last executing test programs:

8.534186733s ago: executing program 1 (id=2):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0)
write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8)
setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231", 0x31)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$auto_SO_RXQ_OVFL(r3, 0x1, 0x28, 0x0, 0x7)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r4, 0x29, 0xd1, 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x454, 0x9)

8.234217408s ago: executing program 2 (id=6):
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, 0x0, 0x6a)
setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3)

7.96403891s ago: executing program 3 (id=4):
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x3ff)
open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0)
r1 = socket(0x1f, 0x2, 0x3a)
r2 = open_by_handle_at$auto(r1, 0x0, 0xffffffff)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x4)
socket(0xa, 0x801, 0x84)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0)
write$auto_tty_fops_tty_io(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r6, 0x0, 0x0)
mmap$auto(0x9, 0xae, 0x40000000000003, 0x10010, 0xfffffffffffffffa, 0x7072)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0)
ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/duplex\x00', 0x20100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000003c0)=""/4096, 0x1000)
select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x2, 0x9, 0x6, 0xa80d, 0x200000007, 0xfffffffffffffffd, 0x7c43, 0x9, 0x0, 0x6, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x12, 0x2, 0x4e4bcd3b, 0x8, 0x7, 0x100000001, 0x5, 0x12, 0x0, 0x1, 0xffffffff00000001, 0xe28, 0x48, 0x8]}, &(0x7f00000000c0)={0x100})
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)

7.941989408s ago: executing program 0 (id=1):
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x3ff)
open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0)
r1 = socket(0x1f, 0x2, 0x3a)
r2 = open_by_handle_at$auto(r1, 0x0, 0xffffffff)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x4)
socket(0xa, 0x801, 0x84)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0)
write$auto_tty_fops_tty_io(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r6, 0x0, 0x0)
mmap$auto(0x9, 0xae, 0x40000000000003, 0x10010, 0xfffffffffffffffa, 0x7072)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0)
ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/duplex\x00', 0x20100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000003c0)=""/4096, 0x1000)
select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x2, 0x9, 0x6, 0xa80d, 0x200000007, 0xfffffffffffffffd, 0x7c43, 0x9, 0x0, 0x6, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x12, 0x2, 0x4e4bcd3b, 0x8, 0x7, 0x100000001, 0x5, 0x12, 0x0, 0x1, 0xffffffff00000001, 0xe28, 0x48, 0x8]}, &(0x7f00000000c0)={0x100})
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)

7.824076209s ago: executing program 2 (id=7):
rt_tgsigqueueinfo$auto(0x3, 0x7, 0x7, &(0x7f0000000180)={@siginfo_0_0={0x401, 0x1, 0x80, @_timer={0xaabe, 0xb7d, @sival_ptr=0x0, 0x8}}})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x200, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyee\x00', 0x28882, 0x0)
close_range$auto(0x2, 0x8, 0x0)
syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), 0xffffffffffffffff)
socket(0x2, 0x3, 0x100)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, 0x0, 0xc0804)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0xa02, 0x0)
r2 = epoll_create$auto(0x3e)
epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0)

6.291592574s ago: executing program 1 (id=8):
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x3ff)
open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0)
r1 = socket(0x1f, 0x2, 0x3a)
r2 = open_by_handle_at$auto(r1, 0x0, 0xffffffff)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0)
write$auto_tty_fops_tty_io(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r6, 0x0, 0x0)
mmap$auto(0x9, 0xae, 0x40000000000003, 0x10010, 0xfffffffffffffffa, 0x7072)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0)
ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0)
r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/duplex\x00', 0x20100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000003c0)=""/4096, 0x1000)
select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x2, 0x9, 0x6, 0xa80d, 0x200000007, 0xfffffffffffffffd, 0x7c43, 0x9, 0x0, 0x6, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x12, 0x2, 0x4e4bcd3b, 0x8, 0x7, 0x100000001, 0x5, 0x12, 0x0, 0x1, 0xffffffff00000001, 0xe28, 0x48, 0x8]}, &(0x7f00000000c0)={0x100})
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)

6.188468621s ago: executing program 2 (id=9):
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
bind$auto(0x3, 0x0, 0x6a)
setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3)

5.812568216s ago: executing program 3 (id=10):
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x3ff)
open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0)
r1 = socket(0x1f, 0x2, 0x3a)
r2 = open_by_handle_at$auto(r1, 0x0, 0xffffffff)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0)
write$auto_tty_fops_tty_io(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r5, 0x0, 0x0)
mmap$auto(0x9, 0xae, 0x40000000000003, 0x10010, 0xfffffffffffffffa, 0x7072)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0)
ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/duplex\x00', 0x20100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000003c0)=""/4096, 0x1000)
select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x2, 0x9, 0x6, 0xa80d, 0x200000007, 0xfffffffffffffffd, 0x7c43, 0x9, 0x0, 0x6, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x12, 0x2, 0x4e4bcd3b, 0x8, 0x7, 0x100000001, 0x5, 0x12, 0x0, 0x1, 0xffffffff00000001, 0xe28, 0x48, 0x8]}, &(0x7f00000000c0)={0x100})
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)

4.870547051s ago: executing program 0 (id=11):
syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff)
socket(0x1e, 0x1, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x201, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000001, 0x7, 0xd, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r0, 0x3)
setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0)
r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r1, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0xffd8)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000)
openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
getrandom$auto(0x0, 0x6000000, 0x3)
socket(0xa, 0x5, 0x84)
connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000)
connect$auto(0x3, 0x0, 0x55)
r2 = io_uring_setup$auto(0x2, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8)
syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/mnt\x00')
ioctl$auto_TIOCSCTTY(r2, 0x540e, &(0x7f0000000180)="7f03506380edbbe271403603b8b1170d8aff2d5f37b460e59d1c8b1df46803c5a02a7787bb82c37ad2c0aefb0e371281eb1b2c34d13a77")

4.778970361s ago: executing program 2 (id=12):
pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x3ff)
open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0)
r1 = socket(0x1f, 0x2, 0x3a)
r2 = open_by_handle_at$auto(r1, 0x0, 0xffffffff)
prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7)
write$auto(0xffffffffffffffff, 0x0, 0x4)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
socket(0xa, 0x801, 0x84)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0)
adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800})
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0)
write$auto_tty_fops_tty_io(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_TCP_METRICS_CMD_GET(r5, 0x0, 0x0)
mmap$auto(0x9, 0xae, 0x40000000000003, 0x10010, 0xfffffffffffffffa, 0x7072)
openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/maps\x00', 0x21000, 0x0)
ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0)
r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/duplex\x00', 0x20100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000003c0)=""/4096, 0x1000)
select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x75, 0x2, 0x9, 0x6, 0xa80d, 0x200000007, 0xfffffffffffffffd, 0x7c43, 0x9, 0x0, 0x6, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x12, 0x2, 0x4e4bcd3b, 0x8, 0x7, 0x100000001, 0x5, 0x12, 0x0, 0x1, 0xffffffff00000001, 0xe28, 0x48, 0x8]}, &(0x7f00000000c0)={0x100})
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
write$auto(0x3, 0x0, 0xfffffdef)
write$auto(0x3, 0x0, 0xfffffdef)

2.1332399s ago: executing program 1 (id=13):
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100103})
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
read$auto(r0, 0x0, 0x20)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0)
r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r2, &(0x7f0000000100)="4ceac02070916ed1dc1f91f3c388b5622aa1990800e1d0ae2ef23f241bb2bfd9339eef334248dc800e9b3368", 0x2c)
socket(0x18, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023bd7000fadbdf2501000000040007800c00020005000000dd00000008000100232e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880)
sendmsg$auto_IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="03000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000010)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
getsockopt$auto(0xffffffffffffffff, 0x40000000113, 0x3, 0xfffffffffffffffc, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
r5 = socket(0x10, 0x2, 0x6)
sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
mmap$auto(0x0, 0x2020009, 0xfffffffffffffffb, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
write$auto(0x3, 0x0, 0x7fffffff)
write$auto(r3, 0x0, 0x65b)
openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5)

