370.608655][T10466]  ? __pfx_swapin_readahead+0x10/0x10
[  370.608676][T10466]  ? find_held_lock+0x2b/0x80
[  370.608694][T10466]  ? swap_table_get+0x103/0x2c0
[  370.608719][T10466]  ? swap_table_get+0x10d/0x2c0
[  370.608740][T10466]  ? swap_cache_get_folio+0x286/0x350
[  370.608762][T10466]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  370.608783][T10466]  ? __pfx_get_swap_device+0x10/0x10
[  370.608803][T10466]  ? do_swap_page+0x931/0x6180
[  370.608823][T10466]  do_swap_page+0x931/0x6180
[  370.608853][T10466]  ? __pfx_do_swap_page+0x10/0x10
[  370.608875][T10466]  ? __free_object+0x2a8/0x3f0
[  370.608896][T10466]  ? lockdep_hardirqs_on+0x78/0x100
[  370.608918][T10466]  ? rcu_is_watching+0x12/0xc0
[  370.608935][T10466]  ? __pte_offset_map+0x179/0x310
[  370.608954][T10466]  __handle_mm_fault+0x192f/0x2a00
[  370.608979][T10466]  ? reacquire_held_locks+0xce/0x1e0
[  370.608994][T10466]  ? __pfx___handle_mm_fault+0x10/0x10
[  370.609018][T10466]  ? lock_vma_under_rcu+0x17c/0x590
[  370.609051][T10466]  handle_mm_fault+0x36d/0xa20
[  370.609075][T10466]  do_user_addr_fault+0x5a3/0x12f0
[  370.609099][T10466]  exc_page_fault+0x6f/0xd0
[  370.609119][T10466]  asm_exc_page_fault+0x26/0x30
[  370.609134][T10466] RIP: 0033:0x7fb10fb57f14
[  370.609147][T10466] Code: 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 80 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c <41> 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20
[  370.609161][T10466] RSP: 002b:00007ffdec324a60 EFLAGS: 00010246
[  370.609174][T10466] RAX: 0000000000000000 RBX: 00005555718cd500 RCX: 0000000000000000
[  370.609184][T10466] RDX: 00007ffdec324aa0 RSI: 0000000000000000 RDI: 0000000000000000
[  370.609192][T10466] RBP: 00007fb10fe17da0 R08: 0000000000000000 R09: 0000000000000000
[  370.609201][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005a870
[  370.609209][T10466] R13: 00007fb10fe1609c R14: 000000000005a68e R15: 00007fb10fe16090
[  370.609228][T10466]  </TASK>
[  370.609242][T10466] memory: usage 307200kB, limit 307200kB, failcnt 12569
[  371.541035][T10466] memory+swap: usage 173520kB, limit 9007199254740988kB, failcnt 0
[  371.563859][T10466] kmem: usage 169240kB, limit 9007199254740988kB, failcnt 0
[  371.582359][T10466] Memory cgroup stats for /syz1:
[  371.582472][T10466] cache 0
[  371.602294][T10466] rss 24576
[  371.605436][T10466] rss_huge 0
[  371.608611][T10466] shmem 0
[  371.611524][T10466] mapped_file 0
[  371.622265][T10466] dirty 0
[  371.632505][T10466] writeback 0
[  371.635809][T10466] workingset_refault_anon 4999
[  371.640547][T10466] workingset_refault_file 8153
[  371.655273][T10466] swap 491520
[  371.672896][T10466] swapcached 65445888
[  371.685005][T10466] pgpgin 444280
[  371.693038][T10466] pgpgout 447513
[  371.702238][T10466] pgfault 277402
[  371.707283][T10466] pgmajfault 1128
[  371.714623][T10466] inactive_anon 69632
[  371.722421][T10466] active_anon 24576
[  371.732405][T10466] inactive_file 0
[  371.742392][T10466] active_file 0
[  371.745858][T10466] unevictable 0
[  371.749295][T10466] hierarchical_memory_limit 314572800
[  371.764836][T10466] hierarchical_memsw_limit 9223372036854771712
[  371.782192][T10466] total_cache 0
[  371.787142][T10466] total_rss 24576
[  371.794571][T10466] total_rss_huge 0
[  371.802320][T10466] total_shmem 0
[  371.812373][T10466] total_mapped_file 0
[  371.817842][T10466] total_dirty 0
[  371.831146][T10466] total_writeback 0
[  371.835214][T10466] total_workingset_refault_anon 4999
[  371.843569][T10466] total_workingset_refault_file 8153
[  371.853790][T10466] total_swap 491520
[  371.862616][T10466] total_swapcached 65445888
[  371.874913][T10466] total_pgpgin 444280
[  371.883753][T10466] total_pgpgout 447513
[  371.892316][T10466] total_pgfault 277402
[  371.902270][T10466] total_pgmajfault 1128
[  371.907895][T10466] total_inactive_anon 69632
[  371.922120][T10466] total_active_anon 24576
[  371.926468][T10466] total_inactive_file 0
[  371.930600][T10466] total_active_file 0
[  371.952689][T10466] total_unevictable 0
[  371.956708][T10466] anon_cost 0
[  371.959970][T10466] file_cost 0
[  371.972178][T10466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.936,pid=10466,uid=0
[  372.002171][T10466] Memory cgroup out of memory: Killed process 10466 (syz.1.936) total-vm:176636kB, anon-rss:1268kB, file-rss:30308kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000
[  372.488603][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  372.501373][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  372.510487][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  372.537875][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  372.548090][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  374.590906][ T5638] Bluetooth: hci3: command tx timeout
[  375.517426][T10480] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.540148][T10480] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.557214][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  375.569288][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  375.577847][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  375.590788][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  375.602385][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  375.635817][T10480] bridge_slave_0: entered allmulticast mode
[  375.674254][T10480] bridge_slave_0: entered promiscuous mode
[  375.706367][T10480] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.728644][T10480] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.752229][T10480] bridge_slave_1: entered allmulticast mode
[  375.763276][T10480] bridge_slave_1: entered promiscuous mode
[  375.867019][T10480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.902483][T10480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.997085][T10480] team0: Port device team_slave_0 added
[  376.018186][T10480] team0: Port device team_slave_1 added
[  376.096989][T10480] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.112583][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.157706][T10480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.192091][T10480] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.199385][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.247044][T10480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.374202][T10480] hsr_slave_0: entered promiscuous mode
[  376.392463][T10480] hsr_slave_1: entered promiscuous mode
[  376.402031][T10480] debugfs: 'hsr0' already exists in 'hsr'
[  376.407779][T10480] Cannot create hsr debugfs directory
[  376.451182][T10543] netlink: 206 bytes leftover after parsing attributes in process `syz.1.946'.
[  376.670534][ T5629] Bluetooth: hci3: command tx timeout
[  377.066299][T10521] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.084027][T10521] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.099195][T10521] bridge_slave_0: entered allmulticast mode
[  377.116739][T10521] bridge_slave_0: entered promiscuous mode
[  377.130336][T10521] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.147428][T10521] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.171192][T10521] bridge_slave_1: entered allmulticast mode
[  377.182399][T10521] bridge_slave_1: entered promiscuous mode
[  377.247326][T10521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.268792][T10521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.332129][T10521] team0: Port device team_slave_0 added
[  377.350739][T10521] team0: Port device team_slave_1 added
[  377.402106][T10521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.419562][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.471610][T10521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.501458][T10521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.518109][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.571284][T10521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.630286][ T5629] Bluetooth: hci7: command tx timeout
[  377.674465][T10521] hsr_slave_0: entered promiscuous mode
[  377.688078][T10521] hsr_slave_1: entered promiscuous mode
[  377.702733][T10521] debugfs: 'hsr0' already exists in 'hsr'
[  377.714724][T10521] Cannot create hsr debugfs directory
[  378.117123][ T5625] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  378.168464][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.168491][ T5625] Tainted: [L]=SOFTLOCKUP
[  378.168496][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  378.168505][ T5625] Call Trace:
[  378.168511][ T5625]  <TASK>
[  378.168516][ T5625]  dump_stack_lvl+0x100/0x190
[  378.168537][ T5625]  dump_header+0xfb/0x606
[  378.168554][ T5625]  oom_kill_process.cold+0xd/0x330
[  378.168572][ T5625]  out_of_memory+0x340/0x14f0
[  378.168599][ T5625]  ? __pfx_out_of_memory+0x10/0x10
[  378.168627][ T5625]  mem_cgroup_out_of_memory+0xc6/0x130
[  378.168650][ T5625]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  378.168670][ T5625]  ? find_held_lock+0x2b/0x80
[  378.168693][ T5625]  ? do_raw_spin_unlock+0x145/0x1e0
[  378.168711][ T5625]  ? _raw_spin_unlock+0x28/0x50
[  378.168732][ T5625]  try_charge_memcg+0x6e5/0xdf0
[  378.168753][ T5625]  ? __pfx_try_charge_memcg+0x10/0x10
[  378.168776][ T5625]  ? find_held_lock+0x2b/0x80
[  378.168794][ T5625]  ? rcu_read_unlock+0x17/0x60
[  378.168811][ T5625]  ? rcu_read_unlock+0x17/0x60
[  378.168829][ T5625]  ? find_held_lock+0x2b/0x80
[  378.168847][ T5625]  ? rcu_read_unlock+0x17/0x60
[  378.168869][ T5625]  charge_memcg+0x19f/0x210
[  378.168887][ T5625]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  378.168910][ T5625]  __swap_cache_prepare_and_add+0x842/0xa20
[  378.168937][ T5625]  ? alloc_pages_mpol+0x25a/0x540
[  378.168958][ T5625]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  378.168979][ T5625]  ? __pfx_swap_entry_swapped+0x10/0x10
[  378.169002][ T5625]  swap_cache_alloc_folio+0x1cb/0x300
[  378.169026][ T5625]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  378.169054][ T5625]  swap_cluster_readahead+0x411/0x770
[  378.169087][ T5625]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  378.169119][ T5625]  ? clockevents_program_event+0x23e/0x820
[  378.169139][ T5625]  ? get_vma_policy+0x23d/0x3b0
[  378.169158][ T5625]  swapin_readahead+0x160/0x12c0
[  378.169181][ T5625]  ? clockevents_program_event+0x1ef/0x820
[  378.169203][ T5625]  ? __pfx_swapin_readahead+0x10/0x10
[  378.169224][ T5625]  ? find_held_lock+0x2b/0x80
[  378.169242][ T5625]  ? swap_table_get+0x103/0x2c0
[  378.169267][ T5625]  ? swap_table_get+0x10d/0x2c0
[  378.169288][ T5625]  ? swap_cache_get_folio+0x286/0x350
[  378.169310][ T5625]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  378.169331][ T5625]  ? __pfx_get_swap_device+0x10/0x10
[  378.169351][ T5625]  ? do_swap_page+0x931/0x6180
[  378.169371][ T5625]  do_swap_page+0x931/0x6180
[  378.169402][ T5625]  ? __pfx_do_swap_page+0x10/0x10
[  378.169424][ T5625]  ? __free_object+0x2a8/0x3f0