890.270926ms ago: executing program 2 (id=14):
openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0)
openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0xe)
socket(0x2, 0x1, 0x106)
bind$auto(0x3, 0x0, 0x6a)
io_uring_setup$auto(0xfffffff7, 0x0)
setsockopt$auto(0x3, 0x6, 0x4, 0x0, 0xfb3)

880.839272ms ago: executing program 3 (id=15):
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0)
write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8)
setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83)
statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4)
ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0)
write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001e49f34dc422231cf4d40d401d5f8", 0x38)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$auto_SO_RXQ_OVFL(r3, 0x1, 0x28, 0x0, 0x7)
sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0)
socket(0x10, 0x2, 0x0)
socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0)
clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
getsockopt$auto(r4, 0x29, 0xd1, 0x0, 0x0)
mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000)
madvise$auto(0x0, 0x454, 0x9)

318.513535ms ago: executing program 2 (id=16):
r0 = fcntl$auto(0xffffffffffffffff, 0x492, 0xffffffffffffffff)
r1 = signalfd4$auto(r0, 0x0, 0x7, 0x5)
read$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(r1, 0x0, 0x0)
ioctl$auto_NVRAM_SETCKS(r1, 0x7041, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1)
r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001140)="8cbdca", 0x3)
writev$auto(r2, &(0x7f0000001d40)={0x0, 0x2}, 0x6)
gettid()
r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0)
write$auto_fuse_dev_operations_fuse_i(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0)
write$auto(r4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd)
socket(0x3, 0x3, 0xc24)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000)
r6 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0)
r7 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range$auto(r7, 0x8, 0x0)
ioctl$auto_posix_clock_file_operations_posix_clock(r6, 0x2, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000)
fsopen$auto(0x0, 0x1)

4.867906ms ago: executing program 3 (id=17):
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0xa, 0x0)
r0 = io_uring_setup$auto(0x6, 0x0)
socket(0xa, 0x3, 0x3a)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x7, 0xe983, 0x400000000df, 0xeb1, r0, 0x7fff)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
socket(0x10, 0x2, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x240, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
socket(0x2, 0x1, 0x106)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff})
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9)
syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff)
get_robust_list$auto(0x0, 0x0, 0x0)
lsm_list_modules$auto(0x0, 0x0, 0x0)
sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x4c005)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0)

0s ago: executing program 0 (id=18):
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
getresuid$auto(&(0x7f00000011c0)=0x7, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x280c2, 0x0)
sendfile$auto(r0, r0, 0x0, 0x1)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe)
mmap$auto(0x0, 0x400008, 0x2000000000000dc, 0x9b72, 0xffffffffffffffff, 0x8000)
memfd_create$auto(0x0, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_taskstats(0x0, r1)
mmap$auto(0xfffffffffffffffc, 0x4020005, 0x1, 0xeb1, 0x401, 0x8000)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x17d001, 0x0)
stat$auto(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x88600, 0x0)
ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0)
fallocate$auto(0x3, 0x0, 0xe, 0x8ec8)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x2)
close_range$auto(0x2, 0xffffffffffffffff, 0x8000010)
r3 = open(&(0x7f0000000800)='./file0\x00', 0x105480, 0x0)
ioperm$auto(0x3, 0x8, 0x8)
close_range$auto(0x6, 0xeffff000, 0x6)
finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004)
mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x3, 0x8000)
mmap$auto(0x9, 0x3, 0x8000000000000000, 0x13, r3, 0x34a)
eventfd$auto(0x8000004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts.
[  101.589822][ T5814] cgroup: Unknown subsys name 'net'
[  101.729007][ T5814] cgroup: Unknown subsys name 'cpuset'
[  101.741040][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  103.786313][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  106.036611][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.047712][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.057047][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.068130][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.103632][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.126024][ T5139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.135067][ T5139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.146828][ T5139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.156862][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.167044][ T5139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  106.221324][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.233767][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.244796][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.255087][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.267320][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.278638][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  106.341966][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  106.350455][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  106.360168][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  106.370053][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  106.700790][ T5823] chnl_net:caif_netlink_parms(): no params data found
[  106.887429][ T5828] chnl_net:caif_netlink_parms(): no params data found
[  106.950299][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.960893][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.970081][ T5823] bridge_slave_0: entered allmulticast mode
[  106.978761][ T5823] bridge_slave_0: entered promiscuous mode
[  107.024310][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.032882][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.042646][ T5823] bridge_slave_1: entered allmulticast mode
[  107.050797][ T5823] bridge_slave_1: entered promiscuous mode
[  107.148485][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.166632][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.306329][ T5823] team0: Port device team_slave_0 added
[  107.315254][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.324219][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.334099][ T5828] bridge_slave_0: entered allmulticast mode
[  107.342421][ T5828] bridge_slave_0: entered promiscuous mode
[  107.407107][ T5823] team0: Port device team_slave_1 added
[  107.415237][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.427172][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.435770][ T5828] bridge_slave_1: entered allmulticast mode
[  107.447542][ T5828] bridge_slave_1: entered promiscuous mode
[  107.535142][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.543587][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.574615][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.591156][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.604382][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.613886][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.643094][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.657853][ T5832] chnl_net:caif_netlink_parms(): no params data found
[  107.684872][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.725314][ T5835] chnl_net:caif_netlink_parms(): no params data found
[  107.757903][ T5828] team0: Port device team_slave_0 added
[  107.809893][ T5828] team0: Port device team_slave_1 added
[  107.942082][ T5823] hsr_slave_0: entered promiscuous mode
[  107.952971][ T5823] hsr_slave_1: entered promiscuous mode
[  107.968688][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.977925][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.007450][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.079481][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.087558][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.125470][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.140381][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.151372][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.162737][ T5832] bridge_slave_0: entered allmulticast mode
[  108.171808][ T5832] bridge_slave_0: entered promiscuous mode
[  108.213988][ T5830] Bluetooth: hci1: command tx timeout
[  108.221233][   T55] Bluetooth: hci0: command tx timeout
[  108.232257][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.240950][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.248540][   T24] cfg80211: failed to load regulatory.db
[  108.256001][ T5832] bridge_slave_1: entered allmulticast mode
[  108.264938][ T5832] bridge_slave_1: entered promiscuous mode
[  108.289240][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.297269][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.307345][ T5835] bridge_slave_0: entered allmulticast mode
[  108.316339][ T5835] bridge_slave_0: entered promiscuous mode
[  108.329345][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.338588][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.347384][ T5835] bridge_slave_1: entered allmulticast mode
[  108.355955][ T5835] bridge_slave_1: entered promiscuous mode
[  108.407257][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.452655][   T55] Bluetooth: hci3: command tx timeout
[  108.452879][ T5830] Bluetooth: hci2: command tx timeout
[  108.493036][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.522081][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.537570][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.613772][ T5832] team0: Port device team_slave_0 added
[  108.656558][ T5828] hsr_slave_0: entered promiscuous mode
[  108.665092][ T5828] hsr_slave_1: entered promiscuous mode
[  108.673688][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.684685][ T5828] Cannot create hsr debugfs directory
[  108.696957][ T5832] team0: Port device team_slave_1 added
[  108.724950][ T5835] team0: Port device team_slave_0 added
[  108.768298][ T5835] team0: Port device team_slave_1 added
[  108.847854][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.856452][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.890282][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.907270][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.915482][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.944631][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.016953][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.026482][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.060057][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.076541][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.085419][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.115739][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.238925][ T5832] hsr_slave_0: entered promiscuous mode
[  109.248050][ T5832] hsr_slave_1: entered promiscuous mode
[  109.256094][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.266789][ T5832] Cannot create hsr debugfs directory
[  109.346493][ T5835] hsr_slave_0: entered promiscuous mode
[  109.355873][ T5835] hsr_slave_1: entered promiscuous mode
[  109.365868][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.376382][ T5835] Cannot create hsr debugfs directory
[  109.547415][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  109.565106][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  109.601568][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  109.616182][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  109.837875][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  109.869529][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  109.887789][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  109.921056][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  110.024087][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.042010][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.079113][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.095319][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.218761][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  110.232332][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  110.268827][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.277630][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  110.294529][ T5830] Bluetooth: hci0: command tx timeout