[  378.169445][ T5625]  ? lockdep_hardirqs_on+0x78/0x100
[  378.169467][ T5625]  ? rcu_is_watching+0x12/0xc0
[  378.169485][ T5625]  ? __pte_offset_map+0x179/0x310
[  378.169503][ T5625]  __handle_mm_fault+0x192f/0x2a00
[  378.169529][ T5625]  ? reacquire_held_locks+0xce/0x1e0
[  378.169544][ T5625]  ? __pfx___handle_mm_fault+0x10/0x10
[  378.169568][ T5625]  ? lock_vma_under_rcu+0x17c/0x590
[  378.169601][ T5625]  handle_mm_fault+0x36d/0xa20
[  378.169625][ T5625]  do_user_addr_fault+0x5a3/0x12f0
[  378.169649][ T5625]  exc_page_fault+0x6f/0xd0
[  378.169670][ T5625]  asm_exc_page_fault+0x26/0x30
[  378.169685][ T5625] RIP: 0033:0x7fb10fb5d60e
[  378.169699][ T5625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  378.169713][ T5625] RSP: 002b:00007ffdec324c48 EFLAGS: 00010246
[  378.169725][ T5625] RAX: 0000000000000000 RBX: 00005555718cd500 RCX: 00007fb10fb5d60e
[  378.169735][ T5625] RDX: 00007ffdec324ca0 RSI: 0000000000000000 RDI: 0000000000000000
[  378.169743][ T5625] RBP: 00007ffdec324d0c R08: 0000000000000000 R09: 0000000000000000
[  378.169752][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  378.169761][ T5625] R13: 00000000000927c0 R14: 000000000005c34d R15: 00007ffdec324d60
[  378.169784][ T5625]  </TASK>
[  379.122142][ T5629] Bluetooth: hci3: command tx timeout
[  379.142134][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  379.149392][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  379.581918][ T5625] memory: usage 2648kB, limit 307200kB, failcnt 12831
[  379.603161][ T5625] memory+swap: usage 2692kB, limit 9007199254740988kB, failcnt 0
[  379.626896][ T5625] kmem: usage 1632kB, limit 9007199254740988kB, failcnt 0
[  379.650165][ T5625] Memory cgroup stats for /syz1:
[  379.650271][ T5625] cache 524288
[  379.664291][ T5625] rss 0
[  379.667086][ T5625] rss_huge 0
[  379.671024][ T5625] shmem 0
[  379.673965][ T5625] mapped_file 0
[  379.677408][ T5625] dirty 4096
[  379.682144][ T5625] writeback 0
[  379.685439][ T5625] workingset_refault_anon 5096
[  379.690583][ T5625] workingset_refault_file 8522
[  379.695351][ T5625] swap 319488
[  379.699036][ T5625] swapcached 66076672
[  379.703026][ T5625] pgpgin 450418
[  379.706467][ T5625] pgpgout 453513
[  379.710618][ T5629] Bluetooth: hci7: command tx timeout
[  379.719548][ T5625] pgfault 284472
[  379.723111][ T5625] pgmajfault 1194
[  379.727765][ T5625] inactive_anon 69632
[  379.734054][ T5625] active_anon 16384
[  379.737879][ T5625] inactive_file 0
[  379.741789][ T5625] active_file 524288
[  379.746554][ T5625] unevictable 0
[  379.750353][ T5625] hierarchical_memory_limit 314572800
[  379.755732][ T5625] hierarchical_memsw_limit 9223372036854771712
[  379.762160][ T5625] total_cache 524288
[  379.766060][ T5625] total_rss 0
[  379.769712][ T5625] total_rss_huge 0
[  379.773438][ T5625] total_shmem 0
[  379.776876][ T5625] total_mapped_file 0
[  379.781150][ T5625] total_dirty 4096
[  379.784870][ T5625] total_writeback 0
[  379.789082][ T5625] total_workingset_refault_anon 5096
[  379.794367][ T5625] total_workingset_refault_file 8522
[  379.799888][ T5625] total_swap 319488
[  379.803695][ T5625] total_swapcached 66076672
[  379.808483][ T5625] total_pgpgin 450418
[  379.812468][ T5625] total_pgpgout 453513
[  379.817375][ T5625] total_pgfault 284472
[  379.821814][ T5625] total_pgmajfault 1194
[  379.825977][ T5625] total_inactive_anon 69632
[  379.830935][ T5625] total_active_anon 16384
[  379.835274][ T5625] total_inactive_file 0
[  379.841584][ T5625] total_active_file 524288
[  379.846941][ T5625] total_unevictable 0
[  379.851276][ T5625] anon_cost 0
[  379.854565][ T5625] file_cost 0
[  379.857832][ T5625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.949,pid=10557,uid=0
[  379.873904][ T5625] Memory cgroup out of memory: OOM victim 10557 (syz.1.949) is already exiting. Skip killing the task
[  381.147616][ T5629] Bluetooth: hci3: command tx timeout
[  381.787751][ T5629] Bluetooth: hci7: command tx timeout
[  383.355867][   T29] audit: type=1800 audit(4294985851.539:20): pid=10597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.957" name="error_log" dev="tracefs" ino=608 res=0 errno=0
[  383.533548][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'.
[  383.866594][ T5629] Bluetooth: hci7: command tx timeout
[  385.480170][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'.
[  387.783066][T10664] futex_wake_op: syz.1.976 tries to shift op by -2048; fix this program
[  387.815748][T10664] futex_wake_op: syz.1.976 tries to shift op by -2048; fix this program
[  387.849488][T10663] 0x000000000001-0x000000020000 : ""
[  387.869214][T10663] ftl_cs: FTL header corrupt!
[  389.441493][T10682] vcan0: tx drop: invalid da for name 0x000000000000003f
[  390.587180][T10694] Process accounting paused
[  391.900189][T10720] syz.1.989 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  391.950342][T10720] CPU: 0 UID: 0 PID: 10720 Comm: syz.1.989 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.950369][T10720] Tainted: [L]=SOFTLOCKUP
[  391.950375][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  391.950384][T10720] Call Trace:
[  391.950389][T10720]  <TASK>
[  391.950394][T10720]  dump_stack_lvl+0x100/0x190
[  391.950416][T10720]  dump_header+0xfb/0x606
[  391.950433][T10720]  oom_kill_process.cold+0xd/0x330
[  391.950451][T10720]  out_of_memory+0x340/0x14f0
[  391.950478][T10720]  ? __pfx_out_of_memory+0x10/0x10
[  391.950506][T10720]  mem_cgroup_out_of_memory+0xc6/0x130
[  391.950530][T10720]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  391.950550][T10720]  ? find_held_lock+0x2b/0x80
[  391.950573][T10720]  ? do_raw_spin_unlock+0x145/0x1e0
[  391.950591][T10720]  ? _raw_spin_unlock+0x28/0x50
[  391.950612][T10720]  try_charge_memcg+0x6e5/0xdf0
[  391.950633][T10720]  ? __pfx_try_charge_memcg+0x10/0x10
[  391.950650][T10720]  ? find_held_lock+0x2b/0x80
[  391.950668][T10720]  ? rcu_read_unlock+0x17/0x60
[  391.950689][T10720]  ? rcu_read_unlock+0x17/0x60
[  391.950707][T10720]  ? find_held_lock+0x2b/0x80
[  391.950726][T10720]  ? rcu_read_unlock+0x17/0x60
[  391.950748][T10720]  charge_memcg+0x19f/0x210
[  391.950766][T10720]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  391.950789][T10720]  __swap_cache_prepare_and_add+0x842/0xa20
[  391.950820][T10720]  ? alloc_pages_mpol+0x25a/0x540
[  391.950841][T10720]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  391.950863][T10720]  ? __pfx_swap_entry_swapped+0x10/0x10
[  391.950885][T10720]  swap_cache_alloc_folio+0x1cb/0x300
[  391.950909][T10720]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  391.950931][T10720]  ? lockdep_hardirqs_on+0x78/0x100
[  391.950952][T10720]  ? finish_task_switch.isra.0+0x2cb/0x1010
[  391.950976][T10720]  swap_cluster_readahead+0x411/0x770
[  391.951004][T10720]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  391.951030][T10720]  ? ktime_get+0x9f/0x320
[  391.951056][T10720]  ? do_raw_spin_unlock+0x145/0x1e0
[  391.951075][T10720]  ? get_vma_policy+0x23d/0x3b0
[  391.951094][T10720]  swapin_readahead+0x160/0x12c0
[  391.951115][T10720]  ? do_raw_spin_lock+0x128/0x260
[  391.951138][T10720]  ? __pfx_swapin_readahead+0x10/0x10
[  391.951160][T10720]  ? find_held_lock+0x2b/0x80
[  391.951177][T10720]  ? swap_table_get+0x103/0x2c0
[  391.951202][T10720]  ? swap_table_get+0x10d/0x2c0
[  391.951223][T10720]  ? swap_cache_get_folio+0x286/0x350
[  391.951245][T10720]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  391.951266][T10720]  ? __pfx_get_swap_device+0x10/0x10
[  391.951287][T10720]  ? do_swap_page+0x931/0x6180
[  391.951307][T10720]  do_swap_page+0x931/0x6180
[  391.951336][T10720]  ? __pfx_do_swap_page+0x10/0x10
[  391.951358][T10720]  ? __free_object+0x2a8/0x3f0
[  391.951379][T10720]  ? lockdep_hardirqs_on+0x78/0x100
[  391.951401][T10720]  ? rcu_is_watching+0x12/0xc0
[  391.951418][T10720]  ? __pte_offset_map+0x179/0x310
[  391.951437][T10720]  __handle_mm_fault+0x192f/0x2a00
[  391.951462][T10720]  ? reacquire_held_locks+0xce/0x1e0
[  391.951478][T10720]  ? __pfx___handle_mm_fault+0x10/0x10
[  391.951502][T10720]  ? lock_vma_under_rcu+0x17c/0x590
[  391.951535][T10720]  handle_mm_fault+0x36d/0xa20
[  391.951560][T10720]  do_user_addr_fault+0x5a3/0x12f0
[  391.951584][T10720]  exc_page_fault+0x6f/0xd0
[  391.951605][T10720]  asm_exc_page_fault+0x26/0x30
[  391.951619][T10720] RIP: 0033:0x7fb10fb5d60e
[  391.951633][T10720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  391.951647][T10720] RSP: 002b:00007ffdec324a48 EFLAGS: 00010246
[  391.951660][T10720] RAX: 0000000000000000 RBX: 00005555718cd500 RCX: 00007fb10fb5d60e
[  391.951669][T10720] RDX: 00007ffdec324aa0 RSI: 0000000000000000 RDI: 0000000000000000
[  391.951678][T10720] RBP: 00007fb10fe17da0 R08: 0000000000000000 R09: 0000000000000000
[  391.951687][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005fb70
[  391.951695][T10720] R13: 00007fb10fe1609c R14: 000000000005f9b3 R15: 00007fb10fe16090
[  391.951714][T10720]  </TASK>
[  392.348493][T10720] memory: usage 307200kB, limit 307200kB, failcnt 15085
[  392.355491][T10720] memory+swap: usage 307784kB, limit 9007199254740988kB, failcnt 0
[  392.363411][T10720] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0
[  392.370694][T10720] Memory cgroup stats for /syz1:
[  392.370798][T10720] cache 0
[  392.378672][T10720] rss 0
[  392.381418][T10720] rss_huge 0
[  392.384631][T10720] shmem 0
[  392.387549][T10720] mapped_file 0
[  392.390987][T10720] dirty 0
[  392.393977][T10720] writeback 0
[  392.397243][T10720] workingset_refault_anon 5181
[  392.402013][T10720] workingset_refault_file 10470
[  392.407438][T10720] swap 598016
[  392.410708][T10720] swapcached 75988992
[  392.414784][T10720] pgpgin 540207
[  392.418222][T10720] pgpgout 543444
[  392.421752][T10720] pgfault 339266
[  392.425358][T10720] pgmajfault 1289
[  392.428973][T10720] inactive_anon 77824
[  392.433098][T10720] active_anon 0
[  392.437188][T10720] inactive_file 0
[  392.440805][T10720] active_file 0
[  392.444312][T10720] unevictable 0
[  392.447756][T10720] hierarchical_memory_limit 314572800
[  392.453134][T10720] hierarchical_memsw_limit 9223372036854771712
[  392.459270][T10720] total_cache 0
[  392.462754][T10720] total_rss 0
[  392.466018][T10720] total_rss_huge 0
[  392.469720][T10720] total_shmem 0
[  392.473197][T10720] total_mapped_file 0
[  392.477157][T10720] total_dirty 0
[  392.480606][T10720] total_writeback 0
[  392.484439][T10720] total_workingset_refault_anon 5181
[  392.489703][T10720] total_workingset_refault_file 10470
[  392.495090][T10720] total_swap 598016
[  392.498877][T10720] total_swapcached 75988992
[  392.503409][T10720] total_pgpgin 540207
[  392.507935][T10720] total_pgpgout 543444
[  392.512012][T10720] total_pgfault 339266
[  392.516059][T10720] total_pgmajfault 1289
[  392.520191][T10720] total_inactive_anon 77824
[  392.524715][T10720] total_active_anon 0
[  392.528676][T10720] total_inactive_file 0