[  110.294759][   T55] Bluetooth: hci1: command tx timeout
[  110.318808][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  110.380863][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[  110.422248][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.431148][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.489059][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.497888][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.533742][   T55] Bluetooth: hci3: command tx timeout
[  110.536999][ T5830] Bluetooth: hci2: command tx timeout
[  110.576320][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.638254][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.670814][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[  110.726310][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.734416][ T4168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.780176][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.788960][ T4168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.818966][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[  110.881258][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.908900][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.917098][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.955356][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.965614][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.027115][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[  111.076197][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.085042][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.099374][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.108551][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.211898][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.395988][ T5823] veth0_vlan: entered promiscuous mode
[  111.441146][ T5823] veth1_vlan: entered promiscuous mode
[  111.579560][ T5823] veth0_macvtap: entered promiscuous mode
[  111.638445][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.674697][ T5823] veth1_macvtap: entered promiscuous mode
[  111.748052][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.781751][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.808694][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.818751][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.828955][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.841597][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.881672][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.962444][ T5828] veth0_vlan: entered promiscuous mode
[  112.002317][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.048305][ T5828] veth1_vlan: entered promiscuous mode
[  112.118348][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.122044][ T5835] veth0_vlan: entered promiscuous mode
[  112.133740][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.201697][ T5835] veth1_vlan: entered promiscuous mode
[  112.234968][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.244805][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.309574][ T5832] veth0_vlan: entered promiscuous mode
[  112.325199][ T5828] veth0_macvtap: entered promiscuous mode
[  112.341530][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  112.370029][ T5828] veth1_macvtap: entered promiscuous mode
[  112.385585][   T55] Bluetooth: hci0: command tx timeout
[  112.385944][ T5830] Bluetooth: hci1: command tx timeout
[  112.395784][ T5832] veth1_vlan: entered promiscuous mode
[  112.423488][ T5835] veth0_macvtap: entered promiscuous mode
[  112.496659][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.523065][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.544743][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.556919][ T5835] veth1_macvtap: entered promiscuous mode
[  112.603528][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.622932][ T5830] Bluetooth: hci3: command tx timeout
[  112.622999][   T55] Bluetooth: hci2: command tx timeout
[  112.641136][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.659008][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.680959][ T5832] veth0_macvtap: entered promiscuous mode
[  112.716306][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.738019][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.749456][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.761062][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.784349][ T5832] veth1_macvtap: entered promiscuous mode
[  112.811365][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.827787][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.840447][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.856004][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.873699][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.931794][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.953439][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.972576][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.992900][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.015156][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.059000][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.090675][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.104975][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.124362][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.156506][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.183124][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.202570][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.218741][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.239323][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.262387][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.276812][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.328458][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.358866][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.370323][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.387981][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.401528][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.418421][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.441645][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.489660][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.513102][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.522725][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.564439][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.634294][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.651908][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.815975][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.816746][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.827452][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.848629][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.970351][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.003247][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.100293][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.162805][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.168194][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.240401][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.282335][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'.
[  114.449087][ T5894] team0: Port device team_slave_0 removed
[  114.457503][   T55] Bluetooth: hci0: command tx timeout
[  114.463262][ T5830] Bluetooth: hci1: command tx timeout
[  114.497702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.616237][ T5894] Zero length message leads to an empty skb
[  114.709462][ T5830] Bluetooth: hci2: command tx timeout
[  114.712609][   T55] Bluetooth: hci3: command tx timeout
[  115.220126][ T5906] FAULT_INJECTION: forcing a failure.
[  115.220126][ T5906] name failslab, interval 1, probability 0, space 0, times 1
[  115.352718][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: syz.2.7 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) 
[  115.352768][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  115.352791][ T5906] Call Trace:
[  115.352802][ T5906]  <TASK>
[  115.352819][ T5906]  dump_stack_lvl+0x16c/0x1f0
[  115.352875][ T5906]  should_fail_ex+0x512/0x640
[  115.352921][ T5906]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  115.352969][ T5906]  should_failslab+0xc2/0x120
[  115.353010][ T5906]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  115.353055][ T5906]  ? kfree+0x252/0x4d0
[  115.353104][ T5906]  ? snd_pcm_hw_rule_add+0x414/0x5a0
[  115.353151][ T5906]  krealloc_noprof+0x157/0x380
[  115.353186][ T5906]  ? krealloc_noprof+0x1b1/0x380
[  115.353227][ T5906]  snd_pcm_hw_rule_add+0x414/0x5a0
[  115.353268][ T5906]  ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10
[  115.353312][ T5906]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  115.353349][ T5906]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  115.353400][ T5906]  ? lockdep_init_map_type+0x5c/0x280
[  115.353447][ T5906]  ? debug_mutex_init+0x37/0x70
[  115.353501][ T5906]  ? snd_pcm_attach_substream+0x89d/0xd60
[  115.353552][ T5906]  snd_pcm_open_substream+0x92c/0x17f0
[  115.353617][ T5906]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  115.353686][ T5906]  snd_pcm_oss_open+0x735/0x1400
[  115.353751][ T5906]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  115.353799][ T5906]  ? __lock_acquire+0xaa4/0x1ba0
[  115.353843][ T5906]  ? __pfx_default_wake_function+0x10/0x10
[  115.353878][ T5906]  ? __lock_acquire+0xaa4/0x1ba0