[  392.532851][T10720] total_active_file 0
[  392.537430][T10720] total_unevictable 0
[  392.541395][T10720] anon_cost 0
[  392.544684][T10720] file_cost 0
[  392.547950][T10720] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.989,pid=10720,uid=0
[  392.562787][T10720] Memory cgroup out of memory: Killed process 10720 (syz.1.989) total-vm:178684kB, anon-rss:1244kB, file-rss:30396kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000
[  393.270966][ T5625] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  393.420419][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  393.420446][ T5625] Tainted: [L]=SOFTLOCKUP
[  393.420451][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  393.420460][ T5625] Call Trace:
[  393.420465][ T5625]  <TASK>
[  393.420471][ T5625]  dump_stack_lvl+0x100/0x190
[  393.420494][ T5625]  dump_header+0xfb/0x606
[  393.420511][ T5625]  oom_kill_process.cold+0xd/0x330
[  393.420529][ T5625]  out_of_memory+0x340/0x14f0
[  393.420556][ T5625]  ? __pfx_out_of_memory+0x10/0x10
[  393.420583][ T5625]  mem_cgroup_out_of_memory+0xc6/0x130
[  393.420606][ T5625]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  393.420627][ T5625]  ? find_held_lock+0x2b/0x80
[  393.420650][ T5625]  ? do_raw_spin_unlock+0x145/0x1e0
[  393.420667][ T5625]  ? _raw_spin_unlock+0x28/0x50
[  393.420692][ T5625]  try_charge_memcg+0x6e5/0xdf0
[  393.420718][ T5625]  ? __pfx_try_charge_memcg+0x10/0x10
[  393.420734][ T5625]  ? find_held_lock+0x2b/0x80
[  393.420752][ T5625]  ? rcu_read_unlock+0x17/0x60
[  393.420770][ T5625]  ? rcu_read_unlock+0x17/0x60
[  393.420787][ T5625]  ? find_held_lock+0x2b/0x80
[  393.420806][ T5625]  ? rcu_read_unlock+0x17/0x60
[  393.420827][ T5625]  charge_memcg+0x19f/0x210
[  393.420845][ T5625]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  393.420868][ T5625]  __swap_cache_prepare_and_add+0x842/0xa20
[  393.420892][ T5625]  ? alloc_pages_mpol+0x25a/0x540
[  393.420913][ T5625]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  393.420935][ T5625]  ? __pfx_swap_entry_swapped+0x10/0x10
[  393.420957][ T5625]  swap_cache_alloc_folio+0x1cb/0x300
[  393.420981][ T5625]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  393.421009][ T5625]  swap_cluster_readahead+0x411/0x770
[  393.421036][ T5625]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  393.421068][ T5625]  ? clockevents_program_event+0x23e/0x820
[  393.421088][ T5625]  ? get_vma_policy+0x23d/0x3b0
[  393.421107][ T5625]  swapin_readahead+0x160/0x12c0
[  393.421130][ T5625]  ? clockevents_program_event+0x1ef/0x820
[  393.421152][ T5625]  ? __pfx_swapin_readahead+0x10/0x10
[  393.421174][ T5625]  ? find_held_lock+0x2b/0x80
[  393.421192][ T5625]  ? swap_table_get+0x103/0x2c0
[  393.421217][ T5625]  ? swap_table_get+0x10d/0x2c0
[  393.421238][ T5625]  ? swap_cache_get_folio+0x286/0x350
[  393.421260][ T5625]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  393.421281][ T5625]  ? __pfx_get_swap_device+0x10/0x10
[  393.421304][ T5625]  ? do_swap_page+0x931/0x6180
[  393.421324][ T5625]  do_swap_page+0x931/0x6180
[  393.421354][ T5625]  ? __pfx_do_swap_page+0x10/0x10
[  393.421377][ T5625]  ? __free_object+0x2a8/0x3f0
[  393.421397][ T5625]  ? lockdep_hardirqs_on+0x78/0x100
[  393.421419][ T5625]  ? rcu_is_watching+0x12/0xc0
[  393.421436][ T5625]  ? __pte_offset_map+0x179/0x310
[  393.421456][ T5625]  __handle_mm_fault+0x192f/0x2a00
[  393.421481][ T5625]  ? reacquire_held_locks+0xce/0x1e0
[  393.421496][ T5625]  ? __pfx___handle_mm_fault+0x10/0x10
[  393.421520][ T5625]  ? lock_vma_under_rcu+0x17c/0x590
[  393.421552][ T5625]  handle_mm_fault+0x36d/0xa20
[  393.421577][ T5625]  do_user_addr_fault+0x5a3/0x12f0
[  393.421602][ T5625]  exc_page_fault+0x6f/0xd0
[  393.421623][ T5625]  asm_exc_page_fault+0x26/0x30
[  393.421637][ T5625] RIP: 0033:0x7fb10fb5d60e
[  393.421651][ T5625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  393.421665][ T5625] RSP: 002b:00007ffdec324c48 EFLAGS: 00010246
[  393.421678][ T5625] RAX: 0000000000000000 RBX: 00005555718cd500 RCX: 00007fb10fb5d60e
[  393.421687][ T5625] RDX: 00007ffdec324ca0 RSI: 0000000000000000 RDI: 0000000000000000
[  393.421700][ T5625] RBP: 00007ffdec324d0c R08: 0000000000000000 R09: 0000000000000000
[  393.421709][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  393.421718][ T5625] R13: 00000000000927c0 R14: 000000000005f9d3 R15: 00007ffdec324d60
[  393.421737][ T5625]  </TASK>
[  394.670291][ T5625] memory: usage 1928kB, limit 307200kB, failcnt 15911
[  394.677291][ T5625] memory+swap: usage 2340kB, limit 9007199254740988kB, failcnt 0
[  394.698773][ T5625] kmem: usage 1776kB, limit 9007199254740988kB, failcnt 0
[  394.706216][ T5625] Memory cgroup stats for /syz1:
[  394.706321][ T5625] cache 0
[  394.715708][ T5625] rss 0
[  394.718490][ T5625] rss_huge 0
[  394.724365][ T5625] shmem 0
[  394.727317][ T5625] mapped_file 0
[  394.731235][ T5625] dirty 0
[  394.734176][ T5625] writeback 0
[  394.737445][ T5625] workingset_refault_anon 5186
[  394.742546][ T5625] workingset_refault_file 10470
[  394.747397][ T5625] swap 421888
[  394.751003][ T5625] swapcached 75993088
[  394.754985][ T5625] pgpgin 540212
[  394.759293][ T5625] pgpgout 543450
[  394.763197][ T5625] pgfault 339284
[  394.766748][ T5625] pgmajfault 1294
[  394.770362][ T5625] inactive_anon 73728
[  394.774732][ T5625] active_anon 0
[  394.778196][ T5625] inactive_file 0
[  394.782066][ T5625] active_file 0
[  394.785524][ T5625] unevictable 0
[  394.789926][ T5625] hierarchical_memory_limit 314572800
[  394.795740][ T5625] hierarchical_memsw_limit 9223372036854771712
[  394.802796][ T5625] total_cache 0
[  394.806257][ T5625] total_rss 0
[  394.809520][ T5625] total_rss_huge 0
[  394.813627][ T5625] total_shmem 0
[  394.817090][ T5625] total_mapped_file 0
[  394.821368][ T5625] total_dirty 0
[  394.824829][ T5625] total_writeback 0
[  394.828613][ T5625] total_workingset_refault_anon 5186
[  394.836196][ T5625] total_workingset_refault_file 10470
[  394.841753][ T5625] total_swap 421888
[  394.845576][ T5625] total_swapcached 75993088
[  394.850059][ T5625] total_pgpgin 540212
[  394.854429][ T5625] total_pgpgout 543450
[  394.858501][ T5625] total_pgfault 339284
[  394.865148][ T5625] total_pgmajfault 1294
[  394.869313][ T5625] total_inactive_anon 73728
[  394.874105][ T5625] total_active_anon 0
[  394.878090][ T5625] total_inactive_file 0
[  394.882587][ T5625] total_active_file 0
[  394.886584][ T5625] total_unevictable 0
[  394.892129][ T5625] anon_cost 0
[  394.895429][ T5625] file_cost 0
[  394.898692][ T5625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.529,pid=8381,uid=0
[  394.913850][ T5625] Memory cgroup out of memory: Killed process 8381 (syz.1.529) total-vm:102232kB, anon-rss:1244kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000
[  397.090908][T10756] vivid-008: =================  START STATUS  =================
[  397.105121][T10756] vivid-008: ==================  END STATUS  ==================
[  397.113890][T10756] vivid-008: =================  START STATUS  =================
[  397.122161][T10756] vivid-008: ==================  END STATUS  ==================
[  397.130061][T10756] vivid-008: =================  START STATUS  =================
[  397.137751][T10756] vivid-008: ==================  END STATUS  ==================
[  397.151861][T10756] vivid-008: =================  START STATUS  =================
[  397.174828][T10756] vivid-008: ==================  END STATUS  ==================
[  397.201493][T10756] vivid-008: =================  START STATUS  =================
[  397.219357][T10756] vivid-008: ==================  END STATUS  ==================
[  397.233757][T10756] vivid-008: =================  START STATUS  =================
[  397.252144][T10756] vivid-008: ==================  END STATUS  ==================
[  397.272075][T10756] vivid-008: =================  START STATUS  =================
[  397.298356][T10756] vivid-008: ==================  END STATUS  ==================
[  397.313495][T10756] vivid-008: =================  START STATUS  =================
[  397.332384][T10756] vivid-008: ==================  END STATUS  ==================
[  397.347402][T10756] vivid-008: =================  START STATUS  =================
[  397.373053][T10756] vivid-008: ==================  END STATUS  ==================
[  397.389483][T10756] vivid-008: =================  START STATUS  =================
[  397.407332][T10756] vivid-008: ==================  END STATUS  ==================
[  397.420935][T10756] vivid-008: =================  START STATUS  =================
[  397.438780][T10756] vivid-008: ==================  END STATUS  ==================
[  397.458478][T10756] vivid-008: =================  START STATUS  =================
[  397.478952][T10756] vivid-008: ==================  END STATUS  ==================
[  397.499714][T10756] vivid-008: =================  START STATUS  =================
[  397.518849][T10756] vivid-008: ==================  END STATUS  ==================
[  397.544941][T10756] vivid-008: =================  START STATUS  =================
[  397.564267][T10756] vivid-008: ==================  END STATUS  ==================
[  397.584780][T10756] vivid-008: =================  START STATUS  =================
[  397.602856][T10756] vivid-008: ==================  END STATUS  ==================
[  397.637217][T10756] vivid-008: =================  START STATUS  =================
[  397.662973][T10756] vivid-008: ==================  END STATUS  ==================
[  397.688456][T10756] vivid-008: =================  START STATUS  =================
[  397.707500][T10756] vivid-008: ==================  END STATUS  ==================
[  397.725555][T10756] vivid-008: =================  START STATUS  =================
[  397.747501][T10756] vivid-008: ==================  END STATUS  ==================
[  397.769470][T10756] vivid-008: =================  START STATUS  =================
[  397.787338][T10756] vivid-008: ==================  END STATUS  ==================
[  397.807882][T10756] vivid-008: =================  START STATUS  =================
[  397.820427][T10756] vivid-008: ==================  END STATUS  ==================
[  397.839271][T10756] vivid-008: =================  START STATUS  =================
[  397.859013][T10756] vivid-008: ==================  END STATUS  ==================
[  397.869780][T10756] vivid-008: =================  START STATUS  =================
[  397.889154][T10756] vivid-008: ==================  END STATUS  ==================
[  397.911976][T10756] vivid-008: =================  START STATUS  =================
[  397.954476][T10756] vivid-008: ==================  END STATUS  ==================
[  397.990008][T10756] vivid-008: =================  START STATUS  =================
[  398.018636][T10756] vivid-008: ==================  END STATUS  ==================
[  398.111321][T10766] FAULT_INJECTION: forcing a failure.
[  398.111321][T10766] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  398.141665][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz.1.997 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  398.141694][T10766] Tainted: [L]=SOFTLOCKUP
[  398.141699][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  398.141708][T10766] Call Trace:
[  398.141714][T10766]  <TASK>
[  398.141721][T10766]  dump_stack_lvl+0x100/0x190
[  398.141745][T10766]  should_fail_ex.cold+0x5/0xa
[  398.141761][T10766]  ? prepare_alloc_pages+0x16d/0x5f0
[  398.141782][T10766]  should_fail_alloc_page+0xeb/0x140
[  398.141802][T10766]  prepare_alloc_pages+0x1f0/0x5f0
[  398.141820][T10766]  ? __lock_acquire+0x4a5/0x2630
[  398.141836][T10766]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  398.141868][T10766]  ? find_held_lock+0x2b/0x80
[  398.141886][T10766]  ? is_bpf_text_address+0x8a/0x1a0
[  398.141906][T10766]  ? is_bpf_text_address+0x8a/0x1a0
[  398.141926][T10766]  ? bpf_ksym_find+0x124/0x1c0
[  398.141941][T10766]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  398.141963][T10766]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  398.141985][T10766]  ? is_bpf_text_address+0x94/0x1a0
[  398.142004][T10766]  ? kernel_text_address+0x8d/0x100
[  398.142020][T10766]  ? __kernel_text_address+0xd/0x30
[  398.142035][T10766]  ? unwind_get_return_address+0x59/0xa0
[  398.142063][T10766]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  398.142085][T10766]  ? policy_nodemask+0xed/0x4f0
[  398.142104][T10766]  alloc_pages_mpol+0x1fb/0x540
[  398.142122][T10766]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  398.142137][T10766]  ? kasan_save_stack+0x30/0x50
[  398.142151][T10766]  ? __kasan_kmalloc+0xaa/0xb0
[  398.142164][T10766]  ? __get_vm_area_node+0x101/0x330
[  398.142181][T10766]  ? __vmalloc_node_range_noprof+0x228/0x1630
[  398.142204][T10766]  alloc_pages_noprof+0x1a/0x160
[  398.142224][T10766]  get_free_pages_noprof+0x10/0xb0
[  398.142240][T10766]  __kasan_populate_vmalloc+0xa0/0x210
[  398.142267][T10766]  alloc_vmap_area+0x95d/0x2b70
[  398.142292][T10766]  ? __pfx_alloc_vmap_area+0x10/0x10
[  398.142315][T10766]  __get_vm_area_node+0x1ca/0x330
[  398.142336][T10766]  __vmalloc_node_range_noprof+0x228/0x1630
[  398.142360][T10766]  ? n_tty_open+0x1a/0x170
[  398.142378][T10766]  ? do_raw_spin_lock+0x128/0x260
[  398.142395][T10766]  ? look_up_lock_class+0x55/0x120
[  398.142420][T10766]  ? n_tty_open+0x1a/0x170
[  398.142441][T10766]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  398.142461][T10766]  ? __ldsem_down_write_nested+0xfd/0x830
[  398.142476][T10766]  ? __ldsem_down_write_nested+0x10e/0x830
[  398.142496][T10766]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  398.142515][T10766]  ? n_tty_open+0x1a/0x170
[  398.142529][T10766]  __vmalloc_node_noprof+0xad/0xf0
[  398.142548][T10766]  ? n_tty_open+0x1a/0x170
[  398.142564][T10766]  ? __pfx_n_tty_open+0x10/0x10
[  398.142578][T10766]  n_tty_open+0x1a/0x170
[  398.142594][T10766]  tty_ldisc_open+0xa2/0x120
[  398.142614][T10766]  tty_ldisc_setup+0x40/0xf0
[  398.142634][T10766]  tty_init_dev.part.0+0x1b5/0x470
[  398.142651][T10766]  tty_open+0xa63/0xfa0
[  398.142674][T10766]  ? __pfx_tty_open+0x10/0x10
[  398.142687][T10766]  ? chrdev_open+0x10b/0x6a0
[  398.142705][T10766]  ? chrdev_open+0x10b/0x6a0
[  398.142726][T10766]  ? __pfx_tty_open+0x10/0x10
[  398.142740][T10766]  chrdev_open+0x234/0x6a0
[  398.142758][T10766]  ? __pfx_apparmor_file_open+0x10/0x10
[  398.142782][T10766]  ? __pfx_chrdev_open+0x10/0x10
[  398.142801][T10766]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  398.142825][T10766]  do_dentry_open+0x6d8/0x1660
[  398.142844][T10766]  ? __pfx_chrdev_open+0x10/0x10
[  398.142867][T10766]  vfs_open+0x82/0x3f0
[  398.142890][T10766]  path_openat+0x208c/0x31a0
[  398.142915][T10766]  ? __pfx_path_openat+0x10/0x10
[  398.142940][T10766]  do_file_open+0x20e/0x430
[  398.142960][T10766]  ? __pfx_do_file_open+0x10/0x10
[  398.142992][T10766]  ? alloc_fd+0x476/0x790
[  398.143011][T10766]  ? do_getname+0x191/0x390
[  398.143034][T10766]  do_sys_openat2+0x10d/0x1e0
[  398.143056][T10766]  ? __pfx_do_sys_openat2+0x10/0x10
[  398.143079][T10766]  ? ksys_semctl.constprop.0+0x14e/0x2e0
[  398.143098][T10766]  __x64_sys_openat+0x12d/0x210
[  398.143121][T10766]  ? __pfx___x64_sys_openat+0x10/0x10
[  398.143147][T10766]  ? rcu_is_watching+0x12/0xc0
[  398.143167][T10766]  do_syscall_64+0x10b/0xf80
[  398.143187][T10766]  ? clear_bhb_loop+0x40/0x90
[  398.143205][T10766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.143220][T10766] RIP: 0033:0x7fb10fb9cdd9
[  398.143235][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.143249][T10766] RSP: 002b:00007fb110b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  398.143264][T10766] RAX: ffffffffffffffda RBX: 00007fb10fe15fa0 RCX: 00007fb10fb9cdd9
[  398.143274][T10766] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  398.143284][T10766] RBP: 00007fb10fc32d69 R08: 0000000000000000 R09: 0000000000000000
[  398.143293][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.143302][T10766] R13: 00007fb10fe16038 R14: 00007fb10fe15fa0 R15: 00007ffdec324968
[  398.143323][T10766]  </TASK>
[  398.144031][T10766] syz.1.997: vmalloc error: size 9112, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  398.788746][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz.1.997 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  398.788773][T10766] Tainted: [L]=SOFTLOCKUP
[  398.788778][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  398.788787][T10766] Call Trace:
[  398.788793][T10766]  <TASK>
[  398.788798][T10766]  dump_stack_lvl+0x100/0x190
[  398.788821][T10766]  warn_alloc.cold+0x95/0x1c1
[  398.788837][T10766]  ? __pfx_warn_alloc+0x10/0x10
[  398.788860][T10766]  ? lockdep_hardirqs_on+0x78/0x100
[  398.788884][T10766]  ? __get_vm_area_node+0x2c5/0x330
[  398.788907][T10766]  ? __get_vm_area_node+0x208/0x330
[  398.788929][T10766]  __vmalloc_node_range_noprof+0xccd/0x1630
[  398.788950][T10766]  ? do_raw_spin_lock+0x128/0x260
[  398.788968][T10766]  ? look_up_lock_class+0x55/0x120
[  398.788991][T10766]  ? n_tty_open+0x1a/0x170
[  398.789013][T10766]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  398.789034][T10766]  ? __ldsem_down_write_nested+0xfd/0x830
[  398.789050][T10766]  ? __ldsem_down_write_nested+0x10e/0x830
[  398.789073][T10766]  ? __pfx___ldsem_down_write_nested+0x10/0x10
[  398.789092][T10766]  ? n_tty_open+0x1a/0x170
[  398.789106][T10766]  __vmalloc_node_noprof+0xad/0xf0
[  398.789125][T10766]  ? n_tty_open+0x1a/0x170
[  398.789141][T10766]  ? __pfx_n_tty_open+0x10/0x10
[  398.789156][T10766]  n_tty_open+0x1a/0x170
[  398.789172][T10766]  tty_ldisc_open+0xa2/0x120
[  398.789192][T10766]  tty_ldisc_setup+0x40/0xf0
[  398.789212][T10766]  tty_init_dev.part.0+0x1b5/0x470
[  398.789229][T10766]  tty_open+0xa63/0xfa0
[  398.789246][T10766]  ? __pfx_tty_open+0x10/0x10
[  398.789259][T10766]  ? chrdev_open+0x10b/0x6a0
[  398.789277][T10766]  ? chrdev_open+0x10b/0x6a0
[  398.789298][T10766]  ? __pfx_tty_open+0x10/0x10
[  398.789311][T10766]  chrdev_open+0x234/0x6a0
[  398.789328][T10766]  ? __pfx_apparmor_file_open+0x10/0x10
[  398.789353][T10766]  ? __pfx_chrdev_open+0x10/0x10
[  398.789372][T10766]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  398.789397][T10766]  do_dentry_open+0x6d8/0x1660
[  398.789415][T10766]  ? __pfx_chrdev_open+0x10/0x10
[  398.789438][T10766]  vfs_open+0x82/0x3f0
[  398.789462][T10766]  path_openat+0x208c/0x31a0
[  398.789488][T10766]  ? __pfx_path_openat+0x10/0x10
[  398.789514][T10766]  do_file_open+0x20e/0x430
[  398.789534][T10766]  ? __pfx_do_file_open+0x10/0x10
[  398.789566][T10766]  ? alloc_fd+0x476/0x790
[  398.789586][T10766]  ? do_getname+0x191/0x390
[  398.789614][T10766]  do_sys_openat2+0x10d/0x1e0
[  398.789637][T10766]  ? __pfx_do_sys_openat2+0x10/0x10
[  398.789661][T10766]  ? ksys_semctl.constprop.0+0x14e/0x2e0
[  398.789681][T10766]  __x64_sys_openat+0x12d/0x210
[  398.789703][T10766]  ? __pfx___x64_sys_openat+0x10/0x10
[  398.789729][T10766]  ? rcu_is_watching+0x12/0xc0
[  398.789750][T10766]  do_syscall_64+0x10b/0xf80
[  398.789770][T10766]  ? clear_bhb_loop+0x40/0x90
[  398.789788][T10766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.789803][T10766] RIP: 0033:0x7fb10fb9cdd9
[  398.789817][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.789831][T10766] RSP: 002b:00007fb110b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  398.789846][T10766] RAX: ffffffffffffffda RBX: 00007fb10fe15fa0 RCX: 00007fb10fb9cdd9
[  398.789856][T10766] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  398.789866][T10766] RBP: 00007fb10fc32d69 R08: 0000000000000000 R09: 0000000000000000
[  398.789875][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.789883][T10766] R13: 00007fb10fe16038 R14: 00007fb10fe15fa0 R15: 00007ffdec324968
[  398.789903][T10766]  </TASK>
[  398.789988][T10766] Mem-Info:
[  399.450838][T10766] active_anon:6937 inactive_anon:12 isolated_anon:0
[  399.450838][T10766]  active_file:8968 inactive_file:46759 isolated_file:0
[  399.450838][T10766]  unevictable:768 dirty:190 writeback:0
[  399.450838][T10766]  slab_reclaimable:11162 slab_unreclaimable:100522
[  399.450838][T10766]  mapped:50256 shmem:1289 pagetables:1565
[  399.450838][T10766]  sec_pagetables:0 bounce:0
[  399.450838][T10766]  kernel_misc_reclaimable:0
[  399.450838][T10766]  free:1238413 free_pcp:36213 free_cma:0