[  115.353931][ T5906]  ? do_raw_spin_lock+0x12c/0x2b0
[  115.353985][ T5906]  ? soundcore_open+0x35a/0x580
[  115.354026][ T5906]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  115.354074][ T5906]  soundcore_open+0x409/0x580
[  115.354117][ T5906]  ? __pfx_soundcore_open+0x10/0x10
[  115.354155][ T5906]  chrdev_open+0x231/0x6a0
[  115.354194][ T5906]  ? __pfx_chrdev_open+0x10/0x10
[  115.354232][ T5906]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  115.354291][ T5906]  do_dentry_open+0x741/0x1c10
[  115.354325][ T5906]  ? __pfx_chrdev_open+0x10/0x10
[  115.354374][ T5906]  vfs_open+0x82/0x3f0
[  115.354422][ T5906]  path_openat+0x1e5e/0x2d40
[  115.354469][ T5906]  ? __pfx_path_openat+0x10/0x10
[  115.354512][ T5906]  do_filp_open+0x20b/0x470
[  115.354545][ T5906]  ? __pfx_do_filp_open+0x10/0x10
[  115.354610][ T5906]  ? alloc_fd+0x471/0x7d0
[  115.354673][ T5906]  do_sys_openat2+0x11b/0x1d0
[  115.354716][ T5906]  ? __pfx_do_sys_openat2+0x10/0x10
[  115.354777][ T5906]  __x64_sys_openat+0x174/0x210
[  115.354822][ T5906]  ? __pfx___x64_sys_openat+0x10/0x10
[  115.354869][ T5906]  ? rcu_is_watching+0x12/0xc0
[  115.354912][ T5906]  do_syscall_64+0xcd/0x230
[  115.354962][ T5906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.354996][ T5906] RIP: 0033:0x7f7e74d8e969
[  115.355023][ T5906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.355054][ T5906] RSP: 002b:00007f7e75b18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  115.355085][ T5906] RAX: ffffffffffffffda RBX: 00007f7e74fb5fa0 RCX: 00007f7e74d8e969
[  115.355106][ T5906] RDX: 0000000000000a02 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  115.355127][ T5906] RBP: 00007f7e74e10ab1 R08: 0000000000000000 R09: 0000000000000000
[  115.355147][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.355166][ T5906] R13: 0000000000000000 R14: 00007f7e74fb5fa0 R15: 00007ffff759bf08
[  115.355210][ T5906]  </TASK>
[  117.493195][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  117.802722][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  118.773437][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  120.713267][ T5946] FAULT_INJECTION: forcing a failure.
[  120.713267][ T5946] name failslab, interval 1, probability 0, space 0, times 0
[  120.730482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.744211][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.754049][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.782792][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.1.13 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) 
[  120.782837][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  120.782856][ T5946] Call Trace:
[  120.782866][ T5946]  <TASK>
[  120.782878][ T5946]  dump_stack_lvl+0x16c/0x1f0
[  120.782926][ T5946]  should_fail_ex+0x512/0x640
[  120.782951][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.782973][ T5946]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  120.783012][ T5946]  should_failslab+0xc2/0x120
[  120.783052][ T5946]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  120.783094][ T5946]  ? __alloc_skb+0x2b2/0x380
[  120.783153][ T5946]  __alloc_skb+0x2b2/0x380
[  120.783188][ T5946]  ? __pfx___alloc_skb+0x10/0x10
[  120.783229][ T5946]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  120.783270][ T5946]  ? __lock_acquire+0xaa4/0x1ba0
[  120.783320][ T5946]  netlink_alloc_large_skb+0x69/0x130
[  120.783365][ T5946]  netlink_sendmsg+0x6a1/0xdd0
[  120.783422][ T5946]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.783481][ T5946]  ____sys_sendmsg+0xa95/0xc70
[  120.783532][ T5946]  ? copy_msghdr_from_user+0x10a/0x160
[  120.783571][ T5946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.783640][ T5946]  ___sys_sendmsg+0x134/0x1d0
[  120.783680][ T5946]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.783769][ T5946]  __sys_sendmsg+0x16d/0x220
[  120.783808][ T5946]  ? __pfx___sys_sendmsg+0x10/0x10
[  120.783845][ T5946]  ? __x64_sys_futex+0x1e0/0x4c0
[  120.783893][ T5946]  ? rcu_is_watching+0x12/0xc0
[  120.783946][ T5946]  do_syscall_64+0xcd/0x230
[  120.784000][ T5946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.784037][ T5946] RIP: 0033:0x7fa70b78e969
[  120.784066][ T5946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.784111][ T5946] RSP: 002b:00007fa70c5c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.784150][ T5946] RAX: ffffffffffffffda RBX: 00007fa70b9b5fa0 RCX: 00007fa70b78e969
[  120.784172][ T5946] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000008
[  120.784193][ T5946] RBP: 00007fa70b810ab1 R08: 0000000000000000 R09: 0000000000000000
[  120.784214][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.784233][ T5946] R13: 0000000000000000 R14: 00007fa70b9b5fa0 R15: 00007fff88b82be8
[  120.784277][ T5946]  </TASK>
[  121.873069][ T5946] netlink: 186 bytes leftover after parsing attributes in process `syz.1.13'.
[  144.058672][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  144.069361][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  182.793948][ T5199] udevd[5199]: worker [5831] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time
[  205.497390][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  205.506263][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  233.173398][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  233.188330][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  233.195746][ T5970] Bluetooth: hci1: command 0x0406 tx timeout
[  233.208697][ T5139] Bluetooth: hci2: command 0x0406 tx timeout
[  266.946744][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  266.955725][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  285.492863][   T31] INFO: task kworker/u8:2:35 blocked for more than 143 seconds.
[  285.505301][   T31]       Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0
[  285.517319][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  285.528123][   T31] task:kworker/u8:2    state:D stack:22904 pid:35    tgid:35    ppid:2      task_flags:0x4248060 flags:0x00004000
[  285.547869][   T31] Workqueue: writeback wb_workfn (flush-8:0)
[  285.555620][   T31] Call Trace:
[  285.559760][   T31]  <TASK>
[  285.563170][   T31]  __schedule+0x116f/0x5de0
[  285.569449][   T31]  ? blk_mq_flush_plug_list+0x75a/0x1c70
[  285.576173][   T31]  ? add_lock_to_list+0x9d/0x130
[  285.584138][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  285.590681][   T31]  ? __pfx___schedule+0x10/0x10
[  285.599484][   T31]  ? __blk_flush_plug+0x2f3/0x4b0
[  285.608777][   T31]  ? find_held_lock+0x2b/0x80
[  285.614830][   T31]  ? schedule+0x2d7/0x3a0
[  285.620963][   T31]  schedule+0xe7/0x3a0
[  285.626164][   T31]  io_schedule+0xbf/0x130
[  285.631530][   T31]  bit_wait_io+0x15/0xe0
[  285.638823][   T31]  __wait_on_bit+0x62/0x180
[  285.647040][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  285.653474][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  285.659564][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  285.666108][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  285.672656][   T31]  do_get_write_access+0x93d/0x12a0
[  285.678723][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  285.685501][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  285.693328][   T31]  ext4_mb_mark_context+0x175/0xd40
[  285.699235][   T31]  ? find_held_lock+0x2b/0x80
[  285.706069][   T31]  ? __pfx_ext4_mb_mark_context+0x10/0x10
[  285.713672][   T31]  ext4_mb_mark_diskspace_used+0x466/0x8c0
[  285.721777][   T31]  ? __pfx_ext4_mb_mark_diskspace_used+0x10/0x10
[  285.729451][   T31]  ? kmem_cache_free+0x2d4/0x4d0
[  285.734902][   T31]  ? ext4_mb_new_blocks+0x3f60/0x4f00
[  285.743839][   T31]  ext4_mb_new_blocks+0xa5b/0x4f00
[  285.750219][   T31]  ? rcu_is_watching+0x12/0xc0
[  285.756138][   T31]  ? trace_kmalloc+0x2b/0xd0
[  285.762259][   T31]  ? __kmalloc_noprof+0x242/0x510
[  285.769199][   T31]  ? unwind_next_frame+0x3f4/0x20a0
[  285.775916][   T31]  ? __pfx_ext4_mb_new_blocks+0x10/0x10
[  285.782171][   T31]  ? ext4_ext_search_right+0x2c2/0xb90
[  285.788876][   T31]  ? ext4_find_extent+0x7fc/0xa70
[  285.794664][   T31]  ? ext4_inode_to_goal_block+0x347/0x450
[  285.801691][   T31]  ext4_ext_map_blocks+0x1b95/0x5d60
[  285.808033][   T31]  ? stack_trace_save+0x8e/0xc0
[  285.814399][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  285.820483][   T31]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[  285.827258][   T31]  ? __kasan_slab_alloc+0x89/0x90
[  285.832656][   T31]  ? ext4_do_writepages+0x1432/0x3490
[  285.842292][   T31]  ? __pfx___might_resched+0x10/0x10
[  285.850168][   T31]  ? __pfx_down_write+0x10/0x10
[  285.857678][   T31]  ? ext4_es_lookup_extent+0xc7/0xc50
[  285.864489][   T31]  ext4_map_blocks+0x45b/0x1390
[  285.869874][   T31]  ? __pfx_ext4_map_blocks+0x10/0x10
[  285.876421][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  285.882191][   T31]  ? kmem_cache_alloc_noprof+0x21e/0x3b0
[  285.890663][   T31]  ext4_do_writepages+0x1a2c/0x3490
[  285.897043][   T31]  ? __pfx_ext4_do_writepages+0x10/0x10
[  285.903812][   T31]  ? ext4_writepages+0x37a/0x7d0
[  285.909566][   T31]  ext4_writepages+0x37a/0x7d0
[  285.915641][   T31]  ? __pfx_ext4_writepages+0x10/0x10
[  285.922147][   T31]  ? do_writepages+0x6b6/0x820
[  285.928688][   T31]  ? __pfx_ext4_writepages+0x10/0x10
[  285.934773][   T31]  do_writepages+0x1b2/0x820
[  285.945257][   T31]  ? __pfx_do_writepages+0x10/0x10
[  285.950690][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  285.958374][   T31]  ? reacquire_held_locks+0xcd/0x1f0
[  285.964547][   T31]  __writeback_single_inode+0x160/0xfb0
[  285.974033][   T31]  ? __pfx___writeback_single_inode+0x10/0x10
[  285.982368][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  285.988675][   T31]  writeback_sb_inodes+0x601/0xf90
[  285.996958][   T31]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  286.006106][   T31]  ? _raw_spin_unlock+0x28/0x50
[  286.013962][   T31]  ? move_expired_inodes+0x5a0/0x850
[  286.025098][   T31]  __writeback_inodes_wb+0xf8/0x2d0
[  286.032059][   T31]  ? __pfx___writeback_inodes_wb+0x10/0x10
[  286.046739][   T31]  ? queue_io+0x3f6/0x520
[  286.051433][   T31]  wb_writeback+0x7f3/0xb70
[  286.057637][   T31]  ? __pfx_wb_writeback+0x10/0x10
[  286.064490][   T31]  ? get_nr_dirty_inodes+0x170/0x1e0
[  286.071583][   T31]  wb_workfn+0x8ca/0xbe0
[  286.076339][   T31]  ? try_to_wake_up+0x157/0x1680
[  286.081452][   T31]  ? __pfx_wb_workfn+0x10/0x10
[  286.087062][   T31]  ? rcu_is_watching+0x12/0xc0
[  286.093045][   T31]  process_one_work+0x9cc/0x1b70
[  286.099158][   T31]  ? __pfx_process_one_work+0x10/0x10
[  286.105042][   T31]  ? assign_work+0x1a0/0x250
[  286.109913][   T31]  worker_thread+0x6c8/0xf10
[  286.116642][   T31]  ? __kthread_parkme+0x19e/0x250
[  286.123632][   T31]  ? __pfx_worker_thread+0x10/0x10
[  286.130055][   T31]  kthread+0x3c2/0x780
[  286.134664][   T31]  ? __pfx_kthread+0x10/0x10
[  286.142491][   T31]  ? __pfx_kthread+0x10/0x10
[  286.149083][   T31]  ? __pfx_kthread+0x10/0x10
[  286.155365][   T31]  ? __pfx_kthread+0x10/0x10
[  286.162673][   T31]  ? rcu_is_watching+0x12/0xc0
[  286.168144][   T31]  ? __pfx_kthread+0x10/0x10
[  286.173067][   T31]  ret_from_fork+0x45/0x80
[  286.178112][   T31]  ? __pfx_kthread+0x10/0x10
[  286.184252][   T31]  ret_from_fork_asm+0x1a/0x30
[  286.191626][   T31]  </TASK>
[  286.196514][   T31] INFO: task jbd2/sda1-8:5161 blocked for more than 144 seconds.
[  286.204938][   T31]       Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0
[  286.215966][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  286.227817][   T31] task:jbd2/sda1-8     state:D stack:26616 pid:5161  tgid:5161  ppid:2      task_flags:0x240040 flags:0x00004000
[  286.242361][   T31] Call Trace:
[  286.246796][   T31]  <TASK>
[  286.251555][   T31]  __schedule+0x116f/0x5de0
[  286.257401][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  286.262710][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  286.268098][   T31]  ? __pfx___schedule+0x10/0x10
[  286.273250][   T31]  ? find_held_lock+0x2b/0x80
[  286.278722][   T31]  ? schedule+0x2d7/0x3a0
[  286.283736][   T31]  schedule+0xe7/0x3a0
[  286.289902][   T31]  io_schedule+0xbf/0x130
[  286.297187][   T31]  bit_wait_io+0x15/0xe0
[  286.302972][   T31]  __wait_on_bit+0x62/0x180
[  286.308806][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  286.315767][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  286.322369][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  286.329397][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  286.337325][   T31]  ? __pfx___might_resched+0x10/0x10
[  286.344919][   T31]  __wait_on_buffer+0x64/0x70
[  286.353168][   T31]  jbd2_journal_commit_transaction+0x382e/0x6830
[  286.360731][   T31]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  286.369125][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  286.375237][   T31]  ? debug_object_deactivate+0x1ec/0x3a0
[  286.381918][   T31]  ? __pfx_debug_object_deactivate+0x10/0x10
[  286.390052][   T31]  ? find_held_lock+0x2b/0x80
[  286.395798][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  286.402650][   T31]  ? rcu_is_watching+0x12/0xc0
[  286.408050][   T31]  kjournald2+0x1f4/0x760
[  286.412979][   T31]  ? __pfx_kjournald2+0x10/0x10
[  286.422712][   T31]  ? find_held_lock+0x2b/0x80
[  286.429662][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  286.436704][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  286.443980][   T31]  ? __kthread_parkme+0x19e/0x250
[  286.449587][   T31]  ? __pfx_kjournald2+0x10/0x10
[  286.460910][   T31]  kthread+0x3c2/0x780
[  286.466444][   T31]  ? __pfx_kthread+0x10/0x10
[  286.472895][   T31]  ? __pfx_kthread+0x10/0x10
[  286.478182][   T31]  ? __pfx_kthread+0x10/0x10
[  286.483136][   T31]  ? __pfx_kthread+0x10/0x10
[  286.489543][   T31]  ? rcu_is_watching+0x12/0xc0
[  286.495648][   T31]  ? __pfx_kthread+0x10/0x10
[  286.500331][   T31]  ret_from_fork+0x45/0x80
[  286.505092][   T31]  ? __pfx_kthread+0x10/0x10
[  286.511902][   T31]  ret_from_fork_asm+0x1a/0x30
[  286.518499][   T31]  </TASK>
[  286.522634][   T31] INFO: task syz-executor:5814 blocked for more than 144 seconds.
[  286.532271][   T31]       Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0
[  286.541699][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  286.554101][   T31] task:syz-executor    state:D stack:21368 pid:5814  tgid:5814  ppid:5811   task_flags:0x440100 flags:0x00000002
[  286.572181][   T31] Call Trace:
[  286.576625][   T31]  <TASK>
[  286.579876][   T31]  __schedule+0x116f/0x5de0
[  286.585046][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  286.590885][   T31]  ? __pfx___schedule+0x10/0x10
[  286.596688][   T31]  ? find_held_lock+0x2b/0x80
[  286.602145][   T31]  ? schedule+0x2d7/0x3a0
[  286.606644][   T31]  schedule+0xe7/0x3a0
[  286.611764][   T31]  io_schedule+0xbf/0x130
[  286.617253][   T31]  bit_wait_io+0x15/0xe0
[  286.621763][   T31]  __wait_on_bit+0x62/0x180
[  286.626918][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  286.633583][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  286.641004][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  286.647948][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  286.655055][   T31]  do_get_write_access+0x93d/0x12a0
[  286.663785][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  286.670847][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  286.677565][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  286.683762][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  286.689472][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  286.696393][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  286.704044][   T31]  ? rcu_is_watching+0x12/0xc0
[  286.710075][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  286.716537][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  286.724388][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  286.730982][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  286.739057][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  286.746477][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  286.753151][   T31]  ext4_dirty_inode+0xd9/0x130
[  286.758512][   T31]  ? rcu_is_watching+0x12/0xc0
[  286.766314][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  286.773843][   T31]  generic_update_time+0xcf/0xf0
[  286.779229][   T31]  file_update_time+0x17d/0x1c0
[  286.785385][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  286.791378][   T31]  ? anon_pipe_read+0xc85/0x1210
[  286.797381][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  286.804986][   T31]  ? vm_normal_page+0x13b/0x2b0
[  286.810170][   T31]  ? find_held_lock+0x2b/0x80
[  286.815499][   T31]  ? find_held_lock+0x2b/0x80
[  286.821501][   T31]  do_page_mkwrite+0x171/0x380
[  286.827130][   T31]  do_wp_page+0xb9e/0x58e0
[  286.834085][   T31]  ? __pfx_do_wp_page+0x10/0x10
[  286.841592][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[  286.847255][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  286.854860][   T31]  ? ___pte_offset_map+0x1bc/0x540
[  286.861674][   T31]  __handle_mm_fault+0x1ada/0x2a40
[  286.870665][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  286.876633][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  286.883785][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  286.889297][   T31]  handle_mm_fault+0x3fe/0xad0
[  286.895301][   T31]  do_user_addr_fault+0x60c/0x1370
[  286.901417][   T31]  exc_page_fault+0x5c/0xc0
[  286.907155][   T31]  asm_exc_page_fault+0x26/0x30
[  286.912802][   T31] RIP: 0033:0x7fe48b2689c5
[  286.919708][   T31] RSP: 002b:00007ffc9279b6d0 EFLAGS: 00010206
[  286.926897][   T31] RAX: 00007fe4873c1bc0 RBX: 00007ffc9279b7d0 RCX: 0000000000000000
[  286.936520][   T31] RDX: 00007fe4873c1bbc RSI: 0000000000000008 RDI: 00007ffc9279b7d0
[  286.945710][   T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[  286.956463][   T31] R10: 00007ffc9279b7b0 R11: 0000000000000000 R12: 0000000000000000
[  286.967744][   T31] R13: 000000000003e440 R14: fffffffffffc1bc0 R15: 000000000003e440
[  286.980207][   T31]  </TASK>
[  286.984217][   T31] INFO: task syz.2.16:5959 blocked for more than 144 seconds.
[  286.994039][   T31]       Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0
[  287.003323][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.013714][   T31] task:syz.2.16        state:D stack:28344 pid:5959  tgid:5959  ppid:5823   task_flags:0x440040 flags:0x00000004
[  287.027705][   T31] Call Trace:
[  287.032708][   T31]  <TASK>
[  287.036922][   T31]  __schedule+0x116f/0x5de0
[  287.042208][   T31]  ? __pfx___schedule+0x10/0x10
[  287.048275][   T31]  ? find_held_lock+0x2b/0x80
[  287.054469][   T31]  ? schedule+0x2d7/0x3a0
[  287.059647][   T31]  schedule+0xe7/0x3a0
[  287.064818][   T31]  io_schedule+0xbf/0x130
[  287.071578][   T31]  bit_wait_io+0x15/0xe0
[  287.076507][   T31]  __wait_on_bit+0x62/0x180
[  287.084537][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  287.089962][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  287.095761][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  287.103120][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  287.110528][   T31]  do_get_write_access+0x93d/0x12a0