[  399.501681][T10766] Node 0 active_anon:27748kB inactive_anon:48kB active_file:35872kB inactive_file:186836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110912kB dirty:760kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12928kB pagetables:6092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  399.536623][T10766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90112kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  399.570884][T10766] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  399.601957][T10766] lowmem_reserve[]: 0 2477 2478 2478 2478
[  399.607734][T10766] Node 0 DMA32 free:1262072kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27748kB inactive_anon:48kB active_file:35872kB inactive_file:186836kB unevictable:1536kB writepending:760kB zspages:452kB present:3129332kB managed:2537332kB mlocked:0kB bounce:0kB free_pcp:76596kB local_pcp:76596kB free_cma:0kB
[  399.645196][T10766] lowmem_reserve[]: 0 0 1 1 1
[  399.650156][T10766] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  399.681379][T10766] lowmem_reserve[]: 0 0 0 0 0
[  399.686110][T10766] Node 1 Normal free:3680312kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:68236kB local_pcp:68236kB free_cma:0kB
[  399.729026][T10766] lowmem_reserve[]: 0 0 0 0 0
[  399.733766][T10766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (UM) = 11264kB
[  399.746862][T10766] Node 0 DMA32: 7214*4kB (UM) 4188*8kB (UM) 1872*16kB (UME) 789*32kB (UM) 1607*64kB (UME) 1258*128kB (UME) 912*256kB (UM) 600*512kB (UME) 286*1024kB (UME) 21*2048kB (UM) 1*4096kB (U) = 1262072kB
[  399.768275][T10766] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  399.781237][T10766] Node 1 Normal: 12*4kB (UM) 15*8kB (U) 11*16kB (U) 17*32kB (U) 15*64kB (UM) 10*128kB (UM) 8*256kB (UM) 8*512kB (UM) 9*1024kB (UM) 10*2048kB (U) 889*4096kB (UM) = 3680312kB
[  399.798858][T10766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  399.809531][T10766] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  399.819117][T10766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  399.828982][T10766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  399.838530][T10766] 57023 total pagecache pages
[  399.843261][T10766] 11 pages in swap cache
[  399.847509][T10766] Free swap  = 124740kB
[  399.852004][T10766] Total swap = 124996kB
[  399.856219][T10766] 2097051 pages RAM
[  399.860352][T10766] 0 pages HighMem/MovableOnly
[  399.865037][T10766] 430828 pages reserved
[  399.871996][T10766] 0 pages cma reserved
[  399.877015][T10766] pty pty83: ldisc open failed (-12), clearing slot 83
[  400.135175][T10780] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  400.175193][T10780] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22
[  400.388420][T10784] 
vs_: entered promiscuous mode
[  400.398867][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'.
[  400.408253][T10784] bond0: entered promiscuous mode
[  400.413454][T10784] bond_slave_0: entered promiscuous mode
[  401.395377][T10793] zswap: compressor  not available
[  402.198814][T10798] syz.1.1006 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  402.247080][T10798] CPU: 0 UID: 0 PID: 10798 Comm: syz.1.1006 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.247107][T10798] Tainted: [L]=SOFTLOCKUP
[  402.247112][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  402.247120][T10798] Call Trace:
[  402.247126][T10798]  <TASK>
[  402.247133][T10798]  dump_stack_lvl+0x100/0x190
[  402.247155][T10798]  dump_header+0xfb/0x606
[  402.247172][T10798]  oom_kill_process.cold+0xd/0x330
[  402.247190][T10798]  out_of_memory+0x340/0x14f0
[  402.247217][T10798]  ? __pfx_out_of_memory+0x10/0x10
[  402.247245][T10798]  mem_cgroup_out_of_memory+0xc6/0x130
[  402.247268][T10798]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  402.247289][T10798]  ? find_held_lock+0x2b/0x80
[  402.247312][T10798]  ? do_raw_spin_unlock+0x145/0x1e0
[  402.247329][T10798]  ? _raw_spin_unlock+0x28/0x50
[  402.247350][T10798]  try_charge_memcg+0x6e5/0xdf0
[  402.247372][T10798]  ? __pfx_try_charge_memcg+0x10/0x10
[  402.247388][T10798]  ? find_held_lock+0x2b/0x80
[  402.247406][T10798]  ? rcu_read_unlock+0x17/0x60
[  402.247424][T10798]  ? rcu_read_unlock+0x17/0x60
[  402.247441][T10798]  ? find_held_lock+0x2b/0x80
[  402.247460][T10798]  ? rcu_read_unlock+0x17/0x60
[  402.247482][T10798]  charge_memcg+0x19f/0x210
[  402.247500][T10798]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  402.247523][T10798]  __swap_cache_prepare_and_add+0x842/0xa20
[  402.247547][T10798]  ? alloc_pages_mpol+0x25a/0x540
[  402.247568][T10798]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  402.247589][T10798]  ? __pfx_swap_entry_swapped+0x10/0x10
[  402.247612][T10798]  swap_cache_alloc_folio+0x1cb/0x300
[  402.247635][T10798]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  402.247664][T10798]  swap_cluster_readahead+0x53b/0x770
[  402.247691][T10798]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  402.247719][T10798]  ? mark_held_locks+0x40/0x70
[  402.247738][T10798]  ? get_vma_policy+0x23d/0x3b0
[  402.247757][T10798]  swapin_readahead+0x160/0x12c0
[  402.247786][T10798]  ? __pfx_swapin_readahead+0x10/0x10
[  402.247808][T10798]  ? find_held_lock+0x2b/0x80
[  402.247826][T10798]  ? swap_table_get+0x103/0x2c0
[  402.247850][T10798]  ? swap_table_get+0x10d/0x2c0
[  402.247872][T10798]  ? swap_cache_get_folio+0x286/0x350
[  402.247894][T10798]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  402.247914][T10798]  ? __pfx_get_swap_device+0x10/0x10
[  402.247935][T10798]  ? do_swap_page+0x931/0x6180
[  402.247955][T10798]  do_swap_page+0x931/0x6180
[  402.247985][T10798]  ? __pfx_do_swap_page+0x10/0x10
[  402.248008][T10798]  ? __free_object+0x2a8/0x3f0
[  402.248033][T10798]  ? lockdep_hardirqs_on+0x78/0x100
[  402.248056][T10798]  ? rcu_is_watching+0x12/0xc0
[  402.248074][T10798]  ? __pte_offset_map+0x179/0x310
[  402.248092][T10798]  __handle_mm_fault+0x192f/0x2a00
[  402.248118][T10798]  ? reacquire_held_locks+0xce/0x1e0
[  402.248133][T10798]  ? __pfx___handle_mm_fault+0x10/0x10
[  402.248158][T10798]  ? lock_vma_under_rcu+0x17c/0x590
[  402.248190][T10798]  handle_mm_fault+0x36d/0xa20
[  402.248215][T10798]  do_user_addr_fault+0x5a3/0x12f0
[  402.248240][T10798]  exc_page_fault+0x6f/0xd0
[  402.248260][T10798]  asm_exc_page_fault+0x26/0x30
[  402.248275][T10798] RIP: 0033:0x7fb10fa6a7be
[  402.248290][T10798] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 f6 d5 3a 00 85 c0 0f 8e 53 fd ff ff <e8> 6d 7d fe ff 49 39 c4 73 88 48 8d 1d d1 b7 3a 00 83 3d d6 d5 3a
[  402.248304][T10798] RSP: 002b:00007ffdec324ad0 EFLAGS: 00010202
[  402.248317][T10798] RAX: 0000000000000001 RBX: 00007fb10fe17da0 RCX: 00005555718cd808
[  402.248326][T10798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  402.248334][T10798] RBP: 00007fb10fe17da0 R08: 0000000000000000 R09: 0000000000000000
[  402.248343][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000062434
[  402.248352][T10798] R13: 00007fb10fe1609c R14: 000000000006225e R15: 00007fb10fe16090
[  402.248374][T10798]  </TASK>
[  402.248388][T10798] memory: usage 307200kB, limit 307200kB, failcnt 16257
[  403.181366][T10798] memory+swap: usage 170588kB, limit 9007199254740988kB, failcnt 0
[  403.206545][T10798] kmem: usage 163332kB, limit 9007199254740988kB, failcnt 0
[  403.213890][T10798] Memory cgroup stats for /syz1:
[  403.214008][T10798] cache 0
[  403.236551][T10798] rss 24576
[  403.239704][T10798] rss_huge 0
[  403.242887][T10798] shmem 0
[  403.245803][T10798] mapped_file 0
[  403.259516][T10798] dirty 0
[  403.266463][T10798] writeback 0
[  403.276510][T10798] workingset_refault_anon 5381
[  403.283536][T10798] workingset_refault_file 10601
[  403.296537][T10798] swap 417792
[  403.301327][T10798] swapcached 87777280
[  403.316747][T10798] pgpgin 555639
[  403.320244][T10798] pgpgout 559388
[  403.323772][T10798] pgfault 363531
[  403.336509][T10798] pgmajfault 1459
[  403.340187][T10798] inactive_anon 0
[  403.343802][T10798] active_anon 73728
[  403.354630][T10798] inactive_file 0
[  403.368244][T10798] active_file 0
[  403.371762][T10798] unevictable 0
[  403.375204][T10798] hierarchical_memory_limit 314572800
[  403.396622][T10798] hierarchical_memsw_limit 9223372036854771712
[  403.404276][T10798] total_cache 0
[  403.412702][T10798] total_rss 24576
[  403.426409][T10798] total_rss_huge 0
[  403.430177][T10798] total_shmem 0
[  403.433618][T10798] total_mapped_file 0
[  403.446366][T10798] total_dirty 0
[  403.449881][T10798] total_writeback 0
[  403.453683][T10798] total_workingset_refault_anon 5381
[  403.478399][T10798] total_workingset_refault_file 10601
[  403.486981][T10798] total_swap 417792
[  403.496608][T10798] total_swapcached 87777280
[  403.507000][T10798] total_pgpgin 555639
[  403.516524][T10798] total_pgpgout 559388
[  403.526303][T10798] total_pgfault 363531
[  403.531861][T10798] total_pgmajfault 1459
[  403.546354][T10798] total_inactive_anon 0
[  403.550534][T10798] total_active_anon 73728
[  403.554839][T10798] total_inactive_file 0
[  403.576441][T10798] total_active_file 0
[  403.580457][T10798] total_unevictable 0
[  403.584417][T10798] anon_cost 0
[  403.596740][T10798] file_cost 0
[  403.600067][T10798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1006,pid=10798,uid=0
[  403.636332][T10798] Memory cgroup out of memory: Killed process 10798 (syz.1.1006) total-vm:176636kB, anon-rss:1268kB, file-rss:30468kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000
[  404.163306][ T5629] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5
[  404.691240][T10820] FAULT_INJECTION: forcing a failure.