[  287.116694][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  287.125772][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  287.133746][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  287.140676][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  287.148075][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  287.154415][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  287.162122][   T31]  ? rcu_is_watching+0x12/0xc0
[  287.167517][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  287.176643][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  287.183780][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  287.191158][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  287.198528][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  287.206553][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  287.214837][   T31]  ext4_dirty_inode+0xd9/0x130
[  287.220249][   T31]  ? rcu_is_watching+0x12/0xc0
[  287.227870][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  287.233815][   T31]  generic_update_time+0xcf/0xf0
[  287.240921][   T31]  file_update_time+0x17d/0x1c0
[  287.247518][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  287.253642][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  287.260520][   T31]  do_page_mkwrite+0x171/0x380
[  287.266827][   T31]  do_pte_missing+0x29c/0x3fb0
[  287.275635][   T31]  ? __handle_mm_fault+0x1010/0x2a40
[  287.281899][   T31]  __handle_mm_fault+0x103d/0x2a40
[  287.287976][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  287.297266][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  287.304438][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  287.310473][   T31]  handle_mm_fault+0x3fe/0xad0
[  287.317649][   T31]  do_user_addr_fault+0x60c/0x1370
[  287.325661][   T31]  exc_page_fault+0x5c/0xc0
[  287.331464][   T31]  asm_exc_page_fault+0x26/0x30
[  287.340364][   T31] RIP: 0033:0x7f7e74c6f282
[  287.346253][   T31] RSP: 002b:00007ffff759bf60 EFLAGS: 00010202
[  287.355121][   T31] RAX: 0000000000019008 RBX: 00007f7e75ae5720 RCX: 0000000000000000
[  287.367138][   T31] RDX: 0000001b2ff07000 RSI: 0000000000000008 RDI: 00007f7e75ae5720
[  287.379478][   T31] RBP: 000000000000057c R08: 00007f7e743ff068 R09: 00007f7e74fa2000
[  287.389561][   T31] R10: 00007f7e743ff008 R11: 0000000000000015 R12: ffffffff8b662f19
[  287.401669][   T31] R13: 00007f7e74fb6038 R14: 0000000000000078 R15: fffffffffffe7000
[  287.411582][   T31]  ? string+0x2a9/0x4f0
[  287.425946][   T31]  </TASK>
[  287.430018][   T31] INFO: task syz.0.18:5961 blocked for more than 145 seconds.
[  287.439599][   T31]       Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0
[  287.451814][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.462567][   T31] task:syz.0.18        state:D stack:28632 pid:5961  tgid:5961  ppid:5835   task_flags:0x440040 flags:0x00000004
[  287.476306][   T31] Call Trace:
[  287.482319][   T31]  <TASK>
[  287.489702][   T31]  __schedule+0x116f/0x5de0
[  287.495731][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  287.502798][   T31]  ? __pfx___schedule+0x10/0x10
[  287.508098][   T31]  ? find_held_lock+0x2b/0x80
[  287.513602][   T31]  ? schedule+0x2d7/0x3a0
[  287.518582][   T31]  schedule+0xe7/0x3a0
[  287.524971][   T31]  io_schedule+0xbf/0x130
[  287.530822][   T31]  bit_wait_io+0x15/0xe0
[  287.537616][   T31]  __wait_on_bit+0x62/0x180
[  287.543579][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  287.550027][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  287.558834][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  287.566378][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  287.575417][   T31]  do_get_write_access+0x93d/0x12a0
[  287.584625][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  287.591346][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  287.601256][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  287.609351][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  287.615460][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  287.621623][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  287.629377][   T31]  ? rcu_is_watching+0x12/0xc0
[  287.637086][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  287.644813][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  287.650627][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  287.665400][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  287.671931][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  287.677804][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  287.685631][   T31]  ext4_dirty_inode+0xd9/0x130
[  287.691404][   T31]  ? rcu_is_watching+0x12/0xc0
[  287.697177][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  287.703061][   T31]  generic_update_time+0xcf/0xf0
[  287.708991][   T31]  file_update_time+0x17d/0x1c0
[  287.715741][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  287.722341][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  287.728950][   T31]  ? __pfx_filemap_map_pages+0x10/0x10
[  287.735438][   T31]  ? pte_alloc_one+0x2b1/0x380
[  287.740843][   T31]  do_page_mkwrite+0x171/0x380
[  287.747858][   T31]  do_pte_missing+0x29c/0x3fb0
[  287.754695][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  287.762192][   T31]  ? __pmd_alloc+0x3c2/0x870
[  287.768820][   T31]  __handle_mm_fault+0x103d/0x2a40
[  287.776268][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  287.783283][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  287.791289][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  287.797752][   T31]  handle_mm_fault+0x3fe/0xad0
[  287.805266][   T31]  do_user_addr_fault+0x60c/0x1370
[  287.811530][   T31]  exc_page_fault+0x5c/0xc0
[  287.817245][   T31]  asm_exc_page_fault+0x26/0x30
[  287.825192][   T31] RIP: 0033:0x7f3d22a6547b
[  287.831539][   T31] RSP: 002b:00007ffeef7e27a0 EFLAGS: 00010246
[  287.838817][   T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[  287.850585][   T31] RDX: 0000001b2f720000 RSI: 0000000000600000 RDI: 00007f3d22c98d50
[  287.860758][   T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[  287.870749][   T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  287.881483][   T31] R13: 00000000000927c0 R14: 000000000001dda2 R15: 00007ffeef7e2a50
[  287.895576][   T31]  </TASK>
[  287.899465][   T31] INFO: task syz.3.17:5962 blocked for more than 145 seconds.
[  287.909458][   T31]       Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0
[  287.920401][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  287.934394][   T31] task:syz.3.17        state:D stack:28632 pid:5962  tgid:5962  ppid:5832   task_flags:0x440040 flags:0x00000004
[  287.950482][   T31] Call Trace:
[  287.954529][   T31]  <TASK>
[  287.958046][   T31]  __schedule+0x116f/0x5de0
[  287.963759][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  287.971167][   T31]  ? __pfx___schedule+0x10/0x10
[  287.976755][   T31]  ? find_held_lock+0x2b/0x80
[  287.984783][   T31]  ? schedule+0x2d7/0x3a0
[  287.991156][   T31]  schedule+0xe7/0x3a0
[  287.996328][   T31]  io_schedule+0xbf/0x130
[  288.000816][   T31]  bit_wait_io+0x15/0xe0
[  288.007143][   T31]  __wait_on_bit+0x62/0x180
[  288.014409][   T31]  ? __pfx_bit_wait_io+0x10/0x10
[  288.020410][   T31]  out_of_line_wait_on_bit+0xd9/0x110
[  288.027893][   T31]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  288.036977][   T31]  ? __pfx_wake_bit_function+0x10/0x10
[  288.044597][   T31]  do_get_write_access+0x93d/0x12a0
[  288.051587][   T31]  jbd2_journal_get_write_access+0x1d6/0x280
[  288.058446][   T31]  __ext4_journal_get_write_access+0x6a/0x340
[  288.065563][   T31]  ext4_reserve_inode_write+0x1be/0x320
[  288.073362][   T31]  __ext4_mark_inode_dirty+0x197/0x870
[  288.080351][   T31]  ? trace_kmem_cache_alloc+0x28/0xc0
[  288.086778][   T31]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  288.095537][   T31]  ? rcu_is_watching+0x12/0xc0
[  288.101102][   T31]  ? trace_jbd2_handle_start+0x1a8/0x230
[  288.109505][   T31]  ? jbd2__journal_start+0xf6/0x6a0
[  288.116738][   T31]  ? __ext4_journal_start_sb+0x195/0x690
[  288.126062][   T31]  ? __ext4_journal_start_sb+0x19e/0x690
[  288.134065][   T31]  ? ext4_dirty_inode+0xa1/0x130
[  288.139994][   T31]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  288.147122][   T31]  ext4_dirty_inode+0xd9/0x130
[  288.153234][   T31]  ? rcu_is_watching+0x12/0xc0
[  288.158771][   T31]  __mark_inode_dirty+0x1eb/0xe50
[  288.166281][   T31]  generic_update_time+0xcf/0xf0
[  288.173212][   T31]  file_update_time+0x17d/0x1c0
[  288.178351][   T31]  ext4_page_mkwrite+0x35e/0x1750
[  288.184731][   T31]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  288.191241][   T31]  ? __pfx_filemap_map_pages+0x10/0x10
[  288.199384][   T31]  ? pte_alloc_one+0x2b1/0x380
[  288.205933][   T31]  do_page_mkwrite+0x171/0x380
[  288.211668][   T31]  do_pte_missing+0x29c/0x3fb0
[  288.217869][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  288.224350][   T31]  ? __pmd_alloc+0x3c2/0x870
[  288.231983][   T31]  __handle_mm_fault+0x103d/0x2a40
[  288.238158][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  288.245853][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  288.254764][   T31]  ? lock_vma_under_rcu+0x47d/0x970
[  288.261297][   T31]  handle_mm_fault+0x3fe/0xad0
[  288.267163][   T31]  do_user_addr_fault+0x60c/0x1370
[  288.273267][   T31]  exc_page_fault+0x5c/0xc0
[  288.278915][   T31]  asm_exc_page_fault+0x26/0x30
[  288.286027][   T31] RIP: 0033:0x7fe1a3e6547b
[  288.292673][   T31] RSP: 002b:00007fffb66ac6d0 EFLAGS: 00010246
[  288.302671][   T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000
[  288.314630][   T31] RDX: 0000001b2fa20000 RSI: 0000000000600000 RDI: 00007fe1a4098d50
[  288.323132][   T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000
[  288.332533][   T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  288.343544][   T31] R13: 00000000000927c0 R14: 000000000001ddc6 R15: 00007fffb66ac980
[  288.356110][   T31]  </TASK>
[  288.360227][   T31] 
[  288.360227][   T31] Showing all locks held in the system:
[  288.371555][   T31] 1 lock held by khungtaskd/31:
[  288.377734][   T31]  #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  288.390585][   T31] 6 locks held by kworker/u8:2/35:
[  288.396468][   T31]  #0: ffff888143e9b948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  288.412817][   T31]  #1: ffffc90000ac7d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  288.430257][   T31]  #2: ffff88803473c0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0
[  288.444363][   T31]  #3: ffff88803473eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820
[  288.456483][   T31]  #4: ffff888034638950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  288.468435][   T31]  #5: ffff8880798d6fc0 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390
[  288.481494][   T31] 2 locks held by syslogd/5181:
[  288.487119][   T31]  #0: ffff8880b8439f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  288.499515][   T31]  #1: ffff8880b8423c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0
[  288.515303][   T31] 2 locks held by getty/5583:
[  288.521109][   T31]  #0: ffff8880368e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  288.534243][   T31]  #1: ffffc900033532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  288.548619][   T31] 3 locks held by syz-executor/5814:
[  288.555112][   T31]  #0: ffff888033c11448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  288.567974][   T31]  #1: ffff88803473c518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  288.578642][   T31]  #2: ffff888034638950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  288.589478][   T31] 3 locks held by syz.2.16/5959:
[  288.595931][   T31]  #0: ffff888028b8da88 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  288.608524][   T31]  #1: ffff88803473c518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  288.619262][   T31]  #2: ffff888034638950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  288.631941][   T31] 3 locks held by syz.0.18/5961:
[  288.640282][   T31]  #0: ffff88802784b448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  288.652093][   T31]  #1: ffff88803473c518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  288.663294][   T31]  #2: ffff888034638950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  288.676431][   T31] 3 locks held by syz.3.17/5962:
[  288.683560][   T31]  #0: ffff888036bcf948 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370
[  288.696840][   T31]  #1: ffff88803473c518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380
[  288.710095][   T31]  #2: ffff888034638950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410
[  288.721366][   T31] 
[  288.725136][   T31] =============================================
[  288.725136][   T31] 
[  288.737300][   T31] NMI backtrace for cpu 1
[  288.737319][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) 
[  288.737346][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  288.737359][   T31] Call Trace:
[  288.737367][   T31]  <TASK>
[  288.737376][   T31]  dump_stack_lvl+0x116/0x1f0
[  288.737413][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  288.737438][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  288.737476][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  288.737504][   T31]  watchdog+0xf70/0x12c0
[  288.737539][   T31]  ? __pfx_watchdog+0x10/0x10
[  288.737568][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  288.737600][   T31]  ? __kthread_parkme+0x19e/0x250
[  288.737630][   T31]  ? __pfx_watchdog+0x10/0x10
[  288.737660][   T31]  kthread+0x3c2/0x780
[  288.737698][   T31]  ? __pfx_kthread+0x10/0x10
[  288.737729][   T31]  ? __pfx_kthread+0x10/0x10
[  288.737760][   T31]  ? __pfx_kthread+0x10/0x10
[  288.737791][   T31]  ? __pfx_kthread+0x10/0x10
[  288.737822][   T31]  ? rcu_is_watching+0x12/0xc0
[  288.737844][   T31]  ? __pfx_kthread+0x10/0x10
[  288.737877][   T31]  ret_from_fork+0x45/0x80
[  288.737913][   T31]  ? __pfx_kthread+0x10/0x10
[  288.737945][   T31]  ret_from_fork_asm+0x1a/0x30
[  288.737992][   T31]  </TASK>
[  288.737999][   T31] Sending NMI from CPU 1 to CPUs 0:
[  288.910084][    C0] NMI backtrace for cpu 0
[  288.910102][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) 
[  288.910134][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  288.910151][    C0] Workqueue: events_unbound toggle_allocation_gate
[  288.910184][    C0] RIP: 0010:native_send_call_func_single_ipi+0x0/0x10
[  288.910222][    C0] Code: 0f 0b 90 90 5b 5d c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa be fb 00 00 00 e9 92 1b 01 00 66 90 90 90 90 90 90 90
[  288.910246][    C0] RSP: 0018:ffffc90000117930 EFLAGS: 00000246
[  288.910264][    C0] RAX: ffffffff81672fd0 RBX: 0000000000000001 RCX: ffffffff81ae9905
[  288.910280][    C0] RDX: dffffc0000000000 RSI: ffffffff81aea93b RDI: 0000000000000001
[  288.910295][    C0] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000
[  288.910310][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b843b180
[  288.910324][    C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b843b180
[  288.910340][    C0] FS:  0000000000000000(0000) GS:ffff8881249ec000(0000) knlGS:0000000000000000
[  288.910364][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  288.910380][    C0] CR2: 000055a203f6a680 CR3: 000000000e180000 CR4: 00000000003526f0
[  288.910395][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  288.910410][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  288.910425][    C0] Call Trace:
[  288.910433][    C0]  <TASK>
[  288.910440][    C0]  smp_call_function_many_cond+0xfc7/0x1290
[  288.910481][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  288.910514][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  288.910541][    C0]  on_each_cpu_cond_mask+0x40/0x90
[  288.910580][    C0]  text_poke_bp_batch+0x657/0x760
[  288.910612][    C0]  ? __kmalloc_node_track_caller_noprof+0xec/0x510
[  288.910645][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  288.910676][    C0]  ? __jump_label_patch+0x1db/0x400
[  288.910713][    C0]  ? arch_jump_label_transform_queue+0xc0/0x120
[  288.910750][    C0]  ? find_held_lock+0x2b/0x80
[  288.910776][    C0]  text_poke_finish+0x30/0x40
[  288.910807][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  288.910843][    C0]  jump_label_update+0x376/0x550
[  288.910873][    C0]  static_key_enable_cpuslocked+0x1b7/0x270
[  288.910902][    C0]  static_key_enable+0x1a/0x20
[  288.910927][    C0]  toggle_allocation_gate+0xfa/0x280
[  288.910954][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  288.910991][    C0]  ? rcu_is_watching+0x12/0xc0
[  288.911016][    C0]  process_one_work+0x9cc/0x1b70
[  288.911060][    C0]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  288.911095][    C0]  ? __pfx_process_one_work+0x10/0x10
[  288.911139][    C0]  ? assign_work+0x1a0/0x250
[  288.911184][    C0]  worker_thread+0x6c8/0xf10
[  288.911237][    C0]  ? __pfx_worker_thread+0x10/0x10
[  288.911281][    C0]  kthread+0x3c2/0x780
[  288.911321][    C0]  ? __pfx_kthread+0x10/0x10
[  288.911361][    C0]  ? __pfx_kthread+0x10/0x10
[  288.911400][    C0]  ? __pfx_kthread+0x10/0x10
[  288.911441][    C0]  ? __pfx_kthread+0x10/0x10
[  288.911481][    C0]  ? rcu_is_watching+0x12/0xc0
[  288.911508][    C0]  ? __pfx_kthread+0x10/0x10
[  288.911549][    C0]  ret_from_fork+0x45/0x80
[  288.911595][    C0]  ? __pfx_kthread+0x10/0x10
[  288.911637][    C0]  ret_from_fork_asm+0x1a/0x30
[  288.911690][    C0]  </TASK>
[  289.359202][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  289.368160][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) 
[  289.381552][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  289.393819][   T31] Call Trace:
[  289.398658][   T31]  <TASK>
[  289.402222][   T31]  dump_stack_lvl+0x3d/0x1f0
[  289.408231][   T31]  panic+0x71c/0x800
[  289.414621][   T31]  ? __pfx_panic+0x10/0x10
[  289.419818][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  289.426240][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  289.434163][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  289.440898][   T31]  ? watchdog+0xdda/0x12c0
[  289.446833][   T31]  ? watchdog+0xdcd/0x12c0
[  289.452264][   T31]  watchdog+0xdeb/0x12c0
[  289.456745][   T31]  ? __pfx_watchdog+0x10/0x10
[  289.462601][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  289.468677][   T31]  ? __kthread_parkme+0x19e/0x250
[  289.473948][   T31]  ? __pfx_watchdog+0x10/0x10
[  289.480331][   T31]  kthread+0x3c2/0x780
[  289.486523][   T31]  ? __pfx_kthread+0x10/0x10
[  289.495878][   T31]  ? __pfx_kthread+0x10/0x10
[  289.500773][   T31]  ? __pfx_kthread+0x10/0x10
[  289.506055][   T31]  ? __pfx_kthread+0x10/0x10
[  289.511673][   T31]  ? rcu_is_watching+0x12/0xc0
[  289.518087][   T31]  ? __pfx_kthread+0x10/0x10
[  289.524826][   T31]  ret_from_fork+0x45/0x80
[  289.530119][   T31]  ? __pfx_kthread+0x10/0x10
[  289.535361][   T31]  ret_from_fork_asm+0x1a/0x30
[  289.541583][   T31]  </TASK>
[  289.545412][   T31] Kernel Offset: disabled
[  289.551090][   T31] Rebooting in 86400 seconds..