[  404.691240][T10820] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  404.712103][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.1.1012 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  404.712137][T10820] Tainted: [L]=SOFTLOCKUP
[  404.712142][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  404.712152][T10820] Call Trace:
[  404.712157][T10820]  <TASK>
[  404.712163][T10820]  dump_stack_lvl+0x100/0x190
[  404.712186][T10820]  should_fail_ex.cold+0x5/0xa
[  404.712203][T10820]  ? prepare_alloc_pages+0x16d/0x5f0
[  404.712224][T10820]  should_fail_alloc_page+0xeb/0x140
[  404.712243][T10820]  prepare_alloc_pages+0x1f0/0x5f0
[  404.712264][T10820]  __alloc_frozen_pages_noprof+0x19a/0x2bc0
[  404.712290][T10820]  ? lru_gen_add_folio+0x20f/0x13d0
[  404.712309][T10820]  ? folios_put_refs+0x716/0xa90
[  404.712326][T10820]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  404.712353][T10820]  ? __lock_acquire+0x4a5/0x2630
[  404.712367][T10820]  ? __lock_acquire+0x4a5/0x2630
[  404.712380][T10820]  ? css_rstat_updated+0x1ce/0x5a0
[  404.712407][T10820]  ? lock_acquire+0x1b1/0x370
[  404.712420][T10820]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  404.712443][T10820]  ? policy_nodemask+0xed/0x4f0
[  404.712461][T10820]  alloc_pages_mpol+0x1fb/0x540
[  404.712479][T10820]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  404.712497][T10820]  ? __lock_acquire+0x4a5/0x2630
[  404.712513][T10820]  folio_alloc_mpol_noprof+0x36/0x260
[  404.712534][T10820]  vma_alloc_folio_noprof+0xed/0x1d0
[  404.712553][T10820]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  404.712578][T10820]  do_anonymous_page+0xb46/0x2050
[  404.712599][T10820]  ? rcu_read_unlock+0x2d/0xb0
[  404.712625][T10820]  __handle_mm_fault+0x1d2c/0x2a00
[  404.712648][T10820]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  404.712668][T10820]  ? __pfx___handle_mm_fault+0x10/0x10
[  404.712690][T10820]  ? pte_offset_map_lock+0x174/0x320
[  404.712707][T10820]  ? find_held_lock+0x2b/0x80
[  404.712731][T10820]  ? follow_page_pte+0x4d0/0x13f0
[  404.712752][T10820]  handle_mm_fault+0x36d/0xa20
[  404.712777][T10820]  __get_user_pages+0x1178/0x32a0
[  404.712802][T10820]  ? __pfx___get_user_pages+0x10/0x10
[  404.712825][T10820]  populate_vma_page_range+0x267/0x3f0
[  404.712845][T10820]  ? __pfx_populate_vma_page_range+0x10/0x10
[  404.712864][T10820]  ? __pfx_find_vma_intersection+0x10/0x10
[  404.712882][T10820]  ? do_mmap+0x93f/0x12f0
[  404.712901][T10820]  __mm_populate+0x107/0x3a0
[  404.712920][T10820]  ? __pfx___mm_populate+0x10/0x10
[  404.712940][T10820]  ? up_write+0x28c/0x4f0
[  404.712958][T10820]  vm_mmap_pgoff+0x37f/0x470
[  404.712979][T10820]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  404.712998][T10820]  ? do_futex+0x192/0x350
[  404.713014][T10820]  ? __pfx_do_futex+0x10/0x10
[  404.713029][T10820]  ? __do_sys_clone+0xd9/0x120
[  404.713052][T10820]  ksys_mmap_pgoff+0xe4/0x610
[  404.713070][T10820]  ? __x64_sys_futex+0x358/0x4d0
[  404.713086][T10820]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  404.713103][T10820]  ? xfd_validate_state+0x129/0x190
[  404.713118][T10820]  ? ksys_write+0x1ac/0x250
[  404.713150][T10820]  __x64_sys_mmap+0x125/0x190
[  404.713169][T10820]  do_syscall_64+0x10b/0xf80
[  404.713190][T10820]  ? clear_bhb_loop+0x40/0x90
[  404.713208][T10820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.713224][T10820] RIP: 0033:0x7fb10fb9cdd9
[  404.713237][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.713253][T10820] RSP: 002b:00007fb110b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  404.713268][T10820] RAX: ffffffffffffffda RBX: 00007fb10fe15fa0 RCX: 00007fb10fb9cdd9
[  404.713278][T10820] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000
[  404.713287][T10820] RBP: 00007fb10fc32d69 R08: 0000000000000007 R09: 0000000000028000
[  404.713296][T10820] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000
[  404.713305][T10820] R13: 00007fb10fe16038 R14: 00007fb10fe15fa0 R15: 00007ffdec324968
[  404.713325][T10820]  </TASK>
[  408.301847][T10822] syz.1.1013 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  408.353977][T10822] CPU: 0 UID: 0 PID: 10822 Comm: syz.1.1013 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.354004][T10822] Tainted: [L]=SOFTLOCKUP
[  408.354009][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  408.354018][T10822] Call Trace:
[  408.354024][T10822]  <TASK>
[  408.354031][T10822]  dump_stack_lvl+0x100/0x190
[  408.354053][T10822]  dump_header+0xfb/0x606
[  408.354070][T10822]  oom_kill_process.cold+0xd/0x330
[  408.354087][T10822]  out_of_memory+0x340/0x14f0
[  408.354115][T10822]  ? __pfx_out_of_memory+0x10/0x10
[  408.354142][T10822]  mem_cgroup_out_of_memory+0xc6/0x130
[  408.354166][T10822]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  408.354187][T10822]  ? find_held_lock+0x2b/0x80
[  408.354210][T10822]  ? do_raw_spin_unlock+0x145/0x1e0
[  408.354227][T10822]  ? _raw_spin_unlock+0x28/0x50
[  408.354248][T10822]  try_charge_memcg+0x6e5/0xdf0
[  408.354270][T10822]  ? __pfx_try_charge_memcg+0x10/0x10
[  408.354286][T10822]  ? find_held_lock+0x2b/0x80
[  408.354304][T10822]  ? rcu_read_unlock+0x17/0x60
[  408.354321][T10822]  ? rcu_read_unlock+0x17/0x60
[  408.354338][T10822]  ? find_held_lock+0x2b/0x80
[  408.354357][T10822]  ? rcu_read_unlock+0x17/0x60
[  408.354378][T10822]  charge_memcg+0x19f/0x210
[  408.354396][T10822]  mem_cgroup_swapin_charge_folio+0xd2/0x2f0
[  408.354419][T10822]  __swap_cache_prepare_and_add+0x842/0xa20
[  408.354443][T10822]  ? alloc_pages_mpol+0x25a/0x540
[  408.354464][T10822]  ? __pfx___swap_cache_prepare_and_add+0x10/0x10
[  408.354486][T10822]  ? __pfx_swap_entry_swapped+0x10/0x10
[  408.354508][T10822]  swap_cache_alloc_folio+0x1cb/0x300
[  408.354532][T10822]  ? __pfx_swap_cache_alloc_folio+0x10/0x10
[  408.354560][T10822]  swap_cluster_readahead+0x411/0x770
[  408.354582][T10822]  ? __schedule+0x12a7/0x67a0
[  408.354605][T10822]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  408.354647][T10822]  ? get_vma_policy+0x23d/0x3b0
[  408.354666][T10822]  swapin_readahead+0x160/0x12c0
[  408.354695][T10822]  ? __pfx_swapin_readahead+0x10/0x10
[  408.354717][T10822]  ? find_held_lock+0x2b/0x80
[  408.354734][T10822]  ? swap_table_get+0x103/0x2c0
[  408.354759][T10822]  ? swap_table_get+0x10d/0x2c0
[  408.354780][T10822]  ? swap_cache_get_folio+0x286/0x350
[  408.354802][T10822]  ? __pfx_swap_cache_get_folio+0x10/0x10
[  408.354823][T10822]  ? __pfx_get_swap_device+0x10/0x10
[  408.354843][T10822]  ? do_swap_page+0x931/0x6180
[  408.354864][T10822]  do_swap_page+0x931/0x6180
[  408.354894][T10822]  ? __pfx_do_swap_page+0x10/0x10
[  408.354916][T10822]  ? __free_object+0x2a8/0x3f0
[  408.354937][T10822]  ? lockdep_hardirqs_on+0x78/0x100
[  408.354959][T10822]  ? rcu_is_watching+0x12/0xc0
[  408.354977][T10822]  ? __pte_offset_map+0x179/0x310
[  408.354996][T10822]  __handle_mm_fault+0x192f/0x2a00
[  408.355022][T10822]  ? reacquire_held_locks+0xce/0x1e0
[  408.355037][T10822]  ? __pfx___handle_mm_fault+0x10/0x10
[  408.355061][T10822]  ? lock_vma_under_rcu+0x17c/0x590
[  408.355094][T10822]  handle_mm_fault+0x36d/0xa20
[  408.355120][T10822]  do_user_addr_fault+0x5a3/0x12f0
[  408.355144][T10822]  exc_page_fault+0x6f/0xd0
[  408.355164][T10822]  asm_exc_page_fault+0x26/0x30
[  408.355179][T10822] RIP: 0033:0x7fb10fa6a7be
[  408.355193][T10822] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 f6 d5 3a 00 85 c0 0f 8e 53 fd ff ff <e8> 6d 7d fe ff 49 39 c4 73 88 48 8d 1d d1 b7 3a 00 83 3d d6 d5 3a
[  408.355207][T10822] RSP: 002b:00007ffdec324ad0 EFLAGS: 00010202
[  408.355220][T10822] RAX: 0000000000000001 RBX: 00007fb10fe17da0 RCX: 00005555718cd808
[  408.355229][T10822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  408.355238][T10822] RBP: 00007fb10fe17da0 R08: 0000000000000000 R09: 0000000000000000
[  408.355247][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000063c23
[  408.355255][T10822] R13: 00007fb10fe1609c R14: 0000000000063a37 R15: 00007fb10fe16090
[  408.355275][T10822]  </TASK>
[  408.355280][T10822] memory: usage 307200kB, limit 307200kB, failcnt 18488
[  409.285959][T10822] memory+swap: usage 171896kB, limit 9007199254740988kB, failcnt 0
[  409.313426][T10822] kmem: usage 166528kB, limit 9007199254740988kB, failcnt 0
[  409.322094][T10822] Memory cgroup stats for /syz1:
[  409.322203][T10822] cache 0
[  409.343470][T10822] rss 0
[  409.346266][T10822] rss_huge 0
[  409.349443][T10822] shmem 0
[  409.352360][T10822] mapped_file 0
[  409.363463][T10822] dirty 0
[  409.373683][T10822] writeback 0
[  409.376990][T10822] workingset_refault_anon 5411
[  409.381738][T10822] workingset_refault_file 12571
[  409.403900][T10822] swap 425984
[  409.407219][T10822] swapcached 88018944
[  409.411181][T10822] pgpgin 606118
[  409.424545][T10822] pgpgout 609871
[  409.429582][T10822] pgfault 385714
[  409.443422][T10822] pgmajfault 1491
[  409.447091][T10822] inactive_anon 0
[  409.450717][T10822] active_anon 57344
[  409.463398][T10822] inactive_file 0
[  409.467071][T10822] active_file 0
[  409.470513][T10822] unevictable 0
[  409.483475][T10822] hierarchical_memory_limit 314572800
[  409.493528][T10822] hierarchical_memsw_limit 9223372036854771712
[  409.513336][T10822] total_cache 0
[  409.516826][T10822] total_rss 0
[  409.520093][T10822] total_rss_huge 0
[  409.533368][T10822] total_shmem 0
[  409.538317][T10822] total_mapped_file 0
[  409.553320][T10822] total_dirty 0
[  409.556811][T10822] total_writeback 0
[  409.560617][T10822] total_workingset_refault_anon 5411
[  409.573298][T10822] total_workingset_refault_file 12571
[  409.583532][T10822] total_swap 425984
[  409.593540][T10822] total_swapcached 88018944
[  409.603491][T10822] total_pgpgin 606118
[  409.608939][T10822] total_pgpgout 609871
[  409.623346][T10822] total_pgfault 385714
[  409.633479][T10822] total_pgmajfault 1491
[  409.639137][T10822] total_inactive_anon 0
[  409.653253][T10822] total_active_anon 57344
[  409.657613][T10822] total_inactive_file 0
[  409.661750][T10822] total_active_file 0
[  409.683305][T10822] total_unevictable 0
[  409.687322][T10822] anon_cost 0
[  409.690591][T10822] file_cost 0
[  409.696231][T10822] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1013,pid=10822,uid=0
[  409.731581][T10822] Memory cgroup out of memory: Killed process 10822 (syz.1.1013) total-vm:172400kB, anon-rss:1244kB, file-rss:26372kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000
[  410.187194][T10830] cougar: G6 mapped to space
[  410.273916][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1015'.
[  415.313251][ T5638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  415.322987][ T5638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  415.338478][ T5638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  415.350276][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  415.361541][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  415.802060][T10844] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.809240][T10844] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.816757][T10844] bridge_slave_0: entered allmulticast mode
[  415.824224][T10844] bridge_slave_0: entered promiscuous mode
[  415.832044][T10844] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.839173][T10844] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.847643][T10844] bridge_slave_1: entered allmulticast mode
[  415.855226][T10844] bridge_slave_1: entered promiscuous mode
[  415.883323][T10844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.896534][T10844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.925328][T10844] team0: Port device team_slave_0 added
[  415.933792][T10844] team0: Port device team_slave_1 added
[  415.958294][T10844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.965423][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.992697][T10844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.006359][T10844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.013691][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.040643][T10844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.082631][T10844] hsr_slave_0: entered promiscuous mode
[  416.088931][T10844] hsr_slave_1: entered promiscuous mode
[  416.095438][T10844] debugfs: 'hsr0' already exists in 'hsr'
[  416.101589][T10844] Cannot create hsr debugfs directory
[  417.449439][ T5638] Bluetooth: hci8: command tx timeout
[  419.528337][ T5638] Bluetooth: hci8: command tx timeout
[  421.607342][ T5638] Bluetooth: hci8: command tx timeout
[  423.686346][ T5638] Bluetooth: hci8: command tx timeout
[  432.783666][ T5629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  432.797261][ T5629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  432.807030][ T5629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  432.814965][ T5629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  432.828327][ T5629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  433.291076][T10868] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.298438][T10868] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.306663][T10868] bridge_slave_0: entered allmulticast mode
[  433.314039][T10868] bridge_slave_0: entered promiscuous mode
[  433.322153][T10868] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.329308][T10868] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.336896][T10868] bridge_slave_1: entered allmulticast mode
[  433.345370][T10868] bridge_slave_1: entered promiscuous mode
[  433.378974][T10868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  433.391832][T10868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  433.420839][T10868] team0: Port device team_slave_0 added
[  433.428704][T10868] team0: Port device team_slave_1 added
[  433.453580][T10868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.460559][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.489647][T10868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.502479][T10868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.509437][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  433.537370][T10868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.577532][T10868] hsr_slave_0: entered promiscuous mode
[  433.584839][T10868] hsr_slave_1: entered promiscuous mode
[  433.590939][T10868] debugfs: 'hsr0' already exists in 'hsr'
[  433.599015][T10868] Cannot create hsr debugfs directory
[  434.881870][ T5629] Bluetooth: hci9: command tx timeout
[  435.797528][T10892] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  435.812430][T10892] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  435.822031][T10892] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  435.832699][T10892] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  435.843056][T10892] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  436.273756][T10891] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.281608][T10891] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.288842][T10891] bridge_slave_0: entered allmulticast mode
[  436.296625][T10891] bridge_slave_0: entered promiscuous mode
[  436.305044][T10891] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.313061][T10891] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.328701][T10891] bridge_slave_1: entered allmulticast mode
[  436.336030][T10891] bridge_slave_1: entered promiscuous mode
[  436.365942][T10891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.377929][T10891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.407113][T10891] team0: Port device team_slave_0 added
[  436.415793][T10891] team0: Port device team_slave_1 added
[  436.439637][T10891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.447617][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.475653][T10891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.488222][T10891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.495615][T10891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.523284][T10891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.565649][T10891] hsr_slave_0: entered promiscuous mode
[  436.572192][T10891] hsr_slave_1: entered promiscuous mode
[  436.578300][T10891] debugfs: 'hsr0' already exists in 'hsr'
[  436.585679][T10891] Cannot create hsr debugfs directory
[  436.879763][T10892] Bluetooth: hci4: command 0x0406 tx timeout
[  436.959702][ T5638] Bluetooth: hci9: command tx timeout
[  437.919221][ T5638] Bluetooth: hci10: command tx timeout
[  439.038761][ T5638] Bluetooth: hci9: command tx timeout
[  439.924285][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  439.930694][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  439.998125][T10892] Bluetooth: hci10: command tx timeout
[  441.117687][T10892] Bluetooth: hci9: command tx timeout
[  442.012783][ T5638] Bluetooth: hci5: command 0x0406 tx timeout
[  442.077259][ T5638] Bluetooth: hci10: command tx timeout
[  444.156189][ T5638] Bluetooth: hci10: command tx timeout
[  461.028012][   T30] INFO: task syz.0.740:9385 blocked for more than 144 seconds.
[  461.035642][   T30]       Tainted: G             L      syzkaller #0
[  461.045775][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  461.058813][   T30] task:syz.0.740       state:D stack:24280 pid:9385  tgid:9384  ppid:5628   task_flags:0x480140 flags:0x00080002
[  461.073684][   T30] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  461.076995][   T30]  <TASK>
[  461.087939][   T30]  __schedule+0x1295/0x67a0
[  461.102997][   T30]  ? __pfx___schedule+0x10/0x10
[  461.117572][   T30]  ? find_held_lock+0x2b/0x80
[  461.136931][   T30]  ? schedule+0x2bf/0x390
[  461.168022][   T30]  schedule+0xdd/0x390
[  461.193526][ T5625] Process accounting resumed
[  461.201811][   T30]  schedule_timeout+0x1b2/0x280
[  461.221838][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  461.233471][   T30]  ? mark_held_locks+0x40/0x70
[  461.245261][   T30]  __wait_for_common+0x2e7/0x4c0
[  461.256254][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  461.266189][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  461.290696][   T30]  remove_one+0x312/0x420
[  461.301754][   T30]  ? find_next_child+0x18f/0x280
[  461.310468][   T30]  __simple_recursive_removal+0x148/0x5c0
[  461.317014][   T30]  ? __pfx_remove_one+0x10/0x10
[  461.322254][   T30]  debugfs_remove+0x5d/0x80
[  461.326781][   T30]  nsim_dev_health_exit+0x3b/0xe0
[  461.333520][   T30]  nsim_dev_reload_destroy+0x144/0x4a0
[  461.339290][   T30]  nsim_drv_remove+0x52/0x1e0
[  461.343976][   T30]  ? __pfx_nsim_bus_remove+0x10/0x10
[  461.349668][   T30]  device_remove+0xcb/0x180
[  461.354184][   T30]  device_release_driver_internal+0x44e/0x620
[  461.361050][   T30]  bus_remove_device+0x2bc/0x560
[  461.366013][   T30]  ? __pfx_bus_remove_device+0x10/0x10
[  461.371806][   T30]  ? __pfx_device_remove_attrs+0x10/0x10
[  461.377759][   T30]  device_del+0x376/0x9b0
[  461.382111][   T30]  ? __pfx_device_del+0x10/0x10
[  461.389176][   T30]  ? __lock_acquire+0x4a5/0x2630
[  461.394142][   T30]  device_unregister+0x1d/0xe0
[  461.399271][   T30]  del_device_store+0x346/0x480
[  461.404136][   T30]  ? __pfx_del_device_store+0x10/0x10
[  461.409972][   T30]  ? find_held_lock+0x2b/0x80
[  461.414687][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  461.421030][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  461.425908][   T30]  ? __pfx_del_device_store+0x10/0x10
[  461.432844][   T30]  bus_attr_store+0x74/0xb0
[  461.438986][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[  461.444208][   T30]  sysfs_kf_write+0xf2/0x150
[  461.449080][   T30]  kernfs_fop_write_iter+0x3e0/0x5f0
[  461.454378][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[  461.459920][   T30]  vfs_write+0x6ac/0x1070
[  461.464259][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  461.470408][   T30]  ? __pfx_vfs_write+0x10/0x10
[  461.475205][   T30]  ksys_write+0x12a/0x250
[  461.480242][   T30]  ? __pfx_ksys_write+0x10/0x10
[  461.485115][   T30]  ? rcu_is_watching+0x12/0xc0
[  461.491201][   T30]  do_syscall_64+0x10b/0xf80
[  461.495822][   T30]  ? clear_bhb_loop+0x40/0x90
[  461.501383][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.507845][   T30] RIP: 0033:0x7f301259cdd9
[  461.512273][   T30] RSP: 002b:00007f30133ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  461.521862][   T30] RAX: ffffffffffffffda RBX: 00007f3012815fa0 RCX: 00007f301259cdd9
[  461.530118][   T30] RDX: 0000000000000045 RSI: 0000200000000040 RDI: 0000000000000003
[  461.538671][   T30] RBP: 00007f3012632d69 R08: 0000000000000000 R09: 0000000000000000
[  461.546653][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.556450][   T30] R13: 00007f3012816038 R14: 00007f3012815fa0 R15: 00007ffc0790b198
[  461.564689][   T30]  </TASK>
[  461.597766][   T30] INFO: task syz.2.746:9403 blocked for more than 144 seconds.
[  461.614585][   T30]       Tainted: G             L      syzkaller #0
[  461.629279][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  461.647322][   T30] task:syz.2.746       state:D stack:26744 pid:9403  tgid:9401  ppid:5626   task_flags:0x400140 flags:0x00080002
[  461.677254][   T30] Call Trace:
[  461.680567][   T30]  <TASK>
[  461.683488][   T30]  __schedule+0x1295/0x67a0
[  461.697318][   T30]  ? __pfx___schedule+0x10/0x10
[  461.707285][   T30]  ? find_held_lock+0x2b/0x80
[  461.717765][   T30]  ? schedule+0x2bf/0x390
[  461.725423][   T30]  schedule+0xdd/0x390
[  461.737205][   T30]  schedule_preempt_disabled+0x13/0x30
[  461.747550][   T30]  __mutex_lock+0xced/0x1b10
[  461.764836][   T30]  ? devlink_health_report+0x66c/0xb20
[  461.778581][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  461.787248][   T30]  ? devlink_recover_notify.constprop.0+0x1e3/0x540
[  461.807819][   T30]  ? devlink_health_report+0x66c/0xb20
[  461.813346][   T30]  devlink_health_report+0x66c/0xb20
[  461.837162][   T30]  ? __pfx_devlink_health_report+0x10/0x10
[  461.847666][   T30]  ? _copy_from_user+0x59/0xd0
[  461.854831][   T30]  nsim_dev_health_break_write+0x166/0x210
[  461.861016][   T30]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[  461.867608][   T30]  full_proxy_write+0x135/0x1a0
[  461.872481][   T30]  vfs_write+0x2aa/0x1070
[  461.876807][   T30]  ? __pfx_full_proxy_write+0x10/0x10
[  461.882534][   T30]  ? __pfx_vfs_write+0x10/0x10
[  461.888956][   T30]  ? __fget_files+0x215/0x3d0
[  461.893660][   T30]  ? __fget_files+0x21f/0x3d0
[  461.899316][   T30]  ksys_write+0x12a/0x250
[  461.903666][   T30]  ? __pfx_ksys_write+0x10/0x10
[  461.909191][   T30]  ? rcu_is_watching+0x12/0xc0
[  461.913983][   T30]  do_syscall_64+0x10b/0xf80
[  461.918830][   T30]  ? clear_bhb_loop+0x40/0x90
[  461.923522][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.930490][   T30] RIP: 0033:0x7f712c79cdd9
[  461.934926][   T30] RSP: 002b:00007f712d591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  461.944165][   T30] RAX: ffffffffffffffda RBX: 00007f712ca15fa0 RCX: 00007f712c79cdd9
[  461.952416][   T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000007
[  461.960585][   T30] RBP: 00007f712c832d69 R08: 0000000000000000 R09: 0000000000000000
[  461.968802][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  461.976789][   T30] R13: 00007f712ca16038 R14: 00007f712ca15fa0 R15: 00007ffded9c5e18
[  461.985060][   T30]  </TASK>
[  462.006592][   T30] INFO: task syz-executor:9626 blocked for more than 144 seconds.
[  462.022486][   T30]       Tainted: G             L      syzkaller #0
[  462.030231][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  462.039893][   T30] task:syz-executor    state:D stack:24136 pid:9626  tgid:9626  ppid:1      task_flags:0x400140 flags:0x00080002
[  462.052579][   T30] Call Trace:
[  462.055874][   T30]  <TASK>
[  462.059063][   T30]  __schedule+0x1295/0x67a0
[  462.063594][   T30]  ? __pfx___schedule+0x10/0x10
[  462.068806][   T30]  ? find_held_lock+0x2b/0x80
[  462.073500][   T30]  ? schedule+0x2bf/0x390
[  462.078133][   T30]  schedule+0xdd/0x390
[  462.082218][   T30]  schedule_preempt_disabled+0x13/0x30
[  462.087993][   T30]  __mutex_lock+0xced/0x1b10
[  462.092605][   T30]  ? del_device_store+0xd1/0x480
[  462.097828][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  462.103611][   T30]  ? sscanf+0xc7/0x100
[  462.110014][   T30]  ? __pfx_sscanf+0x10/0x10
[  462.114543][   T30]  ? __lock_acquire+0x4a5/0x2630
[  462.119766][   T30]  ? __lock_acquire+0x4a5/0x2630
[  462.124722][   T30]  ? del_device_store+0xd1/0x480
[  462.130027][   T30]  del_device_store+0xd1/0x480
[  462.135593][   T30]  ? __pfx_del_device_store+0x10/0x10
[  462.141297][   T30]  ? find_held_lock+0x2b/0x80
[  462.145988][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  462.151146][   T30]  ? sysfs_file_kobj+0xe4/0x290
[  462.156016][   T30]  ? __pfx_del_device_store+0x10/0x10
[  462.162220][   T30]  bus_attr_store+0x74/0xb0
[  462.166743][   T30]  ? __pfx_bus_attr_store+0x10/0x10
[  462.172241][   T30]  sysfs_kf_write+0xf2/0x150
[  462.177043][   T30]  kernfs_fop_write_iter+0x3e0/0x5f0
[  462.182342][   T30]  ? __pfx_sysfs_kf_write+0x10/0x10
[  462.187822][   T30]  vfs_write+0x6ac/0x1070
[  462.193744][   T30]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  462.199899][   T30]  ? __pfx_vfs_write+0x10/0x10
[  462.205523][   T30]  ? __pfx_do_sys_openat2+0x10/0x10
[  462.211101][   T30]  ksys_write+0x12a/0x250
[  462.215691][   T30]  ? __pfx_ksys_write+0x10/0x10
[  462.222728][   T30]  ? rcu_is_watching+0x12/0xc0
[  462.229296][   T30]  do_syscall_64+0x10b/0xf80
[  462.233914][   T30]  ? clear_bhb_loop+0x40/0x90
[  462.239661][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.245585][   T30] RIP: 0033:0x7f4f9d75d60e
[  462.250345][   T30] RSP: 002b:00007fff1a68c6f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  462.258968][   T30] RAX: ffffffffffffffda RBX: 0000555574ebe500 RCX: 00007f4f9d75d60e
[  462.267744][   T30] RDX: 0000000000000001 RSI: 00007fff1a68c780 RDI: 0000000000000005
[  462.275751][   T30] RBP: 00007f4f9d8335ec R08: 0000000000000000 R09: 0000000000000000
[  462.284055][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.292292][   T30] R13: 00007fff1a68c780 R14: 00007f4f9e544620 R15: 0000000000000003
[  462.300491][   T30]  </TASK>
[  462.324327][   T30] 
[  462.324327][   T30] Showing all locks held in the system:
[  462.344403][   T30] 1 lock held by khungtaskd/30:
[  462.349618][   T30]  #0: ffffffff8e7e52e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  462.359733][   T30] 2 locks held by getty/7328:
[  462.364420][   T30]  #0: ffff8880331d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  462.374565][   T30]  #1: ffffc90002fed2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[  462.386163][   T30] 8 locks held by syz.0.740/9385:
[  462.391532][   T30]  #0: ffff888078e21970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  462.400872][   T30]  #1: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.410995][   T30]  #2: ffff88804b2d2880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.421004][   T30]  #3: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.431320][   T30]  #4: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.444007][   T30]  #5: ffff88802afaf128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[  462.454889][   T30]  #6: ffff88807d0ba258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0
[  462.465163][   T30]  #7: ffff888076257688 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0
[  462.477433][   T30] 3 locks held by syz.2.746/9403:
[  462.482474][   T30]  #0: ffff8880750855f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  462.492367][   T30]  #1: ffff88801fecc410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.501594][   T30]  #2: ffff88807d0ba258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20
[  462.513170][   T30] 4 locks held by syz-executor/9626:
[  462.518719][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.527921][   T30]  #1: ffff8880378c8480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.537938][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.550712][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.561306][   T30] 4 locks held by syz-executor/9676:
[  462.566598][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.575886][   T30]  #1: ffff888037131c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.585958][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.596184][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.607818][   T30] 2 locks held by syz.3.872/10044:
[  462.612949][   T30]  #0: ffff88801fecc410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0
[  462.623233][   T30]  #1: ffff888076257688 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0
[  462.634560][   T30] 4 locks held by syz-executor/10302:
[  462.640290][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.650244][   T30]  #1: ffff8880828e7c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.661724][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.671977][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.682520][   T30] 4 locks held by syz-executor/10480:
[  462.688071][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.697334][   T30]  #1: ffff888028efd880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.707325][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.718903][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.729396][   T30] 4 locks held by syz-executor/10521:
[  462.734807][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.744187][   T30]  #1: ffff88806e79d480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.754935][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.765264][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.777241][   T30] 1 lock held by syz.1.950/10565:
[  462.782289][   T30]  #0: ffffffff8e7f0cf8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0
[  462.792623][   T30] 4 locks held by syz-executor/10844:
[  462.798277][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.807455][   T30]  #1: ffff8880794f9c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.817522][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.829665][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.840315][   T30] 4 locks held by syz-executor/10868:
[  462.845694][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.856183][   T30]  #1: ffff88805c321480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.866240][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.877716][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.889095][   T30] 4 locks held by syz-executor/10891:
[  462.894487][   T30]  #0: ffff888035b0a410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  462.903845][   T30]  #1: ffff8880848d7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  462.913811][   T30]  #2: ffff888029bb8b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  462.924807][   T30]  #3: ffffffff8fb80220 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480
[  462.935346][   T30] 
[  462.951790][   T30] =============================================
[  462.951790][   T30] 
[  462.978864][   T30] NMI backtrace for cpu 0
[  462.978888][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  462.978909][   T30] Tainted: [L]=SOFTLOCKUP
[  462.978914][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  462.978923][   T30] Call Trace:
[  462.978928][   T30]  <TASK>
[  462.978934][   T30]  dump_stack_lvl+0x100/0x190
[  462.978956][   T30]  nmi_cpu_backtrace.cold+0x12d/0x151
[  462.978974][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  462.978991][   T30]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  462.979011][   T30]  sys_info+0x141/0x190
[  462.979024][   T30]  watchdog+0xcb1/0x1030
[  462.979048][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  462.979069][   T30]  ? __pfx_watchdog+0x10/0x10
[  462.979089][   T30]  ? __kthread_parkme+0x18c/0x230
[  462.979111][   T30]  ? kthread+0x13a/0x450
[  462.979123][   T30]  ? __pfx_watchdog+0x10/0x10
[  462.979142][   T30]  kthread+0x370/0x450
[  462.979154][   T30]  ? __pfx_kthread+0x10/0x10
[  462.979168][   T30]  ret_from_fork+0x72b/0xd50
[  462.979185][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  462.979201][   T30]  ? __switch_to+0x800/0x1100
[  462.979221][   T30]  ? __switch_to_asm+0x39/0x70
[  462.979240][   T30]  ? __pfx_kthread+0x10/0x10
[  462.979254][   T30]  ret_from_fork_asm+0x1a/0x30
[  462.979281][   T30]  </TASK>
[  463.170388][ T6711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.197562][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  463.204448][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  463.215114][   T30] Tainted: [L]=SOFTLOCKUP
[  463.219426][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  463.229468][   T30] Call Trace:
[  463.232736][   T30]  <TASK>
[  463.235656][   T30]  dump_stack_lvl+0x100/0x190
[  463.240332][   T30]  vpanic+0x552/0x970
[  463.244303][   T30]  ? __pfx_vpanic+0x10/0x10
[  463.248795][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  463.254973][   T30]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  463.261119][   T30]  panic+0xd1/0xe0
[  463.264828][   T30]  ? __pfx_panic+0x10/0x10
[  463.269231][   T30]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  463.275375][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  463.281541][   T30]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  463.287685][   T30]  ? watchdog.cold+0x1ec/0x234
[  463.292435][   T30]  ? watchdog+0xcc1/0x1030
[  463.296848][   T30]  watchdog.cold+0x1fd/0x234
[  463.301434][   T30]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  463.307238][   T30]  ? __pfx_watchdog+0x10/0x10
[  463.311912][   T30]  ? __kthread_parkme+0x18c/0x230
[  463.316930][   T30]  ? kthread+0x13a/0x450
[  463.321157][   T30]  ? __pfx_watchdog+0x10/0x10
[  463.325825][   T30]  kthread+0x370/0x450
[  463.329881][   T30]  ? __pfx_kthread+0x10/0x10
[  463.334459][   T30]  ret_from_fork+0x72b/0xd50
[  463.339042][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  463.344163][   T30]  ? __switch_to+0x800/0x1100
[  463.348832][   T30]  ? __switch_to_asm+0x39/0x70
[  463.353588][   T30]  ? __pfx_kthread+0x10/0x10
[  463.358259][   T30]  ret_from_fork_asm+0x1a/0x30
[  463.363036][   T30]  </TASK>
[  463.366112][   T30] Kernel Offset: disabled
[  463.370437][   T30] Rebooting in 86400 seconds..